April 2006 - Freeradius-Users - lists.freeradius.org

RE: Auth-Type = System not working
by Andreas Lund 07 Apr '06

07 Apr '06

Fri, 7 Apr 2006 09:54:54 -0400, "Gunther" <freeradius(a)caribsms.com> wrote: > Have you tried: Auth-Type := System Umm no, this is not how it appears in 'man 5 users', but let me check... *clicketyclick* Still no go :-/ -Andreas.

1 0

Probleme with EAP/TTLS - PAP
by Frederic Cerisier 07 Apr '06

07 Apr '06

Hello, I am trying to configure freeradius 1.0.5 with EAP/TTLS - PAP. But I had a problem at users authentification. My windows client is SecureW2. It's configured with PAP method. I tried others authentications ( eap/ttls-md5 and eap/tls ), these authentications work correctly. Into my radius.conf file, I configured pap module with : encryption_scheme = clear Log radius : rad_check_password: Found Auth-Type PAP auth: type "PAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_pap: Attribute "Password" is required for authentication. modcall[authenticate]: module "pap" returns invalid for request 0 modcall: group Auth-Type returns invalid for request 0 auth: Failed to validate the user. My users file is : "toto" Auth-Type := PAP, User-Password == "totoPAP" Reply-Message = "Hello, %u" I think that my other files are right. Could you help me ? Yours sincerely -- Cerisier Frédéric cerisier.frederic(a)gmail.com

2 1

Redundant ldap's bug?
by Paulo Cabrita 07 Apr '06

07 Apr '06

Hi! I have freeradius 1.1.0 working and I want to have a redundant/load balancing mecanism but when I use TLS to secure the communication with the ldaps, FR only works with one server (eg: ldapmaster). The log says that it cannot contact the other server (eg: ldapslave). But if I use one ldap in clear-text communication, it works perfectly, that is I have redundant load balancing with one LDAP/TLS and another LDAP/clear. Of course it's not what I want. :-) My configurations are: modules { ... ldap ldapmaster { server = "checkpoint2" port = 636 basedn = "ou=users,dc=ual,dc=pt" filter = "(mail=%{User-Name})" dictionary_mapping = ${raddbdir}/ldap.attrmap timeout = 60 timelimit = 60 net_timeout = 60 ldap_connections_number = 30 access_attr = "radiusClientIPAddress" start_tls = no tls_cacertfile = ${raddbdir}/1x/checkpoint2.pem tls_certfile = ${raddbdir}/1x/checkpoint2.pem tls_keyfile = ${raddbdir}/1x/checkpoint2.pem } ldap ldapslave { server = "checkpoint" port = 636 basedn = "ou=users,dc=ual,dc=pt" filter = "(mail=%{User-Name})" dictionary_mapping = ${raddbdir}/ldap.attrmap timeout = 60 timelimit = 60 net_timeout = 60 ldap_connections_number = 30 access_attr = "radiusClientIPAddress" start_tls = no tls_cacertfile = ${raddbdir}/1x/checkpoint.pem tls_certfile = ${raddbdir}/1x/checkpoint.pem tls_keyfile = ${raddbdir}/1x/checkpoint.pem } ... } .... redundant-load-balance { ldapmaster ldapslave } Any idea? TIA. -- Atentamente, ------------------------------------ |Paulo Cabrita, Msc | |Director do Centro de Informática | |da Universidade Autónoma de Lisboa| |Tel: +351-213177635 | |Fax: +351-213533702 | |E-mail: pjc(a)ual.pt | ------------------------------------

3 7

Re: How to make FR reset the logs
by Mordor Networks 06 Apr '06

06 Apr '06

Date: Wed, 05 Apr 2006 11:09:58 -0600 From: Guy Fraser <guy(a)incentre.net> Subject: Re: How to make FR reset the logs To: freeradius-users(a)lists.freeradius.org Message-ID: <1144257000.9277.140.camel(a)sigurd.incentre.net> Content-Type: text/plain On Wed, 2006-05-04 at 06:15 +0300, Mordor Networks wrote: > hi > Is it possible to make FR remove all monthly accounting logs from the > database "mysql"? Yikes, why would you want to do that? Thanks for your reply . i have pppoe-server with FR and mysql and dialup_admin , and 600 user , so i have a lot of traffic and logs daily/monthly Wouldn't it be better to move the data to monthly archive tables, then remove the data and vacuum the table? If there is a way to do the it would be great This is basically what I currently use, so that when a customer tries to dispute his charges, we can produce detailed information very quickly. I currently maintain 3+ years of detail, users can check totals, summaries or detailed logging for their account from the beginning of the third year ago {IE Jan 2003} until the previous logout. Once I have a similar scheme in place I will be moving to which ever current version of FreeRadius is available. I will continue to work toward integrating similar functionality into FreeRadius, that I developed for Cistron, allowing dynamic {using xlat} table names. I currently use this method in my custom version of Cistron Radius, to generate new logging tables every month as required. The system I developed has met our needs for the last 5+ years, but I would prefer to build support into an open platform {FreeRadius}, so others can make use of the same advantages, and the community can enhance and support the project. Thanks for the info , thus i still have no clue...

