September 2006 - Freeradius-Users - lists.freeradius.org

URGENT! User does not get VSA attribute If override = yes and in radiusd.conf and using PROXY
by Guilherme Franco 15 Sep '06

15 Sep '06

Hi, I need to set override = yes in radiusd.conf in order to the user get an IP. This way because it's a proxy request. i.e: user(a)realm.com -> proxy to realm -> realm authorize user -> myradius sets the IP The IP assignment does not work with override = no, because the proxy radius tends to set the IP 255.255.255.254. Ok, if override = yes, the users get the correcty ip from the pool, but not the VSA, as below: DEFAULT Pool-Name := test X-Ascend-Client-Primary-DNS = x.x.x.x, X-Ascend-Client-Secondary-DNS = x.x.x.x, X-Ascend-Client-Assign-DNS = 1, ERX-Virtual-Router-Name = "default", Framed-Routing == None, Framed-Protocol = PPP, Service-Type = Framed-User note: those vsa works correctly when I specify local users like this (not proxy): testuser Auth-Type := local, User-Password == "foo", Pool-Name := test X-Ascend-Client-Primary-DNS = x.x.x.x, X-Ascend-Client-Secondary-DNS = x.x.x.x, X-Ascend-Client-Assign-DNS = 1, ERX-Virtual-Router-Name = "default", Fall-Through = Yes Please HELP! THANKS!

1 0

RE: Radius with SNMP -- Urgent
by Kshitij Korde 15 Sep '06

15 Sep '06

Hi Ø Actually I tried to compile net-snmp-5.1.1 and tried to run "snmpd" but it was giving error as init_kmem: kvm_open failed: Permission denied Ø after that I came to know that there is already one server(snmpd) running of version NET-SNMP version: 5.0.9 Web: http://www.net-snmp.org/ Email: net-snmp-coders(a)lists.sourceforge.net Ø So using /usr/sfw/bin/snmpconf -> command I configured snmpd.conf. But I am not sure whether I have answered properly for all questions it asked. Ø Did you setup your snmp agent accoding to documentation? Did you restart your snmp agent? I didnt referred any document , so I am not very sure about this configuration , please provide some useful information about this Regards kshitij -----Original Message----- From: freeradius-users-bounces+kshitijk=techmahindra.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+kshitijk=techmahindra.com@lists.freeradius.org] On Behalf Of Michael Schwartzkopff Sent: Friday, September 15, 2006 12:53 PM To: FreeRadius users mailing list Subject: Re: Radius with SNMP -- Urgent Am Freitag, 15. September 2006 07:46 schrieb Kshitij Korde: > After compiling freeradius with "--with-snmp" option and when i try > to run the server in the debug mode I see. > (...) > Can't connect to SNMP agent with SMUX: Connection refused Hi, did you setup your snmp agent accoding to documentation? Did you restart your snmp agent? -- Dr. Michael Schwartzkopff MultiNET Services GmbH Bretonischer Ring 7 85630 Grasbrunn Tel: (+49 89) 456 911 - 0 Fax: (+49 89) 456 911 - 21 mob: (+49 174) 343 28 75 PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42 ============================================================================================================================ Tech Mahindra, formerly Mahindra-British Telecom. Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

CVS web access links on the website broken...
by Luca Corti 15 Sep '06

15 Sep '06

http://www.freeradius.org/development.html#cvs ciao Luca

1 0

why pam_radius library send pakcet twice??? Why?
by 나종현 15 Sep '06

15 Sep '06

1 0

Radius with SNMP -- Urgent
by Kshitij Korde 15 Sep '06

15 Sep '06

After compiling freeradius with "--with-snmp" option and when i try to run the server in the debug mode I see. Module: Instantiated radutmp (radutmp) main: smux_password = "verysecret" main: snmp_write_access = no SMUX connect try 1 Can't connect to SNMP agent with SMUX: Connection refused Listening on authentication *:1918 Listening on accounting *:1919 Ready to process requests. ________________________________________________________________________ ___________________ I am still trying to figure out what step should i take next......... Can anybody help me -Kshitij ============================================================================================================================ Tech Mahindra, formerly Mahindra-British Telecom. Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

