February 2010 - Freeradius-Users - lists.freeradius.org

how to use daloradius to limit pptp users time?
by Jean 12 Feb '10

12 Feb '10

hi, all I am trying to set a test billing plan where the user 1 minute total. It's not quite working and I have a few questions: 1. First I set up a billing plan called "1time": Billing>Plans>New Plan. I set Time Settings>Plan Type = Accumulative, and Plan Time Bank = 60. Then I assigned the plan to a user. Billing>POS>Edit User>Plan Name = "1time". But after the users over 1 minute, and then logs off, they can still log back in. It seems the Billing Plan does not stop the user from logging in. What should I do such that the user gets blocked after 1 minute? daloradius:version 0.9-8-SVN freeradius:version 1.1.6 Thanks!

1 0

Logs from /var/log/radius/radius.log
by muffin sk 12 Feb '10

12 Feb '10

Hello all, I need your help to understand the meaning of the following snippet of the logs from the /var/log/radius/radius.log file of my FreeRADIUS version 1.1.7-2 on top of CentOS 5.x. Can you briefly explain the meaning for each line below if that doesn't cost much of your time? I cannot find a good and detailed explanation of the below logs and I don't know if it's exactly documented somewhere. --- Thu Feb 11 05:53:24 2010 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Feb 11 05:53:25 2010 : Error: WARNING: Unresponsive child (id 1241577792) for request 123582 (in component accounting module rlm_sql) --- Thu Feb 11 06:26:21 2010 : Error: rlm_sql_mysql: Cannot store result Thu Feb 11 06:26:21 2010 : Error: rlm_sql_mysql: MySQL error 'Column 'UserName' cannot be null' Thu Feb 11 09:03:25 2010 : Error: rlm_sql (sql): Couldn't update SQL accounting STOP record - Column 'UserName' cannot be null --- Thank you in advance. Regards, Muffin

3 9

RHEL Freeradius Packages v2.1.7
by Ben Wiechman 11 Feb '10

11 Feb '10

Does anyone have version 2.1.7 of the RHEL freeradius 2 rpms that John graciously provided? Thanks Ben

