Skip to content

v12.2: RADIUS source+pfconnector is not working in admin context #7550

@nqb

Description

@nqb

Describe the bug
If you use a RADIUS source with authorization rules (admin context) and your source is configured with "Use connector" enabled, RADIUS response will be ignored.

If you disable "Use Connector", everything works as expected.

I tried to use same source (with "Use connector" enabled) on captive portal and it works.

To Reproduce
Steps to reproduce the behavior:

  1. Configure a RADIUS server
  2. Create your RADIUS source with "Use Connector" enabled
  3. Create an administration rule on that source
  4. Try to authenticate on webadmin using an account on your RADIUS server

=> Following message will appear in logs:

Feb 23 11:20:14 pfdeb11localdev pfperl-api-docker-wrapper[2050]: pfperl-api(16) ERROR: [mac:[undef]] Unable to perform RADIUS authentication on any server: ETIMEOUT (pf::Authentication::Source::RADIUSSource::_handle_radius_request)

Expected behavior
Access to web admin granted

Additional context
I captured traffic on port use by pfconnector and I can see that RADIUS server is returning an Access-Accept.

Metadata

Metadata

Type

No type

Projects

No projects

Relationships

None yet

Development

No branches or pull requests

Issue actions