January 2007 - Freeradius-Users - lists.freeradius.org

monitoring freeradius with nagios
by Mike 18 Jan '07

18 Jan '07

All, When trying to use the "radauth" tool from nagios to monitor freeradius, I get the following in the freeradius log: Error: WARNING: Malformed RADIUS packet from host ... too long (length 18432 > maximum 4096) radtest seems to be ok. has anyone else experienced this or knows what is wrong?

4 3

SPLAT question
by Enright Patrick - penrig 18 Jan '07

18 Jan '07

Hello, This pertains to Feeradius 1.1.0. I am having trouble setting up freeradius and Checkpoint's Secureplatform Pro (SPLAT) firewall (which is a stripped down Linux) so that administrators logging into the firewalls will be authenticated by the freeradius server. According to the SPLAT pro user guide I should be able to set up a group on the firewall and I should not have to define all the individual users on the firewall. Once the user enters the username and password that info will be passed to the freeradius server along with the group (which is already defined on the firewall). When I start the freeradius server with the -AX switches I really don't see it reading the following that I set up in the radiusd.conf file: passwd etc_group { filename = /etc/freeradius/group format = "=Group-Name:::*,User-Name" hashsize = 50 ignorenislike = yes allowmultiplekeys = yes delimiter = ":" } I'm not sure if this is how you tell it to look in the group file and not sure why I do not see this in the messages when I start freeradius....??? Is anybody else doing this and if so can you provide some guidance? Thanks so much. Regards, Patrick Enright Information Security Architecture Team patrick.enright(a)acxiom.com <mailto:patrick.enright@acxiom.com> ************************************************************************* The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please resend this communication to the sender and delete the original message or any copy of it from your computer system. Thank you. *************************************************************************

