October 2006 - Freeradius-Users - lists.freeradius.org

Design question
by Torkel Mathisen 03 Oct '06

03 Oct '06

Hi We have a very simple freeradius setup today. We use freeradius 1.0.5 with PEAP/MS-CHAPv2 and users file. My boss has asked be about making this configuration a bit more flexible and easier to admin. He also wants some new "features". The keywords are hotspot, web-frontend and possibly billing and "smartcards". Basically what he wants is for external consultant to be able to bring their laptops and just connect to a hotspot webserver and from there on authorize on to the WiFi. He also wants the possibility of billing. I want to know what kind of design you guys would recommend here. I'm thinking freeradius (1.1.3 now) with a mysql db and some web-frontend for adding users (what?). Then Chillipot on a new server for hotspot access. How does that sound? Will Chillipot be able to authorize users based on PEAP/MS-CHAPv2 ? How would you be able to do billing with this setup? And lastly is the situation with "smartcards". My boss was thinking about some cards or something that the consultant can pick up in the reception that will give them access to the WiFi for a certain amount of time. At the end of the day they have to deliver it again. There is also a possibility of doing billing from that. Will this kind of configuration require some commercial software or is freeradius able to do that? The last thing is not THAT important, but I want to know if anyone has a setup like this. I hope someone got some recommentations. Regards, Torkel

2 1

how to make freeradius support RFC 3576 ?
by zengkh 03 Oct '06

03 Oct '06

----- Original Message ----- From: zengkh To: freeradius-users(a)lists.freeradius.org Sent: Tuesday, October 03, 2006 3:44 PM Subject: how to make freeradius support RFC 3576 ? i have a question about how to make freeradius support RFC 3576 - Dynamic Authorization Extensions to Remote Authentication Dial In User Service , thanks. BS: I can not write code to implement.

3 2

multiple MAC in calling-station-id
by Collen Blijenberg 03 Oct '06

03 Oct '06

Just a question... we use 'Calling-Station-Id' for authenticate agains MAC address (and username and passwd) can i use multiple 'Calling-Station-Id' if some user account has, let's say 3 laptops.. ?? or is there an other way to link multiple mac addresses to a user account ? ------- users ------ "gebruiker" User-Password == "12345", Calling-Station-Id == "00166f980e78" "00166f97d99d" "testcase1" User-Password == "12345", Calling-Station-Id == "00166f980e78 , 00166f97d99d" "testcase2" User-Password == "12345", Calling-Station-Id == "00166f980e78", Calling-Station-Id == "00166f97d99d" ------------------- dunno somthing like this ?? Cheers Collen...

2 2

rlm_ippool problem: Failed to open file - Permission denied
by Jan Mulders 02 Oct '06

02 Oct '06

Hello, It's been far too long a day, and I think I'm overlooking something ridiculously simple. I get this error when starting freeradius: rlm_ippool: Failed to open file /etc/raddb/ippool.512k_high: Permission denied radiusd.conf[142]: 512k_high: Module instantiation failed. I've tried making a file called ippool.512k_high, same error. Tried chmod 777'ing it, different error: rlm_ippool: Failed to open file /etc/raddb/ippool.512k_high: Success radiusd.conf[142]: 512k_high: Module instantiation failed. Also tried chmod radiusd ippool.512k_high and chgrp. If someone could give me a helpful tip as to how to get this thing working again, I'd appreciate it a lot. Thanks all, Jan Mulders

1 0

SQL // Default user
by Eric Hiller 02 Oct '06

02 Oct '06

Hello, I am trying to make freeradius behave so that it checks the database for the user, if the user doesnt exist it draws uses the username of something else, such as default in the sql table. How can I do this? Thank you, Eric

1 0

Deny user based on MAC-address
by Torkel Mathisen 02 Oct '06

02 Oct '06

Hi, How can I deny a user from freeradius based on the MAC-address on the PC? I use users file only. Do I need MAC Authentication for that ? Regards, Torkel

3 2

Problem With Make
by Abel Monzon 02 Oct '06

02 Oct '06

Hi List... I still have problem at the time to Make: this is the last's line: server:~/freeradius-1.1.3# make ..... -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /root/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the loadable module *** libradius.so is not portable! *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/root/freeradius-1.1.3/src/lib/.libs -Wl,--rpath -Wl,/usr/local/lib /root/freeradius-1.1.3/src/lib/.libs/libradius.so -L/usr/local/lib /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a -L/usr/lib/perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/root/freeradius-1.1.3/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/freeradius-1.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/freeradius-1.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/freeradius-1.1.3' make: *** [all] Error 2 What is the problem exacttly? Any idea? Thanx, Abel

1 0

Problem With Make
by Abel Monzon 02 Oct '06

02 Oct '06

Hi List... I still have problem at the time to Make: this is the last's line: server:~/freeradius-1.1.3# make ..... -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /root/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the loadable module *** libradius.so is not portable! *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/root/freeradius-1.1.3/src/lib/.libs -Wl,--rpath -Wl,/usr/local/lib /root/freeradius-1.1.3/src/lib/.libs/libradius.so -L/usr/local/lib /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a -L/usr/lib/perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/root/freeradius-1.1.3/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/freeradius-1.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/freeradius-1.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/freeradius-1.1.3' make: *** [all] Error 2 What is the problem exacttly? Any idea? Thanx, Abel

1 0

help with undocumented attributes
by Andrew Long 02 Oct '06

02 Oct '06

Hello freeradius-users, I am working with an inherited system (freeradius 0.9.0 on RH). The system is running but as a new user/admin I am having trouble getting info on the actual setup. I do 'rpm -qv freeradius' and it returns freeradius is not installed, yet it IS. /usr/local/etc/raddb is populated, as is /usr/local/share/freeradius. How can I get info on the running version? Also, I am having trouble finding info on attributes that do not seem to be documented which limit some of our user's sessions. Examples are 'Max-Acct-Age', 'Max-Daily-Session', and 'Check-Login-Day'. I need to get a better understanding of how this session management is done. Good documentation on the web seems hard to come by. Any help most appreciated. -- Regards, Andrew Long

4 5

prevent roaming configuration question
by isidoros 02 Oct '06

02 Oct '06

Hello everybody, I have a configuration question. How would I have to set up the following configuration NAS1 with users X,Y,Z NAS2 with users A,B,C one central radius server Goal: users X,Y,Z should only be authenticated on NAS1 and not on NAS2 or any other nas users A,B,C should only be authenticated on NAS2 and not on NAS1 or any other nas etc My best guess would be tho tweak the auth_query in the sql.conf any idea's thanks

2 7