July 2009 - Freeradius-Users - lists.freeradius.org

Patch to submit for SQLite support, but don't want to clobber existing patch ...
by Ben West 14 Jul '09

14 Jul '09

I just managed to get basic SQLite function with SQLite v3.6 and Freedradius v2.1.6, and I was about to submit a patch for sql_sqlite.c driver. However, I see a bugzilla entry about this was literally just submitted today: https://bugs.freeradius.org/bugzilla/show_bug.cgi?id=3 My patch involves changing the sql_query() function in that driver so that it invokes sqlite3_step() directly for UPDATE, DELETE, and INSERT queries, since otherwise sqlite3_step() only appears to get invoked for SELECT queries in the sql_fetch_row() function. But, I wanted to ping the listserv first in case the author of the bugzilla entry above had already addressed this issue with UPDATE/DELETE/INSERT queries. -- Ben West westbywest(a)gmail.com

1 0

AW: MySQL - support - module not loaded - radacct
by Bernd Hoffmann 14 Jul '09

14 Jul '09

Hello, > what happends when you run with "radiusd -X" - does it all work? As I said, yes it is working fine. > what does /var/log/radius/radiusd.log show? When I start radius with "radius -X" the log show nothing, but the last line of the output is "Ready to process requests." and all is working fine. When I start radius with the init.d script server is working also fine and the output of the log is the following: Tue Jul 14 14:05:01 2009 : Info: Loaded virtual server inner-tunnel Tue Jul 14 14:05:01 2009 : Info: Loaded virtual server <default> Tue Jul 14 14:05:01 2009 : Info: Ready to process requests. The problem is, when I enable the sql - accounting by uncomment sql in the accounting section of /usr/local/etc/raddb/sites-enabled/default, the radius does only working fine by starting with "radius -X". When I start the radius in this case (uncomment sql) with the init.d script, the radius is not working. As I saw from "ps aux" - output, one radius process started but "netstat -lnpe" shows no listen port (1812-1814). The logfile shows the following output: Tue Jul 14 14:53:04 2009 : Info: Loaded virtual server inner-tunnel Tue Jul 14 14:53:04 2009 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Tue Jul 14 14:53:04 2009 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radius Tue Jul 14 14:53:04 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Tue Jul 14 14:53:04 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Tue Jul 14 14:53:04 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Tue Jul 14 14:53:04 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Tue Jul 14 14:53:04 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Tue Jul 14 14:53:04 2009 : Info: Loaded virtual server <default> As you can see, the last line "Ready to process requests" is missing. > what is your current SELinux setting? 'getenforce' > is the name of the command. if its set to 'enforce' > then set it to permissive and try running the init.d > script again. > I think prehaps that either a file is owned by root from > when you were running it as root and therefore the daemon > cannot run properly when started as a lower user - or SELinux > is getting in the way I have no experience with SELinux. I'm using debian and I believe that SELinux support compiled in, but disabled by default. Furthermore I believe that this behaviour has nothing to do with SELinux, but the init.d script is working when sql accounting of radius disabled. Best regards, Bernd

1 0

RE: Re: rlm_ruby
by wernerml＠stucky-solutions.net 14 Jul '09

14 Jul '09

Hi Alan built from source? I built the ruby from source, but then reversed that and have also tried with the centos packages. I have ruby-1.8.5-5.el5_3.7 ruby-libs-1.8.5-5.el5_3.7 ruby-devel-1.8.5-5.el5_3.7 now but still no luck. werner

2 1

using nasid instead of client ip..
by Oguzhan Kayhan 14 Jul '09

14 Jul '09

Hello, I have a server with mutliple ethernets working on. I need to run an authentication server(called chilli or coova) on 2 different ethernets which needed to authenticate with different radius servers. I am currently running my radius with virtual servers. The problem is, I created virtual servers according to client ip's as client 192.168.0.15 { shortname = client-a secret = xxxxxxx virtual_server = radius-a } And now when i try to run second different client software on same server, because the client ip still 192.168.0.15 it uses same virtual server on radius. Is there any other way to use different virtual server according to nasip for example??? or any other way that i can seperate clients except the ip addresses??? Im using radius 2.0.5 Thank you.

