October 2005 - Freeradius-Users - lists.freeradius.org

Fw: Billing and provisioning
by Madhvi Gokool 25 Oct '05

25 Oct '05

Hi As an addendum to below:- Say the user has 500s of connection time left and he replenishes his account (36000 s)- is there another way apart from manually , that we can alter the Max-Monthly-Session ? - it should become 36500 s. We are assuming that the counter was not reset. M ----- Original Message ----- From: "Madhvi Gokool" <madhvin(a)yahoo.com> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Sent: Tuesday, October 25, 2005 9:30 AM Subject: Billing and provisioning > Hello > Here is a the scenario we want to implement :- > > 1. User pays for 10hrs of internet access. We set the Max-Monthly-Serssion > to 36000. > We want to verify the number of seconds used and left for each user on a > daily basis. The results should be mailed to the ISP admin and a mail > sent to each user concerning his usage. When his balance is say 500s, he > is requested to recharge his account. > We are using Freeradius as AAA server. We are not using any databases. > Can anybody recommend a script or open source package that can do the > above? We need to urgently implement the above. > > Regards > M > > - List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html

1 0

counter with Session Octet Limit
by Seferovic Edvin 25 Oct '05

25 Oct '05

Hello, I am using freeRadius 1.0.2, and I would like to limit weekly bandwidth for my VPN ( pptp ) users. So Ive changed the example counter part in my radiusd.conf counter weekly_traffic { filename = ${raddbdir}/db.weekly key = User-Name count-attribute = Acct-Input-Octets reset = weekly counter-name = Weekly-Traffic check-name = Max-Weekly-Traffic allowed-servicetype = Framed-User } The counter works for it self - It checks the Max-Weekly-Traffic attribute in my ldap tree for a specific user, calculates the rest, but then it tries to add Session-Timeout attribute to Access-Accept packet. This is not working / attribute is not being added, and besides - it is the wrong attribute. Is it possible for the counter module to add the value, which is usualy added as Session-Timeout, as Session-Octets-Limit? Regards, Edvin Seferovic

3 2

recommended restart-wrapper for freeradius
by Tariq Rashid 25 Oct '05

25 Oct '05

hi - we're having the freeradius 1.0.2 daemon dying occasionally for mysterious reasons - we're still investuigating the cause. however - when it dies the radiusd.pid file is not removed. this causes problems for most restart-wrappers ... running in the foreground in an infinite loop is also not ideal as this means the daemon doesn't run in threaded mode. can anyone recommend a good way to monitor/restart the daemon. tariq

3 2

Re: Re: how to config b2bua and freeradius together?
by zhangshuai 25 Oct '05

25 Oct '05

Dear Alan DeKok, Thanks for your reply. Could you please tell me how to run radius client with b2bua? Here is my b2bua config file: <B2BUA_Configuration> <SIP> <Local> <Port>5065</Port> <Transport>UDP</Transport> </Local> <Proxy_Server> <Address>218.97.252.34</Address> <Port>5060</Port> </Proxy_Server> <Registration> <Register>no</Register> <Address>218.97.252.41</Address> <Port>5060</Port> <Expires>600</Expires> </Registration> </SIP> <RADIUS> <Local> <Authentication_Port>1812</Authentication_Port> <Accounting_Port>1813</Accounting_Port> </Local> <Billing_Server> <Address>218.97.252.41</Address> <Authentication_Port>1812</Authentication_Port> <Accounting_Port>1813</Accounting_Port> <Password>testing123</Password> </Billing_Server> </RADIUS> <PrePaid> <Billing> <Option>mandatory</Option> <Refresh_Time>60</Refresh_Time> <Extract_User_Id_From>Proxy-Authorization</Extract_User_Id_From> <User_Id_Decode_Scheme>Basic</User_Id_Decode_Scheme> </Billing> <Use_SIP_INFO>no</Use_SIP_INFO> <Use_HTTP>no</Use_HTTP> </PrePaid> <Redundancy /> </B2BUA_Configuration> 218.97.252.34 is my ser proxy and 218.97.252.41 is radius server. I run b2bua like this: #cd \usr\local\vocal\bin #./b2bua -d -v LOG_DEBUG_STACK -c b2bua-cfg.xml Then b2bua could send the request to radius server. >"zhangshuai" <zhangshuai(a)goldentek.biz> wrote: >> Now I found that b2bua can talk to radius server directly, without >> using radius client. > > Uh, no. The only way to talk to a RADIUS server is via RADIUS. > >> rad_check_password: Found Auth-Type System >> auth: type "System" >> Processing the authenticate section of radiusd.conf >> modcall: entering group authenticate for request 0 >> modcall[authenticate]: module "unix" returns notfound for request 0 > > So... the user isn't in /etc/passwd. > >> And this is part of my radcheck table on radius server: >> >> +----+-----------------------------+---------------+----+-------+ >> | id | UserName | Attribute | op | Value | >> +----+-----------------------------+---------------+----+-------+ >> | 1 | 41001(a)localhost.localdomain | User-Password | := | 1001 | >> | 2 | 41004(a)localhost.localdomain | User-Password | := | 1004 | >> +----+-----------------------------+---------------+----+-------+ >> >> Could anyone tell me how to config b2bua and radius to make them work fine? > > Don't set Auth-Type. > > Alan DeKok. >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > = = = = = = = = = = = = = = = = = = = =

