- Freeradius-Devel - lists.freeradius.org

eap-aka patch for freeradius 1.1.4
by zhangyan 28 Dec '10

28 Dec '10

Hello, I want to know if the eap-aka patch for freeradius 1.1.4 has been verified or not, I setup the freeradius with the eap-aka patch, the following log is display in server. rlm_eap: EAP Identity rlm_eap: processing type aka eap-aka can not find EAP-Sim-RAND can not initiate aka, missing attributes rlm_eap: Default EAP type aka failed in initiate rlm_eap: Failed in EAP select Can anyone give help for me? thanks Regards, Yan -- View this message in context: http://freeradius.1045715.n5.nabble.com/eap-aka-patch-for-freeradius-1-1-4-… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

2 1

CoA trigger support in freeRadius 2.1.10
by Rajkumar R 27 Dec '10

27 Dec '10

Hi All, I'm a starter to freeRadius and i would like to know if freeRadius 2.1.10 supports sending CoA msg? Also please let me know how to achieve that with configuration setup, if any. Appreciate your inputs. thanks, Raj ________________________________ "DISCLAIMER: This message is proprietary to Aricent and is intended solely for the use of the individual to whom it is addressed. It may contain privileged or confidential information and should not be circulated or used for any purpose other than for what it is intended. If you have received this message in error, please notify the originator immediately. If you are not the intended recipient, you are notified that you are strictly prohibited from using, copying, altering, or disclosing the contents of this message. Aricent accepts no responsibility for loss or damage arising from the use of the information transmitted by this email including damage from virus."

2 1

Re: Multiple Radius clients from the same host IP supported?
by Brian Candler 24 Dec '10

24 Dec '10

On Thu, Dec 23, 2010 at 07:51:22PM +0200, Murat Öztürk wrote: > Can multiple radius clients on the same server send request to > Freeradius? I ask this question because they may be producing the same > UniqueId in the packages. But they will bind to different UDP sockets, and so will send packets with a different UDP source port. Hence the combination [source address, source port, identifier] uniquely identifies the request, and will set the [dest address, dest port, identifier] in the reply. Regards, Brian.

1 0

Re: Multiple Radius clients from the same host IP supported?
by Alan DeKok 24 Dec '10

24 Dec '10

Murat Öztürk wrote: > Thanks Alan, > Our requirement is mainly "radius client need to send more than 256 IDs > concurrently from single IP, different ports." Then you need to say that. > If we develop such > application, will freeradius support that. Yes. Alan DeKok.

1 0

Re: Multiple Radius clients from the same host IP supported?
by Alan DeKok 24 Dec '10

24 Dec '10

Murat Öztürk wrote: > Can multiple radius clients on the same server send request to > Freeradius? I ask this question because they may be producing the same > /UniqueId/ in the packages. The RADIUS clients are determined by source IP address. I have no idea what a "UniqueId" is. > I believe that, if freeradius use check ip+unique id combination to > identify packages from specific BRAS, it will cause problem. Othwise, > there should not be any issue. Please read the RADIUS specifications which describe how RADIUS works. Alan DeKok.

2 1

Performance issue with Freeradius (2.1.7) running Veriwave
by Verma Anurag-VNF673 23 Dec '10

23 Dec '10

Hi, I am running freeradius version 2.1.7. I am seeing some performance issue when I ran Veriwave AAA test with 15 clients connecting at the rate of 15 client/sec. The auth type is PEAP-MSCHAPv2 and using the local database (i.e. not radius). It is using the file as a db store which in our system is mapped to a ramdisk. The test runs for 30 sec. The auth rate was 9 auth/sec. The same test when ran against Microsoft AAA server gives 25 auth/sec. With Freeradius, out of 450 attempted authentications, 209 was successful and 241 was failed. For single client the authentication time is around 110 ms. Is this the expected number? From the mailing list, it seems 150 msec is what has been observed. The RSA key generation on the server is offloaded to the hardware. Without it the auth rate was only 3 auth/sec. Initially, I had threading option turned off and then later turned it on, but the numbers did not change much. I have tried various suggestion put forward in the mailing list including radius file access during authentication by moving file section from authorize section to authenticate section etc., but not much improvement. I also see something similar query raised, but did not find any satisfactory reply. http://freeradius.1045715.n5.nabble.com/Performance-with-Freeradius-1-1- 4-td2760808.html Any help on this will be appreciated. Thanks, Anurag ________________________________ From: Verma Anurag-VNF673 Sent: Wednesday, December 15, 2010 11:37 AM To: 'freeradius-devel(a)lists.freeradius.org' Subject: building freeradius statically Hi, I am trying to build static version of freeradius by passing --enable-static --enable-shared=no to configure. However, I get an error related to static link of dynamic object libltdl.so. In the make output I can see it is explicitly referring to this shared library. How can I tell it to link with libltdl.a (which is already existing) instead? Thanks, Anurag

