[PacketFence-users] Radtest Fail

[Carla N. <pac...@gm...>]

I am trying to setup the RADIUS server using Active Directory and got to
the radtest test. The LDAP connect, bind and search is successful but the
radtest is failing. I keep getting the error message:

[root@pf-zen-esx ~]# radtest dd9999 Abcd1234 localhost:18120 12 testing123
radclient:: Failed to find IP address for pf-zen-esx
radclient: Nothing to send.

So far, I have:
1. Checked to make sure that the SQL password is working using the
command *mysql
-u pf -p *and checked the sql.conf file which is included below.


[root@pf-zen-esx ~]# mysql -u pf -p
Enter password:
Welcome to the MySQL monitor.  Commands end with ; or \g.


sql {
database = "mysql"
driver = "rlm_sql_${database}"

server = "%%db_host%%"
port = %%db_port%%
login = "%%db_username%%"
password = "%%db_password%%"

radius_db = "%%db_database%%"

acct_table1 = "radacct"
acct_table2 = "radacct"
postauth_table = "radpostauth"
authcheck_table = "radcheck"
authreply_table = "radreply"
groupcheck_table = "radgroupcheck"
groupreply_table = "radgroupreply"
usergroup_table = "radusergroup"

deletestalesessions = yes
sqltrace = no
sqltracefile = ${logdir}/sqltrace.sql
num_sql_socks = 5
connect_failure_retry_delay = 60
lifetime = 0
max_queries = 0

readclients = yes
nas_table = "radius_nas"

$INCLUDE sql/${database}/packetfence.conf
}


2. Created a symbolic link *ln -s ../sites-available/packetfence|ln -s
../sites-available/packetfence-tunnel*

3. And based on another thread on this page, I checked my radiusd.conf file
to see if $INCLUDE sql.conf was located. It was there. I have attached the
radiusd.conf file.

prefix = /usr
exec_prefix = /usr
sysconfdir = /etc
localstatedir = %%install_dir%%/var
sbindir = /usr/sbin
logdir = %%install_dir%%/logs
raddbdir = %%install_dir%%/var/radiusd
radacctdir = %%install_dir%%/logs/radacct

name = radiusd

confdir = ${raddbdir}
run_dir = ${localstatedir}/run

db_dir = ${raddbdir}

libdir = /usr/lib%%arch%%/freeradius
pidfile = ${run_dir}/${name}.pid

rpc_user   = %%rpc_user%%
rpc_pass   = %%rpc_pass%%
rpc_port   = 9090
rpc_server = 127.0.0.1
rpc_proto  = http


user = pf
group = pf

max_request_time = 30
cleanup_delay = 5
max_requests = 20000

listen {
        type = auth
        ipaddr = %%management_ip%%
        port = 0
virtual_server = packetfence
}

listen {
        ipaddr = %%management_ip%%
        port = 0
        type = acct
virtual_server = packetfence
}

hostname_lookups = no
allow_core_dumps = no

regular_expressions     = yes
extended_expressions    = yes

log {
        destination = files
        file = ${logdir}/radius.log
        syslog_facility = daemon
        stripped_names = no
        auth = yes
        auth_badpass = no
        auth_goodpass = no
}

checkrad = ${sbindir}/checkrad

security {
        max_attributes = 200
        reject_delay = 1
        status_server = yes
        # On Centos, even if the openssl lib has been patched, freeradius
refuse to start. Make sure you update openssl.
        allow_vulnerable_openssl = yes
}

proxy_requests  = yes
$INCLUDE proxy.conf
$INCLUDE clients.conf

thread pool {
        start_servers = 5
        max_servers = 32
        min_spare_servers = 3
        max_spare_servers = 10
        max_requests_per_server = 0
}

modules {
        $INCLUDE ${confdir}/modules/
        $INCLUDE eap.conf
        $INCLUDE sql.conf
}

instantiate {
        exec
        expr
        expiration
        logintime
        raw
}

$INCLUDE policy.conf
$INCLUDE sites-enabled/


Is there anything else that can be done?

Thank you,
Carla