December 2009 - Freeradius-Users - lists.freeradius.org

Re: Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool.
by tnt＠kalik.net 14 Dec '09

14 Dec '09

> Hello, > > I have a big problem please HELP. > > I newbee for Radius, > > I am use freeradius 2.x on the Suse 11.1. (Vmware ESXi 3.5) > I use ippool. (254 IP) I have a gprs POS machine. POS is work no problem > but, > > When connect POS machine to radius server, and disconnect, ippool not free > ip on the db. > > I look > > rlm_ippool_tool -avc db.ippool db.ipindex > > ip's still here. Many times db file is full and radius not give ip to POS. > I manualy remove > > this rlm_ippool_tool -r command and Radius give IP to POS. > > I look Radius -Xx command, > > i see on the log file error : rlm_ippool: No available ip addresses in > pool. > > Q1: How release IP on the db.ippool file auto? or any disconnection > timeout value? > > Note: I use crontab now, but is this true way? > Thank you. > > Some Information from Radius > > ippool main_pool { > > range-start = 172.20.3.1 > range-stop = 172.20.3.254 > netmask = 255.255.255.0 > cache-size = 254 > session-db = /var/lib/radiusd/db.ippool > ip-index = /var/lib/radiusd/db.ipindex > override = no > maximum-timeout = 600 (Not work..????) > } You are not sending accounting to radius server. IP address is released when accounting stop packet is recieved. Ivan Kalik

1 0

sqlipool
by Nadir Aliyev 14 Dec '09

14 Dec '09

Hello All, I did not fixed this problem. same configuration works on server (ubuntu). but on another server (freebsd) not works :( Please look to the 3 th line. its normally? (expand) +- entering group post-auth {...} [sqlippool] No Pool-Name defined. [sqlippool] expand -> ++[sqlippool] returns noop

2 1

Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool.
by Gökhan ORHON 14 Dec '09

14 Dec '09

Hello, I have a big problem please HELP. I newbee for Radius, I am use freeradius 2.x on the Suse 11.1. (Vmware ESXi 3.5) I use ippool. (254 IP) I have a gprs POS machine. POS is work no problem but, When connect POS machine to radius server, and disconnect, ippool not free ip on the db. I look rlm_ippool_tool -avc db.ippool db.ipindex ip's still here. Many times db file is full and radius not give ip to POS. I manualy remove this rlm_ippool_tool -r command and Radius give IP to POS. I look Radius -Xx command, i see on the log file error : rlm_ippool: No available ip addresses in pool. Q1: How release IP on the db.ippool file auto? or any disconnection timeout value? Note: I use crontab now, but is this true way? Thank you. Some Information from Radius ippool main_pool { range-start = 172.20.3.1 range-stop = 172.20.3.254 netmask = 255.255.255.0 cache-size = 254 session-db = /var/lib/radiusd/db.ippool ip-index = /var/lib/radiusd/db.ipindex override = no maximum-timeout = 600 (Not work..????) }

2 2

incorrect shared secret
by James Devine 14 Dec '09

14 Dec '09

If a packet is received that contains an incorrect shared secret, should something be logged? Looking through the logs, it looks like freeradius still tries to process the request, the password is mangled, but no mention of incorrect shared secret as far as I get tell.

2 1

Duplicate SQL queries
by Santiago Balaguer García 14 Dec '09

14 Dec '09

Hi, It is a long time since I work with FR and hotspots. I am using a Postgres database, but I want to move to a ORACLE database. To keep the consistency and the service I want to run simultaneously both databases, so the INSERTs and UPDATEs have to be done in Postgres and ORACLE databases. Which file do I have to modify and what I have to add in the config file? Thank you! Santiago _________________________________________________________________

2 1

What does the module rlm_krb5 do?
by John Mok 13 Dec '09

13 Dec '09

Hi, I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that the AS proxies the Kerberos authentication request from the access point to the Kerberos KDC and the access point grants access to the wired network upon successful authentication. I googled about the subject and found the following article about the module rlm_krb5 :- http://wiki.freeradius.org/Rlm_krb5 http://archives.free.net.ph/message/20060104.153134.68c5be76.en.html Is there anyone knows what the module rlm_krb5 does? Whether it is the module I need to use to do the job? Thanks a lot. John Mok

3 2

HOWTO WLAN Access Point authenticate user via kerberos
by John Mok 13 Dec '09

13 Dec '09

Hi, I am new to FreeRADIUS. I would like to set up FreeRADIUS, such that access point authenticates WLAN users via Kerberos (or GSSAPI / Kerberos) and grant access to the wired network upon successful authentication. Is FreeRADIUS the right tool to use? If so, I hope someone could point to the documentation how to set it up. Is there any requirement on the access point, e.g. support for 802.1X is sufficient? Thanks a lot. John Mok

