September 2008 - Freeradius-Users - lists.freeradius.org

configure FreeRADIUS with Huawei PDSN9660
by Aldo Zavala 16 Sep '08

16 Sep '08

Hello to all... First of all I want to tell that I am happy and very proud that this great software is BSD licenced! This is my first time using it and I didnt found nothing related to my question on the manuals... I have a Huawei PDSN9660 and I want to use the FreeRADIUS as AAA server... how can I start configuring and testing it? is there a manual or a wiki about that??? Thanks in advance community! Aldo

2 1

Radius users state
by Sudarshan Soma 16 Sep '08

16 Sep '08

Hi All, Is there anyway if the radius client can determine, if the user authentication failed due to user locked/user-not-existing. I think the RADIUS doesnt have a field in the response codes to indicate this information. This might be correct in the sense intruder doesnt know the actual reason for authentication failure. I just wanted to clarify that the information such as locked-state/passwdexpired,... cant be obtained through radius client. Thanks and Best Regards,

2 8

rlm_perl + dbi, 2.04 on hardy
by Russell Tester 15 Sep '08

15 Sep '08

Hi All, Would appreciate some help getting rlm_perl working with my perl script, I can successfully run my perl script externally from freeradius, and likewise can run freeradius with a perl script that doesn't involve DBI. I'm using hardy with the perl packaged from intrepid, and a semi-custom build of 2.04 packaged with difsg-5 (from deiban testing). Here's the point it fails on start up, line 11 in scratchlimit.pl is "use DBI;" Not really sure where to head next, I appreciate this may be more of a Perl problem, but as I mentioned the script works just dandy when run by itself. <snip> Mon Sep 15 21:44:26 2008 : Debug: perl { Mon Sep 15 21:44:26 2008 : Debug: module = "/usr/bin/scratchlimit.pl" Mon Sep 15 21:44:26 2008 : Debug: func_authorize = "authorize" Mon Sep 15 21:44:26 2008 : Debug: func_authenticate = "authenticate" Mon Sep 15 21:44:26 2008 : Debug: func_accounting = "accounting" Mon Sep 15 21:44:26 2008 : Debug: func_preacct = "preacct" Mon Sep 15 21:44:26 2008 : Debug: func_checksimul = "checksimul" Mon Sep 15 21:44:26 2008 : Debug: func_detach = "detach" Mon Sep 15 21:44:26 2008 : Debug: func_xlat = "xlat" Mon Sep 15 21:44:26 2008 : Debug: func_pre_proxy = "pre_proxy" Mon Sep 15 21:44:26 2008 : Debug: func_post_proxy = "post_proxy" Mon Sep 15 21:44:26 2008 : Debug: func_post_auth = "post_auth" Mon Sep 15 21:44:26 2008 : Debug: } Can't load '/usr/lib/perl5/auto/DBI/DBI.so' for module DBI: /usr/lib/perl5/auto/DBI/DBI.so: undefined symbol: PL_memory_wrap at /usr/lib/perl/5.10/DynaLoader.pm line 196. at /usr/lib/perl5/DBI.pm line 263 BEGIN failed--compilation aborted at /usr/lib/perl5/DBI.pm line 263. Compilation failed in require at /usr/bin/scratchlimit.pl line 11. BEGIN failed--compilation aborted at /usr/bin/scratchlimit.pl line 11. Mon Sep 15 21:44:26 2008 : Error: rlm_perl: perl_parse failed: /usr/bin/scratchlimit.pl not found or has syntax errors. Mon Sep 15 21:44:26 2008 : Error: /etc/freeradius/radiusd.conf[1577]: Instantiation failed for module "perl" Mon Sep 15 21:44:26 2008 : Error: /etc/freeradius/sites-enabled/default[243]: Failed to find module "perl". Mon Sep 15 21:44:26 2008 : Error: /etc/freeradius/sites-enabled/default[243]: Failed to parse "perl" entry. Mon Sep 15 21:44:26 2008 : Debug: } Mon Sep 15 21:44:26 2008 : Debug: } Mon Sep 15 21:44:26 2008 : Error: Errors initializing modules Cheers Russ.

2 2

Radius don't write on MySQL radacct
by Felipe Neuwald 15 Sep '08

15 Sep '08

Hi all, I have one FreeRADIUS 1.1.7_2 server running on a FreeBSD 6.2-STABLE box, and other FreeBSD 6.3-STABLE box running MySQL 5.0.51a. These RADIUS system, are running at least for one year, and I got no problems, but now, since one month ago, I have no write on radacct table. Here is the result of radiusd -X: http://pastebin.ca/1201080 Does anybody knows what does it could be? Thank you very much, Felipe Neuwald.

