July 2005 - Freeradius-Users - lists.freeradius.org

Problem with Aruba Attributes
by alfonso celestino 18 Jul '05

18 Jul '05

Hi, everybody I am using freeradius 1.0.2. I am treating to use Attributes of aruba, for what I had to add dictionary.aruba file to the directory: /usr/local/radius/share/freeradius/, and, in the file: /usr/local/radius/etc/raddb/dictionary, I add the following line: $INCLUDE/usr/local/radius/share/freeradius/dictionary.aruba but, I have a problem when I Execute freeradius. I will be grateful, that could say to me the problem that I am committing. here is the error: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/radius/etc/raddb/proxy.conf Config: including file: /usr/local/radius/etc/raddb/clients.conf Config: including file: /usr/local/radius/etc/raddb/snmp.conf Config: including file: /usr/local/radius/etc/raddb/eap.conf Config: including file: /usr/local/radius/etc/raddb/sql.conf main: prefix = "/usr/local/radius" main: localstatedir = "/usr/local/radius/var" main: logdir = "/usr/local/radius/var/log/radius" main: libdir = "/usr/local/radius/lib" main: radacctdir = "/usr/local/radius/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/radius/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/radius/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/radius/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary Errors reading dictionary: dict_init: /usr/local/radius/etc/raddb/dictionary[15]: Couldn't open dictionary " /usr/local/radius/share/freeradius/dictionary.aruba": No such file or directory Errors reading radiusd.conf dictionary.aruba file: # # dictionary.aruba # # Version: $Id$ # # VENDOR Aruba 14823 ATTRIBUTE Aruba-Admin-ole 4 String Aruba ATTRIBUTE Aruba-Priv-Admin-User 3 Integer Aruba ATTRIBUTE Aruba-Vlan 2 Integer Aruba ATTRIBUTE Aruba-User-Role 1 String Aruba ___________________________________________________________ Do You Yahoo!? La mejor conexión a Internet y <b >2GB</b> extra a tu correo por $100 al mes. http://net.yahoo.com.mx

1 0

Re: freeradius performance & cpu usage
by Fechete Raul 18 Jul '05

18 Jul '05

Nicolas Baradakis wrote: >> what bothers me is that the freeradius is handling such a small >> amount of authorizations, and keeping the processor usage below >> 10%. (?!) why doesn't it take 90% and do in the mean time more work? > Perhaps the client doesn't send enough requests to make the server > busy. How do you make your tests? thank you for your answer. that might just be it! :-) i have a test client also programmed by a colleague, that starts a number of threads (for each authorization one) that in the beginning wait for a semaphore. after all threads are ready, the semapfore is switched to green and all authorization requests are sent in a burst. maybe it needs some tuning.. anyway, do you know any radius eap-sim test clients that work for sure? regards, r.

2 1

accounting to db - duplicate entrys & missing stop time?
by Roger Kristiansen 18 Jul '05

18 Jul '05

2 3

freeradius performance & cpu usage
by Fechete Raul 18 Jul '05

18 Jul '05

hello, i have the following problem. i'm running freeradius (with the eap-sim module, and a special module a colleague of mine wrote) on a dual 3 ghz xeon, and all that i'm getting out of it are 25 (?) authorizations per second. i wanted to see just about how bad the module was and short-circuited it. it registers only two functions, an authorization and an accounting one. if they are _empty_, the freeradius manages to get up to 70 auth./sec. no back-end database, no network communication, just the test-clients and the radius with the module returning a simple RLM_MODULE_UPDATED. when using 3 clients with 200 authorization each, the number of threads jumps to 600. that's ok. what bothers me is that the freeradius is handling such a small amount of authorizations, and keeping the processor usage below 10%. (?!) why doesn't it take 90% and do in the mean time more work? if it used all the processor time, i could just scale it maybe and get the performance i need, but this way, the computer remains practically unused. thank you, raul f.

3 2

MS AD, LDAP works -> how to check for group membership?
by Shelbyville.Unwired 18 Jul '05

18 Jul '05

I would like to check group membership before authenticating user login requests. I currently have radiusd.conf setup such that all users can login. However after spending several days reading man pages, and searching these archives I haven't found the key that unlocks my problem. radiusd.conf # <snip> ldap { server = "xx.xx.xx.xx" # ad server address identity = "cn=some_user,cn=users,dc=domain,dc=com" # bind account password = "xxx" # bind account password basedn = "cn=users,dc=domain,dc=com" # base dn filter = "(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" # uid start_tls = no # nope dictionary_mapping = ${raddbdir}/ldap.attrmap # default ldap_connections_number = 5 # why not password_attribute = userPassword # no need to explain # ok this is where things get real fuzzy - I've read rlm_ldap several times... timeout = 4 timelimit = 3 net_timeout = 1 } Users file remains untouched. Specifically what else do I need to if a user is a member of XYZ_group and if so authenticate them. Any help would be greatly appreciated. TYIA.

