June 2006 - Freeradius-Users - lists.freeradius.org

RE: RE: Re: freeradius 1.1.1 and mysql issues
by simon＠434canada.com 01 Jun '06

01 Jun '06

There is a password in the database (in the radcheck table) associated with the username. I am also supplying both the username and password on my laptop as I am trying to connect. I currently have the Auth-Type being set (:=) to Local in the radgroupcheck table. I believe this should all be set up properly. Simon >>> modcall[authorize]: module "sql" returns ok for request 0 >>>modcall: leaving group authorize (returns updated) for request 0 >>> rad_check_password: Found Auth-Type Local >>>auth: type Local >>>auth: No User-Password or CHAP-Password attribute in the request >>>auth: Failed to validate the user. >>>Login incorrect: [simon/<no User-Password attribute>] (from client >>linksys->434 port 56 cli 0013ce29c6d7) >> >>There is no password ? Is that okay? >> >>You can set Auth-Type to Accept if the user is found in sql ! >>If that is what you actually want. >> >>Regards, >> >>Edvin >> >> >>- >>List info/subscribe/unsubscribe? See >>http://www.freeradius.org/list/users.html

1 0

PEAP + Active directory
by Kartthik Raghunathan 01 Jun '06

01 Jun '06

Am having a strange problem after my supplicant get authenticated to my active directory. My supplicant trying to get authenticated to active directory or validating identity every 60 mins, which disturbs wireless connection that bother me a lot. Is this normal or can i set the timer to authenticate every 120 mins or whatever timing i like. Am using dynamic WEP and it has been set to change the key every 6 hours. Any help will be really appreciated. Thanks in advance. Kartthik -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

1 0

PPPoE server + MySQLbackend tutotrial
by Rani Ahmed 01 Jun '06

01 Jun '06

plz do you have totorial links to PPPoE server + MySQL backend?? strait forward and easy to understand. thanks this tool really needs Howtos

1 0

1.1.2 eap problem
by VannMann32 . 01 Jun '06

01 Jun '06

Hi ! Upgrading from 1.1.1 to 1.1.2 and now I get this error message : Thu Jun 1 12:26:22 2006 : Info: rlm_eap_tls: Loading the certificate file as a chain Thu Jun 1 12:26:22 2006 : Error: rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory Thu Jun 1 12:26:22 2006 : Error: rlm_eap_tls: Error reading Trusted root CA list Thu Jun 1 12:26:22 2006 : Error: rlm_eap: Failed to initialize type tls Thu Jun 1 12:26:22 2006 : Error: radiusd.conf[10]: eap: Module instantiation failed. Thu Jun 1 12:26:22 2006 : Error: radiusd.conf[1735] Unknown module "eap". Thu Jun 1 12:26:22 2006 : Error: radiusd.conf[1722] Failed to parse authenticate section. My system is a FreeBSD 6.1-Stable

1 0

proxy_fail_type attribute
by Geoffroy Arnoud 01 Jun '06

01 Jun '06

Hi, I just get the last CVS update, and I discovered a "hidden" attribute in mainconfig.c, name "proxy_fail_type". By reading the source code, my understanding is that setting this attribute to "fail" (for example) in proxy.conf, and setting the value "fail" for Post-Proxy-Type in dictionary.freeradius.internal, will allow FreeRADIUS to execute a module when the proxy of a request failed (no response from server or other cases). My 1st question: - Am I right (or near to the truth)? I saw that this was not shipped into 1.1.2. But this feature appeared by the end of 2004. So my 2nd and 3rd questions are: - Has anyone used or is anyone using this feature on prodcution deployement? - Is this feature planned to be shipped in 1.2.x? Thank you in advance. Geof.

1 0

listening interface configuration
by Geoffroy Arnoud 01 Jun '06

01 Jun '06

Hi, I am going to configure a FreeRADIUS as a RADIUS proxy. My proxy will have to listen on a couple of ports on 2 interfaces, so I set the following configuration in radiusd.conf: listen { ipaddr = IP1 port = 1812 type = auth } listen { ipaddr = IP1 port = 1813 type = acct } listen { ipaddr = IP2 port = 1812 type = auth } listen { ipaddr = IP2 port = 1813 type = acct } When I start FreeRADIUS, I get the following ... Listening on authentication IP1:1812 Listening on accounting IP1:1813 Listening on authentication IP2:1812 Listening on accounting IP2:1813 Listening on proxy IP1:1814 ... If I understand packets coming inside IP2, will be forwarded through IP1, right? Is there a configuration solution to make packets coming inside IP2 to be forwarded through IP1, or is FreeRADIUS limited to only one proxy ip/port? Thank you in advance, Geof.

