June 2005 - Freeradius-Users - lists.freeradius.org

help me
by Umar Draz 29 Jun '05

29 Jun '05

hi dear members! i have install Freeradius-1.0.4 on my linux machine now i want authuntication with Mysql so i have change radiusd.conf file regarding mysql setting when i start the radius i got these errors rlm_sql (sql): Could not link driver rlm_sql_mysql: rlm_sql_mysql.so: cannot open shared object file:No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. i found rlm_sql_mysql.so file in my pc but this file not found so please help me what i can to do? regards Umar Draz ____________________________________________________ Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football http://football.fantasysports.yahoo.com

1 0

MAX_PACKET_LEN setting limiting number of Cisco- Avpair's
by Niall Browne 29 Jun '05

29 Jun '05

Hi After looking through the source code on v 1.148.2.3 I can see that the reason that cisco-avpair += within the users file is not being sent to the firewall for ACL's above a certain number is due to the fact that the maximum Radius Packet size is 4k. This is coded under radius.c for max_packet_len 4096 I can modify the entry to increase the packets size and recompile, which may work in that further cisco-avpair += may be pushed to the firewall, but this will probably cause a number of other problems. Apart from this is there any other way to increase the number of Cisco-Avpair's within freeradius to be pushed to a firewall or is this the maximum ? Thanks, Niall > _____________________________________________ > From: Niall Browne > Sent: Tuesday, June 28, 2005 10:20 AM > To: 'freeradius-users(a)lists.freeradius.org' > Subject: RE: Issue with increasing the number of ACL's in users file > > I sent this week and did not receive a response. > > Since then I have again gone through all files in detail, viewed countless > debugs, and searched all past posts re freeradius, with no success. > > Anyone have any idea what may be causing this or have seen a similar > problem in the past ? > > Thanks, > Niall > > > > _____________________________________________ > From: Niall Browne > Sent: Wednesday, June 22, 2005 8:49 PM > To: 'freeradius-users(a)lists.freeradius.org' > Subject: Issue with increasing the number of ACL's in users file > > Hi > > I am having a problem with an apparent limit on ACL's on my freeradius > servers. I have been running this servers for a number of years, and have > always had the number of ACL's on the users file below 52, and have never > had any problems. > > I noticed as soon as I increased the ACL's above 52 it appeared to > authenticate in the logs, however the auth connection through Cisco VPN > simply continued to try to authenticate and nothing happened. As soon as I > removed the ACL's below 52 and restarted it works fine. > > I dumped the logs > > /usr/local/freeradius/sbin/radiusd -p 1647 -sfxxyz -l stdout > > When I then auth'd and viewed the stdout logs, they are identical for > <52 and then >52 (when compared). The only difference is that the ACL's > after the magic 52 mark do not show in the stout, and this causes my > timeout to fail. When I revert to <52 I can see the last ACL's and all > works fine. > > I have checked through the configs including radiusd.conf however I > cannot find a hard coded limitation on ACL's anywhere. > > Is anyone aware of how to resolve this ? > > Thanks in advance, > Niall > > >

3 2

external script in <defunct> state after execution
by rashad 29 Jun '05

29 Jun '05

Dear developers. Downgrading from 1.0.4 to 1.0.1 without touching anything else solves the problem. So, which version I must use? Is it a bug? Regards, Rashad

2 1

user-profiles
by alan walters 28 Jun '05

28 Jun '05

Radius does not seem to be searching or adding my reply items for my user-profiles from ldap. It does not even look for them?? Does someone have a wonderful solution for how to remedy this DEFAULT Huntgroup-Name == internet, Ldap-Group == ballyvaughan, User-Profile := "cn=ballyvaughan,ou=profiles,o=radius,dc=radiowave,dc=net", Simultaneous-Use := 2 Fall-Through = 0

3 2

problem compiling on Sparc Solaris 9
by Randall Badilla Castro 28 Jun '05

28 Jun '05

Hi: I´m facing a very weird problem compiling on a sun box with gcc 3.4.2 and openssl 0.9.7e openldap. The problem is when ld is running and fails to work on the rlm_eap module saying that there are symbol referencing errors.. sha1_data_problems radeapclient.o pairreplace radeapclient.o and so on. My first findings point that the problems appear with static or shared settings. But for some reason the ld program needs -L/usr/local/ssl/lib so I manage to modify Make.inc and aclocal.m4 (use LD_OPTIONS)... I thinkt that shared compiles fine now with this changes but the static don´t work although --enable-static=NO is used.. Can anybody share ideas how to make it work. PD: How can I disable the compilation of one module?? --

1 0

RE: Issue with increasing the number of ACL's in users file
by Niall Browne 28 Jun '05

