August 2005 - Freeradius-Users - lists.freeradius.org

FreeRadius crashing
by Paul Khavkine 24 Aug '05

24 Aug '05

Hi Guys. I have FreeRadius 1.0.4 all of a sudden crash end exit. I have enabled core dumps but cannot find the core file anywhere. Where's the core file supposed to be written ? Thanx Paul

1 0

rlm_exec and retriving RAD_REQUEST attribute values
by Matt morris 24 Aug '05

24 Aug '05

Hello list, This has probably been asked a lot times before, but I just couldn't get the attributes values from accounting request packets with my perl script. I am trying to do some database queries when I received stop accounting request packets, here are the relevant sections of my radiusd.conf and script file: ============= radiusd.conf: ============= modules { exec { wait = yes input_pairs = request } exec custom123 { wait = no program = "/usr/src/myscript.pl %{Acct-Unique-Session-Id} %{User-Name} %{Called-Station-Id}" input-pairs = request output-pairs = reply packet-type = Accounting-Request } } instantiate { exec custom123 expr } accounting { detail unix radutmp sql custom123 } ============================================================= myscript.pl (simplifed the accounting section for the purpose of posting): ============================================================= #!/usr/bin/perl use DBI; use Data::Dumper; use strict 'vars'; use vars qw(%RAD_REQUEST %RAD_REPLY %RAD_CHECK); use Data::Dumper; my %RAD_REQUEST; my %RAD_REPLY; my %RAD_CHECK; use constant RLM_MODULE_REJECT=> 0;# /* immediately reject the request */ use constant RLM_MODULE_FAIL=> 1;# /* module failed, don't reply */ use constant RLM_MODULE_OK=> 2;# /* the module is OK, continue */ use constant RLM_MODULE_HANDLED=> 3;# /* the module handled the request, so stop. */ use constant RLM_MODULE_INVALID=> 4;# /* the module considers the request invalid. */ use constant RLM_MODULE_USERLOCK=> 5;# /* reject the request (user is locked out) */ use constant RLM_MODULE_NOTFOUND=> 6;# /* user not found */ use constant RLM_MODULE_NOOP=> 7;# /* module succeeded without doing anything */ use constant RLM_MODULE_UPDATED=> 8;# /* OK (pairs modified) */ use constant RLM_MODULE_NUMCODES=> 9;# /* How many return codes there are */ &test_call; return RLM_MODULE_OK; } sub authorize { &test_call; return RLM_MODULE_OK; } sub authenticate { if ($RAD_REQUEST{'User-Name'} =~ /^baduser/i) { $RAD_REPLY{'Reply-Message'} = "Denied access by rlm_perl function"; return RLM_MODULE_REJECT; } else { $RAD_REPLY{'h323-credit-amount'} = "100"; return RLM_MODULE_OK; } } sub preacct { return RLM_MODULE_OK; } sub accounting { if ($RAD_REQUEST{'Acct-Status-Type'} eq "Stop") { open(FILEWRITE, "> /downloads/tronsun/testperlfile.log"); print FILEWRITE "Logging RAD Request Attributes\n"; print FILEWRITE "Acct-Unique-Session-Id : $RAD_REQUEST{'Acct-Unique-Session-Id'}\n"; close FILEWRITE; return RLM_MODULE_OK; } else { return RLM_MODULE_NOOP; } } sub checksimul { return RLM_MODULE_OK; } sub xlat { my ($filename,$a,$b,$c,$d) = @_; &radiusd::radlog(1, "From xlat $filename "); &radiusd::radlog(1,"From xlat $a $b $c $d "); local *FH; open FH, $filename or die "open '$filename' $!"; local($/) = undef; my $sub = <FH>; close FH; my $eval = qq{ sub handler{ $sub;} }; eval $eval; eval {main->handler;}; } sub detach { &radiusd::radlog(0,"rlm_perl::Detaching. Reloading. Done."); } sub log_request_attributes { for (keys %RAD_REQUEST) { &radiusd::radlog(1, "RAD_REQUEST: $_ = $RAD_REQUEST{$_}"); } } &accounting(); ========================================================================== End myscript.pl ========================================================================== ============================= My Accounting-Request packet: ============================= Acct-Session-Id = "1124643784.6" h323-connect-time = "2005-08-22 01:04:29" h323-setup-time = "2005-08-22 01:04:25" Cisco-NAS-Port = "SIP/14002-081332c8" Called-Station-Id = "18001112345" Acct-Status-Type = Stop h323-conf-id = "A46B7F2B-0D73-4E75-ABCF-F6CA7140B9D5(a)192.168.1.101" NAS-IP-Address = 123.123.123.123 Acct-Session-Time = 67 Calling-Station-Id = "9871234" h323-disconnect-time = "2005-08-22 01:05:36" Cisco-AVPair = "codec-type-rate=ulaw;useragent=X-Lite release 1103m;" User-Name = "9871234" NAS-Identifier = "Asterisk" NAS-Port = 5070 Acct-Delay-Time = 4 Client-IP-Address = 127.0.0.1 Acct-Unique-Session-Id = "44e82fcfd875db6f" Timestamp = 1124643865 ====================== After the script is ran in freeradius, there is no value in $RAD_REQUEST{'Acct-Status-Type'} and $RAD_REQUEST{'Acct-Unique-Session-Id'} Right now I'm putting the attributes into the arugments when executing myscript.pl (as shown in radiusd.conf), which works fine. But I would like to know the proper way. Please point me the right direction. Thank you very much. _________________________________________________________________ MSN® Calendar keeps you organized and takes the effort out of scheduling get-togethers. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=ht… Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.

