Mikrotik + Abills Error 738

Silver Ghost · Пт сен 19, 2008 10:26 pm

Проблема такого плана. Микротик и Абиллс установлены и настроены, но при попытке подключения вылетает ошибка 738 - сервер не выделил IP адрес (не дословно). При проверке radtest вижу, что радиус действительно не выдает ИП.

Словари от Микротика подключены. Гуглил, форум читал. Ничего не помогло из всего, что нашел.

Ubuntu 8.04.1 Server, freeradius, mikrotik 3.14

Кто что может посоветовать? У самого идеи уже кончились.

Сб сен 20, 2008 10:20 am

пулы адресов заведите

Silver Ghost · Сб сен 20, 2008 10:34 am

Пул адресов заведен...

# radtest silver хххххх 172.16.0.2 0 cj,frf 0 172.16.0.1
Sending Access-Request of id 51 to 172.16.0.2 port 1812
User-Name = "silver"
User-Password = "хххххх"
NAS-IP-Address = 172.16.0.1
NAS-Port = 0
Framed-Protocol = PPP
rad_recv: Access-Accept packet from host 172.16.0.2:1812, id=51, length=32
Framed-Protocol = PPP
Framed-Compression = Van-Jacobson-TCP-IP

При чем в параметрах Радиуса NASа указано
Acct-Interim-Interval=300

Оно не выдается. Т.е. явно проблема в связке Абиллс-Радиус. А вот где - не пойму.

Сб сен 20, 2008 1:37 pm

Проблема была с неточным конфигом радиуса

уже решена

melkhorn · Вс апр 05, 2009 2:30 pm

господа, а можно обнародовать решение проблеиы так сказать в массы?

melkhorn · Пн апр 06, 2009 9:44 am

если вдруг у кого то возникнет желание мне помочь
стоит связка абиллс 0.41 + freeradius 1.7.7+ mikrotik 3.13 на виртуалке для тестирования (в работе 3.20)
при подключении по pptp авторизация проходит успешно, пулы в абиллсе указал но ip юзеру не выдается (ошибка 738). если в микротике в профиле зpptp сервера указать пул адресов то подключение происходит, но ип выдается не тот что я указываю в абиллсе а первый из пула микротика. при этом шейпер не отрабатывает. хотя хэнгап в абиллсе работает корректно...

это мой первый опыт работы с абиллсом и фрирадиусом посему прошу ногами не пинать.
делал по вот этому мануалу http://linux-sam.blogspot.com/2008/10/a ... rotik.html

если надо будет выложу все конфиги только помогите настроить... в дальнейшем на авторизацию радиусом хочу подвесить proftpd и портал

melkhorn · Пн апр 06, 2009 11:16 am

вот кусок вывода freeradius -xx который меня смущает
Module: Library search path is /usr/lib/freeradius
Module: Loaded exec
exec: wait = yes
exec: program = "(null)"
exec: input_pairs = "request"
exec: output_pairs = "(null)"
exec: packet_type = "(null)"
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
хотя я не знаю что и как тут должно быть

и вот еще
root@ubuntu1:/usr/abills/libexec# radtest melkhorn ******** localhost 10 ********
Sending Access-Request of id 140 to 127.0.0.1 port 1812
User-Name = "melkhorn"
User-Password = "********"
NAS-IP-Address = 255.255.255.255
NAS-Port = 10
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=140, length=20

