July 2005 - Freeradius-Users - lists.freeradius.org

Users to IP limit Please help me
by Dumpfbacke 102731 05 Jul '05

05 Jul '05

Hello, I has Freeradius with a Mysql data bank in run. Now I would like to assign the users them there are put down an IP. Also, if the user another IP Use, than they who stand in the data bank should be rejected he(it) by the radius server. How or where I can put this that are limited the users to a certain IP ? Please, Help to me I be in despair -- Weitersagen: GMX DSL-Flatrates mit Tempo-Garantie! Ab 4,99 Euro/Monat: http://www.gmx.net/de/go/dsl

2 2

'Segmentation fault' loading rlm_sql_postgresql
by Achim Friedland 05 Jul '05

05 Jul '05

Hello, is there a known problem with freeradius 1.0.2 and rlm_sql_postgresql? Load the sql.conf just makes my freeradius segfaulting... thx... achim # radiusd -A -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/usr/local/etc/raddb/certs/cert-srv.pem" tls: certificate_file = "/usr/local/etc/raddb/certs/cert-srv.pem" tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.pem" tls: private_key_password = "ahzftest" tls: dh_file = "/usr/local/etc/raddb/certs/dh" tls: random_file = "/usr/local/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = yes tls: check_cert_cn = "(null)" rlm_eap: Loaded and initialized type tls ttls: default_eap_type = "md5" ttls: copy_request_to_tunnel = yes ttls: use_tunneled_reply = yes rlm_eap: Loaded and initialized type ttls Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded SQL sql: driver = "rlm_sql_postgresql" sql: server = "localhost" sql: port = "" sql: login = "radius" sql: password = "pass" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = no sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,E sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,u sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct- sql: accounting_update_query = "UPDATE radacct ? SET FramedIPAddress = '%{Framed-IP-Address}', ? AcctSessionTime = '%{Acct-Session-Time}', ? AcctInputOctets = '%{Accd sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessi{ sql: accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, ' sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSe- sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOc sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTimV sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE Us sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NO sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Segmentation fault

3 3

newbie question basic passwd authentication
by Ramses van Pinxteren 05 Jul '05

05 Jul '05

Hi, I am a complete newbie with radius. I need to configure this for use with a PPTP VPN. The end goal will be that radius is running on a fedora box, and authenticates against a SMBPASSWD file. PPTPd needs chap. but I am getting ahead of myself, irst I need to get a basic system working. I installed the freeradius rpm, and tried to configure some things: file clients.conf: client 127.0.0.1 { secret = testing123 shortname = localhost nastype = other } client 192.168.1.0/24 { secret = testing123 shortname = localnet } File naslist: localhost local other File users: nothing changed, all seemed oke to me. file radius.conf: cutted away some text unix { cache = no cache_reload = 600 passwd = /etc/passwd shadow = /etc/shadow group = /etc/group } When I now start the daemon as root: # radiusd -sfxxyz -l stdout. When I tried to test it from the console again: radtest ramses "OfCourseThisShouldBeSomethingLessObvious" localhost 1 testing123 I see this at my console: rad_recv: Access-Request packet from host 127.0.0.1:32769, id=122, length=58 User-Name = "ramses" User-Password = "OfCourseThisShouldBeSomethingLessObvious" NAS-IP-Address = 255.255.255.255 NAS-Port = 1 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "ramses", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched DEFAULT at 152 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_unix: [ramses]: invalid password modcall[authenticate]: module "unix" returns reject for request 0 modcall: group authenticate returns reject for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 122 to 127.0.0.1:32769 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 122 with timestamp 42ca3387 Nothing to do. Sleeping until we see a request. Ofcourse I tripple checked the typed in password, and I could find nothing wrong with that one. Now I think all I can do is shoult: HELPPPPPPP adoes anyone have any ideas? kind regards, Ramses

