Differences

This shows you the differences between two versions of the page.

--- networking:freeradius-yubikey [2025/10/05 04:24] – srohr_admin
+++ networking:freeradius-yubikey [2025/10/17 04:45] (current) – [Testing using radtest] srohr_admin
@@ Line 39: / Line 39: @@
 In **///etc/freeradius/3.0/clients.conf//** find //client localhost// and add a new section above or below this block, describing the host or subnet which is allowed to query the radius server. This is usually the IP address or subnet of the Interface of the firewall.
+\\
+cat clients.conf | sed -r '/^\s*$/d' | sed -r '/^\s*#/d'
 <code>
@@ Line 194: / Line 197: @@
 	}
 }
+</code>
+===== Testing using radtest =====
+Successful:
+<code>
+radtest -x srohr Cisco123ccccccurvdnlbhdrtkjrihhbikhvklkkgvgftldgkjfd localhost 1812 testing123
+Sent Access-Request Id 248 from 0.0.0.0:54951 to 127.0.0.1:1812 length 123
+	User-Name = "srohr"
+	User-Password = "Cisco123ccccccurvdnlbhdrtkjrihhbikhvklkkgvgftldgkjfd"
+	NAS-IP-Address = 127.0.1.1
+	NAS-Port = 1812
+	Message-Authenticator = 0x00
+	Cleartext-Password = "Cisco123ccccccurvdnlbhdrtkjrihhbikhvklkkgvgftldgkjfd"
+Received Access-Accept Id 248 from 127.0.0.1:1812 to 127.0.0.1:54951 length 38
+	Message-Authenticator = 0x53728eccda8d30a6f9a9451136b7c4e6
+</code>
+Unsuccessful:
+<code>
+radtest -x srohr2 Cisco123ccccccurvdnlvetenvrhgjlcbvrcldegrbdgggfnjtnj localhost 1812 testing123
+Sent Access-Request Id 164 from 0.0.0.0:34610 to 127.0.0.1:1812 length 124
+	User-Name = "srohr2"
+	User-Password = "Cisco123ccccccurvdnlvetenvrhgjlcbvrcldegrbdgggfnjtnj"
+	NAS-IP-Address = 127.0.1.1
+	NAS-Port = 1812
+	Message-Authenticator = 0x00
+	Cleartext-Password = "Cisco123ccccccurvdnlvetenvrhgjlcbvrcldegrbdgggfnjtnj"
+Received Access-Reject Id 164 from 127.0.0.1:1812 to 127.0.0.1:34610 length 38
+	Message-Authenticator = 0x078a3a6275d18b0f41277f9509c96312
+(0) -: Expected Access-Accept got Access-Reject
+</code>
+shows config without empty lines and removes lines starting with '#'
+<code>
+cat sites-enabled/default | sed -r '/^\s*$/d' | sed -r '/^\s*#/d'
 </code>