3 2

Building from CVS
by King, Michael 17 Jan '07

17 Jan '07

I wanted to try the Pre2.0 release in the CVS to see if the TLS locking code fixed the problem I had with the SSL errors in PEAP. I downloaded the snapshot from ftp.freeradius.org freeradius-server-snapshot-20070116.tar.bz2 I'm building on Debian, so I wanted to package it (Especially since it not really released code yet) I unzipped it, and ran fakeroot dpkg-buildpackage -b -uc It failed with: checking how to run the C++ preprocessor... /lib/cpp configure: error: C++ preprocessor "/lib/cpp" fails sanity check See `config.log' for more details. make: *** [stamp-build] Error 1 netdev:/tmp/freeradius-server-snapshot-20070116# Config.log is as follows netdev:/tmp/freeradius-server-snapshot-20070116# more config.log This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by configure, which was generated by GNU Autoconf 2.59. Invocation command line was $ ./configure --build i386-linux --config-cache --prefix=/usr --exec-prefix=/usr --mandir=/usr/share/man --sysconfdir=/etc --libdir=/usr/lib/freeradius --d atadir=/usr/share --localstatedir=/var --with-raddbdir=/etc/freeradius --with-logdir=/var/log/freeradius --with-system-libtool --disable-ltdl-install --with- large-files --with-udpfromto --with-edir --enable-strict-dependencies --enable-developer --without-rlm_otp --without-rlm_sql_postgresql --without-snmp ## --------- ## ## Platform. ## ## --------- ## hostname = netdev uname -m = i686 uname -r = 2.6.8-3-686 uname -s = Linux uname -v = #1 Tue Dec 5 21:26:38 UTC 2006 /usr/bin/uname -p = unknown /bin/uname -X = unknown /bin/arch = i686 /usr/bin/arch -k = unknown /usr/convex/getsysinfo = unknown hostinfo = unknown /bin/machine = unknown /usr/bin/oslevel = unknown /bin/universe = unknown PATH: /sbin PATH: /bin PATH: /usr/sbin PATH: /usr/bin PATH: /usr/bin/X11 PATH: /usr/local/sbin PATH: /usr/local/bin ## ----------- ## ## Core tests. ## ## ----------- ## configure:1423: loading cache config.cache configure:1566: checking for gcc configure:1582: found /usr/bin/gcc configure:1592: result: gcc configure:1836: checking for C compiler version configure:1839: gcc --version </dev/null >&5 gcc (GCC) 3.3.5 (Debian 1:3.3.5-13) Copyright (C) 2003 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. configure:1842: $? = 0 configure:1844: gcc -v </dev/null >&5 Reading specs from /usr/lib/gcc-lib/i486-linux/3.3.5/specs Configured with: ../src/configure -v --enable-languages=c,c++,java,f77,pascal,objc,ada,treelang --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/in fo --with-gxx-include-dir=/usr/include/c++/3.3 --enable-shared --enable-__cxa_atexit --with-system-zlib --enable-nls --without-included-gettext --enable-cloc ale=gnu --enable-debug --enable-java-gc=boehm --enable-java-awt=xlib --enable-objc-gc i486-linux Thread model: posix gcc version 3.3.5 (Debian 1:3.3.5-13) configure:1847: $? = 0 configure:1849: gcc -V </dev/null >&5 gcc: `-V' option must have argument configure:1852: $? = 1 configure:1875: checking for C compiler default output file name configure:1878: gcc -Wall -g -O2 conftest.c >&5 configure:1881: $? = 0 configure:1927: result: a.out configure:1932: checking whether the C compiler works configure:1938: ./a.out configure:1941: $? = 0 configure:1958: result: yes configure:1965: checking whether we are cross compiling configure:1967: result: no configure:1970: checking for suffix of executables configure:1972: gcc -o conftest -Wall -g -O2 conftest.c >&5 configure:1975: $? = 0 configure:2000: result: configure:2006: checking for suffix of object files configure:2027: gcc -c -Wall -g -O2 conftest.c >&5 configure:2030: $? = 0 configure:2052: result: o configure:2056: checking whether we are using the GNU C compiler configure:2080: gcc -c -Wall -g -O2 conftest.c >&5 configure:2086: $? = 0 configure:2089: test -z || test ! -s conftest.err configure:2092: $? = 0 configure:2095: test -s conftest.o configure:2098: $? = 0 configure:2111: result: yes configure:2117: checking whether gcc accepts -g configure:2138: gcc -c -g conftest.c >&5 configure:2144: $? = 0 configure:2147: test -z || test ! -s conftest.err configure:2150: $? = 0 configure:2153: test -s conftest.o configure:2156: $? = 0 configure:2167: result: yes configure:2184: checking for gcc option to accept ANSI C configure:2254: gcc -c -Wall -g -O2 conftest.c >&5 configure:2260: $? = 0 configure:2263: test -z || test ! -s conftest.err configure:2266: $? = 0 configure:2269: test -s conftest.o configure:2272: $? = 0 configure:2290: result: none needed configure:2308: gcc -c -Wall -g -O2 