2 1

Replaying data with tcpdump/netcat
by Wesley Spadola 24 Aug '05

24 Aug '05

There is probably something pretty simple I'm forgetting, but please bear with me. :) We're in the process of migrating our Cistron server to FreeRADIUS. We are currently testing FreeRADIUS 1.1.0 CVS HEAD because of our need to accept and log MAX TNT TAOS v11 Ascend-* 16bit attributes. We are logging to both ASCII detail files and a MySQL database. We will be using both servers in parallel periodically checking to see if FreeRADIUS keeps up, and eventually shutting down the Cistron server. In the meantime, the NASes will be switched in between the both of them. Because we do not want accounting data terribly out of sync, we are shifting the accounting data over from our live machine to a test machine in increments of a few minutes, and I'm logging such data with "tcpdump -s 1500 -w raw.txt port 1813 and udp". I hope to catch some log data that I can easily replay to the test machine while the accounting is shifted back to our live server. To replay that data. I am using "cat raw.txt | nc -u <ip of test server> radius-acct". When the data starts to flow, I receive this output from radiusd -X: WARNING: Bad RADIUS packet from host x.x.x.x: unknown packet code 212 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. WARNING: Bad RADIUS packet from host x.x.x.x: unknown packet code 102 Nothing to do. Sleeping until we see a request. WARNING: Bad RADIUS packet from host x.x.x.x: unknown packet code 171 Nothing to do. Sleeping until we see a request. WARNING: Malformed RADIUS packet from host x.x.x.x: too long (length 29290 > maximum 4096) Nothing to do. Sleeping until we see a request. WARNING: Malformed RADIUS packet from host x.x.x.x: too long (length 14643 > maximum 4096) Nothing to do. Sleeping until we see a request. WARNING: Bad RADIUS packet from host x.x.x.x: unknown packet code 0 Nothing to do. Sleeping until we see a request. WARNING: Malformed RADIUS packet from host x.x.x.x: too short (received 4 < minimum 20) Nothing to do. Sleeping until we see a request. WARNING: Malformed RADIUS packet from host x.x.x.x: too long (length 12294 > maximum 4096) Nothing to do. Sleeping until we see a request. I realize that the accounting port may not understand and handle authorization requests, but I do know that there are /some/ accounting requst packets in this raw file that FR should be handling. Should I not be seeing debug lines that reference these accounting requests logging to ASCII detail files or SQL INSERT/UPDATE s? I'm also using -s 0 and -s 512 in tcpdump in case that may be an issue. Still no dice. Am I using tcpdump/netcat in the correct manner? Should I capture /much more data/ for FreeRADIUS to work this way? Is there something else I could do to capture raw UDP streams and replay them? Thanks for all the help. I'm new to RADIUS, be gentle. :) Wes