2 2

Problem on installing Version 1.0.3 on RedHat 9.0
by Free Radius 05 Jul '05

05 Jul '05

Here is part of the message i got, when i MAKE. Making dynamic in rlm_eap_peap... gmake[10]: Entering directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_peap' gmake[10]: Leaving directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_peap' Making dynamic in rlm_eap_sim... gmake[10]: Entering directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_sim' gmake[10]: Leaving directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_sim' Making dynamic in rlm_eap_tls... gmake[10]: Entering directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_tls' gmake[10]: Leaving directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_tls' Making dynamic in rlm_eap_ttls... gmake[10]: Entering directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_ttls' gmake[10]: Leaving directory `/root/freeradius/src/modules/rlm_eap/types/rlm_eap_ttls' gmake[9]: Leaving directory `/root/freeradius/src/modules/rlm_eap/types' gmake[8]: Leaving directory `/root/freeradius/src/modules/rlm_eap/types' gmake[7]: Leaving directory `/root/freeradius/src/modules/rlm_eap' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_eap' Making static dynamic in rlm_exec... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_exec' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_exec' Making static dynamic in rlm_expr... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_expr' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_expr' Making static dynamic in rlm_fastusers... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_fastusers' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_fastusers' Making static dynamic in rlm_files... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_files' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_files' Making static dynamic in rlm_ippool... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_ippool' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_ippool' Making static dynamic in rlm_krb5... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_krb5' gmake[6]: Nothing to be done for `static'. gmake[6]: Nothing to be done for `dynamic'. gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_krb5' Making static dynamic in rlm_ldap... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_ldap' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_ldap' Making static dynamic in rlm_mschap... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_mschap' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_mschap' Making static dynamic in rlm_ns_mta_md5... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_ns_mta_md5' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_ns_mta_md5' Making static dynamic in rlm_pam... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_pam' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_pam' Making static dynamic in rlm_pap... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_pap' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_pap' Making static dynamic in rlm_passwd... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_passwd' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_passwd' Making static dynamic in rlm_preprocess... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_preprocess' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_preprocess' Making static dynamic in rlm_radutmp... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_radutmp' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_radutmp' Making static dynamic in rlm_realm... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_realm' gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_realm' Making static dynamic in rlm_sql... gmake[6]: Entering directory `/root/freeradius/src/modules/rlm_sql' gmake[7]: Entering directory `/root/freeradius/src/modules/rlm_sql' Making static in drivers... gmake[8]: Entering directory `/root/freeradius/src/modules/rlm_sql/drivers' /usr/bin/gmake -w WHAT_TO_MAKE=static common gmake[9]: Entering directory `/root/freeradius/src/modules/rlm_sql/drivers' Making static in rlm_sql_iodbc... gmake[10]: Entering directory `/root/freeradius/src/modules/rlm_sql/drivers/rlm_sql_iodbc' gmake[10]: Nothing to be done for `static'. gmake[10]: Leaving directory `/root/freeradius/src/modules/rlm_sql/drivers/rlm_sql_iodbc' Making static in rlm_sql_mysql... gmake[10]: Entering directory `/root/freeradius/src/modules/rlm_sql/drivers/rlm_sql_mysql' gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -I../.. -I../../../../include -I'/usr/include' -c sql_mysql.c -o sql_mysql.o sql_mysql.c:39:20: errmsg.h: No such file or directory sql_mysql.c:40:19: mysql.h: No such file or directory sql_mysql.c:47: parse error before "MYSQL" sql_mysql.c:47: warning: no semicolon at end of struct or union sql_mysql.c:48: warning: type defaults to `int' in declaration of `sock' sql_mysql.c:48: warning: data definition has no type or storage class sql_mysql.c:49: parse error before '*' token sql_mysql.c:49: warning: type defaults to `int' in declaration of `result' sql_mysql.c:49: warning: data definition has no type or storage class sql_mysql.c:51: parse error before '}' token sql_mysql.c:51: warning: type defaults to `int' in declaration of `rlm_sql_mysql_sock' sql_mysql.c:51: warning: data definition has no type or storage class sql_mysql.c: In function `sql_init_socket': sql_mysql.c:62: `mysql_sock' undeclared (first use in this function) sql_mysql.c:62: (Each undeclared identifier is reported only once sql_mysql.c:62: for each function it appears in.) sql_mysql.c:65: parse error before ')' token sql_mysql.c:76: warning: implicit declaration of function `mysql_init' sql_mysql.c:77: warning: implicit declaration of function `mysql_real_connect' sql_mysql.c:84: `CLIENT_FOUND_ROWS' undeclared (first use in this function) sql_mysql.c:86: warning: implicit declaration of function `mysql_error' sql_mysql.c:86: warning: format argument is not a pointer (arg 3) sql_mysql.c: In function `sql_check_error': sql_mysql.c:122: `CR_SERVER_GONE_ERROR' undeclared (first use in this function) sql_mysql.c:123: `CR_SERVER_LOST' undeclared (first use in this function) sql_mysql.c:131: `CR_OUT_OF_MEMORY' undeclared (first use in this function) sql_mysql.c:132: `CR_COMMANDS_OUT_OF_SYNC' undeclared (first use in this function) sql_mysql.c:133: `CR_UNKNOWN_ERROR' undeclared (first use in this function) sql_mysql.c: In function `sql_query': sql_mysql.c:151: `mysql_sock' undeclared (first use in this function) sql_mysql.c:160: warning: implicit declaration of function `mysql_query' sql_mysql.c:161: warning: implicit declaration of function `mysql_errno' sql_mysql.c: In function `sql_store_result': sql_mysql.c:175: `mysql_sock' undeclared (first use in this function) sql_mysql.c:181: warning: implicit declaration of function `mysql_store_result' sql_mysql.c:184: warning: format argument is not a pointer (arg 3) sql_mysql.c: In function `sql_num_fields': sql_mysql.c:202: `mysql_sock' undeclared (first use in this function) sql_mysql.c:207: warning: implicit declaration of function `mysql_num_fields' sql_mysql.c:211: warning: format argument is not a pointer (arg 3) sql_mysql.c: In function `sql_num_rows': sql_mysql.c:257: `mysql_sock' undeclared (first use in this function) sql_mysql.c:260: warning: implicit declaration of function `mysql_num_rows' sql_mysql.c: In function `sql_fetch_row': sql_mysql.c:277: `mysql_sock' undeclared (first use in this function) sql_mysql.c:286: warning: implicit declaration of function `mysql_fetch_row' sql_mysql.c:286: warning: assignment makes pointer from integer without a cast sql_mysql.c: In function `sql_free_result': sql_mysql.c:305: `mysql_sock' undeclared (first use in this function) sql_mysql.c:308: warning: implicit declaration of function `mysql_free_result' sql_mysql.c: In function `sql_error': sql_mysql.c:327: `mysql_sock' undeclared (first use in this function) sql_mysql.c:332: warning: return makes pointer from integer without a cast sql_mysql.c: In function `sql_close': sql_mysql.c:346: `mysql_sock' undeclared (first use in this function) sql_mysql.c:349: warning: implicit declaration of function `mysql_close' sql_mysql.c: In function `sql_affected_rows': sql_mysql.c:395: `mysql_sock' undeclared (first use in this function) sql_mysql.c:397: warning: implicit declaration of function `mysql_affected_rows' gmake[10]: *** [sql_mysql.o] Error 1 gmake[10]: Leaving directory `/root/freeradius/src/modules/rlm_sql/drivers/rlm_sql_mysql' gmake[9]: *** [common] Error 2 gmake[9]: Leaving directory `/root/freeradius/src/modules/rlm_sql/drivers' gmake[8]: *** [static] Error 2 gmake[8]: Leaving directory `/root/freeradius/src/modules/rlm_sql/drivers' gmake[7]: *** [common] Error 2 gmake[7]: Leaving directory `/root/freeradius/src/modules/rlm_sql' gmake[6]: *** [static] Error 2 gmake[6]: Leaving directory `/root/freeradius/src/modules/rlm_sql' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/root/freeradius/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/root/freeradius/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/root/freeradius/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/root/freeradius/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/root/freeradius' make: *** [all] Error 2

