September 2005 - Freeradius-Users - lists.freeradius.org

custom variable in config files
by Tariq Rashid 13 Sep '05

13 Sep '05

hi - is it possible for me to declare a variable in one inlcuded config file, which is then visible in all the config files? in order to keep the config file as simple as possible, i want to take out the site/server dependent portion into a variable. so at each different site/server i would have an included file with a variable "location=london" or "location=paris" and then this is visible in all other config files eg users: test@${location} .... etc clients.conf shortname = abc.def.${location} is this possible? tariq

1 0

freeradius 1.0.4 segmentation fault
by Konstantin Kubatkin 13 Sep '05

13 Sep '05

I'm use Debian/Sarge AND64 and Debian/Sarge I386 If it is used Crypt-Password that freeradius finishes work with segmentation fault 1) root@fenix:/var/log/freeradius# ./start.sh ./start.sh: line 5: 25190 Segmentation fault freeradius -X > /var/log/freeradius/debug.log Press any key to continue... 2) root@fenix:/usr/sbin# ldd freeradius libnsl.so.1 => /lib/libnsl.so.1 (0x00002aaaaabc1000) libresolv.so.2 => /lib/libresolv.so.2 (0x00002aaaaacd8000) libpthread.so.0 => /lib/libpthread.so.0 (0x00002aaaaadec000) libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x00002aaaaaf00000) libradius-1.0.4.so => /usr/lib/freeradius/libradius-1.0.4.so (0x00002aaaab038000) libsnmp.so.5 => /usr/lib/libsnmp.so.5 (0x00002aaaab14e000) libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x00002aaaab2fa000) libltdl.so.3 => /usr/lib/libltdl.so.3 (0x00002aaaab536000) libdl.so.2 => /lib/libdl.so.2 (0x00002aaaab63d000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x00002aaaab740000) libc.so.6 => /lib/libc.so.6 (0x00002aaaab874000) /lib64/ld-linux-x86-64.so.2 => /lib64/ld-linux-x86-64.so.2 (0x00002aaaaaaab000) Press any key to continue... -- Konstantin Kubatkin [KUB-RIPE] [KUB-UANIC] Kherson, TriLogiC Group Fido: 2:468/13@FidoNet Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/postgresql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 2 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = yes main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "before" main: nospace_pass = "before" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = yes mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = yes preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = yes Module: Instantiated preprocess (preprocess) Module: Loaded detail detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (auth_log) Module: Loaded SQL sql: driver = "rlm_sql_postgresql" sql: server = "" sql: port = "" sql: login = "postgres" sql: password = "" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = yes sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 15 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_group_check_query = "" sql: authorize_group_reply_query = "" sql: accounting_onoff_query = "UPDATE radacct ??SET AcctStopTime = (now() - '%{Acct-Delay-Time:-0}'::interval), ??AcctSessionTime = (EXTRACT(EPOCH FROM(now()::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, ??AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}' ??WHERE AcctSessionTime IS NULL AND AcctStopTime IS NULL AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= now()" sql: accounting_update_query = "UPDATE radacct ??SET FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, ??AcctSessionTime = (EXTRACT(EPOCH FROM(now()::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint) ??WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_update_query_alt = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, ??AcctSessionTime, AcctAuthentic, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??ServiceType, FramedProtocol, FramedIPAddress) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', (now() - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??'%{Acct-Session-Time}', '%{Acct-Authentic}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet)" sql: accounting_start_query = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ??ConnectInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', (now() - '%{Acct-Delay-Time:-0}'::interval), '%{Acct-Authentic}', '%{Connect-Info}', ??'%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, '%{Acct-Delay-Time:-0}')" sql: accounting_start_query_alt = "UPDATE radacct ??SET AcctStartTime = (now() - '%{Acct-Delay-Time:-0}'::interval), AcctStartDelay = '%{Acct-Delay-Time:-0}', ??ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query = "UPDATE radacct ??SET AcctStopTime = (now() - '%{Acct-Delay-Time:-0}'::interval), ??AcctSessionTime = NULLIF('%{Acct-Session-Time}', '')::bigint, ??AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), ??AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ??FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, ConnectInfo_stop = '%{Connect-Info}' ??WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query_alt = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, ??AcctSessionTime, AcctAuthentic, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStopDelay) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', (now() - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??