August 2006 - Freeradius-Users - lists.freeradius.org

URGENT! Dialupadmin "Could not connect to SQL database"
by Guilherme Franco 01 Sep '06

01 Sep '06

URGENT! Hi, I'm getting this error *Could not connect to SQL database. *in dialupadmin. (using OCI8 with ORACLE) * *Radiusd connects to Oracle without any problems, dialupadmin don't. Please help. Thank you.* *

3 7

WebDAV HTTP Auth to RADIUS, possible?
by Michael Check 01 Sep '06

01 Sep '06

Is it possible to set up an Apache 1.3 server with WebDAV to authenticate to a freeRADIUS? Ideally, I would like to tell the Apache directives to look at freeRADIUS for authentication using the httpd.conf file. Has anyone ever done this or able to point me in a direction? Is it even possible? We're using freeRadius 1.1.0 on OSX.4, successfully authenticatiing off an Active Directory master. Thanks in advance, Michael Check

5 11

Freeradius and SNMP
by Michael Schwartzkopff 01 Sep '06

01 Sep '06

Hi, I have problems starting the SNMP part of FreeRADIUS. Setup: FR 1.0.4, SuSE 10.0 radiusd.conf: snmp = yes $INCLUDE ${confdir}/snmp.conf snmp.conf: smux_password = verysecret Also my net-snmp is configured according to the docs. When I start both demons snmpwalk does not give any answer in 1.3.6.1.4.1.3317. When I do a tcpdump on interface lo (or eth0) port 199 I see no packets beeing exchanged. It seems that FR does not even try to register the subagent. Any hints? Should there be packets on the interface at all? What am I doing wrong? Thanks for any help. -- Dr. Michael Schwartzkopff MultiNET Services GmbH Bretonischer Ring 7 85630 Grasbrunn Tel: (+49 89) 456 911 - 0 Fax: (+49 89) 456 911 - 21 mob: (+49 174) 343 28 75 PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42

3 8

Re: Disconnect
by Sean 31 Aug '06

31 Aug '06

Thanks for the replies. I'd already worked out that I was barking up the wrong tree. I was asked by a client to create a PHP script to disconnect a user. I'll probably use a script to change Expiration or Max-Session and get him to get the NAS to check back to Radius every five minutes. It's a pity that you can't send a disconnect request directly to Radius for a particular user. Anyway, once again thanks for the advice. Regards, Sean

2 1

Disconnect
by Sean 31 Aug '06

31 Aug '06

Hi, Does anyone know how to get disconnect to work with radclient? I can get it to return status but when I try disconnect radiusd -X returns the following:- rad_recv: Disconnect-Request packet from host 127.0.0.1:57181, id=9, length=29 Unknown packet code 40 from client swarm:57181 - ID 9 : IGNORED Any help or hints would be much appreciated. Thanks, Sean

4 3

issue with attribute 97 from rfc3162 in users file
by Christian Hahn 31 Aug '06

31 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, the dictionary.rfc3162 on a fresh compiled freeradius 1.1.3 on CentOS 4.3 x86_64 shows support for attribute 97 - ----8<---- ATTRIBUTE Framed-IPv6-Prefix 97 ipv6prefix - ---->8---- but if I start the server it failes with the following reason: - ----8<---- /usr/local/etc/raddb/users[227]: Parse error (reply) for entry hextest: unknown attribute type 8 Errors reading /usr/local/etc/raddb/users - ---->8---- the entry for hextest in the users file looks like this (ip address replaced) and line #227 is the "Framed-IPv6-Prefix" line: - ----8<---- hextest Auth-Type := Local, User-Password == "secret" Service-Type = Framed-User, NAS-IP-Address = xx.xx.xx.xx, Framed-IPv6-Prefix = 2001:db8:aaaa:bbbb::/64, Tunnel-Client-Endpoint = 2001:db8:cccc::/128, Tunnel-Server-Endpoint = 2001:db8:cccc::1/128 - ---->8---- If I comment out the "Framed-IPv6-Prefix" line the server starts up. Has anybody seen this error before? I don't know why the server thinks this is attribute 8. Have I missed something and the entry for attribute 97 should look different? Any hint would greatly appreciated. best regard, Christian Hahn -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE9C2G6kMW7HW8620RAntmAJ9vRzaBDqNV5FIT/esloKn8Q149BQCgk/42 6xpe7FSxEW6aEggMzmLcRtU= =Zpnx -----END PGP SIGNATURE-----

3 5

sqlcounter
by Fabiano Martins 31 Aug '06

31 Aug '06

Hi All!! I would like to know if someone knows some DOC about sqlcounter implementation. I've benn searching with no sucess about this... It's frustrating... there is no documents about. I'm trying to put it to run on my freeradius server... If someone knows how to give me some hint, it will be welcome! Regards, Fabiano

5 4

Problem using radiusMaxBandwidthDown attribute
by luigi natalino 31 Aug '06

31 Aug '06

Hello I need to use the radiusMaxBandwidthDown and radiusMaxBandwidthUp in ldap but RADIUS-LDAPv3.schema doesn't contain those attribute. Could someone tell me where I can take a complete RADIUS-LDAPv3.schema containing these attributes or could someone tell me the scheme about these two attributes so that I can add them in RADIUS-LDAPv3.schema? What I must add in ldap.attrmap? Many thanks to all Best Regards, Luigi _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

1 0

acctsessionid is void
by Santiago Balaguer García 31 Aug '06

31 Aug '06

Following with my questions, I propose the next question: Is it acceptable that a NAS always sends as a acctsession attribute a null or void value ? Santiago _________________________________________________________________ Moda para esta temporada. Ponte al día de todas las tendencias. http://www.msn.es/Mujer/moda/default.asp

1 0

Simultaneous-Use implementation in rlm_python
by Flamur Rogova 31 Aug '06

31 Aug '06

Hi, I have noticed that more recent rlm_python versions have function bindings for implementing Simultaneous-Use checking in python module. Something like this ... python_init done Module: Loaded python python: mod_instantiate = "pppoe" python: func_instantiate = "instantiate" python: mod_authorize = "pppoe" python: func_authorize = "authorize" python: mod_authenticate = "pppoe" python: func_authenticate = "authenticate" python: mod_preacct = "pppoe" python: func_preacct = "preacct" python: mod_accounting = "pppoe" python: func_accounting = "accounting" python: mod_checksimul = "pppoe" python: func_checksimul = "checksimul" python: mod_detach = "pppoe" python: func_detach = "detach" Module: Instantiated python (PPPoE) ... What should func_checksimul return to signify that user is already logged on / not loged on ? Is it safe to use this feature in production ? Regards, Flamur Rogova

1 0