2 3

MySQL - support - module not loaded - radacct
by Bernd Hoffmann 14 Jul '09

14 Jul '09

Hello, I want to use freeradius 2.1.6 to store accounting data from a NAS in MySQL. First of all I installed mysql from source. Then I tried to install freeradius in the following both ways: ----------------- ./configure make make install ----------------- ./configure --with-mysql-include-dir=/usr/local/mysql/include/mysql --with-mysql-lib-dir=/usr/local/mysql/lib/mysql make make install ----------------- In both ways the configure looks as it should, I believe. I can also find the /usr/local/lib/rlm_sql_mysql.so. So I deleted the comment out sign in front of "$INCLUDE sql.conf" in radiusd.conf and also modified the access data of the mysql-server in sql.conf. However when I start the radius-server I can not see, that the rlm_sql_mysql - module is loading. I believe it is the certain module for store data to radacct - mysql - table. Please correct me, if I'm wrong (Sorry, I'm new to freeradius). In conclusion the radius-server is storing the account-data only on filesystem (/usr/local/var/log/radius/radacct/CLIENT-IP/detail-date) and not to mysql. :-( So I ask you, how can I enable radacct - mysql (how can I encourage freeradius to load rlm_sql_mysql)? Thanks for your answer in advance. Best regards, Bernd

3 4

rlm_ruby
by wernerml＠stucky-solutions.net 14 Jul '09

14 Jul '09

Good Day I am having problems using the rlm_ruby module. When starting radiusd I get the following error: radiusd: symbol lookup error: /lib/rlm_ruby-2.1.6.so: undefined symbol: ruby_init I have ruby 1.8.7 installed from source on CentOS 5.2 If anyone could give me a few pointers as to what I could check on the settings I would appreciate it. Thanks Werner Stucky

2 1

Freeradius-Users
by Mai Khai Hung 14 Jul '09

14 Jul '09

mss

1 0

Re: How to control users traffic ?
by Eric 14 Jul '09

14 Jul '09

freeradius-1.1.3-1.4 !! Is it the reason of problem ? > I set reply-name = Session-Octets-Limit in sqlcounter > but freeradius sends Seesion-Timeout in reply with value equal to the > deduct of octets used until now from check-name = Max-Input-Octets. > How should change the session-timeout to Session-Octets-Limit in > auth-reply? That shouldn't happen. What freeradius version? Post the debug from server startup and request processiong. Ivan Kalik Kalik Informatika ISP

2 1

Location of freeradius log file
by Deepak 14 Jul '09

14 Jul '09

Hi, I have following installed. =============== OS: CentOS 5.3 freeradius 2.1.6 (rpm version) daloradius 0.9-8 mysql 5.0.45 =============== When I try to check the radius log file from daloradius interface, it give me following error: ======== error reading log file: looked for log file in /var/log/freeradius/radius.log and /usr/local/var/log/radius/radius.log but couldn't find it. if you know where your freeradius log file is located, set it's location in /zradius/rep-logs-radius.php ======== I tried to look for this file but couldn't locate it. There is no "freeradius" directory in "/var/log" Where do freeradius keep the log file? Thanks -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

4 4

SELinux and FreeRADIUS interplay
by A.L.M.Buxey＠lboro.ac.uk 13 Jul '09

13 Jul '09

hi, whilst working on a test/dev system i noted that the control-socket feature doesnt work if SELinux is running....ponder if anyone has the policy for SELinux to allow this to operate otherwise I'll do some digging when I've next got time to give this community the recipe to allow SELinux to be enforcing and FreeRADIUS to work :-) alan

2 2