conftest.c >&5 conftest.c:2: error: syntax error before "me" configure:2314: $? = 1 configure: failed program was: | #ifndef __cplusplus | choke me | #endif configure:2496: checking for g++ configure:2525: result: no configure:2496: checking for c++ configure:2525: result: no configure:2496: checking for gpp configure:2525: result: no configure:2496: checking for aCC configure:2525: result: no configure:2496: checking for CC configure:2525: result: no configure:2496: checking for cxx configure:2525: result: no configure:2496: checking for cc++ configure:2525: result: no configure:2496: checking for cl configure:2525: result: no configure:2496: checking for FCC configure:2525: result: no configure:2496: checking for KCC configure:2525: result: no configure:2496: checking for RCC configure:2525: result: no configure:2496: checking for xlC_r configure:2525: result: no configure:2496: checking for xlC configure:2525: result: no configure:2538: checking for C++ compiler version configure:2541: g++ --version </dev/null >&5 ./configure: line 1: g++: command not found configure:2544: $? = 127 configure:2546: g++ -v </dev/null >&5 ./configure: line 1: g++: command not found configure:2549: $? = 127 configure:2551: g++ -V </dev/null >&5 ./configure: line 1: g++: command not found configure:2554: $? = 127 configure:2557: checking whether we are using the GNU C++ compiler configure:2581: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2587: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | | int | main () | { | #ifndef __GNUC__ | choke me | #endif | | ; | return 0; | } configure:2612: result: no configure:2618: checking whether g++ accepts -g configure:2639: g++ -c -g conftest.cc >&5 ./configure: line 1: g++: command not found configure:2645: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | | int | main () | { | | ; | return 0; | } configure:2668: result: no configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void std::exit (int) throw (); using std::exit; | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void std::exit (int); using std::exit; | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void exit (int) throw (); | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void exit (int); | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | void exit (int); | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2802: checking how to run the C preprocessor configure:2837: gcc -E conftest.c configure:2843: $? = 0 configure:2875: gcc -E conftest.c conftest.c:12:28: ac_nonexistent.h: No such file or directory configure:2881: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | /* end confdefs.h. */ | #include <ac_nonexistent.h> configure:2920: result: gcc -E configure:2944: gcc -E conftest.c configure:2950: $? = 0 configure:2982: gcc -E conftest.c conftest.c:12:28: ac_nonexistent.h: No such file or directory configure:2988: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | /* end confdefs.h. */ | #include <ac_nonexistent.h> configure:3032: checking for egrep configure:3042: result: grep -E configure:3048: checking for AIX configure:3070: result: no configure:3078: checking whether gcc needs -traditional configure:3120: result: no configure:3127: checking whether we are using SUNPro C configure:3138: gcc -E conftest.c configure:3141: $? = 0 configure:3148: result: no configure:3191: checking for ranlib configure:3207: found /usr/bin/ranlib configure:3218: result: ranlib configure:3238: checking for special C compiler options needed for large files configure:3335: result: no configure:3341: checking for _FILE_OFFSET_BITS value needed for large files configure:3372: gcc -c -Wall -g -O2 conftest.c >&5 conftest.c:18: warning: left shift count >= width of type conftest.c:18: warning: left shift count >= width of type conftest.c:20: error: size of array `off_t_is_large' is negative configure:3378: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | /* end confdefs.h. */ | #include <sys/types.h> | /* Check that off_t can represent 2**63 - 1 correctly. | We can't simply define LARGE_OFF_T to be 9223372036854775807, | since some C++ compilers masquerading as C compilers | incorrectly reject 9223372036854775807. */ | #define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62)) | int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721 | && LARGE_OFF_T % 2147483647 == 1) | ? 