September 2008 - Freeradius-Users - lists.freeradius.org

autentication against active directory does not work
by luis a 22 Sep '08

22 Sep '08

hey there i have a trouble in my freeradius im trying to autenticate user to active directory there is my config at http://pastebin.ca/1205169 any help ? regards

5 8

another 2.1.0 compile error
by Greg Woods 22 Sep '08

22 Sep '08

I am running on CentOS 5.2 on an x86_64 architecture. I note a previous report for a similar system here on the list, but this is not the same error. That one was an error compiling radmin, this is an error compiling the server: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/local/src/freeradius-server-2.1.0/src -DHOSTINFO= \"x86_64-unknown-linux-gnu\" -DRADIUSD_VERSION=\"2.1.0\" -DOPENSSL_NO_KRB5 -c listen.c -fPIC -DPIC -o .libs/listen.o listen.c: In function 'client_listener_find': listen.c:189: warning: assignment discards qualifiers from pointer target type In file included from command.c:26, from listen.c:1046: /local/src/freeradius-server-2.1.0/src/freeradius-devel/modpriv.h:9:18: error: ltdl.h: No such file or directory In file included from command.c:26, from listen.c:1046: /local/src/freeradius-server-2.1.0/src/freeradius-devel/modpriv.h: At top level: /local/src/freeradius-server-2.1.0/src/freeradius-devel/modpriv.h:30: error: expected specifier-qualifier-list before 'lt_dlhandle' gmake[4]: *** [listen.lo] Error 1 gmake[4]: Leaving directory `/local/src/freeradius-server-2.1.0/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/local/src/freeradius-server-2.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/local/src/freeradius-server-2.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/local/src/freeradius-server-2.1.0' make: *** [all] Error 2 I realize this isn't a complete enough report to fully debug this, I'm just curious to know if anyone else has seen this one or whether it's something obvious. I also know that the ltdl.h file is actually there in the libltdl subdirectory, so I can probably figure out how to get around this if I have to. --Greg

9 39

mod_radius error
by Oguzhan Kayhan 22 Sep '08

22 Sep '08

Hello I am trying to use mod_radius on ubuntu. But i am getting error: Invalid command 'AddModule', perhaps misspelled or defined by a module not included in the server configuration. When i comment out the line with AddModule from httpd.conf i got the following error message. Invalid command 'AuthAuthoritative', perhaps misspelled or defined by a module not included in the server configuration. These are the enabled modules on apache alias.conf authn_file.load authz_host.load cgi.load mime.conf php5.conf ssl.conf alias.load auth_radius.load authz_user.load dir.conf mime.load php5.load ssl.load auth_basic.load authz_default.load autoindex.conf dir.load negotiation.conf setenvif.conf status.conf auth_mysql.load authz_groupfile.load autoindex.load env.load negotiation.load setenvif.load status.load And this is my apache version. Server version: Apache/2.2.8 (Ubuntu) Server built: Jun 25 2008 13:54:13

2 1

if not found proxy
by Twanny Azzopardi 21 Sep '08

21 Sep '08

Hello list, I didn't post the output of the server for I don't know how I am to accomplish this. I want to authenticate a user, user@realm on the local server, if not found proxied on to another server. What are then entries I want to make in proxy.conf? Regards, Twanny. _________________________________________________________________ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx

1 0

Compilinh in Ubuntu Hardy and where can i add an realm?
by jose caceres 21 Sep '08

21 Sep '08

Hello, I am trying to compile freeradius in ubuntu hardy, for using it to make the authetication an accounting of an equipment similar to cisco authentication, the first thing i notice is that apart of the build-essecial pakage there is also needed to get libltdl3-dev. After the compilation and the install I tried to run freeradius, with radiusd -X, but i get the next message: # radiusd -X radiusd: error while loading shared libraries: libfreeradius-radius-2.1.0.so: cannot open shared object file: No such file or directory I solver this by using ldconfig. now i have created the client and defined a user in a file just to start testing the registration. but when i try to make the registration i found some error because it does not detect the real of the nas. I searched arround i don't know where can i add that suffix: this is the way i declared the client at the end of clients.conf client 200.X.X.X { secret = sharedpassword shortname = 200.X.X.X } and the user, at the end of users file test Auth-Type == "digest", User-Password = "test" Reply-Message = "Hello, test with digest", Class = "prueba" I also tried to put the word digest without double quotes but i received an indication of the debud saying that was wrong, so i putted the quotes and the debug mode started well. But when i sent a request i got the next errors: rad_recv: Access-Request packet from host 200.X.X.X port 38573, id=84, length=198 NAS-Identifier = "my.telestart.cl" Digest-Attributes = 0x030a5245474953544552 Digest-Attributes = 0x06054d4435 Digest-Attributes = 0x022a30623463373838366463633265393735343763343839616338363163616530376639646634633861 Digest-Attributes = 0x0a0674657374 User-Name = "test(a)200.X.X.X" Digest-Attributes = 0x04127369703a3230302e362e3131352e3235 Digest-Response = "5d72ee0f0579e1c11a75d2717ea2bd7f" Digest-Attributes = 0x010e3230302e362e3131352e3235 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [digest] Adding Auth-Type = DIGEST ++[digest] returns ok [suffix] Looking up realm "200.X.X.X" for User-Name = "test(a)200.X.X.X" [suffix] No such realm "200.X.X.X" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP I searched arround but couldn't fine where i need to set up the suffing, please i know there is something i am missing, so can anybody please tellme where can i define the realms. thanks -- Josexato

