March 2007 - Freeradius-Users - lists.freeradius.org

sql_counter
by Pierluigi Di Lorenzo 09 Mar '07

09 Mar '07

Hi all, somebody knows how to pass external variables to sql_counter modules? and especially CallingStationId? I'd like to pass macaddress of pc making the request. Thank's in advance, ciao! -- Pierluigi Di Lorenzo ePrometeus s.r.l

1 0

EAP and System users?
by Matt Ashfield 09 Mar '07

09 Mar '07

Hi, We've been working on having a setup that can authenticate users against LDAP via EAP (Chap) as well as System users. We can get it to do one or the other, but not both. Is it possible to do both? If so, how? Thanks Matt mda(a)unb.ca

2 3

Re: freeradius ldap connector
by jerrrry＠voila.fr 09 Mar '07

09 Mar '07

OK thanks > Message du 09/03/07 à 09h52 > De : "Alan DeKok" > A : jerrrry(a)voila.fr, "FreeRadius users mailing list" > Copie à : > Objet : Re: freeradius ldap connector > > jerrrry(a)voila.fr wrote: > > > > you can see the debug. there are 7 searches for an uid that doesn't > > exist in the ldap directory: > > Because you told the server to do that. Please read the debug log to > see why. > > ... > > rlm_ldap: object not found or got ambiguous search result > > rlm_ldap::ldap_groupcmp: search failed > ... > > users: Matched DEFAULT at 116 > > You have 7 uses of "LDAP-Group" in the "users" file. > > If you don't want the server to perform LDAP lookups, don't configure > it to do LDAP lookups. > > And the LDAP lookups aren't cached in FreeRADIUS. Doing so would be > wrong, for a whole host of reasons. > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > >

1 0

radiusd -x show me unwanted thing
by satish patel 09 Mar '07

09 Mar '07

Dear all I have useing freeradius + vpdn + mssql but when no one use login 2 cisco vpdn it show me accounting of users how me some user accouning i don't know why ?"?? some thing like this Service-Type = Framed-User NAS-IP-Address = 192.168.1.1 Acct-Delay-Time = 0 rlm_sql (sql): Reserving sql socket id: 4 query: INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPort, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('0000AECD', 'a36f3c2d52d02639', 'mlpm677', '', '192.168.1.1', '', 'Virtual', '2007-03-09 19:43:11', '0', 'RADIUS', '', '', '0', '0', '', '', '', 'Framed-User', 'PPP', '', '0', '0') rlm_sql (sql): Released sql socket id: 4 Sending Accounting-Response of id 69 to 192.168.1.1 port 1646 rad_recv: Accounting-Request packet from host 192.168.1.1:1646, id=70, length=213 Acct-Session-Id = "0000ADCC" Tunnel-Server-Endpoint:0 = "192.168.1.1" Tunnel-Client-Endpoint:0 = "10.0.54.18" Tunnel-Assignment-Id:0 = "tulip" Framed-Protocol = PPP Framed-IP-Address = 10.100.18.11 User-Name = "mlpm607" Cisco-AVPair = "connect-progress=LAN Ses Up" Acct-Session-Time = 1797 Acct-Input-Octets = 466393 Acct-Output-Octets = 2625282 Acct-Input-Packets = 3259 Acct-Output-Packets = 3335 Acct-Authentic = RADIUS Acct-Status-Type = Interim-Update NAS-Port-Type = Virtual Cisco-NAS-Port = "Uniq-Sess-ID337" NAS-Port = 337 Service-Type = Framed-User NAS-IP-Address = 192.168.1.1 Acct-Delay-Time = 0 rlm_sql (sql): Reserving sql socket id: 3 query: UPDATE radacct SET FramedIPAddress = '10.100.18.11', AcctSessionTime = '1797', AcctInputOctets = '466393', AcctOutputOctets = '2625282' WHERE AcctSessionId = '0000ADCC' AND UserName = 'mlpm607' AND NASIPAddress= '192.168.1.1' rlm_sql (sql): Released sql socket id: 3 Sending Accounting-Response of id 70 to 192.168.1.1 port 1646 But user still not login then what is this $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

