May 2009 - Freeradius-Users - lists.freeradius.org

1 freeradius with 2 openldap (multi master)
by François Mehault 02 Jun '09

02 Jun '09

Hi All I have one freeradius and 2 openldap (multi - master). And I want my freeradius use the second openldap if the first crash. So in freeradius I instantiate the module ldap : Ldap ldapmaster { [...] } Ldap ldapbackup { [...] } And in my site-available/default I load the two modules. If my two openldap are alive, authentication succeed, but if one of them fall, authentication failed, so like this I have a « AND » between modules, and not a « OR » like I would. I don't know if I am really clear, i don't speak very well, sorry. So If some understand the problem that I try to describe and if you know how I can fix my problem, could you help me please ? thanks, Regards, François

3 6

Problems authenticating with freeRADIUS and LEAP
by smaaland 01 Jun '09

01 Jun '09

Hi! I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP. But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works. I have tried with both a laptop running Linux Mint, and a macbook, and the same thing happens at both of them. Does anyone have an idea please? -- View this message in context: http://www.nabble.com/Problems-authenticating-with-freeRADIUS-and-LEAP-tp23… Sent from the FreeRadius - User mailing list archive at Nabble.com.

5 4

freeradius-users@lists.freeradius.org
by Just E. Mail 29 May '09

29 May '09

Is there any way to setup freeRADIUS to connect to "my_db" instead of "radius" database? I have setup freeRADIUS successfully to connect to a backend PostgreSQL database. My original TEST setup is done by following the standard instruction bt creating a "radius" database & "radius" role/User. sql.con has the following instructions,which I believe make this connection; database = postgres server = "pg1" login = "radius" password = "radpass" When I start the RADIUS in the DEBUG mode, I see this line; radius@pg1:/radius and it connects & no error is displayed. -------------------- No I want to change the database to"my_db" & a Schema "radius". PostgreSQL is both of them created. I changed "sql.conf" to: database = postgres server = "pg1" login = "my_db" password = "radpass" This does not work. --------------------- Is there any way to further change the freeRADIUS configuration to have it connect to"my_db" & "radius" Schema? Is it possible that freeRADIUS software is hard coded that it will only connect to a "radius" Database with "radius" Schema?

2 2

FreeRadius with Novell
by Magnus Larsson 29 May '09

29 May '09

Hi, I'm using FreeRadius as a "radius proxy" to authenticate wireless users and send which VLAN ID they should be using. The authentication server is two Novell servers with two different trees. Now to the problem .. I can't use context less login since the FreeRadius first need to authenticate to place the user on a VLAN and then the client logs in to the Novell server. Is it possible somehow to have FreeRadius hardcoded with all possible contexts to search for the user or somehow first give a temporary VLAN to the user and then move the user to the real VLAN after the context less authentication? I hope you understand what I mean Best Regards, Magnus Larsson MCE, CWSP, BCCPP, WCSE+, CICSP _________________________________________________________________________ AddPro AB Stubbengatan 2, SE-703 44 Örebro Mobile: +46 (0)70 417 45 02 Direct: +46 (0)19 760 45 02 magnus.larsson(a)addpro.se<mailto:magnus.larsson@addpro.se> | www.addpro.se<http://www.addpro.se/> AddPro_Signatur

3 2

problem with rlm_counter module when reset option is set to never
by Ahmed Nifaz Faizabadi 29 May '09

29 May '09

Hi all, Here is the issue I am facing with rlm_counter module. I am using freeradius-server-2.1.4 and configuring Max session time for each user. for example: user1 Max-Session-Time := 1800, Auth-Type := Reject Reply-Message = "Your time limit is used" user2 Max-Session-Time := 3600, Auth-Type := Reject Reply-Message = "Your time limit is used" and rlm_counter options are : counter daily { counter-name = Max-All-Session-Time check-name = Max-All-Session key = User-Name reset = never } I am observing that the user accounting record is not deleted from rlm_counter module once the user has used his allocated time. For example when user1 has used 1800 seconds allocated to him then I will be deleting the user from users config and then add the same user back. I am getting the "Your time limit is used" message :(. Does somebody has information about how to delete the records from rlm_counter module once they are expired with reset-option set to never. Regards Ahmed Nifaz

