Freeradius 2 templates

[alxgomz]

Hi,

As I still receive message asking for help installing/using this template, I have wrote this little howto. Note that every template update will be posted there in the future.
It's really nothing new or tricky but apparently is needed.

http://www.horoa.net/2013/09/installati ... /?lang=eng

Regards.

[yellowfish]

Hi,

I have succesfully implemented the freeradius templates into Cacti.
One thing I still don't understand is how to interpret the Y-axis of the graph.
In my graph I see a scale from 0 to 80m.

Also, the amount of responses & access granted is bigger then the total requests.
Can anyone tell me what is going on?

As example, I now see beneath the graph:

total requests: 36,64 m
total responses: 39,98 m
Access granted: 39,98 m

The response from the script is:

root@shell:~# /usr/share/cacti/site/scripts/radstatus.sh auth 1.2.3.4 password 18120
FreeRADIUS-Total-Access-Requests:0 FreeRADIUS-Total-Access-Accepts:6619 FreeRADIUS-Total-Access-Rejects:0 FreeRADIUS-Total-Access-Challenges:0 FreeRADIUS-Total-Auth-Responses:6619 FreeRADIUS-Total-Auth-Duplicate-Requests:0 FreeRADIUS-Total-Auth-Malformed-Requests:0 FreeRADIUS-Total-Auth-Invalid-Requests:0 FreeRADIUS-Total-Auth-Dropped-Requests:0 FreeRADIUS-Total-Auth-Unknown-Types:0

Thnx in advance!

[alxgomz]

yellowfish,

The template was originally written for relatively high volume radius server (several tens of requests per second), consequently, the scale on the Y axis may not fit use case where the radius receives only few requests every now and then.
You can change the scale in cacti using the CDEF Function in the graph template (try make per 5 min).
Regarding the number of queries, It may be be cause of retransmission if your NASes are supposed to acknoledges your radius packets, but don't do so for some reasons.
But I'm just guessing here.

[Chilloutfaktor]

I was expecting the same issues with

Code: Select all

root@SERVERCACTI:/var/www/cacti/scripts# ./radstatus.sh auth SERVER SECRET
+ RADCLIENT=radclient
+ FR_STAT_ATTR_NAME=FreeRADIUS-Statistics-Type
+ which radclient
+ [ ! -x /usr/bin/radclient ]
+ [ -z ]
+ UDP_PORT=:18121
+ QTYPE=Authentication
+ tr \t
+ tr -d \n
+ sed 1d;s/\ =\ /:/
+ radclient SERVER:18121 status SECRET
+ echo -e Message-Authenticator = 0x00\nFreeRADIUS-Statistics-Type = Authentication
radclient:: expecting operator
radclient: Nothing to send.

It seems that /bin/sh is mitmatching the order from the commands when using the pipe |. Changing #!/bin/sh to #!/bin/bash solves my problems:

Code: Select all

root@SERVERCACTI:/var/www/cacti/scripts# ./radstatus.sh auth SERVER SECRET 18121
+ RADCLIENT=radclient
+ FR_STAT_ATTR_NAME=FreeRADIUS-Statistics-Type
++ which radclient
+ '[' '!' -x /usr/bin/radclient ']'
+ '[' -z 18121 ']'
+ UDP_PORT=:18121
+ case $1 in
+ QTYPE=Authentication
+ tr '\t' ' '
+ tr -d '\n'
+ sed '1d;s/\ =\ /:/'
+ radclient SERVER:18121 status SECRET
+ echo -e 'Message-Authenticator = 0x00\nFreeRADIUS-Statistics-Type = Authentication'
 FreeRADIUS-Total-Access-Requests:0 FreeRADIUS-Total-Access-Accepts:14 FreeRADIUS-Total-Access-Rejects:0 FreeRADIUS-Total-Access-Challenges:0 FreeRADIUS-Total-Auth-Responses:14 FreeRADIUS-Total-Auth-Duplicate-Requests:0 FreeRADIUS-Total-Auth-Malformed-Requests:0 FreeRADIUS-Total-Auth-Invalid-Requests:0 FreeRADIUS-Total-Auth-Dropped-Requests:0 FreeRADIUS-Total-Auth-Unknown-Types:0

using freeradius 2.1.10 @
Linux SERVER 3.2.0-60-generic #91-Ubuntu SMP Wed Feb 19 03:54:44 UTC 2014 x86_64 x86_64 x86_64 GNU/Linux
Distributor ID: Ubuntu
Description: Ubuntu 12.04.5 LTS
Release: 12.04
Codename: precise