2 1

RE: sql counter clarification and issues
by Ross Tsolakidis 05 Jul '05

05 Jul '05

Yes the server is receiving accounting packets. The SQL rows are updating every 5 mins, (I have the NAS set to send accounting packets every 5 mins). I run it in debug mode, I see: Module: Loaded SQL Counter sqlcounter: counter-name = "Daily-Session-Time" sqlcounter: check-name = "Max-Daily-Session" sqlcounter: key = "User-Name" sqlcounter: sqlmod-inst = "sqlcca3" sqlcounter: query = "SELECT SUM(AcctSessionTime - GREATEST((%b - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{%k}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '%b'" sqlcounter: reset = "1h" rlm_sqlcounter: Counter attribute Daily-Session-Time is number 1671 rlm_sqlcounter: Check attribute Max-Daily-Session is number 1672 rlm_sqlcounter: num=1, last=h rlm_sqlcounter: Current Time: 1120532709 [2005-07-05 13:05:09], Next reset 1120536000 [2005-07-05 14:00:00] rlm_sqlcounter: num=1, last=h rlm_sqlcounter: Current Time: 1120532709 [2005-07-05 13:05:09], Prev reset 1120532400 [2005-07-05 13:00:00] Module: Instantiated sqlcounter (dailycounter) But no reset. Does anyone have this working, if so, what am I looking for, what am I supposed to see ? Thanks :) Regards, -- Ross -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, 5 July 2005 2:05 AM To: FreeRadius users mailing list Subject: Re: sql counter clarification and issues "Ross Tsolakidis" <Ross.Tsolakidis(a)day3.com.au> wrote: > At midnight every night will it begin a new row in SQL ? I don't know, I've never used the module. > Because at the moment there are no new rows being created, no counters > being reset. Is the server receiving accounting packets? Run it in debug mode with "reset=hour", and spend some time looking at what it's doing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Freeradius 1.0.4 Update - No Chap logins
by Radius 04 Jul '05