4 11

new to freeradius, securing LAN
by ldap.lippogeneral.com 29 May '09

29 May '09

Hello All, I am very new to FreeRadius, some of users are already knew our LAN IPs ... so they can manually configure an interface on their PC and completely bypass our DHCP server.. can I solve this by using FreeRadius? I thought this can be done by checking its MAC address, so although they use valid IP address but if their MAC address not recognized by our server then they must be denied and they cannot go anywhere and cannot do anything in our LAN.. I need advise.. many thanks in advance *********************** Our outgoing mail has been scanned by MSS. ***********-***********

4 6

rlm eap problem
by Michael Ziemann 29 May '09

29 May '09

Hi folks, Now I got a new problem with rlm_eap and the server doesn't start anymore. You were right, I commented $INCLUDE sites-enabled/ in radiusd.conf. So what can I do now? Best regards Michael FreeRADIUS Version 2.1.5, for host i686-pc-linux-gnu, built on Mar 26 2009 at 14:24:27 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /mypath/freeradius/etc/raddb/radiusd.conf including configuration file /mypath/freeradius/etc/raddb/proxy.conf including configuration file /mypath/freeradius/etc/raddb/clients.conf including files in directory /mypath/freeradius/etc/raddb/modules/ including configuration file /mypath/freeradius/etc/raddb/modules/chap including configuration file /mypath/freeradius/etc/raddb/modules/acct_unique including configuration file /mypath/freeradius/etc/raddb/modules/always including configuration file /mypath/freeradius/etc/raddb/modules/attr_filter including configuration file /mypath/freeradius/etc/raddb/modules/attr_rewrite including configuration file /mypath/freeradius/etc/raddb/modules/checkval including configuration file /mypath/freeradius/etc/raddb/modules/counter including configuration file /mypath/freeradius/etc/raddb/modules/detail including configuration file /mypath/freeradius/etc/raddb/modules/detail.example.com including configuration file /mypath/freeradius/etc/raddb/modules/detail.log including configuration file /mypath/freeradius/etc/raddb/modules/digest including configuration file /mypath/freeradius/etc/raddb/modules/echo including configuration file /mypath/freeradius/etc/raddb/modules/etc_group including configuration file /mypath/freeradius/etc/raddb/modules/exec including configuration file /mypath/freeradius/etc/raddb/modules/expiration including configuration file /mypath/freeradius/etc/raddb/modules/expr including configuration file /mypath/freeradius/etc/raddb/modules/files including configuration file /mypath/freeradius/etc/raddb/modules/inner-eap including configuration file /mypath/freeradius/etc/raddb/modules/ippool including configuration file /mypath/freeradius/etc/raddb/modules/krb5 including configuration file /mypath/freeradius/etc/raddb/modules/ldap including configuration file /mypath/freeradius/etc/raddb/modules/linelog including configuration file /mypath/freeradius/etc/raddb/modules/logintime including configuration file /mypath/freeradius/etc/raddb/modules/mac2ip including configuration file /mypath/freeradius/etc/raddb/modules/mac2vlan including configuration file /mypath/freeradius/etc/raddb/modules/mschap including configuration file /mypath/freeradius/etc/raddb/modules/otp