Is this project unusable? After I run, check that ports 1812 and 1813 are not open about docker-freeradius

[2stacks]

I haven't updated recently but it should be usable. Do you have any info, logs, output?

…

On Sat, Sep 12, 2020, 11:46 AM bbhxwl ***@***.***> wrote: Is this project unusable? After I run, check that ports 1812 and 1813 are not open — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#22>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADUNEHFNLBE25VZ6VLYU5W3SFOJVVANCNFSM4RJVAVBA> .

[bbhxwl]

I haven't updated recently but it should be usable. Do you have any info, logs, output?
…

Just shut down the computer, wake up tomorrow, I would like to deploy FreeRADIUS + MYSQL, but I can't find a good way. Hope to get help

[bbhxwl]

我最近没有更新，但应该可以使用。您是否有任何信息，日志，输出？
…
On Sat, Sep 12, 2020, 11:46 AM bbhxwl @.***> wrote: Is this project unusable? After I run, check that ports 1812 and 1813 are not open — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#22>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADUNEHFNLBE25VZ6VLYU5W3SFOJVVANCNFSM4RJVAVBA .

docker run -d -t --name freeradius -p 1812:1812/udp -p 1813:1813/udp -e DB_HOST="101.32." -e DB_PORT=3306 -e DB_USER="freeradius" -e DB_PASS="W" -e DB_NAME="freeradius" -e RADIUS_KEY="88888888" -e RAD_CLIENTS=0.0.0.0/0 -e RAD_DEBUG=no 2stacks/freeradius

[bbhxwl]

I haven't updated recently but it should be usable. Do you have any info, logs, output?
…
On Sat, Sep 12, 2020, 11:46 AM bbhxwl @.***> wrote: Is this project unusable? After I run, check that ports 1812 and 1813 are not open — You are receiving this because you are subscribed to this thread. Reply to this email directly, view it on GitHub <#22>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADUNEHFNLBE25VZ6VLYU5W3SFOJVVANCNFSM4RJVAVBA .

[root@VM-4-3-centos ~]# docker logs e7b57c6b9af9
Sun Sep 13 05:55:57 2020 : Info: Ready to process requests

[2stacks]

This looks incomplete DB_HOST="101.32." You should also set RAD_DEBUG=yes to troubleshoot. Most problems are found in the debug output.

[bbhxwl]

This looks incomplete DB_HOST="101.32." You should also set RAD_DEBUG=yes to troubleshoot. Most problems are found in the debug output.

I know, but what I wrote locally is complete. Because this is MySQL on the Internet. It's not very good.

[bbhxwl]

This looks incomplete DB_HOST="101.32." You should also set RAD_DEBUG=yes to troubleshoot. Most problems are found in the debug output.

Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel
Listening on auth address * port 1812 bound to server default
Listening on acct address * port 1813 bound to server default
Listening on auth address :: port 1812 bound to server default
Listening on acct address :: port 1813 bound to server default
Ready to process requests
[root@VM-4-3-centos ~]# ^C

[2stacks]

It seems to be running. What issue are you having exactly?

…

On Sun, Sep 13, 2020, 10:58 AM bbhxwl ***@***.***> wrote: This looks incomplete DB_HOST="101.32." You should also set RAD_DEBUG=yes to troubleshoot. Most problems are found in the debug output. Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Ready to process requests ***@***.*** ~]# ^C — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#22 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADUNEHECHLFXDUYJ4B2L47LSFTMZRANCNFSM4RJVAVBA> .

[bbhxwl]

It seems to be running. What issue are you having exactly?
…
On Sun, Sep 13, 2020, 10:58 AM bbhxwl @.***> wrote: This looks incomplete DB_HOST="101.32." You should also set RAD_DEBUG=yes to troubleshoot. Most problems are found in the debug output. Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Ready to process requests [root@VM-4-3-centos ~]# ^C — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#22 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADUNEHECHLFXDUYJ4B2L47LSFTMZRANCNFSM4RJVAVBA .

