August 2007 - Freeradius-Users - lists.freeradius.org

Check items in rlm_files
by Paul Khavkine 23 Aug '07

23 Aug '07

Hi. Is it possible to access check items from the users file that were added to the request by previous modules ? I have rlm_ldap adding some items in authz section that I want to check later on in the users file. Or is there a way to map attributes from LDAP to the request pairs instead ? Thanx Paul

2 1

RE: Help configuring FreeRadius with PPPD and ntlm_auth
by Bruce Marriner 23 Aug '07

23 Aug '07

I wish I could be very specific here. But I fixed it. I reinstalled PPP and I looked very close at all its options and the config for XL2TP and removed every option that wasn't required (didn't break my non-radius connection). I tried the connection again. Wasn't even talking to radius so I edited the /etc/ppp/radius/servers file. It started talking to radius! This time it actually said it was doing mschap auth. Then complained about security on the winbindd_privileged folder. Now I'm not sure what user it's running as. The radiusd user has writes to that folder. But for testing I just changed it to 777 and now it's working. So I'm down to my very last step is this whole thing. I'll dig on the internet and manuals for this as well. But I'd like to ask here too :) I need to select what IP Pool specific users are given. So for our general users (field sales) we could allow access to all the email/intranet servers. Then our special users who do maintenance work on some machines in the shop would only have access to those machines. If I can assign different IP pool I can handle the access in netfilter. So is there a method of pulling a ip pool from Active Directory? If not, what options are there? Thanks. I'm documenting most of this :) and working on writing a howto on the whole thing. Since I couldn't really find any that currently exist. Once done it will exist at http://sqls.net/?s=article&id=6 (just in case someone ends up finding this while searching for how to do this) -----Original Message----- From: Bruce Marriner Sent: Monday, August 20, 2007 9:30 AM To: 'freeradius-users(a)lists.freeradius.org' Subject: Help configuring FreeRadius with PPPD and ntlm_auth

2 2

Certificates problem - FreeRADIUS 1.1.6, Chillispot 1.0
by ＠eon 23 Aug '07

23 Aug '07

I have setup a hotspot for my hotel using Freeradius and chillispot. It works for all clients normally, except for two cases I've seen (so far). Two different users with laptops running Windows XP could connect to the access point, could ping the server's ip address, but when they tried to open a web page, their browser (internet explorer and firefox alike) did not prompt to accept the server's certificate and of course could not see any web page. I've tried looking around at the windows' settings for certificates and security to no avail.I know that the 2nd and more recent case, the cliend had windows xp SP1 on his laptop. Could that be the case? Thanks in advance for any answers to this.

1 0

Unlang regular expression string expansion.
by Arran Cudbard-Bell 23 Aug '07

23 Aug '07

Hi, HP access point with mac authentication. Sends mac as User-Name in lower case, Sends mac as Calling-Station-ID in upper case. Check to see if mac based authentication is being attempted is if User-Name == Calling-Station-ID. As the case differs the two don't match. if(%{User-Name} =~ /%{Calling-Station-ID}/i){ Doesn't expand %{Calling-Station-ID} , but thats expected. if(%{User-Name} =~ "/%{Calling-Station-ID}/i"){ Gives error. Leaves no way to do case insensitive equality checks between strings with unlang... Any chance of expanding regex strings before passing them to the regex parser ? Or == becomes non-strict equality and === becomes strict equality. Thanks, Arran

3 3

Yeahh!!! Openser + Freeradius + CDRTool + MySQL + Freeradius-CDRTool python module almost working
by Marc LEURENT 23 Aug '07

