October 2005 - Freeradius-Users - lists.freeradius.org

Vendor Specific Attributes
by Daniel Corbe 24 Oct '05

24 Oct '05

Hello, How do you get FreeRADIUS to stop ingoring VSAs? I have a box that's sending them and FreeRADIUS is simply ignoring them in rad_recv rad_recv: Accounting-Request packet from host 10.10.0.90:1068, id=0, length=58 NAS-Identifier = "acme-sd" Acct-Status-Type = Accounting-On NAS-IP-Address = 10.10.0.90 NAS-Port = 0 Acct-Session-Id = "sd1#28249" I know there are more attributes being sent than that because I can see them in the RADIUS packet. Any help/advice is appriciated. Thanks. -Daniel

2 1

Realm users authentication failure
by Luca Corti 24 Oct '05

24 Oct '05

Hello, I've setup a simple freeradius server to authenticate two local realms, one stripped (no @realm suffix, let's call it myrealm) and the other with @suffix (let's call it otherrealm.com) I use the rlm_sql module to auth against a MySQL backend. I'm using radtest to do inital server testing and everything seems to work so far for users in myrealm, but I get auth-reject for any user(a)otherrealm.com. In the logs of the radius server I see just: Tue Oct 18 23:47:15 2005 : Info: rlm_sql (sql): No matching entry in the database for request from user [user(a)otherrealm.com] This is the relevant configuration. --- proxy.conf --- realm myrelam { type = radius authhost = LOCAL accthost = LOCAL } realm otherrealm.com { type = radius authhost = LOCAL accthost = LOCAL nostrip } --- radiusd.conf --- ... realm suffix { format = suffix delimiter = "@" ignore_default = yes ignore_null = yes } authorize { chap mschap suffix sql } preacct { acct_unique suffix } accounting { sql } session { sql } ... Any idea? thanks in advance -- Luca Corti PGP Key ID 1F38C091

3 7

freeradius compile for solaris express x86
by Tariq Rashid 24 Oct '05

24 Oct '05

hi - i'm having trouble compiling freeradius-1.0.5 for solaris express x86 (nv b23). i can make progress with the configure options ... --with-openssl-includes=/usr/sfw/include/openssl --with-openssl-libraries=/usr/sfw/lib then i have to disable the sql module (remove from src/modules/stable, reconfigure). then i have to manually add "-lmd5" to the LIBS in Make.inc. now i have a .. radclient.c: In function `main': radclient.c:788: error: `RADIUS_DICTIONARY' undeclared (first use in this function) radclient.c:788: error: (Each undeclared identifier is reported only once radclient.c:788: error: for each function it appears in.) which seems like a lot of work ... am i going about this the wrong way - is there an easier way? uname -a gives: SunOS solaris10 5.11 snv_23 i86pc i386 i86pc which may help someone. as far as sql is concerned the libraries are there ... /usr/sfw/lib/libmysqlclient.so /usr/sfw/lib/libmysqlclient.so.12 /usr/sfw/lib/libmysqlclient.so.12.0.0 /usr/sfw/lib/libmysqlclient_r.so /usr/sfw/lib/libmysqlclient_r.so.12 /usr/sfw/lib/libmysqlclient_r.so.12.0.0 tariq

2 1

FreeRadius around the world
by Juan Daniel Moreno 24 Oct '05

24 Oct '05

Hi everyone!! I have a question really important for my personal researches. Do you know how many or which entreprises work today with freeRadius? Are there any banks or security entreprises? Thank you for your answers. Juan Daniel MORENO