28 Jun '05

I sent this week and did not receive a response. Since then I have again gone through all files in detail, viewed countless debugs, and searched all past posts re freeradius, with no success. Anyone have any idea what may be causing this or have seen a similar problem in the past ? Thanks, Niall > _____________________________________________ > From: Niall Browne > Sent: Wednesday, June 22, 2005 8:49 PM > To: 'freeradius-users(a)lists.freeradius.org' > Subject: Issue with increasing the number of ACL's in users file > > Hi > > I am having a problem with an apparent limit on ACL's on my freeradius > servers. I have been running this servers for a number of years, and have > always had the number of ACL's on the users file below 52, and have never > had any problems. > > I noticed as soon as I increased the ACL's above 52 it appeared to > authenticate in the logs, however the auth connection through Cisco VPN > simply continued to try to authenticate and nothing happened. As soon as I > removed the ACL's below 52 and restarted it works fine. > > I dumped the logs > > /usr/local/freeradius/sbin/radiusd -p 1647 -sfxxyz -l stdout > > When I then auth'd and viewed the stdout logs, they are identical for > <52 and then >52 (when compared). The only difference is that the ACL's > after the magic 52 mark do not show in the stout, and this causes my > timeout to fail. When I revert to <52 I can see the last ACL's and all > works fine. > > I have checked through the configs including radiusd.conf however I > cannot find a hard coded limitation on ACL's anywhere. > > Is anyone aware of how to resolve this ? > > Thanks in advance, > Niall > > >

1 0

RE: user-profiles
by alan walters 28 Jun '05

28 Jun '05

The output is debug. Radiusd -xx It does not seem to be even looking for it -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: 28 June 2005 16:06 To: FreeRadius users mailing list Subject: Re: user-profiles "alan walters" <alan(a)aillweecave.ie> wrote: > Radius does not seem to be searching or adding my reply items for my > user-profiles from ldap. It does not even look for them?? > Does someone have a wonderful solution for how to remedy this Run the server in debug mode to see why. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

sql counter clarification and issues
by Ross Tsolakidis 28 Jun '05

28 Jun '05

Hi all, I was hoping someone could shed some light on this problem I'm having. FreeRadius 1.04 Compiled using: ./configure --with-experimental-modules make make install Radius is connecting to a mysql backend. The NAS units are logging to Radius and into SQL. Running in debug mode I see this: Module: Loaded Counter counter: filename = "/usr/local/etc/raddb/db.daily" counter: key = "User-Name" counter: reset = "daily" counter: count-attribute = "Acct-Session-Time" counter: counter-name = "Daily-Session-Time" counter: check-name = "Max-Daily-Session" counter: allowed-servicetype = "Framed-User" counter: cache-size = 5000 rlm_counter: Counter attribute Daily-Session-Time is number 1671 rlm_counter: Current Time: 1119932000 [2005-06-28 14:13:20], Next reset 1119967200 [2005-06-29 00:00:00] Module: Instantiated counter (daily) So the Counter loads just fine and Radius works fine. Looking at that debug, where exactly is it resetting the counter ? In the db.daily ? Because it's not resetting in SQL. Also what is the db.daily ? How do you read that file ? What I'm trying to achieve here is to get mysql to reset the counters its doing, and then start a new row if possible. Within the table radacct. AcctInputOctets AcctOutputOctets. Is it possible to do this ? Does the counter actually do that ? Thanks in advance. Ross.

2 1

ldap groups
by alan walters 28 Jun '05

28 Jun '05

Below is a snip from my radius group search. And below this is the group portion of my radiusd.conf can someone let me know where I am going wrong??? I would like to know how to stop it doing the second search on my ldap for the objectclass = * I don't mind the first one because it has to search ith the filter I asked it to search with but the object class filter search was not asked to be done. Attaché is the snip from my radiusd.conf as well rlm_ldap: Bind was successful rlm_ldap: performing search in o=clients,dc=radiowave,dc=net, with filter (&(radiusGroupName=lisdoonvarna)(mail=alan(a)radiowave.net)) rlm_ldap: object not found or got ambiguous search result rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in mail=alan(a)radiowave.net,vd=radiowave.net,o=clients,dc=radiowave,dc=net, with filter (objectclass=*) rlm_ldap::groupcmp: Group lisdoonvarna not found ????or user not a member rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'o=clients,dc=radiowave,dc=net' radius_xlat: '(mail=alan(a)radiowave.net)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in o=clients,dc=radiowave,dc=net, with filter (&(radiusGroupName=ballyvaughan)(mail=alan(a)radiowave.net)) rlm_ldap::ldap_groupcmp: User found in group ballyvaughan rlm_ldap: ldap_release_conn: Release Id: 0 ldap ldap2 { server = "10.250.3.204" identity = "cn=xxx,dc=radiowave,dc=net" password = xxxxxxxxxxxx basedn = "o=clients,dc=radiowave,dc=net" filter = "(mail=%{User-Name})" start_tls = no access_attr = "dialupAccess" dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 #password_header = "{crypt}" password_attribute = userPassword groupname_attribute = radiusGroupName groupmembership_attribute = radiusGroupName groupmembership_filter = "(mail=%{User-Name})" timeout = 4 timelimit = 3 net_timeout = 1 # compare_check_items = yes # access_attr_used_for_allow = yes

