November 2007 - Freeradius-Users - lists.freeradius.org

wpa_supplicant eap trouble
by Patrick Welche 18 Nov '07

18 Nov '07

I have set up radiusd-CVS of 15 Nov, and can't connect to it with wpa_supplicant 0.4.9/bsd/ath0. (I also tried vista but that's worse.) The authentication seems to succeed: Sun Nov 18 15:11:10 2007 : Debug: ++[sql] returns ok Sending Access-Accept of id 1 to 192.168.200.34 port 1027 Service-Type = Framed-User Framed-Protocol = PPP EAP-Message = 0x03010004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "test" Sun Nov 18 15:11:10 2007 : Debug: Finished request 1. Sun Nov 18 15:11:10 2007 : Debug: Going to the next request But, now on the client (whose clock is 2.180s slow): Nov 18 15:11:12.979857: EAPOL: SUPP_BE entering state RECEIVE Nov 18 15:11:13.025776: RX EAPOL from 00:19:5b:67:d2:1c Nov 18 15:11:13.026165: RX EAPOL - hexdump(len=8): 01 00 00 04 04 01 00 04 Nov 18 15:11:13.026210: EAPOL: Received EAP-Packet frame Nov 18 15:11:13.026235: EAPOL: SUPP_BE entering state REQUEST Nov 18 15:11:13.026259: EAPOL: getSuppRsp Nov 18 15:11:13.026282: EAP: EAP entering state RECEIVED Nov 18 15:11:13.026308: EAP: Received EAP-Failure Nov 18 15:11:13.026332: EAP: EAP entering state DISCARD Received EAP-Failure ?! Am I right in guessing that EAP-Message = 0x03010004 means 03 = EAP-Success, 01 = id, 0004 = 4 bytes long? Sending... gets printed before the packet is signed, so I assume that the correct Message-Authenticator gets computed. How can I break the configuration files such that all communication up to Access-Accept is OK, and yet the connection fails? Cheers, Patrick

2 1

Error: no DB handles to use
by sam 18 Nov '07

18 Nov '07

Hi, I met a strange problem seems related "rlm_sql". When freeradius running in debug mode(radiusd -X) everything works fine, but there's something wrong in normal mode. Below please find the error information in radius.log file. Need your help! Sun Nov 18 15:13:24 2007 : Info: rlm_sql (sql): Trying to (re)connect unconnected handle 4.. Sun Nov 18 15:13:24 2007 : Error: rlm_sql_unixodbc: SQL down 08S01 [unixODBC][FreeTDS][SQL Server]Server is unavailable or does not exist. Sun Nov 18 15:13:24 2007 : Error: rlm_sql_unixodbc: Connection failed Sun Nov 18 15:13:24 2007 : Error: rlm_sql (sql): Failed to connect DB handle #4 Sun Nov 18 15:13:24 2007 : Info: rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 1 My configuration: OS: Fedora Core 7 FreeRadius: 1.1.7-3 FreeTDS: 0.64-6 unixODBC: 2.2.12-2 Regards, Sam

1 0

automated response
by Nico Gazzano 18 Nov '07

18 Nov '07

I will be on vacation from 11/18/07 through 11/25/07, and will have limited or no access to voicemail and email. For support questions please contact Dmitriy Fortel at 847-690-1900 x 208 or send an email to support(a)mischoice.com. For issues regarding website projects please send all requests to webmaster(a)mischoice.com. This is an automatically generated message, do not reply. Thank you, Nico Gazzano

1 0

how to prepare directory file for 3Com VSA WX switch?
by Maciej Uhlig 18 Nov '07

18 Nov '07

this is a piece of information concerning VSA from 3Com's WX switch manual: Attribute Type Rcv in Access Resp? Sent in Access Reqst? Sent in Acct Reqst? Description VLAN-Name 26, 43, 2 Yes No Yes Name of the VLAN to which the client belongs. there are more (8) VSAs starting from 26, 43, 2 to 26, 43, 8 how to incorporate all this information in freeradius directory (configuration)? I don't understand what "26, 43, 2" mean. best regards, MU

3 3

What is the threading structure of Free Radius
by Liangliang Guo 17 Nov '07

17 Nov '07

Hi everyone: I am going to deploy free radius on Sun T2000 Platform which has a 8 cores processor that support 32 threads context(4 each core, just as there are 32 virtual CPUs).A single thread application underperforms on this kind of platform.On this platform the performance of an application can be increased linearly in line with the number of working threads running in parallel. The throughput of an application can benefit from scaling the worker thread. -Free radius is a single thread or mutil-thread application? -So what is the threading model of freeradius, one query/one thread or there are a fix amount of worker thread(e.g. as the same as the number of CPU, configurable number of worker thread). -Can I scale the worker threads from some configuration files? Best Regards Leon Guo Ericsson (China) Communications Company Ltd. SH Branch *: 10F Building E No.1068 Tian Shan Xi Rd Shanghai *: +86 21 22089695 Fax: +86 21 22088047

1 0

Can i modify radius property?
by yangcuilin 17 Nov '07

17 Nov '07

Hi, brothers Can administrator configure a value to a user (call him Jim) in FreeRadius. Jim will get the value when he assesses FreeRadius, and in the same time, Jim can modify it. For example: 1. Administrator configured (just store) two value (named 'lastChangePwdDate' and 'pwdExpiryDuration') to the user 'Jim'. 2. When Jim access FreeRadius, he can get the value of 'lastChangePwdDate' and 'pwdExpiryDuration'. 3. Jim modify one value (if Jim change his pwd, he will change the value of 'lastChangePwdDate') and save to FreeRadius. Notes: I just want to implements the change password function in FreeRadius. Could any one have the same requirement? Please tell me your advice or solutions. Thank you in advance. Rock