2 2

Cisco Aironet 1240AG, PEAP and Active directory
by Abdessamad BARAKAT 11 Feb '10

11 Feb '10

Hi guys, I need your help for a strange problem. I want to authenticate users connected to a Cisco Aironet 1240 AG with their AD account and sometimes it's working and sometimes not and now doesn't want to work without changing something on the configuration... The AD authentication with ntlm_auth is working fine but just after that, the freeradius send a access-challenge to the aironet and nothing after that, no access-accept or access-reject. The windows part. works correctly (kinit, net join and ntlm_auth) I use the virtual server inner-tunnel for handle EAP/PEAP stuff, listen on different ports (auth 1814/ acct 1815) The aironet and the freeradius are synchronized with the same ntp server. Freeradius 2.1.8 samba 3.3.10 Debian 3.1 You can see a below the detail of a full session between the aironet and the freeradius. Many thanks for any tips. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=172, length=146 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0xed65b0ebeb73a88b8467cc86843891e8 EAP-Message = 0x0201001501424f5552424f4e5c61626172616b6174 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:31 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:31 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:31 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:31 2010 : Info: [eap] EAP packet type response id 1 length 21 Tue Feb 9 19:31:31 2010 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns updated Tue Feb 9 19:31:31 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:31 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:31 2010 : Info: [eap] EAP Identity Tue Feb 9 19:31:31 2010 : Info: [eap] processing type tls Tue Feb 9 19:31:31 2010 : Info: [tls] Requiring client certificate Tue Feb 9 19:31:31 2010 : Info: [tls] Initiate Tue Feb 9 19:31:31 2010 : Info: [tls] Start returned 1 Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:31 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 172 to 10.0.0.77 port 1645 EAP-Message = 0x010200060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f363056b37ef480b6cd7986d15 Tue Feb 9 19:31:31 2010 : Info: Finished request 0. Tue Feb 9 19:31:31 2010 : Debug: Going to the next request Tue Feb 9 19:31:31 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=173, length=149 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x412cd5decbd056652c741d532d91f91e EAP-Message = 0x020200060319 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f363056b37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:31 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:31 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:31 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:31 2010 : Info: [eap] EAP packet type response id 2 length 6 Tue Feb 9 19:31:31 2010 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns updated Tue Feb 9 19:31:31 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:31 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:31 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:31 2010 : Info: [eap] EAP NAK Tue Feb 9 19:31:31 2010 : Info: [eap] EAP-NAK asked for EAP-Type/peap Tue Feb 9 19:31:31 2010 : Info: [eap] processing type tls Tue Feb 9 19:31:31 2010 : Info: [tls] Initiate Tue Feb 9 19:31:31 2010 : Info: [tls] Start returned 1 Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:31 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 173 to 10.0.0.77 port 1645 EAP-Message = 0x010300061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f362047f37ef480b6cd7986d15 Tue Feb 9 19:31:31 2010 : Info: Finished request 1. Tue Feb 9 19:31:31 2010 : Debug: Going to the next request Tue Feb 9 19:31:31 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=174, length=223 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x45716fc71f57bd4a24613a3c5fda46e0 EAP-Message = 0x0203005019800000004616030100410100003d03014b71aa07cdc3058a38c645ee719f9b192d6b0588401da3361551528ad2b8acd100001600040005000a000900640062000300060013001200630100 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f362047f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:31 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:31 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:31 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:31 2010 : Info: [eap] EAP packet type response id 3 length 80 Tue Feb 9 19:31:31 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:31 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:31 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:31 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:31 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:31 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:31 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:31 2010 : Debug: TLS Length 70 Tue Feb 9 19:31:31 2010 : Info: [peap] Length Included Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_verify returned 11 Tue Feb 9 19:31:31 2010 : Info: [peap] (other): before/accept initialization Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: before/accept initialization Tue Feb 9 19:31:31 2010 : Info: [peap] <<< TLS 1.0 Handshake [length 0041], ClientHello Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 read client hello A Tue Feb 9 19:31:31 2010 : Info: [peap] >>> TLS 1.0 Handshake [length 002a], ServerHello Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 write server hello A Tue Feb 9 19:31:31 2010 : Info: [peap] >>> TLS 1.0 Handshake [length 080f], Certificate Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 write certificate A Tue Feb 9 19:31:31 2010 : Info: [peap] >>> TLS 1.0 Handshake [length 0004], ServerHelloDone Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 write server done A Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 flush data Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: Need to read more data: SSLv3 read client certificate A Tue Feb 9 19:31:31 2010 : Debug: In SSL Handshake Phase Tue Feb 9 19:31:31 2010 : Debug: In SSL Accept mode Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_process returned 13 Tue Feb 9 19:31:31 2010 : Info: [peap] EAPTLS_HANDLED Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:31 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 174 to 10.0.0.77 port 1645 EAP-Message = 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 EAP-Message = 0x5a170d3138303732393037303432345a306d310b3009060355040613024652310d300b06035504081304504143413110300e060355040a1307426f7572626f6e311330110603550403130a4d414e494e464c5830353128302606092a864886f70d010901161972657365617540626f7572626f6e2d6f6e6c696e652e636f6d30820122300d06092a864886f70d01010105000382010f003082010a0282010100a7b78af2a06be87092e46edae10420955634dc12701bfafadba2005b5aeefd926a9b2630d51153cb6035c944506fb09ceb04e6343bc8a70d52f8790fee747a62f961719f388b2ae54e1e526efcd1884ff3082eaa1a6a686b6df4c4bd9f EAP-Message = 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 EAP-Message = 0x83ec8ee5d7723b9ab51bd2dc5bf601d8ce5e613847cb8dd45ee71a9b026ec6930d31b03edee7af52760334c56a0974a135e8b8b36dab96d61eab510d2fa58df2a872358ee805b5890534aefe5d2e5dfd05071e6c7f409692b3a1bc5191ea4a7413537e1b3b87cd735d82689d5feadc2c1bfebb2f07d2a8bca706f9ff939b3bcb1884f9f4921c5ebafa5559d21ab8cde1f3894f7d0e62c972ec09d02dd2b7b7afdf9b7a6581c46a461d5b0f230591e4ba967920625c8000ed4314ba6e380ceab5774300916c5f1b3be3b1bdb9abf61c8e0ba851806531029600047b308204773082035fa003020102020900b766438b321f9f9c300d06092a864886f70d EAP-Message = 0x0101040500308183310b3009 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f361037f37ef480b6cd7986d15 Tue Feb 9 19:31:31 2010 : Info: Finished request 2. Tue Feb 9 19:31:31 2010 : Debug: Going to the next request Tue Feb 9 19:31:31 2010 : Debug: Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=175, length=149 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x5d0b3a377ada40b679cbc9e64f9575dd EAP-Message = 0x020400061900 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f361037f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:31 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:31 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:31 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:31 2010 : Info: [eap] EAP packet type response id 4 length 6 Tue Feb 9 19:31:31 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:31 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:31 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:31 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:31 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:31 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:31 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:31 2010 : Info: [peap] Received TLS ACK Tue Feb 9 19:31:31 2010 : Info: [peap] ACK handshake fragment handler Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_verify returned 1 Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_process returned 13 Tue Feb 9 19:31:31 2010 : Info: [peap] EAPTLS_HANDLED Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:31 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 175 to 10.0.0.77 port 1645 EAP-Message = 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 EAP-Message = 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 EAP-Message = 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 EAP-Message = 0x657365617540626f7572626f6e2d6f6e6c696e652e636f6d311530130603550403130c426f7572626f6e2057696669820900b766438b321f9f9c300c0603551d13040530030101ff300d06092a864886f70d01010405000382010100251a3ffcc78e8dbe969a4f961e585036481111ae2b26c492435e7240e91edb58320f3fe213708938e37b38707253dc741124fb2bfb6f9d52fbc0a6b702aeb86ff30517be2472bbef215d4dcb4a9978402b32a3fb0320ab05a5fbdfa93d011e09d24936a5f20fb94ca54103c042c8be8b111126a3b957b9c8bc025a86c69d4a2eca3a184368c0a3bc5e0c24eeb041d8ad02211767d8144c5dee5b06980cb9408280 EAP-Message = 0x2e483ef0ee3b57d6 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f360027f37ef480b6cd7986d15 Tue Feb 9 19:31:31 2010 : Info: Finished request 3. Tue Feb 9 19:31:31 2010 : Debug: Going to the next request Tue Feb 9 19:31:31 2010 : Debug: Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=176, length=149 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x3ac2f01811b4629fdcd317157c47b538 EAP-Message = 0x020500061900 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f360027f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:31 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:31 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:31 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:31 2010 : Info: [eap] EAP packet type response id 5 length 6 Tue Feb 9 19:31:31 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:31 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:31 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:31 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:31 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:31 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:31 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:31 2010 : Info: [peap] Received TLS ACK Tue Feb 9 19:31:31 2010 : Info: [peap] ACK handshake fragment handler Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_verify returned 1 Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_process returned 13 Tue Feb 9 19:31:31 2010 : Info: [peap] EAPTLS_HANDLED Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:31 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 176 to 10.0.0.77 port 1645 EAP-Message = 0x010600661900cc3f738e0bb90eb43d082127c7cdc508523e8d839599dc81a4163bd1a2af448c98bb160534531881e4b11ea1a1299f7b1629fc3ef4c2fc3bf925285e87f0c980e14b3272e948f23ff1e54b5a9fada91f718325413ff25c16030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f367017f37ef480b6cd7986d15 Tue Feb 9 19:31:31 2010 : Info: Finished request 4. Tue Feb 9 19:31:31 2010 : Debug: Going to the next request Tue Feb 9 19:31:31 2010 : Debug: Waking up in 4.8 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=177, length=465 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x024a73e43a438c4f39a58124a4b38dfc EAP-Message = 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 EAP-Message = 0xc932090c584389a1bb72fd70793b1a969521c0206eab7e8c14030100010116030100200c71dab31b9d5950bb4848a49f11003a72b8e9cdff7e4353588e9ffbd15bedb9 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f367017f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:31 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:31 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:31 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:31 2010 : Info: [eap] EAP packet type response id 6 length 253 Tue Feb 9 19:31:31 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:31 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:31 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:31 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:31 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:31 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:31 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:31 2010 : Debug: TLS Length 310 Tue Feb 9 19:31:31 2010 : Info: [peap] Length Included Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_verify returned 11 Tue Feb 9 19:31:31 2010 : Info: [peap] <<< TLS 1.0 Handshake [length 0106], ClientKeyExchange Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 read client key exchange A Tue Feb 9 19:31:31 2010 : Info: [peap] <<< TLS 