July 2007 - Freeradius-Users - lists.freeradius.org

RADIUS & PEAP
by Adrienne Rau 03 Jul '07

03 Jul '07

I am configuring a wireless network with EAP Authentication. I can connect successfully with the following line in my users file. testuser User-Password == "testing" I would like to be able to authenticate with ANY password. I tried using the "!=" operand, but that causes an MS-CHAP incorrect response error. Is there any way to make EAP authenticate with any password. If not, how can I have it authenticate against the /etc/passwd and /etc/shadow files? Thank you for your help, Adrienne Rau

2 1

Requesting CVS checkin
by Roy Walker 03 Jul '07

03 Jul '07

Back in April the following post was sent out and it is still not in CVS as of July 2nd. Is it possible to get this checked in? http://readlist.com/lists/lists.freeradius.org/freeradius-users/2/11069. html Here is a patch someone posted: http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg346 52.html Thanks, Roy

1 0

misconfigured adsl modems hammering my freeradius
by Tom De Wispelaere 03 Jul '07

03 Jul '07

Hello, we are using freeradius (with mysql backend) in an isp environment for authentication and accounting of adsl modems. Some of these modems are misconfigured with a wrong password and try to authenticate every 5 secs or so, so i was wondering if there is a simple way to tell radius not to do a lookup every 5 secs for these particular modems... As the number of modems is growing, it seems that these misconfigured modems are putting more and more strain on the radius..... Any advice greatly appreciated, Tom

3 2

RE:Freeradius + LDAP + EAP-TTLS with PAP cannot login
by Arjuna Scagnetto 03 Jul '07

03 Jul '07

I've take a look at your radius.conf. I can only say that i have a Radius+LDAP+EAP-ttls (pap) configuratio working in authorize section ldap is uncommnet in authenticate section Auth-Type LDAP { ldap } is uncommented, i have no ldap_1x modules enabled. this way it works with crypt (md5) hash password. Bye

2 1

R: freeradius-1.1.6 - mysql failover issue - bus error -
by Francesco Cristofori 03 Jul '07

