October 2005 - Freeradius-Users - lists.freeradius.org

Accounting attribute rewriting
by Christian Meutes 13 Oct '05

13 Oct '05

Hello, simple question: is there any possibility to rewrite accounting attributes apart from using rlm_attr_rewrite? -christian

1 0

Counter reset
by Andreas Korber 13 Oct '05

13 Oct '05

Hi, i´m running freeradius 1.0.4 with mysql & chilli. Most of them works good :-) But i have some users, which won´t log out. And now comes the problem: if a user has something like 4GB traffic up or download in one session his traffic would get lost and the counter resets. i´m not sure, but is there a buffer wich will overflowed? Or something like this?? Thanks

1 0

dialup admin - problem with users
by Matt Vollmar 12 Oct '05

12 Oct '05

Hi, I searched the archives briefly, but I wasn't sure how to even phrase this issue. I have Freeradius authenticating Chillispot through a MySQL DB. One of the features of Chillispot is to authenticate based on MAC address first before checking username. This sends the MAC as Username and a pre-determined password. I have this working fine, but the problem is that Dialup Admin will not accept usernames with "dashes" in them. Every time I try to edit a user like "00-0E-35-A8-25-9F", it changes the name to "000E35A8259F" which of course does not exist. Anyone know of a quick fix for this? If not, I will send some patches for this and a few other problems I found with Dialup Admin. I just hate delving into a project like this when there is the possibility of a fix existing. Thanks, Matt

2 1

Re: Diameter Server
by David Mitton 12 Oct '05

12 Oct '05

err.. umm.. there is the OpenDiameter project which is more of a tool kit, but you can put together a server from it. A number of people have. http://www.opendiameter.org/ And there are a couple commerical servers; including HP and Interlink Dave. ----- Original Message ----- From: "Alan DeKok" <aland(a)ox.org> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Subject: Re: Diameter Server Date: Wed, 12 Oct 2005 10:43:21 -0400 > > "Ashwin Gobind" <Ashwin.Gobind(a)vodacom.co.za> wrote: > > Hi all. Does anyone know of a stable implantation of a Diameter server ? > > No. There's "wire diameter", which was a student project in Taiwan, > from what I recall. But there's no real open source diameter server. > > Why do you need a diameter server? Are there any diameter clients > you're using? > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 3

Using MySQL with Freeradius
by Sonesh Patel 12 Oct '05

12 Oct '05

Hi, I have got Freeradius working on a linux machine. It is authenticating users using a standard flat file in the /etc/raddb/users file. However, I now want to use MySQL to enter all the user criteria for authentication. Can someone help me with the following questions: 1) What is the schema of the MySQL database that has to be created 2) How do I include this database into the /etc/raddb/radiusd.conf file Many thanks in advance, Rgds, Sonesh Patel VC-NET 107-112 Leadenhall Street London EC3A 4AH Tel: 0207 398 3529 Fax: 0207 491 9511

2 1

RE: [m0n0wall] RE: access for 24 hours after first login?
by Jonathan De Graeve 12 Oct '05