1.0 ChangeCipherSpec [length 0001] Tue Feb 9 19:31:31 2010 : Info: [peap] <<< TLS 1.0 Handshake [length 0010], Finished Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 read finished A Tue Feb 9 19:31:31 2010 : Info: [peap] >>> TLS 1.0 ChangeCipherSpec [length 0001] Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 write change cipher spec A Tue Feb 9 19:31:31 2010 : Info: [peap] >>> TLS 1.0 Handshake [length 0010], Finished Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 write finished A Tue Feb 9 19:31:31 2010 : Info: [peap] TLS_accept: SSLv3 flush data Tue Feb 9 19:31:31 2010 : Info: [peap] (other): SSL negotiation finished successfully Tue Feb 9 19:31:31 2010 : Debug: SSL Connection Established Tue Feb 9 19:31:31 2010 : Info: [peap] eaptls_process returned 13 Tue Feb 9 19:31:31 2010 : Info: [peap] EAPTLS_HANDLED Tue Feb 9 19:31:31 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:31 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 177 to 10.0.0.77 port 1645 EAP-Message = 0x0107003119001403010001011603010020a56dfc42f5d1060f090b69cc7b8f37f3daee63f4f8da90203a1e5a1bcd82f342 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f366007f37ef480b6cd7986d15 Tue Feb 9 19:31:31 2010 : Info: Finished request 5. Tue Feb 9 19:31:31 2010 : Debug: Going to the next request Tue Feb 9 19:31:31 2010 : Debug: Waking up in 4.7 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=178, length=149 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x629c55793c4cbadf76846f2f29db3db4 EAP-Message = 0x020700061900 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f366007f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:32 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:32 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:32 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:32 2010 : Info: [eap] EAP packet type response id 7 length 6 Tue Feb 9 19:31:32 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:32 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:32 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:32 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:32 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:32 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:32 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:32 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:32 2010 : Info: [peap] Received TLS ACK Tue Feb 9 19:31:32 2010 : Info: [peap] ACK handshake is finished Tue Feb 9 19:31:32 2010 : Info: [peap] eaptls_verify returned 3 Tue Feb 9 19:31:32 2010 : Info: [peap] eaptls_process returned 3 Tue Feb 9 19:31:32 2010 : Info: [peap] EAPTLS_SUCCESS Tue Feb 9 19:31:32 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:32 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 178 to 10.0.0.77 port 1645 EAP-Message = 0x0108002019001703010015338a9d72cc9bb34a8f252b4d7857636b5d2a9b4db3 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f3650f7f37ef480b6cd7986d15 Tue Feb 9 19:31:32 2010 : Info: Finished request 6. Tue Feb 9 19:31:32 2010 : Debug: Going to the next request Tue Feb 9 19:31:32 2010 : Debug: Waking up in 3.5 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=179, length=187 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x500d56edad68bdbda0e5b3912480a1f6 EAP-Message = 0x0208002c19001703010021b6c2b8543fbb5966a77182d6f87791d0e16c87a89f58a0b67058189c046188b3fa NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f3650f7f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:34 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:34 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:34 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:34 2010 : Info: [eap] EAP packet type response id 8 length 44 Tue Feb 9 19:31:34 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:34 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:34 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:34 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:34 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:34 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:34 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:34 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:34 2010 : Info: [peap] eaptls_verify returned 7 Tue Feb 9 19:31:34 2010 : Info: [peap] Done initial handshake Tue Feb 9 19:31:34 2010 : Info: [peap] eaptls_process returned 7 Tue Feb 9 19:31:34 2010 : Info: [peap] EAPTLS_OK Tue Feb 9 19:31:34 2010 : Info: [peap] Session established. Decoding tunneled attributes. Tue Feb 9 19:31:34 2010 : Info: [peap] Identity - AD_DOMAIN\user_test_wifi Tue Feb 9 19:31:34 2010 : Info: [peap] Got tunneled request EAP-Message = 0x0208001501424f5552424f4e5c61626172616b6174 server inner-tunnel { Tue Feb 9 19:31:34 2010 : Debug: PEAP: Got tunneled identity of AD_DOMAIN\user_test_wifi Tue Feb 9 19:31:34 2010 : Debug: PEAP: Setting default EAP type for tunneled EAP session. Tue Feb 9 19:31:34 2010 : Debug: PEAP: Setting User-Name to AD_DOMAIN\user_test_wifi Sending tunneled request EAP-Message = 0x0208001501424f5552424f4e5c61626172616b6174 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "AD_DOMAIN\\user_test_wifi" server inner-tunnel { Tue Feb 9 19:31:34 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:34 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:34 2010 : Info: [eap] EAP packet type response id 8 length 21 Tue Feb 9 19:31:34 2010 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Tue Feb 9 19:31:34 2010 : Info: ++[eap] returns updated Tue Feb 9 19:31:34 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:34 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:34 2010 : Info: [eap] EAP Identity Tue Feb 9 19:31:34 2010 : Info: [eap] processing type mschapv2 Tue Feb 9 19:31:34 2010 : Debug: rlm_eap_mschapv2: Issuing Challenge Tue Feb 9 19:31:34 2010 : Info: ++[eap] returns handled } # server inner-tunnel Tue Feb 9 19:31:34 2010 : Info: [peap] Got tunneled reply code 11 EAP-Message = 0x0109002a1a01090025101c8be56c40b9a54755d20939ec8df613424f5552424f4e5c61626172616b6174 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201838bd20112259733e0bf834fb291f Tue Feb 9 19:31:34 2010 : Info: [peap] Got tunneled reply RADIUS code 11 EAP-Message = 0x0109002a1a01090025101c8be56c40b9a54755d20939ec8df613424f5552424f4e5c61626172616b6174 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201838bd20112259733e0bf834fb291f Tue Feb 9 19:31:34 2010 : Info: [peap] Got tunneled Access-Challenge Tue Feb 9 19:31:34 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:34 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 179 to 10.0.0.77 port 1645 EAP-Message = 0x0109004119001703010036e406e613a4f321e4655c7c579132115ccc4bb4877b10ffc97a61c4cb688dea5d4c1cf9a9f27a95ebbd8ba6338742f3efa4807a43ece1 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f3640e7f37ef480b6cd7986d15 Tue Feb 9 19:31:34 2010 : Info: Finished request 7. Tue Feb 9 19:31:34 2010 : Debug: Going to the next request Tue Feb 9 19:31:34 2010 : Debug: Waking up in 2.1 seconds. rad_recv: Access-Request packet from host 10.0.0.77 port 1645, id=180, length=241 User-Name = "AD_DOMAIN\\user_test_wifi" Framed-MTU = 1400 Called-Station-Id = "001c.f661.2861" Calling-Station-Id = "0018.de10.fcef" Service-Type = Login-User Message-Authenticator = 0x31542e43fae0a5114d2097298c39dbd2 EAP-Message = 0x02090062190017030100572fd5ebb3225905f570376310014d9354d08bb9d9679612b9656c27ef7ada8d6b490ae14d389d9b475c26b5273a0d0129d1e3fce2764acb32ade4a614891eaee57ece9593753cec60a828360cd03b295ffedc5456dc7c73 NAS-Port-Type = Wireless-802.11 NAS-Port = 879 NAS-Port-Id = "879" State = 0x630766f3640e7f37ef480b6cd7986d15 NAS-IP-Address = 10.0.0.77 Tue Feb 9 19:31:35 2010 : Info: server inner-tunnel { Tue Feb 9 19:31:35 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:35 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:35 2010 : Info: [eap] EAP packet type response id 9 length 98 Tue Feb 9 19:31:35 2010 : Info: [eap] Continuing tunnel setup. Tue Feb 9 19:31:35 2010 : Info: ++[eap] returns ok Tue Feb 9 19:31:35 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:35 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:35 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:35 2010 : Info: [eap] EAP/peap Tue Feb 9 19:31:35 2010 : Info: [eap] processing type peap Tue Feb 9 19:31:35 2010 : Info: [peap] processing EAP-TLS Tue Feb 9 19:31:35 2010 : Info: [peap] eaptls_verify returned 7 Tue Feb 9 19:31:35 2010 : Info: [peap] Done initial handshake Tue Feb 9 19:31:35 2010 : Info: [peap] eaptls_process returned 7 Tue Feb 9 19:31:35 2010 : Info: [peap] EAPTLS_OK Tue Feb 9 19:31:35 2010 : Info: [peap] Session established. Decoding tunneled attributes. Tue Feb 9 19:31:35 2010 : Info: [peap] EAP type mschapv2 Tue Feb 9 19:31:35 2010 : Info: [peap] Got tunneled request EAP-Message = 0x0209004b1a020900463159c4b01853f7bc645db17d14cc43e45b0000000000000000f8311309285cb367f0f69e17c8573225debc330a6f2b0acd00424f5552424f4e5c61626172616b6174 server inner-tunnel { Tue Feb 9 19:31:35 2010 : Debug: PEAP: Setting User-Name to AD_DOMAIN\user_test_wifi Sending tunneled request EAP-Message = 0x0209004b1a020900463159c4b01853f7bc645db17d14cc43e45b0000000000000000f8311309285cb367f0f69e17c8573225debc330a6f2b0acd00424f5552424f4e5c61626172616b6174 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "AD_DOMAIN\\user_test_wifi" State = 0x201838bd20112259733e0bf834fb291f server inner-tunnel { Tue Feb 9 19:31:35 2010 : Info: +- entering group authorize {...} Tue Feb 9 19:31:35 2010 : Info: ++[mschap] returns noop Tue Feb 9 19:31:35 2010 : Info: [eap] EAP packet type response id 9 length 75 Tue Feb 9 19:31:35 2010 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Tue Feb 9 19:31:35 2010 : Info: ++[eap] returns updated Tue Feb 9 19:31:35 2010 : Info: Found Auth-Type = EAP Tue Feb 9 19:31:35 2010 : Info: +- entering group authenticate {...} Tue Feb 9 19:31:35 2010 : Info: [eap] Request found, released from the list Tue Feb 9 19:31:35 2010 : Info: [eap] EAP/mschapv2 Tue Feb 9 19:31:35 2010 : Info: [eap] processing type mschapv2 Tue Feb 9 19:31:35 2010 : Info: [mschapv2] +- entering group MS-CHAP {...} Tue Feb 9 19:31:35 2010 : Info: [mschap] Told to do MS-CHAPv2 for user_test_wifi with NT-Password Tue Feb 9 19:31:35 2010 : Info: [mschap] expand: --username=%{mschap:User-Name:-None} -> --username=user_test_wifi Tue Feb 9 19:31:35 2010 : Info: [mschap] expand: %{mschap:NT-Domain} -> AD_DOMAIN Tue Feb 9 19:31:35 2010 : Info: [mschap] expand: --domain=%{%{mschap:NT-Domain}:-AD_DOMAIN} -> --domain=AD_DOMAIN Tue Feb 9 19:31:35 2010 : Info: [mschap] mschap2: 1c Tue Feb 9 19:31:35 2010 : Info: [mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=a408dd1bfedc11a4 Tue Feb 9 19:31:35 2010 : Info: [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=f8311309285cb367f0f69e17c8573225debc330a6f2b0acd Tue Feb 9 19:31:35 2010 : Debug: Exec-Program output: NT_KEY: CF98AB81F3DA1FD14394045CBDF4EE95 Tue Feb 9 19:31:35 2010 : Debug: Exec-Program-Wait: plaintext: NT_KEY: CF98AB81F3DA1FD14394045CBDF4EE95 Tue Feb 9 19:31:35 2010 : Debug: Exec-Program: returned: 0 Tue Feb 9 19:31:35 2010 : Info: [mschap] adding MS-CHAPv2 MPPE keys Tue Feb 9 19:31:35 2010 : Info: ++[mschap] returns ok Tue Feb 9 19:31:35 2010 : Debug: MSCHAP Success Tue Feb 9 19:31:35 2010 : Info: ++[eap] returns handled } # server inner-tunnel Tue Feb 9 19:31:35 2010 : Info: [peap] Got tunneled reply code 11 EAP-Message = 0x010a00331a0309002e533d38373446314345433434313841443045443633443131343232423639374542364334374241383141 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201838bd21122259733e0bf834fb291f Tue Feb 9 19:31:35 2010 : Info: [peap] Got tunneled reply RADIUS code 11 EAP-Message = 0x010a00331a0309002e533d38373446314345433434313841443045443633443131343232423639374542364334374241383141 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x201838bd21122259733e0bf834fb291f Tue Feb 9 19:31:35 2010 : Info: [peap] Got tunneled Access-Challenge Tue Feb 9 19:31:35 2010 : Info: ++[eap] returns handled Tue Feb 9 19:31:35 2010 : Info: } # server inner-tunnel Sending Access-Challenge of id 180 to 10.0.0.77 port 1645 EAP-Message = 0x010a004a1900170301003fb59942b3af54f208315acdd63f76b9e69db5149b4cfc84a670ae4c1b54e82ae74d9af17979e7e1d1d755e8c03b38656ae4cde15a7936d288a423466d5f4d35 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x630766f36b0d7f37ef480b6cd7986d15 Tue Feb 9 19:31:35 2010 : Info: Finished request 8. Tue Feb 9 19:31:35 2010 : Debug: Going to the next request Tue Feb 9 19:31:35 2010 : Debug: Waking up in 0.5 seconds. Tue Feb 9 19:31:36 2010 : Info: Cleaning up request 0 ID 172 with timestamp +134 Tue Feb 9 19:31:36 2010 : Info: Cleaning up request 1 ID 173 with timestamp +134 Tue Feb 9 19:31:36 2010 : Info: Cleaning up request 2 ID 174 with timestamp +134 Tue Feb 9 19:31:36 2010 : Info: Cleaning up request 3 ID 175 with timestamp +134 Tue Feb 9 19:31:36 2010 : Info: Cleaning up request 4 ID 176 with timestamp +134 Tue Feb 9 19:31:36 2010 : Info: Cleaning up request 5 ID 177 with timestamp +134 Tue Feb 9 19:31:36 2010 : Debug: Waking up in 1.2 seconds. Tue Feb 9 19:31:37 2010 : Info: Cleaning up request 6 ID 178 with timestamp +135 Tue Feb 9 19:31:37 2010 : Debug: Waking up in 1.4 seconds. Tue Feb 9 19:31:39 2010 : Info: Cleaning up request 7 ID 179 with timestamp +137 Tue Feb 9 19:31:39 2010 : Debug: Waking up in 1.5 seconds. Tue Feb 9 19:31:40 2010 : Info: Cleaning up request 8 ID 180 with timestamp +138 Tue Feb 9 19:31:40 2010 : Info: Ready to process requests.