3 4

Re: mysql-devel??
by Pelusa Vali 06 Apr '06

06 Apr '06

>In Debian etch the MySQL client headers are in package libmysqlclient15-dev. > >However as Peter said you should just install a binary version from >Debian with apt-get. ># apt-get install freeradius-mysql freeradius-dialupadmin > >If you really want to recompile FreeRADIUS yourself, search in the FAQ >how to build a Debian package from sources. > >> and, by the way, how may i uninstall freeradius?? > >Like any other Debian package: ># apt-get remove freeradius > >-- >Nicolas Baradakis thanks so much Nicolas, but now i have a problem i installed freeradius from sources compiling it and now i need use mysql, i tested it in another pc installing first mysql and then compiling freeradius and works great. but now, are there any way to uninstall freeradius (compiled from sources) to rebuild it to use mysql?? thanks for your help _______________________________________________________________ Halloween Humour: What did the dragon say when he saw the knight in his shining armour? postmaster.co.uk http://www.postmaster.co.uk/cgi-bin/meme/quiz.pl?id=155

1 0

rlm_ldap: object not found
by Marc Delisle 06 Apr '06

06 Apr '06

Hi, thanks to those who answered me for my previous post. It turned out to be a certificate problem. Now, freeradius binds to LDAP on Netware, but does not find any object: rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in o=college, with filter (uid=delislma) rlm_ldap: object not found or got ambiguous search result rlm_ldap: search failed Thanks, Marc Delisle

3 3

Termination when there is no traffic
by Johnny 06 Apr '06

06 Apr '06

Hi there, I've got a little proiblem with my radius server. I use it for dial-in accounts via ISDN. I've the problem that connections are terminated automatically when no traffic is on the line. The authentification works without problems, but I do not know which parameter I have to change so that connections wont be terminated automatically anymore. Could anyone help me with this? Thank you! Regards, John

3 2

mysql-devel??
by Pelusa Vali 06 Apr '06

06 Apr '06

hi list, now i'd like to compile freeradius and later use dialup-admin, it needs mysql and in book RADIUS Jonathan Hassell says it's necessary have at least mysql-devel, but i use debian etch and cann't find such package, may be it's not necessary for debian or new mysql versions don't use it any more?? and, by the way, how may i uninstall freeradius?? thanks for your help. _______________________________________________________________ Halloween Trvia: What have bonfires got to do with Halloween? postmaster.co.uk http://www.postmaster.co.uk/cgi-bin/meme/quiz.pl?id=126

3 2

Freeradius cannot find rlm_sql_postgresql driver!
by lmyho 06 Apr '06

06 Apr '06

Hello All, I am trying to test the freeradius to work with postgresql database. Just installed freeradius 1.1.0 on debian system via 'aptitude install' command of debian. The radiusd.conf file was modified to work with postgresql and the postgresql.conf file also put in the position for FR to use. However, when I issued command to start the FR, the radius server did not start! In the log file, it shows: Error: rlm_sql (sql): Could not link driver rlm_sql_postgresql: rlm_sql_postgresql.so: cannot open shared object file: No such file or directory Error: rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. Error: radiusd.conf[6]: sql: Module instantiation failed. Error: radiusd.conf[1111] Unknown module "sql". Error: radiusd.conf[1106] Failed to parse authorize section. The last three entries seems like just the consiquences of cannot find the postgresql driver. But the first two entries make me panic! In my postgresql.conf file, the driver is listed as driver="rlm_sql_postgresql" as indicated by FR. But why I got the err of 'cannot open shared object file: No such file or directory'? Please can anyone tell what is happenning? And what should I do now?? Where is the rlm_sql_postgresql driver?? pretty panic:( Help!! Highly appreciate any help from you!! Thanks!!! leo __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 4

Re: mysql-devel??
by Pelusa Vali 06 Apr '06

06 Apr '06

>If you plan to use freeradius+mysql on debian I suggest you just install the >packages that come with it. It's not really necessary to compile it >yourself.. Thanks Peter, now my question is, i wan to use it to add security to a wlan and use hostapd and driver madwifi, so, it is not necessary to compile freeradius??, i use openssl to create certificates (use eap-peap). Second, do you know any way to uninstall freeradius in debian?? thanks again. _______________________________________________________________ What major city is located on the mouth of the Pasig river and the head of a bay with the same name as the city? postmaster.co.uk http://www.postmaster.co.uk/cgi-bin/meme/quiz.pl?id=169

1 0