August 2009 - Freeradius-Users - lists.freeradius.org

Thread create failed: Cannot allocate memory
by Omer Faruk SEN 20 Aug '09

20 Aug '09

Hi, I have lived the same problem depicted here. Alan De kok suggested to prevent the thread creation http://lists.cistron.nl/pipermail/freeradius-users/2007-October/msg00257.ht… . Is there another solution for that (maybe changing a sysctl value ) since machine has lots of memory and very less was used. We use freeradius 2.1.1 and rhel 5.3 x86 -- Best regards, Omer mailto:omer@faruk.net

1 0

Max Monthly Traffic
by Neville 20 Aug '09

20 Aug '09

Hi everyone, I'm trying to setup a new counter maxmonthlytraffic, but as soon as I connected, sql_counter sends reply to do a session timout and I get disconnected. This is what I've done so far... I've added to ./raddb/sql/mysql/counter.conf sqlcounter monthlytraffic { counter-name = Monthly-Traffic check-name = Max-Monthly-Traffic sqlmod-inst = sql key = User-Name reset = monthly query = "SELECT (sum(acctinputoctets)+sum(acctoutputoctets)) \ FROM radacct WHERE username='%{%k}' AND \ Month(acctstoptime) =(Month(NOW())) AND \ Year(acctstoptime) = Year(NOW())" } authorize { .. monthlytraffic } instantiate { monthlytraffic } created a dictionary entry in daloradius as.. id 9433 Type integer Attribute Max-Monthly-Traffic Value NULL Format NULL Vendor dictionary.freeradius.internal RecommendedOP := RecommendedTable check RecommendedHelper RecommendedTooltip Check Monthly Traffic Allowance User created as "testmaxm", with the following attributes set:- Check Simultaneous-Use := 1 Pool-Name := tvpool Cleartext-Password := testmaxm Max-Monthly-Traffic := 10490000 (10Mb) (If this is removed from the Check, the user connects fine, so everything else is working) Reply Framed-MTU = 1400 Framed-Protocol = PPP Service-Type = Framed-User Acct-Interim-Interval := 300 (Every 5 mins for testing) Some Debug... rlm_sqlcounter: Check item is greater than query result rlm_sqlcounter: Authorized user testmaxm, check_item=10490000, counter=80411 rlm_sqlcounter: Sent Reply-Item for user testmaxm, Type=Session-Timeout, value=11601138 ++[monthlytraffic] returns ok rad_recv: Accounting-Request packet from host aaa.bbb.ccc.ddd port 53637, id=47, length=140 Acct-Session-Id = "4A8B6FA0721900" User-Name = "testmaxm" Acct-Status-Type = Interim-Update Service-Type = Framed-User Framed-Protocol = PPP Acct-Authentic = RADIUS Acct-Session-Time = 600 Acct-Output-Octets = 37033544 Acct-Input-Octets = 906612 Acct-Output-Packets = 27837 Acct-Input-Packets = 15791 NAS-Port-Type = Async Framed-IP-Address = 192.168.0.29 NAS-Identifier = "aaa.bbb.ccc.ddd" NAS-Port = 1 Acct-Delay-Time = 0 +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 193.33.186.190,NAS-IP-Address = aaa.bbb.ccc.ddd,Acct-Session-Id = "4A8B6FA0721900",User-Name = "testmaxm"' [acct_unique] Acct-Unique-Session-ID = "049e959019a363e4". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "testmaxm", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop +- entering group accounting {...} [detail] expand: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radius/radacct/aaa.bbb.ccc.ddd/detail-20090819 [detail] /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/aaa.bbb.ccc.ddd/detail-20090819 [detail] expand: %t -> Wed Aug 19 03:31:04 2009 ++[detail] returns ok rlm_sql (sql): Reserving sql socket id: 1 [sqlippool] expand: %{User-Name} -> testmaxm [sqlippool] sql_set_user escaped user --> 'testmaxm' [sqlippool] expand: START TRANSACTION -> START TRANSACTION rlm_sql_mysql: query: START TRANSACTION [sqlippool] expand: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}' -> UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = 'aaa.bbb.ccc.ddd' AND pool_key = '1' AND username = 'testmaxm' AND callingstationid = '' AND framedipaddress = '192.168.0.29' rlm_sql_mysql: query: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = 'aaa.bbb.ccc.ddd' AND pool_key = '1' AND username = 'testmaxm' AND callingstationid = '' AND framedipaddress = '192.168.0.29' [sqlippool] expand: COMMIT -> COMMIT rlm_sql_mysql: query: COMMIT rlm_sql (sql): Released sql socket id: 1 ++[sqlippool] returns ok [sql] expand: %{User-Name} -> testmaxm [sql] sql_set_user escaped user --> 'testmaxm' [sql] expand: %{Acct-Input-Gigawords} -> [sql] expand: %{Acct-Input-Octets} -> 906612 [sql] expand: %{Acct-Output-Gigawords} -> [sql] expand: %{Acct-Output-Octets} -> 37033544 [sql] expand: UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET framedipaddress = '192.168.0.29', acctsessiontime = '600', acctinputoctets = '0' << 32 | '906612', acctoutputoctets = '0' << 32 | '37033544' WHERE acctsessionid = '4A8B6FA0721900' AND username = 'testmaxm' [sql] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql rlm_sql (sql): Reserving sql socket id: 0 rlm_sql_mysql: query: UPDATE radacct SET framedipaddress = '192.168.0.29', acctsessiontime = '600', acctinputoctets = '0' << 32 | '906612', acctoutputoctets = '0' << 32 | '37033544' WHERE acctsessionid = '4A8B6FA0721900' AND username = 'testmaxm' AND nasipaddress = 'aaa.bbb.ccc.ddd' rlm_sql (sql): Released sql socket id: 0 ++[sql] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> testmaxm attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 47 to aaa.bbb.ccc.ddd port 53637 Finished request 16. Cleaning up request 16 ID 47 with timestamp +1965 Going to the next request Ready to process requests. Given that the usages is now "37940156" e.g. 906612 + 3733544 and is more than the initial check value of Max-Monthly-Traffic := 10490000 I would have expected a Reply Timeout being sent to disconnect me. However on disconnecting and reconnecting I get... rlm_sqlcounter: (Check item - counter) is less than zero rlm_sqlcounter: Rejected user testmaxm, check_item=10490000, counter=89021682 ++[monthlytraffic] returns reject Invalid user (rlm_sqlcounter: Maximum monthly usage time reached): [testmaxm/<via Auth-Type = mschap>] (from client VPN1-UK port 1) rlm_sqlcounter: (Check item - counter) is less than zero rlm_sqlcounter: Rejected user testmaxm, check_item=10490000, counter=89021682 ++[monthlytraffic] returns reject Invalid user (rlm_sqlcounter: Maximum monthly usage time reached): [testmaxm/<via Auth-Type = mschap>] (from client VPN1-UK port 1) Any Ideas why I did not get disconnect during the original session as this is what I'm after. Thx Nev ================ CentOS 5.3 pptpd 1.3.4 / ppp 2.4.4 freeradius2 2.1.6 radiusclient-ng 0.5.6 daloRadius 0.9-8-SVN ================