1 0

Filter attributes when proxying
by Martin Zuziak 01 Jun '06

01 Jun '06

Hello all Is it possible to (easily) remove single attributes sent or received when proxying? I know it can be done with attr_filter but if you only want to remove a single attribute while leaving the rest untouched, you need pass rules for every other attribute. It doesn't look like attr_rewrite can remove attributes. Am I wrong? Otherwise I think this would be a nice feature to implement. The attr_filter module can easily (I think) be changed to include a variable to control whether or not passing rules are needed to allow an attribute. Currently attributes are only allowed if they don't fail any rules in attrs and pass at least one rule: if (fail == 0 && pass > 0) This could be changed to something like if (fail == 0 && (pass > 0 || allow_no_match)) where a variable in the attrs file could control if passing rules are required. Sincerely, Martin Zuziak <zuziak(a)math.ku.dk>

1 0

mysql 5.0.22 with fr 1.1.2
by Alexander Serkin 01 Jun '06

01 Jun '06

while trying to compile the fr 1.1.2 with mysql 5.0.22 i got the following with rlm_sq_mysql configure: checking for mysql_config... yes checking for mysql_init in -lmysqlclient (using mysql_config)... no checking for mysql_init in -lmysqlclient... no configure: warning: mysql libraries not found. Use --with-mysql-lib-dir=<path>. checking for mysql.h (using mysql_config)... no checking for mysql/mysql.h... yes configure: warning: sql submodule 'mysql' disabled mysql libraries are in /opt/mysql/lib/mysql. The machine is under Solaris 8 x86. crle output says: root@apollo:/usr/local/src/freeradius-1.1.2~# crle Configuration file [3]: /var/ld/ld.config Default Library Path (ELF): /usr/lib:/usr/local/lib:/opt/mysql/lib/mysql:/usr/local/ssl/lib Trusted Directories (ELF): /usr/lib/secure (system default) And /usr/local/mysql is a symbolic link to /opt/mysql. Everything seems to be in place, but configure does not see mysql. What could be the reason? -- Sincerely Yours, Alexander

2 2

configuring Freeradius server + accounting + IP address
by Basavaraja.pv 01 Jun '06

01 Jun '06

Hi All, I am newly joined to this group. I have started working on radius. I am facing some problems in configuring the free radius for accounting purpose and to get the IP address of MS. Please give me some information regarding the same. Thanks in advance. Regards, Basavaraja -----Original Message----- From: freeradius-users-bounces+basavaraja.pv=masconit.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+basavaraja.pv=masconit.com@lists.freera dius.org]On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Wednesday, May 31, 2006 8:23 PM To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 13, Issue 145 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. RE: Session-Octets-Limits (Seferovic Edvin) 2. Re: Session-Octets-Limits (Mordor Networks) 3. 1.1.2 Build Problems - "rlm_eap-1.1.2.soT" - "ld: skipping incompatible" (Alan) 4. Re: 1.1.2 Build Problems - "rlm_eap-1.1.2.soT" - "ld: skippingincompatible" (Stefan Winter) 5. RE: 1.1.2 Build Problems - "rlm_eap-1.1.2.soT" - "ld:skippingincompatible" (Alan) ---------------------------------------------------------------------- Message: 1 Date: Wed, 31 May 2006 12:16:43 +0200 From: "Seferovic Edvin" <edvin.seferovic(a)kolp.at> Subject: RE: Session-Octets-Limits To: "'FreeRadius users mailing list'" <freeradius-users(a)lists.freeradius.org> Message-ID: <200605311016.k4VAGqgH004541(a)mxdrop18.xs4all.nl> Content-Type: text/plain; charset="us-ascii" >Its working and the user disconnect when reachs the limit but now if the >user disconnect and reconnect it will all start over is there a way to lock >the account? > >so that the user wont be able to connect again? YES, by using sqlcounter module ! This module should count the traffic usage before user is authorized to connect. Regards, Edvin ------------------------------ Message: 2 Date: Wed, 31 May 2006 14:01:28 +0300 From: "Mordor Networks" <mordor.networks(a)gmail.com> Subject: Re: Session-Octets-Limits To: edvin.seferovic(a)kolp.at, "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <f21372cd0605310401g3a2594bcr5efc0297495430ce(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" Do i have to patch the sqlcounter module so that it can be used for counting traffic? I have the default sqlcounter in my radius.conf sqlcounter Dailycounter and sqlcounter monthlycounter/ On 5/31/06, Seferovic Edvin <edvin.seferovic(a)kolp.at> wrote: > > >Its working and the user disconnect when reachs the limit but now if the > >user disconnect and reconnect it will all start over is there a way to > lock > >the account? > > > >so that the user wont be able to connect again? > > YES, by using sqlcounter module ! This module should count the traffic > usage > before user is authorized to connect. > > Regards, > Edvin > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

2 1