October 2006 - Freeradius-Users - lists.freeradius.org

Freeradius error: invalid keyword "ATTRIB_NMC"
by Jan Mulders 18 Oct '06

18 Oct '06

Hi list. I'm having some problems getting the nightly CVS snapshot to work. It compiles fine, I've set relevant log directories, and gotten rid of the old dictionary files, instead using the ones in the CVS. I now get this error when attempting to start radiusd: Wed Oct 18 15:18:43 2006 : Error: Errors reading dictionary: dict_init: /usr/local/share/freeradius/dictionary.usr[56] invalid keyword "ATTRIB_NMC" The offending file contains the following: # # USR Extensions: USR Vendor-Specific stuff. # # For now in NMC format (whatever that stands for), though the # normal vendor-specific format would work just as well. # # ATTRIB_NMC USR-Last-Number-Dialed-Out 0x0066 string ATTRIB_NMC USR-Last-Number-Dialed-In-DNIS 0x00E8 string ATTRIB_NMC USR-Last-Callers-Number-ANI 0x00E9 string ATTRIB_NMC USR-Channel 0xBF38 integer ATTRIB_NMC USR-Event-Id 0xBFBE integer ATTRIB_NMC USR-Event-Date-Time 0xBF2F date ATTRIB_NMC USR-Call-Start-Date-Time 0xBFF7 date ATTRIB_NMC USR-Call-End-Date-Time 0xBFF6 date ATTRIB_NMC USR-Default-DTE-Data-Rate 0x005E integer ...and on and on. Is there something I need to do in order to get this to work? Have I made a silly mistake? Thanks all, Jan

2 1

Stress test for EAP-PEAP
by King, Michael 18 Oct '06

18 Oct '06

Since I've been having great amounts of troubles with 1.1.2 / 1.1.3, (See SSL_read failed in a system call message) We're going to try building another server with 1.0.4 (The latest version that we have in production that works for us) Anyone know of a stress test utility that can simulate EAP-PEAP? In my test labs, everything works great. It's only when I load a few hundred to a thousand clients that things seem to break. I'd like to find out if this new server is going to have issues before I impact my clients

2 1

Re: How to configure multi nas
by Peter Nixon 18 Oct '06

18 Oct '06

On Wed 18 Oct 2006 12:19, Enkhbat.N wrote: > Hi All > > > > I have those problems. Please help to solve the problems > > > > 1. How to configure many NASes on one RADIUS? > 2. How to setting user's connection NAS. > > Example Special users are connected on Primary NAS and other users are > connected on Secondary NAS. Please read the documentation (http://wiki.freeradius.org/ is a good place to start). If you still can't figure it out youself then ask for help on the users list.. NOT this list. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 0

FreeRADIUS user Survey
by Alan DeKok 18 Oct '06

18 Oct '06

In order to better understand the needs of people using FreeRADIUS, I've set up a survey with 12 questions. The goal is to understand who's using FreeRADIUS, how they're using it, and what the users needs are. The page is: http://gs-survey.com/s.asp?s=1651 Please take a few minutes to fill out the survey, and I'll be posting a summary of the responses here. I expect to have a few more surveys after this one, to be able to target future development. Thanks for your efforts in supporting FreeRADIUS. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

9 14

Re: problem with proxy configuration
by Prabhdeep Singh 18 Oct '06

18 Oct '06

Hi Alan, Thanks for the response. > It looks like you've configured the server to proxy to itself. Why? > I do understand your technical objection of doing what I am doing, but I have a valid application reson, which is that I support multiple realms on this particular radius server. For some realms, I want the UserName to strip the Realm name ("nostrip") and for some I don't.... Is there any other way to achieve the same than not using "striop" and "nostrip" flag in proxy.conf Thanks again for your comments. Prabh -- MyBlog: http://things-on-my-mind.blogspot.com/ Get your news at www.DailyHeadlines.NET

3 3

Module detach function behavior
by Nicolas Castel 18 Oct '06

18 Oct '06

Hi all, I'd like to know the behavior of the detach module function. That is what happens when some threads are running and using an instance of a module and that the server must be stopped or reloaded ? Does FreeRADIUS waits for threads to terminate their job before calling the module detach function or are they killed before they have terminated ? Thanks

2 1

RE: cisco-accounting do not work. what i miss?
by Paloma Munoz 18 Oct '06

18 Oct '06

I answer my own question: There are not problem. This was my accounting port.

1 0

How to create my own module in Freeradius !!!
by Vineet.Asati＠t-systems.com 18 Oct '06

18 Oct '06

Hi Techies, I am a new bie to freeradius fraternity. So grasping lot of things from this mailing list ;) I want to write my own module (which have a .c file prints out "Hello World" to a file). Would any of you please tell me on how can i do this. What all configurations are required? I am using Freeradius-1.1.3 server version. Regards Vineet

3 2

MySQL failover
by Brad McAllister 17 Oct '06

17 Oct '06

Sorry for all my questions lately. I think I have my setup almost complete. I am now stuck on the DB failover. I have read through the documents located here: http://wiki.freeradius.org/Fail-over but am still stuck. I have two mysql servers. If I shutdown mysql on sql1, it fails over to sql2 instantly. However, if i pull the ethernet plug on sql,1 freeradius appears to just be sitting and waiting to connect to sql1. This is what the console outputs: rlm_sql (sql1): Reserving sql socket id: 0 If I kill radius and start it up with sql1 disconnected it will failover instantly to sql2. Once I connect and then disconnect sql1 it starts hanging again. Has anyone else experienced this? Below are some snippets from my radius.conf: $INCLUDE ${confdir}/sql1.conf $INCLUDE ${confdir}/sql2.conf sql sql1 { } sql sql2 { } always handled { rcode = handled } authorize { suffix preprocess group { sql1 { fail = 1 notfound = 1 noop = 2 ok = return updated = 3 reject = return userlock = 4 invalid = 5 handled = 6 } sql2 { fail = 1 notfound = return noop = 2 ok = return updated = 3 reject = return userlock = 4 invalid = 5 handled = 6 } } -- Brad McAllister bmcallister(a)noc.dls.net

1 0

Re: Pam radius authentication
by danieldinu＠rdslink.ro 17 Oct '06

17 Oct '06

Hi! if you are reffering to this line: "account required pam_radius_auth.so debug" than here is the explanation: "The pam configuration can be: ... auth sufficient /lib/security/pam_radius_auth.so [options] ... account sufficient /lib/security/pam_radius_auth.so" (this is taken from http://www.freeradius.org/pam_radius_auth/USAGE) On the other hand, I don't care if I don't use this module for accounting. As a matter of fact, I tried in many configurations, even without using it for accounting. The main concern is to succed in authetincating the users!!! if anyone can help me accomplish that, I would be happy and I will not mind about accounting... > >Hi, > >> I don't understand why you are saying that "you are invoking pam_radius_auth in the wrong place and for the wrong reason"...please, be more specific and if you know the right configuration, enlight me! >> >> >> >#%PAM-1.0 >> >> >auth required pam_securetty.so >> >> >auth sufficient pam_radius_auth.so debug >> >> >auth required /lib/security/pam_unix_auth.so >> >> >account required pam_radius_auth.so debug > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > >explain > >alan >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0