3 2

Problem with PEAP and LDAP
by Carlos Martínez-Troncoso Cera 24 Aug '05

24 Aug '05

Hello. We are trying to use FreeRadius with PEAP and LDAP. Our access point is a 3Com 8750, is talking with a FreeRadius 1.0.4, Freeradius talks with LDAP (Sun One Messaging Server 5.1) and our PEAP clients are Windows XP and 2000. First we configured FreeRadius with LDAP, it works well, then we tried to use this with EAP, it works when we use local users, but when we try to authenticate and authorize PEAP users in LDAP, it doesn´t work. The error is: modcall: entering group authenticate for request 5 rlm_eap: Request found, released from the list rlm_eap: EAP/mschapv2 rlm_eap: processing type mschapv2 Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 5 rlm_mschap: Told to do MS-CHAPv2 for cmartinez with NT-Password rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modcall[authenticate]: module "mschap" returns reject for request 5 modcall: group Auth-Type returns reject for request 5 I was looking how Sun ONE stores the passwords, it uses SSHA (Salted Secure Hashing Algoritm), I think this is the problem, because I suposse it looks for NT-LM Hashing passwords, what can I do and where can I find info about it? Thank you in advance. Carlos

3 4

Freeradius denies auth when "Framed-IP-Address" set
by Gerret Apelt 24 Aug '05

24 Aug '05

Hi all -- Debian Sarge 2.4.27-2-386 kernel freeRadius (dpkg version 1.0.2-4) MySQL Server (dpkg version 4.1.11a-4) I have been using FreeRadius successfully for half a year. All my setup does is authenticate dialup connections. Radius auth requests come in from a NAS, and once authentication has been successful, the NAS will assign an IP address out of its pool. I use mysql to store 'User-Password' attribute/value pairs, where the password is stored in cleartext (there is PAP and CHAP authentication). This all works very well. I am now trying to have FreeRadius also assign IP Address and Netmask to a subset of the user accounts, and that's where I'm getting stuck: As soon as I add the additional attributes "Framed-IP-Address" and "Framed-IP-Netmask" to the table, FreeRadius will reject the authentication request. When using PAP, radius.log reports: Wed Aug 24 09:31:27 2005 : Auth: Login incorrect: [gerret/testme] When using CHAP, radius.log reports: Wed Aug 24 09:33:25 2005 : Auth: Login incorrect (rlm_chap: Clear text password not available): [gerret/<CHAP-Password>] This issue goes away as soon as I delete rows with id 1343 and 1344 below: mysql> select id, username, attribute, value, op from login_accounts where username='gerret'; +------+----------+-------------------+----+---------------+ | id | username | attribute | op | value | +------+----------+-------------------+----+---------------+ | 414 | gerret | User-Password | == | testme | | 1343 | gerret | Framed-IP-Address | == | 65.166.58.202 | | 1344 | gerret | Framed-IP-Netmask | == | 255.255.254.0 | +------+----------+-------------------+----+---------------+ When running in full debug mode, FreeRadius outputs the exact queries it fires at the database. I have run these queries manually: the 'authorize_check_query' returns the three rows listed above. All other queries return the empty set. Then at the end of the debug output: rlm_sql (sql): No matching entry in the database for request from user [gerret] rlm_sql (sql): Released sql socket id: 2 modcall[authorize]: module "sql" returns notfound for request 7 modcall: group authorize returns ok for request 7 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [gerret/testme] (from client north port 0 cli 00:02:6F:37:D9:D4) Am I filling the wrong rows into the database? I dont understand how authentication can fail due to the addition of two extra attributes -- especially since the queries still return the "User-Password" information. It looks like this post describes a similar issue: http://lists.cistron.nl/pipermail/freeradius-users/2005-January/039705.html Any help on this is much appreciated :) cheers Gerret