03 Jul '07

Hi all, further investigations show that it's a name resolution problem (if I put IP addresses in mysql1.conf and mysql2.conf everything works fine). So it doesn't seem to be a FR problem. Regards, Francesco Cristofori. > -----Messaggio originale----- > Da: > freeradius-users-bounces+f.cristofori=satcom.it(a)lists.freeradius.org > [mailto:freeradius-users-bounces+f.cristofori=satcom.it@lists. > freeradius > .org]Per conto di Francesco Cristofori > Inviato: martedì 3 luglio 2007 9.54 > A: freeradius-users(a)lists.freeradius.org > Oggetto: freeradius-1.1.6 - mysql failover issue - bus error - > > > Hi all, > I'm setting up module fail-over for mysql backend following > the guide from the wiki, but something goes wrong. > I included two sql.conf (mysql1.conf and mysql2.conf) in the > "modules" section and radiusd -X reports the two files are > included, but I only see the parameters from the first file > get loaded and everything stops with "bus error" when trying > to connect to the server. > > I checked name resolution, mysql user/password, network > reachability and everything it's ok. > I also set a tcpdump session on mysql1 but no packets for > mysql are coming in. > Then I straced radiusd execution and I noticed it fails after > reading /etc/hosts (?!?). > > Here's the relevant output from radiusd -X: > > Module: Loaded SQL > sql: driver = "rlm_sql_mysql" > sql: server = "mysql1.satcom.it" > sql: port = "3306" > sql: login = "radius" > sql: password = "radius" > sql: radius_db = "radius" > sql: nas_table = "nas" > sql: sqltrace = no > sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" > sql: readclients = no > sql: deletestalesessions = yes > sql: num_sql_socks = 100 > sql: sql_user_name = "%{User-Name}" > sql: default_user_profile = "" > sql: query_on_not_found = no > sql: authorize_check_query = "SELECT > id,UserName,Attribute,Value,op FROM radcheck WHERE Username = > '%{SQL-User-Name}' ORDER BY id" > sql: authorize_reply_query = "SELECT > id,UserName,Attribute,Value,op FROM radreply WHERE Username = > '%{SQL-User-Name}' ORDER BY id" > sql: authorize_group_check_query = "SELECT > radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribu > te,radgroupcheck.Value,radgroupcheck.op FROM > radgroupcheck,usergroup WHERE usergroup.Username = > '%{SQL-User-Name}' AND usergroup.GroupName = > radgroupcheck.GroupName ORDER BY radgroupcheck.id" > sql: authorize_group_reply_query = "SELECT > radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribu > te,radgroupreply.Value,radgroupreply.op FROM > radgroupreply,usergroup WHERE usergroup.Username = > '%{SQL-User-Name}' AND usergroup.GroupName = > radgroupreply.GroupName ORDER BY radgroupreply.id" > sql: accounting_onoff_query = "UPDATE radacct SET > AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - > unix_timestamp(AcctStartTime), > AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = > '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND > AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND > AcctStartTime <= '%S'" > sql: accounting_update_query = "UPDATE radacct ? SET > FramedIPAddress = '%{Framed-IP-Address}', ? AcctSessionTime = > '%{Acct-Session-Time}', ? AcctInputOctets = > '%{Acct-Input-Octets}', ? AcctOutputOctets = > '%{Acct-Output-Octets}' ? WHERE AcctSessionId = > '%{Acct-Session-Id}' ? AND UserName = '%{SQL-User-Name}' ? > AND NASIPAddress= '%{NAS-IP-Address}'" > sql: accounting_update_query_alt = "INSERT into radacct > (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, > NASPortId, NASPortType, AcctStartTime, AcctSessionTime, > AcctAuthentic, ConnectInfo_start, AcctInputOctets, > AcctOutputOctets, CalledStationId, CallingStationId, > ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) > values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', > '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', > '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL > (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), > '%{Acct-Session-Time}', '%{Acct-Authentic}', '', > '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', > '%{Called-Station-Id}', '%{Calling-Station-Id}', > '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" > sql: accounting_start_query = "INSERT into radacct > (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, > NASPortId, NASPortType, AcctStartTime, AcctStopTime, > AcctSessionTime, AcctAuthentic, ConnectInfo_start, > ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, > CalledStationId, CallingStationId, AcctTerminateCause, > ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, > AcctStopDelay) values('%{Acct-Session-Id}', > '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', > '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', > '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', > '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', > '%{Service-Type}', '%{Framed-Protocol}', > '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" > sql: accounting_start_query_alt = "UPDATE radacct SET > AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', > ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = > '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND > NASIPAddress = '%{NAS-IP-Address}'" > sql: accounting_stop_query = "UPDATE radacct SET > AcctStopTime = '%S', AcctSessionTime = > '%{Acct-Session-Time}', AcctInputOctets = > '%{Acct-Input-Octets}', AcctOutputOctets = > '%{Acct-Output-Octets}', AcctTerminateCause = > '%{Acct-Terminate-Cause}', AcctStopDelay = > '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' > WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = > '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" > sql: accounting_stop_query_alt = "INSERT into radacct > (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, > NASPortId, NASPortType, AcctStartTime, AcctStopTime, > AcctSessionTime, AcctAuthentic, ConnectInfo_start, > ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, > CalledStationId, CallingStationId, AcctTerminateCause, > ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, > AcctStopDelay) values('%{Acct-Session-Id}', > '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', > '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', > DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + > %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', > '%{Acct-Authentic}', '', '%{Connect-Info}', > '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', > '%{Called-Station-Id}', '%{Calling-Station-Id}', > '%{Acct-Terminate-Cause}', '%{Service-Type}', > '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', > '%{Acct-Delay-Time}')" > sql: group_membership_query = "SELECT GroupName FROM > usergroup WHERE UserName='%{SQL-User-Name}'" > sql: connect_failure_retry_delay = 60 > sql: simul_count_query = "" > sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, > UserName, NASIPAddress, NASPortId, FramedIPAddress, > CallingStationId, FramedProtocol FROM radacct WHERE > UserName='%{SQL-User-Name}' AND AcctStopTime = 0" > sql: postauth_query = "INSERT into radpostauth (id, user, > pass, reply, date) values ('', '%{User-Name}', > '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" > sql: safe-characters = > "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01234567 > 89.-_: /" > rlm_sql (mysql1): Driver rlm_sql_mysql (module rlm_sql_mysql) > loaded and linked > rlm_sql (mysql1): Attempting to connect to > radius@mysql1.satcom.it:3306/radius > rlm_sql (mysql1): starting 0 > rlm_sql (mysql1): Attempting to connect rlm_sql_mysql #0 > rlm_sql_mysql: Starting connect to MySQL server for #0 > Bus error > > > Here's the relevant output from strace radiusd -X : > > write(1, "rlm_sql (mysql1): starting 0\n", 29rlm_sql > (mysql1): starting 0 > ) = 29 > time(NULL) = 1183449009 > time(NULL) = 1183449009 > write(1, "rlm_sql (mysql1): Attempting to "..., 57rlm_sql > (mysql1): Attempting to connect rlm_sql_mysql #0 > ) = 57 > time(NULL) = 1183449009 > write(1, "rlm_sql_mysql: Starting connect "..., > 55rlm_sql_mysql: Starting connect to MySQL server for #0 > ) = 55 > open("/etc/services", O_RDONLY) = 5 > fcntl64(5, F_GETFD) = 0 > fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 > fstat64(5, {st_mode=S_IFREG|0644, st_size=18274, ...}) = 0 > mmap(NULL, 8192, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 > read(5, "# Network services, Internet sty"..., 8192) = 8192 > read(5, "otus Note\nlotusnote\t1352/udp\tlot"..., 8192) = 8192 > close(5) = 0 > munmap(0xf7a6a000, 8192) = 0 > rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 0xf7b188f8, > 4294967295) = 0 > stat64("/etc/mysql/my.cnf", {st_mode=S_IFREG|0644, > st_size=3636, ...}) = 0 > open("/etc/mysql/my.cnf", O_RDONLY|O_LARGEFILE) = 5 > fstat64(5, {st_mode=S_IFREG|0644, st_size=3636, ...}) = 0 > mmap(NULL, 8192, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 > read(5, "#\n# The MySQL database server co"..., 8192) = 3636 > open("/etc/mysql/conf.d/", > O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|0x4) = 6 > fstat64(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 > fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 > getdents64(6, /* 2 entries */, 8192) = 48 > getdents64(6, /* 0 entries */, 8192) = 0 > close(6) = 0 > read(5, "", 8192) = 0 > close(5) = 0 > munmap(0xf7a6a000, 8192) = 0 > stat64("/root/.my.cnf", 0xffc8c908) = -1 ENOENT (No such > file or directory) > stat64("/usr/etc/my.cnf", 0xffc8c908) = -1 ENOENT (No such > file or directory) > socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 5 > fcntl64(5, F_SETFL, O_RDONLY) = 0 > fcntl64(5, F_GETFL) = 0x2 (flags O_RDWR) > open("/etc/hosts", O_RDONLY) = 6 > fcntl64(6, F_GETFD) = 0 > fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 > fstat64(6, {st_mode=S_IFREG|0644, st_size=392, ...}) = 0 > mmap(NULL, 8192, PROT_READ|PROT_WRITE, > MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 > read(6, "127.0.0.1\tlocalhost\n10.3.0.170\tr"..., 8192) = 392 > --- SIGBUS (Bus error) @ 0 (0) --- > +++ killed by SIGBUS +++ > > > Any hints? > > Thanks in advance, > Francesco Cristofori. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

