October 2009 - Freeradius-Users - lists.freeradius.org

Error: Received conflicting packet
by rihad 12 Oct '09

12 Oct '09

Hi, all, Sometimes when there are too many requests from a NAS, like right after rebooting it and thus breaking current sessions, etc., freeradius 2.1.3 under FreeBSD begins loggin many many lines like this after the NAS re-sends unanswered packets: Error: Received conflicting packet from client 10.10.70.94 port 1646 - ID: 220 due to unfinished request 511166. Giving up on old request. I looked in src/main/event.c and found this code: default: gettimeofday(&when, NULL); when.tv_sec -= 1; /* * If the cached request was received * within the last second, then we * discard the NEW request instead of the * old one. This will happen ONLY when * the client is severely broken, and is * sending conflicting packets very * quickly. */ if (timercmp(&when, &request->received, <)) { radlog(L_ERR, "Discarding conflicting packet from " "client %s port %d - ID: %d due to recent request %d.", client->shortname, packet->src_port, packet->id, request->number); return 0; } received_conflicting_request(request, client); ^^^ request = NULL; break; Our authorization/accounting happens through rlm_perl and is written in Perl. Perhaps it's not fast enough to process many many requests in under 1 second (when.tv_sec), but aborting the current packet instead of the new duplicate one can hardly be justified. Please look at the line marked with ^^^ - it's where the error is logged and the current request is aborted, unless it was caught earlier by "Discarding conflicting packet", in which case the _new_ duplicate request is aborted, which is more correct. I propose that when.tv_sec be configurable in radiusd.conf, and not hardcoded like that.

5 19

Using SQL instead of radutmp - WAS Re: Problems with radutmp
by Craig Campbell 12 Oct '09

