October 2005 - Freeradius-Users - lists.freeradius.org

stripping av pairs
by Massimiliano Liccardo 10 Oct '05

10 Oct '05

hi, i want strip an AV pair only from my proxy-reply. If I use rlm_attr_filter, I have to list all the AV pairs "good". Any idea? -- Massimiliano Liccardo (maX) <liccardo(a)acmesolutions.it> jid:coccolesto@jabber.org sip:maX@macchese.no-ip.org GnuPG public key available on wwwkeys.eu.pgp.net Key ID: D01F1CAD Key fingerprint: 992D 91B7 9682 9735 12C9 402D AD3F E4BB D01F 1CAD "la velocità induce all'oblio, la lentezza al ricordo"

1 0

Crypted Password Problem with DIGEST
by meltem kirisci 10 Oct '05

10 Oct '05

Hello, I am using SIP Express Router(SER) version 0.9.3 and freeRADIUS version 1.0.4. SIP uses digest as authentication scheme. I am trying to keep the user passwords as encrypted in freeRadius DB which is mySql table radcheck. The system is working with plaintext password, but it does not work with encrypted passwords even I tried all type of configurations. My first question is "Does DIGEST work with ENCRYPTED PASSWORDS" ??? Since Digest is a must for SIP. If NOT, what authentication scheme can I use to make SIP work with freeRADIUS? If DIGEST works with encrypted passwords, what should be the configuration files: 1) in radiusd.conf ? 2) What should be the value of "Auth-Type" parameter in radcheck or radgroupchek tables ? 3) What should be the attribute for password in radcheck table ? Is it "User-Password" or "Chap-Password" or "Crypt-Password" ?? I'll appreciate very much if anyone can help. Regards, Meltem Kirisci _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today - it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

1 0

Freeradius from inetd
by Adharsh P 10 Oct '05

10 Oct '05

Hello all, I am trying to start radiusd from inetd.conf. The entry in inetd.conf radius dgram udp wait root /usr/local/sbin/radiusd radiusd I have added the entries in /etc/services/ as radius 1812/udp radacct 1813/udp when I reload inetd, the logs say inetd[940]: /usr/local/sbin/radiusd: exit status (1) netstat -n displays *1812 but not *1813 udp 120 0 *.1812 *.* however radiusd is not accepting any request from the localhost using radclient/radtest. However, when I run radiusd from the command line /usr/local/sbin/radiusd radiusd starts and accepts requests. netstat -n displays udp 0 0 *.1812 *.* udp 0 0 *.1813 *.* I am not able to understand when using inetd, radiusd doesn't start. Am I missing something ? Do I have to modify anything in the configuration files ? I tried looking in the docs and archives, there is no mention on this. Could you please guide me, or give some pointers on where to look for. regards, adharsh.

3 3

RE: Freeradius from inetd
by Jonathan De Graeve 10 Oct '05

10 Oct '05

Put it in your startup scripts? J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 jonathan.de.graeve(a)imelda.be --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite --------- -----Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Adharsh P Verzonden: maandag 10 oktober 2005 7:58 Aan: Alan DeKok; freeradius-users(a)lists.freeradius.org Onderwerp: Re: Freeradius from inetd Hello Alan, Thanks, I am wondering, is there any other way that I can start radiusd automatically after every boot. Thanks and regards, adharsh -------------- > > I am trying to start radiusd from inetd.conf. > Don't. It won't work. > Alan DeKok. -------------- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Online Status with FR & SQL
by Gunther 09 Oct '05

09 Oct '05

I am trying to minimize the failure rate for detecting a user online status using FR105 & MySQL411. Sometimes the AcctStopTime in the radacct table remains 0 even the user is not anymore online for whatever reason (reboot, connection lost or ...). I can therefore not just check if the AcctStopTime for a particular user is 0. Since there is no record when the NAS unit sent the last update to FR and it is not recorded in the radacct table ... how do I know that the AcctStopTime=0 is not a 'leftover' ... Would it make sense to add a TIMESTAMP to the radacct table to record the last update? And would the use of TIMESTAMP for the radacct table produce some form of performance degrade? A TIMESTAMP would allow me to see if the row was updated within Idle-Timeout. Any hints from experience? Thanks, Gunther

