August 2007 - Freeradius-Users - lists.freeradius.org

Help me : rc_read_dictionary: invalid type
by hyunok 28 Aug '07

28 Aug '07

Fedora core 5 freeradius-client-1.1.5.tar.bz2 ./confiugre make make install freeradius-1.1.7.tar.gz rpmbuild -bb redhat/freeradius.spec cp /usr/share/freeradius/dictionary.microsoft \ /usr/local/etc/radiusclient vi /usr/local/etc/radiusclient/dictionary INCLUDE /usr/local/etc/radiusclient/dictionary.merit INCLUDE /usr/local/etc/radiusclient/dictionary.microsoft rpm -Uvh pptpd-1.3.3-1.fc5.i386.rpm options.pptpd plugin radius.so radius-config-file /usr/local/etc/radiusclient/radiusclient.conf plugin radattr.so starting connect windows xp tail -f /var/log/messages Aug 27 19:00:59 no1 pptpd[1099]: CTRL: Starting call (launching pppd, opening GRE) Aug 27 19:00:59 no1 pppd[1100]: Plugin radius.so loaded. Aug 27 19:00:59 no1 pppd[1100]: RADIUS plugin initialized. Aug 27 19:00:59 no1 pppd[1100]: Plugin radattr.so loaded. Aug 27 19:00:59 no1 pppd[1100]: RADATTR plugin initialized. Aug 27 19:00:59 no1 pppd[1100]: Plugin /usr/lib/pptpd/pptpd-logwtmp.so loaded. Aug 27 19:00:59 no1 pppd[1100]: pppd 2.4.3 started by root, uid 0 Aug 27 19:00:59 no1 pppd[1100]: Using interface ppp0 Aug 27 19:00:59 no1 pppd[1100]: Connect: ppp0 <--> /dev/pts/2 Aug 27 19:01:02 no1 pptpd[1099]: CTRL: Ignored a SET LINK INFO packet with real ACCMs! Aug 27 19:01:02 no1 pppd[1100]: rc_read_dictionary: invalid type on line 11 of dictionary /usr/local/etc/radiusclient/dictionary.microsoft Aug 27 19:01:02 no1 pppd[1100]: RADIUS: Can't read dictionary file /usr/local/etc/radiusclient/dictionary Aug 27 19:01:02 no1 pppd[1100]: Peer testuser failed CHAP authentication Aug 27 19:01:02 no1 pppd[1100]: Connection terminated. Aug 27 19:01:02 no1 pppd[1100]: Exit. Aug 27 19:01:02 no1 pptpd[1099]: CTRL: Client 123.xx.xx.xx control connection finished

2 1

Calling-Station-ID
by Stefan Adams 28 Aug '07

28 Aug '07

Is there anyway that I can rewrite the Calling-Station-ID to the name of the PC instead of the MAC address? This table can be found in LDAP or even in DHCP. Is there a way to call an external program that will provide the rewrite rules such that the log shows: Login OK: [username] (from client switch port 0 cli PCName) Instead of: Login OK: [username] (from client switch port 0 cli 00-11-22-33-44-55) Thanks! Stefan

3 2

freeradius and direct server return
by Giuseppe Tricarico 28 Aug '07

28 Aug '07

Hi All I have a problem with freeradius and Direct Server return configuration. I use Alteon load balancer configured for DSR, freeradius listen on the virtual IP address and the real address as health check request are sent on the real IP address but client request are sent on the virtual IP address. The problem is that the server respond to client request with the real IP address instead of virtual, then the client discard the response. Is there any configuration that tells freeradius to answer using the virtual address ??? Regards Giuseppe

