在我的新 openvpn 服务器上安装 radius 插件无法读取客户端状态。它在之前的安装中可以正常工作,现在一切都一样,但不起作用。
OpenVPN 服务器配置:
port 57192
proto udp
dev tun
user nobody
group nobody
persist-key
persist-tun
keepalive 10 120
plugin /etc/openvpn/radiusplugin.so /etc/openvpn/radiusplugin.cnf
duplicate-cn
topology subnet
server 10.8.0.0 255.255.255.0
ifconfig-pool-persist ipp.txt
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "redirect-gateway def1 bypass-dhcp"
dh dh.pem
tls-auth tls-auth.key 0
crl-verify crl.pem
ca ca.crt
cert server_Vfvm7OXXaOglE58z.crt
key server_Vfvm7OXXaOglE58z.key
auth SHA256
cipher AES-128-GCM
ncp-ciphers AES-128-GCM
tls-server
tls-version-min 1.2
tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
client-config-dir /etc/openvpn/ccd
status /var/log/openvpn/status.log
verb 3
客户:
client
proto udp
explicit-exit-notify
remote ?.?.?.? 57192
dev tun
resolv-retry infinite
nobind
persist-key
persist-tun
auth-user-pass
remote-cert-tls server
verify-x509-name server_Vfvm7OXXaOglE58z name
auth SHA256
auth-nocache
cipher AES-128-GCM
tls-client
tls-version-min 1.2
tls-cipher TLS-ECDHE-RSA-WITH-AES-128-GCM-SHA256
ignore-unknown-option block-outside-dns
setenv opt block-outside-dns # Prevent Windows 10 DNS leak
verb 3
半径插件:
NAS-Identifier=OpenVpn
Service-Type=5
Framed-Protocol=1
NAS-Port-Type=5
NAS-IP-Address=127.0.0.1
OpenVPNConfig=/etc/openvpn/server.conf
subnet=255.255.255.0
overwriteccfiles=true
nonfatalaccounting=false
server
{
acctport=1813
authport=1812
name=?.?.?.?
retry=1
wait=1
sharedsecret=?????
}
服务器日志显示如下信息:
RADIUS-PLUGIN:BACKGROUND ACCT:未找到 user01 的记帐数据