April 2009 - Freeradius-Users - lists.freeradius.org

how to disable double connection
by Tseveendorj 18 Apr '09

18 Apr '09

Hello, I'm providing internet to customers via ADSL2+. I have cisco router and FreeRADIUS 2.1.3. Customer can make double connection via PPPoE. How to disable double connection ? What kind of attribute can do that ? Thanks for any help. Sincerely, Tseveen.

3 5

Re: Freeradius-Users Digest, Vol 48, Issue 70
by Khan 17 Apr '09

17 Apr '09

On Fri, Apr 17, 2009 at 5:00 AM, <freeradius-users-request(a)lists.freeradius.org> wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. FreeRADIUS 2 Installation failed on ubuntu hardy (Khan) > 2. Re: problev with radius (A.L.M.Buxey(a)lboro.ac.uk) > 3. Re: FreeRADIUS 2 Installation failed on ubuntu hardy > (A.L.M.Buxey(a)lboro.ac.uk) > 4. Re: FreeRADIUS 2 Installation failed on ubuntu hardy > (EasyHorpak.com) > 5. Re: FreeRADIUS 2 Installation failed on ubuntu hardy (Alan DeKok) > 6. Re: radpostauth sql logging of bad passwords (Alan DeKok) > 7. RE: rlm_perl behavior (Meyers, Dan) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Fri, 17 Apr 2009 01:33:31 -0500 > From: Khan <khansfriend(a)gmail.com> > Subject: FreeRADIUS 2 Installation failed on ubuntu hardy > To: freeradius-users(a)lists.freeradius.org > Message-ID: > <d0992c780904162333m676a83c9o65b1f5921922a753(a)mail.gmail.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Hello everyone, > > I am new to VoIP, its my first time installing FR on my server. I > followed the instructions and first installed dependencies and then > FR. > > My installation process and other steps i took can be found on this > link: http://voiprookie.blogspot.com/ > > I tried to install it several time but no luck, first I used aptitude > which installed the 1.x version so i removed it and then I used > synaptic to install that didn't work, finally i took manual approach > and installed it as posted on the link above. > > However during installation I have seen many warnings, I tried to > capture the screen dump which can be found at this link: > http://pastebin.com/f1d50a81 > > Obviously it didn't install right but i have no clue where to go from > here, could anyone please help me guide to the right procedure. The > version on other information are posted on my bloggspot link. > > Does installing, removing, and re-installing several times screwed up > my server and now it wouldn't let me install ? > > Please help!!! > > > Thanks ya'all in advance... > > > Khan > > > ------------------------------ > > Message: 2 > Date: Fri, 17 Apr 2009 08:38:29 +0100 > From: A.L.M.Buxey(a)lboro.ac.uk > Subject: Re: problev with radius > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20090417073829.GA14282(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > Hi, > >> Fri Apr 17 09:52:09 2009 : Auth: Login OK: [miracle] (from client st17-gw port 367362 cli 00:14:A4:46:73:26) >> Fri Apr 17 09:52:12 2009 : Auth: Login OK: [stepanov] (from client st17-gw port 367363 cli 00:0E:A6:3A:A5:4E) >> Fri Apr 17 09:52:13 2009 : Auth: Login OK: [260130] (from client rep-hsgw01 port 2151678103 cli 00:1F:C6:A6:F9:A6) >> >> What this mean this error? >> > > it means your server is hanging around waiting for authentication stuff > to be sorted out ...and the request is being asked again...and again... > > the cause is usually a very slow database or LDAP server. > > alan > > > ------------------------------ > > Message: 3 > Date: Fri, 17 Apr 2009 08:46:24 +0100 > From: A.L.M.Buxey(a)lboro.ac.uk > Subject: Re: FreeRADIUS 2 Installation failed on ubuntu hardy > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20090417074624.GB14282(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > Hi, > >> My installation process and other steps i took can be found on this >> link: http://voiprookie.blogspot.com/ >> >> I tried to install it several time but no luck, first I used aptitude >> which installed the 1.x version so i removed it and then I used >> synaptic to install that didn't work, finally i took manual approach >> and installed it as posted on the link above. >> >> However during installation I have seen many warnings, I tried to >> capture the screen dump which can be found at this link: >> http://pastebin.com/f1d50a81 > > http://wiki.freeradius.org/Build#Building_Ubuntu_packages > > what do you mean by 'it didnt install right'? what happens when > you run "radiusd -X"? i get errors in