How to fetch triplets from HLR?
by lishuai zhao 09 Mar '07

09 Mar '07

Hi, all: Several EAP types are supported by freeradius including SIM and AKA with a patch. In case of EAP-SIM, the rlm_eap_sim module can calculate tripelets itself, and also can obtain triplets from an exist file by using rlm_sim_file module. The rlm_sim_module reads triplets from the file named simtriplets.dat. (1) I believe that triplets can also be obtains from a external palce, am I right? (2) If I want to fetch triplets from a HLR of GSM network, how could I do? Wether I need to add a module like rlm_sim_file? How to add such a module? (3) Does this module exist? Some one using EAP-AKA is also prefered! Thank you!

2 1

Building freeradius 1.1.5 packages on Debian
by Nils Olav Brandstorp Bekken 09 Mar '07

09 Mar '07

Hi I tried building Debian packages on the latest 1.1.5 and ended up with packages named 1.1.3, is that the way its supposed to be? Thanks. Nils O. Bekken

4 3

Re: freeradius ldap connector
by jerrrry＠voila.fr 09 Mar '07

09 Mar '07

Hi, you can see the debug. there are 7 searches for an uid that doesn't exist in the ldap directory: rlm_ldap: - authorize rlm_ldap: performing user authorization for X06dfdgdg radius_xlat: '(uid=X06dfdgdg)' radius_xlat: 'ou=PERSONNES,o=sg' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to ldaps://ldap-homo.sesme.group.scen, authentication 0 rlm_ldap: setting TLS CACert File to /etc/openldap/cacerts/cat-caconcerto-sogepa ss.pem rlm_ldap: setting TLS Require Cert to demand rlm_ldap: bind as sgzoneid=guards,ou=eloit,ou=personnes,o=sg/ghkhkk to ldaps: //ldap-homo.sesame.group.socgen rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns notfound for request 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=PERSONNES,o=sg' radius_xlat: '(uid=X06dfdgdg)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=PERSONNES,o=sg' radius_xlat: '(uid=X06dfdgdg)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=PERSONNES,o=sg' radius_xlat: '(uid=X06dfdgdg)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 users: Matched DEFAULT at 116 modcall[authorize]: module "files" returns ok for request 0 modcall: group group returns ok for request 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=PERSONNES,o=sg' radius_xlat: '(uid=X06dfdgdg)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=PERSONNES,o=sg' radius_xlat: '(uid=X06dfdgdg)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=PERSONNES,o=sg' radius_xlat: '(uid=X06dfdgdg)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=PERSONNES,o=sg, with filter (uid=X06dfdgdg) rlm_ldap: object not found or got ambiguous search result rlm_ldap::ldap_groupcmp: search failed rlm_ldap: ldap_release_conn: Release Id: 0 users: Matched DEFAULT at 116 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type Reject rad_check_password: Auth-Type = Reject, rejecting user auth: Failed to validate the user. Login incorrect (rlm_ldap: User not found): [X06dfdgdg] (from client sdfsfds por t 1 cli 192.18.136.19) Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 165 to 192.18.136.44:1812 Reply-Message = "forbidden." Waking up in 4 seconds... > Message du 06/03/07 à 11h58 > De : "Michael Mitchell" > A : "FreeRadius users mailing list" > Copie à : > Objet : Re: freeradius ldap connector > > jerrrry(a)voila.fr wrote: > > I notice that Freeradius tries 6 times to find a user in my LDAP > > directory when this user doesn't existe. > > > > err, really? During authorisation (where a search is performed by a priviledged user) or during authentication (where an attempt may be made to bind to LDAP as the customer)? > > What does the debug say? (run radiusd with the -X flag). > > > > Is there a mean to make freeradius tries only one time ? > > It only tries once for me, but I only do LDAP "authorisation". > > regards, > Mike > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > >

