December 2006 - Freeradius-Users - lists.freeradius.org

Very big user database (solved)
by Felipe Neuwald 28 Dec '06

28 Dec '06

Oops, sorry.. solved: [root@mercury /usr/local/etc/raddb]# cat sql.conf | grep num_sql_socks num_sql_socks = 15 Increased from 5 to 15. Thanks, Felipe. ------------------- Hi folks, I put to work our new freeradius server, and I'm getting this message on my /var/log/radius.log: Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Our user database is big, something about 120k users. Does anybody knows how to solve this problem? Thank you, Felipe Neuwald.

1 0

NAS support for disconnect methods
by Daniel Lark 28 Dec '06

28 Dec '06

I am in the process of developing a generalized disconnect methodology for disconnects. While I know definitely that Cisco NAS with an IOS => 12.1 will support POD, does anyone out there know what equipment supports disconnects through SNMP or POD. I have equipment all over the map and need to plan accordingly. Obviously radkill is my ultimate back-up ;-) Thanks! _ _____ Daniel Lark Applications Developer Spirit Telecommunications 1500 Hampton St., Suite 101 Columbia, SC 29201 (803) 726-4755

2 1

Very big user database
by Felipe Neuwald 28 Dec '06

28 Dec '06

Hi folks, I put to work our new freeradius server, and I'm getting this message on my /var/log/radius.log: Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Our user database is big, something about 120k users. Does anybody knows how to solve this problem? Thank you, Felipe Neuwald.

1 0

FreeRadius overview
by David Covert 28 Dec '06

28 Dec '06

I have gotten freeRadius working with a mikrotik NAS using the users flat file (hooray for me! <g>). Now I need to have the freeRadius server reference a MS-SQL db server rather than the users file on the freeRadius server. I am quite fuzzy about the process tho. I am hoping for some basic edukashun. How do you tell freeRadius to reference an external MS-SQL db rather than the local users flat file? How do you issue the query to the db? (what file contains the connection string and query) How do the returning fields get mapped into RADIUS attributes? (what do you do when the db calls the field "uname" and RADIUS calls it "user-name") Thank you for your time, Dave Covert

5 5

Re: problem with NT-Password and LDAP
by Ana Gallardo Gómez 28 Dec '06

28 Dec '06

>Ana Gallardo Gómez wrote: >> Hello, my problem is, i have a Freeradius server that retrieves the >> authentication information from an OpenLDAP server; in this server the >> NT-Password atributte has 252 characters (32 characters from NT-hash + >> white spaces) >Why not just update the entries in LDAP to remove the space? >Alan DeKok. Well, I can not modify the LDAP server, I only can use it, so, while I ask the LDAP administrator to modify this atribute, I would like to modify in Freeradius server. I have read that there is a module to rewrite the value of an atribute on fly, but I can´t find how to use it. I have a regular expression to modify... I have a ssript perl to modify... but I don´t know how to use it. Thank you _________________________________________________________________ Consigue el nuevo Windows Live Messenger http://get.live.com/messenger/overview

2 1

RE: proxy authentication
by Dubi Lego 28 Dec '06

28 Dec '06

Our solution is to provide lawful information, according to a Court request on user's activity on the net. In order to do that we need to intercept their AAA activity and the actual data activity. The problem we are having is to collect the AAA activity for Authentication. We have found the way to forward the accounting data from the RADIUS to our RADIUS proxy and so we are notified on Session Start and Session End, but we need also to be notified on any attempt of a user to authenticate through the RADIUS. Are you familiar with any solution to do that? Thanks in advance for your help, Dubi -----Original Message----- From: freeradius-users-bounces+dlego=allot.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+dlego=allot.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, December 27, 2006 9:33 PM To: FreeRadius users mailing list Subject: Re: proxy authentication Dubi Lego wrote: > I will clarify my question. > Is it possible to forward all AAA messages including replies to another > server which will only listen to messages and won't be active. The short answer is that RADIUS doesn't do that. I'm not aware of *any* server, WWW, FTP, DNS, or otherwise that can do this. What you can do is to log all of the requests & responses to a "detail" file, and then copy that file somewhere else. Perhaps you might try explaining *why* you want this solution. What problem are you trying to solve? Why do you believe that this solution is the best one for the problem? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

4 3

Deploying Radius Blog site
by King, Michael 28 Dec '06

28 Dec '06

Alan, Your deploying radius blog site is showing: MySQL error! Error establishing a database connection! (Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)) 1. Are you sure you have typed the correct user/password? 2. Are you sure that you have typed the correct hostname? 3. Are you sure that the database server is running?

3 2

Ola lista!
by Marcao Nacional 27 Dec '06

27 Dec '06

Ola lista, Gostaria de saber se tem algume brasileiro nessa lista! _________________________________________________________________ Insta-le já o Windows Live Messenger. A nova geração do messenger. http://get.live.com/messenger/overview

1 0

Can't compile modules rlm_eap_peap and rlm_eap_tls
by adreas Polyxronopoulos 27 Dec '06

27 Dec '06

Hi everybody , I am trying to set up freeradius-1.1.3 and to support PEAP/MSCHAPV2 i need to compile 2 modules which aren't build with ./configure ,make , make install. These modules are rlm_eap_peap and rlm_eap_tls in /usr/local/src/freeradius-1.1.3/src/modules/rlm_eap/types/ directory. Then i do : root@apolyxrono2:/usr/local/src/freeradius-1.1.3/src/modules/rlm_eap/types/rlm_eap_peap# ./configure and the output is: checking for OpenSSL support... no configure: WARNING: silently not building rlm_eap_peap. configure: WARNING: FAILURE: rlm_eap_peap requires: OpenSSL. configure: creating ./config.status config.status: creating Makefile config.status: creating config.h config.status: config.h is unchanged I have installed libssl0.9.8 , libssl-dev and openssl . Can anyone help me because i don't have a lot of time !!! thanks Adreas Polyxronopoulos Send instant messages to your online friends http://uk.messenger.yahoo.com ___________________________________________________________ Try the all-new Yahoo! Mail. "The New Version is radically easier to use" – The Wall Street Journal http://uk.docs.yahoo.com/nowyoucan.html

2 1

RE: proxy authentication
by Dubi Lego 27 Dec '06

27 Dec '06

I will clarify my question. Is it possible to forward all AAA messages including replies to another server which will only listen to messages and won't be active. -----Original Message----- From: freeradius-users-bounces+dlego=allot.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+dlego=allot.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, December 26, 2006 6:48 PM To: FreeRadius users mailing list Subject: Re: proxy authentication Dubi Lego wrote: > Is it possible to proxy all authentication messages to specific remote > server including replies (Access-Reject, Access-Accept)? What do you mean by that? Proxying normally involves forwarding client requests to another server, and returning replies from that server back to the client. What you seem to be asking for is something else entirely. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1