| View previous topic :: View next topic |
| Author |
Message |
BuBuaBu
l33t
Joined: 09 Jul 2005
Posts: 914
Location: France
|
 Posted: Fri Jul 21, 2006 6:00 pm Post subject: [freeradius] eap_tls ne se charge pas (résolu) |
 |
|
Voile j'essaye de metre un server radius pour connecter mes clients wireless.
J'ai pour cele installer freeradius.
Lors u charchement de radiusd, pas d'erreur, mais il ne se charge pas entièrement est reste bloquer.
Voila le log lors du charchement :
/var/log/radius/radius.log
| Code: |
Fri Jul 21 19:55:35 2006 : Info: Using deprecated naslist file. Support for this will go away soon.
Fri Jul 21 19:55:35 2006 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Fri Jul 21 19:55:35 2006 : Info: rlm_eap_tls: Loading the certificate file as a chain
|
/var/log/radius/startup.log
| Code: |
Ignoring deprecated command-line option -pStarting - reading configuration files ...
reread_config: reading radiusd.conf
Config: including file: /etc/raddb/proxy.conf
Config: including file: /etc/raddb/clients.conf
Config: including file: /etc/raddb/snmp.conf
Config: including file: /etc/raddb/eap.conf
Config: including file: /etc/raddb/sql.conf
main: prefix = "/usr"
main: localstatedir = "/var"
main: logdir = "/var/log/radius"
main: libdir = "/usr/lib"
main: radacctdir = "/var/log/radius/radacct"
main: hostname_lookups = yes
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 1812
main: allow_core_dumps = no
main: log_stripped_names = yes
main: log_file = "/var/log/radius/radius.log"
main: log_auth = yes
main: log_auth_badpass = no
main: log_auth_goodpass = no
main: pidfile = "/var/run/radiusd/radiusd.pid"
main: user = "radiusd"
main: group = "radiusd"
main: usercollide = no
main: lower_user = "no"
main: lower_pass = "no"
main: nospace_user = "no"
main: nospace_pass = "no"
main: checkrad = "/usr/sbin/checkrad"
main: proxy_requests = yes
proxy: retry_delay = 5
proxy: retry_count = 3
proxy: synchronous = no
proxy: default_fallback = yes
proxy: dead_time = 120
proxy: post_proxy_authorize = no
proxy: wake_all_if_all_dead = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
Using deprecated naslist file. Support for this will go away soon.
read_config_files: reading clients
read_config_files: reading realms
radiusd: entering modules setup
Module: Library search path is /usr/lib
Module: Loaded exec
exec: wait = yes
exec: program = "(null)"
exec: input_pairs = "request"
exec: output_pairs = "(null)"
exec: packet_type = "(null)"
rlm_exec: Wait=yes but no output defined. Did you mean output=none?
Module: Instantiated exec (exec)
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap: encryption_scheme = "crypt"
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = yes
mschap: require_strong = yes
mschap: with_ntdomain_hack = no
mschap: passwd = "(null)"
mschap: authtype = "MS-CHAP"
mschap: ntlm_auth = "(null)"
Module: Instantiated mschap (mschap)
Module: Loaded System
unix: cache = no
unix: passwd = "/etc/passwd"
unix: shadow = "(null)"
unix: group = "/etc/group"
unix: radwtmp = "/var/log/radius/radwtmp"
unix: usegroup = no
unix: cache_reload = 600
Module: Instantiated unix (unix)
Module: Loaded eap
eap: default_eap_type = "peap"
eap: timer_expire = 60
eap: ignore_unknown_eap_types = no
eap: cisco_accounting_username_bug = no
rlm_eap: Loaded and initialized type md5
rlm_eap: Loaded and initialized type leap
gtc: challenge = "Password: "
gtc: auth_type = "PAP"
rlm_eap: Loaded and initialized type gtc
tls: rsa_key_exchange = no
tls: dh_key_exchange = yes
tls: rsa_key_length = 512
tls: dh_key_length = 512
tls: verify_depth = 0
tls: CA_path = "(null)"
tls: pem_file_type = yes
tls: private_key_file = "/etc/raddb/certs/cert-srv.pem"
tls: certificate_file = "/etc/raddb/certs/cert-srv.pem"
tls: CA_file = "/etc/raddb/certs/root.pem"
tls: private_key_password = "***"
tls: dh_file = "/etc/raddb/certs_bak/dh"
tls: random_file = "/dev/random"
tls: fragment_size = 1024
tls: include_length = yes
tls: check_crl = no
tls: check_cert_cn = "(null)"
rlm_eap_tls: Loading the certificate file as a chain
|
Last edited by BuBuaBu on Sun Jul 23, 2006 3:27 pm; edited 1 time in total |
|
| Back to top |
|
 |
MaKKrO
Apprentice
Joined: 04 Oct 2005
Posts: 265
Location: Paris - FRANCE
|
| Posted: Sun Jul 23, 2006 6:49 am Post subject: |
|
|
Salut,
Quel version tu utilise ?
Moi j'ai eu de gros problème avec la version 1.1.1-r1
En arch ~amd64 c'est la galère !!!
_________________
Loisirs = Gentoo / Taff = Gentoo / Pourtant Taff != Loisirs |
|
| Back to top |
|
|
BuBuaBu
l33t
Joined: 09 Jul 2005
Posts: 914
Location: France
|
| Posted: Sun Jul 23, 2006 7:59 am Post subject: |
|
|
1.1.1-r1
Je viens de refaire les certificat ssl, et maintenant ça marche sans problème. |
|
| Back to top |
|
|
nykos
Guru
Joined: 08 Jun 2005
Posts: 488
Location: Strasbourg
|
| Posted: Sun Jul 23, 2006 12:49 pm Post subject: |
|
|
un petit [résolu] dans le titre ferait très joli 
_________________
-=Nykos=-
TARGA Traveller 826T - AMD Turion 64 MT 32 1,8GHz - ATI Radeon X700 Mobility (ati-drivers) |
|
| Back to top |
|
|
|
French