2 1

compiling free radius 1.1.7 on NetBSD
by Ray Phillips 28 Aug '07

28 Aug '07

I've attempted to compile free radius 1.1.7 on a machine running NetBSD/amd64 without success... % uname -v NetBSD 4.99.20 (GENERIC.MP) #0: Thu Jul 5 13:21:09 EST 2007 ray@jb.jkmrc.uq.edu.au:/usr/obj/sys/arch/amd64/compile/GENERIC.MP % At first configure couldn't find krb5.h and make failed: % ls -l total 4064 -rw------- 1 ray wheel 2063278 Aug 26 01:39 freeradius-1.1.7.tar.bz2 % tar jxf * % cd *7 % sh -c './configure > configure.log 2>&1' % sh -c 'gmake > gmake.log 2>&1' % sed -n '651,670p' configure.log === configuring in src/modules/rlm_krb5 (/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/modules/rlm_krb5) configure: running /bin/ksh ./configure '--prefix=/usr/local' '--enable-ltdl-install' --cache-file=/dev/null --srcdir=. checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking how to run the C preprocessor... gcc -E checking for krb5.h... no checking for krb5_encrypt_data in -lk5crypto... no checking for DH_new in -lcrypto... yes checking for set_com_err_hook in -lcom_err... yes checking for krb5_init_context in -lkrb5... yes configure: creating ./config.status config.status: creating Makefile === configuring in src/modules/rlm_ldap (/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/modules/rlm_ldap) % wc -l gmake.log 985 gmake.log % sed -n '920,931p' gmake.log Making all in rlm_krb5... gmake[6]: Entering directory `/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/modules/rlm_krb5' /usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/include -I/usr/include/et -c rlm_krb5.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/include -I/usr/include/et -c rlm_krb5.c -fPIC -DPIC -o .libs/rlm_krb5.o rlm_krb5.c:39:18: error: krb5.h: No such file or directory rlm_krb5.c:40:21: error: com_err.h: No such file or directory rlm_krb5.c:45: error: expected specifier-qualifier-list before 'krb5_context' rlm_krb5.c:57: error: expected ')' before 'context' rlm_krb5.c: In function 'krb5_instantiate': rlm_krb5.c:174: error: 'krb5_context' undeclared (first use in this function) rlm_krb5.c:174: error: (Each undeclared identifier is reported only once % krb5.h was present though: % ls -l /usr/include/krb5 total 436 -r--r--r-- 1 root wheel 792 Jul 5 10:39 asn1_err.h -r--r--r-- 1 root wheel 1934 Jul 5 10:39 base64.h -r--r--r-- 1 root wheel 2571 Jul 5 10:39 com_err.h -r--r--r-- 1 root wheel 2397 Jul 5 10:39 com_right.h -r--r--r-- 1 root wheel 2875 Jul 5 10:39 getarg.h -r--r--r-- 1 root wheel 464 Jul 5 10:39 hdb-private.h -r--r--r-- 1 root wheel 3236 Jul 5 10:39 hdb-protos.h -r--r--r-- 1 root wheel 3634 Jul 5 10:39 hdb.h -r--r--r-- 1 root wheel 5593 Jul 5 10:39 hdb_asn1.h -r--r--r-- 1 root wheel 835 Jul 5 10:39 hdb_err.h -r--r--r-- 1 root wheel 1156 Jul 5 10:39 heim_err.h -r--r--r-- 1 root wheel 724 Jul 5 10:39 k524_err.h -r--r--r-- 1 root wheel 6819 Jul 5 10:39 kafs.h -r--r--r-- 1 root wheel 1830 Jul 5 10:39 krb5-private.h -r--r--r-- 1 root wheel 61078 Jul 5 10:39 krb5-protos.h -r--r--r-- 1 root wheel 21060 Jul 5 10:39 krb5.h -r--r--r-- 1 root wheel 35798 Jul 5 10:39 krb5_asn1.h -r--r--r-- 1 root wheel 6644 Jul 5 10:39 krb5_err.h -r--r--r-- 1 root wheel 2049 Jul 5 10:39 parse_bytes.h -r--r--r-- 1 root wheel 2074 Jul 5 10:39 parse_time.h -r--r--r-- 1 root wheel 2525 Jul 5 10:39 parse_units.h -r--r--r-- 1 root wheel 4388 Jul 5 10:39 resolve.h -r--r--r-- 1 root wheel 7457 Jul 5 10:39 roken-common.h -r--r--r-- 1 root wheel 5050 Jul 5 10:39 roken.h -r--r--r-- 1 root wheel 2134 Jul 5 10:39 rtbl.h -r--r--r-- 1 root wheel 2302 Jul 5 10:39 sl.h -r--r--r-- 1 root wheel 2324 Jul 5 10:39 ss.h % so I ran configure again, explicitly telling it the path to krb5.h (with a freshly untar'ed source tree): % sh -c './configure CPPFLAGS=-I/usr/include/krb5 > configure.log 2>&1' % sed -n '649,668p' configure.log === configuring in src/modules/rlm_krb5 (/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/modules/rlm_krb5) configure: running /bin/ksh ./configure '--prefix=/usr/local' 'CPPFLAGS=-I/usr/include/krb5' '--enable-ltdl-install' --cache-file=/dev/null --srcdir=. checking for gcc... gcc checking for C compiler default output file name... a.out checking whether the C compiler works... yes checking whether we are cross compiling... no checking for suffix of executables... checking for suffix of object files... o checking whether we are using the GNU C compiler... yes checking whether gcc accepts -g... yes checking for gcc option to accept ISO C89... none needed checking how to run the C preprocessor... gcc -E checking for krb5.h... yes checking for krb5_encrypt_data in -lk5crypto... no checking for DH_new in -lcrypto... yes checking for set_com_err_hook in -lcom_err... yes checking for krb5_init_context in -lkrb5... yes configure: creating ./config.status config.status: creating Makefile === configuring in src/modules/rlm_ldap (/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/modules/rlm_ldap) % sh -c 'gmake > gmake.log 2>&1' % Even though configure found krb5.h, make gave the same error as before: % wc -l gmake.log 985 gmake.log % sed -n '920,931p' gmake.log Making all in rlm_krb5... gmake[6]: Entering directory `/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/modules/rlm_krb5' /usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/include -I/usr/include/et -c rlm_krb5.c mkdir .libs gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/usr/home/ray/installers/freeradius/1.1.7/freeradius-1.1.7/src/include -I/usr/include/et -c rlm_krb5.c -fPIC -DPIC -o .libs/rlm_krb5.o rlm_krb5.c:39:18: error: krb5.h: No such file or directory rlm_krb5.c:40:21: error: com_err.h: No such file or directory rlm_krb5.c:45: error: expected specifier-qualifier-list before 'krb5_context' rlm_krb5.c:57: error: expected ')' before 'context' rlm_krb5.c: In function 'krb5_instantiate': rlm_krb5.c:174: error: 'krb5_context' undeclared (first use in this function) rlm_krb5.c:174: error: (Each undeclared identifier is reported only once % Could you suggest a solution to this please? Ray