2 1

Freeradius and vlan assignment
by Bruno Mardirossian 09 Mar '07

09 Mar '07

Hello! I am working on implementing *freeradius* with a cisco 3750 switch connected to *freeradius*, which then talks to AD. (The linux box is on the AD domain) Anyway, we try to make vlan assignment by using the 'users' file . We create a user named 'test' on my AD server , and we created this section in the file users : test Auth-Type := MS-CHAP Tunnel-Type = 13, Tunnel-Medium-Type = 6, Tunnel-Private-Group-Id = 2 The user is correctly authenticated by AD , but he is put in the default vlan ( id 1 ) and not in the vlan defined in the file 'users' ( id 2 ) . By the way, readind the radiusd output , i think that freeradius does not read my users file...i didn't see int he log anything about the Tunnel-Type or Tunnel-Private-Group-Id informations.... Anyone have any thoughts? Regards Bruno Message-Authenticator = 0xa309657e84ce8131d67aa64d9a491059 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 6 modcall[authorize]: module "preprocess" returns ok for request 6 modcall[authorize]: module "chap" returns noop for request 6 rlm_realm: No '@' in User-Name = "CSB\test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 6 users: Matched entry DEFAULT at line 165 users: Matched entry DEFAULT at line 184 modcall[authorize]: module "files" returns ok for request 6 rlm_eap: EAP packet type response id 6 length 90 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 6 modcall[authorize]: module "mschap" returns noop for request 6 modcall: group authorize returns updated for request 6 rad_check_password: Found Auth-Type MS-CHAP rad_check_password: Found Auth-Type EAP Warning: Found 2 auth-types on request for user 'CSB\test' auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake eaptls_process returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: EAP type mschapv2 rlm_eap_peap: Tunneled data is valid. PEAP: Setting User-Name to CSB\test PEAP: Adding old state with 86 79 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 6 modcall[authorize]: module "preprocess" returns ok for request 6 modcall[authorize]: module "chap" returns noop for request 6 rlm_realm: No '@' in User-Name = "CSB\test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 6 users: Matched entry DEFAULT at line 165 modcall[authorize]: module "files" returns ok for request 6 rlm_eap: EAP packet type response id 6 length 67 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 6 modcall[authorize]: module "mschap" returns noop for request 6 modcall: group authorize returns updated for request 6 rad_check_password: Found Auth-Type MS-CHAP rad_check_password: Found Auth-Type EAP Warning: Found 2 auth-types on request for user 'CSB\test' auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found, released from the list rlm_eap: EAP/mschapv2 rlm_eap: processing type mschapv2 Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 6 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for test with NT-Password radius_xlat: Running registered xlat function of module mschap for string 'NT-Domain' radius_xlat: Running registered xlat function of module mschap for string 'User-Name' radius_xlat: Running registered xlat function of module mschap for string 'Challenge' mschap2: 9a radius_xlat: Running registered xlat function of module mschap for string 'NT-Response' radius_xlat: '/usr/bin/ntlm_auth --request-nt-key --domain=CSB --username=test --challenge=0529c10bac22a3fa --nt-response=4b1e21679b85263858da26874073491971a58f8bfc024456' Exec-Program: /usr/bin/ntlm_auth --request-nt-key --domain=CSB --username=test --challenge=0529c10bac22a3fa --nt-response=4b1e21679b85263858da26874073491971a58f8bfc024456 Exec-Program output: NT_KEY: 2066656E05C22F3A995AD9ECFED913D6 Exec-Program-Wait: plaintext: NT_KEY: 2066656E05C22F3A995AD9ECFED913D6 Exec-Program: returned: 0 rlm_mschap: adding MS-CHAPv2 MPPE keys modcall[authenticate]: module "mschap" returns ok for request 6 modcall: group Auth-Type returns ok for request 6 MSCHAP Success modcall[authenticate]: module "eap" returns handled for request 6 modcall: group authenticate returns handled for request 6 PEAP: Got tunneled Access-Challenge modcall[authenticate]: module "eap" returns handled for request 6 modcall: group authenticate returns handled for request 6 Sending Access-Challenge of id 138 to 192.168.16.1:1645 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User EAP-Message = 0x0107004a1900170301003f58b6111cc333922058a5d79f63641e19ae7154e3504573da98346c88f080fe8ee04ad4b50f3cdc52fd02e8909b9f8f9a439730b7cee4654c18135432e651e7 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x1f45be689bd5bd8a6d8ace2af886bb6c Finished request 6 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.16.1:1645, id=139, length=165 NAS-IP-Address = 192.168.16.1 NAS-Port = 50147 NAS-Port-Type = Ethernet User-Name = "CSB\\test" Called-Station-Id = "00-17-5A-1B-28-B3" Calling-Station-Id = "00-04-75-85-8F-61" Service-Type = Framed-User Framed-MTU = 1500 State = 0x1f45be689bd5bd8a6d8ace2af886bb6c EAP-Message = 0x0207001d19001703010012b8f868205426ef722e2433e5defa62455113 Message-Authenticator = 0x2e5a0be42b038b2404f5c93ea27d5387 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 7 modcall[authorize]: module "preprocess" returns ok for request 7 modcall[authorize]: module "chap" returns noop for request 7 rlm_realm: No '@' in User-Name = "CSB\test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 7 users: Matched entry DEFAULT at line 165 users: Matched entry DEFAULT at line 184 modcall[authorize]: module "files" returns ok for request 7 rlm_eap: EAP packet type response id 7 length 29 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 7 modcall[authorize]: module "mschap" returns noop for request 7 modcall: group authorize returns updated for request 7 rad_check_password: Found Auth-Type MS-CHAP rad_check_password: Found Auth-Type EAP Warning: Found 2 auth-types on request for user 'CSB\test' auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 7 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake eaptls_process returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: EAP type mschapv2 rlm_eap_peap: Tunneled data is valid. PEAP: Setting User-Name to CSB\test PEAP: Adding old state with a8 0f Processing the authorize section of radiusd.conf modcall: entering group authorize for request 7 modcall[authorize]: module "preprocess" returns ok for request 7 modcall[authorize]: module "chap" returns noop for request 7 rlm_realm: No '@' in User-Name = "CSB\test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 7 users: Matched entry DEFAULT at line 165 modcall[authorize]: module "files" returns ok for request 7 rlm_eap: EAP packet type response id 7 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 7 modcall[authorize]: module "mschap" returns noop for request 7 modcall: group authorize returns updated for request 7 rad_check_password: Found Auth-Type MS-CHAP rad_check_password: Found Auth-Type EAP Warning: Found 2 auth-types on request for user 'CSB\test' auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 7 rlm_eap: Request found, released from the list rlm_eap: EAP/mschapv2 rlm_eap: processing type mschapv2 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns ok for request 7 modcall: group authenticate returns ok for request 7 Trying to look up name of unknown client 127.0.0.1. Login OK: [CSB\\test/<no User-Password attribute>] (from client UNKNOWN-CLIENT port 0) PEAP: Tunneled authentication was successful. rlm_eap_peap: SUCCESS modcall[authenticate]: module "eap" returns handled for request 7 modcall: group authenticate returns handled for request 7 Sending Access-Challenge of id 139 to 192.168.16.1:1645 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User EAP-Message = 0x010800261900170301001b8d03a63c700234ed33060b7b6b9274d27b9e872a002e885ab9ebf3 