March 2007 - Freeradius-Users - lists.freeradius.org

Re : RE : Re: freeradius problem : need help
by Eshun Benjamin 27 Mar '07

27 Mar '07

if radiusd -X works then check whether your pid was created successfully when you run radiusd; if some folders leading to it are missing create them. ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : elmalhi abdelghani <eabdelghani(a)yahoo.fr> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Lundi, 26 Mars 2007, 15h16mn 17s Objet : RE : Re: freeradius problem : need help hi , always no way ? any tips! thanks Goke Aruna <goksie(a)gmail.com> a écrit : satish patel wrote: > check radwatch is runing or not is runing then kill radwatch it is for > watching radiusd deamon for monitoring radius process > > */elmalhi abdelghani /* wrote: > > what means plaese this : > > There appears to be another RADIUS server running on the > authentication port 1812 > > and if I typ for example the command:' ps a ' i don't found radiusd ? > > regards. > > ------------------------------------------------------------------------ > DÃ©couvrez une nouvelle faÃ§on d'obtenir des rÃ©ponses Ã toutes vos > questions ! Profitez des connaissances, des opinions et des > expÃ©riences des internautes sur Yahoo! Questions/RÃ©ponses > .- > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > $ cat ~/satish/url.txt > > System administrator ( Data Center ) > > please visit this site > > http://linux.tulipit.com > > ------------------------------------------------------------------------ > Hereâ€™s a new way to find what you're looking for - Yahoo! Answers > > ------------------------------------------------------------------------ > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html mvts is using the port 1812, you can check previous post by abdul_zu on similar subject. Goksie - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Abdelghani ELMALHI Devesestr. 1 45897 Gelsenkirchen Deutschland Tel. 00 49 176 65 84 38 50 Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

3 3

freeradius for pam 1.3.15
by Rachmel, Nir (Nir) 27 Mar '07

27 Mar '07

Hi all! I am using the Radius-Pam module, on an embbeded ppc (windriver linux) system, and I have a question. I have noticed, that when configuring my box with a DNS server, then once a user attempts login, a call is attempted at the radius server and some kind of query is sent to the DNS server. Looking into the code revealed that there is a call to gethostbyname(), intended to resolve the ip of myself according to my hostname - or at least that is what I could figure out from the available code. Why is it done, and how bad would it be if I changed that call to something simpler that won't demand a connection to the DNS server? Thanks in advance, Nir Rachmel.

2 1

Questions about Freeradius counter
by guest01 27 Mar '07

27 Mar '07

Hi guys! I have two minor problems with the radius counter. I am using the radius counter for counting the "sessiontimeout", which works quite good. counter sessiontimeout { filename = ${logdir}/db.sessiontimeout key = User-Name count-attribute = Acct-Session-Time reset = never counter-name = Daily-Session-Time check-name = Session-Timeout cache-size = 5000 } If the user reaches the saved allowed max session time, the connection gets disconnected and the user is not allowed to connect again until the time value has been reseted. Works great ... I also want to achieve the same behavior for another counter, the Acct-Input-Octets, but it doesn't really work. I can define a maximum value for "Input Octets" and if the user exceeds this value, he cannot connect again. Unfortunately, the connection doesn't get disconnected after the user reached his limit, do I have to configure something additional? It works for the Sessiontimeout, why doesn't it work for the Input-Octets? Any ideas? Is it possible? counter maxinput { filename = ${logdir}/db.maxinput key = User-Name count-attribute = Acct-Input-Octets reset = never counter-name = Input-Octets check-name = ChilliSpot-Max-Input-Octets cache-size = 5000 } The second problem is, that I have Acct-Input-Octets AND Acct-Output-Octets in my radius dialog and I want to use ONE counter, which should contain the sum of Acct-Input-Octets+Acct-Output-Octets, I already tried to use count-attribute = (Acct-Input-Octets+Acct-Output-Octets), but it didn't work ... Any suggestions for that problem? Any ideas? I appreciate every kind of help! Thanks guys! best regards Peter Gastinger

2 2

Double entries in Radacct - FreeRadius + MT
by Matthew Neumark 27 Mar '07

27 Mar '07

Hello, I have a MikroTik router that is passing accounting data to the freeradius database. I look in radacct and every entry is has duplicates with the exact same information. Does anyone know if this is the MikroTik causing this or freeradius? How do I fix this? Thanks, Matt Neumark

3 2

accounts disappears!
by Marwan Sultan 26 Mar '07

26 Mar '07

hello Freeradius, well, Its a strange problem, However i'm on FreeBSD 6.1R, Freeradius, Chillispot, mysql and i use myprepaid php for account interface. This system is up and running since september 2006, last week, we start to see a strange problem some account are disappearing from the system!! few customers are complaining that they cannot login anymore, when we check.. we donot find an account for this user anymore...it happend for like 4 or 5 accounts now!! Any resnable reason for this?? Marwan Sultan System Administrator _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

