May 2007 - Freeradius-Users - lists.freeradius.org

Re: rlm_sqlippool in freeradius 1.1.6
by Hugh Messenger 08 May '07

08 May '07

I said: > Is the rlm_sqlippool in 1.1.6 known to work with MySQL 5? > > Actually, I'm fairly sure it's not even getting as far as talking to the > db. No matter what I try, it just tells me 'missing pool_name'. Turns out I borked something else in the users file which was breaking the Pool-Name statement in sqlippool mode. The next problem was getting the sqlippool queries to work. After more head / desk pounding, just after I finally got them working, I found this post with pretty much the same changes for MySQL in it: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg30520.… So ... I'm now happily autenticating against my Windows AD (using PAM and winbind), assigning PPPOE rate limit information via per user radreply table entries, assigning IP's from sqlippools based on 'Called-Station-ID', and accounting in the database. I am now officially a Happy Camper. Thanks to everyone who has answered my questions over the last week or so. -- hugh

2 1

Re: MySQL and postauth_query
by Hugh Messenger 08 May '07

08 May '07

George Embrey <george(a)vmail.net.au> says: > Queries to Windows MySQL servers from Linux Systems often fail unless > the lower_case_table_names parameter is set to 0 in the my.ini file in > the MySQL directory. I'm familiar with that issue, and I checked all the table case-ness. The problem seems to be with providing an empty string ('') as the value for an auto-incrementing integer primary index. The problem with setting lower_case_table_names to 0 is that I could end up blowing away my MyISAM tables elsewhere in that server, as per the warning the service control gives, if I moof a query on those and use the "wrong" case: "You have forced lower_case_table_names to 0 through a command-line option, even though your file system 'E:\MySQL\Data\' is case insensitive. This means that you can corrupt a MyISAM table by accessing it with different cases. You should consider changing lower_case_table_names to 1 or 2" It's working fine with my modifie query, so I'm just going to put this down to "a 5.x thing" and live with my change. Compared to the wholesale hack and slash job I've had to do on the sqlippool queries to get them to work, it's no Big Whoop, LOL! But thanks for the suggestion, I appreciate your time. -- hugh

3 2

MySQL and postauth_query
by Hugh Messenger 07 May '07

07 May '07

Dear freeradius Alpha Geeks, Am I loosing my mind or is there a bug in the postauth_query in the MySQL version of sql.conf? I'm running freeradius 1.1.6 on RHEL4, and MySQL 5.0.37 on W2k. Don't ask. Out-of-box, this postauth query ... postauth_query = "INSERT into ${postauth_table} (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" ... fails with: Incorrect integer value: '' for column 'id' at row 1 If I change this to remove the (auto incrementing) 'id' column ... postauth_query = "INSERT into ${postauth_table} (user, pass, reply, date) values ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" ... it works. -- hugh

3 2

rlm_sqlippool in freeradius 1.1.6
by Hugh Messenger 07 May '07

07 May '07

Is the rlm_sqlippool in 1.1.6 known to work with MySQL 5? Actually, I'm fairly sure it's not even getting as far as talking to the db. No matter what I try, it just tells me 'missing pool_name'. Which would seem to indicate that the Pool-Name checklist attribute isn't getting set. But If I then turn off sqlippool and switch to using the regular ippool, without changing the DEFAULT's in the users file that define the per-NAS Pool-Name attributes, that works. Which seems to imply that my Pool-Name attrribute is getting set, as ippool has no problems, but for some reason sqlippool isn't grokking it. I would really like to run sqlippool, as it makes it (almost) a zillion times easier for me to keep my pools provisioned properly, and do other neato nifty peachy keen management stuff on the back end. But I've banged my head on this one about as hard as I can. If anyone has any ideas, could I prevail upon you to Cc me direct on your reply? I do the digest thing, but I'm a little pressed for time on this one. TIA for any help, -- hugh