3 3

Re: Freeradius-Users Digest, Vol 56, Issue 84
by Aldo Zavala 12 Dec '09

12 Dec '09

Thanks, Aldo Zavala Mobile (760).556.5050 Office (760).890.4221 GTalk: aldo.zavala(a)gmail.com _____ From: freeradius-users-request(a)lists.freeradius.org To: freeradius-users(a)lists.freeradius.org Sent: Sat, 12 Dec 2009 03:00:13 -0800 Subject: Freeradius-Users Digest, Vol 56, Issue 84 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Clients and users and confs, in mysql (C. Diego Raffaelli A.) 2. Re: guest vlan and ip address in sql (tnt(a)kalik.net) 3. Re: Clients and users and confs, in mysql (tnt(a)kalik.net) ---------------------------------------------------------------------- Message: 1 Date: Fri, 11 Dec 2009 20:09:51 -0400 From: "C. Diego Raffaelli A." <c.diegoraffaelli(a)gmail.com> Subject: Clients and users and confs, in mysql To: freeradius-users(a)lists.freeradius.org Message-ID: <d0f961aa0912111609t4468e1a3g9b6f03111df633c5(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 Dear all: i managed to install a Debian Lenny with freeradius and i would like to use Mysql to clients and users data, because i think its better than radius plain text files; and i would like to use a webadmin to reporting and management too. but, i'm confused. my installation is "zero", i mean, just "make install" and something like that. 1- i dont know if i have to configure manually the "clients.conf" file and it will be automatically written on mysql database or conversely, i would write my data on mysql manually and those data will be automatically writted on text files? maybe , i think there are independent of each. 2- I have a 3Com Total control making dial-up authorizations; now, i need to use radius to pppoe ,for aaa. i think i will use the HiperARC card, so i think my model in clients.conf isn't "tc", it is usrhiper, right? 3- I'm very, very confused in this : who does bandwidth limitation for a user? i.e.: "Joe" must have 128Kbps of traffic limitation. pppoe server does (3Com)? or radius does somehow? or maybe freeradius send parameters to 3com hiper arc to set it ? Thanks in advance. Carlos. Note.- someone stated "i had enough". I would like to say (in my poor english): documentation isn't better of world, but is better of freeradius, and FREEradius it's the better of all Free-Radius software. and its free. it is enough! Thanks for responding every time. ------------------------------ Message: 2 Date: Sat, 12 Dec 2009 03:33:40 -0000 (UTC) From: tnt(a)kalik.net Subject: Re: guest vlan and ip address in sql To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <50664.87.194.16.13.1260588820.squirrel(a)www.kalik.net> Content-Type: text/plain;charset=iso-8859-1 > So - another question - I want to insert to database name from inner > session, even if outer-session name is set. How i can do it? This is documented in inner-tunnel virtual server. At least in current version. Ivan Kalik ------------------------------ Message: 3 Date: Sat, 12 Dec 2009 03:50:21 -0000 (UTC) From: tnt(a)kalik.net Subject: Re: Clients and users and confs, in mysql To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <50706.87.194.16.13.1260589821.squirrel(a)www.kalik.net> Content-Type: text/plain;charset=iso-8859-1 > 1- i dont know if i have to configure manually the "clients.conf" file > and it will be automatically written on mysql database or conversely, > i would write my data on mysql manually and those data will be > automatically writted on text files? No. > maybe , i think there are independent of each. Yes. Just don't add same client to both. > 2- I have a 3Com Total control making dial-up authorizations; now, i > need to use radius to pppoe ,for aaa. i think i will use the HiperARC > card, so i think my model in clients.conf isn't "tc", it is usrhiper, > right? Pass. Someone with equipment like yours will be able to help you. > 3- I'm very, very confused in this : who does bandwidth limitation for > a user? i.e.: "Joe" must have 128Kbps of traffic limitation. > > pppoe server does (3Com)? Yes. > or radius does somehow? No. > or maybe freeradius > send parameters to 3com hiper arc to set it ? Yes, that can be done in many cases. Depends if NAS supports bandwidth limiting VSAs. Ivan Kalik ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 56, Issue 84 ************************************************

1 0

Invitation from Mohamed Hagag
by Mohamed Hagag 12 Dec '09

12 Dec '09

Mohamed Hagag is inviting you to join Resumark.com Post your resume (we can hide it from your boss) and make $1 every time an employer looks at it! Know anyone who is looking for a job? Get paid for inviting them. In today's economy even job search monsters are not enough. We help you find a job by doing something that hasn't been done before: We pay YOU for your resume! Count me in! How this works? Message from the founder of Resumark: Greetings! We've been working hard on this website to help people find jobs in this economy. We don't think it is fair for other websites to capitalize on people's resumes so we came up with an idea to share the money that employers pay for resumes with those who are looking for jobs. Doesn't this sound like the right thing to do? We appeal to you - please help us spread the word to others who can benefit from this website! Thank you! The Resumark Team the founder of Resumark You received this e-mail because someone you know thought you may find this website interesting. If you no longer wish to receive any e-mails from us, please go to http://www.resumark.com/block.html?env=donotinvite---OnBlock-&email=freerad…

1 0

Clients and users and confs, in mysql
by C. Diego Raffaelli A. 11 Dec '09

11 Dec '09

Dear all: i managed to install a Debian Lenny with freeradius and i would like to use Mysql to clients and users data, because i think its better than radius plain text files; and i would like to use a webadmin to reporting and management too. but, i'm confused. my installation is "zero", i mean, just "make install" and something like that. 1- i dont know if i have to configure manually the "clients.conf" file and it will be automatically written on mysql database or conversely, i would write my data on mysql manually and those data will be automatically writted on text files? maybe , i think there are independent of each. 2- I have a 3Com Total control making dial-up authorizations; now, i need to use radius to pppoe ,for aaa. i think i will use the HiperARC card, so i think my model in clients.conf isn't "tc", it is usrhiper, right? 3- I'm very, very confused in this : who does bandwidth limitation for a user? i.e.: "Joe" must have 128Kbps of traffic limitation. pppoe server does (3Com)? or radius does somehow? or maybe freeradius send parameters to 3com hiper arc to set it ? Thanks in advance. Carlos. Note.- someone stated "i had enough". I would like to say (in my poor english): documentation isn't better of world, but is better of freeradius, and FREEradius it's the better of all Free-Radius software. and its free. it is enough! Thanks for responding every time.

2 1