12 Oct '09

Ok, here is what I did (more or less) to use the sql option of freeradius 2.1.6 instead of the radutmp functionality. This is a 'work in progress', so it is possible I have errors not yet discovered... I used mysql, since it was already available on my Redhat Linux platform. If you compiled freeradius, then make certain you had the mysql-devel rpms installed. If they were not, you will need to install them, then rebuild freeradius from scratch (save your config files). The 'configure' script looks for these, and if they are missing, critical modules will not be available for sql access. (configure ; make clean ; make ; make install) 1) You need to create the initial radius database as per instructions found here http://wiki.freeradius.org/SQL_HOWTO 2) Files to modify... a.. -/usr/local/etc/raddb/radius.config Uncomment the line, $INCLUDE sql.conf b.. -/usr/local/etc/raddb/sql.conf Modify the login and password lines to match your database's values (from SQL setup) c.. - /usr/local/etc/raddb/sites-available/default Uncomment sql in the accounting section to store accounting records in the database Uncomment sql in the session section to have sql check for Simultaneous-Use d.. - /usr/local/etc/raddb/sites-available/inner-tunnel Comment out radutmp in session section Uncomment sql in session section e.. /usr/local/etc/raddb/sql/mysql/admin.sql Modify userid and password for radius database to match local parameters. f.. /usr/local/etc/raddb/sql/mysql/dialup.conf Uncomment the line beginning with "simul_count_query =" 3) Since I was ONLY interested in current logins, and NOT the accounting records, I added a cron job to DELETE completed sessions from the database. This should prevent (I hope) database growth. >From root's crontab, */5 * * * * /usr/bin/mysql -u radius -pSecretPassword radius -e "delete from radacct where acctstoptime is not NULL ;" 4) A simple command to 'mimic' the radwho functionality ( I used an alias) alias radwho='/usr/bin/mysql -u radius -pSecretPassword radius -e "select username, acctsessionid, nasportid, nasporttype, acctstarttime from radacct where acctstoptime is NULL ;"' I hope I haven't overlooked anything..... Good Luck! -craig ----- Original Message ----- From: "Gerardo Contreras" <gcontreras(a)netx.com.mx> To: "Craig Campbell" <craig(a)ccraft.ca> Sent: Friday, October 09, 2009 6:21 PM Subject: Re: Problems with radutmp > > Hi. > > I think I have a very similar scenario to yours. > > I have this NAS server which sends the same NAS port to the radius > server every time, so the radutmp always have the last connected user > only. I've tried to hack the radutmp module without any success. Main > thing I want to do is to use the simultaneous-use feature. > > It'll be great if you can share that hacks with me. > > Cheers > > Craig Campbell wrote: >> Hi, I actually needed to REMOVE most of the hacks. It works fairly >> well (so far - still testing). >> >> Did you just want the radutmp functionality? If so, I can try to send >> you what I did to make it work.. I'm in the Eastern time zone (Toronto >> Canada) and just got home. >> >> How urgent is your need? >> >> Cheers, >> -craig >> >> ----- Original Message ----- From: "Gerardo Contreras" >> <gcontreras(a)netx.com.mx> >> To: <craig(a)ccraft.ca> >> Sent: Friday, October 09, 2009 4:28 PM >> Subject: Re: Problems with radutmp >> >> >>> >>> Hi, Craig. >>> >>> Found your post where you were asking about this same thing. >>> >>> Do you solve it using SQL? If so, did you have to hack still the >>> freeradius code, or was more on the SQL side? >>> >>> Do you have available the hacks you did to make radutmp working with >>> this setup? >>> >>> Greetings, >>> >>> >>> Craig Campbell wrote: >>>> What is the NAS-Port value? I don't THINK radutmp can handle >>>> multiple sessions sharing a port. >>>> >>>> -craig >>>> ----- Original Message ----- From: "Gerardo Contreras" >>>> <gcontreras(a)netx.com.mx> >>>> To: <freeradius-users(a)lists.freeradius.org> >>>> Sent: Friday, October 09, 2009 1:00 PM >>>> Subject: Problems with radutmp >>>> >>>> >>>>> Hi. >>>>> >>>>> I'm having some problems with radutmp. >>>>> >>>>> I'm using an Aruba Mobility Controller which has radauth and >>>>> radacct configured to this freeradius server. In fact, I've tried >>>>> with freeradius both on centOS and ubuntu with same results. >>>>> >>>>> When a user logs in, a corresponding entry is added to radutmp, and >>>>> indeed, nobody can log in with this user account (if I activate >>>>> Simultaneous-use). But if another users logs in, the entry for the >>>>> previous user gets deleted from radutmp, and a new one is added for >>>>> this new user. Then, a user with the account from the first user >>>>> can log in indeed. In other words, only the last logged in user >>>>> gets to the radutmp file. >>>>> >>>>> On both boxes, using freeradius 2.1.0. >>>>> >>>>> Any idea? >>>>> >>>>> -- >>>>> Gerardo Contreras >>>>> NetX >>>>> http://netx.com.mx/ >>>>> T: +52 (614) 2010101 x 121 >>>>> M: +52 (614) 2479727 >>>>> Sin costo: 01800 GO2NETX >>>>> >>>>> - >>>>> List info/subscribe/unsubscribe? See >>>>> http://www.freeradius.org/list/users.html >>>>> >>>>> __________ Information from ESET Smart Security, version of virus >>>>> signature database 4493 (20091009) __________ >>>>> >>>>> The message was checked by ESET Smart Security. >>>>> >>>>> http://www.eset.com >>>>> >>>>> >>>>> >>>> >>>> >>>> __________ Information from ESET Smart Security, version of virus >>>> signature database 4493 (20091009) __________ >>>> >>>> The message was checked by ESET Smart Security. >>>> >>>> http://www.eset.com >>>> >>>> >>>> >>>> - >>>> List info/subscribe/unsubscribe? See >>>> http://www.freeradius.org/list/users.html >>> >>> >>> -- >>> Gerardo Contreras >>> NetX >>> http://netx.com.mx/ >>> T: +52 (614) 2010101 x 121 >>> M: +52 (614) 2479727 >>> Sin costo: 01800 GO2NETX >>> >>> >>> __________ Information from ESET Smart Security, version of virus >>> signature database 4494 (20091009) __________ >>> >>> The message was checked by ESET Smart Security. >>> >>> http://www.eset.com >>> >>> >>> >> >> >> __________ Information from ESET Smart Security, version of virus >> signature database 4494 (20091009) __________ >> >> The message was checked by ESET Smart Security. >> >> http://www.eset.com >> >> >> > > > > __________ Information from ESET Smart Security, version of virus signature database 4494 (20091009) __________ > > The message was checked by ESET Smart Security. > > http://www.eset.com > > > __________ Information from ESET Smart Security, version of virus signature database 4500 (20091012) __________ The message was checked by ESET Smart Security. http://www.eset.com

1 0

Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0
by Gianni Olivieri 12 Oct '09

