Re: [Radiusplugin-users] IAS-Radius say "IAS_SUCCESS" but accounting can't be set up

[Eike Lohmann]

Hi,

I think it seems to be a wrong entry in radiusplugin.cnf
I prefer a IP address in name= or a local DNScache, if you use a
DNSaddress it will resolve for every connect the IP.

server
{
        acctport=xxxx
        authport=xxxx
        name=xxx.xxx.xxx.xxx
        retry=3
        wait=3
        sharedsecret=secret
}


Marcus schrieb:
> Hi Folks,
>
> I try to use radiusplugin together with an IAS-Server from MS.
> In the Log of the Radius-Server, the request gets an "O.K.", but in
> the logs of Openvpn I encounter the following:
>
>
> RADIUS-PLUGIN: Start AUTH-RADIUS-PLUGIN
> RADIUS-PLUGIN: Found 1 params.
> RADIUS-PLUGIN: Configfile name: /etc/openvpn/radiusplugin.cnf.
> RADIUS-PLUGIN: BACKGROUND  AUTH: Started, RESPONSE_INIT_SUCCEEDED was
> sent to Foreground Process.
> RADIUS-PLUGIN: Start BACKGROUND Process for authentication with PID 17278
> RADIUS-PLUGIN: Start AUTH-RADIUS-PLUGIN
> RADIUS-PLUGIN: Start BACKGROUND Process for accounting
> RADIUS-PLUGIN: BACKGROUND ACCT: Started, RESPONSE_INIT_SUCCEEDED was
> sent to Foreground Process.
> RADIUS-PLUGIN: Start BACKGROUND Process for accounting with PID 17279
> RADIUS-PLUGIN: Start AUTH-RADIUS-PLUGIN
> Sun Feb 17 18:37:41 2008 us=850967 PLUGIN_INIT: POST
> /usr/local/lib/radiusplugin.so '[NULL]'
> intercepted=PLUGIN_AUTH_USER_PASS_VERIFY|PLUGIN_CLIENT_CONNECT|PLUGIN_CLIENT_DISCONNECT
>
>
>
> Sun Feb 17 18:41:12 2008 us=82950 marcus/my_ip-adress:2144 ENVP[25] =
> 'dev=tun0'
> RADIUS-PLUGIN: FOREGROUND: OPENVPN_PLUGIN_CLIENT_CONNECT is called.
> RADIUS-PLUGIN: FOREGROUND: Set FramedIP to the IP (14.12.127.6)
> OpenVPN assigned to the user marcus
> RADIUS-PLUGIN: FOREGROUND: Add user for accounting: username: zrngr01,
> commonname: zrngr01
> RADIUS-PLUGIN: BACKGROUND ACCT: Get a command.
> RADIUS-PLUGIN: BACKGROUND ACCT: New User.
> RADIUS-PLUGIN: BACKGROUND ACCT: New user acct: username: marcus,
> interval: 0, calling station: 14.12.127.6, commonname: marcus, framed
> ip: 10.0.0.6.
>
> RADIUS-PLUGIN: BACKGROUND ACCT: Error: Start packet couldn't send.
>
> !
> Error: RADIUS-PLUGIN: FOREGROUND: Accounting failed for user:marcus!
>
> Then sylog prints:
> Sun Feb 17 18:41:13 2008 us=77965 zrngr01/134.2.22.94:2144
> PLUGIN_CALL: POST /usr/local/lib/radiusplugin.so/PLUGIN_CLIENT_CONNECT
> status=1
> Sun Feb 17 18:41:13 2008 us=78019 zrngr01/134.2.22.94:2144
> PLUGIN_CALL: plugin function PLUGIN_CLIENT_CONNECT failed with status
> 1: /usr/local/lib/radiusplugin.so
>
>
> I don't know where the problem is, except the one in front of the
> monitor. Can anybody help? I don't need accounting on the
> IAS-Radius-Side, since that can be done on the openvpn-linux-side.
>
> Best regards,
>  Marcus
>
>
> _______________________________________________
> Radiusplugin-users mailing list
> address@hidden
> http://lists.nongnu.org/mailman/listinfo/radiusplugin-users