January 2006 - Freeradius-Devel - lists.freeradius.org

FreeRadius Server not responding
by shan t 12 Jan '06

12 Jan '06

Hi, I am new to the freeRadius Server area. I have installed freeRADIUS (1.0.5) on linux machine, and installation completed without reporting any problem. But when I am trying to test it using radclient, it hangs. I tried to connect to the radius server from a windows machine using NTRadPing.exe also. It is saying request timed out. I ran the freeradius on debug mode and tried to connect it. It is not showing any signs of being contacted. This is what I get when trying to run the freeRAdius on debug mode. Thanks in advance Shan Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests.

3 3

Automatic report from sources (radiusd) between 11.01.2006 - 12.01.2006 GMT
by Automatic cvs log generator 12 Jan '06

12 Jan '06

CVS log entries from 11.01.2006 (Wed) 09:00:02 - 12.01.2006 (Thu) 09:00:00 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/debian/patches/00list; Revisions: 1.1.2.4.2.4 File: radiusd/debian/patches/14_static_rlm_eap_link_mode.dpatch; Revisions: 1.1.2.2 File: radiusd/raddb/proxy.conf; Revisions: 1.19.4.1 File: radiusd/src/modules/rlm_otp/otp.h; Revisions: 1.29, 1.28.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Delete the dpatch 14_static_rlm_eap_link_mode. It's reported to fail linking rlm_eap on x86_64. Modified files: File: radiusd/debian/patches/00list; Revision: 1.1.2.4.2.4; Date: 2006/01/11 14:20:49; Author: nbk; Lines: (+0 -1) File: radiusd/debian/patches/14_static_rlm_eap_link_mode.dpatch; Revision: 1.1.2.2; Date: 2006/01/11 14:20:49; Author: nbk; Lines: (+0 -0) ------------------------------- Description: Fix a build problem on Mac OS X. (closes: #310) Bug reported by Steven Simon <simon.s(a)apple.com> Modified files: File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.29; Date: 2006/01/11 15:50:02; Author: nbk; Lines: (+2 -1) File: radiusd/src/modules/rlm_otp/otp.h; Revision: 1.28.2.2; Date: 2006/01/11 15:50:15; Author: nbk; Lines: (+2 -1) ===================================================== Log entries ===================================================== Description: Update the comments about post_proxy_authorize, because this option is deprecated. Modified files: File: radiusd/raddb/proxy.conf; Revision: 1.19.4.1; Date: 2006/01/11 13:09:02; Author: nbk; Lines: (+3 -3) ===================================================== Summary of modified files ===================================================== File: radiusd/debian/patches/00list Revisions: 1.1.2.4.2.4 Authors: nbk (+0 -1) ------------------------------- File: radiusd/debian/patches/14_static_rlm_eap_link_mode.dpatch Revisions: 1.1.2.2 Authors: nbk (+0 -0) ------------------------------- File: radiusd/raddb/proxy.conf Revisions: 1.19.4.1 Authors: nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp.h Revisions: 1.29, 1.28.2.2 Authors: nbk (+2 -1), nbk (+2 -1) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Re: Release 1.1.0 this week?
by Markus Krause 11 Jan '06

