<html>
<head>
<style><!--
.hmmessage P
{
margin:0px;
padding:0px
}
body.hmmessage
{
font-size: 10pt;
font-family:Tahoma
}
--></style></head>
<body class='hmmessage'><div dir='ltr'>
<br><br><div><div id="SkyDrivePlaceholder"></div>> From: freeradius-users-request@lists.freeradius.org<br>> Subject: Freeradius-Users Digest, Vol 87, Issue 46<br>> To: freeradius-users@lists.freeradius.org<br>> Date: Tue, 17 Jul 2012 10:54:59 +0200<br>> <br>> Send Freeradius-Users mailing list submissions to<br>> freeradius-users@lists.freeradius.org<br>> <br>> To subscribe or unsubscribe via the World Wide Web, visit<br>> http://lists.freeradius.org/mailman/listinfo/freeradius-users<br>> or, via email, send a message with subject or body 'help' to<br>> freeradius-users-request@lists.freeradius.org<br>> <br>> You can reach the person managing the list at<br>> freeradius-users-owner@lists.freeradius.org<br>> <br>> When replying, please edit your Subject line so it is more specific<br>> than "Re: Contents of Freeradius-Users digest..."<br>> <br>> <br>> Today's Topics:<br>> <br>> 1. Re: Help needed configuring MAB on FreeRADIUS and Cisco<br>> switch (Alan DeKok)<br>> 2. Re: v2.1.x/src/modules/rlm_mschap/rlm_mschap.c (Alan DeKok)<br>> 3. radacct is not filled up (Andreas Meyer)<br>> 4. Re: radacct is not filled up (Fajar A. Nugraha)<br>> 5. Re: radacct is not filled up (Andreas Meyer)<br>> 6. Re: radacct is not filled up (Fajar A. Nugraha)<br>> 7. Re: Help needed configuring MAB on FreeRADIUS and Cisco<br>> switch (Kaya Saman)<br>> <br>> <br>> ----------------------------------------------------------------------<br>> <br>> Message: 1<br>> Date: Mon, 16 Jul 2012 18:24:42 -0400<br>> From: Alan DeKok <aland@deployingradius.com><br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Subject: Re: Help needed configuring MAB on FreeRADIUS and Cisco<br>> switch<br>> Message-ID: <500494AA.1040209@deployingradius.com><br>> Content-Type: text/plain; charset=ISO-8859-1<br>> <br>> Kaya Saman wrote:<br>> >> There is a file in the "raddb" directory named "users".<br>> > <br>> > I **DID** do this....... !!<br>> <br>> You didn't SAY that. You were told to edit the "users" file.<br>> Instead, you went on a long round-about adventure, looking at other files.<br>> <br>> > There's no need to be so severe as the ban me!<br>> <br>> After 13 years of running this list, I've discovered it's the ONLY way<br>> to make some people follow instructions. I can be nice, and explain the<br>> same thing until I get frustrated. Or, I can threaten to ban people,<br>> and have them *immediately* start following instructions.<br>> <br>> Alan DeKok.<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 2<br>> Date: Mon, 16 Jul 2012 18:35:13 -0400<br>> From: Alan DeKok <aland@deployingradius.com><br>> To: JJJ.Hooper@bristol.ac.uk, FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Subject: Re: v2.1.x/src/modules/rlm_mschap/rlm_mschap.c<br>> Message-ID: <50049721.6040401@deployingradius.com><br>> Content-Type: text/plain; charset=ISO-8859-1<br>> <br>> James JJ Hooper wrote:<br>> > I may have miscounted, but shouldn't that be:<br>> > snprintf(buffer + 44, sizeof(buffer) - 44,<br>> <br>> Yup. I'll fix it.<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 3<br>> Date: Tue, 17 Jul 2012 00:59:25 +0200<br>> From: Andreas Meyer <anmeyer@anup.de><br>> To: freeradius-users@lists.freeradius.org<br>> Subject: radacct is not filled up<br>> Message-ID: <20120717005925.4388efb0@itx.bitcorner.intern><br>> Content-Type: text/plain; charset=US-ASCII<br>> <br>> Hello!