August 2009 - Freeradius-Users - lists.freeradius.org

Re: Script for logging out user from their session
by Deepak 02 Aug '09

02 Aug '09

>> By the way for "Max-All-Session" to work, do I need to run chilli with >> "coaport 3977" and "coanoipcheck" option? > > No. Session-Timeout will do fine. > > Ivan Kalik > Kalik Informatika ISP > > Thanks -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

1 0

Re: Freeradius-Users Digest, Vol 52, Issue 4
by Gilbert Lo 02 Aug '09

02 Aug '09

Thank you for your message. I am away until August 7th. I will respond to your message on my return . For urgent matters, please contact helpdesk(a)stgeorges.bc.ca . Cheers, Gilbert Lo

1 0

Re: Script for logging out user from their session
by Deepak 01 Aug '09

01 Aug '09

> Yes, there is a probloem when counter query returns NULL (no records for > that user; once there is accounting for that user everything works fine), > and it's not just that counter. This seems to be the probloem: > > radius_xlat(querystr, MAX_QUERY_LEN, responsestr, request, sql_escape_func); > > if (sscanf(querystr, "%u", &counter) != 1) { > DEBUG2("rlm_sqlcounter: No integer found in string \"%s\"", > querystr); > return RLM_MODULE_NOOP; > } > > That returns noop in case of NULL as well. If query result is NULL it > should set counter too 0 and continue. I am not a programmer, so I don't > know if that can be tested there. If not, queries for counters can be > altered to return 0 in case of NULL. > > > Ivan Kalik > Kalik Informatika ISP > > Well, I cannot give opinion on this regard because I really don't know what is exactly going on inside...However, modification of SQL did the job. By the way for "Max-All-Session" to work, do I need to run chilli with "coaport 3977" and "coanoipcheck" option? or without it will just do fine? Currently chilli is running with these options. Thanks -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

1 0

Re: Unknown attribute "Max-All-Session"
by Deepak 01 Aug '09

01 Aug '09

> You need to add the counter to instantiate section of radiusd.conf. That > will create the attribute and instantiate sql instance even if you are not > using it elsewhere. > > Ivan Kalik > Kalik Informatika ISP > > Thanks for this info. Learned something new. Regards -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

1 0

RE: Unknown attribute "Max-All-Session"
by boroba -- 01 Aug '09

01 Aug '09

From: flache4(a)hotmail.com To: flache4(a)hotmail.com Subject: RE: Unknown attribute "Max-All-Session" Date: Fri, 31 Jul 2009 15:56:03 +0000 thanks for reply i have install freeradius2 and configure it like http://wiki.freeradius.org/Rlm_sqlcounter and i get error when i start it. Fri Jul 31 15:55:36 2009 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Fri Jul 31 15:55:36 2009 : Info: rlm_sql (sql): Attempting to connect to root@localhost:/radius Fri Jul 31 15:55:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Fri Jul 31 15:55:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Fri Jul 31 15:55:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Fri Jul 31 15:55:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Fri Jul 31 15:55:36 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Fri Jul 31 15:55:36 2009 : Error: /etc/raddb/users[204]: Parse error (check) for entry test0001: Invalid octet string "540" for attribute name "Max-All-Session" Fri Jul 31 15:55:36 2009 : Error: Errors reading /etc/raddb/users Fri Jul 31 15:55:36 2009 : Error: /etc/raddb/modules/files[7]: Instantiation failed for module "files" Fri Jul 31 15:55:36 2009 : Error: /etc/raddb/sites-enabled/inner-tunnel[111]: Failed to find module "files". Fri Jul 31 15:55:36 2009 : Error: /etc/raddb/sites-enabled/inner-tunnel[34]: Errors parsing authorize section. Fri Jul 31 15:55:36 2009 : Error: Failed to load virtual server inner-tunnel Fri Jul 31 15:55:36 2009 : Error: Errors initializing modules thanks in advance Avec Windows Live, vous organisez, retouchez et partagez vos photos. _________________________________________________________________ Sur Windows Live Ideas, découvrez en exclusivité de nouveaux services en ligne... si nouveaux qu'ils ne sont pas encore sortis officiellement sur le marché ! http://ideas.live.com