11 Jan '06

Zitat von Nicolas Baradakis <nbk(a)sitadelle.com>: > Markus Krause wrote: > > > Zitat von Nicolas Baradakis <nbk(a)sitadelle.com>: > > > > > And finally, if someone has a setup with ldap backend, and is > volunteering > > > to test the patch under bug #261 (ldap_pairget fixes), perhaps it could > be > > > added to 1.1.1, too. I'm not using LDAP on my site, therefore I can't > test > > > it myself easily. > > > > i have a testing installation with freeradius using ldap on which i could > > do some tests if necessary. unfortunatly i am not a freeradius expert, > > but if you tell me what i should test/try i would be glad to help! > > Thanks, that'd be useful. Here you are the detailed instructions: > > $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login > CVS password: anoncvs > $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 > radiusd > $ cd radiusd > $ wget 'http://bugs.freeradius.org/showattachment.cgi?attach_id=113' -O > ldap_pairget.patch > $ patch -p0 < ldap_pairget.patch > > Then recompile FreeRADIUS like usual and test with a user from your LDAP > directory. If that works, the next step is to enter the test values > from the bugzilla into LDAP, and verify if the RADIUS values are > correct in the reply packet. > > See http://bugs.freeradius.org/show_bug.cgi?id=261 > > -- > Nicolas Baradakis so here is what i did and what happend (on a current debian sarge linux, suse seems to be missing some packages): atlas:~/radius-test# cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login Logging in to :pserver:anoncvs@cvs.freeradius.org:2401/source CVS password: <i typed "anoncvs"> atlas:~/radius-test# cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd [lots of cvs messages "U radiusd/ ..."] atlas:~/radius-test# cd radiusd/ atlas:~/radius-test/radiusd# wget 'http://bugs.freeradius.org/showattachment.cgi?attach_id=113' -O ldap_pairg et.patch [wget output] atlas:~/radius-test/radiusd# patch -p0 < ldap_pairget.patch patching file src/modules/rlm_ldap/rlm_ldap.c Hunk #1 succeeded at 2309 (offset 32 lines). atlas:~/radius-test/radiusd# dpkg-buildpackage -us -uc -b [lot of output, all seems successful, results are debian packages] atlas:~/radius-test/radiusd# cd .. atlas:~/radius-test# dpkg -i freeradius_1.1.0-0_i386.deb freeradius-ldap_1.1.0-0_i386.deb freeradius-mysql_1.1.0-0_i386.deb [some output, all ok] atlas:~/radius-test# now the entry of a ldap user (as ldif): # testuser2, People, mogli.de dn: uid=testuser2,ou=People,dc=mogli,dc=de cn: testuser2 objectClass: account objectClass: posixAccount objectClass: top objectClass: radiusprofile uidNumber: 501 gidNumber: 100 homeDirectory: /home/testuser1 loginShell: /bin/bash uid: testuser2 dialupAccess: 1 radiusTunnelMediumType: IEEE-802 radiusTunnelPrivateGroupId: 1 radiusTunnelType: VLAN radiusFramedIPAddress: 192.168.0.112 radiusFramedIPNetmask: 255.255.255.0 radiusExpiration: 11 Jan 2006 13:00:00 userPassword: {CRYPT}sefjKaLm7zybE radiusReplyItem: Reply-Message := foo bar radiusReplyItem: Reply-Message += This_is_a_Reply radiusReplyItem: Reply-Message += This is another Reply with spaces radiusReplyItem: Reply-Message += This_is_yet_another_Reply_without_spaces now a test with radtest: atlas:~# radtest testuser2 secret localhost 0 testing123 Sending Access-Request of id 7 to 127.0.0.1 port 1812 User-Name = "testuser2" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=7, length=97 Framed-IP-Netmask = 255.255.255.0 Framed-IP-Address = 192.168.0.112 Reply-Message = "This_is_a_Reply" Reply-Message = "This_is_yet_another_Reply_without_spaces" Session-Timeout = 70115 atlas:~# it looks like the reply-message items containing spaces are ignored, the debug output of freeradius -XA says: rad_recv: Access-Request packet from host 127.0.0.1:32784, id=33, length=61 User-Name = "testuser2" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall[authorize]: module "files" returns notfound for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for testuser2 radius_xlat: '(uid=testuser2)' radius_xlat: 'dc=mogli,dc=de' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ldapserv1.mogli.de:389, authentication 0 rlm_ldap: bind as / to ldapserv1.mogli.de:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in dc=mogli,dc=de, with filter (uid=testuser2) rlm_ldap: looking for check items in directory... rlm_ldap: Adding radiusExpiration as Expiration, value 11 Jan 