December 2009 - Freeradius-Users - lists.freeradius.org

proxy same realm but different authentication protocol to different server
by piston 17 Dec '09

17 Dec '09

Hi, Am I possible to do these? 1. proxy realm xyz.com (PAP/CHAP) to server#1 2. proxy realm xyz.com (PEAP) to server#2 I'm using freeradius 2.1.7 Thank you KH

2 2

Freeradius User Password Expiration
by thatguy11 17 Dec '09

17 Dec '09

Guys, I've done abit of searching and still been unable to find a really good man page or other description on the users file. Not even the MAN on the users file is very descriptive. I just want to expire passwords. Thats it, I've seen the expiry attribute but nowhere can I find a detailed description of its variables. From what I have seen, you can just expire by setting a date using the expiry attribute to a specific date, is there any other way to do this? -- View this message in context: http://old.nabble.com/Freeradius-User-Password-Expiration-tp26831843p268318… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

XP cert attributes
by Fernando Calvelo Vazquez 17 Dec '09

17 Dec '09

Hi folks: How could I check that the special Microsoft OIDs have been included on the certificates? Thanks a lot in advance! Fernando.

2 1

Accounting question
by David Peterson 17 Dec '09

17 Dec '09

Radius is storing the accounting information using the EAP hashed username. Is there a way to change it to store the clear text username with the accounting info? David Peterson Engineer Wireless Connections 166 Milan Ave., Norwalk, Oh. 44857 ACCessing the Future Today!! ofc. 419.660.6100 ext 2287 cell 419-706-7355 fax 419-668-4077 <http://www.wirelessconnections.net/> http://www.wirelessconnections.net This transmission and any files attached to it, may contain confidential and/or privileged information and intended only for the named recipient. If you are not the intended recipient, you are hereby notified that any disclosure, reproduction, retransmission, dissemination, disclosure, copying or any use of the information or files contained is strictly prohibited. If you have received this transmission in error, please notify the sender by reply transmission and delete this electronic mail

6 17

how to change the radiusd.conf file to fit mysql database?
by Zhang Shukun 17 Dec '09

17 Dec '09

hi, friends i install freereadius 2.1.7. i follow the instruction as follow: radiusd.conf Find the “authorize” section (near the bottom) and add “sql” (no quotes) between “suffix” and “files”. Comment out “files” by putting a # in front of it. Do the same to “suffix”. Find the “accounting” section (a bit underneath the authorize section) and place the word “sql” (without quotes” between “unix” and radutmp” but i cant find the authorize or suffix key words in the radius.conf file. do you know where is it to set for mysql? Thanks! -- Regards, Sucan

2 1

Bugzilla with freeradius support
by freeradius＠corwyn.net 17 Dec '09

17 Dec '09

I see that bugzilla has added Freeradius support. Went looking for any type of guide, and seems obscured by freeradius using bugzilla for bug tracking. Can someone point me to anything that has pointers for using freeradius to support my bugzilla implementation? Rick Rick Steeves http://www.sinister.net In reality nothing is more damaging to the adventurous spirit within a man than a secure future - Alexander Supertramp

2 1

unlang after chap returns reject
by EasyHorpak.com 16 Dec '09

16 Dec '09

3 4

FreeRadius 2.7 virtual memory
by Dinh Pham Cong 16 Dec '09

16 Dec '09

Hi all, My Radiusd seems to take a lot of virtual memory. Here is what shows up in "top" command 4799 mysql 15 0 2606m 697m 3616 S 50.6 4.3 31:46.85 mysqld 14959 root 15 0 10.1g 46m 1456 S 11.1 0.3 1:24.67 radiusd Do you think that I have kind of abnomal operations here? Regards, Dinh

