September 2005 - Freeradius-Users - lists.freeradius.org

RE: radrelay taking too long
by Þórður Ívarsson 14 Sep '05

14 Sep '05

Tune postgresql to not commit data syncronized or the operating system or both. Remove any indexes on the table you are poppulating. Thordur > -----Original Message----- > From: Apu islam [mailto:apu_islam@yahoo.com] > Sent: 14. september 2005 05:57 > To: FreeRadius users mailing list > Subject: radrelay taking too long > > I have an accounting data file (1 GB) that I am pushing off > to a server running freeradius 1,0 w pgsql-voip. It has been > three days but the data is still not done populating the > tables. I see it progressing, but the speed is horrible. > > Anyone knows how I can make this fast ? > > -apu > > ------------------------------ > Do or Do Not, there is no try. > > > > __________________________________ > Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > >

1 0

Any plans on using libtool 1.5?
by Humberto Diogenes 13 Sep '05

13 Sep '05

I'm trying to compile Freeradius 1.0.5 in a Debian Sarge to add PostgreSQL support, but it requires libtool 1.4. I can't install 1.4 because it removes apache2. Trying to compile Freeradius with libtool 1.5.6 returns this: (...) /usr/bin/libtool --mode=link ld \ -module -static -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS dict.o print.o radius.o valuepair.o token.o misc.o log.o filters.o missing.o md4.o md5.o sha1.o hmac.o hmacsha1.o snprintf.o isaac.o crypt.o udpfromto.o rbtree.o -o libradius.a libtool: link: unable to infer tagged configuration libtool: link: specify a tag with `--tag' make[5]: *** [libradius.a] Error 1 make[5]: Leaving directory `/usr/local/src/freeradius-1.0.5/src/lib' make[4]: *** [common] Error 2 make[4]: Leaving directory `/usr/local/src/freeradius-1.0.5/src' make[3]: *** [all] Error 2 make[3]: Leaving directory `/usr/local/src/freeradius-1.0.5/src' make[2]: *** [common] Error 2 make[2]: Leaving directory `/usr/local/src/freeradius-1.0.5' make[1]: *** [all] Error 2 make[1]: Leaving directory `/usr/local/src/freeradius-1.0.5' make: *** [build-simple] Error 2 -- Humberto Diógenes Diginet Brasil -- Esta mensagem foi verificada pelo sistema de anti-virus e acredita-se estar livre de perigo.

1 1

FreeRadius Proxying and Message-Authenticator
by Paolo Rotela 13 Sep '05

13 Sep '05

Hi. I've downloaded FR 1.0.5 whch is supposed to have a bugfix for Message-Authenticator handling in Accounting-* messages. I've tested with radclient, and I'm still having trouble with this attribute. I've posted about it. After that, I upgraded my FreeRADIUS production server with the new 1.0.5, to see if proxying request it can handle ok the attribute, but I'm still having the same results. The scenario is like this: I'm receiving Accounting packets from a Cisco AS5300 with a FR server (now it's 1.0.5). From those, I'm forwarding some realms to certain customers. There is only one, wich is using Cisco Secure ACS, in wich this is happening. AS5300 sends the Accounting-request packet, FR receives and forwards it (in the detail file I don't see any Message-Authenticator attribute set), ACS receives it and replies with an Accounting-response with a Message-authenticator attribute set. FR receives it and discards it with error: Error: Received packet from <IP address hidden> with invalid Message-Authenticator! (Shared secret is incorrect.) I'am missing something? Any help will be very appreciated. Eng. Paolo Rotela CTO Blue Telecom

2 1

BAY Dictionary Attribute Adding
by Jonathan De Graeve 13 Sep '05

13 Sep '05

--- dictionary.bay.orig 2005-09-13 10:58:13.000000000 +0200 +++ dictionary.bay 2005-09-13 10:59:04.000000000 +0200 @@ -81,6 +81,9 @@ ATTRIBUTE Annex-User-Level 100 integer Bay-Networks ATTRIBUTE Annex-Audit-Level 101 integer Bay-Networks +# Contivity Specific Attributes +ATTRIBUTE CES-Group 102 string + # Annex Tunnel Authen Type Values This attribute is necessary for the new Contivity software Please add this to the new freeradius server. J. --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite ---------

2 1

freeradius and freetds
by Duane Cox 13 Sep '05

13 Sep '05

Hello List Does someone have a compile script for setting up freetds? I have compiled/installed freetds 0.63 and recompiled freeradius. But not sure what I am doing wrong. Thanks

2 2

RE: radwtmp
by Jonathan De Graeve 13 Sep '05

13 Sep '05

You need to enable large-file support J. ---Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Rich Verzonden: dinsdag 13 september 2005 20:23 Aan: freeradius-users(a)lists.freeradius.org Onderwerp: radwtmp I just had a FreeRadius server 'crash' because 'radwtmp' filled up to 2GB... I have 'googled' and 'faq'd' but haven't found an answer to: do I need it? can I logrotate it? can I just config it away in radius.conf? I am taking over admin after our setup guy left... still learning. Thanks, Rich - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

radwtmp
by Rich 13 Sep '05

13 Sep '05

I just had a FreeRadius server 'crash' because 'radwtmp' filled up to 2GB... I have 'googled' and 'faq'd' but haven't found an answer to: do I need it? can I logrotate it? can I just config it away in radius.conf? I am taking over admin after our setup guy left... still learning. Thanks, Rich

2 1

RE: custom variable in config files
by Tariq Rashid 13 Sep '05

13 Sep '05

ok - i've worked out how to do this wityh {config:var_name} where var_name can be declared in radiusd.conf or an included file. the %{config:var_name} can be used in a users file easily - in the reply attibutes, in the password condition test too .. but not in the user name... so this works ... # local test user for monitoring and diagnostics test1@proxyradius} User-Password == "test1.proxyradius.%{config:easynet_site}" Reply-Message = "hello from the proxyradius layer %{config:easynet_site}" but this doesn't ... # local test user for monitoring and diagnostics test1@proxyradius.%{config:easynet_site} User-Password == "test1.proxyradius.%{config:easynet_site}" Reply-Message = "hello from the proxyradius layer %{config:easynet_site}" any ideas? i'm using version 1.0.2 on debian 3.1 tariq rashid -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Tariq Rashid Sent: 13 September 2005 16:10 To: FreeRadius users mailing list Subject: custom variable in config files hi - is it possible for me to declare a variable in one inlcuded config file, which is then visible in all the config files? in order to keep the config file as simple as possible, i want to take out the site/server dependent portion into a variable. so at each different site/server i would have an included file with a variable "location=london" or "location=paris" and then this is visible in all other config files eg users: test@${location} .... etc clients.conf shortname = abc.def.${location} is this possible? tariq - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

error 734
by Rob Hoppe 13 Sep '05

13 Sep '05

I have a client in India. They can get here thru one isp but thru the second one it times out with vpn error 734: the ppp link control protocol was terminated. On the second try it goes thru. This sounds like a delay problem on the second ISP's line. Anyone have a solution or timing suggestion?

1 0

line too long error in /usr/local/etc/raddb/users ?
by Drew Weaver 13 Sep '05

13 Sep '05

/usr/local/etc/raddb/acct_users[1]: line too long This is the line: abdacd Auth-Type = Unix any clue? Lol -Drew

2 1