2006 13:00:00 & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: Adding radiusFramedIPNetmask as Framed-IP-Netmask, value 255.255.255.0 & op=11 rlm_ldap: Adding radiusFramedIPAddress as Framed-IP-Address, value 192.168.0.112 & op=11 rlm_ldap: parsing radiusReplyItem failed: Reply-Message := foo bar rlm_ldap: extracted attribute Reply-Message from generic item Reply-Message += This_is_a_Reply rlm_ldap: parsing radiusReplyItem failed: Reply-Message += This is another Reply with spaces rlm_ldap: extracted attribute Reply-Message from generic item Reply-Message += This_is_yet_another_Reply_without_spaces rlm_ldap: user testuser2 authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type ldap auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group LDAP for request 0 rlm_ldap: - authenticate rlm_ldap: login attempt by "testuser2" with password "secret" rlm_ldap: user DN: uid=testuser2,ou=People,dc=mogli,dc=de rlm_ldap: (re)connect to ldapserv1.mogli.de:389, authentication 1 rlm_ldap: bind as uid=testuser2,ou=People,dc=mogli,dc=de/secret to ldapserv1.mogli.de:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: user testuser2 authenticated succesfully modcall[authenticate]: module "ldap" returns ok for request 0 modcall: leaving group LDAP (returns ok) for request 0 radius_xlat: 'This_is_a_Reply' radius_xlat: 'This_is_yet_another_Reply_without_spaces' Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/reply-detail-20060110' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/reply-detail-20060110 modcall[post-auth]: module "reply_log" returns ok for request 0 rlm_sql (sql): Processing sql_postauth radius_xlat: 'testuser2' rlm_sql (sql): sql_set_user escaped user --> 'testuser2' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'testuser2', 'secret', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'testuser2', 'secret', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Released sql socket id: 4 modcall[post-auth]: module "sql" returns ok for request 0 modcall: leaving group post-auth (returns ok) for request 0 Sending Access-Accept of id 33 to 127.0.0.1 port 32784 Framed-IP-Netmask = 255.255.255.0 Framed-IP-Address = 192.168.0.112 Reply-Message += "This_is_a_Reply" Reply-Message += "This_is_yet_another_Reply_without_spaces" Session-Timeout := 70038 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 33 with timestamp 43c3e1aa Nothing to do. Sleeping until we see a request. there seems to be (still?) a problem with spaces: rlm_ldap: parsing radiusReplyItem failed: Reply-Message := foo bar rlm_ldap: parsing radiusReplyItem failed: Reply-Message += This is another Reply with spaces to be sure it is not due to "+=" i entered the following to users in ldap (again ldif): # testuser3, People, mogli.de dn: uid=testuser3,ou=People,dc=mogli,dc=de cn: testuser3 objectClass: account objectClass: posixAccount objectClass: top objectClass: radiusprofile uidNumber: 501 gidNumber: 100 homeDirectory: /home/testuser1 loginShell: /bin/bash uid: testuser3 dialupAccess: 1 userPassword: {CRYPT}sefjKaLm7zybE radiusReplyItem: Reply-Message := foo bar # testuser4, People, mogli.de dn: uid=testuser4,ou=People,dc=mogli,dc=de cn: testuser4 objectClass: account objectClass: posixAccount objectClass: top objectClass: radiusprofile uidNumber: 501 gidNumber: 100 homeDirectory: /home/testuser1 loginShell: /bin/bash uid: testuser4 dialupAccess: 1 userPassword: {CRYPT}sefjKaLm7zybE radiusReplyItem: Reply-Message := foo_bar radtest says: atlas:~# radtest testuser3 secret localhost 0 testing123 Sending Access-Request of id 243 to 127.0.0.1 port 1812 User-Name = "testuser3" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=243, length=20 atlas:~# radtest testuser4 secret localhost 0 testing123 Sending Access-Request of id 248 to 127.0.0.1 port 1812 User-Name = "testuser4" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=248, length=29 Reply-Message = "foo_bar" atlas:~# the debug output is similar to them for testuser2: rad_recv: Access-Request packet from host 127.0.0.1:32791, id=243, length=61 User-Name = "testuser3" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 modcall[authorize]: module "files" returns notfound for request 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for testuser3 radius_xlat: '(uid=testuser3)' radius_xlat: 'dc=mogli,dc=de' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in dc=mogli,dc=de, with