November 2006 - Freeradius-Users - lists.freeradius.org

RE: Database query failed: Table 'radius.radcheck' doesn't exist
by John Longland 02 Nov '06

02 Nov '06

Dusan 1. I assume you did run the db_sql_mysql.sql script to create the database schema ?? This will create the majority of the schema. 2. Did you run the sql-scripts in /usr/local/dialup_admin/sql ? They are executed in a similar fashion. Note: In my case , I got error messages when executing some of these scripts. What I did was to remove the "DEFAULT '0'" from the scripts that failed. You execute a script as follows: First you log into mysql : mysql -uroot -p<password> Then you create the database: CREATE DATABASE radius; Then execute the script: mysql -uroot -p<rootpassword> radius < db_sql_mysql.sql Hope this helps John -----Original Message----- From: freeradius-users-bounces+jlongland=grintek.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+jlongland=grintek.com@lists.freeradius. org]On Behalf Of Dusan Djordjevic Liste Sent: 02 November 2006 12:06 To: freeradius-users(a)lists.freeradius.org Subject: Database query failed: Table 'radius.radcheck' doesn't exist Hi all, I am trying to install dialup admin. I followed HOWTO located in doc/ directory. I created all tables in radius database using provided .sql files in sql/ dir. Now i have 4 tables in radius database: badusers, mtotacct, totacct, userinfo. When I connect to dialup admin and try to create new user, it gives me following error: Database query failed: Table 'radius.radcheck' doesn't exist (after bunch of error messages that some queries and inserts are not valid). I am not good with databases, but AFAIK this means that there is no radcheck table in radius database. Also, if i understand admin.conf properly, there is part that sayst following: sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas Also lot of tables mentioned here do not exist. Did I missed something or ? TIA Dusan http://dj-dule.blogspot.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

(no subject)
by benodilo＠free.fr 02 Nov '06

02 Nov '06

Hi, My freeradius work fine (freeradius in server 1 + Mysql in server 2). But i have errors in my logs(see bottom LOGS 1) and all solutions i try don't solve this. I have : -Increase the number of sql connections to 10 --> num_sql_socks = 10 -Increase the time to wait before cleaning up a reply --> cleanup_delay = 8 -Verify if the index are in the good collums(charte_valide is as custom for a php application) : Requete: EXPLAIN SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'ben' AND charte_valide = 'o' ORDER BY id Result : +----+-------------+----------+------+------------------------+----------+---------+-------+------+-----------------------------+ | id | select_type | table | type | possible_keys | key | key_len | ref | rows | Extra | +----+-------------+----------+------+------------------------+----------+---------+-------+------+-----------------------------+ | 1 | SIMPLE | radcheck | ref | UserName,charte_valide | UserName | 66 | const | 1 | Using where; Using filesort | +----+-------------+----------+------+------------------------+----------+---------+-------+------+-----------------------------+ The NAS is a ISA SERVER and the students use a navigator without tab so isa server send too much querys to freeradius (see bottom LOGS 2)... And I don't see à otion in ISA server for caching the querys. What can i try more ? I have only one Nas in this time and i have used all ideas. I will add more NAs in the future so this little problem can will be a big problem... Your solutions are welcomes ! Best regards. LOGS 1: [root@fedora ~]# cat /var/log/radius/radius.log | grep "DB" Wed Nov 1 15:04:59 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Wed Nov 1 19:28:27 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Wed Nov 1 19:28:27 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Wed Nov 1 20:56:27 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Wed Nov 1 20:56:27 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 00:08:01 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 00:08:01 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 02:01:29 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 09:30:32 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 09:30:40 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 09:30:40 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 11:01:09 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 11:01:09 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Nov 2 11:02:53 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 LOGS 2 : Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1238761472) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1238827008) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1238919533) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1238958080) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239023616) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239089152) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239154688) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239220224) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239416832) Thu Nov 2 11:56:47 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239482368) Thu Nov 2 11:56:48 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239678976) Thu Nov 2 11:56:48 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239744512) Thu Nov 2 11:56:49 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239860756) Thu Nov 2 11:56:49 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239906816) Thu Nov 2 11:56:49 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1239941120) Thu Nov 2 11:56:49 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1240006656) Thu Nov 2 11:56:49 2006 : Auth: Login OK: [reda.achour] (from client isaserver2 port 1240072192)

