[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

pppoe-server + pppd + freeradius



Привет всем,
 
Имею Sarge, все вышеперечисленное было поставлено apt-get'ом за исключением freeradius + freenibs,
был скачан source-пакет freeradius'a, пропатчен freenibs'ом и собран в виде дебиановского пакета.
 
Поднял subj, но без проблем не обошлось...
pppd не хочет авторизовываться через радиус, по-видимому.Тем не менее вручную через radlogin авторизация проходит:
 
corsar:/etc/ppp# radlogin
($Id: radlogin.c,v 1.3 1997/12/29 23:07:25 lf Exp $)
-----------------------------------------------------
Linux 2.4.27-2-386 (corsar) (port 2)
-----------------------------------------------------
 
login: dima
Password:
RADIUS: Authentication OK
Starting.
RADIUS_FRAMED_COMPRESSION = Van-Jacobson-TCP-IP
RADIUS_FRAMED_PROTOCOL = PPP
RADIUS_USER_NAME = dima
RADIUS_FRAMED_IP_ADDRESS = 192.168.22.16
RADIUS_SERVICE_TYPE = Framed-User
RADIUS_FRAMED_IP_NETMASK = 255.255.255.0
corsar:/etc/ppp#
файл /etc/ppp/pppoe-server-options:
 
corsar:/etc/ppp# cat ./pppoe-server-options
# PPP options for the PPPoE server
# LIC: GPL
mtu 1472
mru 1472
require-pap
#require-mschap
#refuse-chap
lcp-echo-interval 10
lcp-echo-failure 2
plugin "/usr/lib/pppd/2.4.3/radius.so"
#plugin "/usr/lib/pppd/2.4.3/rp-pppoe.so"
logfile /var/log/pppd.log
debug
corsar:/etc/ppp#
далее лог pppd.log попытки соединения со стороны winxp:
 
Jun 14 20:12:08 corsar pppoe-server[2233]: Session 2 created for client 00:02:3f:65:b7:61 (192.168.22.3) on eth1 using Service-Name 'Corsar-Server'
Jun 14 20:12:08 corsar pppd[2233]: Plugin /usr/lib/pppd/2.4.3/radius.so loaded.
Jun 14 20:12:08 corsar pppd[2233]: RADIUS plugin initialized.
Jun 14 20:12:08 corsar pppd[2233]: Plugin /usr/lib/pppd/2.4.3/rp-pppoe.so loaded.
Jun 14 20:12:08 corsar pppd[2233]: pppd 2.4.3 started by root, uid 0
Jun 14 20:12:08 corsar pppd[2233]: using channel 13
Jun 14 20:12:08 corsar pppd[2233]: Using interface ppp0
Jun 14 20:12:08 corsar pppd[2233]: Connect: ppp0 <--> /dev/pts/5
Jun 14 20:12:08 corsar pppd[2233]: rcvd [LCP ConfReq id=0x0 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:08 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:08 corsar pppd[2233]: sent [LCP ConfRej id=0x0 <callback CBCP>]
Jun 14 20:12:10 corsar pppd[2233]: rcvd [LCP ConfReq id=0x1 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:10 corsar pppd[2233]: sent [LCP ConfRej id=0x1 <callback CBCP>]
Jun 14 20:12:11 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:13 corsar pppd[2233]: rcvd [LCP ConfReq id=0x2 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:13 corsar pppd[2233]: sent [LCP ConfRej id=0x2 <callback CBCP>]
Jun 14 20:12:14 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:17 corsar pppd[2233]: rcvd [LCP ConfReq id=0x3 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:17 corsar pppd[2233]: sent [LCP ConfRej id=0x3 <callback CBCP>]
Jun 14 20:12:17 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:20 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:21 corsar pppd[2233]: rcvd [LCP ConfReq id=0x4 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:21 corsar pppd[2233]: sent [LCP ConfRej id=0x4 <callback CBCP>]
Jun 14 20:12:23 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:25 corsar pppd[2233]: rcvd [LCP ConfReq id=0x5 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:25 corsar pppd[2233]: sent [LCP ConfRej id=0x5 <callback CBCP>]
Jun 14 20:12:26 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:29 corsar pppd[2233]: rcvd [LCP ConfReq id=0x6 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:29 corsar pppd[2233]: sent [LCP ConfRej id=0x6 <callback CBCP>]
Jun 14 20:12:29 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:32 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:33 corsar pppd[2233]: rcvd [LCP ConfReq id=0x7 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:33 corsar pppd[2233]: sent [LCP ConfRej id=0x7 <callback CBCP>]
Jun 14 20:12:35 corsar pppd[2233]: sent [LCP ConfReq id=0x1 <mru 1472> <auth pap> <magic 0x1d6811cc>]
Jun 14 20:12:37 corsar pppd[2233]: rcvd [LCP ConfReq id=0x8 <mru 1480> <magic 0x6723190a> <callback CBCP>]
Jun 14 20:12:37 corsar pppd[2233]: sent [LCP ConfRej id=0x8 <callback CBCP>]
Jun 14 20:12:38 corsar pppd[2233]: LCP: timeout sending Config-Requests
Jun 14 20:12:38 corsar pppd[2233]: Connection terminated.
Jun 14 20:12:38 corsar pppd[2233]: using channel 14
Jun 14 20:12:38 corsar pppd[2233]: Using interface ppp0
Jun 14 20:12:38 corsar pppd[2233]: Connect: ppp0 <--> /dev/pts/6
Jun 14 20:12:38 corsar pppd[2233]: Waiting for 2 child processes...
Jun 14 20:12:38 corsar pppd[2233]:   script /usr/sbin/pppoe -n -I eth1 -e 2:00:02:3f:65:b7:61Corsar-Server -S '', pid 2248
Jun 14 20:12:38 corsar pppd[2233]:   script /usr/sbin/pppoe -n -I eth1 -e 2:00:02:3f:65:b7:61Corsar-Server -S '', pid 2235
Jun 14 20:12:43 corsar pppd[2233]: sending SIGTERM to process 2248
Jun 14 20:12:43 corsar pppd[2233]: sending SIGTERM to process 2235
Jun 14 20:12:43 corsar pppd[2233]: tcflush failed: Bad file descriptor
Jun 14 20:12:43 corsar pppd[2233]: Exit.
Jun 14 20:12:43 corsar pppoe-server[1932]: Session 2 closed for client 00:02:3f:65:b7:61 (192.168.22.3) on eth1
Jun 14 20:12:43 corsar pppoe-server[1932]: Sent PADT
После этого остаются висеть два процесса, хотя им и был послан SIGTERM (см. выше).
убиваются только по 9-ке: killall -9 pppoe
 
Гуглированием нашел подобную проблему, там автору предлагалось пересобрать все из исходников.
Мне такой подход не нравится, зачем нам тогда иметь дистрибутив со всеми его секьюрити апдейтами, чтобы инсталлироваться из исходников ?
 
Наверняка кто-нибудь сталкивался с подобной проблемой ..
 
Заранее благодарен,
Дмитрий

Reply to: