May 2009 - Freeradius-Users - lists.freeradius.org

Not doing Peap/ttls
by Leighton Man 29 May '09

29 May '09

Hi all, Help please and sorry for the long post. Quick description of the problem: New build Freeradius 2.1.4/5 on solaris x86 vmware. Client is a laptop running windows XP through a cisco switch configured for 802.1x. Will not do peap. Reconfigure the switch to use a different freeradius server (2.1.3 on sparc solaris) and it works fine. Output of raduisd -X on the non-working server below. Longer description: I have freeradius2.1.3 running on a test server and working fine. It authenticates users against Active Directory using peap or ttls with mschapv2. I've built 2.1.4 on what is to be the production server and it will not authenticate users. "./configure | grep WARN" on both systems shows the same modules not being built so by elimination the required ones are. (Is that a valid assumption? I checked by hand just in case) I've tarred the raddb directory on the working server and transferred it to the new one. Still doesn't do peap. Test certificates were created during the build process. I'm still fairly new to freeradius so I've probably missed something obvious but I've been struggling with this for several days now. Any assistance gratefully received. Regards, Leighton Leighton Man University of Huddersfield # /usr/local/sbin/radiusd -X FreeRADIUS Version 2.1.5, for host i386-pc-solaris2.10, built on May 11 2009 at 09:35:31 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radiusd.conf including configuration file /usr/local/etc/raddb/proxy.conf including configuration file /usr/local/etc/raddb/clients.conf including files in directory /usr/local/etc/raddb/modules/ including configuration file /usr/local/etc/raddb/modules/acct_unique including configuration file /usr/local/etc/raddb/modules/always including configuration file /usr/local/etc/raddb/modules/attr_filter including configuration file /usr/local/etc/raddb/modules/attr_rewrite including configuration file /usr/local/etc/raddb/modules/chap including configuration file /usr/local/etc/raddb/modules/checkval including configuration file /usr/local/etc/raddb/modules/counter including configuration file /usr/local/etc/raddb/modules/detail including configuration file /usr/local/etc/raddb/modules/detail.example.com including configuration file /usr/local/etc/raddb/modules/detail.log including configuration file /usr/local/etc/raddb/modules/digest including configuration file /usr/local/etc/raddb/modules/echo including configuration file /usr/local/etc/raddb/modules/etc_group including configuration file /usr/local/etc/raddb/modules/exec including configuration file /usr/local/etc/raddb/modules/expiration including configuration file /usr/local/etc/raddb/modules/expr including configuration file /usr/local/etc/raddb/modules/files including configuration file /usr/local/etc/raddb/modules/inner-eap including configuration file /usr/local/etc/raddb/modules/ippool including configuration file /usr/local/etc/raddb/modules/krb5 including configuration file /usr/local/etc/raddb/modules/ldap including configuration file /usr/local/etc/raddb/modules/linelog including configuration file /usr/local/etc/raddb/modules/logintime including configuration file /usr/local/etc/raddb/modules/mac2ip including configuration file /usr/local/etc/raddb/modules/mac2vlan including configuration file /usr/local/etc/raddb/modules/mschap including configuration file /usr/local/etc/raddb/modules/otp including configuration file /usr/local/etc/raddb/modules/pam including configuration file /usr/local/etc/raddb/modules/pap including configuration file /usr/local/etc/raddb/modules/passwd including configuration file /usr/local/etc/raddb/modules/perl including configuration file /usr/local/etc/raddb/modules/policy including configuration file /usr/local/etc/raddb/modules/preprocess including configuration file /usr/local/etc/raddb/modules/radutmp including configuration file /usr/local/etc/raddb/modules/realm including configuration file /usr/local/etc/raddb/modules/smbpasswd including configuration file /usr/local/etc/raddb/modules/smsotp including configuration file /usr/local/etc/raddb/modules/sql_log including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /usr/local/etc/raddb/modules/sradutmp including configuration file /usr/local/etc/raddb/modules/unix including configuration file /usr/local/etc/raddb/modules/wimax including configuration file /usr/local/etc/raddb/eap.conf including configuration file /usr/local/etc/raddb/policy.conf