4 5

Double quotes in password and MS-Chapv2
by Richard Timsit 20 Aug '09

20 Aug '09

Hi All, does anyone can authenticate users with double quotes in their password with MS-CHAP ? No problem with TTLS/pap. Thanks. -- Richard Timsit <Richard.Timsit(a)epfl.ch> EPFL DIT-TI

2 1

MAX-Monthly-Traffic V2 Post.
by Neville 20 Aug '09

20 Aug '09

Hi everyone, I've decided to submit this question again as it was not quite worded correctly, and to send as PLAIN TEXT. I'm trying to setup a new counter maxmonthlytraffic, which uses the same method to disconnect a user by sending the Session-Timout Reply Atrribute as with MAX-ALL-Sessions. This is what I've done so far... I've added to ./raddb/sql/mysql/counter.conf sqlcounter monthlytraffic { counter-name = Monthly-Traffic check-name = Max-Monthly-Traffic sqlmod-inst = sql key = User-Name reset = monthly query = "SELECT (sum(acctinputoctets)+sum(acctoutputoctets)) \ FROM radacct WHERE username='%{%k}' AND \ Month(acctstoptime) =(Month(NOW())) AND \ Year(acctstoptime) = Year(NOW())" } authorize { . monthlytraffic . } instantiate { . monthlytraffic . } created a dictionary entry in daloradius database of:- id 9433 Type integer Attribute Max-Monthly-Traffic Value NULL Format NULL Vendor dictionary.freeradius.internal RecommendedOP := RecommendedTable check RecommendedHelper RecommendedTooltip Check Monthly Traffic Allowance User created as "testmaxm", with the following attributes set:- Check Simultaneous-Use := 1 Pool-Name := tvpool Cleartext-Password := testmaxm Max-Monthly-Traffic := 10490000 (10Mb) (If this is removed from the Check, the user connects fine, so everything else is working) Reply Framed-MTU = 1400 Framed-Protocol = PPP Service-Type = Framed-User Acct-Interim-Interval := 300 (Every 5 mins for testing) ===== Although this seems to be working on the initial Connection, it does not send the Session Time Out Reply during the Interim Acct Updates if the Usage has execeed. >From the Debug below, the usages is shown as "37940156" during a Acct Update e.g. 906612 + 3733544 and is more than the initial check value of Max-Monthly-Traffic := 10490000, so I would have expected a Session-Timout Reply to be sent. However this is working ok on disconnect and reconnect, as I get... rlm_sqlcounter: (Check item - counter) is less than zero rlm_sqlcounter: Rejected user testmaxm, check_item=10490000, counter=89021682 ++[monthlytraffic] returns reject Invalid user (rlm_sqlcounter: Maximum monthly usage time reached): [testmaxm/<via Auth-Type = mschap>] (from client VPN1-UK port 1) rlm_sqlcounter: (Check item - counter) is less than zero rlm_sqlcounter: Rejected user testmaxm, check_item=10490000, counter=89021682 ++[monthlytraffic] returns reject Invalid user (rlm_sqlcounter: Maximum monthly usage time reached): [testmaxm/<via Auth-Type = mschap>] (from client VPN1-UK port 1) Any Ideas why I did not get disconnect during the original session as this is what I'm after. FreeRadius2 Debug . . rlm_sqlcounter: Check item is greater than query result rlm_sqlcounter: Authorized user testmaxm, check_item=10490000, counter=80411 rlm_sqlcounter: Sent Reply-Item for user testmaxm, Type=Session-Timeout, value=11601138 ++[monthlytraffic] returns ok . . rad_recv: Accounting-Request packet from host aaa.bbb.ccc.ddd port 53637, id=47, length=140 Acct-Session-Id = "4A8B6FA0721900" User-Name = "testmaxm" Acct-Status-Type = Interim-Update Service-Type = Framed-User Framed-Protocol = PPP Acct-Authentic = RADIUS Acct-Session-Time = 600 Acct-Output-Octets = 37033544 Acct-Input-Octets = 906612 Acct-Output-Packets = 27837 Acct-Input-Packets = 15791 NAS-Port-Type = Async Framed-IP-Address = 192.168.0.29 NAS-Identifier = "aaa.bbb.ccc.ddd" NAS-Port = 1 Acct-Delay-Time = 0 +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 1,Client-IP-Address = 193.33.186.190,NAS-IP-Address = aaa.bbb.ccc.ddd,Acct-Session-Id = "4A8B6FA0721900",User-Name = "testmaxm"' [acct_unique] Acct-Unique-Session-ID = "049e959019a363e4". ++[acct_unique] returns ok [suffix] No '@' in User-Name = "testmaxm", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop +- entering group accounting {...} [detail] expand: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/radius/radacct/aaa.bbb.ccc.ddd/detail-20090819 [detail] /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/aaa.bbb.ccc.ddd/detail-20090819 [detail] expand: %t -> Wed Aug 19 03:31:04 2009 ++[detail] returns ok rlm_sql (sql): Reserving sql socket id: 1 [sqlippool] expand: %{User-Name} -> testmaxm [sqlippool] sql_set_user escaped user --> 'testmaxm' [sqlippool] expand: START TRANSACTION -> START TRANSACTION rlm_sql_mysql: query: START TRANSACTION [sqlippool] expand: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '%{NAS-Port}' AND username = '%{User-Name}' AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}' -> UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = 'aaa.bbb.ccc.ddd' AND pool_key = '1' AND username = 'testmaxm' AND callingstationid = '' AND framedipaddress = '192.168.0.29' rlm_sql_mysql: query: UPDATE radippool SET expiry_time = NOW() + INTERVAL 3600 SECOND WHERE nasipaddress = 'aaa.bbb.ccc.ddd' AND pool_key = '1' AND username = 'testmaxm' AND callingstationid = '' AND framedipaddress = '192.168.0.29' [sqlippool] expand: COMMIT -> COMMIT rlm_sql_mysql: query: COMMIT rlm_sql (sql): Released sql socket id: 1 ++[sqlippool] returns ok [sql] expand: %{User-Name} -> testmaxm [sql] sql_set_user escaped user --> 'testmaxm' [sql] expand: %{Acct-Input-Gigawords} -> [sql] expand: %{Acct-Input-Octets} -> 906612 [sql] expand: %{Acct-Output-Gigawords} -> [sql] expand: %{Acct-Output-Octets} -> 37033544 [sql] expand: UPDATE radacct SET framedipaddress = '%{Framed-IP-Address}', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET framedipaddress = '192.168.0.29', acctsessiontime = '600', acctinputoctets = '0' << 32 | '906612', acctoutputoctets = '0' << 32 | '37033544' WHERE acctsessionid = '4A8B6FA0721900' AND username = 'testmaxm' [sql] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql rlm_sql (sql): Reserving sql socket id: 0 rlm_sql_mysql: query: UPDATE radacct SET framedipaddress = '192.168.0.29', acctsessiontime = '600', acctinputoctets = '0' << 32 | '906612', acctoutputoctets = '0' << 32 | '37033544' WHERE acctsessionid = '4A8B6FA0721900' AND username = 'testmaxm' AND nasipaddress = 'aaa.bbb.ccc.ddd' rlm_sql (sql): Released sql socket id: 0 ++[sql] returns ok [attr_filter.accounting_response] expand: %{User-Name} -> testmaxm attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 47 to aaa.bbb.ccc.ddd port 53637 Finished request 16. Cleaning up request 16 ID 47 with timestamp +1965 Going to the next request Ready to process requests. Thx Nev ================ CentOS 5.3 pptpd 1.3.4 / ppp 2.4.4 freeradius2 2.1.6 radiusclient-ng 0.5.6 daloRadius 0.9-8-SVN ================