RE: Attribute Operators
by Edward.Shih＠rcc.edu 14 Sep '06

14 Sep '06

Thank you, Peter. You are so kind! Truly appreciated!! -----Original Message----- From: freeradius-users-bounces+edward.shih=rcc.edu(a)lists.freeradius.org [mailto:freeradius-users-bounces+edward.shih=rcc.edu@lists.freeradius.or g] On Behalf Of Peter Nixon Sent: Thursday, September 14, 2006 2:48 PM To: FreeRadius users mailing list Subject: Re: Attribute Operators On Thu 14 Sep 2006 19:09, Cliff Hayes wrote: > Hello everyone, > > Does anyone know of a good reference site for the attribute operators (:=, > ==, +=) that shows what each means? http://wiki.freeradius.org/index.php/Operators -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 0

How to return AV pairs from within an rlm module?
by Ali Majdzadeh 14 Sep '06

14 Sep '06

Hi all I want to return AV pairs (Cisco VoIP) from within an rlm module. I tried to printf them into stdout, but it didn't work. Should I use the structures accessible within the rlm module? for example, REQUEST. Then, how should I pass them to Cisco? Regards Ali

3 3

Dial-UP admin page problems
by Nico Gazzano 14 Sep '06

14 Sep '06

Ok, I removed apache2 and went backwards to apache1.3. I have php4 module working, and I have included the following lines in the httpd.conf. AddType application/x-httpd-php .php3 AddType application/x-httpd-php php Still whenever I try to access the dial-up admin page my browser wants me to download the buttons.php3 script. I'm at a loss. I'm a novice Linux admin so forgive me if I don't sound like I know what I'm talking about. Nico Gazzano Network & Systems Admin MIS Choice Inc. 1699 Wall ST Suite 602 Mount Prospect, IL 60056 Phone 847-690-1900 ext206 Fax 847-690-1350 nicog(a)mischoice.com

1 0

segmentation fault bug with mysql5 backend
by liran tal 14 Sep '06

14 Sep '06

Debian Unstable kernel 2.6.17-2-686 Package: freeradius-mysql freeradius Version: 1.1.3-1 I've configured freeradius with a mysql backend using the gz'iped mysql.sql schema found on /usr/share/doc/freeradius/examples/ When I run a simple test with radtest I'm getting segmentation fault. Here's the log from /usr/sbin/freeradius -X when the radtest packet is sent: rad_recv: Access-Request packet from host 127.0.0.1:1046, id=25, length=57 User-Name = "admin" User-Password = "admin" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "admin", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 radius_xlat: 'admin' rlm_sql (sql): sql_set_user escaped user --> 'admin' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'admin' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 Segmentation fault server:/etc/freeradius# Never encountered in this bug before. Thanks, Liran Tal.

1 1

Help with Certs
by Mike May 14 Sep '06

14 Sep '06

Hello everyone, I am new to freeRadius and was wondering if someone could provide me some help on renewing my certs. attached is a copy of my EAP.conf file with cert info, I need to renew the certs and do not know what the process is thanks a bunch for any help, hopefully i will group out of my newbie phase soon. Mike > tls { > #private_key_password = xxxxxxxxxxxx > #private_key_password = xxxxxxxxxxxx > #private_key_file = ${raddbdir}/certs/newreq.pem > private_key_file = > ${raddbdir}/certs/selfsigned/radius-selfsigned.pem > > # If Private key & Certificate are located in > # the same file, then private_key_file & > # certificate_file must contain the same file > # name. > #certificate_file = ${raddbdir}/certs/newreq.pem > certificate_file = > ${raddbdir}/certs/selfsigned/radius-selfsigned.pem > > # Trusted Root CA list > CA_file = ${raddbdir}/certs/demoCA/cacert.pem > > dh_file = ${raddbdir}/certs/dh > random_file = ${raddbdir}/certs/random

2 1