February 2006 - Freeradius-Users - lists.freeradius.org

eap.conf configuration
by dark0s dark0s 01 Feb '06

01 Feb '06

What is the difference between the following variables: 1) private_key_password 2) private_key_file Thanks ___________________________________ Yahoo! Mail: gratis 1GB per i messaggi e allegati da 10MB http://mail.yahoo.it

2 2

ms-chap authentication with client tool?
by DilipSimha.N.M 01 Feb '06

01 Feb '06

hi, is there any simple tool(other than jradius) which can be used as radius client and which can be used to test mschap authentication?? if so, please give the packet contents for radius client and the users file check-items. --DilipSimha

5 6

Re:Re:Re Error in make freeradius_1.1.0(Correct)
by Velikanov 01 Feb '06

01 Feb '06

Good day, Nicolas Baradakis I edit Makefile in src/modules/rlm_dbm as you advise and got such result EXCUSE for my previous post The CORRECT result of #make is ... gmake[6]: Entering directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr /inc lude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_ H -c rlm_dbm.c -o rlm_dbm.o rlm_dbm.c: In function `sm_parse_user': rlm_dbm.c:176: warning: assignment discards qualifiers from pointer target type rlm_dbm.c:210: warning: passing arg 2 of `paircmp' discards qualifiers from poin ter target type /u01/data/freeradius-1.1.0/libtool --mode=link ld \ -module -static -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO _KRB 5 -I/usr/include/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAV E_GD BM_NDBM_H rlm_dbm.o -o rlm_dbm.a mkdir .libs ar cru rlm_dbm.a rlm_dbm.o ranlib rlm_dbm.a /u01/data/freeradius-1.1.0/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_PO SIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr/include/openssl -Wall -D_GNU_ SOUR CE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_H -c rlm_dbm_parser.c rm -f .libs/rlm_dbm_parser.lo gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr/ incl ude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_H -c r lm_dbm_parser.c -fPIC -DPIC -o .libs/rlm_dbm_parser.lo rlm_dbm_parser.c: In function `storecontent': rlm_dbm_parser.c:165: warning: assignment discards qualifiers from pointer targe t type gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr/ incl ude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_H -c r lm_dbm_parser.c -o rlm_dbm_parser.o >/dev/null 2>&1 mv -f .libs/rlm_dbm_parser.lo rlm_dbm_parser.lo /u01/data/freeradius-1.1.0/libtool --mode=link gcc rlm_dbm_parser.lo ../../lib/l ibradius.la -L/usr/lib -lssl -L/usr/lib -lcrypto -lnsl -lresolv -lpthread -lgd bm -o rlm_dbm_parser gcc rlm_dbm_parser.o -o .libs/rlm_dbm_parser ../../lib/.libs/libradius.so -L/us r/lib -lssl -lcrypto -lnsl -lresolv -lpthread usr/lib/libgdbm.so -Wl,--rpath - Wl,/usr/local/lib ../../lib/.libs/libradius.so: undefined reference to `MD5Final' ../../lib/.libs/libradius.so: undefined reference to `crypt' ../../lib/.libs/libradius.so: undefined reference to `MD5Init' ../../lib/.libs/libradius.so: undefined reference to `MD5Update' collect2: ld returned 1 exit status gmake[6]: *** [rlm_dbm_parser] Error 1 gmake[6]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/u01/data/freeradius-1.1.0' make: *** [all] Error 2

2 1

Dictionary updates: Bay/Nortel
by Jonathan De Graeve 01 Feb '06

01 Feb '06

The file is a changed 1.0.5 dictionary file, I looked at CVS and it seems that it isn't changed in 1.1.0 This dictionary file adds support for radius attributes/values needed to login on the Nortel Passport 8000 series switches with RADIUS authentication/accounting enabled. Tested and working on all current PP 3.5.x.x, 3.7.x.x and 4.x.x.x versions. I hope you can add this one also to the CVS Kind Regards, J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst +32 15/50.52.98 jonathan.de.graeve(a)imelda.be --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite ---------

1 0

Re: freeradius 1.0.5 + openLDAP 2.3.17 ( with bdb ?? )
by Dusty Doris 01 Feb '06

01 Feb '06

On Wed, 1 Feb 2006, sumi wrote: > HI Folks, > > Do anyone know which berkeley database version is compatible with openLDAP > 2.3.17?? > > Im trying to compile the openldap2.3.17 with bdb-4.0 which is giving > incompatibility error. > > Any earliest reply will be of great help. I would recommend using BDB 4.2.52 with the 4 patches from Sleepycat. That is considered the most stable right now. I've seen a few reports of good performance from the 4.4.20 release, however, I've also heard of some issues with it and it hasn't been around long enough to get good tests.