23 Aug '07

Thanks Dan!! I have successfully compiled freeradius 1.1.6 with the rlm_python compiled statically! So the freeradius-cdrtool module works!! My problem is that is cannot find the destination whereas it's in the Canonical-URI, so that with To=None, it cannot calculate the max session time But in the radacct database, there is the Canonical-URI A Parsing problem? Stange, I don't know where to search for it Aug 23 16:57:23 sd-7501 CDRTool[20011]: MaxSessionTime From=101(a)sd-7501.dedibox.fr To=None Duration=7200 Lock=1 Aug 23 16:57:23 sd-7501 CDRTool[20011]: Load last minute: 5 calls @ 0.04 cps, memory: 10.13 MB Aug 23 16:57:23 sd-7501 CDRTool[20011]: Call to none, no limit imposed Aug 23 16:57:23 sd-7501 CDRTool[20011]: GetBalance From=101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Customer : 101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Balance : 1000.0000 Aug 23 16:57:23 sd-7501 CDRTool[20011]: MaxSessionTime From=101(a)sd-7501.dedibox.fr To=None Duration=7200 Lock=1 Aug 23 16:57:23 sd-7501 CDRTool[20011]: Call to none, no limit imposed Aug 23 16:57:23 sd-7501 CDRTool[20011]: GetBalance From=101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Customer : 101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Balance : 1000.0000 Aug 23 16:57:24 sd-7501 CDRTool[20011]: MaxSessionTime From=101(a)sd-7501.dedibox.fr To=None Duration=7200 Lock=1 Aug 23 16:57:24 sd-7501 CDRTool[20011]: Call to none, no limit imposed Aug 23 16:57:24 sd-7501 CDRTool[20011]: GetBalance From=101(a)sd-7501.dedibox.fr Aug 23 16:57:24 sd-7501 CDRTool[20011]: Customer : 101(a)sd-7501.dedibox.fr Aug 23 16:57:24 sd-7501 CDRTool[20011]: Balance : 1000.0000 Aug 23 16:57:45 sd-7501 CDRTool[20011]: DebitBalance From=None To=sip:0033677832974@sd-7501.dedibox.fr:5060;user=phone Duration=0 Aug 23 16:57:45 sd-7501 CDRTool[20011]: Warning: Account none is not prepaid rad_recv: Accounting-Request packet from host 127.0.0.1:59701, id=79, length=318 Acct-Status-Type = Failed Service-Type = Sip-Session Sip-Response-Code = 487 Sip-Method = INVITE Event-Timestamp = "Aug 23 2007 16:51:33 CEST" Sip-From-Tag = "c0a80101-29f6f83" Sip-To-Tag = "c0a80101-29f6daa" Acct-Session-Id = "2f12a585-c0a80101-0-1f(a)192.168.95.79" Sip-Src-IP = "81.57.0.22" Sip-Src-Port = "62854" Canonical-URI = "sip:0033677832974@sd-7501.dedibox.fr:5060;user=phone" Billing-Party = "sip:101@sd-7501.dedibox.fr:5060;user=phone" SIP-Proxy-IP = "88.191.45.91" User-Agent = "THOMSON ST2030 hw0 fw1.56 00-0E-50-4E-AF-C4" NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 127.0.0.1 Processing the preacct section of radiusd.conf Dan-Cristian Bogos a écrit : > Marc, > > try this (as I have written in freeradius list) - should work fine if > u follow the exact steps. I am compiling it statically since this was > the building policy recommended by developers: > > 1. Grab the sources and unpack them (1.1.7 version) > 2. After unpacking, run from within the source folder: > ./configure --with-static-modules=python > make > 3. Your make will stop here: "libtool: link: cannot find the library > `../modules/rlm_python/rlm_python.la' or unhandled argument > `../modules/rlm_python/rlm_python.la'" > 4. Go into ./src/modules/rlm_python > 5. run ./configure + make + make install > 6. Go back to root of sources and run again make + make install. > > Hope that will do, > DanB > > > > > On 8/23/07, Marc LEURENT <lftsy(a)free.fr> wrote: >> I'm receiving freeradius-users(a)lists.freeradius.org >> Did you sent it there? >> >> I have posted some message there and some developpers said that rlm_python shouldn't be compiled statically... And that I should use the experimental >> module option. So I don't know what to do in order to get your module working >> >> PS: I have tested it in console with python directly, Congratulations!! It works perfectly >> >> >> >> Dan-Cristian Bogos a écrit : >>> SOLVED, check the freeradius list, I have posted there the solution. >>> >>> DanB >>> >>> On 8/23/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>> I have copied the missing radpaths.h from 1.1.7 