2 1

edir + cert problem
by garry crothers 18 Jul '05

18 Jul '05

freeradius 1.0.4 compiled with -edir support on Solaris 9. After configuring and running freeradius, I issue a query from the command line radtest VALID-USER VALID-USER-PASSOWRD localhost 389 testing123 I seem to be getting an error rlm_ldap: could not set LDAP_OPT_X_TLS_CACERTFILE option to /opt/sfw/etc/raddb/certs/barney.b64 I have checked that I have correctly exported the certificate from the novell server in question....and tried setting the premissions to 777 I have done a search of the online docs but cant find anything appropriate, anyone got any ideas... Here is the debug message from radiusd -X -f bash-2.05# clear You have new mail in /var/mail/root bash-2.05# radiusd -X -f Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded LDAP ldap: server = "nds02.XXX.COM" ldap: port = 389 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "cn=admin" ldap: tls_mode = no ldap: start_tls = yes ldap: tls_cacertfile = "/opt/sfw/etc/raddb/certs/barney.b64" ldap: tls_cacertdir = "(null)" ldap: tls_certfile = "(null)" ldap: tls_keyfile = "(null)" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "demand" ldap: password = "" ldap: basedn = "o=XXX,ou=Staff " ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "nspmPassword" ldap: access_attr = "uid" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" ldap: groupmembership_attribute = "(null)" ldap: dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes ldap: edir_account_policy_check = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP userPassword mapped to RADIUS User-Password rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id conns: 104210 Module: Instantiated ldap (ldap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "yes" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 User-Name = "VALID-USER" User-Password = "VALID-USERS-PASSWORD" NAS-IP-Address = 255.255.255.255 NAS-Port = 389 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "gcrother", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 8 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for gcrother radius_xlat: '(uid=VALID-USER)' radius_xlat: 'o=XXX,ou=Staff ' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to nds02.XXX.com:389, authentication 0 rlm_ldap: setting TLS CACert File to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: could not set LDAP_OPT_X_TLS_CACERTFILE option to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: setting TLS Require Cert to demand rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Success rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 0 modcall: group authorize returns fail for request 0 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 Discarding duplicate request from client localhost:34968 - ID: 195 --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 195 with timestamp 42db7619 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 User-Name = "VALID-USER" User-Password = "VALID-USER-PASSWORD" NAS-IP-Address = 255.255.255.255 NAS-Port = 389 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "gcrother", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 users: Matched entry DEFAULT at line 8 modcall[authorize]: module "files" returns ok for request 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for gcrother radius_xlat: '(uid=VALID-USER)' radius_xlat: 'o=XXX,ou=Staff ' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to nds02.XXX.COM:389, authentication 0 rlm_ldap: setting TLS CACert File to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: could not set LDAP_OPT_X_TLS_CACERTFILE option to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: setting TLS Require Cert to demand rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Success rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 1 modcall: group authorize returns fail for request 1 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 Discarding duplicate request from client localhost:34968 - ID: 195 --- Walking the entire request list --- Waking up in 3 seconds... ^C tia Garry Crothers -- Regards Garry Crothers

1 0

RE: ippool problem
by Jamal Taweel 17 Jul '05

17 Jul '05

I believe that he should use different file names of session-db, and ip-index for the two pools. May be he used the same file names for the two pools. Also he should delete them from ${raddbdir}/ before he start with creating the pools. -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of milver nisay Sent: Friday, July 15, 2005 10:44 AM To: 'FreeRadius users mailing list' Subject: RE: ippool problem What does radiusd –X tells you? Can you post more info from your accounting and post-auth section? _____ From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of abernabe(a)mutua-mad.es Sent: Friday, July 15, 2005 7:42 AM To: freeradius-users(a)lists.freeradius.org Subject: ippool problem Hello, I´m trying to configure a FreeRadius 1.0.4 in Red Hat 8.0. Everything works OK until I add the ippool in the "post-auth" and "accounting" section. When I start the server I get always the error "Segmentation Fault" after loading radutmp, just when it tries to load the ippool in the "accounting" section I have the following configuration in the ippool module: ippool 2 { range-start = 172.20.1.1 range-stop = 172.20.1.254 netmask = 255.255.255.0 cache-size = 254 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 0 } Do you know if I´m doing something wrong? Thanks ************************************************************************************* The contents of this email and any attachments are confidential. It is intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to any one or make copies. ************************************************************************************* PALTEL E-Safety System scanned this email and found NO viruses, vandals or malicious content. ************************************************************************************* Should you need any information or clarifications regarding this system, please do not hesitate to contact our team at the IP Dep. <esafety(a)paltel.net>. *************************************************************************************