12 Oct '09

Hi to all, I've installad freeradius on a Debian box with Mysql DB. After the upgrade from freeradius version 1.7 and freeradius 2.x I notice that sometimes, but everyday, the freeradius doesn't respond. I must do a /etc/init.d/freeradius restart In my log: Mon Oct 12 10:24:45 2009 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 The only modification that I have made to conf is: with Freeradius 1.7 radius:/etc/freeradius# cat ../freeradius.orig/acct_users DEFAULT Acct-Status-Type == "Start" Exec-Program = "/etc/freeradius/SCRIPT/userlogin.py %{User-Name}" DEFAULT Acct-Status-Type == "Stop" Exec-Program = "/etc/freeradius/SCRIPT/userlogout.py %{User-Name" on Freeradius 2.x I've modified the accounting conf file: # # Accounting. Log the accounting data # accounting { if (Acct-Status-Type == Start) { update reply { Tmp-String-0 = "%{exec:/etc/freeradius/SCRIPT/userlogin.py %{User-Name}}" } } if (Acct-Status-Type == Stop) { update reply { Tmp-String-0 = "%{exec:/etc/freeradius/SCRIPT/userlogout.py %{User-Name}}" } } I need to launch a script with after login and logout. Maybe this script cause some problems? It's a simple python script that update a field in db (online/offiline flag). Can I substitute this external script with a query inside freeradius? How can I create a custom (new) query and lunch it from the accounting section? # # Accounting. Log the accounting data # accounting { if (Acct-Status-Type == Start) { update reply { LAUNCH MYQUERY HERE FOR A SPECIFIC USER } } if (Acct-Status-Type == Stop) { update reply { LAUNCH MYQUERY HERE FOR A SPECIFIC USER } } OR... may the problem is some slow query... but... how can I debug this? can someone suggest me a method? Best regards. -- Gianni Olivieri SICE Telecomunicazioni ------------------------------------ Via Tazio Nuvolari, 53 55061 - Carraia (LU) - ITALY ------------------------------------------------ Tel. +39 0583 980787 Fax +39 0583 981495 www.sicetelecom.it gianni.olivieri(a)sicetelecom.it -----------------------------------------------