including configuration file /mypath/freeradius/etc/raddb/modules/pam including configuration file /mypath/freeradius/etc/raddb/modules/pap including configuration file /mypath/freeradius/etc/raddb/modules/passwd including configuration file /mypath/freeradius/etc/raddb/modules/perl including configuration file /mypath/freeradius/etc/raddb/modules/policy including configuration file /mypath/freeradius/etc/raddb/modules/preprocess including configuration file /mypath/freeradius/etc/raddb/modules/radutmp including configuration file /mypath/freeradius/etc/raddb/modules/realm including configuration file /mypath/freeradius/etc/raddb/modules/smbpasswd including configuration file /mypath/freeradius/etc/raddb/modules/smsotp including configuration file /mypath/freeradius/etc/raddb/modules/sql_log including configuration file /mypath/freeradius/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /mypath/freeradius/etc/raddb/modules/sradutmp including configuration file /mypath/freeradius/etc/raddb/modules/unix including configuration file /mypath/freeradius/etc/raddb/modules/wimax including configuration file /mypath/freeradius/etc/raddb/eap.conf including configuration file /mypath/freeradius/etc/raddb/sql.conf including configuration file /mypath/freeradius/etc/raddb/sql/mysql/dialup.conf including configuration file /mypath/freeradius/etc/raddb/policy.conf including files in directory /mypath/freeradius/etc/raddb/sites-enabled/ including configuration file /mypath/freeradius/etc/raddb/sites-enabled/default including configuration file /mypath/freeradius/etc/raddb/sites-enabled/inner-tunnel including configuration file /mypath/freeradius/etc/raddb/sites-enabled/control-socket including dictionary file /mypath/freeradius/etc/raddb/dictionary main { prefix = "/mypath/freeradius" localstatedir = "/mypath/freeradius/var" logdir = "/mypath/freeradius/var/log/radius" libdir = "/mypath/freeradius/lib" radacctdir = "/mypath/freeradius/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/mypath/freeradius/var/run/radiusd/radiusd.pid" checkrad = "/mypath/freeradius/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client 91.50.12.116 { require_message_authenticator = no secret = "test" shortname = "91.50.12.116" } client 91.50.53.68 { require_message_authenticator = no secret = "test" shortname = "91.50.53.68" } client 127.0.0.1 { require_message_authenticator = no secret = "test" shortname = "127.0.0.1" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/mypath/freeradius/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/mypath/freeradius/etc/raddb/certs/server.pem" certificate_file = "/mypath/freeradius/etc/raddb/certs/server.pem" CA_file = "/mypath/freeradius/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/mypath/freeradius/etc/raddb/certs/dh" random_file = "/mypath/freeradius/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/mypath/freeradius/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory rlm_eap_tls: Error reading Trusted root CA list /mypath/freeradius/etc/raddb/certs/ca.pem rlm_eap: Failed to initialize type tls /mypath/freeradius/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /mypath/freeradius/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /mypath/freeradius/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. } } Errors initializing modules

