June 2008 - Freeradius-Users - lists.freeradius.org

MySQL connection over SSL possible?
by Anders Holm 23 Jun '08

23 Jun '08

Hi folks. I'm wondering, would it be possible to encrypt the connection to the backend data store (it being MySQL) using SSL? MySQL would have support for this, but I sppear to not find any documentation for Freeradius on how to set that side up for it .. Any pointers appreciated .. //anders

7 20

Re: Re: generating ACCESS-CHALLENGE from radius server
by David Mitton 23 Jun '08

23 Jun '08

1 0

Bind socket?
by ELOM ETSE 23 Jun '08

23 Jun '08

While i was resolving the problem of lib rlm_exec, i meet whith this another problem. ERROR: Failed to open socket: cannot bind socket: Cannot assign requested address /usr/local/etc/raddb/radiusd.conf[236]: Error binding to port for 192.168.2.15 port 1812 I try to get a suitable answer on web but unfortunately i did not. Can you help me please? _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

2 1

Problème avec le démon radiusd
by ELOM ETSE 23 Jun '08

23 Jun '08

Bonjour, Je suis en stage pour la rédaction de mon mémoire de fin de formation. Je veux mettre en place un hotspot wifi. Je suis arrivé à télécharger le démon radiusd avec les commandes: >cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login CVS password: anoncvs > cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout radiusd Puis >cd radiusd >./configure Cela se déroule avec quelques avertissements. En lançant >make J'obtiens à la fin Making all in main... make[4]: entrant dans le répertoire « /radiusd/src/main » /radiusd/libtool --mode=link gcc -export-dynamic -dlopen self \ -o radiusd acct.lo auth.lo client.lo conffile.lo crypt.lo exec.lo files.lo listen.lo log.lo mainconfig.lo modules.lo modcall.lo radiusd.lo radius_snmp.lo stats.lo session.lo smux.lo threads.lo util.lo valuepair.lo version.lo xlat.lo event.lo realms.lo evaluate.lo vmps.lo detail.lo \ /radiusd/src/lib/libfreeradius-radius.la -lnsl -lresolv -lpthread \ -lcrypt -lltdl -lcrypto -lssl -lcrypto libtool: link: `radius_snmp.lo' is not a valid libtool object make[4]: *** [radiusd] Erreur 1 make[4]: quittant le répertoire « /radiusd/src/main » make[3]: *** [common] Erreur 2 make[3]: quittant le répertoire « /radiusd/src » make[2]: *** [all] Erreur 2 make[2]: quittant le répertoire « /radiusd/src » make[1]: *** [common] Erreur 2 make[1]: quittant le répertoire « /radiusd » make: *** [all] Erreur 2 Aidez moi à trancher ce problème! SVP _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

2 1

Problems running FreeRadius 1.1.7 on Linux
by Raghu Narasimhan 23 Jun '08

23 Jun '08

Linux machine. Installed FreeRadius 1.1.7 Problems running it. This is what i get when i run - radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary *E**rrors reading dictionary: dict_init: Dictionary "/usr/local/share/freeradius/dictionary" is not a regular file Errors reading radiusd.conf** * -- Yours Truly Raghu Narasimhan +91 9886 356 775 raghu.united(a)gmail.com http://raghustwocents.blogspot.com

3 2

generating ACCESS-CHALLENGE from radius server
by Sudarshan Soma 23 Jun '08

23 Jun '08

Hi , I am planning to simulate ACCESS-CHALLENGE to authenticate the client which i plan to add it in pam-radius module (pam_radius-1.3.17) with out using radius server. Iam still reading the docs, incase if someone helps me with the following queries, it would be really helpful. I learned that the rlm_otp has the implementation of the same. Could anyone please let me know these: - any radius client which lets radius server to ask for ACCESS-CHALLENGE -- (echo 'User-Name="userX"'; echo 'CHAP-Password="secretpass"') | /usr/local/bin/radclient -x 192.168.11.94:1812 auth testing123 is not helping - how do i test rlm_otp module, any radius client program.. Regards, Pavan

1 1

Redundancy duplicate ip address
by Asaad 23 Jun '08

23 Jun '08

I use LNS with freeradius, and I have two separate radius servers , the LNS support primary and secondary radius the server The radius server use standalone database server to auth and accut And using rlm_ippool files to handle and stored assigned IPS If the enabled the secondary radius server in this case, may it will assign duplicate IP Address, that primary radius was assigned them before Please any hint to fix this problem or any better scenario Thanks _________________________________________________________________ Earn cashback on your purchases with Live Search - the search that pays you back! http://search.live.com/cashback/?&pkw=form=MIJAAF/publ=HMTGL/crea=earncashb…

2 1

FreeRADIUS, SLES10, Novell and Cisco Wireless Controller (4400)
by Asplund Rickard 23 Jun '08

23 Jun '08

Hi, I have setup a FreeRadius server on a SLES 10 in an Novell environment. The LDAP authentication between the SLES and NDS works ok. The mission is to get the SLES, Cisco Wireless Controller, NDS to work all the way. I have followed alot of guides and wikis but got stuck on the way, i hope there is a simple way to solve my problem =).. See below. rlm_eap_peap: Tunneled data is valid. rlm_eap_peap: Had sent TLV failure, rejecting. rlm_eap: Handler failed in EAP/peap rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 7 modcall: leaving group authenticate (returns invalid) for request 7 auth: Failed to validate the user. If i Dont use MS-CHAP and PEAP everything works great. Above is with MS-CHAP and PEAP enabled. Best regards Rickard Asplund Med vänliga hälsningar ______________________ Rickard Asplund Solution Competence Group, SCG - Security http://www.ateasecurity.com rickard.asplund(a)atea.com<mailto:namn.namnsson@atea.com> Atea Stora Åvägen 19A 436 34 Askim Växelnr: 031-744 51 00 Faxnr: 031-744 51 01 [cid:image001.gif@01C8D525.7552DC50] Atea är Sveriges ledande obundna leverantör av it-infrastruktur. Med 1 000 medarbetare på 25 orter från Malmö i söder till Luleå i norr, fortsätter vi att göra it-vardagen enklare för våra kunder.

2 1

radacct/radutmp out of sync
by Tuc at T-B-O-H.NET 22 Jun '08

22 Jun '08

Hi, What are some possible causes in 2.0.4 for the radacct (MySQL) and radutmp (That feeds radwho) to get out of sync. It seems almost 100% of the time, radwho/radutmp isn't showing the user, while radacct has no acctstoptime. Thanks, Tuc

3 6

Code fix for next release
by Tuc at T-B-O-H.NET 22 Jun '08

22 Jun '08

Hi, Can Bug 517 (Patch for radwho to correct time output and IP address outpu) be included in the next release? I've used the supplied patch and find it works quite well. Would be nice not to have to repatch on the next release. Thanks, Tuc

2 2