NAME
radcheck - determines whether a RADIUS server is operational.
SYNOPSIS
radcheck [ -ddirectory ] [ -pport ] [ -rretries ] [ -ttimeout ] [ -x ] [ -v ] [ -n ] servername
DESCRIPTION
Radcheck determines whether a given RADIUS server is operational. The servername is required on the command line. This is the DNS name of a machine running a RADIUS server. See authfile(5) for more information. Radcheck may be executed on any host, not just one registered in the clients file.
If the server is found to be operational, radcheck displays
-
auth queue: a/b, acct queue: c/d, maxtime: t (date)
-
authfile: x, clients: y, users: z, date
-
RADIUS version version config codes
-
"servername (port-number)" is responding
on standard output. If the number of retries is greater than zero, radcheck will additionally display
-
(n retries)
otherwise, radcheck displays
-
"servername (port-number)" some message
where some message may be one of the following (amongst others):
-
No reply from RADIUS server "<hostname>(port)"
-
Received non-matching id in server response
-
Received invalid reply digest from server
-
No such server: "<hostname>"
If the server has been built with LAS (Local Authorization Server) support, then the above output is preceded by the following:
-
Status: g authen, h unconfirmed, i connected, j suspended, k unknown
and if any token pools are configured (see tokenpool.las(5) for more information), there will be one line for each such pool and the total number of pools displayed in the following manner:
-
some-pool-name: p/q/r-timestamp
-
number of pools: n
where p is the total number of tokens configured in some-pool-name, q is the current number of tokens in use and r is the token high-water-mark recorded at date and time timestamp.
The above discussion of tokens does not apply to the LAS per se, but are features of the full Merit RADIUS server as operated within MichNet.
OPTIONS
- -d directory
-
allows the user to specify an alternate directory which is different from the default choices ../raddb or /usr/private/etc/raddb.
- -p port
-
allows the user to specify an alternate port number instead of the default port 1645.
- -r retries
-
allows the user to specify a number of retries different from the default 10.
- -t timeout
-
allows the user to specify a maximum timeout different from the default 3 seconds.
- -x
-
allows the user to turn on debugging output.
- -v
-
prints the version of RADIUS used to build the program.
- -n
-
specifies that the RADIUS packet type Status-Server should be used.
EXIT STATUS
Normal successful completion returns zero to the system. If the response from the RADIUS server had errors, radcheck returns -2, local errors return -1, and timeout errors return 1 as status.
SEE ALSO
radpwtst(8), radiusd(8), authfile(5), clients(5), dictionary(5), users(5)
AUTHOR
Allan C. Rubens, Merit Network, Incorporated.