1 0

bind failed in LDAP authentication phase
by Rafael Roldán 01 Feb '06

01 Feb '06

Hy all, I am still doing tests with the rlm_ldap module and I have encountered with the following problem: In the authenticate phase the user replica try to bind to the LDAP server. But this attempts fails. However, in the access control section of the LDAP server, it has permission... I don´t know what I am doing wrong I have configured my LDAP server with the following control access. In the slapd.conf: access to * by self write by dn="cn=billing,ou=admins,ou=radius,dc=mydomain,dc=com" write by dn="cn=freeradius,ou=admins,ou=radius,dc=mydomain,dc=com" read by anonymous auth by * none ---------------------------------------- My users file: DEFAULT NAS-Port == 58, User-Profile := "uid=isdn,ou=profiles,ou=radius,dc=mydomain,dc=com" DEFAULT Auth-Type := Reject Reply-Message = "Llamse a servicio tecnico" ---------------------------------------- My directory: dn: dc=mydomain,dc=com objectclass: dcObject objectclass: organizationalUnit ou: Mydomain.com Radius dc: mydomain dn: ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: radius dn: ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: profiles dn: ou=users,ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: users dn: ou=admins,ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: admins dn: uid=dial,ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: dial radiusServiceType: Framed-User radiusFramedProtocol: PPP radiusFramedIPNetmask: 255.255.255.0 radiusFramedRouting: None dn: uid=isdn,ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: isdn radiusServiceType: Framed-User radiusFramedProtocol: PPP radiusFramedIPNetmask: 255.255.254.0 radiusFramedRouting: None dn: uid=example,ou=users,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: example userPassword: test radiusGroupName: dial radiusGroupName: isdn dn: cn=freeradius,ou=admins,ou=radius,dc=mydomain,dc=com objectclass: person sn: freeradius cn: freeradius userPassword: freeradius dn: cn=billing,ou=admins,ou=radius,dc=mydomain,dc=com objectclass: person sn: billing cn: billing userPassword: billing dn: cn=replica,ou=admins,ou=radius,dc=mydomain,dc=com objectclass: person sn: replica cn: replica userPassword: replica ------------------------------------------------ My radiusd.conf: ldap { server = "localhost" identity = "cn=freeradius,ou=admins,ou=radius,dc=mydomain,dc=com" password = freeradius basedn = "ou=radius,dc=mydomain,dc=com" filter = "(&(sn=replica)(cn=%{Stripped-User-Name:-%{User-Name}}))" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 10 password_attribute = userPassword groupname_attribute = radiusGroupName groupmembership_filter = "(&(uid=%{Stripped-User-Name:-%{User-Name}}))(objectclass=radiusProfile)" groupmembership_attribute = radiusGroupName timeout = 3 timelimit = 5 net_timeout = 1 } --------------------------- Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:39089, id=92, length=59 User-Name = "replica" User-Password = "replica" NAS-IP-Address = 10.95.4.93 NAS-Port = 58 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "replica", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 1 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for replica radius_xlat: '(&(sn=replica)(cn=replica))' radius_xlat: 'ou=radius,dc=mydomain,dc=com' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to localhost:389, authentication 0 rlm_ldap: bind as cn=freeradius,ou=admins,ou=radius,dc=mydomain,dc=com/freeradius to localhost:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=radius,dc=mydomain,dc=com, with filter (&(sn=replica)(cn=replica)) rlm_ldap: performing search in uid=isdn,ou=profiles,ou=radius,dc=mydomain,dc=com, with filter (objectclass=radiusprofile) rlm_ldap: Adding radiusFramedRouting as Framed-Routing, value None & op=11 rlm_ldap: Adding radiusFramedIPNetmask as Framed-IP-Netmask, value 255.255.254.0 & op=11 rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11 rlm_ldap: Adding radiusServiceType as Service-Type, value Framed-User & op=11 rlm_ldap: Added password replica in check items rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: user replica authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type LDAP auth: type "LDAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_ldap: - authenticate rlm_ldap: login attempt by "replica" with password "replica" rlm_ldap: user DN: cn=replica,ou=admins,ou=radius,dc=mydomain,dc=com rlm_ldap: (re)connect to localhost:389, authentication 1 rlm_ldap: bind as cn=replica,ou=admins,ou=radius,dc=mydomain,dc=com/replica to localhost:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind failed with invalid credentials modcall[authenticate]: module "ldap" returns reject for request 0 modcall: group Auth-Type returns reject for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 92 to 127.0.0.1:39089 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 92 with timestamp 43e0b2db Nothing to do. Sleeping until we see a request. Any help is very appreciated Regards, Rafa