galaxy · Сб апр 18, 2009 10:45 am

Вот так-сказать вывод рабочего радиуса:
rad_recv: Access-Request packet from host ***.***.***.***:43514, id=235, length=124
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 5996
NAS-Port-Type = Virtual
User-Name = "ct"
Calling-Station-Id = "***.***.***.***"
Called-Station-Id = "***.***.***.***"
CHAP-Challenge = 0x81c4098115ecc34ce2dcabc8834338d7
CHAP-Password = 0x012a6db2ff1d25ad7ba7d7c433f4329f77
NAS-Identifier = "ptp-gw"
NAS-IP-Address = ***.***.***.***
Sat Apr 18 11:58:57 2009 : Debug: Processing the authorize section of radiusd.conf
Sat Apr 18 11:58:57 2009 : Debug: modcall: entering group authorize for request 27
Sat Apr 18 11:58:57 2009 : Debug: modsingle[authorize]: calling pre_auth (rlm_exec) for request 27
Sat Apr 18 11:58:58 2009 : Debug: Exec-Program output: Auth-Type := Accept
Sat Apr 18 11:58:58 2009 : Debug: Exec-Program-Wait: value-pairs: Auth-Type := Accept
Sat Apr 18 11:58:58 2009 : Debug: Exec-Program: returned: 0
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: returned from pre_auth (rlm_exec) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modcall[authorize]: module "pre_auth" returns ok for request 27
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modcall[authorize]: module "preprocess" returns ok for request 27
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modcall[authorize]: module "mschap" returns noop for request 27
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 27
Sat Apr 18 11:58:58 2009 : Debug: rlm_realm: No '@' in User-Name = "ct", looking up realm NULL
Sat Apr 18 11:58:58 2009 : Debug: rlm_realm: No such realm "NULL"
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modcall[authorize]: module "suffix" returns noop for request 27
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: calling files (rlm_files) for request 27
Sat Apr 18 11:58:58 2009 : Debug: users: Matched entry DEFAULT at line 155
Sat Apr 18 11:58:58 2009 : Debug: modsingle[authorize]: returned from files (rlm_files) for request 27
Sat Apr 18 11:58:58 2009 : Debug: modcall[authorize]: module "files" returns ok for request 27
Sat Apr 18 11:58:58 2009 : Debug: modcall: leaving group authorize (returns ok) for request 27
Sat Apr 18 11:58:58 2009 : Debug: rad_check_password: Found Auth-Type Accept
Sat Apr 18 11:58:58 2009 : Debug: rad_check_password: Auth-Type = Accept, accepting the user
Sat Apr 18 11:58:58 2009 : Debug: Exec-Program output: Acct-Interim-Interval = 30, Session-Timeout = 1080062, Mikrotik-Xmit-Limit = 1024000000, Ascend-Data-Rate = 512000, Framed-IP-Address = 172.16.5.4, Mikrotik-Recv-Limit = 1024000000, Ascend-Xmit-Rate = 512000, Framed-IP-Netmask = 255.255.255.255,
Sat Apr 18 11:58:58 2009 : Debug: Exec-Program-Wait: value-pairs: Acct-Interim-Interval = 30, Session-Timeout = 1080062, Mikrotik-Xmit-Limit = 1024000000, Ascend-Data-Rate = 512000, Framed-IP-Address = 172.16.5.4, Mikrotik-Recv-Limit = 1024000000, Ascend-Xmit-Rate = 512000, Framed-IP-Netmask = 255.255.255.255,
Sat Apr 18 11:58:58 2009 : Debug: Exec-Program: returned: 0
Sending Access-Accept of id 235 to ***.***.***.*** port 43514
Acct-Interim-Interval = 30
Session-Timeout = 1080062
Mikrotik-Xmit-Limit = 1024000000
Ascend-Data-Rate = 512000
Framed-IP-Address = ***.***.***.***
Mikrotik-Recv-Limit = 1024000000
Ascend-Xmit-Rate = 512000
Framed-IP-Netmask = 255.255.255.255
Sat Apr 18 11:58:58 2009 : Debug: Finished request 27
Sat Apr 18 11:58:58 2009 : Debug: Going to the next request