4 4

bandwidth and volume limit
by Mathieu Lemaitre 26 Mar '07

26 Mar '07

HI all, I'm running freeradius 1.0.2 on a debian stable. For new clients, I need to implement 2 functions: * a bandwidth limit on a per-user basis. I mean, I need to be able to set, for a user, a value for his upstream and downstream bw, which is sent by the radius as a reply attribute. Are they predefined attributes to do this? * a volume limit: I'd like to be able to set a maximum amount of data monthly downloadable for each user. I tried with rlm_slqcounter, changing the sql request to check AcctInputOctet instead of SessionTime, but the problem is that radius always reply an attribute called MaxSessionTime (or sthg like that), containing the remaining data volume for the user... is there as way to change the name of the attribute answered by freeradius?? Many thaks, Mathieu

6 5

Problem with compile
by Rob Wright 26 Mar '07

26 Mar '07

Greetings, I'm trying to setup Freeradius 1.1.5 and I'm having a problem during 'make'. I'm using Debian Etch, with Perl 5.8.8. I get the archive opened up and configure with the following: ./configure --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --prefix=/usr --with-radacctdir=/var/log/radacct --with-raddbdir=/etc/raddb The configure runs fine, no problems. I run 'make' and it errors out with the following output included below my signature. I'm sure I'm missing something, but I've been staring at it all day and can't come up with anything. Suggestions? Thanks, Rob Wright poncacity.net suserob(a)poncacity.net /home/rwright/Downloads/freeradius-1.1.5/libtool --mode=link gcc -release 1.1.5 \ -module -export-dynamic -o rlm_perl.la \ -rpath /usr/lib rlm_perl.lo rlm_perl.c /home/rwright/Downloads/freeradius-1.1.5/src/lib/lib radius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/home/rwright/Downloads/freeradius-1.1.5/src/lib/.li bs /home/rwright/Downloads/freeradius-1.1.5/src/lib/.libs/libradius.so -L/usr/local/lib -L/usr/lib/ perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl -1.1.5.so -o .libs/rlm_perl-1.1.5.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5' make: *** [all] Error 2

2 1

Re: Accounting is not working. Please help.
by alex 26 Mar '07

26 Mar '07

I think everything is ok. rad_recv: Access-Request packet from host 192.168.1.1:6001, id=91, length=124 User-Name = "00:13:02:a7:57:9f" User-Password = "testing123" NAS-IP-Address = 192.168.1.1 Called-Station-Id = "00-20-a6-6b-72-aa:PIM DOCK A" Calling-Station-Id = "00-13-02-a7-57-9f" NAS-Port = 9 NAS-Port-Type = Wireless-802.11 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 14 modcall[authorize]: module "preprocess" returns ok for request 14 modcall[authorize]: module "chap" returns noop for request 14 modcall[authorize]: module "mschap" returns noop for request 14 rlm_realm: No '@' in User-Name = "00:13:02:a7:57:9f", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 14 radius_xlat: '00:13:02:a7:57:9f' rlm_sql (sql): sql_set_user escaped user --> '00:13:02:a7:57:9f' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '00:13:02:a7:57:9f' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 0 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '00:13:02:a7:57:9f' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '00:13:02:a7:57:9f' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '00:13:02:a7:57:9f' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 14 modcall: leaving group authorize (returns ok) for request 14 auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [00:13:02:a7:57:9f/testing123] (from client other port 9 cli 00-13-02-a7-57-9f) Sending Access-Accept of id 91 to 192.168.1.1 port 6001 Finished request 14 Going to the next request > -------Original Message------- > From: Kevin Bonner <keb(a)pa.net> > Subject: Re: Accounting is not working. Please help. > Sent: 27 Mar '07 02:08 > > On Monday 26 March 2007 16:30:35 alex wrote: > > Hey guys, i just follow this guide. > > http://www.frontios.com/freeradius.html > > and everything looks ok, the users are already working and login without > > problem. But the accounting is not working, the mysql tables are empty, i > > checked when i user access and everything looks ok, and the radacct still > > empty. > > > > In my radiusd.conf i have > > accounting { > > detail > > radutmp > > sql > > } > > Other guy is checking in the AP, but i wanna be sure i have the correct > > values in the server. > > > > Any comment is appreciated. > > Alex > > Did you run in debug mode (-X)? If so, did the output show anything strange > when processing an accounting packet? Is the NAS configured to send > accounting records to the radius server? > > -Kevin > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Accounting is not working. Please help.
by alex 26 Mar '07

26 Mar '07

Hey guys, i just follow this guide. http://www.frontios.com/freeradius.html and everything looks ok, the users are already working and login without problem. But the accounting is not working, the mysql tables are empty, i checked when i user access and everything looks ok, and the radacct still empty. In my radiusd.conf i have accounting { detail radutmp sql } Other guy is checking in the AP, but i wanna be sure i have the correct values in the server. Any comment is appreciated. Alex

2 1

Redundant SQL servers accounting problem, FreeRadius 1.1.4
by Alexander V. Klepikov 26 Mar '07