I'm not sure 1812 and 1813 open normally? I don't know where to look. Did he connect to my database?

[2stacks]

What is your host OS? If linux you can follow https://www.google.com/amp/s/www.cyberciti.biz/faq/unix-linux-check-if-port-is-in-use-command/amp/. I assume that since the container started it was able to connect to your database. You should be able to see that in the debug output and/or in the session information in your database. Have you tried testing the container with radtest?

[bbhxwl]

What is your host OS? If linux you can follow https://www.google.com/amp/s/www.cyberciti.biz/faq/unix-linux-check-if-port-is-in-use-command/amp/. I assume that since the container started it was able to connect to your database. You should be able to see that in the debug output and/or in the session information in your database. Have you tried testing the container with radtest?

It's because I use radtest, and I don't seem to get any results.

[root@VM-4-8-centos ~]# docker run -it --rm 2stacks/radtest radtest demo demo 129.226.12.60 0 88888888
Sent Access-Request Id 23 from 0.0.0.0:37888 to 129.226.12.60:1812 length 74
User-Name = "demo"
User-Password = "demo"
NAS-IP-Address = 172.17.0.2
NAS-Port = 0
Message-Authenticator = 0x00
Cleartext-Password = "demo"
Received Access-Accept Id 23 from 129.226.12.60:1812 to 172.17.0.2:37888 length 20

[bbhxwl]

Is my style successful?

[2stacks]

It looks like you received Access-Accept. You should monitor the debug output of the freeradius container while you run rarest to be sure.

…

On Sun, Sep 13, 2020, 11:24 AM bbhxwl ***@***.***> wrote: Is my style successful? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#22 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADUNEHAAUDLZEAVGKQITJADSFTP2HANCNFSM4RJVAVBA> .

[bbhxwl]

It looks like you received Access-Accept. You should monitor the debug output of the freeradius container while you run rarest to be sure.
…
On Sun, Sep 13, 2020, 11:24 AM bbhxwl @.***> wrote: Is my style successful? — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#22 (comment)>, or unsubscribe https://github.com/notifications/unsubscribe-auth/ADUNEHAAUDLZEAVGKQITJADSFTP2HANCNFSM4RJVAVBA .

(0) sql: Executing select query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'VIP1' ORDER BY id
(0) sql: Group "VIP1": Conditional check items matched
(0) sql: Group "VIP1": Merging assignment check items
(0) sql: EXPAND SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{SQL-Group}' ORDER BY id
(0) sql: --> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'VIP1' ORDER BY id
(0) sql: Executing select query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'VIP1' ORDER BY id
(0) sql: Group "VIP1": Merging reply items
rlm_sql (sql): Released connection (6)
(0) [sql] = ok
(0) [expiration] = noop
(0) [logintime] = noop
(0) [pap] = updated
(0) } # authorize = updated
(0) Found Auth-Type = PAP
(0) # Executing group from file /etc/raddb/sites-enabled/default
(0) Auth-Type PAP {
(0) pap: Login attempt with password
(0) pap: Comparing with "known good" Cleartext-Password
(0) pap: User authenticated successfully
(0) [pap] = ok
(0) } # Auth-Type PAP = ok
(0) # Executing section post-auth from file /etc/raddb/sites-enabled/default
(0) post-auth {
(0) update {
(0) No attributes updated for RHS &session-state:
(0) } # update = noop
(0) if ( yes == "yes" ) {
(0) if ( yes == "yes" ) -> TRUE
(0) if ( yes == "yes" ) {
(0) sql: EXPAND .query
(0) sql: --> .query
(0) sql: Using query template 'query'
rlm_sql (sql): Reserved connection (6)
(0) sql: EXPAND %{User-Name}
(0) sql: --> demo
(0) sql: SQL-User-Name set to 'demo'
(0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S')
(0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'demo', 'demo', 'Access-Accept', '2020-09-13 15:23:30')
(0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'demo', 'demo', 'Access-Accept', '2020-09-13 15:23:30')
(0) sql: SQL query returned: success
(0) sql: 1 record(s) updated
rlm_sql (sql): Released connection (6)
(0) [sql] = ok
(0) } # if ( yes == "yes" ) = ok
(0) [exec] = noop
(0) policy remove_reply_message_if_eap {
(0) if (&reply:EAP-Message && &reply:Reply-Message) {
(0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE
(0) else {
(0) [noop] = noop
(0) } # else = noop
(0) } # policy remove_reply_message_if_eap = noop
(0) } # post-auth = ok
(0) Login OK: [demo/demo] (from client rad_clients port 0)
(0) Sent Access-Accept Id 23 from 172.17.0.2:1812 to 101.32.45.32:37888 length 0
(0) Finished request
Waking up in 4.9 seconds.
(0) Cleaning up request packet ID 23 with timestamp +1783
Ready to process requests

