May 2006 - Freeradius-Users - lists.freeradius.org

How can I account with Freeradius using mysql DB for Asterisk?
by fangh 18 May '06

18 May '06

freeradius-users，您好！ I'm a beginner with freeradius.I've got a problem,please help me, thanks a lot! I'd seen the document <Call Detail Recording to RADIUS Server> and the document <cdrdrivers.txt>. In the cdrdrivers.txt said that :" > RADIUS: The Radius CDR driver built upon the radiusclient-ng library > available at > http://developer.berlios.de/projects/radiusclient-ng/ > > Installing this library will provide the RADIUS client > function to Asterisk, and thus make it able to talk to > a RADIUS server. > > The CDR driver produces only 'stop' records. > > Compile, configure, and install the latest > radiusclient-ng library: > tar -zxvf radiusclient-ng-0.5.2.tar.gz && > cd radiusclient-ng-0.5.2 && > ./configure && > make && > make install > > Compile, or recompile Asterisk so that it will now add support > for the module: > make clean && > make update && > make && > make install > > Configure the /usr/local/etc/radiusclient-ng/servers > file to set the RADIUS server's IP address and secret. > Include the dictionary.asterisk file in the main > dictionary: > cp -p asterisk.dictionary /usr/local/etc/radiusclient-ng/ > cd /usr/local/etc/radiusclient-ng/ > echo '$INCLUDE /usr/local/etc/radiusclient-ng/asterisk.dictionary' >> dictionary > > The dictionary.asterisk file must also be included in > the RADIUS server's main dictionary file in a similar > manner. " I did things like that above,but after I recompile Asterisk and restart Asterisk Server,when I made a call,the radius server couldn't receive request messages. I also can not find dictionary.asterisk file after I recompile asterisk,why?And how can I get the dictionary.asterisk,what should I do? I'd configure the radius configurations,the files radiusd.conf,clients.conf,sql.conf in raddb directory at Freeradius server side,the files servers,radiusclient.conf at the radiusclient side. the detail configurations just like in <Call Detail Recording to RADIUS Server> doc said. 　　　　　　　　致礼！　　　　　　　　fangh 　　　　　　　　fghai(a)126.com 　　　　　　　　　　2006-05-18

1 0

How can I account with Freeradius using mysql DB?
by fangh 18 May '06

18 May '06

freeradius-users， I'm a beginner with freeradius.I've got a problem,please help me, thanks a lot! I'd seen the document <Call Detail Recording to RADIUS Server> and the document <cdrdrivers.txt>. In the cdrdrivers.txt said that :" > RADIUS: The Radius CDR driver built upon the radiusclient-ng library > available at > http://developer.berlios.de/projects/radiusclient-ng/ > > Installing this library will provide the RADIUS client > function to Asterisk, and thus make it able to talk to > a RADIUS server. > > The CDR driver produces only 'stop' records. > > Compile, configure, and install the latest > radiusclient-ng library: > tar -zxvf radiusclient-ng-0.5.2.tar.gz && > cd radiusclient-ng-0.5.2 && > ./configure && > make && > make install > > Compile, or recompile Asterisk so that it will now add support > for the module: > make clean && > make update && > make && > make install > > Configure the /usr/local/etc/radiusclient-ng/servers > file to set the RADIUS server's IP address and secret. > Include the dictionary.asterisk file in the main > dictionary: > cp -p asterisk.dictionary /usr/local/etc/radiusclient-ng/ > cd /usr/local/etc/radiusclient-ng/ > echo '$INCLUDE /usr/local/etc/radiusclient-ng/asterisk.dictionary' >> dictionary > > The dictionary.asterisk file must also be included in > the RADIUS server's main dictionary file in a similar > manner. " I did things like that above,but after I recompile Asterisk and restart Asterisk Server,when I made a call,the radius server couldn't receive request messages. I also can not find dictionary.asterisk file after I recompile asterisk,why?And how can I get the dictionary.asterisk,what should I do? I'd configure the radius configurations,the files radiusd.conf,clients.conf,sql.conf in raddb directory at Freeradius server side,the files servers,radiusclient.conf at the radiusclient side. the detail configurations just like in <Call Detail Recording to RADIUS Server> doc said. 　　　　　　　　致礼！　　　　　　　　fangh 　　　　　　　　fghai(a)126.com 　　　　　　　　　　2006-05-18

1 0

peap with mysql
by Chris Liles 17 May '06

17 May '06

To get peap working with a mysql backend do I need to store the LM and NT hashes of the password? I currently have my db setup like this: mysql> select * from radcheck; +----+----------+---------------+----+--------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+--------+ | 1 | temptest | User-Password | == | authme | +----+----------+---------------+----+--------+ 1 row in set (0.00 sec) I would guess I need to add 2 more rows per user with the attributes LM-Password and NT-Password set to the correct hash. Currently it works fine with NTRadPing, but not from the MS Supplicant :( The only reason I ask about the LM and NT Hashes is because I saw some info about that when using openldap. Thanks! -- Chris Liles System Analyst Air2Web, Inc. 1230 Peachtree St. N.E. 12th Floor Atlanta, GA 30309

2 1

when next release with rlm_sqlippool as stable?
by RobertB 17 May '06

17 May '06

Hi Any ideas? I'm using the current snapshot in the lab, but it's not stable, which of course is an understanding. Cheers, RobertB

1 0

Unstable FreeRadius
by Bill Schoolfield 17 May '06

17 May '06

Last week I reported an issue I had with FreeRadius 1.0.5 on Red Hat Enterprise Linux ES release 3. It had to do with dropped MySQL connections. We continue experience severe problems with FreeRadius. The server will run for upwards to 8 hours, sometimes more, before getting into some unknown state where it stops responding to requests. At this time FreeRadius consumes all the system's cpu cycles and won't stop without a kill -9. We are also running radrelay which relays to another port on the same server. The mysql database (version 4.0.26) is local to the server where FreeRadius resides. Please if you have any ideas or suggestions please pass them along. Otherwise we may be forced to fall back on another approach. I can happily send more detail if needed but there's potentially a lot and I didn't want to overwhelm the list... Thanks in advance for your ideas. From the log, here is the basic pattern: Many of these... Wed May 3 08:02:25 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 then... Wed May 3 08:02:52 2006 : Error: rlm_sql_mysql: MYSQL Error: Cannot get result Wed May 3 08:02:52 2006 : Error: rlm_sql_mysql: MYSQL Error: Wed May 3 08:02:52 2006 : Error: rlm_sql_mysql: MYSQL Error: No Fields Wed May 3 08:02:52 2006 : Error: rlm_sql_mysql: MYSQL error: Wed May 3 08:02:52 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 3 08:02:52 2006 : Error: rlm_sql (sql): failed after re-connect or: Wed May 3 17:50:05 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 3 17:50:05 2006 : Error: rlm_sql_mysql: Couldn't connect socket to MySQL server radius@localhost:radius Wed May 3 17:50:05 2006 : Error: rlm_sql_mysql: Mysql error '' Wed May 3 17:50:05 2006 : Error: rlm_sql (sql): Failed to connect DB handle #4 Wed May 3 17:50:05 2006 : Error: rlm_sql (sql): reconnect failed, database down? Wed May 3 17:50:05 2006 : Error: rlm_sql (sql): Couldn't insert SQL accounting STOP record - rlm_sql_mysql: no connection to db or: Sat May 6 12:40:04 2006 : Error: rlm_sql (sql): failed after re-connect Sat May 6 12:40:04 2006 : Error: rlm_sql (sql): Couldn't update SQL accounting STOP record - Lost connection to MySQL server during query or: Sun May 7 18:20:41 2006 : Error: rlm_sql_mysql: MYSQL Error: Cannot get result Sun May 7 18:20:42 2006 : Error: rlm_sql_mysql: MYSQL Error: Sun May 7 18:20:42 2006 : Error: rlm_sql_mysql: MYSQL Error: No Fields Sun May 7 18:20:42 2006 : Error: rlm_sql_mysql: MYSQL error: Sun May 7 18:20:42 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #8 Sun May 7 18:20:42 2006 : Error: rlm_sql (sql): failed after re-connect

4 6

getting Freeradius to recorde login failure, etc
by Jeremy ohara 17 May '06

17 May '06

hi there is there a way to get Freeradius 1.0.5 with Mysql to record login-failure, incorrect password or incorrect username into the mysql table? i can see its possbile. but when you login with wrong details it doesnt get to record the login failure, etc. and i dont knwo what code to use and how to make freeradius to record it Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

6 14

Segmentation fault when launching freeradius 1.1.1 with sql authorization on debian 1:3.3.5-13
by Antoine Cavalié 17 May '06

17 May '06

Hi all, Many thanks to Nicolas Baradakis who solved my problem in a few minutes. Thank's Antoine

1 0

More coredumps, FreeBSD 5.4 / FR 1.1.1
by Chris Knipe 17 May '06

17 May '06

Hi, I did a simple upgrade from 1.1.0 to 1.1.1. All old modules was removed, new compile / install went without problems. I also updated my database from mysql 4 to 5.0 - also working without problems. Running with -X, I'm getting VERY little info here... sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Bus error root@netsphere:/usr/local/etc/raddb# radiusd -v radiusd: FreeRADIUS Version 1.1.1, for host , built on May 17 2006 at 15:33:24 Copyright (C) 2000-2006 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. root@netsphere:/usr/local/etc/raddb# The -X run reports nothing abnormal, except for the bus error. Under gdb: sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to radius@mysqldb01.blah.com:/RADIUS rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1 (LWP 100079)] 0x282f2677 in memset () from /lib/libc.so.5 (gdb) back #0 0x282f2677 in memset () from /lib/libc.so.5 #1 0x09afc4c0 in ?? () #2 0x286e5cb5 in sql_init_socket (sqlsocket=0x70657270, config=0x9d02600) at sql_mysql.c:71 #3 0x2858afcc in connect_single_socket (sqlsocket=0x9afc4c0, inst=0x9afc700) at sql.c:70 #4 0x2858b134 in sql_init_socketpool (inst=0x9afc700) at sql.c:131 #5 0x28589507 in rlm_sql_instantiate (conf=0x9d03bf8, instance=0x0) at rlm_sql.c:713 #6 0x08052b11 in find_module_instance () #7 0x08053f9e in modcallable_free () #8 0x0805317b in setup_modules () #9 0x08055996 in main () 1.1.0 runs fine, with exactly the same configuration... :-( Regards, Chris.

2 2

FreeRADIUS SNMP capacities
by Geoffroy Arnoud 17 May '06

17 May '06

Hello all, Would it be possible to have some information about FreeRADIUS SNMP capacities. Which version of snmp are supported? What can be done? Which types of trap can be sent to the manager? Which type of info can the manager ask? What are the other features? Is it stable? Any peice of information will be of great help. Best regards, Geoffroy

2 1

Autoreply: Freeradius-Users Digest, Vol 13, Issue 82
by greta＠wcl.american.edu 17 May '06

17 May '06

I will be out of the office with limited eMail access until May 30, 2006. If this is a HelpDesk related need, please contact the HelpDesk at comptech(a)wcl.american.edu or via telephone at x4021. Thanks. Greta

1 0