[Radiusplugin-users] Re: radiusplugin on freebsd

[Robert Blacquiere]

Hi,

I forgot to mention openvpn is working with pam to radius.

Regards

Robert

On Wed, Jul 15, 2009 at 10:01 AM, Robert
Blacquiere<address@hidden> wrote:
> Hi,
>
> I have a problem getting radiusplugin working with openvpn 2.1 (beta
> 15 i think). Openvpn starts up and with verbose logging i see in
> comming connections. But the all stop at:
> I have replaced client ip with XXX.XXX.XXX.XXX
>
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561
> TCPv4_SERVER READ [142] from XXX.XXX.XXX.XXX:52561: P_CONTROL_V1 kid=0
> pid=[ #30 ] [ ] pid=6 DATA len=100
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK read
> ID 6 (buf->len=100)
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK RWBS
> rel->size=8 rel->packet_id=00000006 id=00000006 ret=1
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK mark
> active incoming ID 6
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> acknowledge ID 6 (ack->len=1)
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> reliable_can_send active=0 current=0 : [26]
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 BIO write
> tls_write_ciphertext 100 bytes
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> reliable_can_send active=0 current=0 : [26]
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK write
> ID 6 (ack->len=1, n=1)
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> reliable_send_timeout 604800 [26]
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_post
> TA_SOCKET_READ_RESIDUAL -> TA_SOCKET_WRITE
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_action
> a=TA_SOCKET_WRITE p=1
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_wait_lite
> a=TA_SOCKET_WRITE mi=0x800e6d000
> Jul 15 09:46:59 extern openvpn[73377]: PO_CTL rwflags=0x0002 ev=9 
> arg=0x00574684
> Jul 15 09:46:59 extern openvpn[73377]: PO_CTL rwflags=0x0001 ev=8 
> arg=0x0056b6a8
> Jul 15 09:46:59 extern openvpn[73377]: I/O WAIT TR|Tw|Sr|SW [0/0]
> Jul 15 09:46:59 extern openvpn[73377]: PO_WAIT[0,0] fd=9
> rev=0x00000004 rwflags=0x0002 arg=0x00574684
> Jul 15 09:46:59 extern openvpn[73377]: I/O WAIT status=0x0002
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_dispatch
> a=TA_SOCKET_WRITE mi=0x800e6d000
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561
> TCPv4_SERVER WRITE [50] to XXX.XXX.XXX.XXX:52561: P_ACK_V1 kid=0 pid=[
> #30 ] [ 6 ]
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> reliable_can_send active=0 current=0 : [26]
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> reliable_send_timeout 604800 [26]
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_post
> TA_SOCKET_WRITE -> TA_SOCKET_READ_RESIDUAL
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_action
> a=TA_SOCKET_READ_RESIDUAL p=1
> Jul 15 09:46:59 extern openvpn[73377]: MULTI TCP: multi_tcp_dispatch
> a=TA_SOCKET_READ_RESIDUAL mi=0x800e6d000
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561
> TCPv4_SERVER READ [88] from XXX.XXX.XXX.XXX:52561: P_CONTROL_V1 kid=0
> pid=[ #31 ] [ ] pid=7 DATA len=46
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK read
> ID 7 (buf->len=46)
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK RWBS
> rel->size=8 rel->packet_id=00000007 id=00000007 ret=1
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK mark
> active incoming ID 7
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> acknowledge ID 7 (ack->len=1)
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ACK
> reliable_can_send active=0 current=0 : [26]
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 BIO write
> tls_write_ciphertext 46 bytes
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 BIO read
> tls_read_plaintext 278 bytes
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561
> PLUGIN_CALL: PRE type=PLUGIN_AUTH_USER_PASS_VERIFY
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ARGV[0] =
> '/usr/local/lib/radiusplugin.so'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[0] =
> 'auth_control_file=openvpn_acf_bed8fa66db6df342bed3ea2c1163bff4.tmp'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[1] =
> 'untrusted_port=52561'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[2] =
> 'untrusted_ip=XXX.XXX.XXX.XXX'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[4] =
> 'username=USER'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[5] =
> 'remote_port_1=443'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[6] =
> 'local_port_1=443'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[7] =
> 'proto_1=tcp-server'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[8] =
> 'daemon_log_redirect=0'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[9] =
> 'daemon=1'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[10] = 
> 'verb=8'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[11]
> = 'config=/usr/local/etc/openvpn/server.conf'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[12]
> = 'ifconfig_local=192.168.203.17'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[13]
> = 'ifconfig_netmask=255.255.255.240'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[14]
> = 'ifconfig_broadcast=192.168.203.31'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[15]
> = 'script_context=init'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[16]
> = 'tun_mtu=1500'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[17]
> = 'link_mtu=1575'
> Jul 15 09:46:59 extern openvpn[73377]: XXX.XXX.XXX.XXX:52561 ENVP[18]
> = 'dev=tap0'XXX.XXX.XXX.XXX
> -> and nothing happens after this.
> I also see no radius requests at the radius server.
>
> What am i missing?
>
> Regards
>
> Robert
>