6 8

Simultaneous-Use problem with Mikrotik NAS clients
by Fojtán Balázs István 11 Feb '10

11 Feb '10

Hello all! I have problem with the Simultaneous-Use on Freeradius + Mikrotik environment. I'm using freeradius 2.1.8 on Debian lenny with mysql support. I've found a checklist in the wiki (http://wiki.freeradius.org/index.php/FAQ#Simultaneous-Use_doesn.27t_work) The second line of this is: "2. Run radiusd -X and see if it parses the Simultaneous-Use line." But if I run radiusd -x | grep simul I've got only these lines: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" I haven't got any output line which contents the "Simultaneous-Use" text-pattern. One of my question is: Could you describe me what can I see exactly in the output when the Simultaneous-Use function is on? I've uncommented in the /etc/freeradius/sql/mysql/dialup.conf the following lines: simul_count_query = "SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL" and also uncommented in the /etc/freeradius/sites-enabled/default, the "sql" line in the session section. The radwho command regularly lists the online users. But if I try to login through another Mikrotik NAS client in the name of a user who is listed by the radwho, the freeradius send access-accept to the NAS client. My radius database's tables are look like this: mysql> select * from radcheck; +----+----------+---------------+----+------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------+ | 1 | hz00001 | user-password | == | Tfregep5uy | | 3 | hz00002 | user-password | == | 29riaejofu | | 4 | hz00003 | user-password | == | Razsgepiui | | 5 | hz00004 | user-password | == | 64Vifuzuxo | | 6 | hz00005 | user-password | == | 39Bygonony | | 7 | hz00006 | user-password | == | Zozyhomo25 | | 8 | hz00007 | user-password | == | awdeokihaY | | 9 | hz00008 | user-password | == | 33Vifakhde | +----+----------+---------------+----+------------+ mysql> select * from radusergroup; +----------+-----------+----------+ | username | groupname | priority | +----------+-----------+----------+ | hz00001 | HZ | 1 | | hz00002 | HZ | 1 | | hz00003 | HZ | 1 | | hz00004 | HZ | 1 | | hz00005 | HZ | 1 | | hz00006 | HZ | 1 | | hz00007 | HZ | 1 | | hz00008 | HZ | 1 | +----------+-----------+----------+ mysql> select * from radgroupreply; +----+-----------+------------------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+------------------+----+-------+ | 1 | HZ | Simultaneous-Use | := | 1 | +----+-----------+------------------+----+-------+ Please suggest me what causes the problem! Regards, fbi

3 3

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients
by Fojtán Balázs István 11 Feb '10

11 Feb '10

Hello Fajar, thanks for your rapid response! >> simul_count_query = "SELECT COUNT(*) \ >> FROM ${acct_table1} \ >> WHERE username = '%{SQL-User-Name}' \ >> AND acctstoptime IS NULL" > >it uses ${acct_table1} (should be radacct by default). Have you >enabled accounting? > Yes, the accounting is working. It is some field listed from radacct table: mysql> select radacctid,acctsessionid,username,nasipaddress,nasporttype,acctstarttime,acctstoptime,acctinputoctets,acctoutputoctets from radacct where username="hz00001"; +-----------+---------------+----------+---------------+-----------------+---------------------+---------------------+-----------------+------------------+ | radacctid | acctsessionid | username | nasipaddress | nasporttype | acctstarttime | acctstoptime | acctinputoctets | acctoutputoctets | +-----------+---------------+----------+---------------+-----------------+---------------------+---------------------+-----------------+------------------+ | 3 | 80600002 | hz00001 | 172.16.2.246 | Wireless-802.11 | 2010-01-28 12:47:46 | 2010-01-28 12:50:37 | 21399 | 51376 | | 4 | 80600003 | hz00001 | 172.16.2.246 | Wireless-802.11 | 2010-01-29 17:42:58 | 2010-01-29 17:45:17 | 20811 | 50802 | | 160 | 80800010 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-08 17:54:56 | 2010-02-08 17:56:01 | 18320 | 35545 | | 161 | 80800011 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-08 17:56:26 | 2010-02-08 18:18:37 | 590798 | 2356358 | | 183 | 80400003 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-09 13:48:52 | 2010-02-09 13:49:07 | 9573 | 10237 | | 189 | 80b00007 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-09 15:21:20 | 2010-02-09 15:21:26 | 8474 | 8869 | | 230 | 80600000 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-10 15:44:02 | 2010-02-10 15:46:52 | 580051 | 896533 | +-----------+---------------+----------+---------------+-----------------+---------------------+---------------------+-----------------+------------------+ > > >> mysql> select * from radcheck; >> +----+----------+---------------+----+------------+ >> | id | UserName | Attribute | op | Value | >> +----+----------+---------------+----+------------+ >> | 1 | hz00001 | user-password | == | Tfregep5uy | > >what does radacct look like? What's the result of (for example) > >SELECT COUNT(*) \ > FROM radacct \ > WHERE username = 'hz00001' \ > AND acctstoptime IS NULL; mysql> SELECT COUNT(*) FROM radacct WHERE username = 'hz00001' AND acctstoptime IS NULL; +----------+ | COUNT(*) | +----------+ | 1 | +----------+ regards, fbi

1 0

Error: [sql] database query error
by Teguh Kurniawan 11 Feb '10

11 Feb '10

Hello, I need more advice from all of you about my freeradius 2.10 configuration on ubuntu server 9.10. I've got error message : Thu Feb 11 11:04:57 2010 : Error: [sql] database query error, SELECT groupname FROM radusergroup WHERE username = 'user' ORDER BY priority: Table 'radius.radusergroup' doesn't exist Thu Feb 11 11:04:57 2010 : Error: [sql] Error retrieving group list Thu Feb 11 11:04:57 2010 : Error: [sql] Error processing groups; rejecting user root@radiusmanager:/tmp# radtest user 1111 127.0.0.1 1812 testing123 Sending Access-Request of id 82 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "1111" NAS-IP-Address = 192.168.0.3 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=82, length=20 I was change "ipaddr = *" to "ipaddr = 127.0.0.1" on radiusd.conf What should I do ? Best Regards, Teguh Kurniawan

3 2

wpa_supplicant on Windows takes a long time to auth via freeradius
by Vieri 11 Feb '10

11 Feb '10

Hi, I'm noticing that at times my Windows wpa_supplicant takes a long time to authenticate via freeradius. It seems to associate quickly to a Linksys WAP2000 access point. However, it takes a full 4-5 minutes to complete the connection. I noticed that each time Freeradius sends an Access-Challenge it "wakes up in 4.9 seconds". Is this normal? I'm attaching the log files of both Freeradius and wpa_supplicant in the hope that someone can help me understand what's making my client PC take so much time to connect to my wireless network. Thanks, Vieri

1 0

no wait exec scripts end up as defunct zombie process
by Sajeewa Warnakulasuriya 11 Feb '10