(now() - '%{Acct-Delay-Time:-0}'::interval), NULLIF('%{Acct-Session-Time}', '')::bigint, ??'%{Acct-Authentic}', '%{Connect-Info}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, '%{Acct-Delay-Time:-0}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "" sql: postauth_table = "radpostauth" sql: postauth_query = "" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked rlm_sql (sql): Attempting to connect to radius@:/admin3 rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): starting 5 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #5 rlm_sql (sql): Connected new DB handle, #5 rlm_sql (sql): starting 6 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #6 rlm_sql (sql): Connected new DB handle, #6 rlm_sql (sql): starting 7 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #7 rlm_sql (sql): Connected new DB handle, #7 rlm_sql (sql): starting 8 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #8 rlm_sql (sql): Connected new DB handle, #8 rlm_sql (sql): starting 9 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #9 rlm_sql (sql): Connected new DB handle, #9 rlm_sql (sql): starting 10 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #10 rlm_sql (sql): Connected new DB handle, #10 rlm_sql (sql): starting 11 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #11 rlm_sql (sql): Connected new DB handle, #11 rlm_sql (sql): starting 12 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #12 rlm_sql (sql): Connected new DB handle, #12 rlm_sql (sql): starting 13 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #13 rlm_sql (sql): Connected new DB handle, #13 rlm_sql (sql): starting 14 rlm_sql (sql): Attempting to connect rlm_sql_postgresql #14 rlm_sql (sql): Connected new DB handle, #14 Module: Instantiated sql (sql) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded radutmp radutmp: filename = "/var/log/freeradius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Module: Loaded IPPOOL ippool: session-db = "/var/run/freeradius/db-18.ippool" ippool: ip-index = "/var/run/freeradius/db-18.ipindex" ippool: range-start = 195.38.18.172 IP address [195.38.18.172] ippool: range-stop = 195.38.18.254 IP address [195.38.18.254] ippool: netmask = 255.255.255.255 IP address [255.255.255.255] ippool: cache-size = 82 ippool: override = no ippool: maximum-timeout = 0 Module: Instantiated ippool (pool_18) ippool: session-db = "/var/run/freeradius/db-16.ippool" ippool: ip-index = "/var/run/freeradius/db-16.ipindex" ippool: range-start = 195.38.16.192 IP address [195.38.16.192] ippool: range-stop = 195.38.16.254 IP address [195.38.16.254] ippool: netmask = 255.255.255.255 IP address [255.255.255.255] ippool: cache-size = 62 ippool: override = no ippool: maximum-timeout = 0 Module: Instantiated ippool (pool_16) ippool: session-db = "/var/run/freeradius/db.ippool" ippool: ip-index = "/var/run/freeradius/db.ipindex" ippool: range-start = 10.9.66.1 IP address [10.9.66.1] ippool: range-stop = 10.9.66.254 IP address [10.9.66.254] ippool: netmask = 255.255.255.255 IP address [255.255.255.255] ippool: cache-size = 255 ippool: override = yes ippool: maximum-timeout = 0 Module: Instantiated ippool (pool_card) detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (reply_log) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 195.38.16.1:47518, id=116, length=63 User-Name = "test" User-Password = "test" NAS-IP-Address = 195.38.16.1 NAS-Port = 99 Framed-Protocol = PPP rad_rmspace_pair: User-Name now 'test' rad_rmspace_pair: User-Password now 'test' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/var/log/freeradius/radacct/195.38.16.1/auth-detail-20050912' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/195.38.16.1/auth-detail-20050912 modcall[authorize]: module "auth_log" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 radius_xlat: 'test' rlm_sql (sql): sql_set_user escaped user --> 'test' radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'test' ??ORDER BY id' rlm_sql (sql): Reserving sql socket id: 14 rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'test' ??ORDER BY id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = 2 radius_xlat: '' radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = 'test' ??ORDER BY id' rlm_sql_postgresql: query: SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = 'test' ??ORDER BY id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = 1 radius_xlat: '' rlm_sql (sql): Released sql socket id: 14 modcall[authorize]: module "sql" returns ok for request 0 users: Matched entry DEFAULT at line 107 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 auth: type Crypt

