August 2006 - Freeradius-Users - lists.freeradius.org

mySQL auth
by Keith Woodworth 11 Aug '06

11 Aug '06

We are consolidating servers and moving from a BSD/OS and ICRadius setup and auth'ing via passwd file to FreeBSD. I have run into an issue with authenticating and how I should do it. Our old setup had a web interface designed 7 yrs ago, written in C, which the developer is no longer around and most of the source has gone too that we entered users into the passwd file to login via dialup. So my options are to a) move the passwd file from another machine over the network and build a new one each time or b) auth via database. Will FreeRadius auth via mySQL using the unix crypt? I have no way of adding the users into a database with their passwords. Or long way of capturing each users password from ICRadius and adding them to the database. Has anyone else converted from a passwd file to a database of some variety? Thanks for any info. Keith

2 2

Kill Users Connection
by fvt3 11 Aug '06

11 Aug '06

Hi, Is there a way to kill a user connection? I did some reading and I came across radkill. Can you use radkill with radius? If you can, where can you download ? Thanks in advance ... __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

modifying an accounting-response
by Colm Ennis 11 Aug '06

11 Aug '06

hi, i looked through the docs and mailing list but couldnt find any information on this... if i missed something id appreciate a pointer! the bas im using will modify a users bandwidth if the appropriate attributes are included in an accounting-response packet. is there any way of doing this in freeradius other than hacking away at the code? thanks for your help, colm

2 1

Appending attributes post proxy
by Peter Nixon 11 Aug '06

11 Aug '06

Hi Guys I have the following in the "users" file which works great: DEFAULT Framed-Protocol == PPP Framed-IP-Netmask = 255.255.255.255, Fall-Through = Yes I want to do exactly the same thing but for Access Accept packets that I am proxying from downstream servers. We are already using "preproxy_users" to modify packets before we send them to downstream servers but I don't see any "postproxy_users" file :-( Whats the easiest way to do this? The rewrite module? Is there any reason (other than inertia) why isn't there a "postproxy_users" file? Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Freeradius & Oracle
by Brian Atkins 11 Aug '06

11 Aug '06

Good afternoon. I'm working on implementing a wireless hotspot using Chillispot and Freeradius. I have an Oracle DB that I would like to pul username/password credentials from. I have been installed Freeradius and the SQL module, but in sql.conf it states to use oraclesql.conf. I have attempted to locate the appropriate package, module, or config file. I found an old (2002) reference on the developer's list to a link where it can be downloaded (http://www.intelcom.sm/oraclesql.conf) but even though the site is active, the link is non-existent. Any assistance would be appreciated. Thanks, -- Brian "An adventure is never an adventure when it's happening. Challenging experiences need time to ferment, and an adventure is simply physical and emotional discomfort recollected in tranquility." -- Tim Cahill

4 6

AW: framed ip in raddacct
by Rheindorf Jan 11 Aug '06

11 Aug '06

Hello Jan (Talking to myself :D ) Solved this issue. Tried to force UPDATE-Packets with Acct-Interim-Interval, but my cisco NAS seemed to ignore this. I dont know why. This Attribute should be supported since IOS 12.1. I could force the Cisco NAS to send UPDATE PAckets with the following command. tunnel(config)#aaa accounting update periodic 5 now the Cisco NAS sends Accounting Updates every 5 Minutes and after the first UPDATE the framed IP is in the radacct Table and shown in the Online USers Page of DialUpAdmin. I am happy. Thanks Jan :D -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+jan.rheindorf=spoe.at(a)lists.freeradius.org [mailto:freeradius-users-bounces+jan.rheindorf=spoe.at@lists.freeradius.org] Im Auftrag von Rheindorf Jan Gesendet: Mittwoch, 02. August 2006 12:22 An: freeradius-users(a)lists.freeradius.org Betreff: framed ip in raddacct Hello freeradius users I am using freeradius 1.0.4 with pgsql and dialupadmin(version 1.70.2). Everything works great, but there is only one thing i want to know. In dialupadmin there is this online users page, where i can see which users are currently online. I see the username, name and duration, but Ip-address and caller-ID is empty. Caller-Id is emtpy, because it isnt sended , the cisco server who is acting as the LNS is not able to send the Caller Id. Thats allright. The Ip-adress is from the main_pool of the radius server, but it is not put in the first INSERT-query when the user logs in. So i cant see it in dialup_admin, because the query for online-users is only looking for sessions without an accstoptime. If i logout(sending an acc-stop) radius puts the right ip-address of the client in the radacct-table. Is there a way to put the Ip-adress in the first INSERT or another way to see it in the online-users page, because it would be very userful to see the ip-adress of the online users. thanks for help greez from vienna jan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Does Freeradius support IAPP (802.11f)??
by zhu yunwu 11 Aug '06

11 Aug '06

Hi everyone: Now I am using the Freeradius. Could you tell me whether IAPP ( 802.11f) is really suppported in Freeradius? if not,could you please kindly advise that what kind of radius server support IAPP and how to configure it? Highly appreicated your prompt reply and thanks very much for your help. Yours Sincerely, WoodLand

2 3

How modify users file?
by 나종현 11 Aug '06

11 Aug '06

1 0

Mysql procedure and freeradius
by Alesha 11 Aug '06

11 Aug '06

Hi All. I have the trouble with mysql & freeradius.I begin to write own authorization using mysql procedures.In sql.conf i have this --- authorize_check_query = "CALL DB.auth_check('%{SQL-User-Name}');" -- And in DB have procedure auth_check with this code: --- CREATE TEMPORARY TABLE DB.make_auth (id int,username VARCHAR(40),attribute VARCHAR(30),op VARCHAR(3),value VARCHAR(40)) ENGINE MEMORY; ....certain checks... INSERT INTO DB.make_auth (id,username,attribute,op,value) VALUES (dbUID,username,"User-Password",":=",dbPassword); SELECT id,username,attribute,op,value FROM DB.make_auth; -- So..this procedure when i call her from CLI return table like this +------+----------+---------------+------+--------+ | id | username | attribute | op | value | +------+----------+---------------+------+--------+ | 1 | username | User-Password | := | password | +------+----------+---------------+------+--------+ Look good..but when I'm trying to use radtest and radius -X i'm getting this: ---- radius_xlat: 'username' rlm_sql (sqlauth): sql_set_user escaped user --> 'username' radius_xlat: 'CALL DB.auth_check('username');' rlm_sql (sqlauth): Reserving sql socket id: 28 rlm_sql_mysql: query: CALL DB.auth_check('username'); rlm_sql_mysql: MYSQL check_error: 1312 received rlm_sql_getvpdata: database query error rlm_sql (sqlauth): SQL query error; rejecting user rlm_sql (sqlauth): Released sql socket id: 28 --- What's wrong??? P.S.Sorry for my english)))

3 6

Autoreply: AW: AW: AW: FreeRadius - Setting IP addresses
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0