1 0

Re:Re:Re Error in make freeradius_1.1.0
by Velikanov 01 Feb '06

01 Feb '06

Good day, Nicolas Baradakis I edit Makefile in src/modules/rlm_dbm as you advise and got such result after #make ... Making static dynamic in rlm_dbm... gmake[6]: Entering directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr /inc lude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_ H -c rlm_dbm.c -o rlm_dbm.o rlm_dbm.c: In function `sm_parse_user': rlm_dbm.c:176: warning: assignment discards qualifiers from pointer target type rlm_dbm.c:210: warning: passing arg 2 of `paircmp' discards qualifiers from poin ter target type /u01/data/freeradius-1.1.0/libtool --mode=link ld \ -module -static -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO _KRB 5 -I/usr/include/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAV E_GD BM_NDBM_H rlm_dbm.o -o rlm_dbm.a mkdir .libs ar cru rlm_dbm.a rlm_dbm.o ranlib rlm_dbm.a gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr /inc lude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_ H -c rlm_dbm_parser.c -o rlm_dbm_parser.o rlm_dbm_parser.c: In function `storecontent': rlm_dbm_parser.c:165: warning: assignment discards qualifiers from pointer targe t type /u01/data/freeradius-1.1.0/libtool --mode=link gcc rlm_dbm_parser.o ../../lib/li bradius.a -L/usr/lib -lssl -L/usr/lib -lcrypto -lnsl -lresolv -lpthread -l gdbm -o rlm_dbm_parser gcc rlm_dbm_parser.o -o rlm_dbm_parser ../../lib/libradius.a -L/usr/lib -lssl - lcrypto -lnsl -lresolv -lpthread /usr/lib/libgdbm.so ../../lib/libradius.a(radius.o)(.text+0x11): In function `make_secret': /u01/data/freeradius-1.1.0/src/lib/radius.c:165: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0x1f):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:166: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x3c):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:167: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x47):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:168: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0xd6): In function `make_passwd': /u01/data/freeradius-1.1.0/src/lib/radius.c:204: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0xf1):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:205: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x115):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:211: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x153):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:216: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x169):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:221: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0x2b8): In function `make_tunnel_passwd': /u01/data/freeradius-1.1.0/src/lib/radius.c:293: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0x2d8):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:294: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x2f7):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:297: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x30e):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:298: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x34c):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:303: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x362):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:308: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0x9af): In function `rad_sign': /u01/data/freeradius-1.1.0/src/lib/radius.c:819: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0x9c4):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:820: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x9e7):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:821: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x9f9):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:822: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0xccd): In function `calc_acctdigest': /u01/data/freeradius-1.1.0/src/lib/radius.c:954: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0xcdf):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:955: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xcfc):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:956: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xd08):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:957: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0xd79): In function `calc_replydigest': /u01/data/freeradius-1.1.0/src/lib/radius.c:993: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0xd8b):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:994: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xda5):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:995: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xdb1):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:996: undefined reference to `MD5Final' ../../lib/libradius.a(hmac.o)(.text+0x86): In function `lrad_hmac_md5': /u01/data/freeradius-1.1.0/src/lib/hmac.c:93: undefined reference to `MD5Init' ../../lib/libradius.a(hmac.o)(.text+0x98):/u01/data/freeradius-1.1.0/src/lib /hma c.c:95: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xa7):/u01/data/freeradius-1.1.0/src/lib /hma c.c:96: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xb2):/u01/data/freeradius-1.1.0/src/lib /hma c.c:97: undefined reference to `MD5Final' ../../lib/libradius.a(hmac.o)(.text+0xba):/u01/data/freeradius-1.1.0/src/lib /hma c.c:101: undefined reference to `MD5Init' ../../lib/libradius.a(hmac.o)(.text+0xcc):/u01/data/freeradius-1.1.0/src/lib /hma c.c:103: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xda):/u01/data/freeradius-1.1.0/src/lib /hma c.c:104: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xe5):/u01/data/freeradius-1.1.0/src/lib /hma c.c:106: undefined reference to `MD5Final' ../../lib/libradius.a(hmac.o)(.text+0xfc):/u01/data/freeradius-1.1.0/src/lib /hma c.c:59: undefined reference to `MD5Init' ../../lib/libradius.a(hmac.o)(.text+0x107):/u01/data/freeradius-1.1.0/src/li b/hm ac.c:60: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0x116):/u01/data/freeradius-1.1.0/src/li b/hm ac.c:61: undefined reference to `MD5Final' collect2: ld returned 1 exit status gmake[6]: *** [rlm_dbm_parser] Error 1 gmake[6]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/u01/data/freeradius-1.1.0' make: *** [all] Error 2