2 1

getting disconnected.
by Yagnesh Dave 12 Oct '09

12 Oct '09

Hi, I changed the listen IP as you has told me last time. Now I am able to connect to the free radius, I get the vrf properly configured on the LNS as expected by the radius and get the proper IP also. But now the problem is that once I am connected, after 5 secs i get disconnected. I saw in the LNS logs, in which I noted that the request is send to 172.31.6.158, but I am getting reply from radius on the other IP which is 202.54.6.101, basicaly I have 2 IP`s on radius server. The later one I used for downloading the packages from internet. Please let me know what and where I should do the change so that Radius replies with the IP that it is listening from. I am attaching the debug logs on the LNS for your ref; _________________________________________________________________ 031415: Oct 12 17:23:05.705 IST: RADIUS/ENCODE(000006A8):Orig. component type = VPDN 031416: Oct 12 17:23:05.705 IST: RADIUS(000006A8): Config NAS IP: 192.168.243.250 031417: Oct 12 17:23:05.705 IST: RADIUS(000006A8): sending 031418: Oct 12 17:23:05.705 IST: RADIUS(000006A8): Send Accounting-Request to 172.31.6.158:1646 id 1646/185, len 266 031419: Oct 12 17:23:05.705 IST: RADIUS: authenticator A7 A6 49 D5 CF 5B A2 CE - 45 8E 68 4C 71 51 F6 17 031420: Oct 12 17:23:05.705 IST: RADIUS: Acct-Session-Id [44] 10 "00000A27" 031421: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Type [64] 6 00:L2TP [3] 031422: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Medium-Type [65] 6 00:IPv4 [1] 031423: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Server-Endpoi[67] 17 "192.168.243.250" 031424: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Client-Endpoi[66] 15 "172.23.119.14" 031425: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Assignment-Id[82] 3 "1" 031426: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Client-Auth-I[90] 15 "l2tp-tata-lac" 031427: Oct 12 17:23:05.705 IST: RADIUS: Tunnel-Server-Auth-I[91] 16 "hb-vsb-t1-rw01" 031428: Oct 12 17:23:05.705 IST: RADIUS: Acct-Tunnel-Connecti[68] 11 "126111449" 031429: Oct 12 17:23:05.705 IST: RADIUS: Framed-Protocol [7] 6 PPP [1] 031430: Oct 12 17:23:05.705 IST: RADIUS: User-Name [1] 16 "tcl(a)cisco1.com" 031431: Oct 12 17:23:05.705 IST: RADIUS: Acct-Authentic [45] 6 RADIUS [1] 031432: Oct 12 17:23:05.705 IST: RADIUS: Acct-Session-Time [46] 6 1 031433: Oct 12 17:23:05.709 IST: RADIUS: Acct-Input-Octets [42] 6 84 031434: Oct 12 17:23:05.709 IST: RADIUS: Acct-Output-Octets [43] 6 90 031435: Oct 12 17:23:05.709 IST: RADIUS: Acct-Input-Packets [47] 6 5 031436: Oct 12 17:23:05.709 IST: RADIUS: Acct-Output-Packets [48] 6 6 031437: Oct 12 17:23:05.709 IST: RADIUS: Acct-Terminate-Cause[49] 6 host-request [18] 031438: Oct 12 17:23:05.709 IST: RADIUS: Acct-Status-Type [40] 6 Stop [2] 031439: Oct 12 17:23:05.709 IST: RADIUS: NAS-Port-Type [61] 6 Virtual [5] 031440: Oct 12 17:23:05.709 IST: RADIUS: NAS-Port [5] 6 751 031441: Oct 12 17:23:05.709 IST: RADIUS: NAS-Port-Id [87] 17 "Uniq-Sess-ID751" 031442: Oct 12 17:23:05.709 IST: RADIUS: Calling-Station-Id [31] 17 "404001629241466" 031443: Oct 12 17:23:05.709 IST: RADIUS: Connect-Info [77] 13 "64000/57600" 031444: Oct 12 17:23:05.709 IST: RADIUS: Service-Type [6] 6 Framed [2] 031445: Oct 12 17:23:05.709 IST: RADIUS: NAS-IP-Address [4] 6 192.168.243.250 031446: Oct 12 17:23:05.709 IST: RADIUS: Acct-Delay-Time [41] 6 0 031447: Oct 12 17:23:05.725 IST: RADIUS: Received from id 1646/185 202.54.6.101:1646, Accounting-response, len 20 031448: Oct 12 17:23:05.725 IST: RADIUS: Response for non-existent request ident 031449: Oct 12 17:23:06.389 IST: %LINK-3-UPDOWN: Interface Virtual-Access4, changed state to down 031450: Oct 12 17:23:10.581 IST: RADIUS: no sg in radius-timers: ctx 0x654F7FC4 sg 0x0000 031451: Oct 12 17:23:10.581 IST: RADIUS: Retransmit to (172.31.6.158:1645,1646) for id 1646/184 031452: Oct 12 17:23:10.581 IST: RADIUS: acct-delay-time for C0040B4 (at C004194) now 5 031453: Oct 12 17:23:10.597 IST: RADIUS: Received from id 1646/186 202.54.6.101:1646, Accounting-response, len 20 031454: Oct 12 17:23:10.597 IST: RADIUS: Response for non-existent request ident 031455: Oct 12 17:23:11.413 IST: RADIUS: no sg in radius-timers: ctx 0x50802954 sg 0x0000 031456: Oct 12 17:23:11.413 IST: RADIUS: Retransmit to (172.31.6.158:1645,1646) for id 1646/185 031457: Oct 12 17:23:11.413 IST: RADIUS: acct-delay-time for C3A1DF4 (at C3A1EF8) now 5 031458: Oct 12 17:23:11.429 IST: RADIUS: Received from id 1646/187 202.54.6.101:1646, Accounting-response, len 20 031459: Oct 12 17:23:11.429 IST: RADIUS: Response for non-existent request ident 031460: Oct 12 17:23:15.893 IST: RADIUS: no sg in radius-timers: ctx 0x654F7FC4 sg 0x0000 031461: Oct 12 17:23:15.893 IST: RADIUS: Retransmit to (172.31.6.158:1645,1646) for id 1646/186 031462: Oct 12 17:23:15.893 IST: RADIUS: acct-delay-time for C0040B4 (at C004194) now 10 031463: Oct 12 17:23:15.909 IST: RADIUS: Received from id 1646/188 202.54.6.101:1646, Accounting-response, len 20 031464: Oct 12 17:23:15.909 IST: RADIUS: Response for non-existent request ident 031465: Oct 12 17:23:16.565 IST: RADIUS: no sg in radius-timers: ctx 0x50802954 sg 0x0000 031466: Oct 12 17:23:16.565 IST: RADIUS: Retransmit to (172.31.6.158:1645,1646) for id 1646/187 031467: Oct 12 17:23:16.565 IST: RADIUS: acct-delay-time for C3A1DF4 (at C3A1EF8) now 10 031468: Oct 12 17:23:16.581 IST: RADIUS: Received from id 1646/189 202.54.6.101:1646, Accounting-response, len 20 031469: Oct 12 17:23:16.581 IST: RADIUS: Response for non-existent request ident 031470: Oct 12 17:23:20.949 IST: RADIUS: no sg in radius-timers: ctx 0x654F7FC4 sg 0x0000 031471: Oct 12 17:23:20.949 IST: RADIUS: Retransmit to (172.31.6.158:1645,1646) for id 1646/188 031472: Oct 12 17:23:20.949 IST: RADIUS: acct-delay-time for C0040B4 (at C004194) now 15 031473: Oct 12 17:23:20.965 IST: RADIUS: Received from id 1646/190 202.54.6.101:1646, Accounting-response, len 20 031474: Oct 12 17:23:20.965 IST: RADIUS: Response for non-existent request ident 031475: Oct 12 17:23:21.781 IST: RADIUS: no sg in radius-timers: ctx 0x50802954 sg 0x0000 031476: Oct 12 17:23:21.781 IST: RADIUS: Retransmit to (172.31.6.158:1645,1646) for id 1646/189 031477: Oct 12 17:23:21.781 IST: RADIUS: acct-delay-time for C3A1DF4 (at C3A1EF8) now 15 031478: Oct 12 17:23:21.797 IST: RADIUS: Received from id 1646/191 202.54.6.101:1646, Accounting-response, len 20 031479: Oct 12 17:23:21.797 IST: RADIUS: Response for non-existent request ident 031480: Oct 12 17:23:26.005 IST: RADIUS: no sg in radius-timers: ctx 0x654F7FC4 sg 0x0000 031481: Oct 12 17:23:26.005 IST: RADIUS: No response from (172.31.6.158:1645,1646) for id 1646/190 031482: Oct 12 17:23:26.005 IST: RADIUS/DECODE: parse response no app start; FAIL 031483: Oct 12 17:23:26.005 IST: RADIUS/DECODE: parse response; FAIL 031484: Oct 12 17:23:27.381 IST: RADIUS: no sg in radius-timers: ctx 0x50802954 sg 0x0000 031485: Oct 12 17:23:27.381 IST: RADIUS: No response from (172.31.6.158:1645,1646) for id 1646/191 031486: Oct 12 17:23:27.381 IST: RADIUS/DECODE: parse response no app start; FAIL 031487: Oct 12 17:23:27.381 IST: RADIUS/DECODE: parse response; FAIL ______________________________________________________________________ Thanks and Regards, Yagnesh Dave.

