March 2009 - Freeradius-Users - lists.freeradius.org

Re: A couple of NAS servers with same Port ID problem.
by Piero Giobbi 19 Mar '09

19 Mar '09

Thx for the answers Alan. p Piero Giobbi wrote: > This is probably a silly question but i can't solve it by myself. I > have > a couple of WLANS (Proxim AP4000), works great with FR but im having > some accounting trouble (guessing), i get a lot of these in my log: The AP's don't do accounting "well". > I tripplechecked the shared secret. That's not the problem. > The authentication works, clients can connect. > What does rlm_radutmp do? Could i turn it off in my config (what would > happened)? It shows who is currently logged in. If you don't need to know that, delete the references to radutmp from the configuration files. > Should i specify different NAS-PORTS for each NAS-server? No. > OR - could it just be that Proxim AP4000 is not handling these logouts > correctly, a hardware problem? The AP is giving different information for the accounting start && stop. Not surprisingly... this is allowed by the RADIUS RFC's. Alan DeKok.

1 0

how to prevent account to do multiple login
by Nizar Zulmi 19 Mar '09

19 Mar '09

i've configure freeradius and chillispot and running well, i jut have one user in radcheck table, the problem i use that account to login to the server from two client in same time both of computer got the access. how to prevent this..?? anyone help me. hope u understand. sorry for my very bad english really apreciate for your feedback

2 1

Re: freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 19 Mar '09

19 Mar '09

The machines are connected to cable and on 2 meters, in this case where to find the problem? What and how to get to see where the real problem? -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE ------------------------------------- Powered by Mail.BG - http://mail.bg

