August 2005 - Freeradius-Users - lists.freeradius.org

Coa and Disconnect Message
by gennaro amelio 04 Aug '05

04 Aug '05

So Alan, FreeRadius can' t send Disconnect Message? Then i think that the better solution is use rlm_sqlcounter and an external apllication that control the session time and send Disconnect message. You are agree with me? Thanks

2 1

Regarding checkrad
by Nurul Faizal M.Shukeri 04 Aug '05

04 Aug '05

Hi all... I'm trying to use checkrad to check for double login. I have read doc/Simultaneous-Use. The problem is when I'm trying to use checkrad, this is the output :- sony# checkrad cisco 10.201.1.3 37 ultrabalad 3706 Timeout: No Response from 10.201.1.3. Timeout: No Response from 10.201.1.3 My ap is cisco 340 and I already enable snmp feature. I don't know what the problem is. Plz help me.

2 6

Dialupadmin docs
by Simon Jones 04 Aug '05

04 Aug '05

Hi, Can anyone point me in the direction of the docs for dialupadmin, just installed Free RADIUS 1.0.4, total newbie so any info would be great. Thanks . Simon Jones SAQ Internet VoIP: 4822813 www.saq.co.uk simon(a)saq.co.uk -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.9.9/62 - Release Date: 02/08/2005

1 0

RE: Cisco, DNIS and ISDN Problems
by Wilhelm Lehmann 04 Aug '05

04 Aug '05

Hi, I don't specify a NAS-Port-Type value, and on the Lucent (Livingston) then it doesn't matter if the user is Async or ISDN, it works. I tried a default of NAS-Port-Type = Async|ISDN and on the Livingston it still works, ie a user can still connect Async or ISDN but not on the cisco NAS. On the Cisco he can only connect Async. The only difference in ANY of my setups between the Lucent and the Cisco is client 196.45.xx.xx { secret = xxxx shortname = e1-whk-1-gw nastype = livingston } client 196.44.xx.xx { secret = xxxxx shortname = Windhoek-as1 nastype = cisco } But strangely when I switch back to Livingston radius with the same configs as freeradius ISDN and Async works again for the same user on Cisco and Lucent. Wilhelm -----Original Message----- From: jc [mailto:jc@isnet.net] Sent: 04 August 2005 01:06 PM To: Wilhelm Lehmann Subject: Re: Cisco, DNIS and ISDN Problems greetings from the bottom of africa :) On Thu, 4 Aug 2005, Wilhelm Lehmann wrote: > Suddenly we found the ISDN users can't authenticate. how do you define your isdn users in freeradius ? the cisco devices would require a port type together with a port limit if you doing 128K isdn ... j.

1 0

Re: Simple flat file passwords
by Martin.Ward＠uk.neceur.com 04 Aug '05

04 Aug '05

The answer to a simple problem is, naturally, simple, and my thanks go to Alan for pointing out the obvious. The short version is: Configure the passwd module in the modules section thus: modules { ... <any other stuff you want configured> ... passwd text_file { filename = /var/text_file format = "*User-Name:User-Password" } } and configure the authorize section like so: authorize { ... <other authorize stuff, life preprocessing> ... text_file } Now, when I run radtest I get the results I expect: rad_recv: Access-Request packet from host 127.0.0.1:32768, id=164, length=64 User-Name = "mward" User-Password = "feeble" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/auth-detail-20050804' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-20050804 modcall[authorize]: module "auth_log" returns ok for request 1 rlm_passwd: Added User-Password: 'feeble' to config_items modcall[authorize]: module "text_file" returns ok for request 1 modcall: group authorize returns ok for request 1 auth: type Local auth: user supplied User-Password matches local User-Password Sending Access-Accept of id 164 to 127.0.0.1:32768 Finished request 1 Brilliant! |\/|artin -- Senior Network Administrator, NEC (Europe) Ltd. Acton extension: 3379 NEC*Net: 800-44-21-3379 Direct: +44 20 8752 3379 Fax: +44 20 8752 3389 Mobile: +44 7721 869 356

1 0

Dialup-Admin & mysql Problems help plz!
by Nicholas Briere 04 Aug '05

04 Aug '05

hello i just installed Freeradius and Freeradius DialupAdmin (with mysql support) i changed the admin.conf so its using the correct db username/password. When i click on quite a few links Like Create New Group i get this atop of the New Group Page DEBUG(SQL,MYSQL DRIVER): Query: SELECT DISTINCT groupname FROM usergroup; DEBUG(SQL,MYSQL DRIVER): Query Result: then below under the word ' prefrences for new group ' DEBUG(SQL,MYSQL DRIVER): Query: SELECT attribute,value ,op FROM radgroupcheck WHERE groupname = ''; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: DEBUG(SQL,MYSQL DRIVER): Query: SELECT attribute,value ,op FROM radgroupreply WHERE groupname = ''; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: DEBUG(SQL,MYSQL DRIVER): Query: SELECT username FROM usergroup WHERE groupname = '' ORDER BY username; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: Under " create a new User " i get DEBUG(SQL,MYSQL DRIVER): Query: SELECT DISTINCT groupname FROM usergroup; DEBUG(SQL,MYSQL DRIVER): Query Result: im using Debian (sarge) / apache 1.3 / php4 / mysql 4.0.24-10 Any help on this would be great as im Quite new the 'radius' enviroment and these sql errors have caused alot of headaches for me :)

3 3

How to bind user with different PPPoE service
by Nirmal 04 Aug '05

04 Aug '05

Hi i m running freeradius 0-9.0 with mysql on a PPPoE server. i m runinng two different PPPoE service. can i bind a user to perticular PPPoE service using radius ? With Regards Thanks in Advance Nirmal --------------------------------- Start your day with Yahoo! - make it your home page

1 0

=* operator really work in 1.0.2 ?
by Ruslan A Dautkhanov 04 Aug '05

04 Aug '05

Hello ! I use "=*" operator in User-Password attribute for special account, that accept any passwords. User-Password =* anypassword In pre-1.0.0 CVS it works fine. After upgrading to 1.0.2 it is really don't work. Is it bug or some configuration changes must be applied? Is any known work-arounds exists? Thanks a lot. -- Ruslan A Dautkhanov

1 0

RE: How to connect freeradius and SER!
by Jose Divino de Lima 03 Aug '05

03 Aug '05

Hello.. It's possible. We've a SER that authenticate in a freeRadius. Please, fell free to send me an email (jdlima(a)prolan.com.br) and I can help you. Lima -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org on behalf of Alan DeKok Sent: Wed 3/8/2005 23:24 To: zhu lizhong; FreeRadius users mailing list Cc: Subject: Re: How to connect freeradius and SER!

1 0

How to connect freeradius and SER!
by zhu lizhong 03 Aug '05

03 Aug '05

Hello, guys: I try ot connect Freeradius and SER. when i include the dictionary.ser in dictionary, the ser tells me that it can nor open the dictionary.ser. anyone knows how to fix it? thanks in advance! zhu

2 1