4 5

No authenticate method (Auth-Type) configuration found for the request: Rejecting the user - Failed to authenticate the user.
by Michael Ziemann 29 May '09

29 May '09

Hello People, I have some problems with my RADIUS, when I send a message with radtest, I get following error: DEBUG-INFO: FreeRADIUS Version 2.1.5, for host i686-pc-linux-gnu, built on Mar 26 2009 at 14:24:27 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file mypath/freeradius/etc/raddb/radiusd.conf including configuration file mypath/freeradius/etc/raddb/proxy.conf including configuration file mypath/freeradius/etc/raddb/clients.conf including files in directory mypath/freeradius/etc/raddb/modules/ including configuration file mypath/freeradius/etc/raddb/modules/chap including configuration file mypath/freeradius/etc/raddb/modules/acct_unique including configuration file mypath/freeradius/etc/raddb/modules/always including configuration file mypath/freeradius/etc/raddb/modules/attr_filter including configuration file mypath/freeradius/etc/raddb/modules/attr_rewrite including configuration file mypath/freeradius/etc/raddb/modules/checkval including configuration file mypath/freeradius/etc/raddb/modules/counter including configuration file mypath/freeradius/etc/raddb/modules/detail including configuration file mypath/freeradius/etc/raddb/modules/detail.example.com including configuration file mypath/freeradius/etc/raddb/modules/detail.log including configuration file mypath/freeradius/etc/raddb/modules/digest including configuration file mypath/freeradius/etc/raddb/modules/echo including configuration file mypath/freeradius/etc/raddb/modules/etc_group including configuration file mypath/freeradius/etc/raddb/modules/exec including configuration file mypath/freeradius/etc/raddb/modules/expiration including configuration file mypath/freeradius/etc/raddb/modules/expr including configuration file mypath/freeradius/etc/raddb/modules/files including configuration file mypath/freeradius/etc/raddb/modules/inner-eap including configuration file mypath/freeradius/etc/raddb/modules/ippool including configuration file mypath/freeradius/etc/raddb/modules/krb5 including configuration file mypath/freeradius/etc/raddb/modules/ldap including configuration file mypath/freeradius/etc/raddb/modules/linelog including configuration file mypath/freeradius/etc/raddb/modules/logintime including configuration file mypath/freeradius/etc/raddb/modules/mac2ip including configuration file mypath/freeradius/etc/raddb/modules/mac2vlan including configuration file mypath/freeradius/etc/raddb/modules/mschap including configuration file mypath/freeradius/etc/raddb/modules/otp including configuration file mypath/freeradius/etc/raddb/modules/pam including configuration file mypath/freeradius/etc/raddb/modules/pap including configuration file mypath/freeradius/etc/raddb/modules/passwd including configuration file mypath/freeradius/etc/raddb/modules/perl including configuration file mypath/freeradius/etc/raddb/modules/policy including configuration file mypath/freeradius/etc/raddb/modules/preprocess including configuration file mypath/freeradius/etc/raddb/modules/radutmp including configuration file mypath/freeradius/etc/raddb/modules/realm including configuration file mypath/freeradius/etc/raddb/modules/smbpasswd including configuration file mypath/freeradius/etc/raddb/modules/smsotp including configuration file mypath/freeradius/etc/raddb/modules/sql_log including configuration file mypath/freeradius/etc/raddb/modules/sqlcounter_expire_on_login including configuration file mypath/freeradius/etc/raddb/modules/sradutmp including configuration file mypath/freeradius/etc/raddb/modules/unix including configuration file mypath/freeradius/etc/raddb/modules/wimax including configuration file mypath/freeradius/etc/raddb/eap.conf including configuration file mypath/freeradius/etc/raddb/sql.conf including configuration file mypath/freeradius/etc/raddb/sql/mysql/dialup.conf including configuration file mypath/freeradius/etc/raddb/policy.conf including dictionary file mypath/freeradius/etc/raddb/dictionary main { prefix = "mypath/freeradius" localstatedir = "mypath/freeradius/var" logdir = "mypath/freeradius/var/log/radius" libdir = "mypath/freeradius/lib" radacctdir = "mypath/freeradius/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "mypath/freeradius/var/run/radiusd/radiusd.pid" checkrad = "mypath/freeradius/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client 91.50.12.116 { require_message_authenticator = no secret = "test" shortname = "91.50.12.116" } client 91.50.53.68 { require_message_authenticator = no secret = "test" shortname = "91.50.53.68" } client 127.0.0.1 { require_message_authenticator = no secret = "test" shortname = "127.0.0.1" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### modules { } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 41090, id=213, length=59 User-Name = "michael" User-Password = "1234" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 213 to 127.0.0.1 port 41090 Waking up in 4.9 seconds. Cleaning up request 0 ID 213 with timestamp +55 Ready to process requests. Radtest access-reject packet: (13:29:52) [bin] ./radtest michael 1234 127.0.0.1 0 test Sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "michael" User-Password = "1234" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=213, length=20 I changed the original path in the email to mypath for security reasons. Thanks for your help. Best regards Michael.................................................................... Email: Michael.Ziemann(a)HERBER-HERBER.de D-66706 Nennig Oberwiesstraße 31 Tel.:fill30 +49 (0)6866 / 930 15 Fax:fill30 +49 (0)6866 / 930 16 Inhaber: Ingo und Jürgen Herber Rechtsform: GbR Ust-Id: DE-205 934 442 St-Nr.: 020/155/00002 www.HERBER-HERBER.de info(a)HERBER-HERBER.de ...................................................................