source, but there is still an error! (libradius.la) >>>> Why is ir so important de compile de python module statically?? >>>> >>>> Can we compile the experimental modules?? >>>> >>>> rlm_python.c: At top level: >>>> rlm_python.c:244: warning: function declaration isn't a prototype >>>> rlm_python.c: In function 'python_load_function': >>>> rlm_python.c:456: warning: passing argument 2 of 'PyObject_GetAttrString' discards qualifiers from pointer target type >>>> gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings >>>> -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef >>>> -I/home/mleurent/freeradius/official/freeradius-1.1.6/src/include -I/usr/include/python2.4 -c rlm_python.c -o rlm_python.o >/dev/null 2>&1 >>>> /home/mleurent/freeradius/official/freeradius-1.1.6/libtool --mode=link gcc -release 1.1.6 \ >>>> -module -static -o rlm_python.la \ >>>> -rpath /usr/local/lib rlm_python.lo rlm_python.c /home/mleurent/freeradius/official/freeradius-1.1.6/src/lib/libradius.la \ >>>> -L/usr/lib/python2.4/config -lpthread -ldl -lutil -lpython2.4 -lm -lnsl -lresolv -lpthread >>>> libtool: link: cannot find the library `/home/mleurent/freeradius/official/freeradius-1.1.6/src/lib/libradius.la' or unhandled argument >>>> `/home/mleurent/freeradius/official/freeradius-1.1.6/src/lib/libradius.la' >>>> make: *** [rlm_python.la] Error 1 >>>> zsh: exit 2 make >>>> >>>> >>>> Dan-Cristian Bogos a écrit : >>>>> Ok, try a trick then, >>>>> >>>>> 1. in root folder type: >>>>> >>>>> ./configure --with-static-modules=python >>>>> >>>>> 2. go in ./src/modules/rlm_python/ and try after the installation >>>>> procedure: ./configure + make + make install >>>>> 3. Go back to root folder and try again the installation procedure >>>>> (./configure --with-static-modules=python + make + make install). >>>>> >>>>> Let me know how it goes. >>>>> >>>>> DanB >>>>> >>>>> On 8/23/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>> I cannot do it! >>>>>> Sniff again >>>>>> >>>>>> SCREEN):root@sd-7501:[/home/../freeradius-1.1.6]# cd src/modules/rlm_python >>>>>> (SCREEN):root@sd-7501:[~mleurent/../rlm_python]# ./configure >>>>>> checking for gcc... gcc >>>>>> checking for C compiler default output file name... a.out >>>>>> checking whether the C compiler works... yes >>>>>> checking whether we are cross compiling... no >>>>>> checking for suffix of executables... >>>>>> checking for suffix of object files... o >>>>>> checking whether we are using the GNU C compiler... yes >>>>>> checking whether gcc accepts -g... yes >>>>>> checking for gcc option to accept ANSI C... none needed >>>>>> checking how to run the C preprocessor... gcc -E >>>>>> checking for python2.3... no >>>>>> checking for python2.2... no >>>>>> checking for python2.1... no >>>>>> checking for python1.5... no >>>>>> checking for python... python >>>>>> checking for Python.h... yes >>>>>> checking for Py_Initialize in -lpython2.4... yes >>>>>> configure: creating ./config.status >>>>>> config.status: creating Makefile >>>>>> >>>>>> (SCREEN):root@sd-7501:[~mleurent/../rlm_python]# make >>>>>> ../rules.mak:24: ../../../Make.inc: No such file or directory >>>>>> make: *** No rule to make target `../../../Make.inc'. Stop. >>>>>> zsh: exit 2 make >>>>>> >>>>>> >>>>>> Dan-Cristian Bogos a écrit : >>>>>>> Hi Marc, >>>>>>> >>>>>>> it looks like there has been some changes with freeradius 1.7 since >>>>>>> this one does not install for me either. It says :" ibtool: link: >>>>>>> cannot find the library >>>>>>> `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la' or >>>>>>> unhandled argument >>>>>>> `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la'". On >>>>>>> a manual search I could see that this library is not longer included >>>>>>> with the sources. I will try asking the guys from freeradius about the >>>>>>> changes necessary to work. >>>>>>> In the mean time, if u want to give it a try, here is how I have >>>>>>> installed from freeradius 1.6: >>>>>>> 1. Download the sources: "wget >>>>>>> ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.6.tar.gz" >>>>>>> 2. Extract