11 Feb '10

Hi all, I know the issue no wait exec scripts end up as defunct zombie process was covered previously and appears to have been resolved after version 1.1(?) but the issue still appears to happening in the latest freeradius. Has anybody else noticed this? Linux version 2.6.26-2-amd64 (Debian 2.6.26-19lenny2) (dannf(a)debian.org) (gcc version 4.1.3 20080704 (prerelease) (Debian 4.1.2-25)) #1 SMP Thu Nov 5 02:23:12 UTC 2009 freeradius: FreeRADIUS Version 2.1.8, for host x86_64-pc-linux-gnu, built on Jan 19 2010 at 14:30:20 freerad 7011 1 7011 7011 0 09:22 ? 00:00:00 /usr/sbin/freeradius -x -n radiusd_bb_services freerad 7168 1 7168 7168 0 09:22 ? 00:00:00 /usr/sbin/freeradius -x -n radiusd_bb root 7175 2970 7175 7175 0 09:22 ? 00:00:00 sshd: swarnakulasuriya [priv] 1000 7177 7175 7175 7175 0 09:22 ? 00:00:00 sshd: swarnakulasuriya@pts/0 1000 7178 7177 7178 7178 0 09:22 pts/0 00:00:00 -bash root 7191 7178 7191 7178 0 09:22 pts/0 00:00:00 su - root 7192 7191 7192 7178 0 09:23 pts/0 00:00:00 -su root 7207 2970 7207 7207 0 09:23 ? 00:00:00 sshd: swarnakulasuriya [priv] 1000 7209 7207 7207 7207 0 09:23 ? 00:00:00 sshd: swarnakulasuriya@pts/2 1000 7210 7209 7210 7210 0 09:23 pts/2 00:00:00 -bash root 7223 7210 7223 7210 0 09:23 pts/2 00:00:00 su - root 7224 7223 7224 7210 0 09:23 pts/2 00:00:00 -su freerad 7749 7011 7011 7011 0 09:57 ? 00:00:00 [proxybbrealms] <defunct> freerad 7755 7011 7011 7011 0 09:57 ? 00:00:00 [proxybbrealms] <defunct> freerad 7759 7011 7011 7011 0 09:57 ? 00:00:00 [proxybbrealms] <defunct> freerad 7818 7011 7011 7011 0 10:02 ? 00:00:00 [proxybbrealms] <defunct> freerad 7822 7011 7011 7011 0 10:02 ? 00:00:00 [proxybbrealms] <defunct> freerad 7825 7011 7011 7011 0 10:02 ? 00:00:00 [updatebbservice] <defunct> freerad 7826 7011 7011 7011 0 10:02 ? 00:00:00 [proxybbrealms] <defunct> freerad 7885 7011 7011 7011 0 10:07 ? 00:00:00 [updatebbservice] <defunct> freerad 7886 7011 7011 7011 0 10:07 ? 00:00:00 [proxybbrealms] <defunct> freerad 7889 7011 7011 7011 0 10:07 ? 00:00:00 [updatebbservice] <defunct> freerad 7890 7011 7011 7011 0 10:07 ? 00:00:00 [proxybbrealms] <defunct> freerad 7904 7011 7011 7011 0 10:08 ? 00:00:00 [updatebbservice] <defunct> freerad 7905 7011 7011 7011 0 10:08 ? 00:00:00 [proxybbrealms] <defunct> freerad 7962 7011 7011 7011 0 10:12 ? 00:00:00 [updatebbservice] <defunct> freerad 7963 7011 7011 7011 0 10:12 ? 00:00:00 [proxybbrealms] <defunct> freerad 7977 7011 7011 7011 0 10:13 ? 00:00:00 [updatebbservice] <defunct> freerad 7978 7011 7011 7011 0 10:13 ? 00:00:00 [proxybbrealms] <defunct> freerad 7981 7011 7011 7011 0 10:13 ? 00:00:00 [updatebbservice] <defunct> freerad 7982 7011 7011 7011 0 10:13 ? 00:00:00 [proxybbrealms] <defunct> freerad 8049 7011 7011 7011 0 10:18 ? 00:00:00 [updatebbservice] <defunct> freerad 8050 7011 7011 7011 0 10:18 ? 00:00:00 [proxybbrealms] <defunct> freerad 8055 7011 7011 7011 0 10:18 ? 00:00:00 [updatebbservice] <defunct> freerad 8056 7011 7011 7011 0 10:18 ? 00:00:00 [proxybbrealms] <defunct> freerad 8059 7011 7011 7011 0 10:18 ? 00:00:00 [updatebbservice] <defunct> freerad 8060 7011 7011 7011 0 10:18 ? 00:00:00 [proxybbrealms] <defunct> freerad 8122 7011 7011 7011 0 10:23 ? 00:00:00 [updatebbservice] <defunct> freerad 8123 7011 7011 7011 0 10:23 ? 00:00:00 [proxybbrealms] <defunct> freerad 8126 7011 7011 7011 0 10:23 ? 00:00:00 [updatebbservice] <defunct> freerad 8127 7011 7011 7011 0 10:23 ? 00:00:00 [proxybbrealms] <defunct> freerad 8130 7011 7011 7011 0 10:23 ? 00:00:00 [updatebbservice] <defunct> freerad 8131 7011 7011 7011 0 10:23 ? 00:00:00 [proxybbrealms] <defunct> freerad 8191 7011 7011 7011 0 10:28 ? 00:00:00 [updatebbservice] <defunct> freerad 8192 7011 7011 7011 0 10:28 ? 00:00:00 [proxybbrealms] <defunct> freerad 8205 7168 7168 7168 0 10:29 ? 00:00:00 [proxybbrealms] <defunct> freerad 8207 7011 7011 7011 2 10:29 ? 00:00:00 [updatebbservice] <defunct> freerad 8208 7011 7011 7011 0 10:29 ? 00:00:00 [proxybbrealms] <defunct> FreeRADIUS Version 2.1.8, for host x86_64-pc-linux-gnu, built on Jan 19 2010 at 14:30:20 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd_bb_services.conf including configuration file /etc/freeradius/clients_bb.conf including configuration file /etc/freeradius/sql_bb_services.conf including configuration file /etc/freeradius/check_bb_service.conf including configuration file /etc/freeradius/check_bb_service_prepaid.conf including configuration file /etc/freeradius/proxy_bb_realms.conf including configuration file /etc/freeradius/bb_quota_update.conf including configuration file /etc/freeradius/policy_bb_services.conf including configuration file /etc/freeradius/default_bb_services main { user = "freerad" group = "freerad" allow_core_dumps = no } including dictionary file /etc/freeradius/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/freeradius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/freeradius/radacct" hostname_lookups = no max_request_time = 5 cleanup_delay = 2 max_requests = 2048 pidfile = "/var/run/freeradius/server_bb_services.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = no log { stripped_names = no auth = no auth_badpass = yes auth_goodpass = no } security { max_attributes = 200 reject_delay = 0 status_server = yes } } radiusd_bb_services: #### Loading Realms and Home Servers #### radiusd_bb_services: #### Loading Clients #### client 112.213.128.3 { ipaddr = 112.213.128.3 require_message_authenticator = no secret = "XXXXX" shortname = "MEL-LNS01" nastype = "cisco_7300" } client 112.213.128.4 { ipaddr = 112.213.128.4 require_message_authenticator = no secret = "XXXXXXX" shortname = "MEL-LNS02" nastype = "cisco_7300" } radiusd_bb_services: #### Instantiating modules #### instantiate { } radiusd_bb_services: #### Loading Virtual Servers #### server { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/etc/freeradius/huntgroups_bb" hints = "/etc/freeradius/hints_bb" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Loading virtual module accept_check_bb_service Module: Linked to module rlm_always Module: Instantiating reject always reject { rcode = "reject" simulcount = 0 mpp = no } Module: Loading virtual module accept_check_bb_service Module: Linked to module rlm_sql Module: Instantiating bb_auth sql bb_auth { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_auth" password = "XXXXX" radius_db = "Radius" read_groups = no sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 50 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM servicecheck WHERE username = '%{User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM servicereply WHERE username = '%{User-Name}' ORDER BY id" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "" accounting_start_query_alt = "" accounting_stop_query = "" accounting_stop_query_alt = "" group_membership_query = "" connect_failure_retry_delay = 3 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (bb_auth): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (bb_auth): Attempting to connect to bb_auth@localhost:/Radius rlm_sql (bb_auth): starting 0 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (bb_auth): Connected new DB handle, #0 rlm_sql (bb_auth): starting 1 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (bb_auth): Connected new DB handle, #1 rlm_sql (bb_auth): starting 2 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (bb_auth): Connected new DB handle, #2 rlm_sql (bb_auth): starting 3 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (bb_auth): Connected new DB handle, #3 rlm_sql (bb_auth): starting 4 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (bb_auth): Connected new DB handle, #4 rlm_sql (bb_auth): starting 5 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (bb_auth): Connected new DB handle, #5 rlm_sql (bb_auth): starting 6 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (bb_auth): Connected new DB handle, #6 rlm_sql (bb_auth): starting 7 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (bb_auth): Connected new DB handle, #7 rlm_sql (bb_auth): starting 8 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (bb_auth): Connected new DB handle, #8 rlm_sql (bb_auth): starting 9 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (bb_auth): Connected new DB handle, #9 rlm_sql (bb_auth): starting 10 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (bb_auth): Connected new DB handle, #10 rlm_sql (bb_auth): starting 11 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (bb_auth): Connected new DB handle, #11 rlm_sql (bb_auth): starting 12 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (bb_auth): Connected new DB handle, #12 rlm_sql (bb_auth): starting 13 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (bb_auth): Connected new DB handle, #13 rlm_sql (bb_auth): starting 14 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (bb_auth): Connected new DB handle, #14 rlm_sql (bb_auth): starting 15 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #15 rlm_sql_mysql: Starting connect to MySQL server for #15 rlm_sql (bb_auth): Connected new DB handle, #15 rlm_sql (bb_auth): starting 16 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #16 rlm_sql_mysql: Starting connect to MySQL server for #16 rlm_sql (bb_auth): Connected new DB handle, #16 rlm_sql (bb_auth): starting 17 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #17 rlm_sql_mysql: Starting connect to MySQL server for #17 rlm_sql (bb_auth): Connected new DB handle, #17 rlm_sql (bb_auth): starting 18 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #18 rlm_sql_mysql: Starting connect to MySQL server for #18 rlm_sql (bb_auth): Connected new DB handle, #18 rlm_sql (bb_auth): starting 19 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (bb_auth): Connected new DB handle, #19 rlm_sql (bb_auth): starting 20 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #20 rlm_sql_mysql: Starting connect to MySQL server for #20 rlm_sql (bb_auth): Connected new DB handle, #20 rlm_sql (bb_auth): starting 21 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #21 rlm_sql_mysql: Starting connect to MySQL server for #21 rlm_sql (bb_auth): Connected new DB handle, #21 rlm_sql (bb_auth): starting 22 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #22 rlm_sql_mysql: Starting connect to MySQL server for #22 rlm_sql (bb_auth): Connected new DB handle, #22 rlm_sql (bb_auth): starting 23 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #23 rlm_sql_mysql: Starting connect to MySQL server for #23 rlm_sql (bb_auth): Connected new DB handle, #23 rlm_sql (bb_auth): starting 24 