2 4

compile error with 1.0.5
by Duane Cox 13 Sep '05

13 Sep '05

Can someone help me out and tell me what I am missing or doing wrong to get this error. I do not have openSSL installed on this server and would like to not install it. Thanks! Making static dynamic in rlm_x99_token... make[6]: Entering directory `/usr/src/freeradius-1.0.5/src/modules/rlm_x99_token' gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I../../include -DX99_MODULE_NAME=\"rlm_x99_token\" -DFREERADIUS -c x99_rlm.c -o x99_rlm.o In file included from x99_rlm.c:54: x99.h:26:42: openssl/des.h: No such file or directory In file included from x99_rlm.c:54: x99.h:146: error: parse error before "des_cblock" x99.h:146: warning: no semicolon at end of struct or union x99.h:147: warning: type defaults to `int' in declaration of `x99_user_info_t' x99.h:147: warning: data definition has no type or storage class x99.h:152: error: parse error before "des_cblock" x99.h:152: warning: function declaration isn't a prototype x99.h:153: error: parse error before "des_cblock" x99.h:153: warning: function declaration isn't a prototype x99.h:165: error: parse error before "des_cblock" x99.h:165: warning: function declaration isn't a prototype x99.h:166: warning: type defaults to `int' in declaration of `des_cblock' x99.h:166: error: parse error before "keyblock" x99.h:167: warning: function declaration isn't a prototype x99.h:170: error: parse error before "x99_user_info_t" x99.h:170: warning: function declaration isn't a prototype x99.h:180: error: parse error before "des_cblock" x99.h:180: warning: function declaration isn't a prototype x99.h:182: warning: type defaults to `int' in declaration of `des_cblock' x99.h:182: error: parse error before "keyblock" x99.h:182: warning: function declaration isn't a prototype x99_rlm.c: In function `x99_token_authorize': x99_rlm.c:294: error: parse error before "user_info" x99_rlm.c:331: error: `user_info' undeclared (first use in this function) x99_rlm.c:331: error: (Each undeclared identifier is reported only once x99_rlm.c:331: error: for each function it appears in.) x99_rlm.c: In function `x99_token_authenticate': x99_rlm.c:460: error: parse error before "user_info" x99_rlm.c:492: error: `user_info' undeclared (first use in this function) make[6]: *** [x99_rlm.o] Error 1 make[6]: Leaving directory `/usr/src/freeradius-1.0.5/src/modules/rlm_x99_token' make[5]: *** [common] Error 2 make[5]: Leaving directory `/usr/src/freeradius-1.0.5/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/usr/src/freeradius-1.0.5/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/usr/src/freeradius-1.0.5/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/usr/src/freeradius-1.0.5/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/usr/src/freeradius-1.0.5' make: *** [all] Error 2 root@apollo:/usr/src/freeradius-1.0.5#

3 3

RE: Two different sources, one with a single value
by Þórður Ívarsson 13 Sep '05

13 Sep '05

or "Auth-type = mac_address" ? > -----Original Message----- > From: Martin.Ward(a)uk.neceur.com [mailto:Martin.Ward@uk.neceur.com] > Sent: 13. september 2005 10:28 > To: FreeRadius users mailing list > Subject: Two different sources, one with a single value > > > Hi all, > > I'm just about getting the hang of FreeRadius now, thanks to > the various emails and stuff that people have been asking, > but I've not been able to find the answer to one particular question. > > I have a radius server that will process two types of request: > 1. A user name and password login. Currently it's a flat file > but I will change that the use the rlm_unix module in the near future. > 2. A MAC address, which is passed in as two attributes, > "User-Name=MAC Address" and "User-Password=MAC Address" > > For the MAC address I want a flat file with just the MAC > addresses in it. I have tried using the passwd module and > just ignoring the User-Password attribute like so: > > passwd mac_address { > filename = /var/mac_addresses > format = "*User-Name" > } > > but this fails to authenticate even though it gets through > the Authorize section OK: > > rad_recv: Access-Request packet from host > 172.29.252.228:1026, id=98, length=160 > NAS-IP-Address = 172.29.252.228 > NAS-Port-Id = "10:2" > Extreme-Attr-208 = 0x556e6b6e6f776e204c6f636174696f6e > NAS-Port-Type = Wireless-802.11 > User-Name = "000e359ec2ce" > User-Password = "000e359ec2ce" > Calling-Station-Id = "000e359ec2ce" > Called-Station-Id = "0004960e2e00" > NAS-Identifier = "Altitude 300" > Proxy-State = 0x31303a32040436c236c236c236c236c236c236c236c2 > Processing the authorize section of radiusd.conf > modcall: entering group authorize for request 42 > modcall[authorize]: module "preprocess" returns ok for request 42 > radius_xlat: '/var/log/freeradius/radacct/172.29.252.228 > /auth-detail-20050913' > rlm_detail: > /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d > expands to > /var/log/freeradius/radacct/172.29.252.228/auth-detail-20050913 > modcall[authorize]: module "auth_log" returns ok for request 42 > modcall[authorize]: module "mac_address" returns ok for request 42 > modcall: group authorize returns ok for request 42 > auth: No authenticate method (Auth-Type) configuration found for the > request: Rejecting the user > auth: Failed to validate the user. > Login incorrect: [000e359ec2ce/000e359ec2ce] (from client > wlan-switch port 0 cli 000e359ec2ce) > > Am I simply doing the impossible, or am I missing something > obvious (again)? > > |\/|artin > -- > Senior Network Administrator, NEC (Europe) Ltd. > Acton extension: 3379 > NEC*Net: 800-44-21-3379 > Direct: +44 20 8752 3379 > Fax: +44 20 8752 3389 > Mobile: +44 7721 869 356 > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > >

1 0

RE: Two different sources, one with a single value
by Þórður Ívarsson 13 Sep '05

13 Sep '05

Has the user file "Auth-type=password" or similar? > -----Original Message----- > From: Martin.Ward(a)uk.neceur.com [mailto:Martin.Ward@uk.neceur.com] > Sent: 13. september 2005 10:28 > To: FreeRadius users mailing list > Subject: Two different sources, one with a single value > > > Hi all, > > I'm just about getting the hang of FreeRadius now, thanks to > the various emails and stuff that people have been asking, > but I've not been able to find the answer to one particular question. > > I have a radius server that will process two types of request: > 1. A user name and password login. Currently it's a flat file > but I will change that the use the rlm_unix module in the near future. > 2. A MAC address, which is passed in as two attributes, > "User-Name=MAC Address" and "User-Password=MAC Address" > > For the MAC address I want a flat file with just the MAC > addresses in it. I have tried using the passwd module and > just ignoring the User-Password attribute like so: > > passwd mac_address { > filename = /var/mac_addresses > format = "*User-Name" > } > > but this fails to authenticate even though it gets through > the Authorize section OK: > > rad_recv: Access-Request packet from host > 172.29.252.228:1026, id=98, length=160 > NAS-IP-Address = 172.29.252.228 > NAS-Port-Id = "10:2" > Extreme-Attr-208 = 0x556e6b6e6f776e204c6f636174696f6e > NAS-Port-Type = Wireless-802.11 > User-Name = "000e359ec2ce" > User-Password = "000e359ec2ce" > Calling-Station-Id = "000e359ec2ce" > Called-Station-Id = "0004960e2e00" > NAS-Identifier = "Altitude 300" > Proxy-State = 0x31303a32040436c236c236c236c236c236c236c236c2 > Processing the authorize section of radiusd.conf > modcall: entering group authorize for request 42 > modcall[authorize]: module "preprocess" returns ok for request 42 > radius_xlat: '/var/log/freeradius/radacct/172.29.252.228 > /auth-detail-20050913' > rlm_detail: > /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d > expands to > /var/log/freeradius/radacct/172.29.252.228/auth-detail-20050913 > modcall[authorize]: module "auth_log" returns ok for request 42 > modcall[authorize]: module "mac_address" returns ok for request 42 > modcall: group authorize returns ok for request 42 > auth: No authenticate method (Auth-Type) configuration found for the > request: Rejecting the user > auth: Failed to validate the user. > Login incorrect: [000e359ec2ce/000e359ec2ce] (from client > wlan-switch port 0 cli 000e359ec2ce) > > Am I simply doing the impossible, or am I missing something > obvious (again)? > > |\/|artin > -- > Senior Network Administrator, NEC (Europe) Ltd. > Acton extension: 3379 > NEC*Net: 800-44-21-3379 > Direct: +44 20 8752 3379 > Fax: +44 20 8752 3389 > Mobile: +44 7721 869 356 > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > >

1 0

accounting file with belkin 54g wireless router
by Michael Ding 12 Sep '05

12 Sep '05

Hi all, I have set up the freeraiuds to authenticate the user using WPA TKIP authentication method. The router I use is belkin 54g wireless router. I am able to authenticate the user correctly and the auth log file records all activities, but I am not able to get the accounting file. I rememeber a while back when I browsing this thread, someone mentioned that no every router sends accounting data to radius. Is this right? If so, what are the router sent acct data? If no, what do I need to do to get the acct data? Thanks a lot! Michael

2 2

Freeradius and PPPoe Server ?
by Dumpfbacke 102731 12 Sep '05

12 Sep '05

Hello, I search a HowTo for Freeradius+PPPoe. MFG. -- 5 GB Mailbox, 50 FreeSMS http://www.gmx.net/de/go/promail +++ GMX - die erste Adresse f�r Mail, Message, More +++

5 5

one question
by Richie Lee 12 Sep '05

12 Sep '05

My company is a security vendor company(www.fortinet.com). How to add dictionary.fortinet to the server's list of vendor dictionaries in later freeradius version? Does anyone know it? _________________________________________________________________ Designer Mail isn't just fun to send, it's fun to receive. Use special stationery, fonts and colors. http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=ht… Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.