2 1

Re: FreeRadius with Postgresql
by Sunday Olutayo 19 Mar '09

19 Mar '09

I install the freeradius from the Ubuntu repo. Sunday Olutayo ----- Original Message ----- From: freeradius-users-request(a)lists.freeradius.org To: freeradius-users(a)lists.freeradius.org Sent: Thursday, 19 March, 2009 11:41:36 GMT +01:00 West Central Africa Subject: Freeradius-Users Digest, Vol 47, Issue 92 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: FreeRadius with Postgresql (A.L.M.Buxey(a)lboro.ac.uk) 2. Re: MacOS X Leopard version of FR crashing with segmentation fault (Alan DeKok) 3. Re: freeradius and mikrotik auth problem pppoe error 691 (tnt(a)kalik.net) 4. Re: Adding users in the database from a client computer (tnt(a)kalik.net) 5. Re: radclient: problem with exit code 0 and 1 (oz) 6. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 7. Re: radclient: problem with exit code 0 and 1 (tnt(a)kalik.net) 8. Re: dear everyone.. (Nizar Zulmi) ---------------------------------------------------------------------- Message: 1 Date: Thu, 19 Mar 2009 09:40:55 +0000 From: A.L.M.Buxey(a)lboro.ac.uk Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20090319094055.GC4883(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > On following the messages; this is what I get from running freeradius -X > but before point it to PostgreSQL it runs fine. <snip> > rlm_sql (sql): Could not link driver rlm_sql_postgresql: rlm_sql_postgresql.so: cannot open shared object file: No such file or directory > rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. fairly straight forward - did you build this server yourself? If so, did you check the output of the ./configure stage? looks like it hasnt built the postgres modules - probably because the required postgres devel package wasnt installed at the time. if this is from a package, check that there isnt some additional part package that provides the postgres functionality - I note that several distros split FR into multiple parts. alan ------------------------------ Message: 2 Date: Thu, 19 Mar 2009 11:08:11 +0100 From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: MacOS X Leopard version of FR crashing with segmentation fault To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <49C2198B.3050706(a)deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 Randall Newman wrote: > I looked at the permissions but everything looks ok, so still not sure > why the -x and -xx options are not working, but that's not my main > problem. I did notice one strange thing in the log shortly before one of > the segmentation faults. Not sure if its related but perhaps someone > here can shed some light: > > radiusd(32122,0xa0479720) malloc: *** error for object 0x1d3610: > incorrect checksum for freed object - object was probably modified after > being freed. > *** set a breakpoint in malloc_error_break to debug Yes, that would be related. It's a bug. The simple suggestion is to upgrade to a recent version, which won't have this bug. Alan DeKok. ------------------------------ Message: 3 Date: Thu, 19 Mar 2009 11:08:33 +0100 From: <tnt(a)kalik.net> Subject: Re: freeradius and mikrotik auth problem pppoe error 691 To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <ABOLfBNb.1237457313.6016940.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >I don`t have firewall >How i solve the problem ? Yes, you do. Things like iptables are also firewalls. Use wireshark to find where are packets stopped. And then fix it. Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 4 Date: Thu, 19 Mar 2009 11:20:26 +0100 From: <tnt(a)kalik.net> Subject: Re: Adding users in the database from a client computer To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <Xy7curVV.1237458026.1324940.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >Again, I'm a relatively new freeradius user so I am not really an expert >with it. > >In our project, we need to "add" and "delete" users from the server database >from an authorized client computer. See: - dialup admin (included with the server) - daloRadius (same thing but under active development) - phpMy Admin (works directly with the database; requires for you to know what you are doing- if you don't use the admin tools above) Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 5 Date: Thu, 19 Mar 2009 11:23:53 +0100 From: oz <oz(a)bluemonk.de> Subject: Re: radclient: problem with exit code 0 and 1 To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <49C21D39.9080304(a)bluemonk.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Alan DeKok wrote: > oz wrote: >> the normal behavior of radclient seems to get lost somewhere in the >> versions later than freeradius-0.7, where it worked: > > That's nice... but 1.1.x will NOT be fixed. > > I've committed a fix that will be in the next release of the server. > If you need this functionality, upgrade. Thanks, but for some reasons I cannot do updates to the upcoming release on that server. So I compiled 0.7 this morning, just to get the radclient tool from that release. It was succesfully built, yeay, but has another bug with masking the password when it is used in the radtest-script :-/ Sending Access-Request of id 110 to 192.168.X.X:1812 User-Name = "testuser" User-Password = "\360\213[p\224\212I\314\217\343\361\214\370\326\351$" Do you have an idea, which freeradius version after 0.7 has a working exit code 1, but is free from that other problem with the password-masking? Then I'd like to try that. Else I would have to test-compile the 19 releases between 0.7 and 1.1.7 for a possible workaround. oz ------------------------------ Message: 6 Date: Thu, 19 Mar 2009 11:31:43 +0100 From: <tnt(a)kalik.net> Subject: Re: FreeRadius with Postgresql To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <2MX3ZcOA.1237458703.3584630.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >rlm_sql (sql): Could not link driver rlm_sql_postgresql: rlm_sql_postgresql.so: cannot open shared object file: No such file or directory >rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. >radiusd.conf[11]: sql: Module instantiation failed. >radiusd.conf[1860] Unknown module "sql". >radiusd.conf[1789] Failed to parse authorize section. http://wiki.freeradius.org/index.php/FreeRADIUS_Wiki:FAQ#It_says_.22Could_n… Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 7 Date: Thu, 19 Mar 2009 11:37:47 +0100 From: <tnt(a)kalik.net> Subject: Re: radclient: problem with exit code 0 and 1 To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <grm8YwoX.1237459067.9781960.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >from that release. It was succesfully built, yeay, but has another bug with >masking the password when it is used in the radtest-script :-/ > > Sending Access-Request of id 110 to 192.168.X.X:1812 > User-Name = "testuser" > User-Password = "\360\213[p\224\212I\314\217\343\361\214\370\326\351$" > Not a bug. Shared secret is wrong. Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 8 Date: Thu, 19 Mar 2009 03:41:30 -0700 (PDT) From: Nizar Zulmi <siapa_bilang_emailku_panjang(a)yahoo.com> Subject: Re: dear everyone.. To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <820558.16835.qm(a)web30401.mail.mud.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" still can't get it. can u show me please which script to do benchmarking the RADIUS server, and how to running the script,. --- On Thu, 3/19/09, A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> wrote: From: A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: dear everyone.. To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Thursday, March 19, 2009, 4:20 PM -----Inline Attachment Follows----- Hi, > iam a new bie freeradius user, i have a duty from my lecture to build a hotspot captive portal using chillispot and freeradius. now i make it, chilispot and freeradius working well on ubuntu machine, but the problem is my lecture want me to do stress test on the radius server to make sure that the system is still working well in any condition.. > > i still confused how to perform the stress test...anyone help me please..thank you for your attentionsorry for bad english :D there are a couple of scripts supplied with the server to allow benchmarking which hit the server fast and hard. run a couple of those whilst eg flood pinging the system.? but 'any condition' is hardly any kind of scientific or useful phrase. for example, is the system working well if half the packets get lost? does the system work well if packets are routed in different directions? does the system work well when an idiot logs into the box and runs other random processes that take up CPU time (nice bit of SETI or D2OL etc)?? quantify the scenarios before you can demonstrate behaviour. useful exercise as you might uncover some wierd corner case to help improve the server (I've found several Linux kernel issues over the years on very stressed servers) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 2

