-
Notifications
You must be signed in to change notification settings - Fork 311
Description
PacketFence version
15.0
Describe the bug
Eduroam is not working for internal or external users. It appears the eduroam service is never receiving the request. When attempting to connect to eduroam SSID nothing appears in the auditing section of the Packetfence GUI and nothing is logged in radius.log or radius-eduroam.log.
When I run raddebug -t 300 -f /usr/local/pf/var/run/radiusd-eduroam.sock I don't see any authentication attempts from my devices but it constantly sends FreeRADIUS status to public IPs. It looks like some values from testing made it into production or the eduroam listening port was mistyped somewhere because the FreeRADIUS status default port is similar 18121. I currently use Packetfence 12.2 in production and have not seen this behavior.
To Reproduce
I have reproduced this in Debian 12 and Rocky 8.10.
Fresh Install of OS from ISO and Packetfence 15 from packages
Joined Domain
Setup Ad authentication and confirmed it's working
Setup eduroam radius servers, eduroam exclusive source and eduroam connection profile.
I am not using a captive portal
Observed eduroam authentication traffic is reaching server from my wireless controller by running tcpdump -i eth0 port 11812
Expected behavior
I should see authentication attempts from my devices when running raddebug -t 300 -f /usr/local/pf/var/run/radiusd-eduroam.sock
Desktop (please complete the following information):
- OS: Windows 11
Smartphone (please complete the following information):
- Device: Samsung A54
- OS: Android 15
Additional context
Here is why I think there is an issue with the listening port for eduroam.
When running raddebug -t 300 -f /usr/local/pf/var/run/radiusd-eduroam.sock I get the following messages repeated contantly even when there are no devices trying to connect. There are IPs for FreeRADIUS status pointing to the Netherlands and Brazil, I am US based.
145.108.31.105
179.159.31.105
Debian 12
(660) Thu Nov 20 15:20:44 2025: Debug: Received Status-Server Id 141 from 127.0.0.1:52955 to 127.0.0.1:18124 length 50
(660) Thu Nov 20 15:20:44 2025: Debug: FreeRADIUS-Statistics-Type = All
(660) Thu Nov 20 15:20:44 2025: Debug: Message-Authenticator = 0xd7bc905f98be34834606efd4d8755208
(660) Thu Nov 20 15:20:44 2025: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/status
(660) Thu Nov 20 15:20:44 2025: Debug: Autz-Type Status-Server {
(660) Thu Nov 20 15:20:44 2025: Debug: [ok] = ok
(660) Thu Nov 20 15:20:44 2025: Debug: } # Autz-Type Status-Server = ok
(660) Thu Nov 20 15:20:44 2025: Debug: Sent Access-Accept Id 141 from 127.0.0.1:18124 to 127.0.0.1:52955 length 614
(660) Thu Nov 20 15:20:44 2025: Debug: FreeRADIUS-Total-Access-Requests = 0
(660) Thu Nov 20 15:20:44 2025: Debug: FreeRADIUS-Total-Access-Accepts = 0
(660) Thu Nov 20 15:20:44 2025: Debug: FreeRADIUS-Total-Access-Rejects = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Access-Challenges = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Responses = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Duplicate-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Malformed-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Invalid-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Dropped-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Unknown-Types = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Auth-Conflicts = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Accounting-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Accounting-Responses = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Acct-Duplicate-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Acct-Malformed-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Acct-Invalid-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Acct-Dropped-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Acct-Unknown-Types = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Acct-Conflicts = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Access-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Access-Accepts = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Access-Rejects = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Access-Challenges = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Responses = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Duplicate-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Malformed-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Invalid-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Dropped-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Unknown-Types = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Accounting-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Accounting-Responses = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Duplicate-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Malformed-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Invalid-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Dropped-Requests = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Unknown-Types = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Stats-Server-Src-IP-Address = 179.159.31.105
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Stats-Server-Src-IPv6-Address = 179.159.31.105
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-Len-Internal = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-Len-Proxy = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-Len-Auth = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-Len-Acct = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-Len-Detail = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-PPS-In = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Queue-PPS-Out = 0
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Stats-Threads-Active = 1
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Stats-Threads-Total = 3
(660) Thu Nov 20 15:20:45 2025: Debug: FreeRADIUS-Stats-Threads-Max = 64
(660) Thu Nov 20 15:20:45 2025: Debug: Finished request
Rocky 8.10
(6791) Thu Nov 20 13:24:52 2025: Debug: Cleaning up request packet ID 220 with timestamp +6798 due to cleanup_delay was reached
(6796) Thu Nov 20 13:24:52 2025: Debug: Received Status-Server Id 152 from 127.0.0.1:42678 to 127.0.0.1:18124 length 50
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Statistics-Type = All
(6796) Thu Nov 20 13:24:52 2025: Debug: Message-Authenticator = 0xfa46d4bb36908c8fb440a8ab98846e7a
(6796) Thu Nov 20 13:24:52 2025: Debug: # Executing group from file /usr/local/pf/raddb/sites-enabled/status
(6796) Thu Nov 20 13:24:52 2025: Debug: Autz-Type Status-Server {
(6796) Thu Nov 20 13:24:52 2025: Debug: [ok] = ok
(6796) Thu Nov 20 13:24:52 2025: Debug: } # Autz-Type Status-Server = ok
(6796) Thu Nov 20 13:24:52 2025: Debug: Sent Access-Accept Id 152 from 127.0.0.1:18124 to 127.0.0.1:42678 length 614
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Access-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Access-Accepts = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Access-Rejects = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Access-Challenges = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Responses = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Duplicate-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Malformed-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Invalid-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Dropped-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Unknown-Types = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Auth-Conflicts = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Accounting-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Accounting-Responses = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Acct-Duplicate-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Acct-Malformed-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Acct-Invalid-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Acct-Dropped-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Acct-Unknown-Types = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Acct-Conflicts = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Access-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Access-Accepts = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Access-Rejects = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Access-Challenges = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Responses = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Duplicate-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Malformed-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Invalid-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Dropped-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Auth-Unknown-Types = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Accounting-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Accounting-Responses = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Duplicate-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Malformed-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Invalid-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Dropped-Requests = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Total-Proxy-Acct-Unknown-Types = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Stats-Server-Src-IP-Address = 145.108.31.105
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Stats-Server-Src-IPv6-Address = 145.108.31.105
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-Len-Internal = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-Len-Proxy = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-Len-Auth = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-Len-Acct = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-Len-Detail = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-PPS-In = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Queue-PPS-Out = 0
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Stats-Threads-Active = 1
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Stats-Threads-Total = 3
(6796) Thu Nov 20 13:24:52 2025: Debug: FreeRADIUS-Stats-Threads-Max = 64
(6796) Thu Nov 20 13:24:52 2025: Debug: Finished request