2 1

Radrelay Locking Issues
by Brian De Wolf 16 Nov '07

16 Nov '07

Hello, I'm using freeradius 1.1.7 on a RHEL4 (built by pkgsrc, though) amd64 box as a logger/relay for accounting packets. Unfortunately, it looks like it's not relaying all the accounting packets it receives, since lines such as these appear in its logs: Fri Nov 16 17:12:31 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:12:44 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:12:47 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:12:56 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:13:01 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:13:27 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:13:45 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate2.log, giving up Fri Nov 16 17:15:00 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate2.log, giving up Fri Nov 16 17:15:00 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Fri Nov 16 17:15:03 2007 : Error: rlm_detail: Failed to aquire filelock for /var/log/radiusd/replicate1.log, giving up Currently I'm trying to replicate the accounting logs to two separate servers using two separate files and two separate instances of radrelay, but as you can see, I appear to be losing some packets. While a majority of the accounting is passing, I'd much prefer all of it to pass. It's logged on the box, but other devices need to use the accounting packets as well. Are there any obvious fixes to resolve the locking contention that appears between radrelay and rlm_detail that causes rlm_detail to give up on logging? I may have missed something, finding radrelay itself was a journey (it's not in the wiki or on the site anywhere and the source distribution's doc/radrelay is pretty old). /var on the box is an ext3 partition, if that makes any difference. Thanks! Brian De Wolf

1 0

1.17 compilation errors
by Paul Bartell 16 Nov '07

16 Nov '07

Hello. when trying to compile freeradius under ubuntu 7.10, i get the following error: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/home/paulb/build/freeradius-1.1.7/src/include -I/home/paulb/build/freeradius-1.1.7/src/modules/rlm_sql -c rlm_sqlippool.c -fPIC -DPIC -o .libs/rlm_sqlippool.o In file included from rlm_sqlippool.c:37: /home/paulb/build/freeradius-1.1.7/src/include/modpriv.h:7:18: error: ltdl.h: No such file or directory In file included from rlm_sqlippool.c:37: /home/paulb/build/freeradius-1.1.7/src/include/modpriv.h:16: error: expected specifier-qualifier-list before 'lt_dlhandle' In file included from rlm_sqlippool.c:39: /home/paulb/build/freeradius-1.1.7/src/modules/rlm_sql/rlm_sql.h:15:18: error: ltdl.h: No such file or directory In file included from rlm_sqlippool.c:39: /home/paulb/build/freeradius-1.1.7/src/modules/rlm_sql/rlm_sql.h:68: error: expected specifier-qualifier-list before 'lt_dlhandle' rlm_sqlippool.c: In function 'sqlippool_command': rlm_sqlippool.c:311: error: 'SQL_INST' has no member named 'module' rlm_sqlippool.c: In function 'sqlippool_query1': rlm_sqlippool.c:358: error: 'SQL_INST' has no member named 'module' rlm_sqlippool.c: In function 'sqlippool_postauth': rlm_sqlippool.c:539: warning: pointer targets in passing argument 2 of 'strNcpy' differ in signedness rlm_sqlippool.c:526: warning: unused variable 'self' make[6]: *** [rlm_sqlippool.lo] Error 1 make[6]: Leaving directory `/home/paulb/build/freeradius-1.1.7/src/modules/rlm_sqlippool' make[5]: *** [common] Error 2 make[5]: Leaving directory `/home/paulb/build/freeradius-1.1.7/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/home/paulb/build/freeradius-1.1.7/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/home/paulb/build/freeradius-1.1.7/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/home/paulb/build/freeradius-1.1.7/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/home/paulb/build/freeradius-1.1.7' make: *** [all] Error 2 I simply have no idea what it is referring to, and what i can do to fix it. Sorry if it seems a bit noobtistic, i haven't ever compiled something this complex. Thanks, Paul -- "If you are savvy and smart about the choices you make in life, The sky is not the limit!" Mark Shuttleworth Random quote of the week/month/whenever i get to updating it: "This is an incline plane. You roll stuff down it." Or is it one of those "incline planes have been used throughout the millenia, from the Egyptian pyramids to this stupid science class" videos?" - Jasmine Lee

2 2

Mikrotik and PPPoE queue prioirties
by Matthew Neumark 16 Nov '07

16 Nov '07

Hello, I use PPPoE connections through freeradius and mikrotik. What I would like to do is setup the customer's dynamic queue that is setup through the radgroupreply table setup so that when the customers log in I can also assign that queue to a priority based upon the group the customer is put in. Is this possible and how? Matt

2 3

DH and random
by stefek143 16 Nov '07

16 Nov '07

Hi. When i've configured my freeradius i've seen 2 metods to create files DH and random: first: DH: openssl dhparam -check -text -5 512 -out dh Random: dd if=/dev/urandom of=random count=2 second: DH: date >/etc/1x/DH Random date > /etc/1x/random And I wondering what is different in theory and practice? my freeradius is acting, but i wanna understand for what i need this two file and is it never mind when i use instead of first, second method. THX for answers

1 0