1 0

Realm and LDAP authentication
by Rio Yang 02 Nov '06

02 Nov '06

Hi, I wanna to authenticate user by LDAP server. But I have two LDAP servers for different group of users. For example, students or staffs, each has different realm name. Students' realm name is @stud.test and staffs' realm name is @staf.test. Realm (@stud.test) must pass to LDAP server one to authenticate. And realm (@staff.test) must pass to LDAP server two to authenticate. Does freeradius support this scenario ?? And how to do it ?? Thanks. Rio

1 0

Multiple input_pairs?
by Patric 02 Nov '06

02 Nov '06

Hi, Is it possible to specify multiple input pairs? EG: exec { wait = yes input_pairs = request,config shell_escape = yes output = none } If it is possible would the above syntax be correct? TIA Patric

2 2

Re: Problem connecting Client to dot1x-Network over Cisco AP
by Habegger Lukas, ERZ-AZD-AIL 02 Nov '06

02 Nov '06

Hi On all clients is the same certificate installed. I tried it with two installations. First i tried with a certificate from the CA.all script and after with a certificate from a MS CA Server. Now i use the certificate from the CA.all script. On my notebook i tested it wired and wireless with this certificate. Wired it works and wireless not. Could it be something with the certificate options Here the certificate from the CA.all script ------------------------------------------------------- -----BEGIN CERTIFICATE----- MIIC+DCCAmGgAwIBAgIJAMpuxH83nFddMA0GCSqGSIb3DQEBBQUAMFwxCzAJBgNV BAYTAkNIMQ0wCwYDVQQIEwRCZXJuMQ0wCwYDVQQHEwRCZXJuMQwwCgYDVQQKEwNF UloxDDAKBgNVBAsTA05PQzETMBEGA1UEAxMKRnJlZXJhZGl1czAeFw0wNjA2MDky MTA3MTdaFw0wODA2MDgyMTA3MTdaMFwxCzAJBgNVBAYTAkNIMQ0wCwYDVQQIEwRC ZXJuMQ0wCwYDVQQHEwRCZXJuMQwwCgYDVQQKEwNFUloxDDAKBgNVBAsTA05PQzET MBEGA1UEAxMKRnJlZXJhZGl1czCBnzANBgkqhkiG9w0BAQEFAAOBjQAwgYkCgYEA v20r19aCPNjLcOT08mzXtSQiw86yXCiWPJHZaG2wF+rV7D66f3wzN2UzviNjjDrL 0kh2KDaLp4J7hhom4LjDzb9CLhSgdRnYMSpY5IUmGzIctsEPAsuWGMAlzTSlKEaY /z9cviuqS0P9Zu+lMMN1BdiZy8n1XKf6qE2UxYRksKsCAwEAAaOBwTCBvjAdBgNV HQ4EFgQUNC9D8X9AV03R5xmh8lCYu6q4DuYwgY4GA1UdIwSBhjCBg4AUNC9D8X9A V03R5xmh8lCYu6q4DuahYKReMFwxCzAJBgNVBAYTAkNIMQ0wCwYDVQQIEwRCZXJu MQ0wCwYDVQQHEwRCZXJuMQwwCgYDVQQKEwNFUloxDDAKBgNVBAsTA05PQzETMBEG A1UEAxMKRnJlZXJhZGl1c4IJAMpuxH83nFddMAwGA1UdEwQFMAMBAf8wDQYJKoZI hvcNAQEFBQADgYEAE1HDhrsuhju+NDVBjEX23OMvsTp4Hjf6gbiRblDwI70N7sbT +IKU/CGV/kzbKu56J63fX3XGokp1lTRwu/fcLLMhJd5B8q0Z6HiATohSHczZXcOu xFYubxo7eAcQTG/RzCLjrF53U1/CmzFhqEZoEvnBYk90EqZrdSWx8zs1Gow= -----END CERTIFICATE----- ------------------------------------------------------- Lukas -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+lukas.habegger=erz.be.ch(a)lists.freeradius.org [mailto:freeradius-users-bounces+lukas.habegger=erz.be.ch@lists.freeradius.org] Im Auftrag von Alan DeKok Gesendet: Mittwoch, 1. November 2006 17:38 An: FreeRadius users mailing list Betreff: Re: Problem connecting Client to dot1x-Network over Cisco AP "Habegger Lukas, ERZ-AZD-AIL" <lukas.habegger(a)erz.be.ch> wrote: > I try to connect a wireless client (WinXP) to my dot1x-Network over a > Cisco AP 1242AG. > > On my FreeRADIUS i get the following error: ... > Wed Nov 1 14:59:08 2006 : Debug: rlm_eap_tls: <<< TLS 1.0 Alert > [length 0002], fatal bad_certificate Ok... it doesn't like the certificate. > With my wired clients i don't any problems and the same setup runs > with a Cisco ACS With the same certificate? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Accounting -Response
by Vasea Marii 02 Nov '06