modular installation and it fails: rlm_eap: Failed to initialize type tls /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. Detailed output is at this line: http://pastebin.com/m1c3688bc Problem areas are highlighted in my guess but i could be wrong... > >> Does installing, removing, and re-installing several times screwed up >> my server and now it wouldn't let me install ? > > only if you threw it all over the place and didnt clean up after. the > server is pretty good at dealing with older bits in the wrong places > (because it wont read them - as the location of files its supposed > to read are in the config file!). if it installed into /usr/local/lib > then is that in your LDPATH? > I was only in usr/src directory when i followed installation instructions, the step by step what i did is at my blogspot to review. Here is the link to that: http://voiprookie.blogspot.com/ > alan > > > ------------------------------ > > Message: 4 > Date: Fri, 17 Apr 2009 15:42:55 +0700 > From: "EasyHorpak.com" <info(a)easyhorpak.com> > Subject: Re: FreeRADIUS 2 Installation failed on ubuntu hardy > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: <002101c9bf38$80f73c10$03b6a8c0@nznf80c39ca487> > Content-Type: text/plain; format=flowed; charset="windows-874"; > reply-type=original > > Ubuntu 8.04 hardy is freeradius 1.7 > > if Ubuntu 8.10 is freeradius 2.1 > > > > ----- Original Message ----- > From: <A.L.M.Buxey(a)lboro.ac.uk> > To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> > Sent: Friday, April 17, 2009 2:46 PM > Subject: Re: FreeRADIUS 2 Installation failed on ubuntu hardy > > >> Hi, >> >>> My installation process and other steps i took can be found on this >>> link: http://voiprookie.blogspot.com/ >>> >>> I tried to install it several time but no luck, first I used aptitude >>> which installed the 1.x version so i removed it and then I used >>> synaptic to install that didn't work, finally i took manual approach >>> and installed it as posted on the link above. >>> >>> However during installation I have seen many warnings, I tried to >>> capture the screen dump which can be found at this link: >>> http://pastebin.com/f1d50a81 >> >> http://wiki.freeradius.org/Build#Building_Ubuntu_packages >> >> what do you mean by 'it didnt install right'? what happens when >> you run "radiusd -X"? >> >>> Does installing, removing, and re-installing several times screwed up >>> my server and now it wouldn't let me install ? >> >> only if you threw it all over the place and didnt clean up after. the >> server is pretty good at dealing with older bits in the wrong places >> (because it wont read them - as the location of files its supposed >> to read are in the config file!). if it installed into /usr/local/lib >> then is that in your LDPATH? >> >> alan >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > > > > ------------------------------ > > Message: 5 > Date: Fri, 17 Apr 2009 11:07:42 +0200 > From: Alan DeKok <aland(a)deployingradius.com> > Subject: Re: FreeRADIUS 2 Installation failed on ubuntu hardy > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <49E846DE.7040500(a)deployingradius.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Khan wrote: >> My installation process and other steps i took can be found on this >> link: http://voiprookie.blogspot.com/ > > The discussion on editing the "configure" arguments is unnecessary. > If you had read the rest of the debian/control file, you would see how > OpenSSL *should* be enabled. > >> I tried to install it several time but no luck, first I used aptitude >> which installed the 1.x version so i removed it and then I used >> synaptic to install that didn't work, finally i took manual approach >> and installed it as posted on the link above. > > It didn't work because you didn't install the libssl-dev package. It is already installed, i made sure i have dependencies installed before i started to install but i might have forgotten something. As you can see my libssl-dev is already installed root@voipbiznet:~# apt-get install libssl-dev Reading package lists... Done Building dependency tree Reading state information... Done libssl-dev is already the newest version. libssl-dev set to manually installed. 0 upgraded, 0 newly installed, 0 to remove and 0 not upgraded. 