2 3

Re: Freeradius-Users Digest, Vol 28, Issue 96
by Michael Ziemann 28 Aug '07

28 Aug '07

Hi all! I added the Simultanous-Use attribute to radgroupcheck in my MySQL-db with the following statement: INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("dialup", "Simultaneous-Use", ":=", "1"); But I can login twice or more with the same account... so what do i have to enable/disable to deny simultaneous usage of the accounts??? Regards Michael

1 0

simultaneous usage
by Michael Ziemann 28 Aug '07

28 Aug '07

Hi all! I added the Simultanous-Use attribute to radgroupcheck in my MySQL-db with the following statement: INSERT INTO radgroupcheck (GroupName, Attribute, op, Value) values("dialup", "Simultaneous-Use", ":=", "1"); But I can login twice or more with the same account... so what do i have to enable/disable to deny simultaneous usage of the accounts??? Regards Michael > Date: Mon, 27 Aug 2007 12:00:51 +0200 > From: Michael Ziemann <mailinglist(a)ziemann-perl.de> > Subject: User login > To: freeradius-users(a)lists.freeradius.org > Message-ID: <46D2A0D3.9070307(a)ziemann-perl.de> > Content-Type: text/plain; charset=ISO-8859-15; format=flowed > > Hi People! > > Today I've another problem with freeradius. > The user has his own password and can login by himself, no problem. But > how can I avoid a second user logging in with the same user / pwd? > Is it a problem of the NAS or RADIUS ??? > > I didn't find any configuration examples on the web, so please be > patient :-) > > greets > > Michael > > > ------------------------------ > > Message: 2 > Date: Mon, 27 Aug 2007 13:11:05 +0300 > From: "liran tal" <liransgarage(a)gmail.com> > Subject: Re: User login > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: > <3ed55890708270311h4b00e0bbk793fae92dafc88b9(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hey Michael, > > You need to make use of the attribute Simultaneous-Use as a parameter > for controlling how many session each user will be accepted by the RADIUS > server. > > > Regards, > Liran Tal. > >

2 1

pre1 dies on startup: generate_sql_clients() returned error
by Norbert Wegener 28 Aug '07