and get into the source folder. >>>>>>> 3. Go to ./src/modules/rlm_python/ >>>>>>> 4. Install the sources statically: (./configure + make + make install). >>>>>>> 5. Go back to root folder for the sources >>>>>>> 6. ./configure --with-static-modules=python >>>>>>> 7. make + make install. >>>>>>> >>>>>>> Hope that would do for you. >>>>>>> >>>>>>> Cheers, >>>>>>> DanB >>>>>>> >>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>> I have another error with freeradius 1.1.7 from source, I don't know why it cannot find the module... >>>>>>>> I'll check tomorrow >>>>>>>> Yhanks for your help Dan, have a pleasant evening >>>>>>>> >>>>>>>> rlm_sql_mysql: Starting connect to MySQL server for #3 >>>>>>>> rlm_sql (sql): Connected new DB handle, #3 >>>>>>>> rlm_sql (sql): starting 4 >>>>>>>> rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 >>>>>>>> rlm_sql_mysql: Starting connect to MySQL server for #4 >>>>>>>> rlm_sql (sql): Connected new DB handle, #4 >>>>>>>> Module: Instantiated sql (sql) >>>>>>>> python_init done >>>>>>>> Module: Loaded python >>>>>>>> python: mod_instantiate = "freeradius-cdrtool" >>>>>>>> python: func_instantiate = "instantiate" >>>>>>>> python: mod_authorize = "freeradius-cdrtool" >>>>>>>> python: func_authorize = "authorize" >>>>>>>> python: mod_authenticate = "(null)" >>>>>>>> python: func_authenticate = "(null)" >>>>>>>> python: mod_preacct = "(null)" >>>>>>>> python: func_preacct = "(null)" >>>>>>>> python: mod_accounting = "freeradius-cdrtool" >>>>>>>> python: func_accounting = "accounting" >>>>>>>> python: mod_checksimul = "(null)" >>>>>>>> python: func_checksimul = "(null)" >>>>>>>> python: mod_detach = "freeradius-cdrtool" >>>>>>>> python: func_detach = "detach" >>>>>>>> rlm_python:python_load_function: module 'freeradius-cdrtool' is not found >>>>>>>> rlm_python:EXCEPT:exceptions.ImportError: /usr/lib/python2.4/lib-dynload/_socket.so: undefined symbol: _Py_TrueStruct >>>>>>>> rlm_python:python_load_function: failed to import python function 'freeradius-cdrtool.instantiate' >>>>>>>> radiusd.conf[541]: python: Module instantiation failed. >>>>>>>> radiusd.conf[1900] Unknown module "python". >>>>>>>> radiusd.conf[1803] Failed to parse authorize section. >>>>>>>> zsh: exit 1 radiusd -X >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>> You are getting this error because the interpreter does not accept "-" >>>>>>>>> in the name. I didn't need to import it in the interpreter and there >>>>>>>>> will be no use since radiusd package is available only within >>>>>>>>> freeradius process. >>>>>>>>> >>>>>>>>> Thxs, >>>>>>>>> DanB >>>>>>>>> >>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>> Do you have this error? >>>>>>>>>> When I try to load your module in mython, I have this error because of the dash.. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> root@sd-7501:[/home/../freeradius-cdrtool-1.0]# python >>>>>>>>>> Python 2.4.4 (#2, Apr 5 2007, 20:11:18) >>>>>>>>>> [GCC 4.1.2 20061115 (prerelease) (Debian 4.1.1-21)] on linux2 >>>>>>>>>> Type "help", "copyright", "credits" or "license" for more information. >>>>>>>>>>>>> import freeradius-cdrtool >>>>>>>>>> File "<stdin>", line 1 >>>>>>>>>> import freeradius-cdrtool >>>>>>>>>> ^ >>>>>>>>>> SyntaxError: invalid syntax >>>>>>>>>>>>> import setup >>>>>>>>>> usage: [global_opts] cmd1 [cmd1_opts] [cmd2 [cmd2_opts] ...] >>>>>>>>>> or: --help [cmd1 cmd2 ...] >>>>>>>>>> or: --help-commands >>>>>>>>>> or: cmd --help >>>>>>>>>> >>>>>>>>>> error: no commands supplied >>>>>>>>>> zsh: exit 1 python >>>>>>>>>> >>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>> Marc, >>>>>>>>>>> >>>>>>>>>>> This is still an error from python, not my module. I think it has >>>>>>>>>>> something to do with linking inside between C and python. What were >>>>>>>>>>> the steps in your freeradius installation? >>>>>>>>>>> >>>>>>>>>>> DanB >>>>>>>>>>> >>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>> I have compiled the experimental modules, now the python module is working but I have an error with yours... >>>>>>>>>>>> I have changed the rlm_digest.c