including files in directory /usr/local/etc/raddb/sites-enabled/ including configuration file /usr/local/etc/raddb/sites-enabled/default including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel including configuration file /usr/local/etc/raddb/sites-enabled/control-socket group = radius user = radius including dictionary file /usr/local/etc/raddb/dictionary main { prefix = "/usr/local" localstatedir = "/usr/local/var" logdir = "/usr/local/var/log/radius" libdir = "/usr/local/lib" radacctdir = "/usr/local/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/usr/local/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } realm NULL { authhost = LOCAL accthost = LOCAL } realm hud.ac.uk { authhost = LOCAL accthost = LOCAL } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } client 10.127.0.0/16 { require_message_authenticator = no secret = "secret" shortname = "hudds_switches" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = yes ntlm_auth = "/usr/sfw/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = yes proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } Module: Linked to module rlm_ldap Module: Instantiating ldap_staff ldap ldap_staff { server = "burns.hud.ac.uk" port = 389 password = "password" identity = "cn=cn,ou=ou,ou=ou,dc=ad,dc=hud,dc=ac,dc=uk" net_timeout = 1 timeout = 4 timelimit = 3 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=staff, dc=ad, dc=hud, dc=ac, dc=uk" filter = "(sAMAccountName=%{mschap:User-Name:-%{User-Name}})" base_filter = "(objectclass=radiusprofile)" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 5 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute ldap_staff-Ldap-Group rlm_ldap: Registering ldap_groupcmp for ldap_staff-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap_staff rlm_ldap: Over-riding set_auth_type, as there is no module ldap_staff listed in the "authenticate" section. rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 8193118 Module: Instantiating ldap_student ldap ldap_student { server = "burns.hud.ac.uk" port = 389 password = "password" identity = "cn=cn,ou=ou,ou=ou,dc=ad,dc=hud,dc=ac,dc=uk" net_timeout = 1 timeout = 4 timelimit = 3 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=students, dc=ad, dc=hud, dc=ac, dc=uk" filter = "(sAMAccountName=%{mschap:User-Name:-%{User-Name}})" base_filter = "(objectclass=radiusprofile)" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 5 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute ldap_student-Ldap-Group rlm_ldap: Registering ldap_groupcmp for ldap_student-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap_student rlm_ldap: Over-riding set_auth_type, as there is no module ldap_student listed in the "authenticate" section. rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 8197930 Module: Linked to module rlm_always Module: Instantiating reject always reject { rcode = "reject" simulcount = 0 mpp = no } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/usr/local/var/run/radiusd/radiusd.sock" } } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 10.127.240.217 port 1645, id=17, length=170 User-Name = "XPTESTPC\\cmsxja-stu" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-1B-54-DB-BB-01" Calling-Station-Id = "00-0D-88-23-D9-49" EAP-Message = 0x020200180158505445535450435c636d73786a612d737475 Message-Authenticator = 0xe1b11e8c0aa2816223f48de4af9f0b02 NAS-Port-Type = Ethernet NAS-Port = 50001 NAS-Port-Id = "FastEthernet0/1" NAS-IP-Address = 10.127.240.217 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "XPTESTPC\test", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "XPTESTPC\test" [suffix] Adding Realm = "NULL" [suffix] Authentication realm is LOCAL. ++[suffix] returns ok [eap] EAP packet type response id 2 length 24 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type md5 rlm_eap_md5: Issuing Challenge ++[eap] returns handled Sending Access-Challenge of id 17 to 10.127.240.217 port 1645 EAP-Message = 0x0103001604109627983660d4b7e34e5e7ccd04c3a534 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf8540867f8570c152885b8f703c4be6b Finished request 2. Going to the next request Waking up in 4.9 seconds. ________________________________ <img src="http://www.hud.ac.uk/images/emails/neutral_navy_blue_003976.gif" alt="Inspiring tomorrow's professionals"> --- This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail and remove it from your system. If the content of this e-mail does not relate to the business of the University of Huddersfield, then we do not endorse it and will accept no liability.

2 2

Acct-Session-Id special characters changed to hex
by Sajeewa Warnakulasuriya 28 May '09

28 May '09

Hi All, I'm having some issues with the acct-session-id, where special characters for instance [] being converted to it's hex equivalent. For example below, the Acct-Session-Id = "301[]426932183" when inserted into the accounting table it is inserted as 301=5B=5D426932183. I have noticed the same happens with the sql-group. Please advise how I could insert the data as received without conversion. Thanks Sajeewa @ ispONE ================================================================== Wed May 27 09:19:48 2009 : Info: FreeRADIUS Version 2.0.4, for host i486-pc-linux-gnu, built on Sep 7 2008 at 23:35:34 Wed May 27 09:19:48 2009 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Wed May 27 09:19:48 2009 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed May 27 09:19:48 2009 : Info: PARTICULAR PURPOSE. Wed May 27 09:19:48 2009 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed May 27 09:19:48 2009 : Info: GNU General Public License. Wed May 27 09:19:48 2009 : Info: Starting - reading configuration files ... Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/radiusd_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/proxy_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/clients_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/sql_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/sql_prepaid_counter.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/policy.conf Wed May 27 09:19:48 2009 : Debug: including files in directory /etc/freeradius/sites-enabled/ Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/sites-enabled/default_dial Wed May 27 09:19:48 2009 : Debug: including dictionary file /etc/freeradius/dictionary Wed May 27 09:19:48 2009 : Debug: main { Wed May 27 09:19:48 2009 : Debug: prefix = "/usr" Wed May 27 09:19:48 2009 : Debug: localstatedir = "/var" Wed May 27 09:19:48 2009 : Debug: logdir = "/var/log/freeradius" Wed May 27 09:19:48 2009 : Debug: libdir = "/usr/lib/freeradius" Wed May 27 09:19:48 2009 : Debug: radacctdir = "/var/log/freeradius/radacct" Wed May 27 09:19:48 2009 : Debug: hostname_lookups = no Wed May 27 09:19:48 2009 : Debug: max_request_time = 30 Wed May 27 09:19:48 2009 : Debug: cleanup_delay = 5 Wed May 27 09:19:48 2009 : Debug: max_requests = 1024 Wed May 27 09:19:48 2009 : Debug: allow_core_dumps = no Wed May 27 09:19:48 2009 : Debug: pidfile = "/var/run/freeradius/freeradius_dial.pid" Wed May 27 09:19:48 2009 : Debug: user = "freerad" Wed May 27 09:19:48 2009 : Debug: group = "freerad" Wed May 27 09:19:48 2009 : Debug: checkrad = "/usr/sbin/checkrad" Wed May 27 09:19:48 2009 : Debug: debug_level = 0 Wed May 27 09:19:48 2009 : Debug: proxy_requests = yes Wed May 27 09:19:48 2009 : Debug: security { Wed May 27 09:19:48 2009 : Debug: max_attributes = 200 Wed May 27 09:19:48 2009 : Debug: reject_delay = 0 Wed May 27 09:19:48 2009 : Debug: status_server = yes Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 144.130.4.5 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 144.130.4.5 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "11oneONEV6" Wed May 27 09:19:48 2009 : Debug: shortname = "telstra-1" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 144.130.7.5 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 144.130.7.5 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "11oneONEV6" Wed May 27 09:19:48 2009 : Debug: shortname = "telstra-2" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 192.168.0.19 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.19 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "11oneONEV6" Wed May 27 09:19:48 2009 : Debug: shortname = "test-1" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 192.168.0.212 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.212 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "secret" Wed May 27 09:19:48 2009 : Debug: shortname = "test-2" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 192.168.0.151 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.151 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "secret" Wed May 27 09:19:48 2009 : Debug: shortname = "test-3" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Loading Realms and Home Servers #### Wed May 27 09:19:48 2009 : Debug: proxy server { Wed May 27 09:19:48 2009 : Debug: retry_delay = 5 Wed May 27 09:19:48 2009 : Debug: retry_count = 3 Wed May 27 09:19:48 2009 : Debug: default_fallback = no Wed May 27 09:19:48 2009 : Debug: dead_time = 120 Wed May 27 09:19:48 2009 : Debug: wake_all_if_all_dead = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server hugonet_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 114.111.142.98 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "w89100kwq" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool hugonet_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = hugonet_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm hugonet.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = hugonet_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server planetisp_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 210.50.6.202 Wed May 27 09:19:48 2009 : Debug: port = 1646 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "62gys8j" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool planetisp_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = planetisp_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm planetisp.