rad_recv: Accounting-Request packet from host ***.***.***.***:56323, id=238, length=127
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 5996
NAS-Port-Type = Virtual
User-Name = "ct"
Calling-Station-Id = "***.***.***.***"
Called-Station-Id = "***.***.***.***"
Acct-Session-Id = "81c01734"
Framed-IP-Address = 172.16.5.4
Acct-Authentic = RADIUS
Event-Timestamp = "Apr 18 2009 11:59:07 EEST"
Acct-Status-Type = Start
NAS-Identifier = "ptp-gw"
NAS-IP-Address = 10.172.16.1
Acct-Delay-Time = 0
Sat Apr 18 11:58:58 2009 : Debug: Processing the preacct section of radiusd.conf
Sat Apr 18 11:58:58 2009 : Debug: modcall: entering group preacct for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: calling preprocess (rlm_preprocess) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: returned from preprocess (rlm_preprocess) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[preacct]: module "preprocess" returns noop for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: calling acct_unique (rlm_acct_unique) for request 31
Sat Apr 18 11:58:58 2009 : Debug: rlm_acct_unique: Hashing 'NAS-Port = 5996,Client-IP-Address = ***.***.***.***,NAS-IP-Address = ***.***.***.***,Acct-Session-Id = "81c01734",User-Name = "ct"'
Sat Apr 18 11:58:58 2009 : Debug: rlm_acct_unique: Acct-Unique-Session-ID = "e1524b88f6d94d05".
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: returned from acct_unique (rlm_acct_unique) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[preacct]: module "acct_unique" returns ok for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: calling suffix (rlm_realm) for request 31
Sat Apr 18 11:58:58 2009 : Debug: rlm_realm: No '@' in User-Name = "ct", looking up realm NULL
Sat Apr 18 11:58:58 2009 : Debug: rlm_realm: No such realm "NULL"
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: returned from suffix (rlm_realm) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[preacct]: module "suffix" returns noop for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: calling files (rlm_files) for request 31
Sat Apr 18 11:58:58 2009 : Debug: acct_users: Matched entry DEFAULT at line 1
Sat Apr 18 11:58:58 2009 : Debug: modsingle[preacct]: returned from files (rlm_files) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[preacct]: module "files" returns ok for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall: leaving group preacct (returns ok) for request 31
Sat Apr 18 11:58:58 2009 : Debug: Processing the accounting section of radiusd.conf
Sat Apr 18 11:58:58 2009 : Debug: modcall: entering group accounting for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[accounting]: calling detail (rlm_detail) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[accounting]: returned from detail (rlm_detail) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[accounting]: module "detail" returns ok for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[accounting]: calling unix (rlm_unix) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[accounting]: returned from unix (rlm_unix) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[accounting]: module "unix" returns ok for request 31
Sat Apr 18 11:58:58 2009 : Debug: modsingle[accounting]: calling radutmp (rlm_radutmp) for request 31
Sat Apr 18 11:58:58 2009 : Debug: radius_xlat: '/var/log/radius/radutmp'
Sat Apr 18 11:58:58 2009 : Debug: radius_xlat: 'ct'
Sat Apr 18 11:58:58 2009 : Debug: modsingle[accounting]: returned from radutmp (rlm_radutmp) for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall[accounting]: module "radutmp" returns ok for request 31
Sat Apr 18 11:58:58 2009 : Debug: modcall: leaving group accounting (returns ok) for request 31
Sending Accounting-Response of id 238 to ***.***.***.*** port 56323
Sat Apr 18 11:58:58 2009 : Debug: Finished request 31
Sat Apr 18 11:58:58 2009 : Debug: Going to the next request
Sat Apr 18 11:59:00 2009 : Debug: Waking up in 1 seconds...
rad_recv: Accounting-Request packet from host ***.***.***.***:50898, id=236, length=173
Sat Apr 18 11:59:00 2009 : Debug: Sending duplicate reply to client ptp-gw:50898 - ID: 236
Re-sending Accounting-Response of id 236 to ***.***.***.*** port 50898
Sat Apr 18 11:59:00 2009 : Debug: --- Walking the entire request list ---
Sat Apr 18 11:59:00 2009 : Debug: Cleaning up request 16 ID 223 with timestamp 49e9964e
Sat Apr 18 11:59:00 2009 : Debug: Cleaning up request 17 ID 224 with timestamp 49e9964e
Sat Apr 18 11:59:00 2009 : Debug: Waking up in 1 seconds...

В Вашем случае возможно за НАС или ТП не закреплены пулы адресов