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x5a28f8fd3d7fde4a88411d022625e022 Finished request 7 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.16.1:1645, id=140, length=174 NAS-IP-Address = 192.168.16.1 NAS-Port = 50147 NAS-Port-Type = Ethernet User-Name = "CSB\\test" Called-Station-Id = "00-17-5A-1B-28-B3" Calling-Station-Id = "00-04-75-85-8F-61" Service-Type = Framed-User Framed-MTU = 1500 State = 0x5a28f8fd3d7fde4a88411d022625e022 EAP-Message = 0x020800261900170301001b44c1c9880e33cd6e472ba624ff53ee4f53e1588d0da394c02c0522 Message-Authenticator = 0x50fd41edb7beeee318cfd915201602f4 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 8 modcall[authorize]: module "preprocess" returns ok for request 8 modcall[authorize]: module "chap" returns noop for request 8 rlm_realm: No '@' in User-Name = "CSB\test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 8 users: Matched entry DEFAULT at line 165 users: Matched entry DEFAULT at line 184 modcall[authorize]: module "files" returns ok for request 8 rlm_eap: EAP packet type response id 8 length 38 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 8 modcall[authorize]: module "mschap" returns noop for request 8 modcall: group authorize returns updated for request 8 rad_check_password: Found Auth-Type MS-CHAP rad_check_password: Found Auth-Type EAP Warning: Found 2 auth-types on request for user 'CSB\test' auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 8 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake eaptls_process returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Tunneled data is valid. rlm_eap_peap: Success rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns ok for request 8 modcall: group authenticate returns ok for request 8 Login OK: [CSB\\test/<no User-Password attribute>] (from client reseau16 port 50147 cli 00-04-75-85-8F-61) Sending Access-Accept of id 140 to 192.168.16.1:1645 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User MS-MPPE-Recv-Key = 0xf1a6b62d3814b8fc8f3ac5601a89ddacc1c47c4387e21b35fe33bdbffaf15486 MS-MPPE-Send-Key = 0x1ba3df6508e8c7f03112980ae8e1255bfec5c05ab397c927a9b56be7335714fd EAP-Message = 0x03080004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "CSB\\test" Finished request 8 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 132 with timestamp 45f0c882 Cleaning up request 1 ID 133 with timestamp 45f0c882 Cleaning up request 2 ID 134 with timestamp 45f0c882 Cleaning up request 3 ID 135 with timestamp 45f0c882 Cleaning up request 4 ID 136 with timestamp 45f0c882 Cleaning up request 5 ID 137 with timestamp 45f0c882 Cleaning up request 6 ID 138 with timestamp 45f0c882 Cleaning up request 7 ID 139 with timestamp 45f0c882 Cleaning up request 8 ID 140 with timestamp 45f0c882 Nothing to do. Sleeping until we see a request.

3 2

max-daily-session
by Pierluigi Di Lorenzo 08 Mar '07

08 Mar '07

Hi all, I am using Freeradius + Chillispot + Mysql in a hotel wifi and it's working very fine. I have set per user Max-Daily-Session with sql_counter and it works. Now they ask me another situation: the hotel has various workstations that everybody can use. I need to set a low Max-Daily-Session (1 hour) when a user log trough these workstation, and set Max-Daily-Session = 24 hours when user use it's own notepad. so: can I override per user Max-Daily-Session when request come from a certain CallingStationId? what I tried is to use query on sql_counter but it seems there is no variables with CallingStationId, something like: query = "SELECT (SUM(AcctSessionTime) + ((WORKSTATIONID = $CallingStationId) * 82800) FROM radacct WHERE UserName='%{%k}' AND AcctStartTime > FROM_UNIXTIME('%b')" Any idea? Thank's in advance. -- Pierluigi Di Lorenzo ePrometeus s.r.l

1 0

password in debug mode
by jerrrry＠voila.fr 08 Mar '07

08 Mar '07

Hi, is there a mean not te see passwords in freeradius debug mode (radiusd -X) ? thanks Thomas

2 1