April 2009 - Freeradius-Users - lists.freeradius.org

rlm_linelog & locking
by Phil Mayers 21 Apr '09

21 Apr '09

It appears rlm_linelog doesn't lock the file before writing to it. Should it? Won't lines get interspersed at high logging rates if not?

2 2

Re: How to calling-station-id attribute in check item
by Nirmal 21 Apr '09

21 Apr '09

:-D Thanks Alan. --- On Tue, 4/21/09, Alan DeKok <aland(a)deployingradius.com> wrote: From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: How to calling-station-id attribute in check item To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Tuesday, April 21, 2009, 1:41 PM Nirmal wrote: > I am using free radius + user database in Mysql + PPPoE server. I am > done with authentication but i want to "bind + log" mac addr with > username but i am not getting the attribute Calling-station-id. Please > guide how to get it there. Fix the PPPoE server to send it. FreeRADIUS can't magically invent a value for Calling-Station-Id. The RADIUS client has the value, and it needs to send the attribute to FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

MsCHAP with freeradius-server-2.1.3
by David N'DAKPAZE 21 Apr '09

21 Apr '09

Hello, I am using freeradius with Active Directory.I want to use mschap for authentication but the users are all rejected for no known good password.It seems that only PAP authentication works. Any help will be appreciated.

2 1

How to calling-station-id attribute in check item
by Nirmal 21 Apr '09

21 Apr '09

Hi, I am using free radius version 2.1.1-7. I am using free radius + user database in Mysql + PPPoE server. I am done with authentication but i want to "bind + log" mac addr with username but i am not getting the attribute Calling-station-id. Please guide how to get it there. Access-Request as below. rad_recv: Access-Request packet from host 127.0.0.1 port 55229, id=248, length=90 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "spark" CHAP-Challenge = 0xaa7ad2fc8f118f0184dcdaa5c6fb2929f78f CHAP-Password = 0x79237be1217344f61fe5a6972daaf9f93c NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Thanks and regards Nirmal Patel | Mumbai

2 1

Posting
by jon jon 20 Apr '09

20 Apr '09

Help, I would like to post a messageto all the list members. Thanks

2 1

automatic radcheck user addition - is it possible?
by Derek C 20 Apr '09

20 Apr '09

Hi, I've had a great success using freeradius with Coova Chilli to make a wifi hotspot and authenticate users by Mac address (so that users see a "splash" page and then click to gain Internet access). Now I'm wondering if its possible to make freeradius insert an unknown (and, therefore, normally unauthenticated) user into the radcheck/radusergroup tables IF they don't already exist in there? I'm interested in doing this so that I can transparently use freeradius to monitor Internet usage (by mac address again) without needing them to use my web ["splash"] pages at all (so that web access isn't necessary). thanks for any help! Derek

4 9

Error: Ignoring request from unknown client IP:32772
by jon jon 20 Apr '09

20 Apr '09

Hi, I am new to chillispot and freeradius. My setup is as follows. I am using linksys wrt54gl which connects to a server running chillispot which did connect to a linksys router and everything worked fine. I am switching to a new network and I replaced the linksys router with a cisco 1841 router. Also changed the IP address of the cisco router. Changed the IP in the clients.conf. I can register as a user but when trying to connect to the internet, I get the error ignoring request form unkown client IP:32772. Is there anything I need to change, now that I am using a cisco router? Thanks, jon

3 9

free9360@gmail.com
by jon jon 20 Apr '09

20 Apr '09

free9360(a)gmail.com Here is my email.

1 0

Howto: Session-Timeout for DTAG (Zwangstrennung)
by Uwe Kastens 20 Apr '09

20 Apr '09

Hello list, This might be interesting for users in germany, since there is a disconnect each 24h if you are working with products from Deutsche Telekom (DTAG). The disconnect will be forced, if the session is up for more than 24h. So the job was to set the session-timeout so that logout will ocur each day at the same time. I solved it with freeradius/postgres with an internal sql-function. Its a quick hack and there might be 100 better ways to solve. Here we go: The function for postgres: CREATE FUNCTION sessionto(character varying(64)) RETURNS integer AS' DECLARE user ALIAS FOR $1; timeout INTEGER; BEGIN IF (select time from disctime where username=user and time is not NULL) > extract(epoch from (localtime)) THEN select into timeout round((select time from disctime where username=user and time is not NULL) - extract(epoch from (localtime))); ELSE select into timeout round((86400 + (select time from disctime where username=user and time is not NULL) - extract(epoch from (localtime)))); END IF; if (timeout is NULL) THEN timeout:=86399; END IF; RETURN timeout; END; ' LANGUAGE 'plpgsql'; disctime is a table which has fields for username and time in seconds since 0:00 of the day. The session-timeout can be set via sql xlat from reply module as an dynamic value: attribute,op, value Session-Timeout = `%{sql: select sessionto('%{User-Name}') }` BR Uwe -- kiste lat: 54.322684, lon: 10.13586

2 1

Re: Redundant Load Balanced LDAP authentication fails when
by Allers, Justin 20 Apr '09

20 Apr '09

Thanks Ivan, I researched your suggestion and was able to correct the situation. To setup the redundancy to work with ntlm_auth I needed to add the other server to the following line in the smb.conf file: Line Before: password server = ldap1.domain.org Line with Redundancy: password server = ldap1.domain.org ldap2.domain.org Justin

1 0