freeradius-1.1.6 - mysql failover issue - bus error -
by Francesco Cristofori 03 Jul '07

03 Jul '07

Hi all, I'm setting up module fail-over for mysql backend following the guide from the wiki, but something goes wrong. I included two sql.conf (mysql1.conf and mysql2.conf) in the "modules" section and radiusd -X reports the two files are included, but I only see the parameters from the first file get loaded and everything stops with "bus error" when trying to connect to the server. I checked name resolution, mysql user/password, network reachability and everything it's ok. I also set a tcpdump session on mysql1 but no packets for mysql are coming in. Then I straced radiusd execution and I noticed it fails after reading /etc/hosts (?!?). Here's the relevant output from radiusd -X: Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "mysql1.satcom.it" sql: port = "3306" sql: login = "radius" sql: password = "radius" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = no sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 100 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = "UPDATE radacct ? SET FramedIPAddress = '%{Framed-IP-Address}', ? AcctSessionTime = '%{Acct-Session-Time}', ? AcctInputOctets = '%{Acct-Input-Octets}', ? AcctOutputOctets = '%{Acct-Output-Octets}' ? WHERE AcctSessionId = '%{Acct-Session-Id}' ? AND UserName = '%{SQL-User-Name}' ? AND NASIPAddress= '%{NAS-IP-Address}'" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" sql: accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (mysql1): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (mysql1): Attempting to connect to radius@mysql1.satcom.it:3306/radius rlm_sql (mysql1): starting 0 rlm_sql (mysql1): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 Bus error Here's the relevant output from strace radiusd -X : write(1, "rlm_sql (mysql1): starting 0\n", 29rlm_sql (mysql1): starting 0 ) = 29 time(NULL) = 1183449009 time(NULL) = 1183449009 write(1, "rlm_sql (mysql1): Attempting to "..., 57rlm_sql (mysql1): Attempting to connect rlm_sql_mysql #0 ) = 57 time(NULL) = 1183449009 write(1, "rlm_sql_mysql: Starting connect "..., 55rlm_sql_mysql: Starting connect to MySQL server for #0 ) = 55 open("/etc/services", O_RDONLY) = 5 fcntl64(5, F_GETFD) = 0 fcntl64(5, F_SETFD, FD_CLOEXEC) = 0 fstat64(5, {st_mode=S_IFREG|0644, st_size=18274, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 read(5, "# Network services, Internet sty"..., 8192) = 8192 read(5, "otus Note\nlotusnote\t1352/udp\tlot"..., 8192) = 8192 close(5) = 0 munmap(0xf7a6a000, 8192) = 0 rt_sigaction(SIGPIPE, {SIG_IGN}, {SIG_DFL}, 0xf7b188f8, 4294967295) = 0 stat64("/etc/mysql/my.cnf", {st_mode=S_IFREG|0644, st_size=3636, ...}) = 0 open("/etc/mysql/my.cnf", O_RDONLY|O_LARGEFILE) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=3636, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 read(5, "#\n# The MySQL database server co"..., 8192) = 3636 open("/etc/mysql/conf.d/", O_RDONLY|O_NONBLOCK|O_LARGEFILE|O_DIRECTORY|0x4) = 6 fstat64(6, {st_mode=S_IFDIR|0755, st_size=4096, ...}) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 getdents64(6, /* 2 entries */, 8192) = 48 getdents64(6, /* 0 entries */, 8192) = 0 close(6) = 0 read(5, "", 8192) = 0 close(5) = 0 munmap(0xf7a6a000, 8192) = 0 stat64("/root/.my.cnf", 0xffc8c908) = -1 ENOENT (No such file or directory) stat64("/usr/etc/my.cnf", 0xffc8c908) = -1 ENOENT (No such file or directory) socket(PF_INET, SOCK_STREAM, IPPROTO_IP) = 5 fcntl64(5, F_SETFL, O_RDONLY) = 0 fcntl64(5, F_GETFL) = 0x2 (flags O_RDWR) open("/etc/hosts", O_RDONLY) = 6 fcntl64(6, F_GETFD) = 0 fcntl64(6, F_SETFD, FD_CLOEXEC) = 0 fstat64(6, {st_mode=S_IFREG|0644, st_size=392, ...}) = 0 mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0xf7a6a000 read(6, "127.0.0.1\tlocalhost\n10.3.0.170\tr"..., 8192) = 392 --- SIGBUS (Bus error) @ 0 (0) --- +++ killed by SIGBUS +++ Any hints? Thanks in advance, Francesco Cristofori.