1 : -1]; | int | main () | { | | ; | return 0; | } configure:3424: gcc -c -Wall -g -O2 conftest.c >&5 configure:3430: $? = 0 configure:3433: test -z || test ! -s conftest.err configure:3436: $? = 0 configure:3439: test -s conftest.o configure:3442: $? = 0 configure:3454: result: 64 configure:3464: checking for _LARGE_FILES value needed for large files configure:3495: gcc -c -Wall -g -O2 conftest.c >&5 configure:3501: $? = 0 configure:3504: test -z || test ! -s conftest.err configure:3507: $? = 0 configure:3510: test -s conftest.o configure:3513: $? = 0 configure:3577: result: no configure:3590: checking whether byte ordering is bigendian configure:3617: gcc -c -Wall -g -O2 conftest.c >&5 configure:3623: $? = 0 configure:3626: test -z || test ! -s conftest.err configure:3629: $? = 0 configure:3632: test -s conftest.o configure:3635: $? = 0 configure:3659: gcc -c -Wall -g -O2 conftest.c >&5 conftest.c: In function `main': conftest.c:20: error: `not' undeclared (first use in this function) conftest.c:20: error: (Each undeclared identifier is reported only once conftest.c:20: error: for each function it appears in.) conftest.c:20: error: syntax error before "big" configure:3665: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | /* end confdefs.h. */ | #include <sys/types.h> | #include <sys/param.h> | | int | main () | { | #if BYTE_ORDER != BIG_ENDIAN | not big endian | #endif | | ; | return 0; | } configure:3798: result: no configure:3820: checking for gmake configure:3847: result: no configure:3857: checking for make configure:3875: found /usr/bin/make configure:3888: result: /usr/bin/make configure:3946: checking for lt_dlinit in -lltdl configure:3976: gcc -o conftest -Wall -g -O2 conftest.c -lltdl >&5 configure:3982: $? = 0 configure:3985: test -z || test ! -s conftest.err configure:3988: $? = 0 configure:3991: test -s conftest configure:3994: $? = 0 configure:4007: result: yes configure:4140: checking build system type configure:4158: result: i386-pc-linux-gnu configure:4166: checking host system type configure:4180: result: i386-pc-linux-gnu configure:4188: checking for a sed that does not truncate output configure:4242: result: /bin/sed configure:4256: checking for ld used by gcc configure:4323: result: /usr/bin/ld configure:4332: checking if the linker (/usr/bin/ld) is GNU ld configure:4347: result: yes configure:4352: checking for /usr/bin/ld option to reload object files configure:4359: result: -r configure:4368: checking for BSD-compatible nm configure:4410: result: /usr/bin/nm -B configure:4414: checking whether ln -s works configure:4418: result: yes configure:4425: checking how to recognise dependent libraries configure:4599: result: pass_all configure:4806: checking for ANSI C header files configure:4831: gcc -c -Wall -g -O2 conftest.c >&5 configure:4837: $? = 0 configure:4840: test -z || test ! -s conftest.err configure:4843: $? = 0 configure:4846: test -s conftest.o configure:4849: $? = 0 configure:4935: gcc -o conftest -Wall -g -O2 conftest.c >&5 conftest.c: In function `main': conftest.c:30: warning: implicit declaration of function `exit' configure:4938: $? = 0 configure:4940: ./conftest configure:4943: $? = 0 configure:4958: result: yes configure:4982: checking for sys/types.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for sys/stat.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for stdlib.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for string.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for memory.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for strings.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for inttypes.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for stdint.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for unistd.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:5053: checking dlfcn.h usability configure:5065: gcc -c -Wall -g -O2 conftest.c >&5 configure:5071: $? = 0 configure:5074: test -z || test ! -s conftest.err configure:5077: $? = 0 configure:5080: test -s conftest.o configure:5083: $? = 0 configure:5093: result: yes configure:5097: checking dlfcn.h presence configure:5107: gcc -E conftest.c configure:5113: $? = 0 configure:5133: result: yes configure:5168: checking for dlfcn.h configure:5175: result: yes configure:5193: checking how to run the C++ preprocessor configure:5224: g++ -E conftest.cc ./configure: line 1: g++: command not found configure:5230: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5224: g++ -E conftest.cc ./configure: line 1: g++: command not found configure:5230: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5224: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5230: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5224: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5230: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5307: result: /lib/cpp configure:5331: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5337: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5331: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5337: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5406: error: C++ preprocessor "/lib/cpp" fails sanity check See `config.log' for more details. ## ---------------- ## ## Cache variables. ## ## ---------------- ## ac_cv_build=i386-pc-linux-gnu ac_cv_build_alias=i386-linux ac_cv_c_bigendian=no ac_cv_c_compiler_gnu=yes ac_cv_cxx_compiler_gnu=no ac_cv_env_CC_set= ac_cv_env_CC_value= ac_cv_env_CFLAGS_set=set ac_cv_env_CFLAGS_value='-Wall -g -O2' ac_cv_env_CPPFLAGS_set= ac_cv_env_CPPFLAGS_value= ac_cv_env_CPP_set= ac_cv_env_CPP_value= ac_cv_env_CXXCPP_set= ac_cv_env_CXXCPP_value= ac_cv_env_CXXFLAGS_set= ac_cv_env_CXXFLAGS_value= ac_cv_env_CXX_set= ac_cv_env_CXX_value= ac_cv_env_F77_set= ac_cv_env_F77_value= ac_cv_env_FFLAGS_set= ac_cv_env_FFLAGS_value= ac_cv_env_LDFLAGS_set= ac_cv_env_LDFLAGS_value= ac_cv_env_build_alias_set=set ac_cv_env_build_alias_value=i386-linux ac_cv_env_host_alias_set= ac_cv_env_host_alias_value= ac_cv_env_target_alias_set= ac_cv_env_target_alias_value= ac_cv_exeext= ac_cv_header_dlfcn_h=yes ac_cv_header_inttypes_h=yes ac_cv_header_memory_h=yes ac_cv_header_stdc=yes ac_cv_header_stdint_h=yes ac_cv_header_stdlib_h=yes ac_cv_header_string_h=yes ac_cv_header_strings_h=yes ac_cv_header_sys_stat_h=yes ac_cv_header_sys_types_h=yes ac_cv_header_unistd_h=yes ac_cv_host=i386-pc-linux-gnu ac_cv_host_alias=i386-linux ac_cv_lib_ltdl_lt_dlinit=yes ac_cv_objext=o ac_cv_path_MAKE=/usr/bin/make ac_cv_prog_CPP='gcc -E' ac_cv_prog_CXXCPP=/lib/cpp ac_cv_prog_GMAKE=no ac_cv_prog_ac_ct_CC=gcc ac_cv_prog_ac_ct_RANLIB=ranlib ac_cv_prog_cc_g=yes ac_cv_prog_cc_stdc= ac_cv_prog_cxx_g=no ac_cv_prog_egrep='grep -E' ac_cv_prog_gcc_traditional=no ac_cv_prog_suncc=no ac_cv_sys_file_offset_bits=64 ac_cv_sys_large_files=no ac_cv_sys_largefile_CC=no lt_cv_deplibs_check_method=pass_all lt_cv_file_magic_cmd='$MAGIC_CMD' lt_cv_file_magic_test_file= lt_cv_ld_reload_flag=-r lt_cv_path_LD=/usr/bin/ld lt_cv_path_NM='/usr/bin/nm -B' lt_cv_path_SED=/bin/sed lt_cv_prog_gnu_ld=yes ## ----------------- ## ## Output variables. ## ## ----------------- ## ACLOCAL='' AR='' AUTOCONF='' AUTOHEADER='' CC='gcc' CFLAGS='-Wall -g -O2' CPP='gcc -E' CPPFLAGS='' CRYPTLIB='' CXX='g++' CXXCPP='/lib/cpp' CXXFLAGS='' DEFS='' DIRNAME='' ECHO='echo' ECHO_C='' ECHO_N='-n' ECHO_T='' EGREP='grep -E' EXEEXT='' F77='' FFLAGS='' GMAKE='no' GREP='' HOSTINFO='' INCLTDL='' INSTALLSTRIP='' LDFLAGS='' LIBLTDL='-lltdl' LIBLTDLPATH='' LIBOBJS='' LIBPREFIX='' LIBS='' LIBTOOL='' LN_S='ln -s' LOCATE='' LTLIBOBJS='' MAKE='/usr/bin/make' MODULES='' OBJEXT='o' OPENSSL_INCLUDE='' OPENSSL_LIBS='' PACKAGE_BUGREPORT='' PACKAGE_NAME='' PACKAGE_STRING='' PACKAGE_TARNAME='' PACKAGE_VERSION='' PATH_SEPARATOR=':' PCAP_LIBS='' PERL='' RADIUSD_MAJOR_VERSION='2' RADIUSD_MINOR_VERSION='0.0-pre0' RADIUSD_VERSION='2.0.0-pre0' RANLIB='ranlib' REGEX='' REGEX_EXTENDED='' RUSERS='' SHELL='/bin/sh' SNMPGET='' SNMPWALK='' SNMP_INCLUDE='' SNMP_LIBS='' STATIC_MODULES='' STRIP='' USE_SHARED_LIBS='' USE_STATIC_LIBS='' ac_ct_AR='' ac_ct_CC='gcc' ac_ct_CXX='g++' ac_ct_F77='' ac_ct_RANLIB='ranlib' ac_ct_STRIP='' bindir='${exec_prefix}/bin' build='i386-pc-linux-gnu' build_alias='i386-linux' build_cpu='i386' build_os='linux-gnu' build_vendor='pc' datadir='/usr/share' docdir='' exec_prefix='/usr' host='i386-pc-linux-gnu' host_alias='' host_cpu='i386' host_os='linux-gnu' host_vendor='pc' includedir='${prefix}/include' infodir='${prefix}/info' libdir='/usr/lib/freeradius' libexecdir='${exec_prefix}/libexec' localstatedir='/var' logdir='' mandir='/usr/share/man' oldincludedir='/usr/include' prefix='/usr' program_transform_name='s,x,x,' radacctdir='' raddbdir='' sbindir='${exec_prefix}/sbin' sharedstatedir='${prefix}/com' subdirs='' sysconfdir='/etc' target_alias='' ## ----------- ## ## confdefs.h. ## ## ----------- ## #define HAVE_DLFCN_H 1 #define HAVE_INTTYPES_H 1 #define HAVE_MEMORY_H 1 #define HAVE_STDINT_H 1 #define HAVE_STDLIB_H 1 #define HAVE_STRINGS_H 1 #define HAVE_STRING_H 1 #define HAVE_SYS_STAT_H 1 #define HAVE_SYS_TYPES_H 1 #define HAVE_UNISTD_H 1 #define PACKAGE_BUGREPORT "" #define PACKAGE_NAME "" #define PACKAGE_STRING "" #define PACKAGE_TARNAME "" #define PACKAGE_VERSION "" #define STDC_HEADERS 1 #define _FILE_OFFSET_BITS 64 #endif #ifdef __cplusplus void exit (int); configure: exit 1 netdev:/tmp/freeradius-server-snapshot-20070116#