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #24 rlm_sql_mysql: Starting connect to MySQL server for #24 rlm_sql (bb_auth): Connected new DB handle, #24 rlm_sql (bb_auth): starting 25 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #25 rlm_sql_mysql: Starting connect to MySQL server for #25 rlm_sql (bb_auth): Connected new DB handle, #25 rlm_sql (bb_auth): starting 26 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #26 rlm_sql_mysql: Starting connect to MySQL server for #26 rlm_sql (bb_auth): Connected new DB handle, #26 rlm_sql (bb_auth): starting 27 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #27 rlm_sql_mysql: Starting connect to MySQL server for #27 rlm_sql (bb_auth): Connected new DB handle, #27 rlm_sql (bb_auth): starting 28 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #28 rlm_sql_mysql: Starting connect to MySQL server for #28 rlm_sql (bb_auth): Connected new DB handle, #28 rlm_sql (bb_auth): starting 29 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #29 rlm_sql_mysql: Starting connect to MySQL server for #29 rlm_sql (bb_auth): Connected new DB handle, #29 rlm_sql (bb_auth): starting 30 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #30 rlm_sql_mysql: Starting connect to MySQL server for #30 rlm_sql (bb_auth): Connected new DB handle, #30 rlm_sql (bb_auth): starting 31 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #31 rlm_sql_mysql: Starting connect to MySQL server for #31 rlm_sql (bb_auth): Connected new DB handle, #31 rlm_sql (bb_auth): starting 32 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #32 rlm_sql_mysql: Starting connect to MySQL server for #32 rlm_sql (bb_auth): Connected new DB handle, #32 rlm_sql (bb_auth): starting 33 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #33 rlm_sql_mysql: Starting connect to MySQL server for #33 rlm_sql (bb_auth): Connected new DB handle, #33 rlm_sql (bb_auth): starting 34 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #34 rlm_sql_mysql: Starting connect to MySQL server for #34 rlm_sql (bb_auth): Connected new DB handle, #34 rlm_sql (bb_auth): starting 35 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #35 rlm_sql_mysql: Starting connect to MySQL server for #35 rlm_sql (bb_auth): Connected new DB handle, #35 rlm_sql (bb_auth): starting 36 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #36 rlm_sql_mysql: Starting connect to MySQL server for #36 rlm_sql (bb_auth): Connected new DB handle, #36 rlm_sql (bb_auth): starting 37 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #37 rlm_sql_mysql: Starting connect to MySQL server for #37 rlm_sql (bb_auth): Connected new DB handle, #37 rlm_sql (bb_auth): starting 38 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #38 rlm_sql_mysql: Starting connect to MySQL server for #38 rlm_sql (bb_auth): Connected new DB handle, #38 rlm_sql (bb_auth): starting 39 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #39 rlm_sql_mysql: Starting connect to MySQL server for #39 rlm_sql (bb_auth): Connected new DB handle, #39 rlm_sql (bb_auth): starting 40 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #40 rlm_sql_mysql: Starting connect to MySQL server for #40 rlm_sql (bb_auth): Connected new DB handle, #40 rlm_sql (bb_auth): starting 41 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #41 rlm_sql_mysql: Starting connect to MySQL server for #41 rlm_sql (bb_auth): Connected new DB handle, #41 rlm_sql (bb_auth): starting 42 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #42 rlm_sql_mysql: Starting connect to MySQL server for #42 rlm_sql (bb_auth): Connected new DB handle, #42 rlm_sql (bb_auth): starting 43 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #43 rlm_sql_mysql: Starting connect to MySQL server for #43 rlm_sql (bb_auth): Connected new DB handle, #43 rlm_sql (bb_auth): starting 44 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #44 rlm_sql_mysql: Starting connect to MySQL server for #44 rlm_sql (bb_auth): Connected new DB handle, #44 rlm_sql (bb_auth): starting 45 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #45 rlm_sql_mysql: Starting connect to MySQL server for #45 rlm_sql (bb_auth): Connected new DB handle, #45 rlm_sql (bb_auth): starting 46 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #46 rlm_sql_mysql: Starting connect to MySQL server for #46 rlm_sql (bb_auth): Connected new DB handle, #46 rlm_sql (bb_auth): starting 47 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #47 rlm_sql_mysql: Starting connect to MySQL server for #47 rlm_sql (bb_auth): Connected new DB handle, #47 rlm_sql (bb_auth): starting 48 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #48 rlm_sql_mysql: Starting connect to MySQL server for #48 rlm_sql (bb_auth): Connected new DB handle, #48 rlm_sql (bb_auth): starting 49 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #49 rlm_sql_mysql: Starting connect to MySQL server for #49 rlm_sql (bb_auth): Connected new DB handle, #49 Module: Linked to module rlm_exec Module: Instantiating check_bb_service exec check_bb_service { wait = yes program = "/etc/freeradius/scripts/checkbbservice %{User-Name} %{NAS-IP-Address} %{Acct-Session-Id}" input_pairs = "request" output_pairs = "reply" shell_escape = yes } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Checking accounting {...} for more modules to load Module: Instantiating bb_acct_usage sql bb_acct_usage { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_accounting" password = "XXXXXXXX" radius_db = "Radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 50 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "UPDATE SRVUSAGE_%Y%m SET TIME_STAMP = UNIX_TIMESTAMP('%S'), ACCTSTATUSTYPE = '3', ACCTSESSIONTIME = '%{Acct-Session-Time}', ACCTINPUTOCTETS = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', ACCTOUTPUTOCTETS = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', ACCTTERMINATECAUSE = '%{Acct-Terminate-Cause}' WHERE ACCTSESSIONID = '%{Acct-Session-Id}' AND USERNAME = '%{User-Name}' AND NASIDENTIFIER = '%{NAS-IP-Address}' AND TIME_STAMP >= UNIX_TIMESTAMP('%Y-%m-%d 00:00:00') AND TIME_STAMP <= UNIX_TIMESTAMP('%Y-%m-%d 23:59:59') AND ACCTSTATUSTYPE = '3'" accounting_update_query_alt = "INSERT DELAYED INTO SRVUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, CALLEDSTATIONID, CALLINGSTATIONID, SERVICENAME, PARENT_ACCTSESSIONID) VALUES ('%{User-Name}',UNIX_TIMESTAMP('%S'),'3','%{Acct-Delay-Time}','%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}','%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{Cisco-Service-Info}',SUBSTRING('%{Cisco-AVPair}',(LOCATE('=','%{Cisco-AVPair}')+ 1)))" accounting_start_query = "INSERT DELAYED INTO SRVUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, CALLEDSTATIONID, CALLINGSTATIONID, SERVICENAME, PARENT_ACCTSESSIONID) VALUES ('%{User-Name}',UNIX_TIMESTAMP('%S'),'1','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{Cisco-Service-Info}',SUBSTRING('%{Cisco-AVPair}',(LOCATE('=','%{Cisco-AVPair}')+ 1)))" accounting_start_query_alt = "" accounting_stop_query = "INSERT DELAYED INTO SRVUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, CALLEDSTATIONID, CALLINGSTATIONID, SERVICENAME, PARENT_ACCTSESSIONID) VALUES ('%{User-Name}',UNIX_TIMESTAMP('%S'),'2','%{Acct-Delay-Time}','%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}','%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{Cisco-Service-Info}',SUBSTRING('%{Cisco-AVPair}',(LOCATE('=','%{Cisco-AVPair}')+ 1)))" accounting_stop_query_alt = "" connect_failure_retry_delay = 1 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (bb_acct_usage): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (bb_acct_usage): Attempting to connect to bb_accounting@localhost:/Radius rlm_sql (bb_acct_usage): starting 0 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (bb_acct_usage): Connected new DB handle, #0 rlm_sql (bb_acct_usage): starting 1 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (bb_acct_usage): Connected new DB handle, #1 rlm_sql (bb_acct_usage): starting 2 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (bb_acct_usage): Connected new DB handle, #2 rlm_sql (bb_acct_usage): starting 3 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (bb_acct_usage): Connected new DB handle, #3 rlm_sql (bb_acct_usage): starting 4 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (bb_acct_usage): Connected new DB handle, #4 rlm_sql (bb_acct_usage): starting 5 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (bb_acct_usage): Connected new DB handle, #5 rlm_sql (bb_acct_usage): starting 6 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (bb_acct_usage): Connected new DB handle, #6 rlm_sql (bb_acct_usage): starting 7 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (bb_acct_usage): Connected new DB handle, #7 rlm_sql (bb_acct_usage): starting 8 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (bb_acct_usage): Connected new DB handle, #8 rlm_sql (bb_acct_usage): starting 9 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (bb_acct_usage): Connected new DB handle, #9 rlm_sql (bb_acct_usage): starting 10 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (bb_acct_usage): Connected new DB handle, #10 rlm_sql (bb_acct_usage): starting 11 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (bb_acct_usage): Connected new DB handle, #11 rlm_sql (bb_acct_usage): starting 12 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (bb_acct_usage): Connected new DB handle, #12 rlm_sql (bb_acct_usage): starting 13 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (bb_acct_usage): Connected new DB handle, #13 rlm_sql (bb_acct_usage): starting 14 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (bb_acct_usage): Connected new DB handle, #14 rlm_sql (bb_acct_usage): starting 15 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #15 rlm_sql_mysql: Starting connect to MySQL server for #15 rlm_sql (bb_acct_usage): Connected new DB handle, #15 rlm_sql (bb_acct_usage): starting 16 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #16 rlm_sql_mysql: Starting connect to MySQL server for #16 rlm_sql (bb_acct_usage): Connected new DB handle, #16 rlm_sql (bb_acct_usage): starting 17 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #17 rlm_sql_mysql: Starting connect to MySQL server for #17 rlm_sql (bb_acct_usage): Connected new DB handle, #17 rlm_sql (bb_acct_usage): starting 18 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #18 rlm_sql_mysql: Starting connect to MySQL server for #18 rlm_sql (bb_acct_usage): Connected new DB handle, #18 rlm_sql (bb_acct_usage): starting 19 