4 3

(no subject)
by RANDRIAMAMPIONONA José Johnny 20 Aug '09

20 Aug '09

Hi All, I have suffered enough, now I d like to expose my nightmare. Freeradius-server-2.1.6 + OpenLdap. Both of the servers work perfectly, there is no firewall between them or something that can block the traffic: All Correct! but the server still has no response with the weird radclient message ! At the radius debug , authentication is mentioned as successfully (bind was successfully) What's going on ? Best! -- JJohnny R. vasiana09(a)gmail.com

2 3

buffered_sql and detail module
by ramesh p 20 Aug '09

20 Aug '09

Hi, can anybody give me an example working configuration for buffered-sql accounting with detail module. I'm using the following configuration but it's not working. ///////// sites-available{ default { preacct { preprocess acct_unique suffix files } accounting { if(Acct-Status-Type == 'Stop') { detail } radutmp attr_filter.accounting_response Acct-Type Status-Server { } } } ////////////////////////// sites-enabled{ buffered-sql { preacct { preprocess acct_unique files } accounting { sql } } } Thanks in advance. Regards, Rams.

2 1

dumping radius queryies
by Rakotomandimby Mihamina 20 Aug '09

20 Aug '09

Hi all, I am on the way to migrate a freeRadius V1 to a V2. I would like to log the queries submitted to the running V1, so thaht I could test them via 'radclient' to the V2, before switching to production stage. So, on a V1.4, what kind of loggin should I enable in order to have a dump of all the queries? Thank you -- Architecte Informatique chez Blueline/Gulfsat: Administration Systeme, Recherche & Developpement +261 34 29 155 34