28 Aug '07

I have a larger list of clients, that is read from a mysql database. Freeradius starts loading the clients, but when having loaded the first 2442 clients, it dies. Unfortunately gdb is not very helpfull: ..... rlm_sql (sql_base): Read entry nasname=192.168.36.73,shortname=192.168.36.73,secret=maxen^M rlm_sql (sql_base): Adding client 192.168.36.73 (192.168.36.73) to clients list^M rlm_sql (sql_base): generate_sql_clients() returned error rlm_sql (sql_base): Closing sqlsocket 4 rlm_sql (sql_base): Closing sqlsocket 3 rlm_sql (sql_base): Closing sqlsocket 2 rlm_sql (sql_base): Closing sqlsocket 1 rlm_sql (sql_base): Closing sqlsocket 0 radiusd.conf[46]: sql_base: Module instantiation failed. radiusd.conf[2032] Failed to find module "sql_base". radiusd.conf[2032] Failed to parse "sql_base" entry. radiusd.conf[1928] Failed to parse authorize section. Errors setting up modules Program exited with code 01. (gdb) bt No stack. (gdb) Norbert Wegener

6 11

problem with eap-tls authentication
by HBA BOX 28 Aug '07

28 Aug '07

Hello, I'm using radius server and and linksys access point configured to use radius security mode and windows xp in my laptop as wlan client configured like that: network authentication: open data encryption: WEP enable IEEE 802.1x authentication for this NW EAP type: smartcard or other certificate use a certificateon this computer use a simple certificate selection for the configuration of the radius server and certificate creation i have followed the EAP/TLS HOWTO .when I start connection I'm having the following problem in radius.log: Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:05:26 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:05:56 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:05:56 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:06:26 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:26 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:06:57 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:06:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:07:27 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:07:57 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:07:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:08:27 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:27 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Length Included Tue Aug 28 09:08:57 2007 : Error: TLS_accept:error in SSLv3 read client certificate A Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message Tue Aug 28 09:08:57 2007 : Info: rlm_eap_tls: Received EAP-TLS ACK message and when I started using radius -X i have the following: rad_recv: Access-Request packet from host 192.168.0.211:2057, id=0, length=146 User-Name = "habiba allalou" NAS-IP-Address = 192.168.0.211 Called-Station-Id = "0014bf3d0272" Calling-Station-Id = "0019d217e488" NAS-Identifier = "0014bf3d0272" NAS-Port = 59 Framed-MTU = 1400 State = 0xefb1f9a519b0db2939e6698d5912be56 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x021000060d00 Message-Authenticator = 0xac77fcd608f970b68812970687a7b3f7 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 105 modcall[authorize]: module "preprocess" returns ok for request 105 modcall[authorize]: module "chap" returns noop for request 105 modcall[authorize]: module "mschap" returns noop for request 105 rlm_realm: No '@' in User-Name = "habiba allalou", skipping NULL due to config. modcall[authorize]: module "suffix" returns noop for request 105 rlm_eap: EAP packet type response id 16 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 105 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 105 modcall: group authorize returns updated for request 105 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 105 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 105 modcall: group authenticate returns handled for request 105 Sending Access-Challenge of id 0 to 192.168.0.211:2057 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x1c537461726669656c6420546563686e6f6c6f676965 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x729437f6c5463c2e5b4e9bf127df4f1a Finished request 105 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.211:2057, id=0, length=146 User-Name = "habiba allalou" NAS-IP-Address = 192.168.0.211 Called-Station-Id = "0014bf3d0272" Calling-Station-Id = "0019d217e488" NAS-Identifier = "0014bf3d0272" NAS-Port = 59 Framed-MTU = 1400 State = 0x729437f6c5463c2e5b4e9bf127df4f1a NAS-Port-Type = Wireless-802.11 EAP-Message = 0x021100060d00 Message-Authenticator = 0x49afb397ba61bd8b2efd610433dd072e Processing the authorize section of radiusd.conf modcall: entering group authorize for request 106 modcall[authorize]: module "preprocess" returns ok for request 106 modcall[authorize]: module "chap" returns noop for request 106 modcall[authorize]: module "mschap" returns noop for request 106 rlm_realm: No '@' in User-Name = "habiba allalou", skipping NULL due to config. modcall[authorize]: module "suffix" returns noop for request 106 rlm_eap: EAP packet type response id 17 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 106 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 106 modcall: group authorize returns updated for request 106 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 106 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 106 modcall: group authenticate returns handled for request 106 Sending Access-Challenge of id 0 to 192.168.0.211:2057 EAP-Message = 0x0112040a0d8000004000732c20496e632e31323030060355040b1329537461726669656c6420436c61737320322043657274696669636174696f6e20417574686f7269747900ca3081c7310b3009060355040613025553311730150603550408130e4e6f727468204361726f6c696e61311f301d06035504071316526573656172636820547269616e676c65205061726b31163014060355040a130d526564204861742c20496e632e3121301f060355040b131852656420486174204e6574776f726b205365727669636573312330210603550403131a52484e5320436572746966696361746520417574686f72697479311e301c06092a864886f70d EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x68202620446576656c6f706d656e7420446570617274 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4d8821a21a94e56deb17ab02273d19f1 Finished request 106 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.0.211:2057, id=0, length=146 User-Name = "habiba allalou" NAS-IP-Address = 192.168.0.211 Called-Station-Id = "0014bf3d0272" Calling-Station-Id = "0019d217e488" NAS-Identifier = "0014bf3d0272" NAS-Port = 59 Framed-MTU = 1400 State = 0x4d8821a21a94e56deb17ab02273d19f1 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x021200060d00 Message-Authenticator = 0xb711e05780b7caf363de8c866ff6f469 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 107 modcall[authorize]: module "preprocess" returns ok for request 107 modcall[authorize]: module "chap" returns noop for request 107 modcall[authorize]: module "mschap" returns noop for request 107 rlm_realm: No '@' in User-Name = "habiba allalou", skipping NULL due to config. modcall[authorize]: module "suffix" returns noop for request 107 rlm_eap: EAP packet type response id 18 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 107 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 107 modcall: group authorize returns updated for request 107 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 107 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 107 modcall: group authenticate returns handled for request 107 Sending Access-Challenge of id 0 to 192.168.0.211:2057 EAP-Message = 0x0113000a0d8000000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x1859df1e2a63289dde2fcecf053c07cc Finished request 107 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 107 ID 0 with timestamp 46d3d947 Nothing to do. Sleeping until we see a request. please can any one tell me what am i doing wrong. best regards --------------------------------- Ne gardez plus qu'une seule adresse mail ! Copiez vos mails vers Yahoo! Mail