2 3

FreeRadius 2.1.7 crashes
by Dinh Pham Cong 16 Dec '09

16 Dec '09

Hi all, I had run FreeRadius 2.1.7 in gdb and got this core dump Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x2aac59f0e940 (LWP 23452)] 0x000000309a85306b in ?? () from /usr/lib64/mysql/libmysqlclient_r.so.15 (gdb) bt #0 0x000000309a85306b in ?? () from /usr/lib64/mysql/libmysqlclient_r.so.15 #1 0x000000309a8533e9 in my_net_read () from /usr/lib64/mysql/libmysqlclient_r.so.15 #2 0x000000309a84cd1f in cli_safe_read () from /usr/lib64/mysql/libmysqlclient_r.so.15 #3 0x000000309a84e673 in mysql_real_connect () from /usr/lib64/mysql/libmysqlclient_r.so.15 #4 0x00002ae5ed7663fb in sql_init_socket (sqlsocket=0x4428d90, config=0x42d81f0) at sql_mysql.c:89 #5 0x00002ae5ed561e42 in connect_single_socket (sqlsocket=0x4428d90, inst=0x42d8180) at sql.c:56 #6 0x00002ae5ed562049 in rlm_sql_query (sqlsocket=0x4428d90, inst=0x42d8180, query=0x2aac59f0c2f0 " DELETE FROM radacct", ' ' <repeats 11 times>, "WHERE acctuniqueid = 'bffb320ed0f4f462'") at sql.c:523 #7 0x00002ae5ed560987 in rlm_sql_accounting (instance=0x42d8180, request=0x2aabb4033a20) at rlm_sql.c:1337 #8 0x0000000000419da9 in modcall (component=3, c=<value optimized out>, request=0x2aabb4033a20) at modcall.c:292 #9 0x000000000041733d in indexed_modcall (comp=3, idx=0, request=0x2aabb4033a20) at modules.c:691 #10 0x0000000000407f37 in rad_accounting (request=0x2aabb4033a20) at acct.c:93 #11 0x0000000000423ad1 in radius_handle_request (request=0x2aabb4033a20, fun=0x407ea0 <rad_accounting>) at event.c:3693 #12 0x000000000041cc83 in request_handler_thread (arg=<value optimized out>) at threads.c:492 #13 0x0000003e10206367 in start_thread () from /lib64/libpthread.so.0 #14 0x0000003e0f6d2f7d in clone () from /lib64/libc.so.6 Do you think that it is MySQL client library bug? How can I do now? Regards, Dinh

2 1

Yanıt: Re: Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool.
by Gökhan ORHON 16 Dec '09

16 Dec '09

I know. But cant control many pos or devices power down directly. How db pool release active ip. I use rlm tool In the crontab every 30 minutes. But I think wrong way. Can you give for active session on the db ippool time out value or any way? Or different configuration. Note: this devices is POS. On the gprs network. I have lease line gsm provider and my client is gsm NAS server. ----- Orijinal Mesaj ----- Kimden: freeradius-users-bounces+gokhan.orhon=provus.com.tr(a)lists.freeradius.org <freeradius-users-bounces+gokhan.orhon=provus.com.tr(a)lists.freeradius.org> Kime: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Gönderme Zamanı: Mon Dec 14 21:02:42 2009 Konu: Re: Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool. > Hello, > > I have a big problem please HELP. > > I newbee for Radius, > > I am use freeradius 2.x on the Suse 11.1. (Vmware ESXi 3.5) > I use ippool. (254 IP) I have a gprs POS machine. POS is work no problem > but, > > When connect POS machine to radius server, and disconnect, ippool not free > ip on the db. > > I look > > rlm_ippool_tool -avc db.ippool db.ipindex > > ip's still here. Many times db file is full and radius not give ip to POS. > I manualy remove > > this rlm_ippool_tool -r command and Radius give IP to POS. > > I look Radius -Xx command, > > i see on the log file error : rlm_ippool: No available ip addresses in > pool. > > Q1: How release IP on the db.ippool file auto? or any disconnection > timeout value? > > Note: I use crontab now, but is this true way? > Thank you. > > Some Information from Radius > > ippool main_pool { > > range-start = 172.20.3.1 > range-stop = 172.20.3.254 > netmask = 255.255.255.0 > cache-size = 254 > session-db = /var/lib/radiusd/db.ippool > ip-index = /var/lib/radiusd/db.ipindex > override = no > maximum-timeout = 600 (Not work..????) > } You are not sending accounting to radius server. IP address is released when accounting stop packet is recieved. Ivan Kalik - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 2