2 1

attr_filter segfault
by Alexander Clouter 20 Aug '09

20 Aug '09

Hi, Only me...again doing things I probably should not do with FreeRADIUS. The new config file I'm working on makes use of all the virtual server bits more throughier, a lot of my existing setup is in the non-virtual server setup. What I'm doing is having all the authentication handled by an inner virtual server (shown below) whilst the authorisation is handled by the server that proxied the request to 'auth'. This is to handle both MAC auth and EAP-TTLS request. I was trying to put in some sneaky LDAP avoiding shortcuts (I do not want to make any LDAP lookups until EAP is out the way, we use eDirectory's Universal Password so we use the LDAP module to extract the plaintext password) which speeds up the whole authentication. So I decided to slap in unwisely placed 'handled' and the attr_filter on the proxying server (in post-proxy) exploded. The backtrace is below and I also slipped in a 'detail' and can see that the attribute value is pretty borked for 'Freeradius-Proxied-To'. Now, I know what I have done is wrong, terrible and should not be done, however these things possibly point to other proper corner cases where FreeRADIUS could explode with a safe driver at the wheel :) It all works fine though if I comment out the whole of the first 'if' statement block and remove the comments for the opening/closing/eap of the second lot. If you need any more, you know who to pester :) Cheers ---- server auth { authorize { if ( EAP-Message ) { eap handled } # if ( !EAP-Message ) { # we cannot have 'suffix' here as it makes the # virtual server (and the modules) think things # are going to get proxied and so PAP gives NOOP # # this would be unneeded if we could use # 'eduPersonPrincipalName' in the ldap module :( if ( User-Name =~ /^(.*)@.*$/ ) { update request { Stripped-User-Name := "%{1}" } } ldap_auth pap chap mschap # } # eap } ---- ---- >>> Sending proxied request internally to virtual server. server auth { +- entering group authorize {...} ++? if (EAP-Message ) ? Evaluating (EAP-Message ) -> TRUE ++? if (EAP-Message ) -> TRUE ++- entering if (EAP-Message ) {...} [eap] EAP packet type response id 0 length 16 [eap] No EAP Start, assuming it's an on-going EAP conversation +++[eap] returns updated +++[handled] returns handled ++- if (EAP-Message ) returns handled } # server auth Going to the next request <<< Received proxied response code 0 from internal virtual server. +- entering group post-proxy {...} [detail] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /var/log/freeradius/radacct/212.219.138.68/detail-20090819 [detail] /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/212.219.138.68/detail-20090819 [detail] expand: %t -> Wed Aug 19 19:18:24 2009 [detail] Freeradius-Proxied-To = px?M??? ++[detail] returns ok [attr_filter.post-proxy] expand: %{Realm} -> soas.ac.uk attr_filter: Matched entry DEFAULT at line 103 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x7f93458daae0 (LWP 6411)] 0x00007f9340ac8cd0 in attr_filter_common (instance=<value optimized out>, request=0x146bb30, input=0x68) at rlm_attr_filter.c:255 255 for (vp = *input; vp != NULL; vp = vp->next ) {(gdb) where #0 0x00007f9340ac8cd0 in attr_filter_common (instance=<value optimized out>, request=0x146bb30, input=0x68) at rlm_attr_filter.c:255 #1 0x0000000000416399 in modcall (component=6, c=<value optimized out>, request=0x146bb30) at modcall.c:292 #2 0x00000000004137c6 in indexed_modcall (comp=6, idx=<value optimized out>, request=0x146bb30) at modules.c:637 #3 0x000000000041cd3b in process_proxy_reply (request=0x146bb30) at event.c:1718 #4 0x000000000042080d in proxy_to_virtual_server (request=0x146bb30) at event.c:1966 #5 0x0000000000420318 in request_post_handler (request=0x146bb30) at event.c:2236 #6 0x000000000042064d in radius_handle_request (request=0x146bb30, fun=0x7f93400b9d60 <rad_authenticate>) at event.c:3740 #7 0x000000000041877d in thread_pool_addrequest (request=0x1, fun=0x7fff4d8e5620) at threads.c:824 #8 0x000000000041d2ce in event_socket_handler (xel=<value optimized out>, fd=<value optimized out>, ctx=<value optimized out>) at event.c:3358 #9 0x00007f93454c34ab in fr_event_loop (el=0x1461000) at event.c:400 #10 0x0000000000416ee7 in main (argc=2, argv=0x7fff4d8e85b8) at radiusd.c:398 (gdb) ---- ---- Wed Aug 19 19:18:24 2009 User-Name = "@soas.ac.uk" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x020000100140736f61732e61632e756b Message-Authenticator = 0x64f373450d92f42a9cff9c50c9a062c9 Stripped-User-Name = "020000000001" Realm = "soas.ac.uk" Module-Failure-Message = "rlm_ldap: User not found" Realm = "soas.ac.uk" Freeradius-Proxied-To = px???M??? Timestamp = 1250705904 Request-Authenticator = Verified ---- -- Alexander Clouter .sigmonster says: We have met the enemy, and he is us. -- Walt Kelly

2 1

how to combine
by Magui 20 Aug '09

20 Aug '09

Hello, i want to know how combine user,password and telephone number for to authenticate an user in order to give acces to my network. Please I only need an superficial orientation ,not to detail -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas Infomed: http://www.sld.cu/

