August 2006 - Freeradius-Users - lists.freeradius.org

AW: AW: AW: FreeRadius - Setting IP addresses
by Rheindorf Jan 11 Aug '06

11 Aug '06

I created them by myself. Dont know if they are created by radiusd. :D greez Jan ************************************** Jan Rheindorf Netzwerktechnik -------------------------------------- Informationstechnologiezentrum der SPÖ Windmühlgasse 26 1060 Wien Tel.: +43 1 534 27 456 Email.: Jan.Rheindorf(a)spoe.at ************************************** -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+jan.rheindorf=spoe.at(a)lists.freeradius.org [mailto:freeradius-users-bounces+jan.rheindorf=spoe.at@lists.freeradius.org] Im Auftrag von Mike Gesendet: Donnerstag, 10. August 2006 14:11 An: FreeRadius users mailing list Betreff: Re: AW: AW: FreeRadius - Setting IP addresses Ok those files do not exist. My guess is because this is a brand new installation and those files will not be created until I start actually taking in dial-up connections? Rheindorf Jan wrote: > This means that you have to delete the db.ippool and db.ipindex files, > because they think you are using the "old"(before changing) Ip-Range. > Just delete them and touch them again.(dont forget to give the right > permissions) > > If you want to specify static adresses, do it in the Users-file > directly. > The entries in the users file would be > > Framed-IP-Address = 192.168.92.65, > Framed-IP-Netmask = 255.255.255.255, > > greez Jan > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Autoreply: check attribute for several values
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

check attribute for several values
by Ruslan N. Marchenko 11 Aug '06

11 Aug '06

Hi all. Sorry for my poor english, mybe my explanations are not clear. I want to find out, if i can add to radcheck table several values for attribute, in order to validate it in sequence? radius=> SELECT radgroupcheck.GroupName, radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op FROM radgroupcheck, usergroup WHERE usergroup.Username = '3813978' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id; groupname | attribute | value | op -------------+--------------+------------+---- VoIP Phones | Service-Type | Login-User | == VoIP | Service-Type | Call-Check | == (2 rows) radius=> SELECT attribute,value ,op FROM radcheck WHERE Username='3813978'; attribute | value | op -------------------+-------------+---- Framed-IP-Address | 192.168.5.5 | == User-Password | 3813978 | := (2 rows) debug output: rad_recv: Access-Request packet from host 127.0.0.1:4799, id=146, length=246 User-Name = "3813978" NAS-IP-Address = 192.168.7.229 NAS-Identifier = "GnuGk" NAS-Port-Type = Virtual Service-Type = Call-Check Framed-IP-Address = 192.168.5.5 Calling-Station-Id = "1751don(a)olymp.local" Called-Station-Id = "3813978" h323-conf-id = "h323-conf-id=8975D519 283611DB 80658D6C 7728828E" h323-call-origin = "h323-call-origin=answer" h323-call-type = "h323-call-type=VoIP" h323-gw-id = "h323-gw-id=GnuGk" User-Password = "3813978" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 205 modcall[authorize]: module "preprocess" returns ok for request 205 modcall[authorize]: module "chap" returns noop for request 205 radius_xlat: '3813978' rlm_sql (sql): sql_set_user escaped user --> '3813978' ... skip ... rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): No matching entry in the database for request from user [3813978] modcall[authorize]: module "sql" returns notfound for request 205 modcall: leaving group authorize (returns ok) for request 205 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Delaying request 205 for 1 seconds Finished request 205 -- Olimp, System Administrator IT Dept. 8 062 381-34-28 ---- Looking forward to reading yours. MRN-RIPE RUFF-EUNIC RUFF-6BONE Ruslan N. Marchenko

1 0

Autoreply: Re: Authenticate users from multiple realms on the same NAS
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

Autoreply: Re: Does Freeradius support IAPP (802.11f)??
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

Autoreply: Re: Autoreply: Does Freeradius support IAPP (802.11f)??
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

Autoreply: Does Freeradius support IAPP (802.11f)??
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

3 2

Autoreply: RE: Autoreply: Does Freeradius support IAPP (802.11f)??
by gparlato＠tnet.it 10 Aug '06

10 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

Autoreply: Re: external modules
by gparlato＠tnet.it 10 Aug '06

10 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

external modules
by Lin Richardson 10 Aug '06

10 Aug '06

Okay, two quick questions. If I set up an exec module in the radiusd.conf file, with the intent of using an external script to authenticate, as follows: exec special_auth { wait = yes program = "/usr/local/freeradius/etc/scripts/rad-auth.sh%{User-Name}" input_pairs = request output_pairs = reply } ........................ in the "instantiate" section I include the following special_auth ........................ Then in the "authenticate" section Auth-Type NEWAUTH { special_auth } Question 1: This script is intended to be an Authentication method. How do I teach freeradius (during the authorize process?) to set Auth-Type to use this method when appropriate? This would mean that freeradius would have to set the Auth-Type to NEWAUTH, right? The NEWAUTH block would in turn kick of the special_auth module and execute my auth script? Question 2: A related, but separate question regarding external scripts. Having specified the "output_pairs = reply" parameter, how does a script set or return the pairs for use by freeradius. I know I'm off base a little because this does not seem to work as yet, any guidance here would be appreciated. Regards, Lin Richardson

2 3