filter (uid=testuser3) rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: parsing radiusReplyItem failed: Reply-Message := foo bar rlm_ldap: user testuser3 authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found Auth-Type ldap auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group LDAP for request 1 rlm_ldap: - authenticate rlm_ldap: login attempt by "testuser3" with password "secret" rlm_ldap: user DN: uid=testuser3,ou=People,dc=mogli,dc=de rlm_ldap: (re)connect to ldapserv1.mogli.de:389, authentication 1 rlm_ldap: bind as uid=testuser3,ou=People,dc=mogli,dc=de/secret to ldapserv1.mogli.de:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: user testuser3 authenticated succesfully modcall[authenticate]: module "ldap" returns ok for request 1 modcall: leaving group LDAP (returns ok) for request 1 Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 1 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/reply-detail-20060110' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/reply-detail-20060110 modcall[post-auth]: module "reply_log" returns ok for request 1 rlm_sql (sql): Processing sql_postauth radius_xlat: 'testuser3' rlm_sql (sql): sql_set_user escaped user --> 'testuser3' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'testuser3', 'secret', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'testuser3', 'secret', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 modcall[post-auth]: module "sql" returns ok for request 1 modcall: leaving group post-auth (returns ok) for request 1 Sending Access-Accept of id 243 to 127.0.0.1 port 32791 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:32792, id=248, length=61 User-Name = "testuser4" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 modcall[authorize]: module "mschap" returns noop for request 2 modcall[authorize]: module "files" returns notfound for request 2 rlm_ldap: - authorize rlm_ldap: performing user authorization for testuser4 radius_xlat: '(uid=testuser4)' radius_xlat: 'dc=mogli,dc=de' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in dc=mogli,dc=de, with filter (uid=testuser4) rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: extracted attribute Reply-Message from generic item Reply-Message := foo_bar rlm_ldap: user testuser4 authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 2 modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type ldap auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group LDAP for request 2 rlm_ldap: - authenticate rlm_ldap: login attempt by "testuser4" with password "secret" rlm_ldap: user DN: uid=testuser4,ou=People,dc=mogli,dc=de rlm_ldap: (re)connect to ldapserv1.mogli.de:389, authentication 1 rlm_ldap: bind as uid=testuser4,ou=People,dc=mogli,dc=de/secret to ldapserv1.mogli.de:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: user testuser4 authenticated succesfully modcall[authenticate]: module "ldap" returns ok for request 2 modcall: leaving group LDAP (returns ok) for request 2 radius_xlat: 'foo_bar' Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 2 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/reply-detail-20060110' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/reply-detail-20060110 modcall[post-auth]: module "reply_log" returns ok for request 2 rlm_sql (sql): Processing sql_postauth radius_xlat: 'testuser4' rlm_sql (sql): sql_set_user escaped user --> 'testuser4' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'testuser4', 'secret', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'testuser4', 'secret', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 modcall[post-auth]: module "sql" returns ok for request 2 modcall: leaving group post-auth (returns ok) for request 2 Sending Access-Accept of id 248 to 127.0.0.1 port 32792 Reply-Message := "foo_bar" Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 243 with timestamp 43c3e448 Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 248 with timestamp 43c3e44b Nothing to do. Sleeping until we see a request. of course there can be antoher error on my side, but seems that ldap reply items containing spaces are not parsed correctly. if i can test some more just let me know, sorry to be of no more help! regards markus -- Markus Krause email: krause(a)biochem.mpg.de Computing Center Tel.: 089 - 89 40 85 99 Group Lottspeich / Proteomics Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