02 Nov '06

A week ago i was trying to find out how can i add some attributes to accounting response from a MySQL backend! Alan DeKoK showed me that the mechanism wasn't very good and that i don't send the right attributes in accounting -response! We've made some work for optimisation but found out that we still need to send some attributes meaning: when sending accounting-stop the response from FreeRADIUS should be [-Command] // ex. play 'thanks for calling through us' [-Voice-Message-Promt] specific(from sql)- [-Session-Timeout](for accounting-start response)! The mechanism is complex and we don't see other solution but adding these attributes only in Accounting-Response! I understand that should be a unique standard for this but the rfc has reserves to send attributes in accountind-response and we've created a dictionary for this purpose so it shouldn't be any problems! The problem is, as i think, that FreeRADIUS doesn't have a configurable query for accounting-response as it has for authentication-response! I tried to find in the source the place to add the stuff i need but it seems that it will take to long to understand the complex strucutre of pointers used by developers! Anyway if someone can help thanks! --------------------------------- We have the perfect Group for you. Check out the handy changes to Yahoo! Groups.

1 0

Realm Stripping
by Leon Kyneur 01 Nov '06

01 Nov '06

Hey all, I am trying to strip realm detail from all Auth & Accounting requests (using SQL backend) I've tried setting: sql_user_name = "%{Stripped-User-Name}" in the sql.conf to no avail What am I missing here? Cheers, Leon

2 4

RE: Freeradius hangs
by Karthik R 01 Nov '06

01 Nov '06

<sigh> That's the message on the NAS. And you're simply repeating your earlier comment that it doesn't work. Again, what is the RADIUS server doing? You can't expect to understand what the RADIUS server is doing by looking at the NAS. You have to look at the RADIUS server. Alan, When I was observing the radius log, i was typing correct username and password sometime it says "access was denied because username\password invalid on the domain". I didnt see anything going wrong in the log message but i didnt understand why i got the above error message. bash3.0#radiusd -X -A Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = yes mschap: require_strong = yes mschap: with_ntdomain_hack = yes mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --domain=%{mschap:NT-Domain} --challenge=%{mschap:Challenge} --nt-re sponse=%{mschap:NT-Response}" Module: Instantiated mschap (mschap) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "peap" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/usr/local/etc/raddb/secert/cert- srv.pem" tls: certificate_file = "/usr/local/etc/raddb/secert/cert-srv.pem" tls: CA_file = "/usr/local/etc/raddb/secert/root.pem" tls: private_key_password = "<removed>" tls: dh_file = "/usr/local/etc/raddb/secert/dh" tls: random_file = "/usr/local/etc/raddb/secert/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls peap: default_eap_type = "mschapv2" peap: copy_request_to_tunnel = no peap: use_tunneled_reply = no peap: proxy_tunneled_request_as_eap = yes rlm_eap: Loaded and initialized type peap mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 rad_recv: Access-Request packet from host 192.168.0.1:4754, id=219, length=151 User-Name = "=<removed>" MS-CHAP2-Response = 0x9f006ad4cb39d121eec1ed2bbd5a6b72823d0000000000000000dc3beae19e85c047fc47796ffa8ce40de9cb3891d38887a3 MS-CHAP-Challenge = 0x6ae823a6c2da2b7ca1f01d68109d2455 NAS-Identifier = "Clavister" NAS-Port = 0 NAS-Port-Type = Virtual Processing the authorize section of radiusd.conf modcall: entering group authorize for request 12 modcall[authorize]: module "preprocess" returns ok for request 12 modcall[authorize]: module "chap" returns noop for request 12 rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = MS-CHAP' modcall[authorize]: module "mschap" returns ok for request 12 rlm_realm: No '@' in User-Name = "<removed>", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 12 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 12 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 12 modcall: leaving group authorize (returns ok) for request 12 rad_check_password: Found Auth-Type MS-CHAP auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 12 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for kartthikr with NT-Password radius_xlat: Running registered xlat function of module mschap for string 'User-Name' radius_xlat: Running registered xlat function of module mschap for string 'NT-Domain' radius_xlat: Running registered xlat function of module mschap for string 'Challenge' mschap2: 6a radius_xlat: Running registered xlat function of module mschap for string 'NT-Response' radius_xlat: '/usr/bin/ntlm_auth --request-nt-key --username=<removed> --domain=<removed> --challenge=a3ecf075a1ea699b --nt-response =dc3beae19e85c047fc47796ffa8ce40de9cb3891d38887a3' Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=<removed> --domain=<removed> --challenge=a3ecf075a1ea699b --nt-response= dc3beae19e85c047fc47796ffa8ce40de9cb3891d38887a3 Exec-Program output: NT_KEY: 67F102C088FF660F615D1F9236DF9797 Exec-Program-Wait: plaintext: NT_KEY: 67F102C088FF660F615D1F9236DF9797 Exec-Program: returned: 0 rlm_mschap: adding MS-CHAPv2 MPPE keys modcall[authenticate]: module "mschap" returns ok for request 12 modcall: leaving group MS-CHAP (returns ok) for request 12 Sending Access-Accept of id 219 to 192.168.0.1 port 4754 MS-CHAP2-Success = 0x9f533d41443033433538413845303733454132373045303043444441364531383431433344383938383938 MS-MPPE-Recv-Key = 0xdc882e2dfa10109679e37fe4bafba95d MS-MPPE-Send-Key = 0xf3e3e6a91f2d6e4b64b8b2e5add4bdad MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000004 Finished request 12 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:4754, id=219, length=151 Sending duplicate reply to client dlink:4754 - ID: 219 Re-sending Access-Accept of id 219 to 192.168.0.1 port 4754 Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.1:4754, id=219, length=151 Sending duplicate reply to client dlink:4754 - ID: 219 Re-sending Access-Accept of id 219 to 192.168.0.1 port 4754 Waking up in 6 seconds...

