March 2007 - Freeradius-Users - lists.freeradius.org

(no subject)
by markcapelle＠pcmc.com 15 Mar '07

15 Mar '07

I have a situation where I have a wireless controller that services multiple wireless networks (vlans). When the controller contacts the RADIUS server with an authentication request, it does so with the IP address of the controller as the client address. The problem is I have a guest network that has lower security than my other wireless networks. The guest network has it’s own user/password database stored in the controller, but the way authentication occurs is that it checks RADIUS for the user first and assumes it will fail, then will use the internal database. The issue with this is that if one of my users jumps on the guest network, they are authenticated which is not what I want to happen. Looking at the logs, I noticed that all the guest network users have the IP address of the client in the “cli” field. My guest network is a totally different VLAN and IP subnet. Is there a way to key off of the “cli” field and then make it so that all requests from clients with a specific subnet in this field are not authenticated? This would stop my internal users from connecting, but allow the correct users (those in the internal DB) to still get connected. Thanks. CONFIDENTIALITY NOTICE: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of this message in whole or in part is strictly prohibited. Please inform the sender immediately and destroy the original transmittal. Thank you for your cooperation.

2 1

new query verification in sql.conf
by Jean Carlos Oliveira Guandalini 15 Mar '07

15 Mar '07

I use freeradius for authentication of pppoe wifi. I need to make new sql query in a table with a list of mac-address, if the CallingStationId will be equal to the some mac-adress of the table then will not have to be connected. A system of mac-adress blacklist. I tried to make adding one query in sql.conf but it does not function. I find that it would have to add a new function in rlm_sql.c, but am not habil C programmer. Somebody can help me? Sorry for my english Thanks Jean

3 3

Segmentatin fault when running radiusd -X
by Felix Brack 15 Mar '07

15 Mar '07

Hello, When running 'radiusd -X' (version 1.1.5) it ends with a segmentation fault. I did not make any changes to the default configuration files, just tried to execute the steps in section 2 of the 'INSTALL' file. Here is the output of 'radiusd -X': ----------------------------------- Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" Segmentation fault ----------------------------------- The relevant output of 'strace radiusd -X' is --------------------------------------------- write(1, "Module: Library search path is /"..., 46Module: Library search path is /usr/local/lib ) = 46 open("/usr/local/lib/rlm_exec.la", O_RDONLY) = 5 brk(0x8145000) = 0x8145000 fstat64(5, {st_mode=S_IFREG|0755, st_size=869, ...}) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000 read(5, "# rlm_exec.la - a libtool librar"..., 4096) = 869 read(5, "", 4096) = 0 close(5) = 0 munmap(0x40017000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=25316, ...}) = 0 old_mmap(NULL, 25316, PROT_READ, MAP_PRIVATE, 5, 0) = 0x402f8000 close(5) = 0 open("/lib/i686/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib/i686/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/lib/i686/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib/i686", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/lib/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/lib/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib", {st_mode=S_IFDIR|0755, st_size=1848, ...}) = 0 open("/usr/lib/i686/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib/i686/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/usr/lib/i686/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib/i686", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/usr/lib/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/usr/lib/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib", {st_mode=S_IFDIR|0755, st_size=11311, ...}) = 0 munmap(0x402f8000, 25316) = 0 open("/usr/local/lib/rlm_exec-1.1.5.so", O_RDONLY) = 5 read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \n\0\000"..., 1024) = 1024 fstat64(5, {st_mode=S_IFREG|0755, st_size=46365, ...}) = 0 old_mmap(NULL, 10132, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x40017000 mprotect(0x40019000, 1940, PROT_NONE) = 0 old_mmap(0x40019000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 5, 0x1000) = 0x40019000 close(5) = 0 time(NULL) = 1173950765 write(1, "Module: Loaded exec \n", 21Module: Loaded exec ) = 21 time(NULL) = 1173950765 write(1, " exec: wait = yes\n", 18 exec: wait = yes ) = 18 time(NULL) = 1173950765 write(1, " exec: program = \"(null)\"\n", 26 exec: program = "(null)" ) = 26 time(NULL) = 1173950765 write(1, " exec: input_pairs = \"request\"\n", 31 exec: input_pairs = "request" ) = 31 --- SIGSEGV (Segmentation fault) --- +++ killed by SIGSEGV +++ ----------------------------------- 'ldd /usr/local/lib/rlm_exec-1.1.5.so' returns: ----------------------------------------------- libradius-1.1.5.so => /usr/local/lib/libradius-1.1.5.so (0x4000b000) libnsl.so.1 => /lib/libnsl.so.1 (0x40021000) libresolv.so.2 => /lib/libresolv.so.2 (0x40037000) libpthread.so.0 => /lib/libpthread.so.0 (0x40049000) libc.so.6 => /lib/libc.so.6 (0x4005f000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x40186000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000) ----------------------------------- I am not too lazy to modify the configuration files but I thought it would be best to run with a default set; is this wrong? Should I first modify the configuration files and then try again? many thanks, Felix