5 7

Donation of free OATH Feitian OTP c200
by Jean-Michel Pouré - GOOZE 22 Dec '10

22 Dec '10

Dear Friends, In order to foster Free Software development, GOOZE is happy to donate free Feitian OTP c200 to the FreeRadius project. Technical details: * Compliant with OATH TOTP algorithm. * 6 Character LCD Screen * Water Resistance Certificate IP68 * Seed code sent by postal mail. To apply for a free OTP c200, visit this page: http://www.gooze.eu/feitian-otp-c200-for-free-software-development We only ship to Europe, Canada and the US. Merry Christmas and Happy new year. Kind regards, -- Jean-Michel Pouré - Gooze - http://www.gooze.eu

1 0

patch for src/main/xlat.c
by Gabriel Blanchard 19 Dec '10

19 Dec '10

the exact same as %S but prefers to use the Event-Timestamp VP if it's available. I found that when I use a detail file to decouple accounting the timestamp gets skewed if there is any kind of delay to relay the logs. This way the original timestamp of the event is used which I believe is more accurate. --- freeradius-server-2.1.10/src/main/xlat.c 2010-09-28 07:03:56.000000000 -0400 +++ freeradius/src/main/xlat.c 2010-12-17 14:42:31.000000000 -0500 @@ -1166,6 +1166,27 @@ } p++; break; + case 'E': /* Event-Timestamp (Original Timestamp from the NAS) + * falls back to local timestamp if the vp isn't in the packet + */ + tmp = pairfind(request->packet->vps,PW_EVENT_TIMESTAMP); + if (tmp) { + TM = localtime_r(&tmp->vp_date, &s_TM); + len = strftime(tmpdt, sizeof(tmpdt), "%Y-%m-%d %H:%M:%S", TM); + if (len > 0) { + strlcpy(q, tmpdt, freespace); + q += strlen(q); + } + } else { + TM = localtime_r(&request->timestamp, &s_TM); + len = strftime(tmpdt, sizeof(tmpdt), "%Y-%m-%d %H:%M:%S", TM); + if (len > 0) { + strlcpy(q, tmpdt, freespace); + q += strlen(q); + } + } + p++; + break; case 'H': /* request hour */ TM = localtime_r(&request->timestamp, &s_TM); len = strftime(tmpdt, sizeof(tmpdt), "%H", TM);

2 1

radutmp
by Gabriel Blanchard 16 Dec '10

16 Dec '10

any reason why the session_id is limited to only 8 bytes in radutmp? It's truncating my session_ids by 2 bytes and caused me a lot of headaches :P Would it break anything if I'd just increase it to 32 bytes? While we're at it, why not change the login to 64 bytes as well? I can implement it and submit a patch...just thought I'd email the list first to make sure I'm not doing anything stupid. include/radutmp.h struct radutmp { char login[32]; /* Loginname */ /* FIXME: extend to 48 or 64 bytes */ unsigned int nas_port; /* Port on the terminal server (32 bits). */ char session_id[8]; /* Radius session ID (first 8 bytes at least)*/ /* FIXME: extend to 16 or 32 bytes */ -Gabe

2 2

building freeradius statically
by Verma Anurag-VNF673 15 Dec '10

15 Dec '10

Hi, I am trying to build static version of freeradius by passing --enable-static --enable-shared=no to configure. However, I get an error related to static link of dynamic object libltdl.so. In the make output I can see it is explicitly referring to this shared library. How can I tell it to link with libltdl.a (which is already existing) instead? Thanks, Anurag

2 1