OSSH华为Portal调试笔记(7)

# secret = testing123-2

# shortname = private-network-2 #}

#client 10.10.10.10 {# # secret and password are mapped through the \# secret = testing123

# shortname = liv1# # the following three fields are optional, but may be used by

# # checkrad.pl for simultaneous usage checks # nastype = livingston # login = !root

# password = someadminpas #}

####################################################################### ## Per-socket client lists. The configuration entries are exactly # the same as above, but they are nested inside of a section. # secret = testing123 # shortname = liv1

# # the following three fields are optional, but may be used by # # checkrad.pl for simultaneous usage checks # nastype = livingston # login = !root

# password = someadminpas #}

####################################################################### #

# Per-socket client lists. The configuration entries are exactly # the same as above, but they are nested inside of a section.

## You can have as many per-socket client lists as you have \ sections, or you can re-use a list among multiple \

# Un-comment this section, and edit a \# secret = testing123 # shortname = liv1

# # the following three fields are optional, but may be used by # # checkrad.pl for simultaneous usage checks # nastype = livingston # login = !root

# password = someadminpas #}

####################################################################### #

# Per-socket client lists. The configuration entries are exactly # the same as above, but they are nested inside of a section. #

# You can have as many per-socket client lists as you have \# sections, or you can re-use a list among multiple \#

# Un-comment this section, and edit a \

# \ That IP address/port combination # will then accept ONLY the clients listed in this section. #

#clients per_socket_clients { # client 192.168.3.4 {

# secret = testing123 # } #} #zxg

client 192.168.1.107 {

ipaddr = 192.158.100.2 secret = testing123 }

http://bbs.chinaunix.net/thread-1363488-1-1.html

认为要把users文件语法问题，要求把用户添加到最前面---把steve的注释去掉，可以用了

16. 附录3-交换机调试信息

交换机显示用户失败

display aaa online-fail-record all ------------------------------------------------------------------- User name : steve Domain name : ossh.org User MAC : 0021-cc71-c906 User access type : Unknown

User access interface : GigabitEthernet0/0/4 Qinq Vlan/User Vlan: 0/10 User IP address : 192.168.10.5 User ID : 38

User login time : 2008/10/01 07:02:07 User online fail reason: Authenticate fail Authen reply message : -

? 交换机测试AAA流程

test-aaa steve testing radius-template rd1 Info: Account test time out.

说明radius/portal与交换机认证错误 解决办法，检查密码是否匹配：

交换机radius share-key == radius服务器密码 （secret）---本文testing123 交换机web-portal share-key == portal server密码 （）---本文www.ossh.org

17. 附录4-portal服务器调试

查看Portal失败日志

发现失败，建议查看users/cient文件，注意格式敏感，尽量用已有用户的格式。 [root@ossh jdk]# tail -n 100 /usr/local/portalServer/logs/catalina.out

2014-05-11 01:23:37,358 DEBUG [portal.util.PortalClient] sending: 192.168.20.29:2000

2014-05-11 01:23:37,360 DEBUG [portal.util.PortalClient] [1, 1, 0, 0, de, 1c, 0, 0, c0, a8, 1, 6b, 0, 0, 0, 0]

2014-05-11 01:23:37,442 ERROR [org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver] IOException occurred when processing request: [GET] /portalServer/auth/plogin Network is unreachable. Stacktrace follows: java.io.IOException: Network is unreachable

at java.net.DatagramSocket.send(DatagramSocket.java:625) at portal.util.PortalClient.send(PortalClient.groovy:51) at portal.packet.PortalSend.send(PortalSend.groovy:91) at portal.packet.ReqChallenge.(ReqChallenge.groovy:15) at portal.user.PortalUser.reqChallenge(PortalUser.groovy:238)

at portal.user.PortalUser$__clinit__closure5_closure6_closure17.doCall(PortalUser.groovy:108) at grails.plugin.fsm.FsmSupport.fire(FsmSupport.groovy:172)

at grails.plugin.fsm.FsmUtils$__clinit__closure10.doCall(FsmUtils.groovy:82) at portal.user.serv.UserService.login(UserService.groovy:24)

at portal.user.AuthController$_closure7.doCall(AuthController.groovy:322) at

grails.plugin.cache.web.filter.PageFragmentCachingFilter.doFilter(PageFragmentCachingFilter.java:195) at grails.plugin.cache.web.filter.AbstractFilter.doFilter(AbstractFilter.java:63)

at java.util.concurrent.ThreadPoolExecutor$Worker.runTask(ThreadPoolExecutor.java:895) at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:918) at java.lang.Thread.run(Thread.java:662)

2014-05-11 01:46:14,774 DEBUG [portal.util.PortalClient] sending: 192.168.20.29:2000

2014-05-11 01:46:14,778 DEBUG [portal.util.PortalClient] [1, 1, 0, 0, af, 48, 0, 0, c0, a8, 1, 6b, 0, 0, 0, 0]

2014-05-11 01:46:14,922 ERROR [org.codehaus.groovy.grails.web.errors.GrailsExceptionResolver] IOException occurred when processing request: [GET] /portalServer/auth/plogin Network is unreachable. Stacktrace follows: java.io.IOException: Network is unreachable

at java.net.DatagramSocket.send(DatagramSocket.java:625) at portal.util.Po …… 此处隐藏：8915字，全部文档内容请下载后查看。喜欢就下载吧 ……