1 0

Re : FreeRadius+Dialup_admin+Mysql
by Eshun Benjamin 15 Mar '07

15 Mar '07

check your settings in .../conf/admin.conf # # can be one of mysql,pg where: # mysq: MySQL database (port 3306) # pg: PostgreSQL database (port 5432) # sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: dialup_admin sql_password: XXXXXX sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Grant Arix <arix2dx2(a)yahoo.fr> À : freeradius-users(a)lists.freeradius.org Envoyé le : Jeudi, 15 Mars 2007, 9h22mn 43s Objet : FreeRadius+Dialup_admin+Mysql HI, I just want to settup my freeradius to work with Mysql, i have already install everything and configure to, but when i tried to conected to the web-based graphic dialup_admin page i see the message: "Could not connect to SQL database". Now i dont know what wrong.. If somebody can help me fix this issue i will be good for me ? Grant Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

1 0

Querying FreeRadius client c library
by Khurram Bhatti 15 Mar '07

15 Mar '07

Hi, I'm new to FreeRadius-/Users, Dev lists, Please any guide me where I can direct all my emails regarding FreeRadius client c library. -KB

1 0

caoshijun wants to share sites with you...
by cao.shijun＠gmail.com 15 Mar '07

15 Mar '07

caoshijun (cao.shijun(a)gmail.com) has invited you to StumbleUpon! You can see my other favorites here: http://caoshijun.stumbleupon.com Thanks, caoshijun --- StumbleUpon lets you discover great sites with a single click. Give it a try at: http://www.stumbleupon.com/join.php?friend=2437398&emailcode=h2xzrr12uabgh1…

1 0

caoshijun wants to share sites with you...
by cao.shijun＠gmail.com 15 Mar '07

15 Mar '07

caoshijun (cao.shijun(a)gmail.com) has invited you to StumbleUpon! You can see my other favorites here: http://caoshijun.stumbleupon.com Thanks, caoshijun --- StumbleUpon lets you discover great sites with a single click. Give it a try at: http://www.stumbleupon.com/join.php?friend=2437398&emailcode=h2xzrr12uabgh1…

1 0

FreeRadius+Dialup_admin+Mysql
by Grant Arix 15 Mar '07

15 Mar '07

HI, I just want to settup my freeradius to work with Mysql, i have already install everything and configure to, but when i tried to conected to the web-based graphic dialup_admin page i see the message: "Could not connect to SQL database". Now i dont know what wrong.. If somebody can help me fix this issue i will be good for me ? Grant --------------------------------- Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.

1 0

Re : freeradius-1.1.5 : *** glibc detected *** double free or corruption
by Eshun Benjamin 15 Mar '07

15 Mar '07

freeradius-1.1.5 : *** glibc detected *** double free or corruption compile new perl and recompile 1.1.5 without the option experimental modules ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : adreas polyxronopoulos <apolyxrono(a)yahoo.co.uk> À : freeradius <freeradius-users(a)lists.freeradius.org> Envoyé le : Lundi, 12 Mars 2007, 10h46mn 28s Objet : freeradius-1.1.5 : *** glibc detected *** double free or corruption Hi list , I have compiled freeradius-1.1.5 on ubuntu 6.06 LAMP. When i am running freeradius in debuging mode i got the following output: root@apolyxronolamp@dyndns:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** double free or corruption (fasttop): 0x80104ee8 *** Aborted I have seen this output in other emails in the list but they did'nt get a reply. Can anyone help me ? ___________________________________________________________ Yahoo! Messenger - with free PC-PC calling and photo sharing. http://uk.messenger.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

1 0

Support for Cisco PIX
by Norman Zhang 15 Mar '07

15 Mar '07

Hi, Does FreeRADIUS support Level 15 authentication for Cisco PIX? Regards, Norman Zhang

2 1