filter-id help
by Dana Teague 19 Mar '09

19 Mar '09

I am running freeradius 1.0 . My server has been running for several years and has worked great authenticating users with a PIX and dialup servers. We are adding a watchguard firewall. Freeradius needs to send the watchguard the following filter-id on successful authentication: IPSEC_RADIUS. It appears to just send RADIUS and causes the authentication to fail. I know this is simple but I am having trouble getting this to work. Please help Dan

2 1

Re: dear everyone..
by Nizar Zulmi 19 Mar '09

19 Mar '09

still can't get it. can u show me please which script to do benchmarking the RADIUS server, and how to running the script,. --- On Thu, 3/19/09, A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> wrote: From: A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: dear everyone.. To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Thursday, March 19, 2009, 4:20 PM -----Inline Attachment Follows----- Hi, > iam a new bie freeradius user, i have a duty from my lecture to build a hotspot captive portal using chillispot and freeradius. now i make it, chilispot and freeradius working well on ubuntu machine, but the problem is my lecture want me to do stress test on the radius server to make sure that the system is still working well in any condition.. > > i still confused how to perform the stress test...anyone help me please..thank you for your attentionsorry for bad english :D there are a couple of scripts supplied with the server to allow benchmarking which hit the server fast and hard. run a couple of those whilst eg flood pinging the system. but 'any condition' is hardly any kind of scientific or useful phrase. for example, is the system working well if half the packets get lost? does the system work well if packets are routed in different directions? does the system work well when an idiot logs into the box and runs other random processes that take up CPU time (nice bit of SETI or D2OL etc)? quantify the scenarios before you can demonstrate behaviour. useful exercise as you might uncover some wierd corner case to help improve the server (I've found several Linux kernel issues over the years on very stressed servers) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

4 3

Re: dear everyone..
by Nizar Zulmi 19 Mar '09

19 Mar '09

thanks, so nice...I'll Try it.. --- On Thu, 3/19/09, Alan DeKok <aland(a)deployingradius.com> wrote: From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: dear everyone.. To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Thursday, March 19, 2009, 5:51 PM Nizar Zulmi wrote: > still can't get it. can u show me please which script to do benchmarking > the RADIUS server, and how to running the script,. $ man radclient Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: FreeRadius with Postgresql
by Sunday Olutayo 19 Mar '09

