April 2006 - Freeradius-Users - lists.freeradius.org

Modifying username before its handed off to other modules?
by David Lais 11 Apr '06

11 Apr '06

Hello, I need to modify the username attribute dynamically before its handed off to other modules. Is it possible to use the "rlm_attr_rewrite"-module in a simple perl script? I want to change usernumbers to username. Any ideas about that one? Thanks, David Lais david.lais(a)urz.uni-heidelberg.de

1 0

filter to authenticate posixAccount users
by monish ar 11 Apr '06

11 Apr '06

Hi, I was a little confused about radiusd.conf settings for ldap authentication. These are a few doubts i have ... 1) Is there any specific filter entry to authenticate posixAccount users? The default is filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" , will this work for posixAccount / shadowAccount users? 2) Do i need to comment the password_attribute = "userPassword" entry for successful bind to the ldap server? 3) Why does the entry : base_filter = "(objectclass=radiusprofile)" gets set when radiusd runs even though i comment it in the radiusd.conf file? Is the base filter entry required for ldap authentication? If yes, is the above default entry correct? I've tried rlm_ldap authentication but failed till now,i get the error message during authentication. rlm_ldap: Bind failed with invalid credentials However,bind is successful during authorization but fails during authentication... any ideas?

1 0

Version 1.1.1 stops responding
by King, Michael 10 Apr '06

10 Apr '06

So I built 1.1.1 on Debian. After a period of so many hours (variable) it stops responding. (Sometimes 2hours, sometimes 16hours) Now here's where it get's weird, (and makes me suspect it might not be freeRADIUS at the root cause) If I stop and restart the freeRADIUS service, it continues to ignore RADIUS packets. But if I restart the server (hard reboot) it works fine. Till it stops responding again. Obviously this is not enough information to help you diagnose the problem. How do I gather that information? The box is a 233 Pentium with 64 megs of ram. Has about 15 AP's, with around 100 users (not simultaneous, maybe 30 simultaneous) So what's the suggested way of gathering more info? Running debug mode piping to a text file?

7 8

radaccounting, what does octets mean?
by Alex M 10 Apr '06

10 Apr '06

In accounting, what does an octet mean? Thanks!

3 2

Re: Freeradius-Users Digest, Vol 12, Issue 41 (Away from the office)
by Robert Wills 10 Apr '06

10 Apr '06

I am away from the office, returning on the 26th of April 2006, if you have any urgent problems please forward them to SWRC IT (it(a)bunbury.training.wa.gov.au) Or Call 9780 7314 . See you soon Robert

1 0

Re: dialup admin & ippool administraton
by Olaf Schäfer 10 Apr '06

10 Apr '06

> the sqlippool module in cvs does this.. This module sounds interesting - something I haven't take into my considerations keeping the dynamic ippool data in the sql-db, too. And it's obvious to do it this way using a primary and a backup server. But the configuration information like "range-start" etc. is still stored in the radiusd.conf. My idea was to put these configuration information for each ippool into the mysql-db. Some background information for better understanding :) My task is to migrate from MS-IAS to freeradius. Thus people are used to do administration tasks with a GUI. :) At least normal production administration tasks should be integrated within a GUI. Putting configuration information into a db would save the parsing and editing the radius.conf by dialup-admin scripts. best regards, Olaf

3 3

Re: /usr/local/lib/rlm_pam.a: invalid ELF header [SOLVED]
by Aaron Paetznick 10 Apr '06

10 Apr '06

After further testing, I seem to have discovered a fix/workaround. The key was to define --with-system-libtool. I don't know if this affects other 64-bit systems, but if other systems will also need to use the system libtool in this way, I suggest adding something in the documentation. What version of libtool comes with FreeRADIUS, and could/should it be upgraded? Thanks for the help. --Aaron Alan DeKok wrote: > Aaron Paetznick <aaronp(a)critd.com> wrote: >> Is rlm_pam compatible with 64-bit systems? Thanks in advance. > > It's not an issue with rlm_pam. It's probably a 32/64-bit > compatibility problem. > > If your compiler produces 64-bit libraries, the system should be > able to load 64-bit libraries. Not having access to your system, I > don't know what format rlm_pam is in, or what's going wrong. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Digest& Messenger
by saman alaniazar 09 Apr '06

09 Apr '06

Dear All I have installed FreeRadius 1.1.0 as an authentication server for our sip proxy, I am using MSN messenger and some other sip phone to test. everything in my database is ok and I receive access packet by the sip phones except MSN messenger , when I am using MSN mesenger , I receive reject packet. I searched all mailing list but no answer. do you think that there is any incompatability between MSN messenger and FreeRadius. is there any differences between digest method of freeradius and MSN messenger? I appreciate any help and be grateful for your favours. Best regard -- S.A.A

2 1

/usr/local/lib/rlm_pam.a: invalid ELF header
by Aaron Paetznick 09 Apr '06

09 Apr '06

I'm trying to build FreeRADIUS v1.1.1 on CentOS 4.3 x86_64. I'm not passing configure any special arguments. When I start the server, here's what I get in the log: Sun Apr 9 03:51:28 2006 : Error: radiusd.conf[589] Failed to link to module 'rlm_pam': /usr/local/lib/rlm_pam.a: invalid ELF header Sun Apr 9 03:51:28 2006 : Error: radiusd.conf[1872] Unknown module "pam". Sun Apr 9 03:51:28 2006 : Error: radiusd.conf[1840] Failed to parse authenticate section. Is rlm_pam compatible with 64-bit systems? Thanks in advance. --Aaron

2 1

RADIUS stops responding after a while
by Alex M 08 Apr '06

08 Apr '06

I've got strange behavior on y FR, need to find the way to prevent it, and find out what caused it. I've just went to my radius server and found out that it doesn't want to handle requests.. I restarted it in debug and it told me that SQL module is unknown. (was working fine for 1 month) I restarted again in debug and now it went OK and works fine, but this thing is not acceptable in the field . So does any one knows what could cause such a behavior (not accepting requests, due to module malfunction) and more importantly is there any way to monitor the server functionality? Let's say something like send testing request each 30min or something and if server doesn't reply send email notification? Thanks!

4 12