1 0

DICTIONNARY PERMISSION - Please Help
by Aime 17 Jul '05

17 Jul '05

All, What can cause dictionry permissions even if /etc/freeradius/dictionnary has rwxrwxrwx as permissions setting I am getting the following: radclient: dict_init: Couldn't open dictionary "/etc/freeradius/dictionary": Permission denied The call of radclient is done from a cgi script . Apache running under user www-data, group www-data, and Freeradius running under user freerad/freerad Thanks. Thanks in advance. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 3

Re: Chillispot FreeRadius
by sean 17 Jul '05

17 Jul '05

On Fri, 2005-07-15 at 20:58 +0200, freeradius-users- request(a)lists.freeradius.org wrote: > > I have setup pinholes for both tcp and udp on ports 1812, 1813 and > 1814. > > They all point to the Radius server on 192.168.1.2. The Chillispot > on > > 192.168.1.6 can direct traffic to the CGI login but sends nothing to > > Radius. What I'm trying to understand is the sequence of events. > When > > the hospotlogin.cgi script gets a request from a Chillispot user > from > > the AP, does the cgi script initiate the Radius request? > > No, it's the chillispot server - not the cgi. Server is in case you > run chilli on the wlan-router the wlan-router, in case you ran chilli > on an linux-box the linux-server. I don't understand, Chilli is running on a WRT54G AP under DD-WRT and directing users to the login. What sends the Radius requests Chilli or the CGI script? This is what Chilli sends to the hotspotlogin.cgi script https://82.141.232.132/cgi-bin/hotspotlogin.cgi/? res=notyet&uamip=192.168.182.1&uamport=3990&challenge=1b23fb5583173741fcfcb91b7b4e5e7a&userurl=&nasid=nas01&mac=00-C0-49-5C-40-48 Radius gets no requests at all. The script just times out while waiting to login. 192.168.182.1 is the DSL modem which has been told to send traffic arriving on ports 1812, 1813, and 1814 to the Radius server. I have also opened port 3990 on the DSL modem to the Radius server. ie. DSL modem static ip 82.141.232.132. all traffic to 192.168.182.1 (82.141.232.132:1812) goes to 192.168.1.2:1812

3 2

segmentation fault
by avudz 16 Jul '05

16 Jul '05

Hello, i just installed freeradius-1.0.4 on MDK 10.1, each time i run the radius always appear "Segmentation fault", in instalation and configuration didn't display any error message. the weird again is radius running well with rpm format. any idea ? here is end of error radiusd -X sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Segmentation fault [root@radius freeradius-1.0.4]# ldd /usr/local/radius/sbin/radiusd linux-gate.so.1 => (0xffffe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x40023000) libradius-1.0.4.so => /usr/local/radius-bali/lib/libradius-1.0.4.so (0x40050000) libltdl.so.3 => /usr/local/lib/libltdl.so.3 (0x40064000) libdl.so.2 => /lib/libdl.so.2 (0x4006b000) libnsl.so.1 => /lib/libnsl.so.1 (0x4006e000) libresolv.so.2 => /lib/libresolv.so.2 (0x40081000) libpthread.so.0 => /lib/tls/libpthread.so.0 (0x40092000) libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x400a3000) libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x401a3000) libc.so.6 => /lib/tls/libc.so.6 (0x401d4000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) [root@radius freeradius-1.0.4]# uname -a Linux radius 2.6.8.1-10mdk #1 Wed Sep 8 17:00:52 CEST 2004 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz unknown GNU/Linux [root@radius freeradius-1.0.4]# gcc -v Reading specs from /usr/lib/gcc/i586-mandrake-linux-gnu/3.4.1/specs Configured with: ../configure --prefix=/usr --libdir=/usr/lib --with-slibdir=/lib --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --disable-checking --enable-long-long --enable-__cxa_atexit --enable-clocale=gnu --disable-libunwind-exceptions --enable-languages=c,c++,ada,f77,objc,java --host=i586-mandrake-linux-gnu --with-system-zlib Thread model: posix gcc version 3.4.1 (Mandrakelinux 10.1 3.4.1-4mdk) -- Best regards, ./avd mailto:mahfudz@cyber-isp.net

2 4