5 not fully installed or removed. After this operation, 0B of additional disk space will be used. Setting up freeradius-iodbc (2.1.4-0) ... * Restarting FreeRADIUS server freeradius [fail] * Failed to stop freeradius. invoke-rc.d: initscript freeradius, action "restart" failed. dpkg: error processing freeradius-iodbc (--configure): subprocess post-installation script returned error exit status 1 Setting up freeradius-krb5 (2.1.4-0) ... * Restarting FreeRADIUS server freeradius [fail] * Failed to stop freeradius. invoke-rc.d: initscript freeradius, action "restart" failed. dpkg: error processing freeradius-krb5 (--configure): subprocess post-installation script returned error exit status 1 Setting up freeradius-ldap (2.1.4-0) ... * Restarting FreeRADIUS server freeradius [fail] * Failed to stop freeradius. invoke-rc.d: initscript freeradius, action "restart" failed. dpkg: error processing freeradius-ldap (--configure): subprocess post-installation script returned error exit status 1 Setting up freeradius-mysql (2.1.4-0) ... * Restarting FreeRADIUS server freeradius [fail] * Failed to stop freeradius. invoke-rc.d: initscript freeradius, action "restart" failed. dpkg: error processing freeradius-mysql (--configure): subprocess post-installation script returned error exit status 1 Setting up freeradius-postgresql (2.1.4-0) ... * Restarting FreeRADIUS server freeradius [fail] * Failed to stop freeradius. invoke-rc.d: initscript freeradius, action "restart" failed. dpkg: error processing freeradius-postgresql (--configure): subprocess post-installation script returned error exit status 1 Errors were encountered while processing: freeradius-iodbc freeradius-krb5 freeradius-ldap freeradius-mysql freeradius-postgresql E: Sub-process /usr/bin/dpkg returned an error code (1) r > >> However during installation I have seen many warnings, I tried to >> capture the screen dump which can be found at this link: >> http://pastebin.com/f1d50a81 > > I've never understood why people get worried about compile warnings. > Ignore them. Thanks, now i know not to worry about warnings... > >> Does installing, removing, and re-installing several times screwed up >> my server and now it wouldn't let me install ? > > It takes a lot of hard work to break things that badly. I guess working in the middle of night is not good idea, i have no recollection of what happened :( > > Alan DeKok. > > > ------------------------------ > > Message: 6 > Date: Fri, 17 Apr 2009 11:08:17 +0200 > From: Alan DeKok <aland(a)deployingradius.com> > Subject: Re: radpostauth sql logging of bad passwords > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <49E84701.3080600(a)deployingradius.com> > Content-Type: text/plain; charset=ISO-8859-1 > > Guy Fraser wrote: >> I have installed : >> "radiusd: FreeRADIUS Version 2.1.3, for host i386-portbld-freebsd7.1, >> built on Feb 26 2009 at 15:47:46" >> >> I have not been able figure out how to get it to log failed >> authentication attempts >> into the radpostauth sql table, like I had it working in Version 1. > > What do you mean by that? > > Q: "I tried to do stuff, but it didn't work". > A: Huh? > > Alan DeKok. > > > ------------------------------ > > Message: 7 > Date: Fri, 17 Apr 2009 10:26:36 +0100 > From: "Meyers, Dan" <d.meyers(a)lancaster.ac.uk> > Subject: RE: rlm_perl behavior > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: > <9FFF610D5DF89A4CAC9CB450C756566302456448(a)exchange-be4.lancs.local> > Content-Type: text/plain; charset="us-ascii" > >> >> It should be running one Perl thread per system thread. The > server >> >> core already manages min/max spare threads, idle threads, etc. > <snip> >> > I hope this implementation will satisfy Borislav too. Will he be >> > able to >> > instantiate different perl scripts for different needs? >> > >> > So, when do I start testing :) > > Just to say, we're currently using FreeRadius 2.1.3 with rlm_perl in a > project currently in active development, and having read this i'm > holding off upgrading to 2.1.4 as we also use the multiple perl threads > functionality of the module to parallel process and increase throughput. > We have a specific development server/environment, and would be more > than happy to test any patches designed to fix this 2.1.4 issue on it. > > -- > Dan Meyers > Network Specialist, Lancaster University > E-Mail: d.meyers(a)lancaster.ac.uk > > > > > > > ------------------------------ > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > End of Freeradius-Users Digest, Vol 48, Issue 70 > ************************************************ >