<br>> <br>> I authenticate a users against a mysql-db and everything is fine. Get entries<br>> in the radpostauth table but the radacct table stays emtpy, instead the<br>> logging is done in /usr/var/log/radius/radacct/192.168.1.254<br>> <br>> # itx:/usr/var/log/radius/radacct/192.168.1.254 # ll<br>> insgesamt 284<br>> -rw------- 1 root root 12420 12. Jul 16:38 auth-detail-20120712<br>> -rw------- 1 root root 12420 13. Jul 19:35 auth-detail-20120713<br>> -rw------- 1 root root 6210 14. Jul 23:21 auth-detail-20120714<br>> -rw------- 1 root root 9078 15. Jul 17:06 auth-detail-20120715<br>> -rw------- 1 root root 180883 16. Jul 17:26 auth-detail-20120716<br>> -rw------- 1 root root 12640 17. Jul 00:43 auth-detail-20120717<br>> -rw------- 1 root root 1242 3. Jul 22:35 reply-detail-20120703<br>> -rw------- 1 root root 2008 12. Jul 16:38 reply-detail-20120712<br>> -rw------- 1 root root 2008 13. Jul 19:35 reply-detail-20120713<br>> -rw------- 1 root root 1004 14. Jul 23:21 reply-detail-20120714<br>> -rw------- 1 root root 1004 15. Jul 13:39 reply-detail-20120715<br>> -rw------- 1 root root 5041 16. Jul 17:26 reply-detail-20120716<br>> -rw------- 1 root root 2016 17. Jul 00:43 reply-detail-20120717<br>> <br>> I cannot find the place where in a configurationfile I can change<br>> the value to log into the radacct table.<br>> <br>> This is what I have in sql.conf:<br>> <br>> acct_table1 = "radacct"<br>> acct_table2 = "radacct"<br>> postauth_table = "radpostauth"<br>> authcheck_table = "radcheck"<br>> authreply_table = "radreply"<br>> groupcheck_table = "radgroupcheck"<br>> groupreply_table = "radgroupreply"<br>> usergroup_table = "radusergroup"<br>> <br>> Andreas<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 4<br>> Date: Tue, 17 Jul 2012 10:38:02 +0700<br>> From: "Fajar A. Nugraha" <list@fajar.net><br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Subject: Re: radacct is not filled up<br>> Message-ID:<br>> <CAG1y0sdFr3w=Fh+qc1-i5gM52c8M-51bJ7miF8DFFRV6Dx4LCA@mail.gmail.com><br>> Content-Type: text/plain; charset=ISO-8859-1<br>> <br>> On Tue, Jul 17, 2012 at 5:59 AM, Andreas Meyer <anmeyer@anup.de> wrote:<br>> > Hello!<br>> ><br>> > I authenticate a users against a mysql-db and everything is fine. Get entries<br>> > in the radpostauth table but the radacct table stays emtpy, instead the<br>> > logging is done in /usr/var/log/radius/radacct/192.168.1.254<br>> ><br>> > # itx:/usr/var/log/radius/radacct/192.168.1.254 # ll<br>> > insgesamt 284<br>> > -rw------- 1 root root 12420 12. Jul 16:38 auth-detail-20120712<br>> > -rw------- 1 root root 12420 13. Jul 19:35 auth-detail-20120713<br>> > -rw------- 1 root root 6210 14. Jul 23:21 auth-detail-20120714<br>> > -rw------- 1 root root 9078 15. Jul 17:06 auth-detail-20120715<br>> > -rw------- 1 root root 180883 16. Jul 17:26 auth-detail-20120716<br>> > -rw------- 1 root root 12640 17. Jul 00:43 auth-detail-20120717<br>> > -rw------- 1 root root 1242 3. Jul 22:35 reply-detail-20120703<br>> > -rw------- 1 root root 2008 12. Jul 16:38 reply-detail-20120712<br>> > -rw------- 1 root root 2008 13. Jul 19:35 reply-detail-20120713<br>> > -rw------- 1 root root 1004 14. Jul 23:21 reply-detail-20120714<br>> > -rw------- 1 root root 1004 15. Jul 13:39 reply-detail-20120715<br>> > -rw------- 1 root root 5041 16. Jul 17:26 reply-detail-20120716<br>> > -rw------- 1 root root 2016 17. Jul 00:43 reply-detail-20120717<br>> ><br>> > I cannot find the place where in a configurationfile I can change<br>> > the value to log into the radacct table.<br>> <br>> Did you read http://wiki.freeradius.org/SQL-HOWTO ?