2 1

Re: Mobile phone authentication
by sean 24 Aug '05

24 Aug '05

Hi, If I understand you properly you are trying to authenticate users by their mobile phone number.If that's right you need Kannel. You can download the latest version from http://www.kannel.org There is a bit of a learning curve but once you have authenticated the user you can pass them off to your Radius billing system. I presume that the authentication will arrive via SMS, WAP or HTTP if it's 3G. I hope this helps. If you need more advice you can email me at sean(a)topup.ie Regards, Sean

1 0

Constructing imcoming message.
by Iandc Davies 24 Aug '05

24 Aug '05

Hi all, I'm trying to construct a simple program that will allow me to take some information from another source (possibly a pointer to a structure passed in) and populate the RADIUS_PACKET template. A separate process will then be used to send this message over UDP to the radius server. The information I'm trying to parse is as follows (these are test values only) :- Code=1 packet->code Identifier=1 (can increase due to how many requests) packet->id Length=total length of message packet->data_len Authenticator=32 octets (random to send to RADIUS but md5 hashed on reply) packet->vector Attributes: packet->data NAS-IP-Address=eg. d5 89 45 26 (213.137.69.38) PW_NAS_IP_ADDERSS NAS-PORT-TYPE=5 (virtual) PW_NAS_PORT_TYPE User-Name="12345678" PW_USER_NAME Disgest-Response=16 octets PW_DIGEST_REPONSE Digest-Attributes= Realm(1) = "deltathree" PW_DIGEST_REALM Nonce(2) = "3bada1a0" PW_DIGEST_NONCE Method(3) = "INVITE" PW_DIGEST_METHOD URI(4) = "sip:96226491335@213.137.69.38" PW_DIGEST_URI Algorithm(5) = "md5" PW_DIGEST_ALGORITHM User-Name(10) = "12345678" PW_DIGEST_USER_NAME On the right for the Code/Id/length/Authenticator are straight forward, as they have their own types. For the attributes, I'm getting a bit stuck as these are VSA AVP's. I think I've managed to id the functions that I need ( paircreate() and pairadd() ) but unsure how they are used. I've stated what I think each AVP is represented by (as these are #define int) but the VALUE_PAIR structure has name, attribute and type information relating to them. Is the name just a straight car string ? (left hand side of equals above) Any help gratefully received. Ian Davies IMS-SIPAC Software Development Engineer

2 1

piping radacct details to a script
by marc racal 24 Aug '05

24 Aug '05

hi all, is there a way to pipe radacct details to a script before it writes to the log file? how do you do this? thanks. regards, marc -- Get Firefox! http://tinyurl.com/cocg2 The browser you can trust.

2 5

Error compiling cvs-snapshot on FreeBSD 5.4-RELEASE
by Valeriy V. Peshkoff 24 Aug '05