04 Jul '05

I did not see this one hit the list. No chap logins are working since the 1.0.4 installation Here is what is showing when I run radius -x This is only happening with those that are logging in through our wholesale service. Anyone logs in locally with the realm does fine. Some log errors. It's not accepting chap log ins. Any help where to look. rlm_unix: Attribute "User-Password" is required for authentication. Cannot use "CHAP-Password". Login incorrect: [rniclh/<CHAP-Password>] (from client usa1 port 228 cli 5208778389) rad_recv: Access-Request packet from host 216.127.146.29:52982, id=50, length=213 User-Name = "rniclh(a)surftheusa.com" >>>> CHAP-Password = 0x014d582cee62362d9063da8b99c2f83c94 Why is it coming through like this? NAS-IP-Address = 63.215.26.191 NAS-Port = 228 Service-Type = Framed-User Framed-Protocol = PPP Ascend-Data-Rate = 31200 Ascend-Calling-Id-Type-Of-Num = Unknown Ascend-Calling-Id-Number-Plan = Unknown Ascend-Xmit-Rate = 46667 Called-Station-Id = "5208294055" Calling-Station-Id = "5208778389" NAS-Identifier = "nas8.tcs1.Level3.net" Acct-Session-Id = "436987031" NAS-Port-Type = Async Ascend-NAS-Port-Format = 2_4_5_5 Attr-102 = 0x6c33 rlm_chap: Setting 'Auth-Type := CHAP' >>>>> Warning: Found 2 auth-types on request for user 'rniclh' But when I do it from another system and radtest it seems to work. rad_recv: Access-Request packet from host 64.240.77.3:33574, id=228, length=73 User-Name = "rniclh(a)surftheusa.com" User-Password = "deleted" NAS-IP-Address = 255.255.255.255 NAS-Port = 500 rlm_sql (sql): Reserving sql socket id: 4

1 2

Freeradius/MySql problem
by Radius 04 Jul '05

04 Jul '05

I currently run ver.0.9.3 I have MySql database that is used with FreeRadius. What were are having a problem with is that if the user logs in with UPPER-NAME or lower-name either one works. I have tried lower_user & lower_pass before/after/no and the radius system still authenticates all UPPER-CASE. With this we are getting double billed by our wholesale provider because they run unix based also and it sees both as valid log ins because we authenticated them. When we built our MySql we use with the setup in FreeRadius. Has anyone else had this and how did you fix this to keep everyone lower case. Thanks Bob Ross

5 31

forming tunnel between two RADIUS server
by kiran kumar gullapalli 04 Jul '05

04 Jul '05

Hi all, actually I formed my question confusingly in previous post. question goes like this Is it possible to form a tunnel between two RADIUS servers which don't have any shared secret between them and knows only IP address of each other and having a certificate issued by same CA. Thanx

2 1

attr_rewrite & regexp
by Jérémy Cluzel 04 Jul '05

04 Jul '05

Hi, I try to rewrite User-Name attr. from "COMPUTER_NAME\\User-Name" to "User-Name". I prefer not to use the "proxy.conf" file because I've a lots of differents "COMPUTER_NAME". I think attr_rewrite will do the job, but I don't know (I'm not very good at regexp...) Thanks Jeremy

1 0

RE: sql counter clarification and issues
by Ross Tsolakidis 04 Jul '05

04 Jul '05

Hi all, Ok I've set it all up, it looks like it's working, when I look in the debug I see: Module: Instantiated sql (sql) Module: Loaded SQL Counter sqlcounter: counter-name = "Daily-Session-Time" sqlcounter: check-name = "Max-Daily-Session" sqlcounter: key = "User-Name" sqlcounter: sqlmod-inst = "sqlcca3" sqlcounter: query = "SELECT SUM(AcctSessionTime - GREATEST((%b - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{%k}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '%b'" sqlcounter: reset = "daily" rlm_sqlcounter: Counter attribute Daily-Session-Time is number 1671 rlm_sqlcounter: Check attribute Max-Daily-Session is number 1672 rlm_sqlcounter: Current Time: 1120445182 [2005-07-04 12:46:22], Next reset 1120485600 [2005-07-05 00:00:00] rlm_sqlcounter: Current Time: 1120445182 [2005-07-04 12:46:22], Prev reset 1120399200 [2005-07-04 00:00:00] Module: Instantiated sqlcounter (dailycounter) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) So I understand what it's meant to do: At midnight every night will it begin a new row in SQL ? So let's say that someone has maintained a connection all day, SQL will create a new row ? Am I understanding this correctly ? Because at the moment there are no new rows being created, no counters being reset. Cheers, thanks again. Regards, -- Ross -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, 30 June 2005 1:41 AM To: FreeRadius users mailing list Subject: Re: sql counter clarification and issues "Ross Tsolakidis" <Ross.Tsolakidis(a)day3.com.au> wrote: > Can you give me an example of how to set the counter to reset in SQL ? No, I said "sqlcounter". It's a separate module. See "experimental.conf" Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1