1 0

RE: NAS table
by Nizar Zulmi 17 Apr '09

17 Apr '09

dearl list all..don't know how to thanks to you to reply my email and answer my quest. and sorry for to much question.:Di've run this commandradiusd -X but it return this The program 'radiusd' can be found in the following packages: * radiusd-livingston * yardradius * xtradiusTry: apt-get install <selected package i read freeradius documentation to do debug in ubuntu, and i try this command but i freeradius -X and return this messagefreeradius -XStarting - reading configuration files ...reread_config: reading radiusd.confConfig: including file: /etc/freeradius/proxy.confConfig: including file: /etc/freeradius/clients.confConfig: including file: /etc/freeradius/snmp.confConfig: including file: /etc/freeradius/eap.confConfig: including file: /etc/freeradius/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0read_config_files: reading dictionaryread_config_files: reading naslistUsing deprecated naslist file. Support for this will go away soon.read_config_files: reading clients this message after i comment out this inf clients.conf#client 127.0.0.1 {# secret = passwordradius# shortname = localhost# nastype = other # localhost isn't usually a NAS... # } but if i uncomment that then i run freeradius -X it return this message main: debug_level = 0read_config_files: reading dictionaryread_config_files: reading naslistUsing deprecated naslist file. Support for this will go away soon.read_config_files: reading clientsread_config_files: reading realmsradiusd: entering modules setupModule: Library search path is /usr/lib/freeradiusModule: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)"rlm_exec: Wait=yes but no output defined. Did you mean output=none?Module: Instantiated exec (exec)Module: Loaded exprModule: Instantiated expr (expr)Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yesModule: Instantiated pap (pap)Module: Loaded CHAPModule: Instantiated chap (chap)Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)"Module: Instantiated mschap (mschap)Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600Module: Instantiated unix (unix)Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = norlm_eap: Loaded and initialized type md5rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP"rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = norlm_eap: Loaded and initialized type mschapv2Module: Instantiated eap (eap)Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = noModule: Instantiated preprocess (preprocess)Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = noModule: Instantiated realm (suffix)Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "jOeLya" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = no sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = yes sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER B Y id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER B Y id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.Group Name,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroup check,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.Grou pName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.Group Name,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroup reply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.Grou pName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessio nTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause=' %{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSession Time=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTim e <= '%S'" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{ Acct-Output-Octets}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Addr ess}'" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUni queId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, Acc tSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctet s, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddre ss, AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '% {SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Ty pe}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) S ECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Se rvice-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" sql: accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId , UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStop Time, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctI nputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCa use, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay ) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', ' 0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}' , '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Frame d-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', Acc tStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIP Address = '%{NAS-IP-Address}'" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessi onTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctO utputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Ca use}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info} ' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' A ND NASIPAddress = '%{NAS-IP-Address}'" sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqu eId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctS topTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, Ac ctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminat eCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDe lay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name} ', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB( '%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Inpu t-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station- Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Fra med-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName=' %{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddr ess, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct W HERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) va lues ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Typ e}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01 23456789.-_: /"rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linkedrlm_sql (sql): Attempting to connect to root@localhost:/radiusrlm_sql (sql): starting 0rlm_sql (sql): Attempting to connect rlm_sql_mysql #0rlm_sql_mysql: Starting connect to MySQL server for #0rlm_sql (sql): Connected new DB handle, #0rlm_sql (sql): starting 1rlm_sql (sql): Attempting to connect rlm_sql_mysql #1rlm_sql_mysql: Starting connect to MySQL server for #1rlm_sql (sql): Connected new DB handle, #1rlm_sql (sql): starting 2rlm_sql (sql): Attempting to connect rlm_sql_mysql #2rlm_sql_mysql: Starting connect to MySQL server for #2rlm_sql (sql): Connected new DB handle, #2rlm_sql (sql): starting 3rlm_sql (sql): Attempting to connect rlm_sql_mysql #3rlm_sql_mysql: Starting connect to MySQL server for #3rlm_sql (sql): Connected new DB handle, #3rlm_sql (sql): starting 4rlm_sql (sql): Attempting to connect rlm_sql_mysql #4rlm_sql_mysql: Starting connect to MySQL server for #4rlm_sql (sql): Connected new DB handle, #4rlm_sql (sql): - generate_sql_clientsrlm_sql (sql): Query: SELECT * FROM nasrlm_sql (sql): Reserving sql socket id: 4rlm_sql (sql): Read entry nasname=127.0.0.1,shortname=localhost,secret=passwordr adiusrlm_sql (sql): Adding client 127.0.0.1 (localhost) to clients listrlm_sql (sql): Released sql socket id: 4Module: Instantiated sql (sql)Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Addre ss, NAS-Port"Module: Instantiated acct_unique (acct_unique)Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no"Module: Instantiated files (files)Module: Loaded detail detail: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-% Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = noModule: Instantiated detail (detail)Module: Loaded radutmp radutmp: filename = "/var/log/freeradius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yesModule: Instantiated radutmp (radutmp)Listening on authentication *:1812Listening on accounting *:1813Ready to process requests. whats really wrong...still cannot read NAS from nas table on radius..was it? really apreciate your answer. Nizar --- On Thu, 4/16/09, Ivan Kalik <tnt(a)kalik.net> wrote: From: Ivan Kalik <tnt(a)kalik.net> Subject: RE: NAS table To: "'FreeRadius users mailing list'" <freeradius-users(a)lists.freeradius.org> Date: Thursday, April 16, 2009, 4:02 AM this is result of freeradius -X reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/sql.conf It's not. It's a result of HUP. Now post what you were told. Ivan Kalik Kalik Informatika ISP -----Inline Attachment Follows----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Mikrotik radius-mac-authentication
by Adi_T 17 Apr '09