2 1

Re: accounting through detail module help
by ramesh p 20 Aug '09

20 Aug '09

Here is the radius log in debug mode after sending radius packet from radclient: rad_recv: Accounting-Request packet from host 10.77.202.78 port 1495, id=1, length=311 User-Name = " 01-0AE87C20-01-00000001-0004-78C8DB79-FFFFFFFFFFFFFFFF@ABC" Acct-Status-Type = Stop Acct-Authentic = RADIUS Framed-Protocol = PPP Acct-Input-Packets = 100 Acct-Output-Packets = 100 Tunnel-Server-Endpoint:0 = "10.77.202.97" Acct-Session-Id = "000D76B9" Acct-Tunnel-Connection = "2966486826" Acct-Session-Time = 10 Acct-Terminate-Cause = Session-Timeout Tunnel-Type:0 = L2TP Tunnel-Assignment-Id:0 = "10.77.202.97" Cisco-AVPair = "Disc-Cause-Ext=No Reason" Acct-Status-Type = Stop Acct-Input-Octets = 1000 Acct-Output-Octets = 2100 Acct-Status-Type = Stop Tunnel-Assignment-Id:0 = "ABC-BB-Test-1" Cisco-AVPair = "PPP-Disconnect-Cause=No reason" Tunnel-Client-Endpoint:0 = "10.77.202.98" NAS-IP-Address = xx.xx.xx.xx +- entering group preacct {...} ++[preprocess] returns ok [acct_unique] WARNING: Attribute NAS-Port was not found in request, unique ID MAY be inconsistent [acct_unique] Hashing ',Client-IP-Address = 10.77.202.78,NAS-IP-Address = xx.xx.xx.xx,Acct-Session-Id = "000D76B9",User-Name = " 01-0AE87C20-01-00000001-0004-78C8DB79-FFFFFFFFFFFFFFFF@ABC"' [acct_unique] Acct-Unique-Session-ID = "8d9821e205479a13". ++[acct_unique] returns ok [suffix] Looking up realm "ABC" for User-Name = " 01-0AE87C20-01-00000001-0004-78C8DB79-FFFFFFFFFFFFFFFF@ABC" [suffix] No such realm "ABC" ++[suffix] returns noop ++[files] returns noop +- entering group accounting {...} ++? if (Acct-Status-Type == 'Stop') ? Evaluating (Acct-Status-Type == 'Stop') -> TRUE ++? if (Acct-Status-Type == 'Stop') -> TRUE ++- entering if (Acct-Status-Type == 'Stop') {...} [detail] expand: /usr/local/fnmt/freeradius2//var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d -> /usr/local/fnmt/freeradius2//var/log/radius/radacct/ 10.77.202.78/detail-20090820 [detail] /usr/local/fnmt/freeradius2//var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/fnmt/freeradius2//var/log/radius/radacct/ 10.77.202.78/detail-20090820 [detail] expand: %t -> Thu Aug 20 01:04:39 2009 +++[detail] returns ok ++- if (Acct-Status-Type == 'Stop') returns ok ++[unix] returns noop [radutmp] expand: /usr/local/fnmt/freeradius2//var/log/radius/radutmp -> /usr/local/fnmt/freeradius2//var/log/radius/radutmp [radutmp] expand: %{User-Name} -> 01-0AE87C20-01-00000001-0004-78C8DB79-FFFFFFFFFFFFFFFF@ABC rlm_radutmp: No NAS-Port seen. Cannot do anything. rlm_radumtp: WARNING: checkrad will probably not work! ++[radutmp] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> 01-0AE87C20-01-00000001-0004-78C8DB79-FFFFFFFFFFFFFFFF@ABC attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated Sending Accounting-Response of id 1 to 10.77.202.78 port 1495 Finished request 1. Cleaning up request 1 ID 1 with timestamp +141 Going to the next request Waking up in 8.9 seconds. Polling for detail file /usr/local/fnmt/freeradius2//var/log/radius/radacct/detail Packets are not logged to db. sqltrace_sql shows nothing. sql modules is not called? Where i'm doing the mistake.? please suggest. Thanks, Rams. > > > Message: 1 > Date: Wed, 19 Aug 2009 13:37:13 +0100 > From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> > Subject: Re: accounting through detail module help > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20090819123713.GA2117(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > hi, > > the default server will call detail > > the buffered-sql should call the actual SQL module to do the work. > > this means default server spews packet data to detail file, > the buffered-sql then reads that data and chucks into SQL > > alan > > > ------------------------------ >

1 0