2 5

rdsic string
by Maria Ripolles 11 Jan '06

11 Jan '06

Hy all, I am developing my first custom module for FreeRadius. I would like to Know which is the syntax that I may follow in the rdsic string. Best regard Maria --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y moviles desde 1 centimo por minuto. http://es.voice.yahoo.com

3 3

Automatic report from sources (radiusd) between 10.01.2006 - 11.01.2006 GMT
by Automatic cvs log generator 11 Jan '06

11 Jan '06

CVS log entries from 10.01.2006 (Tue) 09:00:02 - 11.01.2006 (Wed) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_otp/otp_state.c; Revisions: 1.24, 1.23.2.2 File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revisions: 1.30, 1.13.4.3 File: radiusd/src/modules/rlm_otp/otp_state.h; Revisions: 1.6, 1.5.2.2 ===================================================== Combined list of identical log entries ===================================================== Description: Fix build problems on Mac OS X. Patch from Steven Simon <simon.s(a)apple.com> Modified files: File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.24; Date: 2006/01/10 14:33:06; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_otp/otp_state.c; Revision: 1.23.2.2; Date: 2006/01/10 14:33:16; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_otp/otp_state.h; Revision: 1.6; Date: 2006/01/10 14:33:06; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_otp/otp_state.h; Revision: 1.5.2.2; Date: 2006/01/10 14:33:16; Author: nbk; Lines: (+3 -3) ------------------------------- Description: Fix a build problem on Mac OS X (thanks to Steven Simon) and a few compilation warnings. Modified files: File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.30; Date: 2006/01/10 11:46:19; Author: nbk; Lines: (+9 -19) File: radiusd/src/modules/rlm_perl/rlm_perl.c; Revision: 1.13.4.3; Date: 2006/01/10 11:46:24; Author: nbk; Lines: (+9 -5) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_otp/otp_state.c Revisions: 1.24, 1.23.2.2 Authors: nbk (+3 -3), nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_otp/otp_state.h Revisions: 1.6, 1.5.2.2 Authors: nbk (+3 -3), nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_perl/rlm_perl.c Revisions: 1.30, 1.13.4.3 Authors: nbk (+9 -19), nbk (+9 -5) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Automatic report from sources (radiusd) between 09.01.2006 - 10.01.2006 GMT
by Automatic cvs log generator 10 Jan '06

10 Jan '06

CVS log entries from 09.01.2006 (Mon) 09:00:01 - 10.01.2006 (Tue) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: aland File: radiusd/src/main/modules.c; Revisions: 1.86.2.1.2.2 File: radiusd/src/lib/dict.c; Revisions: 1.80, 1.50.2.4.2.2 ===================================================== Log entries ===================================================== Description: Don't de-reference NULL points on dict_get*byname() (duh) Part of the fix for bug #311 Modified files: File: radiusd/src/lib/dict.c; Revision: 1.80; Date: 2006/01/09 23:02:37; Author: aland; Lines: (+8 -2) ------------------------------- Description: pull fix from the head Modified files: File: radiusd/src/lib/dict.c; Revision: 1.50.2.4.2.2; Date: 2006/01/09 23:02:47; Author: aland; Lines: (+8 -2) ------------------------------- Description: With modcall.c fixes pulled from CVS head, we now need to check the return code from compile_modsingle This fixes bug #311 Modified files: File: radiusd/src/main/modules.c; Revision: 1.86.2.1.2.2; Date: 2006/01/09 23:06:26; Author: aland; Lines: (+13 -7) ===================================================== Summary of modified files ===================================================== File: radiusd/src/lib/dict.c Revisions: 1.80, 1.50.2.4.2.2 Authors: aland (+8 -2), aland (+8 -2) ------------------------------- File: radiusd/src/main/modules.c Revisions: 1.86.2.1.2.2 Authors: aland (+13 -7) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

No Reply Proxy Forwarding
by D. Bickle 09 Jan '06

09 Jan '06

Hi, In other versions of RADIUS there is a feature where you can instruct the proxy to forward an accounting packet without requiring a reply packet from the target. This feature is very handy for 3rd party servers that can use RADIUS events for specialized services. To my knowledge FreeRadius does not have a compatible feature. Is there a work around available? Thanks, DB

2 1

Automatic report from sources (radiusd) between 08.01.2006 - 09.01.2006 GMT
by Automatic cvs log generator 09 Jan '06