19 Mar '09

On following the messages; this is what I get from running freeradius -X but before point it to PostgreSQL it runs fine. Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/postgresql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yes Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded SQL sql: driver = "rlm_sql_postgresql" sql: server = "localhost" sql: port = "" sql: login = "postgres" sql: password = "hello" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = yes sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-none}}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), AcctSessionTime = (EXTRACT(EPOCH FROM('%S'::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = 0 WHERE AcctSessionTime IS NULL AND AcctStopTime IS NULL AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'::timestamp" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, AcctSessionTime = (EXTRACT(EPOCH FROM('%S'::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint) WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??ServiceType, FramedProtocol, FramedIPAddress, XAscendSessionSvrKey) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??'%{Acct-Session-Time}', '%{Acct-Authentic}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ??ConnectInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), '%{Acct-Authentic}', '%{Connect-Info}', ??'%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, 0, '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct ??SET AcctStartTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), AcctStartDelay = 0, ??ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query = "UPDATE radacct ??SET AcctStopTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), ??AcctSessionTime = NULLIF('%{Acct-Session-Time}', '')::bigint, ??AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), ??AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = 0, ??FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, ConnectInfo_stop = '%{Connect-Info}' ??WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query_alt = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, ??AcctSessionTime, AcctAuthentic, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStopDelay) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), NULLIF('%{Acct-Session-Time}', '')::bigint, ??'%{Acct-Authentic}', '%{Connect-Info}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, 0)" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "" sql: postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Could not link driver rlm_sql_postgresql: rlm_sql_postgresql.so: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[11]: sql: Module instantiation failed. radiusd.conf[1860] Unknown module "sql". radiusd.conf[1789] Failed to parse authorize section. ----- Original Message ----- From: freeradius-users-request(a)lists.freeradius.org To: freeradius-users(a)lists.freeradius.org Sent: Tuesday, 17 March, 2009 13:00:55 GMT +01:00 West Central Africa Subject: Freeradius-Users Digest, Vol 47, Issue 76 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: FreeRadius with Postgresql (A.L.M.Buxey(a)lboro.ac.uk) 2. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 3. Re: FreeRadius with Postgresql (phil lemelin) 4. Re: Radius and performance (Fajar A. Nugraha) 5. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 6. Re: Radius and performance (A.L.M.Buxey(a)lboro.ac.uk) 7. Re: FreeRadius with Postgresql (Marinko Tarlac) 8. Re: Radius and performance (tnt(a)kalik.net) 9. Re: Radius and performance (Marinko Tarlac) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 Mar 2009 11:05:09 +0000 From: A.L.M.Buxey(a)lboro.ac.uk Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20090317110509.GA28679(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? follow the usual MySQL/SQL stuff - just use postgres instead - ie 1) install postgres 2) configure postgres 3) install FreeRADIUS with postgres support 4) configure FreeRADIUS part 4 will need the SQL tables etc as supplied in the freeradius source to populate the DB. you will then need to configure a suitable user access rule for your chosen DB user (in usual postgres way). then edit the sql.conf file etc to call postgres module. edit postgres files (eg dialup.conf) with correct user/pass/table details alan ------------------------------ Message: 2 Date: Tue, 17 Mar 2009 12:11:51 +0100 From: <tnt(a)kalik.net> Subject: Re: FreeRadius with Postgresql To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <nZMwwgDz.1237288311.7684910.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? >- You configure raddb/sql.conf. And create the database with scripts in raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, accounting, session, ...) in raddb/sites-enabled/default. http://wiki.freeradius.org/SQL_HOWTO Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 3 Date: Tue, 17 Mar 2009 07:29:36 -0400 From: phil lemelin <phil.lemelin(a)gmail.com> Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <efe037fe0903170429l65ecdbcfk68bc504469127cc1(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" > Please link me to a resources on how to make FreeRadius to work with > postgreSQL on Ubuntu 8.04 LTS? > > > You configure raddb/sql.conf. And create the database with scripts in > raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, > accounting, session, ...) in raddb/sites-enabled/default. > > http://wiki.freeradius.org/SQL_HOWTO > > Ivan Kalik > Kalik Informatika ISP > I am currently looking into testing freeradius and started reading a couple of wiki/doc/man pages on the subject and ended on that SQL_HOWTO page. One of the prerequisite is to already have the NAS configured. Do you have any suggestion for a NAS running on a linux box ? Thank you. -- Philippe-Alexandre Lemelin

3 2

Adding users in the database from a client computer
by Joeven Rex Dizon 19 Mar '09

19 Mar '09

Again, I'm a relatively new freeradius user so I am not really an expert with it. In our project, we need to "add" and "delete" users from the server database from an authorized client computer. And we're a little confused on how adding and removing users work. When the client makes a request to add a user in the database, does it simply ask access in the mysql backend of the server, or make the request to the server first, and the server itself will "request" its database backend to add the user? How exactly do we request an addition or deletion of a user? Do we use the simple sql queries in the radcheck table? By the way, we've already configured the server to allow access from this client computer in the clients.conf file. We've tested it using radtest in it receives an access-accept packet. Our installed version is 2.1.0+dfsg-0ubuntu2, running on Ubuntu 8.10. The backend database we used is MySql. Thanks in advance. -- Joeven Rex L. Dizon BS Computer Engineering, UP Diliman http://jrldizon.blogspot.com

3 2

Re: freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 19 Mar '09

19 Mar '09

I don`t have firewall How i solve the problem ? Tanks advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE ------------------------------------- Powered by Mail.BG - http://mail.bg

4 3