3 3

Does the Users file still support auth-type :=PAM in ver 1.1.4?
by Ellis, Scott 1 (N-Comptel Inc.) 17 Jan '07

17 Jan '07

1 0

A couple of questions PoPToP+FreeRadius+IAS
by Marxy 17 Jan '07

17 Jan '07

My configuration is: [poptop pptpd & pppd]----[freeradius]-----[Microsoft IAS]----[ADS] pptpd is 1.3.3 pppd is 2.4.4 freeradius is 1.1.3 Clients go from internet, make auth via MS IAS, but accounting does freeradius. All seems good. Clients go OK. Auth and accounting seems OK too. But, I have couple of questions 1. Accounting of Calling-station-id returns only first 4 characters of user's IP address. I noticed that if some user enters using his remote IP like 77.122.215.143 the record of his Calling-Station-Id would be Calling-Station-Id = "1.77" which are first 4 symbols of IP address in back order. What's goin' wrong? I suppose that calling-station-id should be whole IP address. 2. Radius does not understand some attributes from client. a) Jan 14 12:37:14 shata pppd[25046]: rc_avpair_gen: received unknown attribute 25 of length 30: 0x333B04270000013700010A00001701C735C490B2116B000000000000014C b) Jan 11 22:29:02 shata pppd[19185]: RADIUS: wrong service type 4 for user21 But I know that these are VALUE Service-Type Dialback-Framed-User 4 and ATTRIBUTE MS-CHAP2-Response 25 octets as they are written in the dictionary file. For the first case users can not login. Radius refuse them by wrong service type. In second case users login OK but I what to know why there is error anyway. What is wrong here? Thank for replies, --- Oleg. -- View this message in context: http://www.nabble.com/A-couple-of-questions-PoPToP%2BFreeRadius%2BIAS-tf299… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 7

Freeradius and users with ADS domain
by Marxy 17 Jan '07

17 Jan '07

I has this configuration [poptop pptpd & pppd & radiusclient]----[freeradius+mysql]-----[Microsoft IAS]----[ADS] pptpd is 1.3.3 pppd is 2.4.4 freeradius is 1.1.3 radiusclient is 0.3.2 mysql is 5.0.27 Clients go from internet, make auth via MS IAS/ADS, but accounting does freeradius writing logs to file and to mysql DB. All seems good. Clients go OK. Auth and accounting seems OK too. But some clients use domain with their user names. For ex: user smith sends ORG\Smith as username. Its accounting string appears like this in /var/log/radius/radacct/NAS1/detail-20070117 file ---------------------------------- User-Name = "ORG\\Smith" ----------------------------------- But its accounting's UserName in the mysql DB (radacct table) appears as ----------------------------------- ORG=5C=5C=5C=5CSmith ----------------------------------- What's going wrong? It would be like an ideal situation when I could strip the domain from user's names. I has the only domain in the net. But in the common case I think it could be right to write the EXACT usename as it sent by user. I mean if the user authorizes as ORG\Smith it seems like accounting should be done AS User-Name = "ORG\Smith" in log file and it should be UserName='ORG\Smith' in the nysql database -- View this message in context: http://www.nabble.com/Freeradius-and-users-with-ADS-domain-tf3027388.html#a… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

