July 2005 - Freeradius-Devel - lists.freeradius.org

proxy configuration with ldap configuration failed to authenticate
by sumi thra 17 Aug '05

17 Aug '05

Hi Im sending an authentication request to the radius server which proxy's the request to the other server. But After proxying the request it does ldap search & returns Access-Reject to the user. Why is this ldap authentication is needed for proxy requests?? Please help he in this regard. Awaiting for the earliest reply. Thanks Sumi

2 6

Any objection to deleting support for "clients"?
by Alan DeKok 16 Aug '05

16 Aug '05

It's been deprecated forever... Alan DeKok.

5 32

[Q] FreeRadius proxy and Accounting-Off/Accounting-On packets
by Andrey Panin 01 Aug '05

01 Aug '05

Hello, how Freeradius handle Accounting-Off/Accounting-On packets in proxy mode ? Looks like it just drops them on the floor :( Best regards. -- Andrey Panin | Linux and UNIX system administrator pazke(a)donpac.ru | PGP key: wwwkeys.pgp.net

2 2

Automatic report from sources (radiusd) between 30.07.2005 - 31.07.2005 GMT
by Automatic cvs log generator 31 Jul '05

31 Jul '05

CVS log entries from 30.07.2005 (Sat) 08:00:01 - 31.07.2005 (Sun) 08:00:03 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revisions: 1.30 File: radiusd/src/modules/rlm_radutmp/rlm_radutmp2.c; Revisions: 1.5 File: radiusd/src/main/session.c; Revisions: 1.27 File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revisions: 1.147 ===================================================== Combined list of identical log entries ===================================================== Description: Don't zap the session if the function rad_check_ts() failed. Modified files: File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c; Revision: 1.30; Date: 2005/07/30 21:39:55; Author: nbk; Lines: (+18 -15) File: radiusd/src/modules/rlm_radutmp/rlm_radutmp2.c; Revision: 1.5; Date: 2005/07/30 21:39:56; Author: nbk; Lines: (+24 -20) ===================================================== Log entries ===================================================== Description: Add a comment about the return values of the function rad_check_ts() Modified files: File: radiusd/src/main/session.c; Revision: 1.27; Date: 2005/07/30 21:34:31; Author: nbk; Lines: (+11 -4) ------------------------------- Description: Don't zap the session if the function rad_check_ts() failed. (closes: #235) Based on a patch from Stephan Jaeger <stephan.jaeger(a)ewetel.de> Modified files: File: radiusd/src/modules/rlm_sql/rlm_sql.c; Revision: 1.147; Date: 2005/07/30 21:38:55; Author: nbk; Lines: (+47 -43) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/session.c Revisions: 1.27 Authors: nbk (+11 -4) ------------------------------- File: radiusd/src/modules/rlm_radutmp/rlm_radutmp.c Revisions: 1.30 Authors: nbk (+18 -15) ------------------------------- File: radiusd/src/modules/rlm_radutmp/rlm_radutmp2.c Revisions: 1.5 Authors: nbk (+24 -20) ------------------------------- File: radiusd/src/modules/rlm_sql/rlm_sql.c Revisions: 1.147 Authors: nbk (+47 -43) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 29.07.2005 - 30.07.2005 GMT
by Automatic cvs log generator 30 Jul '05

30 Jul '05

CVS log entries from 29.07.2005 (Fri) 08:00:00 - 30.07.2005 (Sat) 08:00:01 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/client.c; Revisions: 1.44 ===================================================== Log entries ===================================================== Description: Don't use GCC-isms Modified files: File: radiusd/src/main/client.c; Revision: 1.44; Date: 2005/07/29 22:55:03; Author: aland; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/client.c Revisions: 1.44 Authors: aland (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 28.07.2005 - 29.07.2005 GMT
by Automatic cvs log generator 29 Jul '05

29 Jul '05

CVS log entries from 28.07.2005 (Thu) 08:00:01 - 29.07.2005 (Fri) 08:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/main/proxy.c; Revisions: 1.85 ===================================================== Log entries ===================================================== Description: Check the value of realm->striprealm before overwriting the User-Name with the Stripped-User-Name. Modified files: File: radiusd/src/main/proxy.c; Revision: 1.85; Date: 2005/07/28 19:47:32; Author: nbk; Lines: (+4 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/src/main/proxy.c Revisions: 1.85 Authors: nbk (+4 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

dialup_admin: list users and monthly stats
by Muenz, Michael 28 Jul '05

28 Jul '05

Hi List, I've just updated dialup_admin to the current CVS version. Works great so far, but I'm wondering why user_stats_month.php3 was removed? I've copied from old (CVS) version and edit buttons. Now it's like the old one. Second Q: I've read in the Changelog: * Make pagesize 'all' work again. That's true, it works, but now all other sizes don't work. Bug? Not tested the other new features, but seems to be working at all. I've also added "\#" to preg_replace("/[^\w\.\/\#\@\:\-]/",'',$login); in conf/config.php3 to allow hash key's in usernames. Michael

1 0

proxy configuration with ldap authorization(very urgent)
by sumi thra 28 Jul '05

28 Jul '05

Hi Im sending an authentication request to the radius server which proxy's the request to the other server. But After proxying the request it does ldap search & returns Access-Reject to the user. Why is this ldap authentication is needed for proxy requests?? Please help he in this regard. Awaiting for the earliest reply. Thanks Sumi