1 0

RE: How to get FreeRadius 2.0 running?
by Jack Daniels 28 Aug '07

28 Aug '07

Hi, thanks for your prompt reply.No, I'm not trying to run it with 1.1.x files. I've downloaded the latest snapshot in a brand new computer, which has only the LBS.In previous versions, when I compiled FreeRadius, it was 100% functional, obviously I needed to configure it to meet my needs, but at least, it had a sample configuration which worked out-of-the-box. When I tried the same with this release, I got the error previously shown, and still can't get it to work, even if I modify the default configuration in the sites-enabled directory or the listen sections in the radiusd.conf file. I've tried some things, and I feel that the solution to this problem is really simple, but I haven't found it yet.RegardsJD> Date: Mon, 27 Aug 2007 13:23:47 +0100> From: A.L.M.Buxey(a)lboro.ac.uk> To: freeradius-users(a)lists.freeradius.org> Subject: Re: How to get FreeRadius 2.0 running?> > Hi,> > > Hello, I've downloaded from CVS the latest snapshot of FreeRadius> > 2.0 for testing purposes, but to my surprise, i haven't yet succeeded> > in getting it to run.The error message I get is the following:Mon Aug 27 15:49:14 2007 : Error: Listening on IP authentication address * port 1812 but no server has been definedMon Aug 27 15:49:14 2007 : Error: Errors setting up modulesCould please somebody assist me? I know this version is not yet finished, but I'd like to have it running to see its new features.Jack D> > its very much finished in manay ways - just a few kinks here and there...and> some more larger sites to take on the challenge to find corner/edge cases.> > your issue is that you seem to be trying to run 2.0 with 1.1.x config files.> that wont work. in order to 1.1.x -> 2.x migrate, you need to take> your 1.1.x config files and look at the 2.0 config , line-by-line, edit> the new functions/config to do what your old one did. its not a long> process (especially as the new server is much clearer and simpler> to config (imho) and you can use unlang to remove many old oddities> and comparison/checks.> > alan> -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

2 1

Freeradius 1.1.3-3unbuntu1+Chillispot+sql ATTRIBUTE Idle-Timeout
by LeRoy DeVries 28 Aug '07

28 Aug '07

I am having a problem with the ATTRIBUTE Idle-Timeout. Sometimes it will log out the connected user and place the entry in the radacct table (AcctStopTime) and sometimes it won't. How can I debug this problem to resolve this issue. Thanks for your help.

2 1