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = planetisp_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm 21century.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = planetisp_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm computersmobile.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = planetisp_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server tecknowlogy_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 202.125.168.246 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "2rtYhamfG" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool tecknowlogy_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = tecknowlogy_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm rtele.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = tecknowlogy_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server waterfront_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 203.123.80.196 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "tkwuIm278va" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool waterfront_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = waterfront_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm waterfront.net.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = waterfront_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server beagle_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 202.4.231.249 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "tkwuIm278va" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool beagle_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = beagle_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm beagle.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = beagle_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server summit_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 203.94.170.204 Wed May 27 09:19:48 2009 : Debug: port = 1646 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "b92e1e3ab274" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool summit_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = summit_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm summit.net.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = summit_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm DEFAULT { Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Instantiating modules #### Wed May 27 09:19:48 2009 : Debug: instantiate { Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_exec, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_exec Wed May 27 09:19:48 2009 : Debug: Module: Instantiating echo Wed May 27 09:19:48 2009 : Debug: exec echo { Wed May 27 09:19:48 2009 : Debug: wait = yes Wed May 27 09:19:48 2009 : Debug: program = "/bin/echo %{User-Name}" Wed May 27 09:19:48 2009 : Debug: input_pairs = "request" Wed May 27 09:19:48 2009 : Debug: output_pairs = "reply" Wed May 27 09:19:48 2009 : Debug: packet_type = "Access-Reject" Wed May 27 09:19:48 2009 : Debug: shell_escape = yes Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_expr, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_expr Wed May 27 09:19:48 2009 : Debug: Module: Instantiating expr Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Loading Virtual Servers #### Wed May 27 09:19:48 2009 : Debug: server { Wed May 27 09:19:48 2009 : Debug: modules { Wed May 27 09:19:48 2009 : Debug: Module: Checking authenticate {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_pap, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_pap Wed May 27 09:19:48 2009 : Debug: Module: Instantiating pap Wed May 27 09:19:48 2009 : Debug: pap { Wed May 27 09:19:48 2009 : Debug: encryption_scheme = "auto" Wed May 27 09:19:48 2009 : Debug: auto_header = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_chap, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_chap Wed May 27 09:19:48 2009 : Debug: Module: Instantiating chap Wed May 27 09:19:48 2009 : Debug: Module: Checking authorize {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_preprocess, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_preprocess Wed May 27 09:19:48 2009 : Debug: Module: Instantiating preprocess Wed May 27 09:19:48 2009 : Debug: preprocess { Wed May 27 09:19:48 2009 : Debug: huntgroups = "/etc/freeradius/huntgroups_dial" Wed May 27 09:19:48 2009 : Debug: hints = "/etc/freeradius/hints_dial" Wed May 27 09:19:48 2009 : Debug: with_ascend_hack = no Wed May 27 09:19:48 2009 : Debug: ascend_channels_per_line = 23 Wed May 27 09:19:48 2009 : Debug: with_ntdomain_hack = no Wed May 27 09:19:48 2009 : Debug: with_specialix_jetstream_hack = no Wed May 27 09:19:48 2009 : Debug: with_cisco_vsa_hack = no Wed May 27 09:19:48 2009 : Debug: with_alvarion_vsa_hack = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_realm, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_realm Wed May 27 09:19:48 2009 : Debug: Module: Instantiating suffix Wed May 27 09:19:48 2009 : Debug: realm suffix { Wed May 27 09:19:48 2009 : Debug: format = "suffix" Wed May 27 09:19:48 2009 : Debug: delimiter = "@" Wed May 27 09:19:48 2009 : Debug: ignore_default = no Wed May 27 09:19:48 2009 : Debug: ignore_null = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_sql, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_sql Wed May 27 09:19:48 2009 : Debug: Module: Instantiating auth_1 Wed May 27 09:19:48 2009 : Debug: sql auth_1 { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{User-Name}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{User-Name}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{User-Name}' ORDER BY priority" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "SELECT ACCTSESSIONID, USERNAME, NASIDENTIFIER, NASPORT, FRAMEDIPADDRESS, CALLINGSTATIONID, SERVICETYPE FROM RADONLINE WHERE USERNAME = '%{User-Name}'" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_1): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_1): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_sqlcounter, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_sqlcounter Wed May 27 09:19:48 2009 : Debug: Module: Instantiating dial_prepaid_counter Wed May 27 09:19:48 2009 : Debug: sqlcounter dial_prepaid_counter { Wed May 27 09:19:48 2009 : Debug: counter-name = "Max-All-Session-Time" Wed May 27 09:19:48 2009 : Debug: check-name = "Max-All-Session" Wed May 27 09:19:48 2009 : Debug: key = "User-Name" Wed May 27 09:19:48 2009 : Debug: sqlmod-inst = "prepaid" Wed May 27 09:19:48 2009 : Debug: query = "SELECT SESSIONTIMEUSED FROM PREPAIDDIALUPTIME WHERE USERNAME = '%{%k}'" Wed May 27 09:19:48 2009 : Debug: reset = "never" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Reply attribute set to Session-Timeout. Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Counter attribute Max-All-Session-Time is number 11273 Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Check attribute Max-All-Session is number 11274 Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Current Time: 1243379988 [2009-05-27 09:19:48], Next reset 0 [2009-05-27 09:00:00] Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Current Time: 1243379988 [2009-05-27 09:19:48], Prev reset 0 [2009-05-27 09:00:00] Wed May 27 09:19:48 2009 : Debug: Module: Checking preacct {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Checking accounting {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Instantiating accounting_1 Wed May 27 09:19:48 2009 : Debug: sql accounting_1 { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','3','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','1','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','2','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_1): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_1): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: Module: Instantiating accounting_2 Wed May 27 09:19:48 2009 : Debug: sql accounting_2 { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "INSERT INTO RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, CALLZONE) VALUES ('%{User-Name}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{Acct-Session-Id}', '%T', '%{Framed-IP-Address}', '0%{NAS-Port-Type}', '%{Service-Type}', '%{Calling-Station-Id}', '%{Called-Station-Id}', '%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "DELETE FROM RADONLINE WHERE USERNAME = '%{User-Name}' AND NASIDENTIFIER = '%{NAS-IP-Address}' AND NASPORT = '%{NAS-Port}'" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_2): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_2): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: Module: Instantiating prepaid Wed May 27 09:19:48 2009 : Debug: sql prepaid { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "UPDATE PREPAIDDIALUPTIME SET SESSIONTIMEUSED = (SESSIONTIMEUSED + %{Acct-Session-Time}) WHERE USERNAME = '%{User-Name}'" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (prepaid): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (prepaid): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: Module: Checking session {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Checking post-auth {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Instantiating auth_reject Wed May 27 09:19:48 2009 : Debug: sql auth_reject { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "INSERT DELAYED INTO RADAUTHLOG (REASON, TIME_STAMP, TYPE, USERNAME, CALLEDSTATIONID, CALLINGSTATIONID, PASS_WORD, CALLZONE) values ('%{%{Module-Failure-Message}:-%{reply:Packet-Type}}','%S','0','%{User-Name}','%{Called-Station-Id}','%{Calling-Station-Id}','%{%{User-Password}:-%{Chap-Password}}','%{Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_reject): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_reject): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_attr_filter Wed May 27 09:19:48 2009 : Debug: Module: Instantiating attr_filter.access_reject Wed May 27 09:19:48 2009 : Debug: attr_filter attr_filter.access_reject { Wed May 27 09:19:48 2009 : Debug: attrsfile = "/etc/freeradius/attrs.access_reject" Wed May 27 09:19:48 2009 : Debug: key = "%{User-Name}" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Opening IP addresses and Ports #### Wed May 27 09:19:48 2009 : Debug: listen { Wed May 27 09:19:48 2009 : Debug: type = "auth" Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.212 Wed May 27 09:19:48 2009 : Debug: port = 1645 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: listen { Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.212 Wed May 27 09:19:48 2009 : Debug: port = 1646 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: main { Wed May 27 09:19:48 2009 : Debug: snmp = no Wed May 27 09:19:48 2009 : Debug: smux_password = "" Wed May 27 09:19:48 2009 : Debug: snmp_write_access = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: Listening on authentication address 192.168.0.212 port 1645 Wed May 27 09:19:48 2009 : Debug: Listening on accounting address 192.168.0.212 port 1646 Wed May 27 09:19:48 2009 : Debug: Listening on proxy address 192.168.0.212 port 1647 Wed May 27 09:19:48 2009 : Debug: Ready to process requests. rad_recv: Accounting-Request packet from host 192.168.0.19 port 1778, id=1, length=164 User-Name = "sajeewaw(a)isp1.net.au" Acct-Status-Type = Start NAS-Port-Type = Async Client-Port-Id = 1227 Acct-Status-Type = Start Acct-Delay-Time = 4 Caller-ID = "0386249797" Client-Port-DNIS = "0198308020" Framed-Protocol = PPP Framed-Address = 121.79.64.225 X-Ascend-Billing-Number = "W5" User-Service-Type = Framed Client-Id = 124.254.72.20 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Delay-Time = 0 Acct-Session-Time = 0 Acct-Session-Id = "301[]426932183" Wed May 27 09:19:54 2009 : Debug: +- entering group preacct Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: calling preprocess (rlm_preprocess) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: %{User-Name} -> sajeewaw(a)isp1.net.au Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: returned from preprocess (rlm_preprocess) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[preprocess] returns ok Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: calling suffix (rlm_realm) for request 0 Wed May 27 09:19:54 2009 : Debug: rlm_realm: Looking up realm "isp1.net.au" for User-Name = "sajeewaw(a)isp1.net.au" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Found realm "DEFAULT" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Adding Stripped-User-Name = "sajeewaw" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Adding Realm = "DEFAULT" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Accounting realm is LOCAL. Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: returned from suffix (rlm_realm) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[suffix] returns noop Wed May 27 09:19:54 2009 : Debug: +- entering group accounting Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: calling accounting_1 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','1','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}') -> INSERT DELAYED INTO RADUSAGE_200905 (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('sajeewaw(a)isp1.net.au','2009-05-27-09.19.54.000000','1','4','0','0','301=5B=5D426932183','0','','121.79.64.225','124.254.72.20','1227','0198308020','0386249797','W5') Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_1): Reserving sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_1): Released sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: returned from accounting_1 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[accounting_1] returns ok Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: calling accounting_2 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: INSERT INTO RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, CALLZONE) VALUES ('%{User-Name}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{Acct-Session-Id}', '%T', '%{Framed-IP-Address}', '0%{NAS-Port-Type}', '%{Service-Type}', '%{Calling-Station-Id}', '%{Called-Station-Id}', '%{X-Ascend-Billing-Number}') -> INSERT INTO RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, CALLZONE) VALUES ('sajeewaw(a)isp1.net.au', '124.254.72.20', '1227', '301=5B=5D426932183', '2009-05-27-09.19.54.000000', '121.79.64.225', '0Async', 'Framed', '0386249797', '0198308020', 'W5') Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_2): Reserving sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_2): Released sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: returned from accounting_2 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[accounting_2] returns ok Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: calling prepaid (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: -> Wed May 27 09:19:54 2009 : Debug: rlm_sql (prepaid): Reserving sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: rlm_sql (prepaid): Released sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: returned from prepaid (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[prepaid] returns ok Sending Accounting-Response of id 1 to 192.168.0.19 port 1778 Wed May 27 09:19:54 2009 : Debug: Finished request 0. Wed May 27 09:19:54 2009 : Debug: Cleaning up request 0 ID 1 with timestamp +6 Wed May 27 09:19:54 2009 : Debug: Going to the next request Wed May 27 09:19:54 2009 : Debug: Ready to process requests. Regards, Sajeewa Warnakulasuriya Systems Development Manager ispONE is a wholesale ISP built to help internet access resellers and independent ISPs to compete in the Australian marketplace through ONE Brand, ONE Provider, ONE Solution. Level 14 520 Collins Street Melbourne 3000 VIC Phone: 1300 663 400 Fax: 1300 665 400 E-Mail: sajeewaw(a)ispone.com.au Web: http://www.ispone.com.au/