1 0

Proxy configuration with Free Radius
by sumi 28 Jul '05

28 Jul '05

Hi , Could you Plz help me to resolve this issue.. ? The issue is.. CASE 1: Step 1: Im using free radius latest version. I have two radius servers running in the same network. One is configured as direct authentication server and this primary server forwards(proxy's) the request to the second radius server. Primary radius servers radius.conf file... has the configuration... in the authorize module as , authorize { preprocess eap mschap suffix # ldap } Step 2 : Im sending an authentication request to the primary server which inturn forwards the request to the second server ( basically proxy's the request) Result : Authentication success. And the user got connected to the WLAN - X. CASE 2: Im changing the authorize module of primary server to .. STEP 1 : authorize { preprocess eap mschap suffix # Im uncommenting ldap ldap } STEP 2: Same as previous.. LDAP is not connected to the primary server. Result : rad_recv: Access-Request packet from host 192.168.0.1:12590<http://192.168.0.1:12590>, id=90, length=177 User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0xf2ffcd4c14e14277dde2bf1d7b66e41f Processing the authorize section of radiusd.conf modcall: entering group authorize for request 23 modcall[authorize]: module "preprocess" returns ok for request 23 modcall[authorize]: module "chap" returns noop for request 23 modcall[authorize]: module "mschap" returns noop for request 23 rlm_realm: Looking up realm "symbol.com <http://symbol.com>" for User-Name = "anonymous(a)symbol.com" rlm_realm: Found realm "symbol.com<http://symbol.com> " rlm_realm: Proxying request from user anonymous to realm symbol.com<http://symbol.com> rlm_realm: Adding Realm = "symbol.com <http://symbol.com>" rlm_realm: Preparing to proxy authentication request to realm "symbol.com<http://symbol.com> " modcall[authorize]: module "suffix" returns updated for request 23 rlm_eap: Request is supposed to be proxied to Realm symbol.com<http://symbol.com>. Not doing EAP. modcall[authorize]: module "eap" returns noop for request 23 users: Matched entry anonymous(a)symbol.com at line 96 modcall[authorize]: module "files" returns ok for request 23 rlm_ldap: - authorize rlm_ldap: performing user authorization for anonymous(a)symbol.com radius_xlat: '(uid=anonymous(a)symbol.com)' radius_xlat: 'o=My Org,c=UA' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ldap.your.domain:389, authentication 0 rlm_ldap: bind as / to ldap.your.domain:389 rlm_ldap: bind to ldap.your.domain:389 failed: Can't contact LDAP server rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 23 modcall: group authorize returns fail for request 23 Sending Access-Request of id 8 to 157.235.206.67:1812<http://157.235.206.67:1812> User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x00000000000000000000000000000000 Proxy-State = 0x3930 --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:12590<http://192.168.0.1:12590>, id=90, length=177 Dropping conflicting packet from client ws2k:12590 - ID: 90 due to unfinished request 23 --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Re-sending Access-Request of id 8 to 157.235.206.67:1812<http://157.235.206.67:1812> User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x00000000000000000000000000000000 Client-IP-Address = 192.168.0.1 <http://192.168.0.1> Realm = "symbol.com <http://symbol.com>" EAP-Type = Identity Realm = "symbol.com <http://symbol.com>" Proxy-State = 0x3930 Waking up in 5 seconds... rad_recv: Access-Request packet from host 192.168.0.1:12590<http://192.168.0.1:12590>, id=90, length=177 Dropping conflicting packet from client ws2k:12590 - ID: 90 due to unfinished request 23 --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Re-sending Access-Request of id 8 to 157.235.206.67:1812<http://157.235.206.67:1812> User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x00000000000000000000000000000000 Client-IP-Address = 192.168.0.1 <http://192.168.0.1> Realm = "symbol.com <http://symbol.com>" EAP-Type = Identity Realm = "symbol.com <http://symbol.com>" Proxy-State = 0x3930 Waking up in 5 seconds... --- Walking the entire request list --- Server rejecting request 23. marking authentication server 157.235.206.67:1812<http://157.235.206.67:1812>for realm symbol.com <http://symbol.com> dead Waking up in 0 seconds... --- Walking the entire request list --- Sending Access-Reject of id 90 to 192.168.0.1:12590<http://192.168.0.1:12590> Cleaning up request 23 ID 90 with timestamp 42e83888 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.0.1:12591<http://192.168.0.1:12591>, id=91, length=177 User-Name = "anonymous(a)symbol.com" Called-Station-Id = "00:a0:f8:bc:b4:3c" Calling-Station-Id = "00:0f:66:4f:54:41" NAS-Port = 1 NAS-Port-Type = Wireless-802.11 Framed-MTU = 1400 NAS-IP-Address = 192.168.0.1 <http://192.168.0.1> NAS-Identifier = "WS2000" Vendor-388-Attr-2 = 0x73756d695f72616474657374 EAP-Message = 0x0201001901616e6f6e796d6f75734073796d626f6c2e636f6d Message-Authenticator = 0x9e6c2754c62012077fa29b7696d5755e Processing the authorize section of radiusd.conf My doubt is why do we need to have an ldap setting for the proxy requests??? The secondary server when it gets the request for the first time it says.. Access Accept.. But for the next time onwards it rejects the user. Plz help me on this regard. Awaiting for your earliest reply. Thanks & Regards Sumi

1 0

(no subject)
by pks＠dpimatrix.com 27 Jul '05

27 Jul '05

Gentlemen: What would be a good place to look for FreeRadius developers for extension of features necessary for Telco and ISP operations? Thanks,

1 0