May 2007 - Freeradius-Users - lists.freeradius.org

RE: NAS ignoring Access-Accept
by Hugh Messenger 21 May '07

21 May '07

Wolfgang Rosenauer <wolfgang(a)rosenauer.org> said: > I ran radiusd -X and saw that freeradius sent an Access-Accept reply to > the NAS' ip address and source port. Could you post the entire -X log for an example request? > Thanks, > Wolfgang -- hugh

3 3

Should I use FR 2.0.0 or 1.1.6?
by John Horne 21 May '07

21 May '07

Hi, I expect the freeradius developers will hate me for asking this, but is there an estimate of when the final version of FR 2.0.0 will be released? I have four servers to upgrade - 3 currently run FR 1.0.1 and one is already upgraded to 1.1.6. I am at an academic site, and the students are currently taking their exams. As such, within the next few weeks most of the staff/students will have left, and I can start to get on with the upgrades and other things. This gives me a window of a couple of months at least to do the upgrades. The question is, do I install FR 2.0.0 now (even as a pre-release) so that upgrading to the final version should be relatively trivial, or do I stay with 1.1.6 knowing that at some future point, perhaps soon after the start of next term, I have to upgrade again to 2.0.0? I notice that upgrading from 1.x to 2.x requires going through the config files, and will obviously require some testing, so upgrading to 2.x may not be trivial. That is, I can't do it in a short time, but I can upgrade from 1.0.1 to 1.1.6 quickly because I already have one server done. I suppose another possibility could be to run 3 servers at 1.1.6 and one at 2.0.0 :-) Hmm, sounds interesting... I should add that all 4 servers are 'live', but I have kept the 1.1.6 server mainly out of use for the past few months. As such we can run our service on 3 servers. Anyone any comments or suggestions? Thanks, John. -- --------------------------------------------------------------- John Horne, University of Plymouth, UK Tel: +44 (0)1752 233914 E-mail: John.Horne(a)plymouth.ac.uk Fax: +44 (0)1752 233839

3 2

DialupAdmin Question.
by Joseph Sullivan 21 May '07

21 May '07

Hello Group, I am trying to use Dialup Admin on Free Radius 1.1.6. I have the admin.conf file all setup, it will add, remove users from the MySQL db, but it will not do the radius check by clicking on Check Server. It outputs this: Monday, 21 May 2007, 09:10:14 MDT Server: 127.0.0.1:1812 (test user cowpuppy) Then It just hangs there. I have tried everything in the admin.conf file, setting the host to localhost, the hostname, the public ip address, and it still just hangs there, and it never hits the actual radius server or completes the check. Also, I can login with the user cowpuppy just fine but dialup admin never shows this when I look at the stats for cowpuppy. When I run this command: radtest cowpuppy testpass localhost 0 testing123 It accepts me, and it shows that in the radius.log, but dialup admin doesn't recognize that. I think it is a logging issue. It looks like it needs to log to the SQL server... I am still working on that... As always, thanks for any help you can offer. Cheers!! Joseph Sullivan

1 0

Problem in runnning radius server
by prajakta choudhari 21 May '07

21 May '07

Hi all: I have just started to configure the Radius Server. I have downloaded and installed the latest freeradius and openssl software. I am trying to configure EAP-TLS authentication and currently using the default certificates in raddb/certs directory. eap.conf is as follows: eap { default_eap_type = tls timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no md5 { } leap { } gtc { auth_type = PAP } tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem certificate_file = ${raddbdir}/certs/cert-srv.pem CA_file = ${raddbdir}/certs/demoCA/cacert.pem dh_file = ${raddbdir}/certs/dh random_file = ${raddbdir}/certs/random fragment_size = 1024 include_length = yes } Whenever i try to run the radiusd i get the following error: Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/radius/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc rlm_eap: Failed to link EAP-Type/tls: file not found radiusd.conf[10]: eap: Module instantiation failed. radiusd.conf[1959] Unknown module "eap". radiusd.conf[1906] Failed to parse authenticate section. I just cannot figure out the problem. I am new radius server user. Thank You Prajakta Choudhari Office firewalls, cyber cafes, college labs, don't allow you to download CHAT? Click here: http://in.messenger.yahoo.com/webmessengerpromo.php

3 3

Wiki
by Doug Hardie 21 May '07

21 May '07

I am having problems finding the way to get from the main Wiki page to the configuration information. The pages are there. When I search for something they are found. I just can't figure out how you are supposed to link to them from the main page. For example the modules page does eventually link back to the main page, but I can't figure out how to go from the main page to it.

3 4

Re: Freeradius-Users Digest, Vol 25, Issue 99
by t.drollinger＠i-motion.de 21 May '07

21 May '07

Ich bin am 21. Mai nicht im Haus und kann Ihre Nachricht erst am Dienstag den 22. Mai bearbeiten. In dringenden Fällen wenden Sie sich bitte an Herrn René Böhm (E-Mail: r.boehm(a)i-motion.de) Mit freundlichen Grüßen Tobias Drollinger

1 0

Very critical: Memory leak in freeradius-1.1.6
by nikitha george 21 May '07

21 May '07

Hi, I am seeing a very serious memory leak issue with freeradius-1.1.6. The memory usage of freeradius gone from 3386Byte to 64MB when i was trying to connect 16 clients with roaming interval of 1 second. More Access-Requests are coming and we keep saving those requests until cleanup_delay. After my initial investigation in the souce code, we keep cleaning the requests only if the select() fails, which means no more request to handle. But in my case the clients are keep sending the request i think the cached request_list is not cleared properly or misses out some requests or something happens i guess. I may be wrong too, so please let me know what could be the root cause. Awaiting for any earliest reply. Thanks, Nikitha

5 10

how to create temporary user ?
by Trio Yulistianto 20 May '07

20 May '07

dear all...im using freeradius-1.1.6 and mysql database engine i have a problem.. i want to create a user that only can login in specific dates.. for example user A can only login today (max 12.00pm this night) user B can only login today and tomorrow (max 12.00pm tomorrow night) user C can only login between 2007-05-20 to 2007-05-25 what attribute i should use ? thanks

2 1

Performance with Freeradius-1.1.4
by nikitha george 20 May '07

20 May '07

Hi All, I am using freeradius-1.1.4 with PEAP-MSCHAPV2. Each session starting from Access-Request till Access-Accept it takes more than 250ms to complete. Is it the normal performance of freeradius-1.1.4 or anything suspicious in this regard? When i try to send many Request simultaneously then there is no response from the server for the latest requests as the server is busy processing first request. Only the first request gets response after 250ms. When i tried with some other RADIUS Server i could connect each mobile unit in some 150ms. Please let me know if anybody faced this problem with performance. Thanks, Nikitha

4 7

db performance
by Angelos Karageorgiou 20 May '07

20 May '07

Hello gentle people Has anyone had the time to do a DB performance comparison for heavily loaded freeradius servers ? Thank you

7 19