<br>> <br>> Search for "accounting"<br>> <br>> -- <br>> Fajar<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 5<br>> Date: Tue, 17 Jul 2012 09:44:22 +0200<br>> From: Andreas Meyer <anmeyer@anup.de><br>> To: freeradius-users@lists.freeradius.org<br>> Subject: Re: radacct is not filled up<br>> Message-ID: <20120717094422.64e6b1cf@itx.bitcorner.intern><br>> Content-Type: text/plain; charset=US-ASCII<br>> <br>> Hello!<br>> <br>> "Fajar A. Nugraha" <list@fajar.net> wrote:<br>> <br>> > On Tue, Jul 17, 2012 at 5:59 AM, Andreas Meyer <anmeyer@anup.de> wrote:<br>> > > Hello!<br>> > ><br>> > > I authenticate a users against a mysql-db and everything is fine. Get entries<br>> > > in the radpostauth table but the radacct table stays emtpy, instead the<br>> > > logging is done in /usr/var/log/radius/radacct/192.168.1.254<br>> <br>> <br>> > > I cannot find the place where in a configurationfile I can change<br>> > > the value to log into the radacct table.<br>> > <br>> > Did you read http://wiki.freeradius.org/SQL-HOWTO ?<br>> > <br>> > Search for "accounting"<br>> <br>> Yes, I read the SQL-Howto. Made a change in the dialup.conf from<br>> sql_user_name = "%{User-Name}" to<br>> sql_user_name = "%{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}}"<br>> <br>> and the debug output shows that the radiusd is using stripped user-name.<br>> But the radacct is not filled up. All is written to the logfile in<br>> /usr/var/log/radius/radacct/192.168.1.254<br>> <br>> I wonder if it might have something to do with the buffered-sql in<br>> /usr/etc/raddb/sites-available. I made no changes to that file.<br>> <br>> mysql> use radius;<br>> Database changed<br>> mysql> show tables;<br>> +------------------+<br>> | Tables_in_radius |<br>> +------------------+<br>> | badusers |<br>> | mtotacct |<br>> | nas |<br>> | radacct |<br>> | radcheck |<br>> | radgroupcheck |<br>> | radgroupreply |<br>> | radpostauth |<br>> | radreply |<br>> | radusergroup |<br>> | totacct |<br>> | userinfo |<br>> +------------------+<br>> 12 rows in set (0.01 sec)<br>> <br>> Everything is fine and radcheck and radpostauth and userinfo and so on is<br>> written to the database exept for the radacct information.<br>> <br>> Andreas<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 6<br>> Date: Tue, 17 Jul 2012 14:49:37 +0700<br>> From: "Fajar A. Nugraha" <list@fajar.net><br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Subject: Re: radacct is not filled up<br>> Message-ID:<br>> <CAG1y0sfhziFXxOpea1CfShGJh0-zbYr8NcVsnoCqk7CvZCmuXQ@mail.gmail.com><br>> Content-Type: text/plain; charset=ISO-8859-1<br>> <br>> On Tue, Jul 17, 2012 at 2:44 PM, Andreas Meyer <anmeyer@anup.de> wrote:<br>> >> > I cannot find the place where in a configurationfile I can change<br>> >> > the value to log into the radacct table.<br>> >><br>> >> Did you read http://wiki.freeradius.org/SQL-HOWTO ?<br>> >><br>> >> Search for "accounting"<br>> ><br>> > Yes, I read the SQL-Howto. Made a change in the dialup.conf from<br>> > sql_user_name = "%{User-Name}" to<br>> > sql_user_name = "%{%{Stripped-User-Name}:-%{%{User-Name}:-DEFAULT}}"<br>> ><br>> > and the debug output shows that the radiusd is using stripped user-name.<br>> > But the radacct is not filled up. All is written to the logfile in<br>> > /usr/var/log/radius/radacct/192.168.1.254<br>> ><br>> > I wonder if it might have something to do with the buffered-sql in<br>> > /usr/etc/raddb/sites-available. I made no changes to that file.<br>> <br>> Re-read the wiki page. If you HAVE read it correctly, you would've<br>> seen that you need to change something in that file.