2 1

Billing and provisioning
by Madhvi Gokool 25 Oct '05

25 Oct '05

Hello Here is a the scenario we want to implement :- 1. User pays for 10hrs of internet access. We set the Max-Monthly-Serssion to 36000. We want to verify the number of seconds used and left for each user on a daily basis. The results should be mailed to the ISP admin and a mail sent to each user concerning his usage. When his balance is say 500s, he is requested to recharge his account. We are using Freeradius as AAA server. We are not using any databases. Can anybody recommend a script or open source package that can do the above? We need to urgently implement the above. Regards M

1 0

how to config b2bua and freeradius together?
by zhangshuai 24 Oct '05

24 Oct '05

Dear all, I intend to make use of b2bua-1.5.0 to do prepaid together with freeradius-1.0.4 and ser-0.8.14. I use this scenario to set up a call: ----- |UA2| ----- ^ | |6 | ----- 5 ------- 4 --------------- ----- 1 | |<-----------| |<--------| | |UA1|---->|SER| 2 |B2BUA| 3 |radius server| ----- | |----------->| |-------->| | ----- ------- --------------- Now I found that b2bua can talk to radius server directly, without using radius client. However, I received "access reject message" from radius server when I tried to initiate a call. Here is the debug message on radius server: rad_recv: Access-Request packet from host 218.97.252.38:1024, id=2, length=71 User-Name = "41001" User-Password = "." NAS-IP-Address = 218.97.252.38 NAS-Port = 1000 Called-Station-Id = "41004" Calling-Station-Id = "41001" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall[authorize]: module "digest" returns noop for request 0 rlm_realm: No '@' in User-Name = "41001", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 radius_xlat: '41001' rlm_sql (sql): sql_set_user escaped user --> '41001' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Usernam e = '41001' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): User 41001 not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Att ribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '41001' AND usergroup.GroupName = radgroupcheck.GroupName O RDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Att ribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '41001' AND usergroup.GroupName = radgroupreply.GroupName O RDER BY radgroupreply.id' rlm_sql (sql): User 41001 not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns notfound for request 0 modcall: group authenticate returns notfound for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 And this is part of my radcheck table on radius server: +----+-----------------------------+---------------+----+-------+ | id | UserName | Attribute | op | Value | +----+-----------------------------+---------------+----+-------+ | 1 | 41001(a)localhost.localdomain | User-Password | := | 1001 | | 2 | 41004(a)localhost.localdomain | User-Password | := | 1004 | +----+-----------------------------+---------------+----+-------+ Could anyone tell me how to config b2bua and radius to make them work fine? Thanks in advance. Shuai http://www.goldentek.biz

2 1

RHEL v3 and rlm_eap linking problems
by Shane D 24 Oct '05

24 Oct '05

Freeradius 1.0.5 is being installed on a RHEL v3 AMD86_64 box. Freeradius is configured to install and operate within my directory space. Compilation went fine (under my username). But when I tried installing from my account, errors were seen from libtool for some of the modules (rlm_eap) and the server couldn't find some module files. I destroyed the installation directory tree and changed to root then reinstalled. Everything installed (and worked) fine. After comparing the two install logs, I found that when installed as root, the installer used the libtool from the freeradius package. But when installed from my account, the installer used the system libtool (and many issues occurred due to this). More odd is that the libtool command contained a full path specification - so it wasn't due to account PATH differences. Is this a known issue or is it expected for some reason? Shane

2 1

QQ group
by xuxu 24 Oct '05

24 Oct '05

freeradius-users 我创建了一个关于FreeRadius的 QQ 群，有兴趣的华人可以加入，我们一起来研究探讨，互相帮助提高群号码:17076311 不需要验证，任何人都可以加入! 　　　　　　　　　　 2005-10-25

1 0

snapshop build woes on freebsd 5.4-release
by Roy 24 Oct '05

24 Oct '05

hi list, trying to build latest snapshot on freebsd yeilds an error. see snip below. <snip> Making all in lib... gmake[3]: Entering directory `/home/roy/freeradius- snapshot-20051024/src/lib' /home/roy/freeradius-snapshot-20051024/libtool --mode=compile gcc -g - O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall - D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align - Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing- declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS -c dict.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 - Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing- declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS -c dict.c -fPIC -DPIC - o .libs/dict.o In file included from ../include/libradius.h:37, from dict.c:42: /usr/include/sys/socket.h:243: error: redefinition of `struct sockaddr_storage' gmake[3]: *** [dict.lo] Error 1 gmake[3]: Leaving directory `/home/roy/freeradius- snapshot-20051024/src/lib' gmake[2]: *** [common] Error 2 gmake[2]: Leaving directory `/home/roy/freeradius-snapshot-20051024/src' gmake[1]: *** [all] Error 2 gmake[1]: Leaving directory `/home/roy/freeradius-snapshot-20051024/src' gmake: *** [common] Error 2 *** Error code 2 </snip> my system: FreeBSD 5.4-RELEASE i386 GENERIC autoconf-2.59_2 gmake-3.80_2 anyone seeing the same? or had a fix? br, roy

1 0

post-auth and perl module
by Emil Wilmanski 24 Oct '05

24 Oct '05

Hello, I'm using freeradius 1.0.2 where I have implemented some methods using perl module. I have implemented: post_auth, start_accounting, stop_accounting. The post_auth method I use to set some additional parameters for user fe.: ChilliSpot-Max-Total-Octets, Session-Timeout, WISPr-Bandwidth-Max-Up, WISPr-Bandwidth-Max-Down. I want to upgrade freeradius to 1.0.5 but when I start radius server it say that prel module is not allowed in post-auth. So how to set some additional prameters to response to client? Why you remove perl function from post-auth? EW

1 0