raddebug before 2.1.4

[marco perugini]

Some parts of this message have been removed. Learn more about Nabble's security policy.

hi list! my simple question is: is there a way to use the powerfull/wonderfull raddebug script with version 2.1.1? or the only way is to start the server with -x option?
thanks and regards,
marco



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok-2]

marco perugini wrote:
> hi list! my simple question is: is there a way to use the
> powerfull/wonderfull raddebug script with version 2.1.1? or the only way
> is to start the server with -x option?

  It can't be used with 2.1.1.  There are other changes inside of the
server to work with raddebug.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[ZHANG Gina]

Where to get a copy of raddebug?

Thanks,
Gina

-----Original Message-----
From:
freeradius-users-bounces+gina.zhang=alcatel-lucent.com@....
org
[mailto:freeradius-users-bounces+gina.zhang=alcatel-lucent.com@...
eradius.org] On Behalf Of Alan DeKok
Sent: Tuesday, October 13, 2009 10:46 AM
To: FreeRadius users mailing list
Subject: Re: raddebug before 2.1.4

marco perugini wrote:
> hi list! my simple question is: is there a way to use the
> powerfull/wonderfull raddebug script with version 2.1.1? or the only
> way is to start the server with -x option?

  It can't be used with 2.1.1.  There are other changes inside of the
server to work with raddebug.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok-2]

ZHANG Gina wrote:
> Where to get a copy of raddebug?

  It's included in all recent versions of the server.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[ZHANG Gina]

Got it. Thanks!

Gina

-----Original Message-----
From:
freeradius-users-bounces+gina.zhang=alcatel-lucent.com@....
org
[mailto:freeradius-users-bounces+gina.zhang=alcatel-lucent.com@...
eradius.org] On Behalf Of Alan DeKok
Sent: Tuesday, October 13, 2009 3:05 PM
To: FreeRadius users mailing list
Subject: Re: raddebug before 2.1.4

ZHANG Gina wrote:
> Where to get a copy of raddebug?

  It's included in all recent versions of the server.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[marco perugini]

Some parts of this message have been removed. Learn more about Nabble's security policy.

thanks a lot for your feedback alan! you're so helpful..
so i'd have to restart my production server :( i guess i'm going to upgrade!
marco

Alan DeKok ha scritto:

marco perugini wrote:
  

hi list! my simple question is: is there a way to use the
powerfull/wonderfull raddebug script with version 2.1.1? or the only way
is to start the server with -x option?
    

  It can't be used with 2.1.1.  There are other changes inside of the
server to work with raddebug.

  Alan DeKok.

  

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[marco perugini]

Some parts of this message have been removed. Learn more about Nabble's security policy.

hi list, i use freeradius [v 2.1.1] in wimax context and from yesterday
this message is driving me crazy: "EAP session matching the State variable".
here's the use-case: i do auth and connection all right but if/when i lost my
connection and i try to reconnect that massage shows me up in radius' debug;
in about 20 min i succeed in reconnecting. i thought radius was stateless..
do you know if there is some config changes to do to avoid this trouble?
thanks in advance for feedback, if there will be.. ;)
marco

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok-2]

marco perugini wrote:
> hi list, i use freeradius [v 2.1.1] in wimax context and from yesterday
> this message is driving me crazy: "EAP session matching the State variable".

  That's "NO eap session matching..."

> here's the use-case: i do auth and connection all right but if/when i lost my
> connection and i try to reconnect that massage shows me up in radius' debug;

  Then your supplicant and/or access point is broken.  If the supplicant
loses association with the AP, then EAP *must* be re-started from
scratch.  Re-using State attributes from previous EAP sessions will
cause authentication to fail on *every* single RADIUS server that exists.

> in about 20 min i succeed in reconnecting. i thought radius was stateless..

  No.  EAP requires state.  The AP maintains state for EAP sessions.

> do you know if there is some config changes to do to avoid this trouble?

  Fix the AP so that it doesn't re-use old State attributes.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[marco perugini]

Some parts of this message have been removed. Learn more about Nabble's security policy.

Alan DeKok ha scritto:

marco perugini wrote:
  

hi list, i use freeradius [v 2.1.1] in wimax context and from yesterday
this message is driving me crazy: "EAP session matching the State variable".
    

  That's "NO eap session matching..."

  

here's the use-case: i do auth and connection all right but if/when i lost my
connection and i try to reconnect that massage shows me up in radius' debug;
    

  Then your supplicant and/or access point is broken.  If the supplicant
loses association with the AP, then EAP *must* be re-started from
scratch.  Re-using State attributes from previous EAP sessions will
cause authentication to fail on *every* single RADIUS server that exists.
  

hi alan! thank for your feedback, kind as usual..
is there a way to restart eap session? is there some script to run to have EAP
restarted from scratch?

best regards, marco

in about 20 min i succeed in reconnecting. i thought radius was stateless..
    

  No.  EAP requires state.  The AP maintains state for EAP sessions.

  

do you know if there is some config changes to do to avoid this trouble?
    

  Fix the AP so that it doesn't re-use old State attributes.

  Alan DeKok.

  

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[Alan DeKok-2]

marco perugini wrote:
> is there a way to restart eap session? is there some script to run to
> have EAP
> restarted from scratch?

  Your supplicant needs to re-start the EAP session.  This is a question
for your local OS vendor.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[marco perugini]

Some parts of this message have been removed. Learn more about Nabble's security policy.

thank a lot for your feedback alan!

marco


Alan DeKok ha scritto:

marco perugini wrote:
  

is there a way to restart eap session? is there some script to run to
have EAP
restarted from scratch?
    

  Your supplicant needs to re-start the EAP session.  This is a question
for your local OS vendor.

  Alan DeKok.

  

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html