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (bb_acct_usage): Connected new DB handle, #19 rlm_sql (bb_acct_usage): starting 20 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #20 rlm_sql_mysql: Starting connect to MySQL server for #20 rlm_sql (bb_acct_usage): Connected new DB handle, #20 rlm_sql (bb_acct_usage): starting 21 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #21 rlm_sql_mysql: Starting connect to MySQL server for #21 rlm_sql (bb_acct_usage): Connected new DB handle, #21 rlm_sql (bb_acct_usage): starting 22 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #22 rlm_sql_mysql: Starting connect to MySQL server for #22 rlm_sql (bb_acct_usage): Connected new DB handle, #22 rlm_sql (bb_acct_usage): starting 23 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #23 rlm_sql_mysql: Starting connect to MySQL server for #23 rlm_sql (bb_acct_usage): Connected new DB handle, #23 rlm_sql (bb_acct_usage): starting 24 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #24 rlm_sql_mysql: Starting connect to MySQL server for #24 rlm_sql (bb_acct_usage): Connected new DB handle, #24 rlm_sql (bb_acct_usage): starting 25 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #25 rlm_sql_mysql: Starting connect to MySQL server for #25 rlm_sql (bb_acct_usage): Connected new DB handle, #25 rlm_sql (bb_acct_usage): starting 26 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #26 rlm_sql_mysql: Starting connect to MySQL server for #26 rlm_sql (bb_acct_usage): Connected new DB handle, #26 rlm_sql (bb_acct_usage): starting 27 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #27 rlm_sql_mysql: Starting connect to MySQL server for #27 rlm_sql (bb_acct_usage): Connected new DB handle, #27 rlm_sql (bb_acct_usage): starting 28 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #28 rlm_sql_mysql: Starting connect to MySQL server for #28 rlm_sql (bb_acct_usage): Connected new DB handle, #28 rlm_sql (bb_acct_usage): starting 29 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #29 rlm_sql_mysql: Starting connect to MySQL server for #29 rlm_sql (bb_acct_usage): Connected new DB handle, #29 rlm_sql (bb_acct_usage): starting 30 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #30 rlm_sql_mysql: Starting connect to MySQL server for #30 rlm_sql (bb_acct_usage): Connected new DB handle, #30 rlm_sql (bb_acct_usage): starting 31 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #31 rlm_sql_mysql: Starting connect to MySQL server for #31 rlm_sql (bb_acct_usage): Connected new DB handle, #31 rlm_sql (bb_acct_usage): starting 32 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #32 rlm_sql_mysql: Starting connect to MySQL server for #32 rlm_sql (bb_acct_usage): Connected new DB handle, #32 rlm_sql (bb_acct_usage): starting 33 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #33 rlm_sql_mysql: Starting connect to MySQL server for #33 rlm_sql (bb_acct_usage): Connected new DB handle, #33 rlm_sql (bb_acct_usage): starting 34 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #34 rlm_sql_mysql: Starting connect to MySQL server for #34 rlm_sql (bb_acct_usage): Connected new DB handle, #34 rlm_sql (bb_acct_usage): starting 35 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #35 rlm_sql_mysql: Starting connect to MySQL server for #35 rlm_sql (bb_acct_usage): Connected new DB handle, #35 rlm_sql (bb_acct_usage): starting 36 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #36 rlm_sql_mysql: Starting connect to MySQL server for #36 rlm_sql (bb_acct_usage): Connected new DB handle, #36 rlm_sql (bb_acct_usage): starting 37 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #37 rlm_sql_mysql: Starting connect to MySQL server for #37 rlm_sql (bb_acct_usage): Connected new DB handle, #37 rlm_sql (bb_acct_usage): starting 38 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #38 rlm_sql_mysql: Starting connect to MySQL server for #38 rlm_sql (bb_acct_usage): Connected new DB handle, #38 rlm_sql (bb_acct_usage): starting 39 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #39 rlm_sql_mysql: Starting connect to MySQL server for #39 rlm_sql (bb_acct_usage): Connected new DB handle, #39 rlm_sql (bb_acct_usage): starting 40 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #40 rlm_sql_mysql: Starting connect to MySQL server for #40 rlm_sql (bb_acct_usage): Connected new DB handle, #40 rlm_sql (bb_acct_usage): starting 41 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #41 rlm_sql_mysql: Starting connect to MySQL server for #41 rlm_sql (bb_acct_usage): Connected new DB handle, #41 rlm_sql (bb_acct_usage): starting 42 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #42 rlm_sql_mysql: Starting connect to MySQL server for #42 rlm_sql (bb_acct_usage): Connected new DB handle, #42 rlm_sql (bb_acct_usage): starting 43 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #43 rlm_sql_mysql: Starting connect to MySQL server for #43 rlm_sql (bb_acct_usage): Connected new DB handle, #43 rlm_sql (bb_acct_usage): starting 44 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #44 rlm_sql_mysql: Starting connect to MySQL server for #44 rlm_sql (bb_acct_usage): Connected new DB handle, #44 rlm_sql (bb_acct_usage): starting 45 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #45 rlm_sql_mysql: Starting connect to MySQL server for #45 rlm_sql (bb_acct_usage): Connected new DB handle, #45 rlm_sql (bb_acct_usage): starting 46 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #46 rlm_sql_mysql: Starting connect to MySQL server for #46 rlm_sql (bb_acct_usage): Connected new DB handle, #46 rlm_sql (bb_acct_usage): starting 47 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #47 rlm_sql_mysql: Starting connect to MySQL server for #47 rlm_sql (bb_acct_usage): Connected new DB handle, #47 rlm_sql (bb_acct_usage): starting 48 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #48 rlm_sql_mysql: Starting connect to MySQL server for #48 rlm_sql (bb_acct_usage): Connected new DB handle, #48 rlm_sql (bb_acct_usage): starting 49 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #49 rlm_sql_mysql: Starting connect to MySQL server for #49 rlm_sql (bb_acct_usage): Connected new DB handle, #49 Module: Instantiating bb_acct_online sql bb_acct_online { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_accounting" password = "xxxxxx" radius_db = "Radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 50 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "INSERT INTO SRVRADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, SERVICENAME) VALUES ('%{User-Name}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{Acct-Session-Id}', UNIX_TIMESTAMP('%S'), '%{Framed-IP-Address}', '0%{NAS-Port-Type}', '%{Service-Type}', '%{Calling-Station-Id}', '%{Called-Station-Id}','%{Cisco-Service-Info}')" accounting_start_query_alt = "" accounting_stop_query = "DELETE FROM SRVRADONLINE WHERE USERNAME = '%{User-Name}' AND NASIDENTIFIER = '%{NAS-IP-Address}' AND ACCTSESSIONID = '%{Acct-Session-Id}' AND SERVICENAME = '%{Cisco-Service-Info}'" accounting_stop_query_alt = "" connect_failure_retry_delay = 3 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (bb_acct_online): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (bb_acct_online): Attempting to connect to bb_accounting@localhost:/Radius rlm_sql (bb_acct_online): starting 0 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (bb_acct_online): Connected new DB handle, #0 rlm_sql (bb_acct_online): starting 1 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (bb_acct_online): Connected new DB handle, #1 rlm_sql (bb_acct_online): starting 2 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (bb_acct_online): Connected new DB handle, #2 rlm_sql (bb_acct_online): starting 3 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (bb_acct_online): Connected new DB handle, #3 rlm_sql (bb_acct_online): starting 4 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (bb_acct_online): Connected new DB handle, #4 rlm_sql (bb_acct_online): starting 5 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (bb_acct_online): Connected new DB handle, #5 rlm_sql (bb_acct_online): starting 6 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (bb_acct_online): Connected new DB handle, #6 rlm_sql (bb_acct_online): starting 7 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (bb_acct_online): Connected new DB handle, #7 rlm_sql (bb_acct_online): starting 8 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (bb_acct_online): Connected new DB handle, #8 rlm_sql (bb_acct_online): starting 9 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (bb_acct_online): Connected new DB handle, #9 rlm_sql (bb_acct_online): starting 10 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (bb_acct_online): Connected new DB handle, #10 rlm_sql (bb_acct_online): starting 11 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (bb_acct_online): Connected new DB handle, #11 rlm_sql (bb_acct_online): starting 12 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (bb_acct_online): Connected new DB handle, #12 rlm_sql (bb_acct_online): starting 13 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (bb_acct_online): Connected new DB handle, #13 rlm_sql (bb_acct_online): starting 14 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (bb_acct_online): Connected new DB handle, #14 rlm_sql (bb_acct_online): starting 15 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #15 rlm_sql_mysql: Starting connect to MySQL server for #15 rlm_sql (bb_acct_online): Connected new DB handle, #15 rlm_sql (bb_acct_online): starting 16 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #16 rlm_sql_mysql: Starting connect to MySQL server for #16 rlm_sql (bb_acct_online): Connected new DB handle, #16 rlm_sql (bb_acct_online): starting 17 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #17 rlm_sql_mysql: Starting connect to MySQL server for #17 rlm_sql (bb_acct_online): Connected new DB handle, #17 rlm_sql (bb_acct_online): starting 18 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #18 rlm_sql_mysql: Starting connect to MySQL server for #18 rlm_sql (bb_acct_online): Connected new DB handle, #18 rlm_sql (bb_acct_online): starting 19 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (bb_acct_online): Connected new DB handle, #19 rlm_sql (bb_acct_online): starting 20 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #20 rlm_sql_mysql: Starting connect to MySQL server for #20 rlm_sql (bb_acct_online): Connected new DB handle, #20 rlm_sql (bb_acct_online): starting 