3 4

Script for logging out user from their session
by Deepak 01 Aug '09

01 Aug '09

Hi, I am a newbie trying to create a prepaid hotspot and I am using following. CentOS 5.3 freeradius2-2.1.6 mysql 5.0.45 daloradius-0.9-8 chillispot 1.0 (in dd-wrt) I have managed to put this all together and it is working fine so far. Now I wanted to try that if I will give a user 1 hour time (1 hour prepaid card is sold and assumed that user can consume that within infinite period of time without expiration), i want to limit that time strictly. For this I have implemented the "Max-All-Session" Attribute and so far it is working during login time (not during user session). So following is the problem: 1) User have 1 hour and if he is continuously logged in more than 1 hour, there is no way he will be automatically logged out. 2) For solution to this, I have implemented the "Session-Timeout" of 1 hour (3600) together with "Max-All-Session". This solution works given that user is not interrupted (or logged in continuously for 1 hour or more). This strategy fails when user logs out before 1 hour and logs in again. Supposing he still have 20 mins total time left, when he logs back in , his session timeout is again 1 hour so if continues to use until session timeout, he will end up using more than his time. This is worse if user logs in multiple time within credited time period. In this situation, what I wanted to do is - No matter what, when user reaches his time limit, he will be logged out from his session (if logged in) or not accept login request anymore ("Max-All-Session" already does this). 3) Now to implement the former condition I did some research and found out that freeradius is not designed to kick the user however we need to send the "Packet of Disconnect" to NAS (AP) by some means of script. It is also assumed (I guess) that we will monitor their account table and hand pick the user by ourselves and disconnect them manually. Instead I want to automate this thing. 4) After some research for this automation, I found out about the "radkill" untility (which is not exactly I wanted) but got some idea that we can do following step to logout user automatically (a) Find out about that user session and from which NAS he is logged in (radwho can be used for this purpose) (b) Send the packet of disconnect to that NAS for that particular user. Now before reinventing the wheel, I have been asking a question to myself for sometime (a) In the prepaid users scenario, there may be hundreds of users connected. Isn't that keeping track of each user's time in real time through some kind of daemon will be CPU intensive task? and overkill for the server? (b) Instead of keeping track in eating CPU cycles and memory, I though it would be nice to use and implement this logic when accounting packet arrives from chilli to radius (something like database triggerers). so when accounting packet arrives for any particular user, radius will check his "Max-All-Session" against used sum of used sessions and if necessary, send the packet of disconnect to the NAS. Well the problem is I don't know how to implement this since I am very new to freeradius and this whole hotspot thing. (c) Lastly, I am just wondering that somebody must have faced this problem before and made a solution considering many hotspot solutions available today. or am I seriously missing something (since new in this area), or there are more sleek approach to this problem than what I am thinking, which is readily available out of the box. In any case, can somebody guide me where to look for the solution on what I am trying to implement? Any suggestions, ideas most welcome Thanks and Regards P.S.: This is a cross post. Sorry I for that but I think this is the best place to post about this. This is also posted at Chilli forum http://www.chillispot.info/chilliforum/viewtopic.php?id=363 -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

2 2

Re: Freeradius-Users Digest, Vol 52, Issue 2
by Gilbert Lo 01 Aug '09

01 Aug '09

Thank you for your message. I am away until August 7th. I will respond to your message on my return . For urgent matters, please contact helpdesk(a)stgeorges.bc.ca . Cheers, Gilbert Lo

1 0

Re: Decoupled accounting
by Devinder Singh 01 Aug '09

01 Aug '09

Hi Ivan, I refeer only to version 1.0.4 for the serial file as its not there in /etc/raddb/certs/demoCA so i get the serial file from version 1.0.4 But i still get the errror message Bad Encrypt. What shoud i do next. I have created the certificates alomoist 5 times already . The massspord user for .CA.root myettelap .CA.server devin myettelap Pls help on this Regards Devinder } > rlm_eap: SSL error error:06065064:digital envelope > routines:EVP_DecryptFinal_ex:bad decrypt > rlm_eap_tls: Error reading private key file /etc/wireless-auth/linux-7v1x.pem > rlm_eap: Failed to initialize type tls > /etc/raddb/eap.conf[17]: Instantiation failed for module "eap" > /etc/raddb/sites-enabled/default[280]: Failed to find module "eap". > /etc/raddb/sites-enabled/default[227]: Errors parsing authenticate section. > } > Errors initializing modules 2009/8/1 Devinder Singh <devinbhullar(a)gmail.com>: > Hi Ivan > > Actually im am using version 2.1.1 Free Radius and i need the serial > file from 1.0.4 > > devinder > > 2009/7/31 Ivan Kalik <tnt(a)kalik.net>: >>> Hi Ivan >>> This is how generetd the certs and radiusd -X gives error >> ... >>> /home/palette/Desktop/freeradius-1.0.4/raddb/certs/demoCA/ >> ... >> >> Ah, this is 1.0.4! Don't use that for EAP. It's incompatible with Vista, >> XP SP2, SP3, ... Upgrade. >> >> Ivan Kalik >> Kalik Informatika ISP >> >> > > > > -- > Devinder > -- Devinder

1 0

radwho error: Is this minor typo error in rpm packaging?
by Deepak 01 Aug '09

01 Aug '09

Hi, I have rpm based freeradius package installed in my CentOS 5.3 box. In the course of experimentation, I noticed that radwho gives me following error: ========== "/var/log/radius/sradutmp: No such file or directory" ========== I guess this is a minor typo error in rpm package. Actually radwho should be looking for "radutmp" file not "sradutmp". If this is true, when can I expect the new fixed package? Thanks and Regards -- ============================== Registered Linux User #460714 Currently Using Fedora 10, CentOS 5.3 ==============================

1 0