2 2

Access-request proxied, but accounting-request not proxied
by Mr. K 28 May '09

28 May '09

Hi all, I am trying to use a FreeRadius server as a proxy server using the realm. Apparently my configuration is working for the Access-Request messages, but not for the Accounting-request messages. The proxy.conf is very simple: realm test.com { type = radius authhost = NNN.NNN.NN5.7:1812 accthost = NNN.NNN.NN5.7:1813 secret = ****** ldflag = round_robin nostrip } With this configuration, the access request messages are sent to the proper server, as you can see in the next radiusd –X output: We receive the message from the PDSN: Waking up in 1 seconds... rad_recv: Access-Request packet from host 172.17.7.214:32786, id=6, length=337 Calling-Station-Id = "310008172268681" User-Name = "8177899857(a)test.com" NAS-IP-Address = 172.17.7.214 NAS-Identifier = "bws" The radius sent it to the proper server: Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 radius_xlat: '/usr/freeRadius/log/radius/radacct/172.17.7.214/auth-detail-20090528' rlm_detail: /usr/freeRadius/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/freeRadius/log/radius/radacct/172.17.7.214/auth-detail-20090528 modcall[authorize]: module "auth_log" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '/' in User-Name = "8177899857(a)test.com", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 2 rlm_realm: Looking up realm "test.com" for User-Name ="8177899857(a)test.com" rlm_realm: Found realm "test.com" rlm_realm: Proxying request from user 8177899857 to realm test.com rlm_realm: Adding Realm = "test.com" rlm_realm: Preparing to proxy authentication request to realm "test.com" modcall[authorize]: module "suffix" returns updated for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 radius_xlat: '8177899857(a)test.com' rlm_sql (sql): sql_set_user escaped user --> '8177899857(a)test.com' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '8177899857(a)test.com' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '8177899857(a)test.com' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.priority, radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '8177899857(a)test.com' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '8177899857(a)test.com' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY usergroup.priority, radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 2 modcall: leaving group authorize (returns updated) for request 2 Processing the pre-proxy section of radiusd.conf modcall: entering group pre-proxy for request 2 radius_xlat: '/usr/freeRadius/log/radius/radacct/172.17.7.214/pre-proxy-detail-20090528' rlm_detail: /usr/freeRadius/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/freeRadius/log/radius/radacct/172.17.7.214/pre-proxy-detail-20090528 modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 2 modcall: leaving group pre-proxy (returns ok) for request 2 Sending Access-Request of id 1 to NNN.NNN.NN5.7 port 1812 Calling-Station-Id = "310008172268681" User-Name = "8177899857(a)test.com" NAS-IP-Address = 172.17.7.214 The problem arises, when the same PDSN ask for an Accounting-Request and the server. The server replies that the shared-key is not correct. Waking up in 2 seconds... rad_recv: Accounting-Request packet from host 172.17.7.214:32786, id=7, length=735 Received Accounting-Request packet from 172.17.7.214 with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Finished request 3 The shared key configured is one per node in both the radius and the PDSN; so it is difficult for me to understand this behavior. Is there any configuration missing? Is it possible that the freeradius server is not checking shared key when sending the access-request message to it’s destination and checking the key while processing the accounting-request? Regards, K -- View this message in context: http://www.nabble.com/Access-request-proxied%2C-but-accounting-request-not-… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 2

freeRADIUS first test with PostgreSQL?
by Just E. Mail 28 May '09

28 May '09

I am ready to test my first freeRADIUS server with PostgreSQK backend. He is my setup: freeRADIUS Server: -CentOS 5.3 -freeRADIUS V# 2.1.6 (RPM install) -PostgreSQL V# 8.3.7 (RPM install) - Client eth0: Connect to the Internet eth1: Connected to the backend server thru a hub Backend Server: -CentOS 5.3 -PostgreSQL V# 8.3.7 (RPM install) - Server eth0: Connects to freeRADIUSserver via a hub. Both servers talk. I have ================= First I configured the necessary files (without backend SQL) and tested the RADIUS server in debug mode: radtest testid testpw localhost 0 testing123 -and- NTRadPing Test was a SUCCESS!!! ================= Now I have configured so that freeRADIUS uses the backend for sql data/tables. I have created the radius database & radius role. I have created RADIUS tables from schema.sql text file. ================= Now I need HELP. I need to add a couple of USER/PW into the PostgreSQL tables to test. How do I do that? Is there a GUI to add UID/PW? Are UID/PW added manually? Where can read about it? (Please donotjust point to the manual. I have read them all. At least mention Chapter #) What else should I know?

3 2

Reading material!
by Just E. Mail 28 May '09

28 May '09

1. Is there any written description of all the tables, columns, etc. What they are? What data goes in them? How & when they are created? 2. PostgreSQL/freeRADIUS: Where are the accounting tables? Where can I read about them? How are they created?