1 0

Accept users by NAS-Identifier
by AS Alex 07 May '07

07 May '07

How i can accept users by NAS-Identifier and not with NAS-AP-Address ?? How i can modify clients.conf (or other file) for use only nas identifier?? Thank

1 0

MySQL Authentication
by Joseph Sullivan 07 May '07

07 May '07

Hello Group, I am running OSX 10.4.9 Server, with Free Radius 1.1.6 When I try loading radiusd -X I get a mysql link error. rlm_sql (sql): Could not link driver rlm_sql_mysql: dlopen(/usr/local/lib/rlm_sql_mysql-1.1.6.so, 9): no suitable image found. Did find: ?/usr/local/lib/rlm_sql_mysql-1.1.6.so: no matching architecture in universal wrapper ?/usr/local/lib/rlm_sql_mysql-1.1.6.so: no matching architecture in universal wrapper rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. >From what I read on the FAQ this is a library error on my system and has nothing to do with Freeradius. But my error differs slightly from what the FAQ says I could be seeing. I did run a ./configure | grep mysql_config and it came out saying MySQL = yes. Can someone help me resolve this? I greatly appreciate it. Joseph Sullivan

2 2

EAP-TLS authentication
by deepak kumar 07 May '07

07 May '07

Hi, I am using freeradius1.1 on linux suse 10.1 and chillispot for captive portal. I have implemented EAP -TLS using client and server side certificate and it worked well. but even after client authentication from certificate. the router(chillispot) prompts for a username and password and then does authentication using UAM. Please tell me why this is asking for login name password after client certificate validation. is something needs to be changed in chilli.conf , or any other radius conf file. thanks in advance dee

2 13

Re: FR with MySQL - Stored Procedures
by Gunther 07 May '07

07 May '07

I forgot to mention that the problem I reported previously is actually not 'Stored Procedure' related, but related to the MySQL client_flag 'CLIENT_MULTI_STATEMENTS'. This flag is required to support Stored Procedures and is causing the problem (at least with my operating system (CentOS 4.4)). So no need to create any stored procedures ... just compile FR with CLIENT_MULTI_STATEMENTS in the rlm_sql/drivers/rlm_sql_mysql/sql_mysql.c module. Looking forward using Stored Procedures (no more 253 byte limit for my SQL statements!!!). Gunther

2 2

sqlcounter monthly counter impementation problem
by Cory Robson 07 May '07

07 May '07

I have the following configuration in my radius.conf file. The counter does function as such and if the user has utilized the allotted time it will not allow them to connect. However I'm looking to see how to also apply it to the session limit. (IE adjust the session time. If user has a max session defined as 4 hrs but only has 2 hrs left of the monthly limit then adjust this to have them dropped automatically once this has been reached) sqlcounter monthlycounter { counter-name = Monthly-Session-Time check-name = Max-Monthly-Session sqlmod-inst = sql key = User-Name reset = monthly # This query properly handles calls that span from the # previous reset period into the current period but # involves more work for the SQL server than those # below # The same notes above about the differences between mysql # versus postgres queries apply here. query = "SELECT SUM(AcctSessionTime - \ GREATEST((%b - UNIX_TIMESTAMP(AcctStartTime)), 0)) \ FROM radacct WHERE UserName='%{%k}' AND \ UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '%b'" How would I implement this to enforce the session time limits? Cory

3 5

dyndns.org domain in Clients.conf
by black devils 06 May '07

06 May '07

Hi, I have created one hotspot with a openwrt router and chillispot. I use a remote server radius (freeradius) for authenticate users of hotspot. I have inserted in clients.conf Ip of the router: clients 82.256.52.11 { secret = testing123 shortname = test } With this configuration all working fine but unfortunately router has a Dynamic Ip therefore a can't use its Ip in clients.conf Thus i try to insert a dyndns domain of the router in clients.conf clients router.dyndns.org { secret = testing123 shortname = test } but with my displeasure freeradius doesn't recognize client. Same suggestions?? Thanks

4 3