1 0

Re:Re: Error in make freeradius_1.1.0
by Velikanov 01 Feb '06

01 Feb '06

Good day. Error during "#make" disappear after i commented-out this lines in configure #--with-openssl-includes=/usr/include/openssl \ #--with-openssl-libraries=/usr/lib What must i do now? Thanks. > gmake[6]: Entering directory > `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' > /u01/data/freeradius-1.1.0/libtool --mode=link gcc rlm_dbm_parser.o > ../../lib/li > radius.a -L/usr/lib -lssl -L/usr/lib -lcrypto -lnsl -lresolv -lpthread -l > gdbm > -o rlm_dbm_parser > gcc rlm_dbm_parser.o -o rlm_dbm_parser > ../../lib/libradius.a -L/usr/lib -lssl - > lcrypto -lnsl -lresolv -lpthread /usr/lib/libgdbm.so > ../../lib/libradius.a(radius.o)(.text+0x11): In function `make_secret': > /u01/data/freeradius-1.1.0/src/lib/radius.c:165: undefined reference to > `MD5Init wierd funkiness. looks like you're not picking up the local freeradius-devel/md5.h overrides (to avoid using a system libmd5). perhaps a result of the combination of options you have given the ./configure step? alan

1 0

ldap control access
by Rafael Roldán 01 Feb '06

01 Feb '06

Hy all, I have configured my LDAP server with the following control access. In the slapd.conf: access to * by self write by dn="cn=replica,ou=admins,ou=radius,dc=mydomain,dc=com" write by anonymous auth by * none --------------------------------------- My users file: DEFAULT Ldap-Group == isdn, NAS-Port == 58, User-Profile := "uid=isdn,ou=profiles,ou=radius,dc=mydomain,dc=com" DEFAULT Auth-Type := Reject Reply-Message = "Llamse a servicio tecnico" ------------------------------------------- My directory: dn: dc=mydomain,dc=com objectclass: dcObject objectclass: organizationalUnit ou: Mydomain.com Radius dc: mydomain dn: ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: radius dn: ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: profiles dn: ou=users,ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: users dn: ou=admins,ou=radius,dc=mydomain,dc=com objectclass: organizationalUnit ou: admins dn: uid=dial,ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: dial radiusServiceType: Framed-User radiusFramedProtocol: PPP radiusFramedIPNetmask: 255.255.255.0 radiusFramedRouting: None dn: uid=isdn,ou=profiles,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: isdn radiusServiceType: Framed-User radiusFramedProtocol: PPP radiusFramedIPNetmask: 255.255.254.0 radiusFramedRouting: None dn: uid=example,ou=users,ou=radius,dc=mydomain,dc=com objectclass: radiusprofile uid: example userPassword: test radiusGroupName: dial radiusGroupName: isdn dn: cn=freeradius,ou=admins,ou=radius,dc=mydomain,dc=com objectclass: person sn: freeradius cn: freeradius userPassword: freeradius dn: cn=billing,ou=admins,ou=radius,dc=mydomain,dc=com objectclass: person sn: billing cn: billing userPassword: billing dn: cn=replica,ou=admins,ou=radius,dc=mydomain,dc=com objectclass: person sn: replica cn: replica userPassword: replica ------------------------------------------------ When I try to authorize a user, it fails: rad_recv: Access-Request packet from host 127.0.0.1:39035, id=223, length=59 User-Name = "example" User-Password = "test" NAS-IP-Address = xx.yy.cc.vv NAS-Port = 58 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "example", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=users,ou=radius,dc=mydomain,dc=com' radius_xlat: '(uid=example)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to localhost:389, authentication 0 rlm_ldap: bind as / to localhost:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=users,ou=radius,dc=mydomain,dc=com, with filter (uid=example) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 users: Matched entry DEFAULT at line 3 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize If I remove the access control lines from slapd.conf, it works well. What am I doing wrong? Regards, Rafa