setting user profile depending on realms?
by Markus Krause 17 Jan '07

17 Jan '07

Hi list! We have an internal LAN with several VLANs, each corresponding the the unix group of the users. This VLAN information is stored in OpenLDAP (via radiusprofiledn), and that works :-) But we want to give our users the possibility to get into a special VLAN, in particular one which is called "Internetcafe" (in which the can use "special services"). I thought of doing this by adding a realm to the username, so the users can either use "username" or "username@ic" and gets the appropriate VLAN. To do this i added the following line in /etc/raddb/users: DEFAULT User-Name =~ "@ic$", User-Profile := "cn=InternetCafe,ou=VLAN,o=Testnet" But this works only if i do not have a radiusprofiledn attribute in the users entry in OpenLDAP, otherwise it works. Is there a way to override the userprofile given back by the freeradius if the user adds a "@ic" (or whatever realm) ? Or is there even a better way to achieve this goal and i am thinking in a completly wrong direction? Thanks in advance for any hints! Regards Markus -- Markus Krause email: krause(a)biochem.mpg.de Mogli-Soft: Support for Mac OS X, Webmail/Horde, LDAP, RADIUS by order of the Computing Center of the Max-Planck-Institute of Biochemistry Tel.: 089 - 89 40 85 99 Fax.: 089 - 89 40 85 98 ---------------------------------------------------------------------- This message was sent using https://webmail2.biochem.mpg.de If you encounter any problems please report to rz-linux(a)biochem.mpg.de

1 0

Re: building 1.4 (CentOS 4.4) MYSQL 99% home [unclas]
by Long 17 Jan '07

17 Jan '07

>Are all the log files in /var/log/radius writable by the user you are running >radiusd as? > Configured to run as nobody:nobody. chmod -R nodody:nobody /usr/local/var/log/radiusd allows me to run it as nobody now, but if I do "radiusd > radlog &" the radlog still only contains the first line "Starting - reading configuration files..." - although it does run and I can ps the process. Should I change permissions on all the other (/usr/local/etc/raddb..., /usr/local/share/freeradius...) files? I would very much appreciate a dir-by-dir listing of someone else's permissions, including the relevant libraries. Is there anything wrong with my "radiusd > radlog &" (as root), considering I am including the "&" while the process drops to background anyway? And does the user need to have a real shell, as nobody is nologin? -Andrew

1 0

RE: building 1.4 (CentOS 4.4) MYSQL 99% home [unclas]
by Long 17 Jan '07

17 Jan '07

BTW - I have it configued in radiusd.conf to run under nobody:nobody. Andrew

3 2

building 1.4 (CentOS 4.4) MYSQL
by Andrew Long 17 Jan '07

17 Jan '07

I have the server running and can now authenticate remotely and records are correctly added to radacct. Part of our setup requires the rlm_sqlcounter module. I inserted the $INCLUDE line and the output tells me it is loading. However, I read in rlm_sqlcounter doc that you must ./configure --with-experimental-modules. I did not do this. Is it necessary to re-compile? (I DO see our daypasscounter queries loading, with the session-timout we need, being run in the debug). I think (off the top of my head) it is no longer necessary to compile with experimental modules in order to use rlm_sqlcounter... Will I be able to test it via ntradping assuming I create entries for a test group in usergroup/radgroupreply (I need to see the full reply with all sent strings). BTW- I am a bit fuzzy on rlm_sql_log. As I am getting accounting without it, can someone briefly elaborate on it's function. IE, if accounting works in sql without it, what other function does it provide? (Yes, I read the doc and am still fuzzy). Andrew

5 7