[bbhxwl]

Is this a success? Thank you for your reply.

[2stacks]

(0) pap: User authenticated successfully Looks good to me. If you are familiar with mysql you can query the database and find the successful login info.

…

On Sun, Sep 13, 2020, 11:57 AM bbhxwl ***@***.***> wrote: Is this a success? Thank you for your reply. — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#22 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADUNEHCKXZTK7X4LPBDLTSTSFTTXDANCNFSM4RJVAVBA> .

[bbhxwl]

I have just contacted FreeRADIUS. I want to do VPN authentication. I will do C ා, do. Net core development. I am familiar with MySQL, but I still need to learn about the MySQL structure of FreeRADIUS. Thank you. I am very interested in deploying FreeRADIUS It's very difficult. Many file parameters need to be modified. At present, I don't know whether your docker can be used formally, such as limiting the usage traffic of someone. It seems that the file configuration needs to be modified, thanks to your docker

[2stacks]

If you want to do more customization you can mount a volume to /etc/raddb with your own freeradius config or fork this repo and build a custom container with you own settings. You might also be interested in https://github.com/openwisp/openwisp-radius.

…

On Sun, Sep 13, 2020, 12:05 PM bbhxwl ***@***.***> wrote: I have just contacted FreeRADIUS. I want to do VPN authentication. I will do C ා, do. Net core development. I am familiar with MySQL, but I still need to learn about the MySQL structure of FreeRADIUS. Thank you. I am very interested in deploying FreeRADIUS It's very difficult. Many file parameters need to be modified. At present, I don't know whether your docker can be used formally, such as limiting the usage traffic of someone. It seems that the file configuration needs to be modified, thanks to your docker — You are receiving this because you commented. Reply to this email directly, view it on GitHub <#22 (comment)>, or unsubscribe <https://github.com/notifications/unsubscribe-auth/ADUNEHCEVMVAIU5GHNXWHWLSFTUTNANCNFSM4RJVAVBA> .

[bbhxwl]

I was just in time because I felt that FreeRADIUS's configuration file was too complicated and novices were not very good at looking for docker because I am a Chinese and there are few Chinese materials. Can I just stick to learning FreeRADIUS? Give up docker?

[bbhxwl]

I'll try daloradius and learn it. As long as I don't modify the FreeRADIUS configuration file, I can use your docker. It's just a database operation. Can you limit the number of people online control and traffic statistics?

[bbhxwl]

I don't want to modify FreeRADIUS's configuration file to support this database operation?

#Monthly maximum flow (1g)

INSERT INTO radgroupcheck (groupname,attribute,op,VALUE) VALUES ('VIP1','Max-Monthly-Traffic',':=','1073741824');

#Interval of traffic statistics time (60 seconds)

INSERT INTO radgroupcheck (groupname,attribute,op,VALUE) VALUES ('VIP1','Acct-Interim-Interval',':=','60');

[2stacks]

If you want to customize Freeradius you'll have to customize Freeradius. If you want to add configuration to the mysql database just connect to it with a mysql client.