2 2

rlm_raw
by Johan Meiring 29 May '09

29 May '09

Apologies for reposting, but I was too lazy to type the address into my Thunderbird, "replied" to an old message, deleted subject/body, and I see my message sits at the bottom of the other thread.... Something remained in the headers, so people with threaded readers, will probably not see it..... ------------------------------------------------------------------- Hi all, I am trying to use the rlm_raw module to test a piece of code. Downloaded freeradius 2.1.7 pre from git Found rlm_raw here. http://lists.cistron.nl/pipermail/freeradius-devel/2005-January/007873.html After struggling for a few hours to convince my compiler to include the module, the following seemed to work. 1) touch src/modules/rlm_raw/configure 2) ./autogen.sh 3) added rlm_raw to debian configure by editing debian/rules Now it tries to compile it, but fails horribly. (See compile failure below). Does anyone have a clue how to add rlm_raw to the current git tar file? ------------SNIP-------------- make[6]: Entering directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules/rlm_raw' /usr/bin/libtool --mode=compile gcc -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/libltdl -D_LIBRADIUS -c rlm_raw.c gcc -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/libltdl -D_LIBRADIUS -c rlm_raw.c -fPIC -DPIC -o .libs/rlm_raw.o rlm_raw.c:22:22: error: autoconf.h: No such file or directory rlm_raw.c:23:23: error: libradius.h: No such file or directory rlm_raw.c:28:21: error: radiusd.h: No such file or directory rlm_raw.c:29:21: error: modules.h: No such file or directory rlm_raw.c:30:22: error: conffile.h: No such file or directory rlm_raw.c:46: error: expected specifier-qualifier-list before ‘uint8_t’ rlm_raw.c:57: error: expected declaration specifiers or ‘...’ before ‘REQUEST’ rlm_raw.c:59: error: expected declaration specifiers or ‘...’ before ‘RADIUS_ESCAPE_STRING’ rlm_raw.c: In function ‘raw_xlat’: rlm_raw.c:61: error: ‘uint8_t’ undeclared (first use in this function) rlm_raw.c:61: error: (Each undeclared identifier is reported only once rlm_raw.c:61: error: for each function it appears in.) rlm_raw.c:61: error: expected ‘;’ before ‘strvalue’ rlm_raw.c:62: error: ‘uint32_t’ undeclared (first use in this function) rlm_raw.c:62: error: expected ‘;’ before ‘lvalue’ rlm_raw.c:63: error: expected ‘;’ before ‘vendorcode’ rlm_raw.c:70: error: ‘PW_TYPE_OCTETS’ undeclared (first use in this function) rlm_raw.c:71: error: ‘ATTR_FLAGS’ undeclared (first use in this function) rlm_raw.c:71: error: expected ‘;’ before ‘flags’ rlm_raw.c:72: error: ‘DICT_ATTR’ undeclared (first use in this function) rlm_raw.c:72: error: ‘da’ undeclared (first use in this function) rlm_raw.c:73: error: ‘DICT_VALUE’ undeclared (first use in this function) rlm_raw.c:73: error: ‘dv’ undeclared (first use in this function) rlm_raw.c:76: error: ‘request’ undeclared (first use in this function) rlm_raw.c:77: error: ‘ptr’ undeclared (first use in this function) rlm_raw.c:77: error: ‘radius_packet_t’ has no member named ‘data’ rlm_raw.c:78: error: ‘subptr’ undeclared (first use in this function) rlm_raw.c:79: error: ‘AUTH_HDR_LEN’ undeclared (first use in this function) rlm_raw.c:82: error: storage size of ‘s_tm’ isn’t known rlm_raw.c:87: warning: implicit declaration of function ‘dict_attrbyname’ rlm_raw.c:87: warning: nested extern declaration of ‘dict_attrbyname’ rlm_raw.c:89: warning: implicit declaration of function ‘strNcpy’ rlm_raw.c:89: warning: nested extern declaration of ‘strNcpy’ rlm_raw.c:92: error: ‘flags’ undeclared (first use in this function) rlm_raw.c:96: error: ‘vendorcode’ undeclared (first use in this function) rlm_raw.c:109: error: ‘PW_VENDOR_SPECIFIC’ undeclared (first use in this function) rlm_raw.c:111: warning: implicit declaration of function ‘memcpy’ rlm_raw.c:111: warning: incompatible implicit declaration of built-in function ‘memcpy’ rlm_raw.c:111: error: ‘lvalue’ undeclared (first use in this function) rlm_raw.c:112: warning: implicit declaration of function ‘ntohl’ rlm_raw.c:112: warning: nested extern declaration of ‘ntohl’ rlm_raw.c:151: error: ‘VENDORPEC_USR’ undeclared (first use in this function) rlm_raw.c:154: warning: implicit declaration of function ‘dict_attrbyvalue’ rlm_raw.c:154: warning: nested extern declaration of ‘dict_attrbyvalue’ rlm_raw.c:180: error: ‘PW_TYPE_STRING’ undeclared (first use in this function) rlm_raw.c:182: warning: implicit declaration of function ‘TAG_VALID_ZERO’ rlm_raw.c:182: warning: nested extern declaration of ‘TAG_VALID_ZERO’ rlm_raw.c:182: error: ‘FLAG_ENCRYPT_TUNNEL_PASSWORD’ undeclared (first use in this function) rlm_raw.c:186: warning: incompatible implicit declaration of built-in function ‘memcpy’ rlm_raw.c:186: error: ‘strvalue’ undeclared (first use in this function) rlm_raw.c:192: error: ‘PW_NAS_PORT’ undeclared (first use in this function) rlm_raw.c:195: warning: implicit declaration of function ‘librad_safeprint’ rlm_raw.c:195: warning: nested extern declaration of ‘librad_safeprint’ rlm_raw.c:205: error: ‘PW_TYPE_INTEGER’ undeclared (first use in this function) rlm_raw.c:206: error: ‘PW_TYPE_DATE’ undeclared (first use in this function) rlm_raw.c:207: error: ‘PW_TYPE_IPADDR’ undeclared (first use in this function) rlm_raw.c:239: warning: implicit declaration of function ‘dict_valbyattr’ rlm_raw.c:239: warning: nested extern declaration of ‘dict_valbyattr’ rlm_raw.c:247: warning: implicit declaration of function ‘strftime’ rlm_raw.c:247: warning: incompatible implicit declaration of built-in function ‘strftime’ rlm_raw.c:247: warning: implicit declaration of function ‘localtime_r’ rlm_raw.c:247: warning: nested extern declaration of ‘localtime_r’ rlm_raw.c:247: warning: passing argument 4 of ‘strftime’ makes pointer from integer without a cast rlm_raw.c:251: warning: implicit declaration of function ‘ip_ntoa’ rlm_raw.c:251: warning: nested extern declaration of ‘ip_ntoa’ rlm_raw.c:251: warning: assignment makes pointer from integer without a cast rlm_raw.c:257: error: ‘PW_TYPE_IFID’ undeclared (first use in this function) rlm_raw.c:262: warning: implicit declaration of function ‘ifid_ntoa’ rlm_raw.c:262: warning: nested extern declaration of ‘ifid_ntoa’ rlm_raw.c:262: warning: assignment makes pointer from integer without a cast rlm_raw.c:268: error: ‘PW_TYPE_IPV6ADDR’ undeclared (first use in this function) rlm_raw.c:273: warning: implicit declaration of function ‘ipv6_ntoa’ rlm_raw.c:273: warning: nested extern declaration of ‘ipv6_ntoa’ rlm_raw.c:273: warning: assignment makes pointer from integer without a cast rlm_raw.c:277: warning: implicit declaration of function ‘DEBUG’ rlm_raw.c:277: warning: nested extern declaration of ‘DEBUG’ rlm_raw.c:282: warning: implicit declaration of function ‘strcpy’ rlm_raw.c:282: warning: incompatible implicit declaration of built-in function ‘strcpy’ rlm_raw.c:292: warning: implicit declaration of function ‘DEBUG2’ rlm_raw.c:292: warning: nested extern declaration of ‘DEBUG2’ rlm_raw.c:294: warning: implicit declaration of function ‘strlen’ rlm_raw.c:294: warning: incompatible implicit declaration of built-in function ‘strlen’ rlm_raw.c:82: warning: unused variable ‘s_tm’ rlm_raw.c:57: warning: unused parameter ‘instance’ rlm_raw.c: At top level: rlm_raw.c:307: error: expected ‘)’ before ‘*’ token rlm_raw.c: In function ‘raw_detach’: rlm_raw.c:335: warning: implicit declaration of function ‘xlat_unregister’ rlm_raw.c:335: warning: nested extern declaration of ‘xlat_unregister’ rlm_raw.c: At top level: rlm_raw.c:351: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘rlm_raw’ make[6]: *** [rlm_raw.lo] Error 1 make[6]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules/rlm_raw' make[5]: *** [common] Error 2 make[5]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7' make: *** [all] Error 2 --------------SNIP------------------------ -- -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

1 0

Re: question about windows users
by Bartosz Chodzinski 29 May '09

29 May '09

Problem was solved thanks to Ivan assistance, Main problem was on switch side and its configuration, Second problem was - proper certificate to proper certificate store And third - in my head :). Thank you again Bartosz.

2 2