February 2010 - Freeradius-Users - lists.freeradius.org

Different LDAP group authentication with different IPs
by Stephon Chen 26 Feb '10

26 Feb '10

Hello all I want to run only one radiusd (no virtual server) to support my scenario, and it is like below: >From IP x.x.x.1 -> Only Allow LDAP Group A to access >From IP x.x.x.2 -> Only Allow LDAP Group B to access from the doc/ldap_howto.txt, it seems not working.... I've found in mailing lists, and the proper solution is to use huntgroups and users file. But in freeradius 2.1.x, it's not recommended to use users to do so... Is there any good solution for this sceranio? Thanks a lot stephon

2 1

Update from 1.1.7 to 2.x
by Tokie 25 Feb '10

25 Feb '10

Hi, I tried to update from the version 1.1.7 to version 2.x.x but don't work. I have a working server and i would like update to newer version. How can I do?

2 1

dictionary help
by Igor Smitran 25 Feb '10

25 Feb '10

2 4

mysql configuration for version 2.1.8
by Pratik Shrestha 25 Feb '10

25 Feb '10

Hello to all, I am using the latest version 2.1.8 and I am newbie. I was trying to configure sql (mysql) for this version, but I did not find any configuration help from any source. I cannot find the sql files that used to be in older version. So, can anyone locate these files for me or please tell me the changes in the sql files. If there is, please send the link that describes how to configure mysql with the latest version of freeradius 2.1.8. Thanks in advance. Pratik

3 5

FreeRadius and MacOSX 10.6
by Fabien COMBERNOUS 25 Feb '10

25 Feb '10

Hi there, I'm trying to setup a freeRadius on MacOSX host 10.6. This OS use FreeRADIUS Version 2.1.3. I'm looking for informations about how to permit a client device to ask an IP address when it is plugged on the network. The switch forward the request to radius server. The radius server ask to opendirectory (ldap) if the client is allowed (Mac Address check) and in which vlan. Then if the client is allowed the port of the switch is configured in the vlan specified by opendirectory. All informations are welcome. -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group

3 4

sequence realms
by Latha Krishnamurthi 25 Feb '10

25 Feb '10

Hi, I am using freeradius 2.1.3. Is there a way in freeradius to forward the requests to all the configured realms one after the other, if it gets rejected say for null or default realms ?? I did not find anything like that in the configuration ? Any response is grately appreciated. Thanks, Latha.

2 1

Re: Max-Monthly-Traffic
by Neville 24 Feb '10

24 Feb '10

Anyone please, as this is driving me mad... Thx Nev ----- Original Message ----- From: Neville To: freeradius-users(a)lists.freeradius.org Sent: Sunday, February 07, 2010 1:28 PM Subject: Max-Monthly-Traffic Sorry for troubling everyone on this, but I cannot work out why Session-Octets-Limit is not calculating the differences between the counter and the check_item and setting an higher limited than the check_item? Log below Sun Feb 7 12:59:50 2010 : Debug: rlm_sqlcounter: Check item is greater than query result Sun Feb 7 12:59:50 2010 : Debug: rlm_sqlcounter: Authorized user FT-memjxa, check_item=262100000, counter=151223038 Sun Feb 7 12:59:50 2010 : Debug: rlm_sqlcounter: Sent Reply-Item for user FT-memjxa, Type=Session-Octets-Limit, value=263954010 Sun Feb 7 12:59:50 2010 : Info: ++[monthlytraffic] returns ok sqlcounter monthlytraffic { counter-name = Monthly-Traffic check-name = Max-Monthly-Traffic reply-name = Session-Octets-Limit sqlmod-inst = sql key = User-Name reset = monthly query = "SELECT IFNULL((sum(acctinputoctets)+sum(acctoutputoctets)),0) FROM radacct WHERE username='%{%k}' AND Month(acctstoptime) =(Month(NOW())) AND Year(acctstoptime) = Year(NOW())" } Any pointers would help. Thx Nev

6 17

rlm-ldap error for chap
by Eric Eric 24 Feb '10

24 Feb '10

I changed Cleartext-Password in ldap.attrmap to User-Password and now: rlm_ldap: LDAP userPassword mapped to RADIUS User-Password and checked with password_header = "{clear}" and without it. b --- On Tue, 2/23/10, Fajar A. Nugraha <fajar(a)fajar.net> wrote: From: Fajar A. Nugraha <fajar(a)fajar.net> Subject: Re: rlm-ldap error for chap To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Tuesday, February 23, 2010, 6:47 AM On Tue, Feb 23, 2010 at 1:32 PM, Eric Eric <eric121233(a)yahoo.com> wrote: > > Hi > I want to change authentication pap to chap. The users with clear passwords are in ldap server. but the is error with clear password in rlm-ldap > rlm_ldap: LDAP userPassword mapped to RADIUS Cleartext-Password is the cleartext password there? > ldap ldap-Vpn{ > .... > password_attribute = userPassword > password_header = "{clear}" > > } does the cleartext password have a header? -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 5

Graphs from freeradius activity
by José Campos 24 Feb '10

24 Feb '10

Hello, everyone Whats, if possible, the way you recommend to obtain graphical analysis from freeradius activity? I would like to get grahps and statistics from radius activity, for example: - How many users have auth successfully - Auth reject per day - Bad passwords - Others Is this possible? José Campos

2 1

Parse error
by Mike Diggins 24 Feb '10

24 Feb '10

Could someone tell me what the syntax error on the Proxy-To-Realm line is please? preacct { detail suffix if ((Proxy-To-Realm = DEFAULT) && (User-Name =~ /.*@.*.domain.tld$/)) update control { Proxy-To-Realm := NULL } } /usr/local/freeradius/sbin/radiusd -X: /usr/local/freeradius/etc/raddb/sites-enabled/eduroam[23]: Parse error in condition at: (Proxy-To-Realm = DEFAULT) && (User-Name =~ /.*@.*.domain.tld$/)) Errors reading /usr/local/freeradius/etc/raddb/radiusd.conf

2 1