1 0

freeradius 1.1.6 / syslog problems
by Andreas Wetzel 02 Jul '07

02 Jul '07

Hi I installed freeRadius 1.1.6 on a FreeBSD 6.2-RELEASE system from the ports collection, and am trying to get it to log via syslog. I followed the instructions from the wiki for configuring radiusd to use syslog, but when radiusd starts, I get the following: # radiusd -f -l syslog Sun Jul 1 10:40:09 2007 : Info: Starting - reading configuration files ... radiusd: Couldn't open syslog/radius.log for logging: Permission denied (rlm_eap_tls: Loading the certificate file as a chain) radiusd: Couldn't open syslog/radius.log for logging: Permission denied (rlm_passwd: nfields: 2 keyfield 0(User-Name) listable: no) Output after that appears correctly via syslog. Have I missed something? Bug or feature? Kind regard -- Keep it icy man. I don't want to end up a corpse before my time because you were daydreaming.

3 6

SQL IP Pool maximum timeout.
by Dave 02 Jul '07

02 Jul '07

I use the sqlippool setup for handling IP pools, and it works well, except I want to rid of the expiry time, (maximum timeout=0). right now its setting for 24 hours, and then it cleans itself out, and then freeradius starts handing out already assigned/used IP addresses. Im not sure where to put the maximum timeout=0 value when using sqlippool.

1 0

User-Password, Cleartext-Password, Crypt-Password and others (2.0.0-pre1)
by Pshem Kowalczyk 02 Jul '07

02 Jul '07

Hi, I have a question regarding the usage of various flavours of passwords with PAP module. When I run the server in debugging mode it complains: !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! (password (User-Password) is pulled out from the database using rlm_sql ). If I change the attribute to Cleartext-Password PAP can't find the 'known good' and reject the user. Is that suppose to work with rlm_perl? I've noticed the same problems with CHAP module. Again - is that supposed to work with new password attributes naming convention or should I stick with 'User-Password' for now? kind regards Pshem

2 1

Re: Using two tables (postgreSql) to validate users
by Daniel Bojczuk 02 Jul '07

02 Jul '07

Let me see if I understood. Shold I stop using the rlm_slq and start using rlm_perl with my own authentication script (using the freeradius' variables and functions, I read something about it)?? Thanks Daniel 2007/7/2, Krzysztof Olêdzki <krzysztof.oledzki(a)axelspringer.pl>: On 2007-06-30 17:24, Daniel Bojczuk wrote: > Hi again... > > I have a doubt: Is it possible to use two tables to check the users? I > need to do something like this... Freeradius checks if the user is valid > on the table 1, if it returns true the user is validated, but if the > return is false, freeradius checks the table 2, trying to validate the > user once again. > > Is it possible? Yes, for example with rlm_perl. Best reagards, Krzysztof Oledzki - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1