09 Jan '06

CVS log entries from 08.01.2006 (Sun) 09:00:02 - 09.01.2006 (Mon) 09:00:01 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/debian/rules; Revisions: 1.63 File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in; Revisions: 1.11 File: radiusd/src/main/Makefile.in; Revisions: 1.55 File: radiusd/src/modules/rlm_eap/libeap/Makefile; Revisions: 1.6 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in; Revisions: 1.11 File: radiusd/src/modules/rules.mak; Revisions: 1.59 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in; Revisions: 1.13 ===================================================== Combined list of identical log entries ===================================================== Description: Delete the variable RLM_EAP_LINK_MODE support. This terrible hack isn't needed anymore since TLS code moved from module rlm_eap_tls to libeap. Now libtool manages to build correctly the modules rlm_eap_peap and rlm_eap_ttls. Modified files: File: radiusd/debian/rules; Revision: 1.63; Date: 2006/01/08 19:52:26; Author: nbk; Lines: (+0 -3) File: radiusd/src/main/Makefile.in; Revision: 1.55; Date: 2006/01/08 19:52:27; Author: nbk; Lines: (+1 -10) File: radiusd/src/modules/rules.mak; Revision: 1.59; Date: 2006/01/08 19:52:27; Author: nbk; Lines: (+4 -4) File: radiusd/src/modules/rlm_eap/libeap/Makefile; Revision: 1.6; Date: 2006/01/08 19:52:27; Author: nbk; Lines: (+2 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in; Revision: 1.11; Date: 2006/01/08 19:52:27; Author: nbk; Lines: (+1 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in; Revision: 1.11; Date: 2006/01/08 19:52:27; Author: nbk; Lines: (+1 -2) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in; Revision: 1.13; Date: 2006/01/08 19:52:27; Author: nbk; Lines: (+1 -2) ===================================================== Log entries ===================================================== ===================================================== Summary of modified files ===================================================== File: radiusd/debian/rules Revisions: 1.63 Authors: nbk (+0 -3) ------------------------------- File: radiusd/src/main/Makefile.in Revisions: 1.55 Authors: nbk (+1 -10) ------------------------------- File: radiusd/src/modules/rlm_eap/libeap/Makefile Revisions: 1.6 Authors: nbk (+2 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in Revisions: 1.11 Authors: nbk (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in Revisions: 1.11 Authors: nbk (+1 -2) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in Revisions: 1.13 Authors: nbk (+1 -2) ------------------------------- File: radiusd/src/modules/rules.mak Revisions: 1.59 Authors: nbk (+4 -4) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0

Issues with snmp based monitoring of FreeRADIUS server.
by Vishwanath Srikant Pattanshetti 09 Jan '06