2 3

Problem Starting Freeradius
by Linda Pagillo 09 Oct '05

09 Oct '05

Hi everyone: I have had an ongoing problem ever since first installing Freeradius over a year ago. I have Freeradius set to start automatically when my Linux server starts. Sometimes it starts and sometimes it doesn't. The weird thing is that it ALWAYS says that it's [OK] when my system boots whether it starts or not. The only error I have seen is "radius failed to start. subsystem locked". I have Googled this error with no luck. Can anyone help? Thanks! Linda Pagillo Director of Technical Services N2 The Net, LLC lpagillo(a)n2thenet.com 931-372-9179

2 4

Manage Multiple Pools
by jacuesta＠wanadoo.es 09 Oct '05

09 Oct '05

Hello, i have freeradius 1.0.5. installed and running. I would like to use two Ip pools for my users. i have 3 ip Pools: - 1. 192.168.1.1-10 - 2 192.168.1.50-60 - 3 192.168.1.150-160 I would like that whe the first poll is full, the radius continue with the second pool and when this is full continue with the third poll. I have read, and anybody say something about failover, another speak about groupings. I have tried it but i can not do it work. Does anybody now i freeradius can work like a i need, and how can i do. Tahk you ¡Todo tu Wanadoo estés dónde estés! Descarga GRATIS el nuevo miniWanadoo http://busca.wanadoo.es/toolbar2

1 0

radacct log rotation
by Ben 09 Oct '05

09 Oct '05

I was wondering if there was an easy way to rotate the logs every 10 days... It was recommended to me to run a script as a cron job, but I can't find a script that will do the job...

2 1

rlm_perl hang server
by Abdul Lateef 09 Oct '05

09 Oct '05

Hi all, Can anyone explain me why radius is going hang when its receive more 2000 request in one time. I configured rlm_perl and it is working if there is small traffic. But when the traffics reached more than 2000 the radius is stopped. I used example.pl for authentication, authorization and accounting with mysql DB. Can any lead me where is exactly fault. ----------------radius.log------------------ Sun Oct 9 10:27:33 2005 : Info: Detach perl 0x9a26c38 Sun Oct 9 10:27:33 2005 : rlm_perl: rlm_perl::Detaching. Reloading. Done. Sun Oct 9 10:27:33 2005 : Info: detach at 0x9a26c38 returned status 0 Sun Oct 9 10:27:33 2005 : Info: Detach perl 0x9b8c090 Sun Oct 9 10:27:33 2005 : rlm_perl: rlm_perl::Detaching. Reloading. Done. Sun Oct 9 10:27:33 2005 : Info: detach at 0x9b8c090 returned status 0 Sun Oct 9 10:27:33 2005 : Info: Detach perl 0x9c9ba08 Sun Oct 9 10:27:33 2005 : rlm_perl: rlm_perl::Detaching. Reloading. Done. Sun Oct 9 10:27:33 2005 : Info: detach at 0x9c9ba08 returned status 0 Sun Oct 9 10:27:33 2005 : Info: Detach perl 0x9da9e70 Sun Oct 9 10:27:33 2005 : rlm_perl: rlm_perl::Detaching. Reloading. Done. Sun Oct 9 10:27:33 2005 : Info: detach at 0x9da9e70 returned status 0 Sun Oct 9 10:27:33 2005 : Info: Detach perl 0x9eb7f80 Sun Oct 9 10:27:33 2005 : rlm_perl: rlm_perl::Detaching. Reloading. Done. Sun Oct 9 10:27:33 2005 : Info: detach at 0x9eb7f80 returned status 0 Sun Oct 9 10:27:33 2005 : rlm_perl: rlm_perl::Detaching. Reloading. Done. Sun Oct 9 10:27:36 2005 : Info: Using deprecated naslist file. Support for this will go away soon. Sun Oct 9 10:27:36 2005 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Sun Oct 9 10:27:37 2005 : Info: Ready to process requests. -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs

2 1

Re: DATE_SUB (rlm_perl)
by Abdul Lateef 09 Oct '05

09 Oct '05

Hi Alan, Thanx for your reply, i made a function to generate stop and start datetime and it is working well for me. Thank You -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Start your day with Yahoo! - Make it your home page! http://www.yahoo.com/r/hs

1 0