---
name: "radcheck"
section: "8"
platform: "linux"
package: "radiusd-merit"
version: "2.4.23-2"
release: "Debian 1.3 (Bo)"
platforms: ["linux"]
url: "https://new.carta.tech/radcheck"
---

# radcheck(8)

determines whether a RADIUS server is operational.

## NAME

radcheck - determines whether a RADIUS server is operational.

## SYNOPSIS

**radcheck** \[ **-d***directory* \] \[ **-p***port* \] \[ **-r***retries* \] \[ **-t***timeout* \] \[ **-x** \] \[ **-v** \] \[ **-n** \] *servername*

## DESCRIPTION

**Radcheck** determines whether a given RADIUS server is operational. The *servername* is required on the command line. This is the DNS name of a machine running a RADIUS server. See [**authfile**(5)](/authfile/5.md) for more information. **Radcheck** may be executed on any host, not just one registered in the *clients* file.

If the server is found to be operational, **radcheck** displays

-

  auth queue: *a/b*, acct queue: *c/d*, maxtime: *t* (*date*)

-

  authfile: *x*, clients: *y*, users: *z*, *date*

-

  RADIUS version  *version*  *config codes*

-

  "*servername* (*port-number*)" is responding

on standard output. If the number of retries is greater than zero, **radcheck** will additionally display

-

  (*n* retries)

otherwise, **radcheck** displays

-

  "*servername* (*port-number*)" *some message*

where *some message* may be one of the following (amongst others):

-

  No reply from RADIUS server "*\<hostname\>*(*port*)"

-

  Received non-matching id in server response

-

  Received invalid reply digest from server

-

  No such server: "*\<hostname\>*"

If the server has been built with LAS (Local Authorization Server) support, then the above output is preceded by the following:

-

  Status: *g* authen, *h* unconfirmed, *i* connected, *j* suspended, *k* unknown

and if any token pools are configured (see **tokenpool.las**(5) for more information), there will be one line for each such pool and the total number of pools displayed in the following manner:

-

  *some-pool-name*: *p*/*q*/*r*-*timestamp*

-

  number of pools: *n*

where *p* is the total number of tokens configured in *some-pool-name*, *q* is the current number of tokens in use and *r* is the token high-water-mark recorded at date and time *timestamp*.

The above discussion of tokens does not apply to the LAS per se, but are features of the full Merit RADIUS server as operated within MichNet.

## OPTIONS

- **-d** *directory*

  allows the user to specify an alternate directory which is different from the default choices *../raddb* or */usr/private/etc/raddb*.

- **-p** *port*

  allows the user to specify an alternate port number instead of the default port *1645*.

- **-r** *retries*

  allows the user to specify a number of retries different from the default *10*.

- **-t** *timeout*

  allows the user to specify a maximum timeout different from the default *3* seconds.

- **-x**

  allows the user to turn on debugging output.

- **-v**

  prints the version of RADIUS used to build the program.

- **-n**

  specifies that the RADIUS packet type Status-Server should be used.

## EXIT STATUS

Normal successful completion returns zero to the system. If the response from the RADIUS server had errors, **radcheck** returns -2, local errors return -1, and timeout errors return 1 as status.

## SEE ALSO

[**radpwtst**(8)](/radpwtst/8.md), [**radiusd**(8)](/radiusd/8.md), [**authfile**(5)](/authfile/5.md), [**clients**(5)](/clients/5.md), [**dictionary**(5)](/dictionary/5.md), [**users**(5)](/users/5.md)

## AUTHOR

Allan C. Rubens, Merit Network, Incorporated.