2 1

Re: 1.Troubleshooting MySQL Connections , 2. troubleshooting possible memory leak
by Alan DeKok 12 Oct '09

12 Oct '09

Stefan A. wrote: > I still see the memory consumption rising over the time > Output from top every 5 Minutes: > SIZE/RES > 16M/13M > 34M/32M > 53M/51M > 71M/69M > ...it rises about 3-4 MB per Minutes. Ugh. > I read about some issues and tried 2.1.7... still the same. Because the code in rlm_sql.c hasn't changed. > My Setup: > SUN X4100, 8GB, Solaris 10 5/09 > Configured and installed incl. MySQL, but even if I disabled it for runtime, > the memory rises. > > What would be a good start to debug this? > Is there a possibility, to see, which part of the running radiusd consumes > what amount of memory? $ ./configure --disable-shared That will cause all of the libraries to be linked into the server. You'll also need to edit src/main/Makefile, and delete: LINK_MODE = -static -all-static That will let the modules be linked into the server, but will keep the server in a form that valgrind can use. Alan DeKok.

1 0

Re:Help with md5 database encryption (Oscar Trejo)
by Oscar Trejo 11 Oct '09

11 Oct '09

The version of the freeradius is v 1.1.0 I hope these is what you ask me. Thanks !!! > What freeradius version is this? > > Ivan Kalik > Kalik Informatika ISP > > > Dana 23/9/2008, "Oscar Trejo" <racso83(a)gmail.com> piše: > > >Hi, I had a freeradius server working, but only when the password are > saved > >on the database on plain-text with out encryption, my question is about > how > >to save the instructions on the table radcheck and radgroupcheck to work > >with Password encryption MD5. > > > >My working free radius tables had > > > >radcheck > >+----+----------+-----------+----+--------+ > >| id | UserName | Attribute | op | Value | > >+----+----------+-----------+----+--------+ > >| 3 | oscar | Password | == | uno | > >+----+----------+-----------+----+--------+ > > > >radgroupcheck > >+----+-----------+-----------+----+-------+ > >| id | GroupName | Attribute | op | Value | > >+----+-----------+-----------+----+-------+ > >| 1 | dinamico | Auth-Type | := | Local | > >+----+-----------+-----------+----+-------+ > > > > > > > >When i had the password with simple plaint text with out encryption the > >result is the next > > > >Auth: Login OK: [oscar/uno] (from client ##### port ########## cli > >##:##:##:##:##:##) > > > > > > > >But I want to save the password with MD5 encryption, the freeradius load > >correctly the module pap, chap and eap with out errors, but when i try to > >change the configuration for example : > > > >radcheck > >+----+----------+-----------+----+--------+ > >| id | UserName | Attribute | op | Value | > >+----+----------+-----------+----+--------+ > >| 3 | oscar | MD5-Password | == | 1eaa8bb195869a23f081acbb5bf08527 | > >+----+----------+-----------+----+--------+ > > > >radgroupcheck > >+----+-----------+-----------+----+-------+ > >| id | GroupName | Attribute | op | Value | > >+----+-----------+-----------+----+-------+ > >| 1 | dinamico | Auth-Type | := | PAP | > >+----+-----------+-----------+----+-------+ > > > > > >the free radius log gave me the next error: > > > > > >Error: rlm_sql_getvpdata: database query error > >Info: rlm_sql (sql): No matching entry in the database for request from > user > >[oscar] > >Auth: Login incorrect: [oscar/uno] (from client ##### port ########## cli > >##:##:##:##:##:##) > > > > > > > > > >But i need the encryption with MD5, any suggestion > > > >Before any answer I gave you thanks for the help > > >

5 6

Enabling ldap causes freeradius server to not start up.
by Jesper Klit Jensen 10 Oct '09

10 Oct '09

Freeradius: 2.1.6 OS: Open Suse 11.0 LDAP 2.4.9 Problem is when running radiusd in forground with logging: Thread spawned new child 1. Total threads in pool: 1 Thread 1 waiting to be assigned a request Thread pool initialized radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = x.x.x.x port = 0 } listen { type = "acct" ipaddr = x.x.x.x port = 0 No more after that. It will only startup if ldap is total disabled. LDAP user account works. Please help me with some hints for finding this problem.

2 1

Manage IPv6 pools using freeradius
by Ram Akuka 09 Oct '09

09 Oct '09

Hi , I want to manage my ipv6 users using ip_pool from FreeRadius. And I have few question regarding this. 1. how can I use ip_pool to allocate ipv6 address to a users? 2. How can I assign ipv6 address to client based on the NAS he came from?(different prefix for different NAS). 3. Is there any documentation regarding this (looked in FreeRadius wiki and can't find anything useful). Thanks in advance, -- Ram

2 1

Problems with radutmp
by Gerardo Contreras 09 Oct '09

09 Oct '09

Hi. I'm having some problems with radutmp. I'm using an Aruba Mobility Controller which has radauth and radacct configured to this freeradius server. In fact, I've tried with freeradius both on centOS and ubuntu with same results. When a user logs in, a corresponding entry is added to radutmp, and indeed, nobody can log in with this user account (if I activate Simultaneous-use). But if another users logs in, the entry for the previous user gets deleted from radutmp, and a new one is added for this new user. Then, a user with the account from the first user can log in indeed. In other words, only the last logged in user gets to the radutmp file. On both boxes, using freeradius 2.1.0. Any idea? -- Gerardo Contreras NetX http://netx.com.mx/ T: +52 (614) 2010101 x 121 M: +52 (614) 2479727 Sin costo: 01800 GO2NETX

3 5

radiusExpiration attirbute declared in the LdapGroup
by aangles 09 Oct '09

09 Oct '09

Hello, I would Like to know if there is a way to define an expiration time for all those users which belong to an LDAP Group, instead of defining this attribute for each of those users? Moreover, after expiration time , RADIUS send an access-reject to the user. Is there any tool or something that send a message to the wifi users in a "windows form"? thank you very much regards albert -- View this message in context: http://www.nabble.com/radiusExpiration-attirbute-declared-in-the-LdapGroup-… Sent from the FreeRadius - User mailing list archive at Nabble.com.

4 7