12 Oct '05

And here the query in case you don't like seconds ;) SELECT HOUR(SEC_TO_TIME(UNIX_TIMESTAMP() - UNIX_TIMESTAMP(AcctStartTime))) FROM radacct WHERE UserName = '%{%k}' LIMIT 1; Then All-Secs-Passed/Max-Secs-Passed should be All-Hours-Passed/Max-Hours-Passed and Max-Hours-Passed specified in Hours instead of seconds Also note this is for MySQL. Don't know if it also works on oracle and Postgres.... -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 Jonathan.de.graeve(a)imelda.be -----Oorspronkelijk bericht----- Van: Jonathan De Graeve [mailto:Jonathan.De.Graeve@imelda.be] Verzonden: donderdag 6 oktober 2005 15:51 Aan: FreeRadius users mailing list CC: m0n0wall(a)lists.m0n0.ch Onderwerp: [m0n0wall] RE: access for 24 hours after first login? This is how I do this Use SQLcounter module Put this in sqlcounter.conf (expecting that sqlcounter is already configged in the radiusd.conf) sqlcounter validity { counter-name = All-Secs-Passed check-name = Max-Secs-Passed sqlmod-inst = sql key = User-Name reset = never query = "SELECT UNIX_TIMESTAMP() - UNIX_TIMESTAMP(AcctStartTime) secs_passed_since_start FROM radacct WHERE UserName = '%{%k}' LIMIT 1" Create in the config dictionary file an attribute of Max-Secs-Passed For example: #ATTRIBUTE My-Local-String 3000 string #ATTRIBUTE My-Local-IPAddr 3001 ipaddr #ATTRIBUTE My-Local-Integer 3002 integer ATTRIBUTE Max-Secs-Passed 3000 integer In radiusd.conf: Authorize {} section: Put this: validity The Max-Secs-Passed var is defined in seconds. So if you want a user only to be able to logon in the first 24hours after his first logon, Max-Secs-Passed should be set to 86400 (60secs * 60minutes * 24) Hope this helps the question I think many people will have. You could use other check or counter-names, its just an example.... You also could combine this with volume limits, max total session time etc... Kind Regards -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 Jonathan.de.graeve(a)imelda.be -----Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Markus Krause Verzonden: donderdag 6 oktober 2005 12:57 Aan: freeradius-users(a)lists.freeradius.org Onderwerp: Re: access for 24 hours after first login? Zitat von Alan DeKok <aland(a)ox.org>: > Markus Krause <krause(a)biochem.mpg.de> wrote: > > i set up freeradius succesfully for authentification against pam and users > file > > :-) > > Please don't use "authentification". It's "authentication". sorry for my poor english, it's not my mother-tongue ... > > now i want to enhance the functionality about the following feature: > > setting up several predefined (guest) accounts with a generated username > and > > password. this account should be valid from the first time it is used > (first > > login) for 24 hours (or even better until 23:59 that day). > > rlm_counter. Set it for 24 hours of access, and "reset=never". i read about this, but does this not mean that the user has an online time of 24 hours (or whatever i set in Max-All-Session-Time), so he can login until he has been active for 24 hours in sum? thanks in advance for your help! markus > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > -- Markus Krause email: krause(a)biochem.mpg.de Computing Center Tel.: 089 - 89 40 85 99 Group Lottspeich / Proteomics Fax.: 089 - 89 40 85 98 --------------------------------------------------------------------- This message was sent using https://webmail.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html --------------------------------------------------------------------- To unsubscribe, e-mail: m0n0wall-unsubscribe(a)lists.m0n0.ch For additional commands, e-mail: m0n0wall-help(a)lists.m0n0.ch

3 3

Microsoft SQL 2000 interface
by Cliff Hayes 12 Oct '05

12 Oct '05

All, Sorry to have to bring up the "M" word, but that's what we have - Microsoft SQL 2000 interfacing with Platypus and Radiator. I searched the FAQ and archives and found no reference to a Microsoft SQL interface. Can I populate my Microsoft SQL DB with freeRadius? If so, how? Thanks, Cliff

4 4

i want to add new attributs
by Harish Gupta 12 Oct '05

12 Oct '05

Hello All, I m Harish Gupta from india, i m working in a Telecom & ISP company as system Administator and I m using freeradius application on linux platform(CentOS4.0) for my dialup users . its working fine, but i want to add a new attribute like "caller-id and calling-id " how can add these attributs plz. help me . Thanx & Regards Harish Gupta System Aministrator India +919828032258

4 6

Diameter Server
by Ashwin Gobind 12 Oct '05

12 Oct '05

Hi all. Does anyone know of a stable implantation of a Diameter server ? �This e-mail is sent on the Terms and Conditions that can be accessed by Clicking on this link http://www.vodacom.net/legal/email.aspx "

2 1

authentication problem
by helmy＠bdg.jalawave.com 12 Oct '05

12 Oct '05

I am currently using freeradius to hotspot service. i have a trouble when authenticate user. For username i used handphone number (example : +65994567), this is based on policy. When i try to login user with that username it was failed. I try to debug, the result is the '+' sign was change to HEXA mode '2B'. I dont have any idea but this. Hope anyone can help me... Thanks, my2 Debug result : ----cut---- modcall[authorize]: module "auth_log" returns ok for request 9 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 9 modcall[authorize]: module "mschap" returns noop for request 9 rlm_realm: No '@' in User-Name = "+123", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 9 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 9 users: Matched DEFAULT at 152 modcall[authorize]: module "files" returns ok for request 9 radius_xlat: '=2B123' rlm_sql (sql): sql_set_user escaped user --> '=2B123' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '=3D2B123' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): User =2B123 not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '=3D2B123' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '=3D2B123' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): User =2B123 not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 9 modcall: group authorize returns ok for request 9 rad_check_password: Found Auth-Type CHAP auth: type "CHAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 9 rlm_chap: login attempt by "+123" with CHAP password rlm_chap: Could not find clear text password for user +123 modcall[authenticate]: module "chap" returns invalid for request 9 modcall: group Auth-Type returns invalid for request 9 auth: Failed to validate the user.

2 1