21 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #21 rlm_sql_mysql: Starting connect to MySQL server for #21 rlm_sql (bb_acct_online): Connected new DB handle, #21 rlm_sql (bb_acct_online): starting 22 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #22 rlm_sql_mysql: Starting connect to MySQL server for #22 rlm_sql (bb_acct_online): Connected new DB handle, #22 rlm_sql (bb_acct_online): starting 23 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #23 rlm_sql_mysql: Starting connect to MySQL server for #23 rlm_sql (bb_acct_online): Connected new DB handle, #23 rlm_sql (bb_acct_online): starting 24 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #24 rlm_sql_mysql: Starting connect to MySQL server for #24 rlm_sql (bb_acct_online): Connected new DB handle, #24 rlm_sql (bb_acct_online): starting 25 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #25 rlm_sql_mysql: Starting connect to MySQL server for #25 rlm_sql (bb_acct_online): Connected new DB handle, #25 rlm_sql (bb_acct_online): starting 26 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #26 rlm_sql_mysql: Starting connect to MySQL server for #26 rlm_sql (bb_acct_online): Connected new DB handle, #26 rlm_sql (bb_acct_online): starting 27 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #27 rlm_sql_mysql: Starting connect to MySQL server for #27 rlm_sql (bb_acct_online): Connected new DB handle, #27 rlm_sql (bb_acct_online): starting 28 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #28 rlm_sql_mysql: Starting connect to MySQL server for #28 rlm_sql (bb_acct_online): Connected new DB handle, #28 rlm_sql (bb_acct_online): starting 29 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #29 rlm_sql_mysql: Starting connect to MySQL server for #29 rlm_sql (bb_acct_online): Connected new DB handle, #29 rlm_sql (bb_acct_online): starting 30 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #30 rlm_sql_mysql: Starting connect to MySQL server for #30 rlm_sql (bb_acct_online): Connected new DB handle, #30 rlm_sql (bb_acct_online): starting 31 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #31 rlm_sql_mysql: Starting connect to MySQL server for #31 rlm_sql (bb_acct_online): Connected new DB handle, #31 rlm_sql (bb_acct_online): starting 32 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #32 rlm_sql_mysql: Starting connect to MySQL server for #32 rlm_sql (bb_acct_online): Connected new DB handle, #32 rlm_sql (bb_acct_online): starting 33 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #33 rlm_sql_mysql: Starting connect to MySQL server for #33 rlm_sql (bb_acct_online): Connected new DB handle, #33 rlm_sql (bb_acct_online): starting 34 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #34 rlm_sql_mysql: Starting connect to MySQL server for #34 rlm_sql (bb_acct_online): Connected new DB handle, #34 rlm_sql (bb_acct_online): starting 35 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #35 rlm_sql_mysql: Starting connect to MySQL server for #35 rlm_sql (bb_acct_online): Connected new DB handle, #35 rlm_sql (bb_acct_online): starting 36 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #36 rlm_sql_mysql: Starting connect to MySQL server for #36 rlm_sql (bb_acct_online): Connected new DB handle, #36 rlm_sql (bb_acct_online): starting 37 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #37 rlm_sql_mysql: Starting connect to MySQL server for #37 rlm_sql (bb_acct_online): Connected new DB handle, #37 rlm_sql (bb_acct_online): starting 38 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #38 rlm_sql_mysql: Starting connect to MySQL server for #38 rlm_sql (bb_acct_online): Connected new DB handle, #38 rlm_sql (bb_acct_online): starting 39 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #39 rlm_sql_mysql: Starting connect to MySQL server for #39 rlm_sql (bb_acct_online): Connected new DB handle, #39 rlm_sql (bb_acct_online): starting 40 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #40 rlm_sql_mysql: Starting connect to MySQL server for #40 rlm_sql (bb_acct_online): Connected new DB handle, #40 rlm_sql (bb_acct_online): starting 41 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #41 rlm_sql_mysql: Starting connect to MySQL server for #41 rlm_sql (bb_acct_online): Connected new DB handle, #41 rlm_sql (bb_acct_online): starting 42 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #42 rlm_sql_mysql: Starting connect to MySQL server for #42 rlm_sql (bb_acct_online): Connected new DB handle, #42 rlm_sql (bb_acct_online): starting 43 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #43 rlm_sql_mysql: Starting connect to MySQL server for #43 rlm_sql (bb_acct_online): Connected new DB handle, #43 rlm_sql (bb_acct_online): starting 44 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #44 rlm_sql_mysql: Starting connect to MySQL server for #44 rlm_sql (bb_acct_online): Connected new DB handle, #44 rlm_sql (bb_acct_online): starting 45 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #45 rlm_sql_mysql: Starting connect to MySQL server for #45 rlm_sql (bb_acct_online): Connected new DB handle, #45 rlm_sql (bb_acct_online): starting 46 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #46 rlm_sql_mysql: Starting connect to MySQL server for #46 rlm_sql (bb_acct_online): Connected new DB handle, #46 rlm_sql (bb_acct_online): starting 47 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #47 rlm_sql_mysql: Starting connect to MySQL server for #47 rlm_sql (bb_acct_online): Connected new DB handle, #47 rlm_sql (bb_acct_online): starting 48 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #48 rlm_sql_mysql: Starting connect to MySQL server for #48 rlm_sql (bb_acct_online): Connected new DB handle, #48 rlm_sql (bb_acct_online): starting 49 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #49 rlm_sql_mysql: Starting connect to MySQL server for #49 rlm_sql (bb_acct_online): Connected new DB handle, #49 Module: Instantiating bb_quota_update exec bb_quota_update { wait = no program = "/etc/freeradius/scripts/updatebbservicequota %{User-Name} %{Cisco-Service-Info} %{Acct-Output-Octets} %{Acct-Input-Octets} %{Framed-IP-Address} %{NAS-IP-Address} %{Acct-Status-Type} %{Acct-Output-Gigawords} %{Acct-Input-Gigawords}" input_pairs = "request" shell_escape = yes } Module: Instantiating proxy_bb_realms exec proxy_bb_realms { wait = no program = "/etc/freeradius/scripts/proxybbrealms %u %Z" input_pairs = "request" shell_escape = yes } Module: Checking post-auth {...} for more modules to load Module: Instantiating auth_reject sql auth_reject { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_auth" password = "xxxxx" radius_db = "Radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 10 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "" accounting_start_query_alt = "" accounting_stop_query = "" accounting_stop_query_alt = "" connect_failure_retry_delay = 3 simul_count_query = "" simul_verify_query = "" postauth_query = "INSERT DELAYED INTO SRVRADAUTHLOG (REASON, TIME_STAMP, TYPE, ACCTSESSIONID, SERVICENAME, CALLEDSTATIONID, CALLINGSTATIONID, PASS_WORD) values ('%{%{reply:Reply-Message}:-%{reply:Packet-Type}}',UNIX_TIMESTAMP('%S'),'0','%{Acct-Session-Id}','%{User-Name}','%{Called-Station-Id}','%{Calling-Station-Id}','%{%{User-Password}:-%{Chap-Password}}')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (auth_reject): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (auth_reject): Attempting to connect to bb_auth@localhost:/Radius rlm_sql (auth_reject): starting 0 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (auth_reject): Connected new DB handle, #0 rlm_sql (auth_reject): starting 1 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (auth_reject): Connected new DB handle, #1 rlm_sql (auth_reject): starting 2 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (auth_reject): Connected new DB handle, #2 rlm_sql (auth_reject): starting 3 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (auth_reject): Connected new DB handle, #3 rlm_sql (auth_reject): starting 4 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (auth_reject): Connected new DB handle, #4 rlm_sql (auth_reject): starting 5 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (auth_reject): Connected new DB handle, #5 rlm_sql (auth_reject): starting 6 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (auth_reject): Connected new DB handle, #6 rlm_sql (auth_reject): starting 7 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (auth_reject): Connected new DB handle, #7 rlm_sql (auth_reject): starting 8 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (auth_reject): Connected new DB handle, #8 rlm_sql (auth_reject): starting 9 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (auth_reject): Connected new DB handle, #9 Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/etc/freeradius/attrs.access_reject" key = "%{User-Name}" } } # modules } # server radiusd_bb_services: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 124.254.72.146 port = 1815 } listen { type = "acct" ipaddr = 124.254.72.146 port = 1816 } Listening on authentication address 124.254.72.146 port 1815 Listening on accounting address 124.254.72.146 port 1816 Ready to process requests. Regards, Sajeewa Warnakulasuriya Systems Development Manager ispONE is a wholesale ISP built to help internet access resellers and independent ISPs to compete in the Australian marketplace through ONE Brand, ONE Provider, ONE Solution. Level 14 520 Collins Street Melbourne 3000 VIC Phone: 1300 663 400 Fax: 1300 665 400 E-Mail: sajeewaw(a)ispone.com.au Web: http://www.ispone.com.au/

2 7

rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=227, length=20
by Teguh Kurniawan 10 Feb '10

10 Feb '10

Hello, I use freeradius 2.1.0 package from ubuntu server 9.10 with freeradius-mysql installed. But I've got error message when tested. What should I do ? root@radius:/etc/freeradius# radtest user 1111 localhost 1812 testing123 Sending Access-Request of id 227 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "1111" NAS-IP-Address = 192.168.0.3 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=227, length=20 Below freeradius log on var/log/freeradius/radius.log Thu Feb 11 10:31:02 2010 : Error: [sql] database query error, SELECT groupname FROM radusergroup WHERE username = 'user' ORDER BY priority: Table 'radius.radusergroup' doesn't exist Thu Feb 11 10:31:02 2010 : Error: [sql] Error retrieving group list Thu Feb 11 10:31:02 2010 : Error: [sql] Error processing groups; rejecting user Thank You Teguh Kurniawan

1 0