3 8

SQL statement in radcheck
by Ljupco Vangelski 15 Sep '08

15 Sep '08

Hello, I'm trying to allow a user to log in from few Calling-Station-Ids, but to load them at run-time (read them from mysql table). For that I'm trying to use sql statement in radcheck, but it doesn't seem to be working. Here is a simplified example (mysql, table radcheck): UserName..........Attribute..............op..........Value (1) test Calling-Station-Id == 001122334455 (is working) (2) test Calling-Station-Id == %{sql:select "001122334455";} (is not working) UserName..........Attribute..............op..........Value (1) test Calling-Station-Id =~ (001122334455|554433221100) (is working) (2) test Calling-Station-Id =~ %{sql:select "(001122334455|554433221100)";} (is not working) I've tried this with freeradius 1.1.6 and 1.1.7, with the Calling-Station-Id Attribute set accordingly by the RadiusClient, but in case (1) the user is granted access, and in case (2) user is not granted access. The sql statement is interpreted successfully by the freeradius when it is in the Reply-Message in RADREPLY, for example: (table: RADREPLY) UserName..........Attribute..............op..........Value (1) test Reply-Message = %{sql:select "(001122334455|554433221100)";} is sending reply to the RadiusClient: Reply-Message = "(001122334455|554433221100)" Can sql statements be used to compare against the Attribute Value in CHECK statements, like in the cases (2) above? Thanks, -- Ljupco

2 4

SQL & flat file database
by Lemaster, Rob 15 Sep '08

15 Sep '08

Is it legal to use both a SQL database and a flat file for users simultaneously, or do you have to choose one or the other? If this is possible, does it require any change in configuration?

3 2

SQL Accounting but only for specific groups
by Marinko Tarlac 14 Sep '08

14 Sep '08

Hi there I want to use sql accounting but only for specific user groups... Is there any chance to do this (maybe Unlang can help?)

1 0

FreeRadius rejects Status-Server requests
by Galmiche Herve 13 Sep '08

13 Sep '08

Dear All, My Freeradius 2.0.5 on Opensuse 11.0 rejects all my messages 'Status-Server' requests. radiusd -X returns debuging message: WARNING: Ignoring Status-Server resquest due to security configuration. But I well have in my radiusd.conf a line security { ... status_server = yes ..} Can you precise me please where in the various .conf files I have to enable things to be able to check Freeradius state? Thx for help Hervé -- View this message in context: http://www.nabble.com/FreeRadius-rejects-Status-Server-requests-tp19464797p… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

Problem compiling freeradius-2.1.0 on Centos 5 x86_64
by Sergio Belkin 12 Sep '08

12 Sep '08

Hi, I have a freeradius 2.0.2 working fine with no problems on Centos 5 x86_64, I had no problem at compiling time. I want to test version 2.1.0 from freeradius. But it failed as follows: [snip] Making all in main... gmake[4]: Entering directory `/root/freeradius-server-2.1.0/src/main' /root/freeradius-server-2.1.0/libtool --mode=link gcc -o radmin radmin.lo gcc -o radmin .libs/radmin.o .libs/radmin.o: In function `main': /root/freeradius-server-2.1.0/src/main/radmin.c:117: undefined reference to `using_history' /root/freeradius-server-2.1.0/src/main/radmin.c:118: undefined reference to `rl_insert' /root/freeradius-server-2.1.0/src/main/radmin.c:118: undefined reference to `rl_bind_key' /root/freeradius-server-2.1.0/src/main/radmin.c:176: undefined reference to `readline' /root/freeradius-server-2.1.0/src/main/radmin.c:185: undefined reference to `add_history' collect2: ld returned 1 exit status gmake[4]: *** [radmin] Error 1 gmake[4]: Leaving directory `/root/freeradius-server-2.1.0/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/root/freeradius-server-2.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/root/freeradius-server-2.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/root/freeradius-server-2.1.0' make: *** [all] Error 2 [snip] What's wrong? -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

3 4

2 questions about the python module
by Jester 12 Sep '08

12 Sep '08

I have one question and one problem with the python module. I'll toss out the problem question first, and the curiosity second. Problem: When I run freeradius in debugging mode (-X switch) it will not terminate with a ctrl-C, in fact, when I run it as a service, the init.d script fails to kill it as well, it has to be manually slaughtered using kill -9 <number> and only then can be restarted. I am curious if this is some aspect of trying to tie python into radius, or if I've done something terribly wrong ;) My curiosity is, as a workaround to other problems I had with the python modules, I finally just wrote python scripts and put them into the freeradius library, and I call them using the 'exec' module instead, and that works pretty good. Is there some benefit to running python as a module instead of using the exec module? As I said, adding in python makes the daemon hard to manage in an automated sort of way (I can bash script together a better kill, but I fear some underlying issue) so the exec solution has worked well for me, I just want to make sure im not hobbling my system in some terrible way doing this. Thanks for any comments! --Jester

2 1