2 1

2.1.1-pre
by Alan DeKok 21 Sep '08

21 Sep '08

I've made a number of changes to fix issues in 2.1.0. Can some people please try git head? See git.freeradius.org for how to get a "tar" file. If there are no complaints, we can issue 2.1.1 tomorrow. The new command tool "radmin" is starting to get insane. As in "insanely useful". Alan DeKok.

6 21

Re: MySQL not in the default port
by Marcelo Freitas 20 Sep '08

20 Sep '08

Thanks man, it worked ... Sorry, I hadn't found any docs about this directive ... ----- Original Message ----- From: a.l.m.buxey(a)lboro.ac.uk Sent: Fri, September 19, 2008 2:09 Subject:Re: MySQL not in the default port Hi, > Hello, > > I had to install my MySQL not in the default port (3306), and I'm not able to connect to the server ... I tried everything in the sql.conf like localhost:5999, my.IP:5999, hostname, etc and nothing makes it to connect ... Is there any (right) way to specify a port to connect ? is it possible ? > > P.S: I tried to make FreeRadius to connect to an outside MySQL server (standard port) and it connected without problems ... in sql.conf right after the hostname, add a port option. hostname = "nameofhost" port = "5999" alan ----- End of original message -----

2 1

proxying problem
by Twanny Azzopardi 19 Sep '08

19 Sep '08

I want to authenticate a user, if he is not found in 192.168.123.13, ( localhost ), he'll be proxied to 192.168.123.9 I'm putting this in proxy.conf, but it's not even sending a request to 192.168.123.9! Any ideas? # A realm entry with an optional fail-over realm. A request from # "user(a)isp2.com" will be sent to radius.isp2.com as "user(a)isp2.com", # because the 'nostrip' directive is specified for this realm. # realm waza { type = radius authhost = 192.168.5.13:1812 accthost = 192.168.5.13:1813 secret = testing123 ldflag = fail_over # nostrip } # # The fail-over realm for isp2.com # realm waza { type = radius authhost = 192.168.5.9:1812 accthost = 192.168.5.9:1913 secret = testing123 ldflag = fail_over # nostrip } Regard, Twanny. _________________________________________________________________ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx

3 2

CHAP auth and Cleartext-Password
by Dagnis Zemturis 19 Sep '08

19 Sep '08

Hello! I have problems with CHAP and Cleartext-Password. I'm running freeradius.net v.2.1 on SUSE 10 server. I've configured following user in /raddb/users at the end of text file: ===================================================================================== # # Last default: shell on the local terminal server. # # # DEFAULT # Service-Type = Administrative-User #=======================my users======================== 0014853077be Cleartext-Password := "0014853077be" #00148518fe47 User-Password == "00148518fe47" #=======================My users======================== # On no match, the user is denied access. "users" 218L, 6786C ===================================================================================== When I'm trying to make mac-auth from the HP switch (running radiusd in debug mode), I recieve following error: [chap] Cleartext-Password is required for authentication Here is part of debug info: ===================================================================================== Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. ................................... Calling-Station-Id = "00-14-85-30-77-be" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" CHAP-Password = 0x1f08e1d048be8f22c9435f00a4a0095cb6 Message-Authenticator = XXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXXX Found Auth-Type = CHAP +- entering group CHAP {...} [chap] login attempt by "0014853077be" with CHAP password [chap] Cleartext-Password is required for authentication ++[chap] returns invalid Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} expand: %{User-Name} -> 0014853077be attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds =====================================================================================

3 3

Re: Freeradius Accounting using different virtual server
by Ryan Setiawan H 19 Sep '08

19 Sep '08

> In 2.1.0 you can create a home_server that points to a virtual > server. This means you don't need extra "listen" sections. Then I really need to upgrade it > Why does it *not work* to create multiple detail modules? See the FAQ > for "it doesn't work". Alan DeKok. Sorry for not posting the configuration.... but it has solved already. adding module at accounting module rather different than at authentication or authorization section Thanks Alan -- DISCLAIMER: The contents of this email and attachments are confidential and may be subject to legal privilege. Any unauthorized use, copying, disclosure or communicating any part of it to others is strictly prohibited and may be unlawful. If you are not the intended recipient you must not use, copy, distribute or rely on this email and should please return it immediately to the sender or notify us and delete the email and any attachments from your system. We cannot accept liability for loss or damage resulting from computer viruses. The integrity of email across the Internet cannot be guaranteed and PT BANK NISP, Tbk. will not accept liability for any claims arising as a result of the use of this medium for transmissions by or to PT BANK NISP, Tbk.

1 0