2 1

Re: FreeRadius installation problem.
by Ramm-Ericson, Johannes 01 Nov '06

01 Nov '06

Chad Best wrote: > Date: Tue, 31 Oct 2006 09:45:09 -0800 (PST) > From: Chad Best <chadabst-1(a)yahoo.com> > Subject: FreeRadius installation problem. > To: freeradius-users(a)lists.freeradius.org > Message-ID: <20061031174509.18334.qmail(a)web31102.mail.mud.yahoo.com> > Content-Type: text/plain; charset="iso-8859-1" > > When I run ./confiugre, make and make install, "radiusd" does not > install. I have checked the/usr/local/bin and /usr/local/sbin and it > is not there. Yes, I did make sure that I was showing hidden files > when I search for it. I also did a search for radiusd and it does not > show up anywhere. Therefore, when I try to run radiusd by typing > "radiusd -X", it says command not found. > > I am running Ubuntu Linux and trying to install > Freeradius-1.0.0(behind the times, I know). I am a total newbie to > Freeradius altogether, so please be patient! I have already tried to > reinstall, but that didn't work. Any help would greatly be appreciated. Hi Chad! Is there any particular reason that you are compiling from source (and using a very old version of freeradis aswell)? If there is no absolute requirement for you to compile from source I'd suggest using the freeradius package in the ubuntu repository. That should get you started with freeradius. YMMV but once you've had a chance to play around with freeradius and maybe want to start using it in a more demanding fashion - then I'd go with compiling it myself. Install it using the following command: sudo apt-get install freeradius In Ubuntu 6.10 (Edgy) you'll be installing freeradius 1.1.3 (the latest stable version). I think Ubuntu 6.06 (Dapper) carries freeradius 1.1.2 - but I'm not sure. BR, Johannes

2 1

How to configure USERS file to assign the VLAN ID according to LDAP group name?
by richard Bai 01 Nov '06

01 Nov '06

Hi Everyone, I configure a Freeradius server working with LDAP. The group name in LDAP is used as the VLAN ID issued by radius too. This is my *users* file configuration: *DEFAULT Group == "1"* * Auth-Type = LDAP,* * Tunnel-Type = 13,* * Tunnel-Medium-Type = 6,* * Tunnel-Private-Group-ID = 1,* * Fall-Through = 1* ** *DEFAULT Group == "10"* * Auth-Type = LDAP,* * Tunnel-Type = 13,* * Tunnel-Medium-Type = 6,* * Tunnel-Private-Group-ID = 10,* * Fall-Through = 1* ** Now, it works fine except I have to add more lines manual once I add one more group in LDAP. Because freeradius is going to assign the VLAN ID by matching the Group name replied by LDAP with the configured Group name in* users* file. Can I configure the *Group* as a variable containing the value of the group name in LDAP, and radius can assign the Tunnel-Private-Group-ID by recognizing the variable? Such as programming: *Tunnel-Private-Group-ID = Group * ** Thank you very much! Richard

3 5