26 Mar '07

Hello! I set up redundant SQL PostgeSQL servers configuration: modules{ ... sql sql2 { server = "gw-core.up.ua" num_sql_socks = 3 ... } sql sql1 { server = "sql.up.ua" num_sql_socks = 3 ... } } authorize { ... redundant { sql2 sql1 } } ... accounting { ... redundant { sql2 sql1 } } If sql2 is up when I run FreeRadius, everything works fine. If sql2 is down when I start FreeRadius, everything works fine too and when sql2 comes up, Freeradius starts to use it. But when sql2 was up and then comes down (and FreeRadius is running), FreeRadius exits when it processes accounting query with message in syslog kernel: pid 4516 (radiusd), uid 1002: exited on signal 6 I started it in debug mode: #/usr/local/sbin/radiusd -X ... Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 ... modcall: entering group redundant for request 0 radius_xlat: 'klepikov_av' rlm_sql (sql2): sql_set_user escaped user --> 'klepikov_av' radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'klepikov_av' ??ORDER BY id' rlm_sql (sql2): Reserving sql socket id: 2 rlm_sql_postgresql: Status: PGRES_FATAL_ERROR rlm_sql_postgresql: affected rows = rlm_sql_postgresql: Postgresql check_error: PGRES_FATAL_ERROR, returning SQL_DOW N rlm_sql (sql2): Attempting to connect rlm_sql_postgresql #2 rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radius@gw-core. up.ua:radius_db rlm_sql_postgresql: Postgresql error 'could not connect to server: Connection re fused ?Is the server running on host gw-core.up.ua and accepting ?TCP/IP connect ions on port 5432? ' rlm_sql (sql2): Failed to connect DB handle #2 rlm_sql (sql2): reconnect failed, database down? rlm_sql_getvpdata: database query error rlm_sql (sql2): SQL query error; rejecting user rlm_sql (sql2): Released sql socket id: 2 modcall[authorize]: module "sql2" returns fail for request 0 rlm_sql (sql1): sql_set_user escaped user --> 'klepikov_av' radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'klepikov_av' ??ORDER BY id' rlm_sql (sql1): Reserving sql socket id: 1 rlm_sql_postgresql: Status: PGRES_TUPLES_OK ... rlm_sql (sql1): Released sql socket id: 1 modcall[authorize]: module "sql1" returns ok for request 0 modcall: leaving group redundant (returns ok) for request 0 modcall: leaving group authorize (returns ok) for request 0 ... Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 ... modcall: entering group redundant for request 1 radius_xlat: 'klepikov_av' rlm_sql (sql2): sql_set_user escaped user --> 'klepikov_av' radius_xlat: 'INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Rea lm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ??Connec tInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, Fra medIPAddress, AcctStartDelay) ??values('45FA990A460300', 'e55d351c2f2bdb96', 'kl epikov_av', 'up.ua', '10.0.0.1', ??'1', 'Async', ('2007-03-16 15:18:02'::timesta mp - '0'::interval), 'RADIUS', '', ??'', '10.1.1.3', 'Framed-User', 'PPP', ??NUL LIF('10.0.1.15', '')::inet, '0')' rlm_sql (sql2): Reserving sql socket id: 0 rlm_sql_postgresql: Status: PGRES_FATAL_ERROR rlm_sql_postgresql: affected rows = rlm_sql_postgresql: Postgresql check_error: PGRES_FATAL_ERROR, returning SQL_DOW N rlm_sql (sql2): Attempting to connect rlm_sql_postgresql #0 rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radius@gw-core. up.ua:radius_db rlm_sql_postgresql: Postgresql error 'could not connect to server: Connection re fused ?Is the server running on host gw-core.up.ua and accepting ?TCP/IP connect ions on port 5432? ' rlm_sql (sql2): Failed to connect DB handle #0 rlm_sql (sql2): reconnect failed, database down? rlm_sql (sql2): Couldn't insert SQL accounting START record - (null) radius_xlat: 'UPDATE radacct ??SET AcctStartTime = ('2007-03-16 15:18:02'::time stamp - '0'::interval), AcctStartDelay = '0', ??ConnectInfo_start = '' WHERE Acc tSessionId = '45FA990A460300' AND UserName = 'klepikov_av' ??AND NASIPAddress = '10.0.0.1' AND AcctStopTime IS NULL' rlm_sql_postgresql: PostgreSQL Query failed Error: no connection to the server radiusd in free(): error: chunk is already free Abort It looks like accounting module cannot properly make a connection to SQL server, but authorize module can. I found that with num_sql_socks <= 2 FreeRadius works perfect, I made several tests stopping and starting my SQL servers, everything works as it is described in manuals. It seemes to me that problem is somewhere in rlm_sql module, but I am not a programmer, so I can't just find it and write a patch. I use FreeBSD 6.2, FreeRadius 1.1.4, PostgreSQL 7.3.15 (to be exact, PGCluster 1.0.11), the same problem was with PostgreSQL 8.2.3 (to be exact, PGCluster 1.7.0rc5) To reproduce this problem, set up FreeRadius as mentioned above, start databases, start FreeRadius and then stop first database listed in redundant group. With best regards, Alexander V. Klepikov. E-mail: klepikov_a(a)up.ua PS Sorry for my bad english

3 16