24 Aug '05

Hi! I'm still unable to compile CVS version of freeradius on Freebsd Configure it like that ./configure --prefix=/usr/local/radius Only this seems bad to me ..... checking net/if.h usability... no checking net/if.h presence... yes configure: WARNING: net/if.h: present but cannot be compiled configure: WARNING: net/if.h: check for missing prerequisite headers? configure: WARNING: net/if.h: see the Autoconf documentation configure: WARNING: net/if.h: section "Present But Cannot Be Compiled" configure: WARNING: net/if.h: proceeding with the preprocessor's result configure: WARNING: net/if.h: in the future, the compiler will take precedence configure: WARNING: ## ------------------------------------------ ## configure: WARNING: ## Report this to the AC_PACKAGE_NAME lists. ## configure: WARNING: ## ------------------------------------------ ## checking for net/if.h... yes ...... radius1[root]:.../freeradius-snapshot-20050823 # gmake all gmake[1]: Entering directory `/root/freeradius-snapshot-20050823' Making all in libltdl... gmake[2]: Entering directory `/root/freeradius-snapshot-20050823/libltdl' /usr/local/bin/gmake all-am gmake[3]: Entering directory `/root/freeradius-snapshot-20050823/libltdl' /usr/local/bin/bash ./libtool --mode=compile --tag=CC gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -c -o ltdl.lo ltdl.c mkdir .libs gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -c ltdl.c -fPIC -DPIC -o .libs/ltdl.o ltdl.c:119:5: warning: "HAVE_ARGZ_H" is not defined ltdl.c:131:5: warning: "WITH_DMALLOC" is not defined ltdl.c:229:5: warning: "WITH_DMALLOC" is not defined ltdl.c:563:7: warning: "HAVE_ARGZ_APPEND" is not defined ltdl.c:605:7: warning: "HAVE_ARGZ_CREATE_SEP" is not defined ltdl.c:668:7: warning: "HAVE_ARGZ_INSERT" is not defined ltdl.c:725:7: warning: "HAVE_ARGZ_NEXT" is not defined ltdl.c: In function `rpl_argz_next': ltdl.c:752: warning: cast discards qualifiers from pointer target type ltdl.c:770:7: warning: "HAVE_ARGZ_STRINGIFY" is not defined ltdl.c:1057:5: warning: "HAVE_SYS_DL_H" is not defined ltdl.c: At top level: ltdl.c:1104: warning: function declaration isn't a prototype ltdl.c:1119: warning: function declaration isn't a prototype ltdl.c:1135: warning: function declaration isn't a prototype ltdl.c:1165:5: warning: "HAVE_SHL_LOAD" is not defined ltdl.c:1519:5: warning: "HAVE_DLD" is not defined ltdl.c:1587:5: warning: "HAVE_DYLD" is not defined ltdl.c:1948: warning: function declaration isn't a prototype ltdl.c:1967: warning: function declaration isn't a prototype ltdl.c:1989: warning: function declaration isn't a prototype ltdl.c:1997: warning: function declaration isn't a prototype ltdl.c:2035: warning: function declaration isn't a prototype ltdl.c: In function `presym_open': ltdl.c:2067: warning: cast discards qualifiers from pointer target type ltdl.c: At top level: ltdl.c:2085: warning: function declaration isn't a prototype ltdl.c:2095: warning: function declaration isn't a prototype ltdl.c:2214:5: warning: "HAVE_SHL_LOAD" is not defined ltdl.c:2223:5: warning: "HAVE_DLD" is not defined ltdl.c:2226:5: warning: "HAVE_DYLD" is not defined ltdl.c:2455: warning: function declaration isn't a prototype ltdl.c: In function `foreach_dirinpath': ltdl.c:2684: warning: comparison between signed and unsigned ltdl.c:2693: warning: comparison between signed and unsigned ltdl.c: In function `try_dlopen': ltdl.c:3137: warning: comparison between signed and unsigned ltdl.c: In function `lt_dlpath_insertdir': ltdl.c:3989: warning: comparison between signed and unsigned ltdl.c: In function `lt_dlinsertsearchdir': ltdl.c:4051: warning: cast discards qualifiers from pointer target type ltdl.c: At top level: ltdl.c:2769: warning: unused parameter 'ignored' ltdl.c:1135: warning: unused parameter 'loader_data' ltdl.c:1119: warning: unused parameter 'loader_data' ltdl.c:1104: warning: unused parameter 'loader_data' ltdl.c:1989: warning: unused parameter 'loader_data' ltdl.c:2095: warning: unused parameter 'loader_data' ltdl.c:2085: warning: unused parameter 'loader_data' ltdl.c:2035: warning: unused parameter 'loader_data' ltdl.c:1948: