Freeradius

Debian 9上的radiusclient

  • June 20, 2019

我有 debian 9 伺服器,想設置一個帶有半徑身份驗證的 Xl2tp。

當我添加plugin radius.so我的 ppp 選項時,它會嘗試讀取,不幸的是我在 debian 拉伸儲存庫中/etc/radiusclient沒有包。libfreeradius-client

有人對此有任何想法嗎?

xl2tpd[31455]: "/etc/ppp/options"
xl2tpd[31455]: Call established with a.x.y.z, Local: 39429, Remote: 34750, Serial: 23
pppd[31488]: Plugin radius.so loaded.
pppd[31488]: RADIUS plugin initialized.
pppd[31488]: Plugin pppol2tp.so loaded.
pppd[31488]: Plugin radius.so loaded.
pppd[31488]: RADIUS plugin initialized.
pppd[31488]: pppd 2.4.7 started by root, uid 0
pppd[31488]: using channel 26
pppd[31488]: Using interface ppp0
pppd[31488]: Connect: ppp0 <-->
pppd[31488]: Overriding mtu 1500 to 1440
pppd[31488]: PPPoL2TP options: lnsmode tid 33229 sid 39429 debugmask 0
pppd[31488]: Overriding mru 1500 to mtu value 1440
pppd[31488]: sent [LCP ConfReq id=0x1 <mru 1440> <asyncmap 0x0> <auth chap MD5> <magic 0xcf4c7130>]
pppd[31488]: rcvd [LCP ConfReq id=0x1 <mru 1410> <asyncmap 0x0> <magic 0x7852c87e>]
pppd[31488]: sent [LCP ConfAck id=0x1 <mru 1410> <asyncmap 0x0> <magic 0x7852c87e>]
pppd[31488]: rcvd [LCP ConfAck id=0x1 <mru 1440> <asyncmap 0x0> <auth chap MD5> <magic 0xcf4c7130>]
pppd[31488]: PPPoL2TP options: lnsmode tid 33229 sid 39429 debugmask 0
pppd[31488]: sent [LCP EchoReq id=0x0 magic=0xcf4c7130]
pppd[31488]: sent [CHAP Challenge id=0x32 <b601612440ebbf8a284b6fe85930100783775546>, name = "XL2TP"]
pppd[31488]: rcvd [LCP EchoRep id=0x0 magic=0x7852c87e]
pppd[31488]: rcvd [CHAP Response id=0x32 <0dd24953c6828d16bfad2d2267e2c647>, name = "user"]
pppd[31488]: rc_read_config: can't open /etc/radiusclient/radiusclient.conf: No such file or directory
pppd[31488]: RADIUS: Can't read config file /etc/radiusclient/radiusclient.conf
pppd[31488]: Peer skill39 failed CHAP authentication

libfreeradius-client已被棄用並替換為libradcli4 配置文件夾也從更改/etc/radiusclient/etc/radcli 並且某些屬性已更改,例如:

root@localhost#grep NAS-IP  /etc/radcli/dictionary
ATTRIBUTE       NAS-IP-Address          4       ipv4addr
apt-get install freeradius-utils libpam-radius-auth

並將您的配置編輯為:/etc/freeradius/3.0/clients.conf

引用自:https://serverfault.com/questions/936133