2 1

Access proxied, Accounting not proxied
by Mr. K 28 May '09

28 May '09

Hi all, I am trying to use a FreeRadius server as a proxy server using the realm. Apparently my configuration is working for the Access-Request messages, but not for the Accounting-request messages. The proxy.conf is very simple: realm test.com { type = radius authhost = NNN.NNN.NN5.7:1812 accthost = NNN.NNN.NN5.7:1813 secret = ****** ldflag = round_robin nostrip } With this configuration, the access request messages are sent to the proper server, as you can see in the next radiusd –X output: We receive the message from the PDSN: Waking up in 1 seconds... rad_recv: Access-Request packet from host 172.17.7.214:32786, id=6, length=337 Calling-Station-Id = "310008172268681" User-Name = "8177899857(a)test.com" NAS-IP-Address = 172.17.7.214 NAS-Identifier = "bws" The radius sent it to the proper server: Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 radius_xlat: '/usr/freeRadius/log/radius/radacct/172.17.7.214/auth-detail-20090528' rlm_detail: /usr/freeRadius/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/freeRadius/log/radius/radacct/172.17.7.214/auth-detail-20090528 modcall[authorize]: module "auth_log" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '/' in User-Name = "8177899857(a)test.com", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 2 rlm_realm: Looking up realm "test.com" for User-Name ="8177899857(a)test.com" rlm_realm: Found realm "test.com" rlm_realm: Proxying request from user 8177899857 to realm test.com rlm_realm: Adding Realm = "test.com" rlm_realm: Preparing to proxy authentication request to realm "test.com" modcall[authorize]: module "suffix" returns updated for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 radius_xlat: '8177899857(a)test.com' rlm_sql (sql): sql_set_user escaped user --> '8177899857(a)test.com' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '8177899857(a)test.com' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '8177899857(a)test.com' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.priority, radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '8177899857(a)test.com' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '8177899857(a)test.com' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY usergroup.priority, radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 2 modcall: leaving group authorize (returns updated) for request 2 Processing the pre-proxy section of radiusd.conf modcall: entering group pre-proxy for request 2 radius_xlat: '/usr/freeRadius/log/radius/radacct/172.17.7.214/pre-proxy-detail-20090528' rlm_detail: /usr/freeRadius/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/freeRadius/log/radius/radacct/172.17.7.214/pre-proxy-detail-20090528 modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 2 modcall: leaving group pre-proxy (returns ok) for request 2 Sending Access-Request of id 1 to NNN.NNN.NN5.7 port 1812 Calling-Station-Id = "310008172268681" User-Name = "8177899857(a)test.com" NAS-IP-Address = 172.17.7.214 The problem arises, when the same PDSN ask for an Accounting-Request and the server. The server replies that the shared-key is not correct. Waking up in 2 seconds... rad_recv: Accounting-Request packet from host 172.17.7.214:32786, id=7, length=735 Received Accounting-Request packet from 172.17.7.214 with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Finished request 3 The shared key configured is one per node in both the radius and the PDSN; so it is difficult for me to understand this behavior. Is there any configuration missing? Is it possible that the freeradius server is not checking shared key when sending the access-request message to it’s destination and checking the key while processing the accounting-request? Regards, K -- View this message in context: http://www.nabble.com/Access-proxied%2C-Accounting-not-proxied-tp23769897p2… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

rc
by jon jon 28 May '09

28 May '09

Does freeradius come with a rc. startup file.Im am using slackware version 12.1. thanks jon

3 2

question about session resumption and reply attributes
by Anatoli Logvinski 28 May '09

28 May '09

Hi We are using dynamic VLAN assignment with freeradius 2.1.6 and tried to test session resumption. It looks like that freeradius doesn't cache all reply attributes and upon session resumption the VLAN assignment attributes don't get send. Is there any way to cache these attributes? The attributes are generated by rlm_perl in post-auth section of inner-tunnel virtual server

5 7

next
by jon jon 28 May '09

28 May '09

I have my freeradius working, I running slackware 12.1 with freeradius version 2.1.5. I used NTRAping utility to send packets to my freeradius server. I also used radtest and that was successful. So now I want to set freeradius with backend mysql database. I am looking for the script db_mysql.sql and cannot find this file. I installed mysql as a package, when I installed slackware. So, does that file even exist anymore? I have the radius book and the directory it shows doesn't contain any file with that name.

4 7

Windows XP SP2 and SP3 EAP problem followup
by Balgansuren Batsukh 28 May '09

28 May '09

Hello, Any suggestion Windows XP EAP problem? Balgaa

2 14