2 5

Re: FR with MySQL. Proxying and repeated entries
by Paolo Rotela 12 Sep '05

12 Sep '05

Hi. I've downloaded, compiled and installed FR 1.0.5, but I'm still receiving the same results. the packet is discarded because of an invalid Message-Authenticator. This is part of the output (IP address hidden) for a "radclient" with "-s" and "-x" options rad_recv: Accounting-Response packet from host ******, id=83, length=38 rad_decode: Received packet from ****** with invalid Message-Authenticator! (Shared secret is incorrect.) radclient: radclient.c:440: send_one_packet: Assertion `radclient->reply == ((void *)0)' failed. Aborted Should I modify something at the config to let the Message Authenticator get handled correctly? Also, from a TCPDump I don't see any "Message Authenticator" in the Accounting-Request constructed by Radclient. I only see "Message Authenticator" in the "Accounting-Response" packet constructed by Cisco ACS and received (and discarded) by FR. Date: Fri, 19 Aug 2005 15:09:23 -0400 From: "Alan DeKok" <aland(a)ox.org> Subject: Re: FR with MySQL. Proxying and repeated entries To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20050819190923.3D22B16CCA(a)mail.nitros9.org> "Paolo Rotela" <paolo.rotela(a)bluetelecom.com> wrote: > With this one, Access-* packets go OK, but when the NAS (Cisco AS5300) > sends > an Accounting-Request to that realm and I proxy it to the home server, it > sends me an Accounting-Response with an (I think) irregular attribute: > Message-Authenticator (Ext. Attr. 80), wich I think is not permitted in > the > RFC for accounting packets. The IETF RADIUS extensions working group has a document which proposes fixes to a number of issues like this. > 1) Am I reading OK the RFC? I mean ¿Is it right that Attribute 80 is NOT > permitted in Accounting-* packets? I don't think it's specifically permitted, but it shouldn't be a problem. > 2) Each time the NAS re-sends packets, FR handles it as it were a new > packet, for a new call/connection. The RFC's say that's what the NAS is supposed to do. So for FreeRADIUS, it looks like a new connection. > 3) Is there any known bug or propietary feature from Cisco wich causes > this > incompatibility thing? I've searched about it and didn't find anything. No. It's a bug in FreeRADIUS. I'll put a patch into 1.0.5 that should fix it. Alan DeKok.

1 0

undefined reference 'md4_calc' compile error...
by Harris Christian D SSgt 1 CS/SCBAM 12 Sep '05

12 Sep '05

I am trying to build freeradius-1.0.5 on my NSLU2 running openembedded. Believe me when I say it is and has been a hard road. I've managed to fix the openssl install. I now have the openssl headers that were MIA. I managed to fix the libtool. I can now build libraries that use libtool -mode=link **** -lresolve -ltdl -lthreads and such without errors. I even modified all the Makefiles to include '--tag=thisisjunk' that could not be inferred and had to be specified. It seems like I am running into every problem out there trying to install the server. I have been able to successfully fix them all by myself, but now I stuck with this... gcc -I../../include -o smbencrypt smbencrypt.o smbdes.o ../../lib/libradius.a smbencrypt.o: In function `ntpwdhash': /home/slug/freeradius-1.0.5/src/modules/rlm_mschap/smbencrypt.c:60: undefined reference to `md4_calc' collect2: ld returned 1 exit status make: *** [smbencrypt] Error 1 The line in question from smbencrypt.c read as follows: md4_calc (szHash, szUnicodePass, (nPasswordLen<<1) ); and the #include "md4.h" defines the md4_calc function as: void md4_calc (unsigned char *, const unsigned char *, unsigned int); I not really much of a programmer, but this looks right to me. I'm at a loss as to why this won't compile. I've read postings on how other people fixed this. And they are all in some foreign programmer language I don't understand. What is it I'm messing up here?

1 0