<br>> <br>> -- <br>> Fajar<br>> <br>> <br>> ------------------------------<br>> <br>> Message: 7<br>> Date: Tue, 17 Jul 2012 09:54:57 +0100<br>> From: Kaya Saman <kayasaman@gmail.com><br>> To: FreeRadius users mailing list<br>> <freeradius-users@lists.freeradius.org><br>> Subject: Re: Help needed configuring MAB on FreeRADIUS and Cisco<br>> switch<br>> Message-ID:<br>> <CAPj0R5+JPYXNtzwuavkKTAoeh9ARJ8PFOFKuo5w5Rj09MSYVTQ@mail.gmail.com><br>> Content-Type: text/plain; charset="iso-8859-1"<br>> <br>> Hi Alan,<br>> <br>> sorry for the mishaps yesterday......<br>> <br>> On Mon, Jul 16, 2012 at 4:20 PM, alan buxey <A.L.M.Buxey@lboro.ac.uk> wrote:<br>> [...]<br>> ><br>> >> By placing the entry you suggested at the top of the /etc/raddb/users<br>> >> file and restarting the server I got this:<br>> ><br>> > well, no you didnt...or rather, if you did stick that in the users file<br>> > then its certainly not the users file that the server is reading. you are editing<br>> > the live server config and not some extracted archive file?<br>> ><br>> <br>> <br>> Let's just try to focus on this issue and get a basic system up and<br>> running before continuing on - as that is inevitably what you were<br>> trying to do :-)<br>> <br>> <br>> Ok so first let's get back to real basics and check where we are in<br>> the file system:<br>> <br>> <br>> # cd /etc/raddb<br>> <br>> # ls<br>> acct_users clients.conf policy.conf sql<br>> attrs dictionary policy.txt sql.conf<br>> attrs.access_challenge eap.conf preproxy_users sqlippool.conf<br>> attrs.access_reject example.pl proxy.conf templates.conf<br>> attrs.accounting_response hints radiusd.conf users<br>> attrs.pre-proxy huntgroups sites-available<br>> certs modules sites-enabled<br>> <br>> # cat users | more<br>> 0015c5537baa Cleartext-Password := "0015c5537baa"<br>> Tunnel-Type:0 = VLAN,<br>> Tunnel-Medium-Type:0 = IEEE-802,<br>> Tunnel-Private-Group-Id:0 = "3",<br>> Tunnel-Preference = 0x000000<br>> <br>> #<br>> # Please read the documentation file ../doc/processing_users_file,<br>> # or 'man 5 users' (after installing the server) for more information.<br>> #<br>> # This file contains authentication security and configuration<br>> # information for each user. Accounting requests are NOT processed<br>> # through this file. Instead, see 'acct_users', in this directory.<br>> #<br>> # The first field is the user's name and can be up to<br>> # 253 characters in length. This is followed (on the same line) with<br>> # the list of authentication requirements for that user. This can<br>> # include password, comm server name, comm server port number, protocol<br>> # type (perhaps set by the "hints" file), and huntgroup name (set by<br>> <br>> <br>> I have additionally attached the full file just incase!<br>> <br>> <br>> Let's see in the file system if there are any other files called users<br>> which maybe the 'source' of the Radius service:<br>> <br>> <br>> # find / -name users<br>> /usr/bin/users<br>> /etc/selinux/targeted/contexts/users<br>> /etc/raddb/users<br>> /var/www/daloradius/contrib/configs/freeradius-1.1.7/cfg1/freeradius/users<br>> <br>> <br>> Will disabling SElinux help, could that be blocking things as it<br>> usually does with TFTP???<br>> <br>> <br>> Regards,<br>> <br>> <br>> Kaya<br>> -------------- next part --------------<br>> A non-text attachment was scrubbed...<br>> Name: users<br>> Type: application/octet-stream<br>> Size: 6732 bytes<br>> Desc: not available<br>> URL: <http://lists.freeradius.org/pipermail/freeradius-users/attachments/20120717/e9511277/attachment.obj><br>> <br>> ------------------------------<br>> <br>> -<br>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>> <br>> End of Freeradius-Users Digest, Vol 87, Issue 46<br>> ************************************************<br></div> </div></body>
</html>