and fixed the sql module to work with procedure >>>>>>>>>>>> >>>>>>>>>>>> rlm_sql (sql): Connected new DB handle, #4 >>>>>>>>>>>> Module: Instantiated sql (sql) >>>>>>>>>>>> python_init done >>>>>>>>>>>> Module: Loaded python >>>>>>>>>>>> python: mod_instantiate = "freeradius-cdrtool" >>>>>>>>>>>> python: func_instantiate = "instantiate" >>>>>>>>>>>> python: mod_authorize = "freeradius-cdrtool" >>>>>>>>>>>> python: func_authorize = "authorize" >>>>>>>>>>>> python: mod_authenticate = "(null)" >>>>>>>>>>>> python: func_authenticate = "(null)" >>>>>>>>>>>> python: mod_preacct = "(null)" >>>>>>>>>>>> python: func_preacct = "(null)" >>>>>>>>>>>> python: mod_accounting = "freeradius-cdrtool" >>>>>>>>>>>> python: func_accounting = "accounting" >>>>>>>>>>>> python: mod_checksimul = "(null)" >>>>>>>>>>>> python: func_checksimul = "(null)" >>>>>>>>>>>> python: mod_detach = "freeradius-cdrtool" >>>>>>>>>>>> python: func_detach = "detach" >>>>>>>>>>>> exceptions.ImportError: /usr/lib/python2.4/lib-dynload/_socket.so: undefined symbol: _Py_TrueStruct >>>>>>>>>>>> Failed to import python module "freeradius-cdrtool" >>>>>>>>>>>> radiusd.conf[544]: python: Module instantiation failed. >>>>>>>>>>>> radiusd.conf[1884] Unknown module "python". >>>>>>>>>>>> radiusd.conf[1792] Failed to parse authorize section. >>>>>>>>>>>> zsh: exit 1 freeradius -X >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>> You can get it from here: >>>>>>>>>>>>> http://frad-cdrtool.sourceforge.net/rlm_digest.c >>>>>>>>>>>>> >>>>>>>>>>>>> DanB >>>>>>>>>>>>> >>>>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>> I haven't found this patch on http://sourceforge.net/projects/frad-cdrtool... >>>>>>>>>>>>>> Where did you found it? >>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>> >>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>> Marc, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I don't have this problem. >>>>>>>>>>>>>>> I have compiled freeradius with rlm_python from sources. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> For problems with freeradius, I think the best would be to grab some >>>>>>>>>>>>>>> support directly from their mailing list, since they are pretty >>>>>>>>>>>>>>> helpful. Don't forget about patching also rlm_digest in order to >>>>>>>>>>>>>>> sanitize the params coming from OpenSER in the authorization phase and >>>>>>>>>>>>>>> not the authentication one. They promised for future releases to >>>>>>>>>>>>>>> include this patch inside the distribution. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>> DanB >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>>>> I have corrected it: mea culpa >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> But now I have a real trouble: >>>>>>>>>>>>>>>> When I start freeradius, it said that it can't find rlm_python.so, but this is normal because we added --with-static-modules=python >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Did you have thos problem? >>>>>>>>>>>>>>>> Do you know how to correct it? >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> rlm_sql (sql): Connected new DB handle, #4 >>>>>>>>>>>>>>>> Module: Instantiated sql (sql) >>>>>>>>>>>>>>>> radiusd.conf[544] Failed to link to module 'rlm_python': rlm_python.so: cannot open shared object file: No such file or directory >>>>>>>>>>>>>>>> radiusd.conf[1884] Unknown module "python". >>>>>>>>>>>>>>>> radiusd.conf[1792] Failed to parse authorize section. >>>>>>>>>>>>>>>> zsh: exit 1 freeradius -X >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>>>> Hi Marc, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> it looks like you are getting some problems related to stored >>>>>>>>>>>>>>>>> procedure in your mysql database. Did u install also the radius patch >>>>>>>>>>>>>>>>> recommended by AG-Projects in order to work properly with stored >>>>>>>>>>>>>>>>> procedures? On the sql side I cannot help you too much since I am >>>>>>>>>>>>>>>>> using still the normal sql queries without stored procedures. