August 2009 - Freeradius-Users - lists.freeradius.org

(need help) integrating freeradius with novel eDirectory
by diponegoro dipo 03 Aug '09

03 Aug '09

I have freeradius installed on my ubuntu, and novel eDirectory on SLES 10. Is it possible to integrating freeradius with eDir? I've been searching on google and stil can not find any documentation. so I try to configure it using documentation for freeradius (on sles), and it's failed. Any help would be apreciated. Thank You. ps: sorry for my english

2 1

Proxy accounting message
by HM Wong 03 Aug '09

03 Aug '09

Hi all, I have 2 NAS devices which will deliver RADIUS accounting message to my billing server. Now my billing system will receive all accounting info for all users. I would like to do billing record only for some of my users so that I would like to filter the others. I built a freeradius 1.x to proxy accounting message from NAS devices to billing server. Is it possible to configure the freeradius filter/limit the proxy of accounting message based on user in database or files? Thanks, HM

2 2

Re: Freeradius-Users Digest, Vol 52, Issue 9
by Gilbert Lo 03 Aug '09

03 Aug '09

Thank you for your message. I am away until August 7th. I will respond to your message on my return . For urgent matters, please contact helpdesk(a)stgeorges.bc.ca . Cheers, Gilbert Lo

1 0

Re: Decoupled accounting
by Devinder Singh 03 Aug '09

03 Aug '09

Hi This is my directory listing which file should i copy to the XP machine linux-h9qt:/etc/raddb/certs # ls 01.pem bootstrap ca.key client.crt client.p12 dh index.txt.attr.old random serial.old server.csr server.pem 02.pem ca.cnf ca.pem client.csr client.pem index.txt index.txt.old README server.cnf server.key xpextensions 03.pem ca.der client.cnf client.key devinder(a)palettemm.com.pem index.txt.attr Makefile serial server.crt server.p12 2009/8/3 Devinder Singh <devinbhullar(a)gmail.com>: > I dont get any errors now when i run radiusd -X > > > does that mean the certs are generated OK > > 2009/8/3 Devinder Singh <devinbhullar(a)gmail.com>: >> what do i do next i want to install teh cert on my windows XP machine? >> >> 2009/8/3 Devinder Singh <devinbhullar(a)gmail.com>: >>> Yes got it to work Ivan >>> >>> Thanks >>> >>> i did >>> >>> chown root:radiusd /etc/raddb/certs/random and for dh >>> >>> >>> >>> 2009/8/3 Devinder Singh <devinbhullar(a)gmail.com>: >>>> user = radiusd >>>> group = radiusd >>>> >>>> how do i chown the entire cert directory? >>>> >>>> 2009/8/3 Ivan Kalik <tnt(a)kalik.net>: >>>>>> so how do i go about in this >>>>>> >>>>>> chown root:radiusd /etc/raddb/certs/dh >>>>>> >>>>>> chown root:radiusd /etc/raddb/certs/random >>>>>> >>>>>> is that correct? >>>>> >>>>> chown whole certs directory. I don't know what user does your radiusd run >>>>> under. I am quite sure root/radiusd is wrong. It's either root:root or >>>>> radius:radius in default configuration. It could be different in binary >>>>> distributions. Check user/group settings in radiusd.conf. >>>>> >>>>> Ivan Kalik >>>>> Kalik Informatika ISP >>>>> >>>>> >>>> >>>> >>>> >>>> -- >>>> Devinder >>>> >>> >>> >>> >>> -- >>> Devinder >>> >> >> >> >> -- >> Devinder >> > > > > -- > Devinder > -- Devinder

1 0

Re: Decoupled accounting
by Devinder Singh 03 Aug '09

03 Aug '09

Hi Ivan. Ok i have reformetated my machine and installed Radius 2.1.1 from Yast Open Suse 11. I followed the instructions in /etc/raddb/certs/README Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/etc/raddb/certs/server.pem" certificate_file = "/etc/raddb/certs/server.pem" CA_file = "/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/etc/raddb/certs/dh" random_file = "/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } rlm_eap: SSL error error:0200100D:system library:fopen:Permission denied rlm_eap_tls: Error reading certificate file /etc/raddb/certs/server.pem rlm_eap: Failed to initialize type tls /etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. } } Errors initializing modules 2009/8/1 Ivan Kalik <tnt(a)kalik.net>: >> I refeer only to version 1.0.4 for the serial file as its not there in >> /etc/raddb/certs/demoCA so i get the serial file from version 1.0.4 >> >> But i still get the errror message Bad Encrypt. >> >> What shoud i do next. > > How about following the instructions in raddb/certs/README file? > > Ivan Kalik > Kalik Informatika ISP > > -- Devinder

1 5

Re: Idle-Timeout not working
by Deepak 03 Aug '09

03 Aug '09

> The portal is broken. It needs fixing. > After the firmware upgrade, it is working now but with minor issue. "You are Logged In" pop up windows doesn't show any indication of user being logged out unlike when "Session-Timeout" occurs.. It keeps on rolling the time even if user have been logged out. Anyway I am fine with that as long as it is working. Thanks -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

1 0

Re: Decoupled accounting
by Devinder Singh 02 Aug '09

02 Aug '09

Hi Ivan Actually i followed the steps in Free Radius http://wiki.freeradius.org/WPA_HOWTO. Could i use the steps here or shoud i follow the Readme file Regards Devinder 2009/8/1 Ivan Kalik <tnt(a)kalik.net>: >> I refeer only to version 1.0.4 for the serial file as its not there in >> /etc/raddb/certs/demoCA so i get the serial file from version 1.0.4 >> >> But i still get the errror message Bad Encrypt. >> >> What shoud i do next. > > How about following the instructions in raddb/certs/README file? > > Ivan Kalik > Kalik Informatika ISP > > -- Devinder

1 0

Re: Idle-Timeout not working
by Deepak 02 Aug '09

02 Aug '09

> Which is a problem with the portal, not radius. Direct your questions to > their support. > > Ivan Kalik > Kalik Informatika ISP > > Ok. Thanks -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

1 0

Idle-Timeout not working
by Deepak 02 Aug '09

02 Aug '09

Hi, After fixing the "Max-All-Session" thing, today I am checking "Idle-Timeout" but it is not working? I checked with all the browser closed except the You Are Logged In popup windows from chilli to simulate the idle time but it is not triggered? Need some suggestion. Thanks OS: CentOS 5.3 Freradius2 (rpm version) -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

2 3

freeradius and ldap
by Eric 02 Aug '09

02 Aug '09

Hi, I installed freeradius-server-2.1.6. It is related with a LDAP server.when run radiusd -X there is this error: /usr/local/etc/raddb/modules/ldap[29]: Failed to link to module 'rlm_ldap': /usr/lib/rlm_ldap.so: undefined symbol: librad_errstr Is it needed to install freeradius-ldap or my config may have error? I downloded freeradius-ldap-2.1.3-1.fc10.i386.rpm. when I want to install it needs libldap_r-2.4.so.2. and searching this file gives openldap that its installing needs dependencies too. What is my mistake?

3 5