17 Apr '09

I'm using Freeradius to control the access to my Mikrotik APs. In the radius database I've put at the radcheck table all the mac-addresses of my clients. When I put accept as a value, the clients connects immediately, but when I put reject the clients that are connected do not disconnect. I have to disable radius-mac-authentication at the security profile of the wireless interface and enable it again so that the connected clients that are declared as rejected disconnect from the APs and do not reconnect again. Is there anything I can do to automatically block even the connected clients when I put reject as a value Thanks in advance Adi -- View this message in context: http://www.nabble.com/Mikrotik-radius-mac-authentication-tp23077135p2307713… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

FreeRADIUS 2 Installation failed on ubuntu hardy
by Khan 17 Apr '09

17 Apr '09

Hello everyone, I am new to VoIP, its my first time installing FR on my server. I followed the instructions and first installed dependencies and then FR. My installation process and other steps i took can be found on this link: http://voiprookie.blogspot.com/ I tried to install it several time but no luck, first I used aptitude which installed the 1.x version so i removed it and then I used synaptic to install that didn't work, finally i took manual approach and installed it as posted on the link above. However during installation I have seen many warnings, I tried to capture the screen dump which can be found at this link: http://pastebin.com/f1d50a81 Obviously it didn't install right but i have no clue where to go from here, could anyone please help me guide to the right procedure. The version on other information are posted on my bloggspot link. Does installing, removing, and re-installing several times screwed up my server and now it wouldn't let me install ? Please help!!! Thanks ya'all in advance... Khan

