April 2006 - Freeradius-Users - lists.freeradius.org

Re: Problem with Cisco-AVPair
by Dag Bodin 15 Apr '06

15 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0

Re: Problem with Cisco-AVPair
by Dag Bodin 15 Apr '06

15 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0

Re: Problem with Cisco-AVPair
by Dag Bodin 15 Apr '06

15 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0

Re: Problem with Cisco-AVPair
by Dag Bodin 15 Apr '06

15 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0

Re: Problem with Cisco-AVPair
by Dag Bodin 15 Apr '06

15 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0

Segmentation fault when usin freeradius with LDAP and fedora core 3
by sukhvinder kumar 15 Apr '06

15 Apr '06

Hi, I'm using Fedora Core 3 , openldap-2.2.13-2 , freeradius-1.0.1-1.RHEL3. When i'm running the radius in debugging mode and trying to authenticate the user using "radtest" command its giving the Segmentation fault like : rad_recv: Access-Request packet from host xx.xx.xx.xx:41523, id=169, length=59 User-Name = "testuser" User-Password = "^'\005#\014\373]\305m\\\311\013\345\373\201\237" NAS-IP-Address = 255.255.255.255 NAS-Port = 2 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 users: Matched DEFAULT at 214 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for testuser radius_xlat: '(uid=testuser)' radius_xlat: 'dc=example' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to xx.xx.xx.xx:389, authentication 0 rlm_ldap: bind as cn=Manager,dc=example/secret to xx.xx.xx.xx:389 Segmentation fault Is anybody having idea abt this error. __________________________________________________________ Yahoo! India Matrimony: Find your partner now. Go to http://yahoo.shaadi.com

1 0

rlm_python question...
by i_amok i_amok 15 Apr '06

15 Apr '06

why radius say : authorize: function call failed exceptions.TypeError: unsubscriptable object below is a modify radius_test.py ===================================== # Miguel A.L. Paraz <mparaz(a)mparaz.com> import radiusd import MySQLdb def instantiate(p): print "*** instantiate ***" print p def authorize(p): print "*** authorize ***" print radiusd.radlog(radiusd.L_INFO, '*** radlog call in authorize ***') print print p dbHandle = MySQLdb.connect(db="radius", host="localhost", user="radius", passwd="radius") userName = None userPasswd = None for t in p: if t[0] == 'User-Name': userName = t[1] elif t[0] == 'Password': userPasswd = t[1] sql = 'select value from radcheck where username = ' + userName + ' limit 1' dbCursor = dbHandle.cursor() dbCursor.execute(sql) result = dbCursor.fetchone() if not result: dbCursor.close() return radiusd.RLM_MODULE_NOTFOUND if result[0] != userPasswd[1:-1]: return radiusd.RLM_MODULE_REJECT dbCursor.close() return (radiusd.RLM_MODULE_OK, (('Reply-Message', 'ok'),), (('Auth-Type', 'python'),)) def preacct(p): print "*** preacct ***" print p return radiusd.RLM_MODULE_OK def accounting(p): print "*** accounting ***" radiusd.radlog(radiusd.L_INFO, '*** radlog call in accounting (0) ***') print print p return radiusd.RLM_MODULE_OK def detach(): print "*** goodbye from radiusd_test.py ***" return radiusd.RLM_MODULE_OK ====================================== and my python.conf ====================================== python { mod_instantiate = radiusd_test func_instantiate = instantiate mod_authorize = radiusd_test func_authorize = authorize mod_accounting = radiusd_test func_accounting = accounting mod_preacct = radiusd_test func_preacct = preacct mod_detach = radiusd_test func_detach = detach } ====================================== i had test original radiusd_test ,it's work well, but i add the sql query,it's dont work... and i also test the pure python script ,it's work well with "import MySQLdb" and some sql query... i don't know why...please help me....

1 0

openldap version
by foreveruni＠clix.pt 14 Apr '06

14 Apr '06

Yes I think you can do USE_OPENLDAP_VER=2.0 (I think) in /etc/make.conf or TRY_OPENLDAP_VER,I don't know for sure.. oh are you using eap? My eap is failling.Were you able to create the ssl certificates in freeBSD?I couldn't.probably because of xpextensions. can you help me? Tried to upgrade current machine with: FreeBSB 4.11 OpenLDAP 2.0.X Freeradius 1.0.4 To Freeradius 1.1.1 using ports But it tried to install openldap 2.2.X as well... I want to used existing openldap (2.0.X) It is possible to force freeradius ports installation to use existing openldap client? TQ --haizam

2 1

Acct-Type and MySQL
by Luca Corti 14 Apr '06

14 Apr '06

Hello, I'm using MySQL as an authentication and accounting backend. I'd like to move the accounting for users in a particular group to a different table in the database. sql.conf: --------- sql sql_generic { ... } sql sql_dialup { ... } radiusd.conf: ------------- accounting { ... Acct-Type DIALUP { sql_dialup } sql_generic } Now I'd like to specify "Acct-Type := DIALUP" in MySQL for a particular group of users so that accounting for that group uses sql_dialup. Is this doable? Do I need to specify Acct-Type as a reply or check item? thanks -- Luca Corti PGP Key ID 1F38C091 BOFH excuse of the moment: The kernel license has expired

2 3

freeRadius vs. AIX
by Reynold McGuire 13 Apr '06

13 Apr '06

I know this has come up a few other times... But I have searched back thru all of the archives and still have not come up with a working build of freeRadius for AIX. If anyone has freeRadius working under AIX, please let me know and maybe we can trade configure scripts. The end result of what I need are: freeRadius to support WPA/EAP and or WPA/MSCHAP-V2 I would *love* to be able to use WPA on my wireless device to tunnel MSCHAPV2 back to Active Directory for user authentication. Again - If anyone has been able to get this to work, please let me know. Thanks in advance. - Reynold

3 6