2 2

Error in make freeradius_1.1.0
by Velikanov 01 Feb '06

01 Feb '06

Good day. I succesfully installed Freeradius_1.0.4 on Red Hat Enterprise Linux ES release 3 (Taroon Update 3) Kernel 2.4.21-20.ELsmp on an i686 It is work good. Now i want to install Freeradius_1.1.0 on the same server and got an error when do "make" My configure (the same was for Freeradius_1.0.4): ./configure --with-snmp \ --disable-rlm-perl \ --with-pam \ --with-rlm-pam \ --with-experimental-modules \ --with-oracle-home-dir=/u01/app/oracle/product/10.1.0/ \ --with-oracle-lib-dir=/u01/app/oracle/product/10.1.0/rdbms/demo/ \ --with-oracle-include-dir=/u01/app/oracle/product/10.1.0/rdbms/demo/ \ --with-openssl-includes=/usr/include/openssl \ --with-openssl-libraries=/usr/lib And the RESULTS of make #make ... ... gmake[6]: Entering directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' /u01/data/freeradius-1.1.0/libtool --mode=link gcc rlm_dbm_parser.o ../../lib/li bradius.a -L/usr/lib -lssl -L/usr/lib -lcrypto -lnsl -lresolv -lpthread -l gdbm -o rlm_dbm_parser gcc rlm_dbm_parser.o -o rlm_dbm_parser ../../lib/libradius.a -L/usr/lib -lssl - lcrypto -lnsl -lresolv -lpthread /usr/lib/libgdbm.so ../../lib/libradius.a(radius.o)(.text+0x11): In function `make_secret': /u01/data/freeradius-1.1.0/src/lib/radius.c:165: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0x1f):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:166: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x3c):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:167: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x47):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:168: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0xd6): In function `make_passwd': /u01/data/freeradius-1.1.0/src/lib/radius.c:204: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0xf1):/u01/data/freeradius-1.1.0/src/l ib/r adius.c:205: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x115):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:211: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x153):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:216: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x169):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:221: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0x2b8): In function `make_tunnel_passwd': /u01/data/freeradius-1.1.0/src/lib/radius.c:293: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0x2d8):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:294: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x2f7):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:297: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x30e):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:298: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x34c):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:303: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x362):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:308: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0x9af): In function `rad_sign': /u01/data/freeradius-1.1.0/src/lib/radius.c:819: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0x9c4):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:820: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x9e7):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:821: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0x9f9):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:822: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0xccd): In function `calc_acctdigest': /u01/data/freeradius-1.1.0/src/lib/radius.c:954: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0xcdf):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:955: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xcfc):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:956: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xd08):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:957: undefined reference to `MD5Final' ../../lib/libradius.a(radius.o)(.text+0xd79): In function `calc_replydigest': /u01/data/freeradius-1.1.0/src/lib/radius.c:993: undefined reference to `MD5Init ' ../../lib/libradius.a(radius.o)(.text+0xd8b):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:994: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xda5):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:995: undefined reference to `MD5Update' ../../lib/libradius.a(radius.o)(.text+0xdb1):/u01/data/freeradius-1.1.0/src/ lib/ radius.c:996: undefined reference to `MD5Final' ../../lib/libradius.a(hmac.o)(.text+0x86): In function `lrad_hmac_md5': /u01/data/freeradius-1.1.0/src/lib/hmac.c:93: undefined reference to `MD5Init' ../../lib/libradius.a(hmac.o)(.text+0x98):/u01/data/freeradius-1.1.0/src/lib /hma c.c:95: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xa7):/u01/data/freeradius-1.1.0/src/lib /hma c.c:96: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xb2):/u01/data/freeradius-1.1.0/src/lib /hma c.c:97: undefined reference to `MD5Final' ../../lib/libradius.a(hmac.o)(.text+0xba):/u01/data/freeradius-1.1.0/src/lib /hma c.c:101: undefined reference to `MD5Init' ../../lib/libradius.a(hmac.o)(.text+0xcc):/u01/data/freeradius-1.1.0/src/lib /hma c.c:103: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xda):/u01/data/freeradius-1.1.0/src/lib /hma c.c:104: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0xe5):/u01/data/freeradius-1.1.0/src/lib /hma c.c:106: undefined reference to `MD5Final' ../../lib/libradius.a(hmac.o)(.text+0xfc):/u01/data/freeradius-1.1.0/src/lib /hma c.c:59: undefined reference to `MD5Init' ../../lib/libradius.a(hmac.o)(.text+0x107):/u01/data/freeradius-1.1.0/src/li b/hm ac.c:60: undefined reference to `MD5Update' ../../lib/libradius.a(hmac.o)(.text+0x116):/u01/data/freeradius-1.1.0/src/li b/hm ac.c:61: undefined reference to `MD5Final' collect2: ld returned 1 exit status gmake[6]: *** [rlm_dbm_parser] Error 1 gmake[6]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/u01/data/freeradius-1.1.0' make: *** [all] Error 2 Can you help me, please.

3 2