2 1

Access-Reject took a long time to return
by hannibal 24 Oct '05

24 Oct '05

hi. i use jradius as authorize module. when jradius sent Access-Reject to freeradius, i got the following logs: rad_recv: Access-Request packet from host 127.0.0.1:32876, id=1, length=62 --- Walking the entire request list --- Waking up in 31 seconds... ////////////////////////// why in 31 seconds, that will take a long time to send Access-Reject Thread 8 got semaphore Thread 8 handling request 67, (7 handled so far) User-Name = "test" User-Password = "test" Message-Authenticator = 0x5cc77d6981e1386f5260a10691c9ce74 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 67 modcall[authorize]: module "preprocess" returns ok for request 67 rlm_jradius: packing attribute User-Name (type: 1; len: 4) rlm_jradius: packing attribute User-Password (type: 2; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) rlm_jradius: packing packet with code: 1 (attr length: 92) rlm_jradius: packing packet with code: 0 (attr length: 0) rlm_jradius: sending 117 bytes to jradius server rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=92 rlm_jradius: reading attribute: type=1; len=4 rlm_jradius: reading attribute: type=2; len=4 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=1052; len=4 rlm_jradius: reading packet: code=0 len=0 rlm_jradius: reading request: config_item: len=0 modcall[authorize]: module "jradius" returns updated for request 67 modcall: group authorize returns updated for request 67 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Processing the post-auth section of radiusd.conf modcall: entering group Post-Auth-Type for request 67 rlm_jradius: packing attribute User-Name (type: 1; len: 4) rlm_jradius: packing attribute User-Password (type: 2; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) rlm_jradius: packing packet with code: 1 (attr length: 92) rlm_jradius: packing packet with code: 3 (attr length: 0) rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4) rlm_jradius: sending 133 bytes to jradius server rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=92 rlm_jradius: reading attribute: type=1; len=4 rlm_jradius: reading attribute: type=2; len=4 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=1052; len=4 rlm_jradius: reading packet: code=3 len=0 rlm_jradius: reading request: config_item: len=16 rlm_jradius: reading attribute: type=1014; len=4 modcall[post-auth]: module "jradius" returns updated for request 67 modcall: group Post-Auth-Type returns updated for request 67 Delaying request 67 for 1 seconds Finished request 67 Going to the next request Thread 8 waiting to be assigned a request --- Walking the entire request list --- Sending Access-Reject of id 1 to 127.0.0.1:32876 Cleaning up request 67 ID 1 with timestamp 435b0861 Nothing to do. Sleeping until we see a request. is there something to configure to reduce the waking up time span?? thank you.

2 1

reject reply
by hannibal 24 Oct '05

24 Oct '05

hi, everyone, i got these logs: ---------------------------------------------------------------------------------------------- modcall: group authorize returns reject for request 37 Delaying request 37 for 1 seconds Finished request 37 // why finished request, but not send reply to client?? Going to the next request Thread 6 waiting to be assigned a request --- Walking the entire request list --- Sending Access-Reject of id 1 to 127.0.0.1:32874 // Sending this message, i think is because of process time out. Cleaning up request 37 ID 1 with timestamp 435cf28f --------------------------------------------------------------------------------------------- what happened behind? i'm a completely newbie. can someone tell me? thank you!!

1 0

Problems installing latest snapshot on Solaris 10
by Torkel Mathisen 24 Oct '05

24 Oct '05

Hi, Has anyone been able to install the latest snapshot on Solaris 10? I get he following error during make: in file included from /usr/include/arpa/inet.h:45, from ../include/libradius.h:33, from dict.c:42: /usr/include/sys/socket.h:260: error: redefinition of 'struct sockaddr_storage' gmake[4]: *** [dict.lo] Error 1 gmake[3]: *** [common] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [common] Error 2 make: *** [all] Error 2 I found something about this error online, but not really a solution. Can anyone help me? Regards, Torkel

1 0

Preside RADIUS Export
by Samson Martinez 24 Oct '05

24 Oct '05

Hello, We have an older NT 4 server running an installation of Preside RADIUS with a multitude of users & profiles. I've exported the users to a .rif file - is this something that can somehow be imported into a freeRADIUS install? I'll search for the "how" if it is possible. Many thanks! -Samson

2 1

accounting scripts ?
by Frank Bonnet 24 Oct '05

24 Oct '05

Hello I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxxxxxx file to perform some simple statistics ? Thanks

4 5

meed help on sering freeradius with MySQL
by Alex M 23 Oct '05

23 Oct '05

Hi, im newbie to Linux, but I was able to install freeradius to red hat 9.0 and it works with text file.. Then I allow it to use SQL, but is start with error that no driver is found in libabry, I did everythin was said in FAQ, such as -disable-shared, but that didnr work, that I figured that all manuals assume that I have to have local MySQL installes, so I have installed it through GUI of RED HAT, then I was trying to recompile the free radius, ./configure had no errors, but then I got errors during "make" most of the errors where something about mysql.. Here is the link to the log file http://lrcommunications.net/ebay/rad_log.txt So can some one tell me how to make it work? Thanks!

3 6