1 0

Re: Freeradius and eDirectory
by Sayantan Bhowmick 27 Jun '05

27 Jun '05

Hi, You need to extract the Self Signed certificate of the CA (from inside the Security Container). Once you have extracted that you need to configure tls_cacertfile in the ldap section of radiusd.conf. You have configured the tls_certfile. Once you do that it should start working. -Sayantan. >>> jmdanner(a)samford.edu 06/27/05 9:20 PM >>> I'm having trouble getting a TLS connection from freeradius to my Novell LDAP Server. I've used Novell's document "Integrating Novell eDirectory with FreeRadius" to set it up. The radius -X log shows "rlm_ldap: could not start TLS Connect error" I've configured ldap.conf to use the same certificate and am able to do a successful search using: ldapsearch -vvv -h gwtemp.samford.edu -x -Z -b o=dxmltemp "cn=jmuser" dn FreeRadius 1.0.4 compiled --with-edir Redhat AS3 update 5 on an IBM p615 openldap-2.0.27-17 openssl-0.9.7a-33.15 Netware 6.5 SP3 on Dell hardware. Mearl Here's the log from radiusd -X: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/usr/local/etc/raddb/certs/cert-srv.pem" tls: certificate_file = "/usr/local/etc/raddb/certs/cert-srv.pem" tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.pem" tls: private_key_password = "whatever" tls: dh_file = "/usr/local/etc/raddb/certs/dh" tls: random_file = "/usr/local/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" rlm_eap: Loaded and initialized type tls mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded LDAP ldap: server = "gwtemp.samford.edu" ldap: port = 389 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "cn=admin,ou=cts,o=dxmltemp" ldap: tls_mode = no ldap: start_tls = yes ldap: tls_cacertfile = "(null)" ldap: tls_cacertdir = "(null)" ldap: tls_certfile = "/usr/local/etc/raddb/certs/GWTEMP-SSL-DNS.b64" ldap: tls_keyfile = "(null)" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "demand" ldap: password = "xxxxxx" ldap: basedn = "o=dxmltemp" ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "nspmPassword" ldap: access_attr = "dialupAccess" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" ldap: groupmembership_attribute = "(null)" ldap: dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes ldap: edir_account_policy_check = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port conns: 0x1016f6c8 Module: Instantiated ldap (ldap) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. rad_recv: Access-Request packet from host 199.20.16.13:33390, id=156, length=58 User-Name = "jmuser" User-Password = "xxxxxxx" NAS-IP-Address = 255.255.255.255 NAS-Port = 199 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "jmuser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for jmuser radius_xlat: '(uid=jmuser)' radius_xlat: 'o=dxmltemp' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to gwtemp.samford.edu:389, authentication 0 rlm_ldap: setting TLS Require Cert to demand rlm_ldap: setting TLS Cert File to /usr/local/etc/raddb/certs/GWTEMP-SSL-DNS.b64 rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Connect error rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 0 modcall: group authorize returns fail for request 0 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 199.20.16.13:33390, id=156, length=58 Discarding duplicate request from client server-network:33390 - ID: 156 --- Walking the entire request list --- Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 156 with timestamp 42c01acf Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 199.20.16.13:33390, id=156, length=58 User-Name = "jmuser" User-Password = "xxxxxxxxx" NAS-IP-Address = 255.255.255.255 NAS-Port = 199 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "jmuser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for jmuser radius_xlat: '(uid=jmuser)' radius_xlat: 'o=dxmltemp' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to gwtemp.samford.edu:389, authentication 0 rlm_ldap: setting TLS Require Cert to demand rlm_ldap: setting TLS Cert File to /usr/local/etc/raddb/certs/GWTEMP-SSL-DNS.b64 rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Connect error rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 1 modcall: group authorize returns fail for request 1 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 199.20.16.13:33390, id=156, length=58 Discarding duplicate request from client server-network:33390 - ID: 156 --- Walking the entire request list --- Waking up in 3 seconds... rad_recv: Access-Request packet from host 199.20.16.13:33390, id=156, length=58 Discarding duplicate request from client server-network:33390 - ID: 156 --- Walking the entire request list --- Cleaning up request 1 ID 156 with timestamp 42c01ad5 Nothing to do. Sleeping until we see a request. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0