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> DanB >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>>>>>> I have followed your advice, Freeradius is recompiled with rlm_python, >>>>>>>>>>>>>>>>>> byt know, rlm_sql seems to encountered troubles >>>>>>>>>>>>>>>>>> like : >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> rlm_sql (sql): Reserving sql socket id: 2 >>>>>>>>>>>>>>>>>> rlm_sql_mysql: MYSQL check_error: 1312 received >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Any idea of how to repair this? >>>>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I have added this in my debian/rules file: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> modulelist=krb5 ldap sql_mysql sql_iodbc python >>>>>>>>>>>>>>>>>> ... >>>>>>>>>>>>>>>>>> ... >>>>>>>>>>>>>>>>>> ./configure \ >>>>>>>>>>>>>>>>>> $(confflags) \ >>>>>>>>>>>>>>>>>> --prefix=/usr \ >>>>>>>>>>>>>>>>>> ... \ >>>>>>>>>>>>>>>>>> --with-static-modules=python >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Here is my freeradius debug: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail-20070822 >>>>>>>>>>>>>>>>>> modcall[accounting]: module "detail" returns ok for request 5 >>>>>>>>>>>>>>>>>> modcall[accounting]: module "unix" returns noop for request 5 >>>>>>>>>>>>>>>>>> radius_xlat: '/var/log/freeradius/radutmp' >>>>>>>>>>>>>>>>>> radius_xlat: '' >>>>>>>>>>>>>>>>>> modcall[accounting]: module "radutmp" returns ok for request 5 >>>>>>>>>>>>>>>>>> radius_xlat: '' >>>>>>>>>>>>>>>>>> radius_xlat: ' CALL insert_radacct_record( 'radius', '52f74a-c0a80101-0-4(a)192.168.95.79', >>>>>>>>>>>>>>>>>> '36afb36cd5c82c34', 'sip:101@sd-7501.dedibox.fr:5060=3Buser=3Dphone', >>>>>>>>>>>>>>>>>> 'sip:101@sd-7501.dedibox.fr:5060=3Buser=3Dphone', '88.191.45.91', '5060', '2007-08-22 13:59:25', >>>>>>>>>>>>>>>>>> '0', '0', '0', '0', '', '', '200', >>>>>>>>>>>>>>>>>> 'Sip-Session', '', '', '0', '0', '200', >>>>>>>>>>>>>>>>>> 'INVITE', '', 'c0a80101-5766ea7', 'c0a80101-4e8244', '', '', >>>>>>>>>>>>>>>>>> '', 'sip:0033677832974@sd-7501.dedibox.fr:5060=3Buser=3Dphone', '', '' )' >>>>>>>>>>>>>>>>>> rlm_sql (sql): Reserving sql socket id: 2 >>>>>>>>>>>>>>>>>> rlm_sql_mysql: MYSQL check_error: 1312 received >>>>>>>>>>>>>>>>>> rlm_sql (sql): Couldn't insert SQL accounting START record - PROCEDURE radius.insert_radacct_record can't return a result set in the given context >>>>>>>>>>>>>>>>>> radius_xlat: '' >>>>>>>>>>>>>>>>>> rlm_sql (sql): Released sql socket id: 2 >>>>>>>>>>>>>>>>>> modcall[accounting]: module "sql" returns ok for request 5 >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>>>>>> Marc, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> I would suggest as first step reading about how prepaid works in >>>>>>>>>>>>>>>>>>> CDRTool. (see PREPAID.txt in doc folder). >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> I personally use freeradius-cdrtool connector >>>>>>>>>>>>>>>>>>> (sourceforge.net/projects/frad-cdrtool) which I have written in >>>>>>>>>>>>>>>>>>> python and which needs rlm_python compiled into freeradius server. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Have a look on all the info and let me know if u need any additional. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>>> DanB >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> On 8/20/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>>>>>>>> No... >>>>>>>>>>>>>>>>>>>> Is it possible to do it with openser or is it compulsory to use asterisk? >>>>>>>>>>>>>>>>>>>> What do you use? >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>>>>>>>> Hi there Marc, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> are you using any application which locks, unlocks the prepaid >>>>>>>>>>>>>>>>>>>>> accounts, and instructs CDRTool to update the user's balance? Are you >>>>>>>>>>>>>>>>>>>>> aware that CDRTool uses separate applications for prepaid and postpaid >>>>>>>>>>>>>>>>>>>>> accounts? >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> DanB >>>>>>>>> _______________________________________________ >>>>>>>>> Users mailing list >>>>>>>>> Users(a)openser.org >>>>>>>>> http://openser.org/cgi-bin/mailman/listinfo/users

