August 2008 - Freeradius-Users - lists.freeradius.org

SQL module and Oracle Stored Procedures
by andreiv 08 Aug '08

08 Aug '08

Hi all, i have a question: is there a problem if instead of INSERT, SELECT or UPDATE I use Oracle stored procedures with FreeRadius 2.0.5? I haven't tested this because the procedure isn't ready yet. I searched the other posts and found similarities of my question only for FreeRadius 1.x.x which is configured differently. Thanks -- View this message in context: http://www.nabble.com/SQL-module-and-Oracle-Stored-Procedures-tp18887408p18… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

EAP-SIM and EAP-AKA fast-reauth support
by Geoffroy Arnoud 08 Aug '08

08 Aug '08

Hi all, I have a question about EAP-SIM and EAP-AKA authentication. Is fast-reauthentication supported (in eap or eap2 module)? Thanks in advance for your answers. Geoff. _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

3 3

Re: Login incorrect (Home Server says so)... - But why?
by uni＠christiankraus.de 08 Aug '08

08 Aug '08

well, problem is solved. The IP for the my realm was wrong. Now everything works without any problem

1 0

2.0.5 on Solaris
by Rafiqul Ahsan 07 Aug '08

07 Aug '08

Can anyone suggest the documents/wiki for installation steps for Freeradius 2.0.5 on Solaris ? -- Rafiqul Ahsan

2 5

Whether the FreeRADIUS supports switch 3Com 5500G-EI ?
by Gennadiy Redko 07 Aug '08

07 Aug '08

Hi,all. I wish to dispose authorization on the switch with the dynamic isolation VID on the port on the protocol of 802.1x on RADIUS Server. Stand: the switch of 3Com 5500-EI (Software Of version of 3Com OS Of v3.02.03s56), computer from OS Windows XP (SP2), RHEL 5 update 1, freeradius-1.1.3-1.2.el5,kernel 2.6.18-53.el5 #1 SMP. Technical support of the 3Com has advised to use here this document for adjustment: http://www.3com.com/products/en_US/result.jsp?selected=2&sort=effdt&order=d… DUA1725-0BAA02.pdf , page 415 The authorization to FreeRadius is passed at the given moment, but to port is not allotted necessary VID. FreeRADIUS does not support 3Com switches ?

5 25

Slow Starting..
by Cris Boisvert 07 Aug '08

07 Aug '08

Been using Freeradius for years.. Quad core Xeon server New Server setup UBUNTU 8.04 Mysql 5.0.51 Running newest version of freeradius Have dual mysql databases running .. One has all the user data and the other gets all the accounting. The server takes about 20-30 seconds to start.. Where on the previous servers old P3 500mhz it took only 2-3 seconds.. It works and responds perfectly fine.. But just takes a while to finish reading the configs.. Running debugging it loads. To the point where it says --------------Cut--------------------------------------- main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients ---------------------------end Cut------------------------------------ Then after about 30 seconds blasts out the rest of the normal load.. Attaching to all the databases etc..etc... Anyone have any Ideas what this may be waiting around for? Thanx

4 5

How to assign default gatway?
by Xiaochen Jing 07 Aug '08

07 Aug '08

Hello all, Is that possible to assign users a default gateway while allocating dynamic IP addresses from IP pool? Thank you

2 1

Does Avenda use freeradius?
by paul smith 07 Aug '08

07 Aug '08

Hi, I've been looking at getting an appliance from a company called Avenda Systems (www.avendasystems.com) Its a RADIUS appliance with a nice GUI, but I think FreeRADIUS offers all the features that it does. Does anyone have any experience of it? Or a comparison between it and FreeRADIUS? Also I think it may be FreeRADIUS underneath, does anyone know if that is the case? thanks, paul

2 5

Howto log wrong-password ( and other attempts ) to radacct ( sql_log ? )
by S Adrian 07 Aug '08

07 Aug '08

Hi again everybody Ok, it seems my freeradius only wants to log access-accept stuff to sql .. but when I login with wrong password .. it doesn't insert it in sql .. anyone can tell what do I need to have in what section please? Thanks in advance, Adrian.

2 1

Freeradius does not assign IP from main_pool
by Xiaochen Jing 07 Aug '08

07 Aug '08

Hello all, I want to use Freeradius to assign IP addresses to clients from main_pool. After all set up (I think), L2tp tunnel is established but user cannot get an IP from Freeradius. From the Reply message, I see no IP is replied to user. Could anyone take a look at the debug and give me a hint? Debug: radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } [/usr/local/etc/raddb/users]:107 WARNING! Check item "Group" found in reply i tem list for user "testuser". This attribute MUST go on the first line with th e other check items [/usr/local/etc/raddb/users]:107 WARNING! Check item "Pool-Name" found in reply item list for user "testuser". This attribute MUST go on the first line with the other check items Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NA S-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/det ail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Linked to module rlm_ippool Module: Instantiating main_pool ippool main_pool { session-db = "/usr/local/etc/raddb/db.ippool" ip-index = "/usr/local/etc/raddb/db.ipindex" key = "%{NAS-IP-Address} %{NAS-Port}" range-start = 192.168.1.1 range-stop = 192.168.3.254 netmask = 255.255.255.0 cache-size = 800 override = yes maximum-timeout = 0 } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Ready to process requests. Here is the process: rad_recv: Access-Request packet from host 127.0.0.1 port 32915, id=0, length=145 User-Name = "testuser" User-Password = "testing" NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "atm 9/0.438:13.172#184577265#atm xyz#speed:UBR#ppp oe 00:1c:23:b6:d3:45#" NAS-IP-Address = 0.0.0.0 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry testuser at line 107 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "testing" rlm_pap: Using clear text password "testing" rlm_pap: User authenticated successfully ++[pap] returns ok Login OK: [testuser/testing] (from client localhost port 1 cli atm 9/0.438:13.17 2#184577265#atm xyz#speed:UBR#pppoe 00:1c:23:b6:d3:45#) +- entering group post-auth rlm_ippool: Could not find Pool-Name attribute. ++[main_pool] returns noop Sending Access-Accept of id 0 to 127.0.0.1 port 32915 Service-Type == Framed-User Framed-Protocol == PPP Finished request 0. Going to the next request Waking up in 0.9 seconds. Waking up in 3.9 seconds. Cleaning up request 0 ID 0 with timestamp +283 Ready to process requests.

2 3