4 3

problev with radius
by Волошин Вячеслав 17 Apr '09

17 Apr '09

radiusd -v: radiusd: FreeRADIUS Version 1.0.4, for host , built on Jun 19 2005 at 14:01:31 Copyright (C) 2000-2003 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Has this error, when client connected in radius server: In /var/log/radius/radius.log Fri Apr 17 09:25:50 2009 : Error: Discarding duplicate request from client gnugk:48117 - ID: 126 due to unfinished request 229 Fri Apr 17 09:26:22 2009 : Auth: Login OK: [4413] (from client gnugk port 0 cli 4413) Fri Apr 17 09:33:32 2009 : Error: Discarding duplicate request from client st17-gw:1232 - ID: 15 due to unfinished request 235 Fri Apr 17 09:33:34 2009 : Error: Discarding duplicate request from client st17-gw:1232 - ID: 15 due to unfinished request 235 Fri Apr 17 09:33:40 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 16 due to unfinished request 236 Fri Apr 17 09:33:42 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 16 due to unfinished request 236 Fri Apr 17 09:33:51 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 17 due to unfinished request 237 Fri Apr 17 09:33:53 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 17 due to unfinished request 237 Fri Apr 17 09:34:17 2009 : Error: Dropping conflicting packet from client rep-hsgw01:2972 - ID: 206 due to unfinished request 238 Fri Apr 17 09:34:20 2009 : Error: Dropping conflicting packet from client rep-hsgw01:2972 - ID: 206 due to unfinished request 238 Fri Apr 17 09:35:22 2009 : Error: Dropping conflicting packet from client st17-gw:1233 - ID: 18 due to unfinished request 239 Fri Apr 17 09:35:24 2009 : Error: Dropping conflicting packet from client st17-gw:1233 - ID: 18 due to unfinished request 239 Fri Apr 17 09:35:35 2009 : Error: Dropping conflicting packet from client rep-hsgw01:2972 - ID: 207 due to unfinished request 240 Fri Apr 17 09:35:38 2009 : Error: Dropping conflicting packet from client rep-hsgw01:2972 - ID: 207 due to unfinished request 240 Fri Apr 17 09:36:36 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 19 due to unfinished request 241 Fri Apr 17 09:36:38 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 19 due to unfinished request 241 Fri Apr 17 09:36:42 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 20 due to unfinished request 242 Fri Apr 17 09:36:44 2009 : Error: Discarding duplicate request from client st17-gw:1233 - ID: 20 due to unfinished request 242 Fri Apr 17 09:36:49 2009 : Error: Discarding duplicate request from client st17-gw:1234 - ID: 21 due to unfinished request 243 Fri Apr 17 09:36:51 2009 : Error: Discarding duplicate request from client st17-gw:1234 - ID: 21 due to unfinished request 243 Fri Apr 17 09:37:05 2009 : Error: Discarding duplicate request from client st17-gw:1234 - ID: 22 due to unfinished request 244 Fri Apr 17 09:37:07 2009 : Error: Discarding duplicate request from client st17-gw:1234 - ID: 22 due to unfinished request 244 when the reboot radiusd, auth and accounting req normal processing: Fri Apr 17 09:51:53 2009 : Error: Discarding duplicate request from client st17-gw:1258 - ID: 74 due to unfinished request 303 Fri Apr 17 09:51:54 2009 : Error: Discarding duplicate request from client st17-gw:1259 - ID: 75 due to unfinished request 304 Fri Apr 17 09:52:01 2009 : Error: Discarding duplicate request from client st17-gw:1260 - ID: 76 due to unfinished request 305 Fri Apr 17 09:52:05 2009 : Info: Ready to process requests. Fri Apr 17 09:52:09 2009 : Auth: Login OK: [miracle] (from client st17-gw port 367362 cli 00:14:A4:46:73:26) Fri Apr 17 09:52:12 2009 : Auth: Login OK: [stepanov] (from client st17-gw port 367363 cli 00:0E:A6:3A:A5:4E) Fri Apr 17 09:52:13 2009 : Auth: Login OK: [260130] (from client rep-hsgw01 port 2151678103 cli 00:1F:C6:A6:F9:A6) What this mean this error? Formula+ LTD, т.(8617) 61-02-01 ф.(8617) 61-34-16 м.(918) 634-7550 voloshin(a)maks.net www.formulaplus.ru

2 1

Help with LDAP groupOfNames?
by Jason Antman 16 Apr '09

16 Apr '09

I just upgraded to FreeRadius 2.1.1, as per some off-list advice, but still am having issues with this... I've Googled and read docs to no avail, probably as I don't know much of anything about Radius at all - and just need this (seemingly relatively simple) thing. I'm running FreeRADIUS 2.1.1 (SuSE package) and OpenLDAP 2.3.19. I have an access point that will do captive portal, but only via RADIUS, not via LDAP natively. I already have an LDAP server running, so I just added a new groupOfNames called "WirelessUsers". Basically, *all* I want RADIUS to do is check the username and password, and assuming they are correct, either allow or deny based on whether the user is a member of "WirelessUsers". According to radtest, I have it working with LDAP, but it allows everyone with a valid username and password access, regardless of the WirelessUsers group - and I'm not seeing anything related to that group in the LDAP logs or anything related to groups at all in `radiusd -f -X`. I can't seem to find anything concrete online for freeradius1 relating to groupOfNames, so I've just been trying random things that I found online (for raddb/users) hoping one would work. RELEVANT CONFIGS (only relevant portions, comments removed) raddb/sites-enabled/default: authorize { ldap } authenticate { Auth-Type LDAP { ldap } } raddb/modules/ldap: ldap { server = "127.0.0.1" basedn = "dc=example,dc=com" #filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" filter = "(&(objectClass=posixAccount)(uid=%{Stripped-User-Name:-%{User-Name}}))" start_tls = no #access_attr = "dialupAccess" dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 password_attribute = userPassword groupname_attribute = "cn" #groupmembership_filter = (|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-\ UserDn}))) groupmembership_filter = (|(&(objectClass=GroupOfNames)(member=%{check:LDAP-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{\ check:LDAP-UserDn}))) groupmembership_attribute = WirelessUsers #groupmembership_attribute = "memberof" timeout = 4 timelimit = 3 net_timeout = 1 # compare_check_items = yes # do_xlat = yes # access_attr_used_for_allow = yes } raddb/users: #DEFAULT Auth-Type = LDAP # Fall-Through = yes # #DEFAULT Ldap-Group != "wireless", Auth-Type := Reject # # # # # #DEFAULT Ldap-Group != "cn=WirelessUsers,ou=groups,dc=midlandparkambulance,dc=com", Auth-Type := Reject # #DEFAULT Auth-Type := LDAP # # # DEFAULT Ldap-Group == WirelessUsers DEFAULT Auth-Type := Reject (For users, I've tried each of the pairs of commented-out lines, as per different things I found online.) I'm sure this is horribly simple, but I just can't seem to figure it out from the docs or from extensive googling. Thanks for any help, Jason Antman