09 Jan '06

Hi I am trying to use SNMP to monitor FreeRadius 1.0.4 server installed on a solaris 10 machine. When I run the configure scripts, I see error message for snmp.h, asn1.h and snmp_impl.h saying either update these header files or compile with --enable-ucd-snmp-compatibility option. I searched the mailing list and found that I can comment out the ifdef is these header files, which include the net-snmp header files. I made those changes and now when I run the configure script the I get following error message in config.log file: configure:8336: checking for asn1.h,snmp.h,snmp_impl.h configure:8364: gcc -c -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_ NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG conftest.c 1>&5 configure: In function `main': configure:8360: warning: unused variable `a' configure:8533: checking for snmp_build_var_op in -lsnmp configure:8545: gcc -o conftest -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS - DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG conftest.c -lnsl -lresolv -lso cket -lposix4 -lpthread -lcrypto -lssl -lsnmp 1>&5 ld: fatal: library -lsnmp: not found ld: fatal: File processing errors. No output written to conftest collect2: ld returned 1 exit status configure: failed program was: #line 8538 "configure" #include "confdefs.h" extern char snmp_build_var_op(); int main() { snmp_build_var_op() ; return 0; } configure:8567: gcc -o conftest -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 - Wall -D_GNU_SOURCE -DNDEBUG conftest.c -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -L/usr/lib -lsnmp 1>&5 ld: fatal: library -lsnmp: not found ld: fatal: File processing errors. No output written to conftest collect2: ld returned 1 exit status configure: failed program was: #line 8560 "configure" #include "confdefs.h" extern char snmp_build_var_op(); int main() { snmp_build_var_op() ; return 0; } configure:8589: gcc -o conftest -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 - Wall -D_GNU_SOURCE -DNDEBUG conftest.c -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -L/usr/lib -lsnmp -lcrypto 1>&5 ld: fatal: library -lsnmp: not found ld: fatal: File processing errors. No output written to conftest collect2: ld returned 1 exit status configure: failed program was: #line 8582 "configure" #include "confdefs.h" extern char snmp_build_var_op(); int main() { snmp_build_var_op() ; return 0; } configure:8611: gcc -o conftest -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 - Wall -D_GNU_SOURCE -DNDEBUG conftest.c -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -L/usr/lib -lsnmp -lcrypto -lkstat 1>&5 ld: fatal: library -lsnmp: not found ld: fatal: File processing errors. No output written to conftest collect2: ld returned 1 exit status configure: failed program was: #line 8604 "configure" #include "confdefs.h" extern char snmp_build_var_op(); int main() { snmp_build_var_op() ; return 0; } configure:8567: gcc -o conftest -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 - Wall -D_GNU_SOURCE -DNDEBUG conftest.c -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -L/usr/local/lib -lsnmp 1>&5 ld: fatal: library -lsnmp: not found ld: fatal: File processing errors. No output written to conftest collect2: ld returned 1 exit status configure: failed program was: #line 8560 "configure" #include "confdefs.h" extern char snmp_build_var_op(); int main() { snmp_build_var_op() ; return 0; } There are lots of such errors. I have following .so files in /usr/sfw/lib directory. libnetsnmp.so libnetsnmpagent.so libnetsnmphelpers.so libnetsnmpmibs.so snmp/lib/libnetsnmp.so And the /usr/sfw/lib directory is in both PATH and LD_LIBRARY_PATH variables. Can some one please tell me what do I do to get this damn thing working. Any pointers/procedures to get snmp based monitoring of radius server up is r most welcome. Thanks in advance. -Vishwa.

3 2

Automatic report from sources (radiusd) between 07.01.2006 - 08.01.2006 GMT
by Automatic cvs log generator 08 Jan '06

08 Jan '06

CVS log entries from 07.01.2006 (Sat) 09:00:02 - 08.01.2006 (Sun) 09:00:02 GMT ===================================================== Summary by authors ===================================================== Author: nbk File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in; Revisions: 1.10 File: radiusd/src/modules/rlm_eap/types/Makefile; Revisions: 1.6 File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in; Revisions: 1.10 File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in; Revisions: 1.12 File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/Makefile.in; Revisions: 1.6 ===================================================== Combined list of identical log entries ===================================================== Description: Use the libtool name of the library (libeap.la) instead of the -L and -l options. (considered SOP when linking against an uninstalled library) Modified files: File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in; Revision: 1.10; Date: 2006/01/07 19:14:57; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/Makefile.in; Revision: 1.6; Date: 2006/01/07 19:14:57; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in; Revision: 1.10; Date: 2006/01/07 19:14:57; Author: nbk; Lines: (+3 -3) File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in; Revision: 1.12; Date: 2006/01/07 19:14:57; Author: nbk; Lines: (+3 -3) ===================================================== Log entries ===================================================== Description: Don't run "make" two times inside rlm_eap_tls. This module doesn't need to be built first anymore because TLS code has moved to libeap. Modified files: File: radiusd/src/modules/rlm_eap/types/Makefile; Revision: 1.6; Date: 2006/01/07 19:22:36; Author: nbk; Lines: (+6 -4) ===================================================== Summary of modified files ===================================================== File: radiusd/src/modules/rlm_eap/types/Makefile Revisions: 1.6 Authors: nbk (+6 -4) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_peap/Makefile.in Revisions: 1.10 Authors: nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_sim/Makefile.in Revisions: 1.6 Authors: nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_tls/Makefile.in Revisions: 1.10 Authors: nbk (+3 -3) ------------------------------- File: radiusd/src/modules/rlm_eap/types/rlm_eap_ttls/Makefile.in Revisions: 1.12 Authors: nbk (+3 -3) -- Automatic cron job from /web/pages/us.freeradius.org/bin/new_makelog.pl

1 0