Accounting error in Aruba IAP
Closed this issue · 1 comments
toanalien commented
docker-openwisp-freeradius-1 | (137) Acct-Status-Type = Start
docker-openwisp-freeradius-1 | (137) NAS-IP-Address = 192.168.1.100
docker-openwisp-freeradius-1 | (137) User-Name = "toan"
docker-openwisp-freeradius-1 | (137) NAS-Port = 0
docker-openwisp-freeradius-1 | (137) NAS-Port-Type = Wireless-802.11
docker-openwisp-freeradius-1 | (137) Calling-Station-Id = "dadb914a5923"
docker-openwisp-freeradius-1 | (137) Called-Station-Id = "04bd88c95ff0"
docker-openwisp-freeradius-1 | (137) Framed-IP-Address = 192.168.1.105
docker-openwisp-freeradius-1 | (137) Acct-Multi-Session-Id = "DADB914A5923-1684678474"
docker-openwisp-freeradius-1 | (137) Acct-Session-Id = "04BD8815FF15-DADB914A5923-646A2888-45ECD"
docker-openwisp-freeradius-1 | (137) Acct-Delay-Time = 5
docker-openwisp-freeradius-1 | (137) Aruba-Essid-Name = "radius"
docker-openwisp-freeradius-1 | (137) Aruba-Location-Id = "04:bd:88:c9:5f:f0"
docker-openwisp-freeradius-1 | (137) Aruba-User-Vlan = 1
docker-openwisp-freeradius-1 | (137) Aruba-Device-Type = "NOFP"
docker-openwisp-freeradius-1 | (137) Acct-Authentic = RADIUS
docker-openwisp-freeradius-1 | (137) Service-Type = Login-User
docker-openwisp-freeradius-1 | (137) # Executing section accounting from file /opt/etc/raddb/sites-enabled/default
docker-openwisp-freeradius-1 | (137) accounting {
docker-openwisp-freeradius-1 | (137) update control {
docker-openwisp-freeradius-1 | (137) &REST-HTTP-Header += "Authorization: Bearer 97dca65c-d074-433a-bae5-4e5f030f741e tGW29mwRo9K0SJc16S2Wl7osC8HcTtbt"
docker-openwisp-freeradius-1 | (137) } # update control = noop
docker-openwisp-freeradius-1 | rlm_rest (rest): Reserved connection (25)
docker-openwisp-freeradius-1 | (137) rest: Expanding URI components
docker-openwisp-freeradius-1 | (137) rest: EXPAND http://api.internal
docker-openwisp-freeradius-1 | (137) rest: --> http://api.internal
docker-openwisp-freeradius-1 | (137) rest: EXPAND /api/v1/freeradius/accounting/
docker-openwisp-freeradius-1 | (137) rest: --> /api/v1/freeradius/accounting/
docker-openwisp-freeradius-1 | (137) rest: Sending HTTP POST to "http://api.internal/api/v1/freeradius/accounting/"
docker-openwisp-freeradius-1 | (137) rest: EXPAND {"status_type": "%{Acct-Status-Type}", "session_id": "%{Acct-Session-Id}", "unique_id": "%{Acct-Unique-Session-Id}", "username": "%{User-Name}", "realm": "%{Realm}", "nas_ip_address": "%{NAS-IP-Address}", "nas_port_id": "%{NAS-Port}", "nas_port_type": "%{NAS-Port-Type}", "session_time": "%{Acct-Session-Time}", "authentication": "%{Acct-Authentic}", "input_octets": "%{Acct-Input-Octets}", "output_octets": "%{Acct-Output-Octets}", "called_station_id": "%{Called-Station-Id}", "calling_station_id": "%{Calling-Station-Id}", "terminate_cause": "%{Acct-Terminate-Cause}", "service_type": "%{Service-Type}", "framed_protocol": "%{Framed-Protocol}", "framed_ip_address": "%{Framed-IP-Address}"}
docker-openwisp-freeradius-1 | (137) rest: --> {"status_type": "Start", "session_id": "04BD8815FF15-DADB914A5923-646A2888-45ECD", "unique_id": "", "username": "toan", "realm": "", "nas_ip_address": "192.168.1.100", "nas_port_id": "0", "nas_port_type": "Wireless-802.11", "session_time": "", "authentication": "RADIUS", "input_octets": "", "output_octets": "", "called_station_id": "04bd88c95ff0", "calling_station_id": "dadb914a5923", "terminate_cause": "", "service_type": "Login-User", "framed_protocol": "", "framed_ip_address": "192.168.1.105"}
docker-openwisp-freeradius-1 | (137) rest: Processing response header
docker-openwisp-freeradius-1 | (137) rest: Status : 400 (Bad Request)
docker-openwisp-freeradius-1 | (137) rest: Type : json (application/json)
docker-openwisp-freeradius-1 | (137) rest: Adding reply:REST-HTTP-Status-Code = "400"
docker-openwisp-freeradius-1 | (137) rest: ERROR: Server returned:
docker-openwisp-freeradius-1 | (137) rest: ERROR: {"unique_id":[]}
docker-openwisp-freeradius-1 | rlm_rest (rest): Released connection (25)
docker-openwisp-freeradius-1 | Need 2 more connections to reach min connections (5)
docker-openwisp-freeradius-1 | Need more connections to reach 3 spares
docker-openwisp-freeradius-1 | rlm_rest (rest): Opening additional connection (33), 1 of 7 pending slots used
docker-openwisp-freeradius-1 | rlm_rest (rest): Connecting to "http://api.internal/api/v1/freeradius"
docker-openwisp-freeradius-1 | (137) [rest] = invalid
docker-openwisp-freeradius-1 | (137) } # accounting = invalid
Acct-Unique-Session-Id not in payload sent from Aruba IAP.
nemesifier commented
The unique_id is missing, freeradius can handle this, look for acct_unique in this page https://openwisp-radius.readthedocs.io/en/stable/developer/freeradius_wpa_enterprise.html and ensure those instructions are respected, with that the error should go away.