1 0

Add Pool-Name attribute to request
by Leo Eraly 23 Aug '07

23 Aug '07

Hi, Is it possible with freeradius (1.1.7) to do the following: Pseudo code: if NAS-IP-Address == 1.1.1.1 add Pool-Name: foo if NAS-IP-Address = 2.2.2.2 add Pool-Name: bar ... And in mysql I have my 2 ip_pools configured (foo and bar) from which the machines should get an appropriate ip. So I want to add an extra attribute (which is used for ip pooling) depending on the NAS from which the request originates. My config should be something like this: I assume this searchfor is not valid. attr_rewrite add_my_pool { attribute = Pool-Name searchin = packet searchfor = "NAS-IP-Address = 1.1.1.1" replacewith = "test_pool" new_attribute = yes max_matches = 1 } post-auth { add_my_pool sqlippool } Is this possible? Kind regards, Leo -- Leo Eraly <leo at unstable dot be>

2 1

Re: problem installing RLM-Python installation in 1.7 (Alan DeKok)
by UriCALL Support 23 Aug '07

23 Aug '07

Hi there Alan, and thank you for your reply. I got the install now successfully without further issues. Regarding the version, I hope you understood me, since I am not really an accountant ;-). Will be more careful with numbers in the future. Got another question now that I have your attention. A while back we discussed some changes which would help me and other users in rlm_digest (moving the part commented as "Loop through the Digest-Attributes, sanity checking them." from authenticate function into authorize one), without, at least from my limited point of view, influencing anything wrong. You agreed them and decided that will be implemented into 2.0. I have checked "freeradius-server-2.0.0-pre1" package but still not there. Do u still intend to make the change available, or not anymore? Ta, DanB

2 1

problem installing RLM-Python installation in 1.7
by UriCALL Support 23 Aug '07

23 Aug '07

Dear All, I grabbed today the sources for 1.7 distribution and wanted to compile the rlm_python also in, but, as opposite to 1.6 version, it looks like some libraries are not longer included, here are the errors: """ host1:/usr/local/src/freeradius/freeradius-1.1.7/src/modules/rlm_python# make /usr/local/src/freeradius/freeradius-1.1.7/libtool --mode=link gcc -release 1.1.7 \ -module -static -o rlm_python.la \ -rpath /usr/local/lib rlm_python.lo rlm_python.c /usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la \ -L/usr/lib/python2.4/config -lpthread -ldl -lutil -lpython2.4 -lm -lnsl -lresolv -lpthread libtool: link: cannot find the library `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la' or unhandled argument `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la' """ Can anybody provide any solution, except using libradius.la from 1.6 for 1.7 version, or is anything changed and I missed that? Thank you in advance, DanB

5 6

Realm question
by Jeff Crowe 23 Aug '07

23 Aug '07

Hi all, Sorry if this question has been answered (I did search the archives and google to no avail): I have subscribers that connect with 2 realms as the prefix. How do I strip both and just authenticate locally? IE: username: realm1/realm2/username or realm1/realm3/username. Realm1 will always be present followed by either realm2 or realm3 (no others). Thanks, Jeff

2 1

rlm_preprocess: Error reading /usr/local/etc/raddb/huntgroups
by David E. Meier 23 Aug '07

23 Aug '07

Hi Folks, I'am trying to get FreeRadius running on FreeBSD 6.2. I followed the tutorial from chillispot.org (http://www.chillispot.org/forum/viewtopic.php?t=1431) When I try to start FreeRadius I receive this error: # /usr/local/sbin/radiusd -X : Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no rlm_preprocess: Error reading /usr/local/etc/raddb/huntgroups radiusd.conf[1018]: preprocess: Module instantiation failed. radiusd.conf[1798] Unknown module "preprocess". radiusd.conf[1788] Failed to parse authorize section. # ls -al /usr/local/etc/raddb drw-r--r-- 3 root wheel 1024 Jun 4 15:14 . drwxr-xr-x 10 root wheel 512 Jun 4 12:02 .. : -rw-r--r-- 1 root wheel 1603 Jun 4 15:14 huntgroups So I think the file should be readable by anyone. The file contains comments only anyway. Searching Google does not point out helpful information - I also tried with an empty file with no luck. I also noticed when commenting out the huntgroups file in radiusd.conf has no effect and radiusd exits with the same error. Any thoughts on this? Thanks. David

2 1