2 2

Re: Pharmacy Online Sale 70% OFF!
by VIAGRA � Pfizer Inc. 16 Apr '09

16 Apr '09

About this mailing: You are receiving this e-mail because you subscribed to MSN Featured Offers. Microsoft respects your privacy. If you do not wish to receive this MSN Featured Offers e-mail, please click the "Unsubscribe" link below. This will not unsubscribe you from e-mail communications from third-party advertisers that may appear in MSN Feature Offers. This shall not constitute an offer by MSN. MSN shall not be responsible or liable for the advertisers' content nor any of the goods or service advertised. Prices and item availability subject to change without notice. ©2009 Microsoft | Unsubscribe at http://niceswell.com | More news at http://niceswell.com | Prvacy at http://niceswell.com Microsoft Corporation, One Microsoft Way, Redmond, WA 98052

1 0

Tagged attributes problem and rlm_perl in FreeRADIUS 2.1.4
by Alexandr Kovalenko 16 Apr '09

16 Apr '09

Hello! I've already asked about the very same problem with tagged attributes and rlm_perl in FreeRADIUS 1.1.7, and Ivan Kalik <tnt(a)kalik.net> told me that he tested it on 2.1.4, so I've upgraded to new version: FreeRADIUS Version 2.1.4, for host i386-portbld-freebsd7.1, built on Apr 16 2009 at 10:42:09 But the problem persist. But now it became even worse, it does not authorize even for the first time. Log file attached. If I uncomment $RAD_REPLY{'ERX-Service-Activate:2'} = "deny" line in code radiusd just dies. When it is commented radiusd returns attributes ERX-Service-Activate and ERX-Service-Statistics without tag. Thanks in advance for help. Code snippet of my rlm_perl authorize( ) function: if (($RAD_REQUEST{'User-Name'} eq 'admin') and ($RAD_REQUEST{'User-Password'} eq 'test')) { %RAD_REPLY = undef; $RAD_REPLY{'ERX-Service-Activate:1'} = "telesys"; $RAD_REPLY{'ERX-Service-Statistics:1'}[0] = "time-volume"; $RAD_REPLY{'ERX-Qos-Parameters'}[0] = "internet_tr_value 2097152"; $RAD_REPLY{'ERX-Qos-Parameters'}[1] = "internet_tr_value_in 2097152"; # $RAD_REPLY{'ERX-Service-Activate:2'} = "deny"; $RAD_REPLY{'ERX-Qos-Profile-Name'} = "SP_Tele_Internet"; $RAD_REPLY{'Framed-IP-Address'} = '10.0.112.2'; $RAD_REPLY{'Framed-IP-Netmask'}= "255.255.255.255"; $RAD_REPLY{'ERX-Primary-DNS'} = "77.91.190.21"; $RAD_REPLY{'ERX-Secondary-DNS'} = "77.91.190.24"; return RLM_MODULE_OK; } else { return RLM_MODULE_REJECT; }; -- Alexandr Kovalenko http://uafug.org.ua/

2 4

priority in radcheck and radgroupcheck
by Oguzhan Kayhan 16 Apr '09

16 Apr '09

Hi, I have a simultaneous-use information belongs to a users radgropcheck.. What i want is, if i enter a value to users radcheck, it should bypass the radgroupcheck value..how it is possible?? For now, whatever i make the simultaneous use value for user, it uses the default settings from the radgroupcheck.

2 3