freeradius对连ros问题

iapexli

ros 5.20  ， radius manager 3.9 密钥和ROS设置一直并指向ros ip  ros建立ppoe ros radius ip指向freeradius ip    ros secrect 选中 ros中配置确定没有错误

问题：

      在RADIUS 服务状态: RADIUSD运行   为什么在 radius manager 建立帐号  无法登陆 只有在 ros secret 中建立的帐号才能登陆？

radius.log

Tue Oct  9 00:09:04 2012 : Info: Exiting normally.
Tue Oct  9 00:09:07 2012 : Info: Loaded virtual server <default>
Tue Oct  9 00:09:07 2012 : Info: Loaded virtual server inner-tunnel
Tue Oct  9 00:09:07 2012 : Info: Ready to process requests.

[root@localhost 172.17.0.1]# cat detail-20121008
Mon Oct  8 23:02:21 2012
        Acct-Status-Type = Accounting-On
        NAS-Identifier = "MikroTik"
        Acct-Delay-Time = 0
        NAS-IP-Address = 172.17.0.1
        Acct-Unique-Session-Id = "ef14a4b788058783"
        Timestamp = 1349708541

sql.conf 配置如下：

1. 
   
2. sql {
   
3.         database = "mysql"
   
4.         driver = "rlm_sql_${database}"
   
5.         server = "localhost"
   
6.         login = "radius"
   
7.         password = "radpass"
   
8.         radius_db = "radius"
   
9.         acct_table1 = "radacct"
   
10.         acct_table2 = "radacct"
    
11.         postauth_table = "radpostauth"
    
12.         authcheck_table = "radcheck"
    
13.         authreply_table = "radreply"
    
14.         groupcheck_table = "radgroupcheck"
    
15.         groupreply_table = "radgroupreply"
    
16.         usergroup_table = "radusergroup"
    
17.         deletestalesessions = yes
    
18.         sqltrace = no
    
19.         sqltracefile = ${logdir}/sqltrace.sql
    
20.         num_sql_socks = 5
    
21.         connect_failure_retry_delay = 60
    
22.         lifetime = 0
    
23.         max_queries = 0
    
24.         nas_table = "nas"
    
25.         $INCLUDE sql/${database}/dialup.conf

复制代码

radiusd.conf 如下：

1. prefix = /usr/local
   
2. exec_prefix = ${prefix}
   
3. sysconfdir = ${prefix}/etc
   
4. localstatedir = ${prefix}/var
   
5. sbindir = ${exec_prefix}/sbin
   
6. logdir = ${localstatedir}/log/radius
   
7. raddbdir = ${sysconfdir}/raddb
   
8. radacctdir = ${logdir}/radacct
   
9. 
   
10. name = radiusd
    
11. 
    
12. confdir = ${raddbdir}
    
13. run_dir = ${localstatedir}/run/${name}
    
14. 
    
15. db_dir = ${raddbdir}
    
16. 
    
17. libdir = ${exec_prefix}/lib
    
18. 
    
19. pidfile = ${run_dir}/${name}.pid
    
20. 
    
21. 
    
22. 
    
23. max_request_time = 30
    
24. 
    
25. cleanup_delay = 5
    
26. 
    
27. max_requests = 1024
    
28. 
    
29. listen {
    
30.         type = auth
    
31. 
    
32. 
    
33.         ipaddr = *
    
34. 
    
35. 
    
36.         port = 0
    
37. 
    
38. 
    
39. }
    
40. 
    
41. listen {
    
42.         ipaddr = *
    
43.         port = 0
    
44.         type = acct
    
45. }
    
46. 
    
47. hostname_lookups = no
    
48. 
    
49. allow_core_dumps = no
    
50. 
    
51. regular_expressions     = yes
    
52. extended_expressions    = yes
    
53. 
    
54. log {
    
55.         destination = files
    
56. 
    
57.         file = ${logdir}/radius.log
    
58. 
    
59. 
    
60.         syslog_facility = daemon
    
61. 
    
62.         stripped_names = no
    
63. 
    
64.         auth = no
    
65. 
    
66.         auth_badpass = no
    
67.         auth_goodpass = no
    
68. 
    
69. }
    
70. 
    
71. checkrad = ${sbindir}/checkrad
    
72. 
    
73. security {
    
74.         max_attributes = 200
    
75. 
    
76.         reject_delay = 1
    
77. 
    
78.         status_server = yes
    
79. }
    
80. 
    
81. proxy_requests  = yes
    
82. $INCLUDE proxy.conf
    
83. 
    
84. 
    
85. 
    
86. $INCLUDE clients.conf
    
87. 
    
88. 
    
89. thread pool {
    
90.         start_servers = 5
    
91. 
    
92.         max_servers = 32
    
93. 
    
94.         min_spare_servers = 3
    
95.         max_spare_servers = 10
    
96. 
    
97. 
    
98.         max_requests_per_server = 0
    
99. }
    
100. 
     
101. modules {
     
102. 
     
103.         $INCLUDE ${confdir}/modules/
     
104. 
     
105.         $INCLUDE eap.conf
     
106. 
     
107. 
     
108. 
     
109. }
     
110. 
     
111. instantiate {
     
112.         exec
     
113. 
     
114.         expr
     
115. 
     
116.         expiration
     
117.         logintime
     
118. 
     
119. }
     
120. 
     
121. $INCLUDE policy.conf
     
122. 
     
123. $INCLUDE sites-enabled/

复制代码

client.conf 如下：

1. client localhost {
   
2.         ipaddr = 127.0.0.1
   
3. 
   
4. 
   
5. 
   
6. 
   
7. 
   
8.         secret          = testing123
   
9. 
   
10.         require_message_authenticator = no
    
11. 
    
12. 
    
13. 
    
14. 
    
15. 
    
16. 
    
17. 
    
18. }
    
19. 
    
20. 
    
21. 
    
22. 
    
23. 
    
24. 
    
25. client 172.17.0.1 {
    
26.         secret          = radius
    
27.         shortname       = Localhost
    
28. }

复制代码

rockup

在RADIUS 服务状态: RADIUSD运行   为什么在 radius manager 建立帐号  无法登陆 只有在 ros secret 中建立的帐号才能登陆？

就这一句，证明ros跟rm没对接上