January 2008 - Freeradius-Users - lists.freeradius.org

eap-mschapv2
by Indira Keesara 15 Jan '08

15 Jan '08

I am using freeradius to test the eap-mschapv2. According to specs To the access-challenge reply radius should sent a access-success with the mppe keys. But what I see is to the reply radius is sending the access-challenge request again with mschap-success similar to the Eap-tls. I am not sure if I missed any configuration.

4 6

RE: Help Needed Please freeradius traffic limiting
by hamid benane 15 Jan '08

15 Jan '08

hello, i need help to authenticate win-xp client throw cisco3560 on freeradius-1.1.1. i use EAP-PEAP and my certificate is good. on wireless its work nice but not on lan wired area. i try tou authenticate user with simple password thanks _________________________________________________________________

2 1

eap-mschapv2
by Indira Keesara 15 Jan '08

15 Jan '08

Does freeradius support eap-mschapv2 ?

2 2

Help Needed Please freeradius traffic limiting
by Keith Dovale 15 Jan '08

15 Jan '08

FFs, Lol Hi List, Ok I need to do this and if someone could help I would appreciate it as I am new to this 1. I Need to limit users by traffic and NOT session time (I setup the monthly counters to check but the counters cannot go beyond 2,148,000,000 and they fail I think this is due to the counters using the type as integer. If I can get this value to go beyond this this then sorts out my problem based on traffic.) 2. I need to execute a query to check the clients total traffic usage and compare it to their limit, if they have gone beyond their limit I need to be able to execute a disconnect. (The disconnect side I have got working manually, so if there is a way to trigger / execute a program on a interim update which will force a discon that will help, else if this can be done another way please let me know. 3. Any recommendations on how to go about the above issues which will do this in an easier way please let me know. Regards Keith Dovale <http://www.hostworx.co.za/> LogoNBG

1 0

Freeradius-client in pppd
by Damjan 15 Jan '08

15 Jan '08

I need the feature to specify the local ip address for the radius requests in PPPd and I see that freeradius-client-1.1.5 has that feature. Is there any patch to make pppd use this radius client instead of it's own copy of the old radiusclient? -- damjan | дамјан This is my jabber ID --> damjan(a)bagra.net.mk -- not my mail address, it's a Jabber ID --^ :)

3 6

Switch from Static IP to IPpool
by Grant Wright 15 Jan '08

15 Jan '08

Hi there Just a question, is this scenario possible from within freeRADIUS or should I just write a script to achieve it. I basically assign the connecting client a static IP address using the Framed-IP-Address attribute. Once he has reached his threshold (Receive-Limit) and gets disconnected I would like to assign him an IP out of a pool. Is there a fall back option within freeRadius that supports this type of query? Thanks

2 1

Mysql error
by Pablo Lucchetti 15 Jan '08

15 Jan '08

Hi, I'm working with Freeradius in production enviroment (start up), at this time is working with only two users, they can connect whitout problems and all seems to work fine but looking into radius.log i found this messages: radius:/usr/local/var/log/radius# tail radius.log -f Mon Jan 14 16:01:37 2008 : Error: rlm_sql (sql): Couldn't insert SQL accounting ALIVE record - Unknown column 'XAscendSessionSvrKey' in 'field list' Mon Jan 14 16:01:37 2008 : Error: rlm_sql_mysql: Cannot store result Mon Jan 14 16:01:37 2008 : Error: rlm_sql_mysql: MySQL error 'Unknown column 'XAscendSessionSvrKey' in 'field list'' Mon Jan 14 16:01:37 2008 : Error: rlm_sql_mysql: Cannot store result Mon Jan 14 16:01:37 2008 : Error: rlm_sql_mysql: MySQL error 'Unknown column 'XAscendSessionSvrKey' in 'field list'' Mon Jan 14 16:01:38 2008 : Error: rlm_sql (sql): Couldn't insert SQL accounting ALIVE record - Unknown column 'XAscendSessionSvrKey' in 'field list' Mon Jan 14 16:01:38 2008 : Error: rlm_sql_mysql: Cannot store result Mon Jan 14 16:01:38 2008 : Error: rlm_sql_mysql: MySQL error 'Unknown column 'XAscendSessionSvrKey' in 'field list'' Mon Jan 14 16:01:38 2008 : Error: rlm_sql_mysql: Cannot store result Mon Jan 14 16:01:38 2008 : Error: rlm_sql_mysql: MySQL error 'Unknown column 'XAscendSessionSvrKey' in 'field list'' Any help please? Thanks in advance, Pablo

3 6

Python and return attributes in `postproxy`
by Mike O'Connor 15 Jan '08

15 Jan '08

Hi Guys It would seem as if the rlm_python does not provide the returned attributes from the proxy, this happens in both a patched version of 1.1.7 and 2.0.0. Code: def postproxy(params): log.log('RLM_PYTHON: handling Post Proxy request...', log.VERBOSE) pprint.pprint(params) returnval = send_message('postproxy', params, False) return lib.radiusd.RLM_MODULE_OK Result: +- entering group post-proxy 2008-01-14T13:14:09.412107: Verbose: RLM_PYTHON: handling Post Proxy request... (('Framed-Protocol', 'PPP'), ('User-Name', '"matt(a)dsl.*"'), ('User-Password', '"xxxxx"'), ('Service-Type', 'Framed-User'), ('NAS-IP-Address', '118.xx.xx.xx'), ('Realm', '"dsl.*"'), ++[python] returns ok Command line test: Sending Access-Request of id 39 to 118.67.209.51 port 1812 Framed-Protocol = PPP User-Name = "matt(a)dsl.*" User-Password = "xxxxx" Service-Type = Framed-User NAS-IP-Address = 118.xx.xx.xx rad_recv: Access-Accept packet from host 118.67.209.51 port 1812, id=39, length=44 Port-Limit = 1 Framed-Protocol = PPP Service-Type = Framed-User Framed-IP-Address = 118.xx.xx.21

2 3

Attribute Called-Station-Id not working
by PD 14 Jan '08

14 Jan '08

Hi there, Currently we running FR for our hotspot with multipe Chillispot NAS. We also create demo accounts for each nas, means demo1 should only work for nas1 and demo2 should only work for nas2. For the above purpose, we put attribute Called-Station-Id for each demo account within radcheck table. The problem found, the account demo1 still be able to use at nas2 vice versa. Here is our radcheck table: mysql> select * from radcheck where username='demo'; +----+-----------+-------------------+----+-------------------+ | id | UserName | Attribute | op | Value | +----+-----------+-------------------+----+-------------------+ | 40 | demo | Auth-Type | := | Local | | 41 | demo | Password | == | password | | 42 | demo | Called-Station-Id | := | 00-1A-70-XX-XX-XX | +----+-----------+-------------------+----+-------------------+ 3 rows in set (0.00 sec) We put NAS mac address for Called-Station-Id since radacct also record the above mac address at column Called-Station-Id. Perhaps, we miss something at somewhere... Any suggestion are welcome. Regards Paul

2 3

Verifying framed-ip-address using unlang
by Pshem Kowalczyk 14 Jan '08

14 Jan '08

Hi, Is it possible to use unlang to verify whether framed-ip-address is in the right range or not? We would like to use it on our wholesale proxies. Wholesale customers of ours are allowed to allocate IPs to their customers, but only from certain ranges. Will a normal comparison (> <) work with IP addresses? Or do I have to use one of 'real' languages for that? kind regards Pshem

3 3