warning: unused parameter 'loader_data' gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -c ltdl.c -o ltdl.o >/dev/null 2>&1 /usr/local/bin/bash ./libtool --mode=link --tag=CC gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -o libltdl.la -rpath /usr/local/radius//lib -no-undefined -version-info 4:0:1 ltdl.lo -lcrypto -lpthread gcc -shared .libs/ltdl.o -lcrypto -lpthread -Wl,-soname -Wl,libltdl.so.4 -o .libs/libltdl.so.4 (cd .libs && rm -f libltdl.so && ln -s libltdl.so.4 libltdl.so) (cd .libs && rm -f libltdl.so && ln -s libltdl.so.4 libltdl.so) ar cru .libs/libltdl.a ltdl.o ranlib .libs/libltdl.a creating libltdl.la (cd .libs && rm -f libltdl.la && ln -s ../libltdl.la libltdl.la) gmake[3]: Leaving directory `/root/freeradius-snapshot-20050823/libltdl' gmake[2]: Leaving directory `/root/freeradius-snapshot-20050823/libltdl' Making all in src... gmake[2]: Entering directory `/root/freeradius-snapshot-20050823/src' gmake[3]: Entering directory `/root/freeradius-snapshot-20050823/src' Making all in include... gmake[4]: Entering directory `/root/freeradius-snapshot-20050823/src/include' gmake[4]: Цель `all' не требует выполнения команд. gmake[4]: Leaving directory `/root/freeradius-snapshot-20050823/src/include' Making all in lib... gmake[4]: Entering directory `/root/freeradius-snapshot-20050823/src/lib' /root/freeradius-snapshot-20050823/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS -c dict.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS -c dict.c -fPIC -DPIC -o .libs/dict.o In file included from ../include/libradius.h:38, from dict.c:42: /usr/include/sys/socket.h:243: error: redefinition of `struct sockaddr_storage' dict.c: In function `dict_stat_free': dict.c:113: warning: passing arg 1 of `free' discards qualifiers from pointer target type dict.c:115: warning: passing arg 1 of `free' discards qualifiers from pointer target type dict.c:125: warning: passing arg 1 of `free' discards qualifiers from pointer target type dict.c: In function `dict_attrbyname': dict.c:1155: warning: comparison between signed and unsigned gmake[4]: *** [dict.lo] Ошибка 1 gmake[4]: Leaving directory `/root/freeradius-snapshot-20050823/src/lib' gmake[3]: *** [common] Ошибка 2 gmake[3]: Leaving directory `/root/freeradius-snapshot-20050823/src' gmake[2]: *** [all] Ошибка 2 gmake[2]: Leaving directory `/root/freeradius-snapshot-20050823/src' gmake[1]: *** [common] Ошибка 2 gmake[1]: Leaving directory `/root/freeradius-snapshot-20050823' gmake: *** [all] Ошибка 2 radius1[root]:.../freeradius-snapshot-20050823 # -- Russia, St. Petersburg Quantum Communications Valeriy V. Peshkov | simps(a)quantum.ru +7 (812) 327-6131 +7 (812) 327-1442

2 4

AW: Mobile phone authentification
by Marc.Schlueter＠comneon.com 24 Aug '05

24 Aug '05

Well, thank you for the correction. Actually a radius server IS involved in authentication process of mobile terminals, no operator could live without it. Nevertheless after further investigation I found out that a radius server wouldn't help me in my scenario without a connection to the operators network (the relevant entity is called GGSN). marc -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Im Auftrag von Alan DeKok Gesendet: Dienstag, 23. August 2005 20:03 An: FreeRadius users mailing list Betreff: Re: Mobile phone authentification <Marc.Schlueter(a)comneon.com> wrote: > I'd like to use FREERADIUS as an authentification method for mobile > phones, but I'm not sure First, it's not "authentification", it's "authentication", without an "f". > Now I was told that RADIUS is the solution. RADIUS is able to detect > the actual sender information and delivers this information to the > proxy/gateway which is then able to insert the missing value into the > sender-header and everybody's happy ;) > > Someone was able to follow my thoughts? Nope. RADIUS doesn't "detect sender information". I'm not sure you understand what RADIUS does. It's just authentication and accounting, for the most part. It doesn't appear to be involved at all in the scenario you described. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0