May 2010 - Freeradius-Users - lists.freeradius.org

Re: R: rlm_ippool: No available ip addresses in
by Tabacchiera Stefano 05 May '10

05 May '10

>How is FreeRADIUS supposed to know when a user disconnects and frees up the >IP address from the pool if the NAS doesn't tell it? Anything else is not >exactly reliable. If you have a user with a long duration session that lasts >longer than your timeout the IP could be put back into the pool when it is >still in use. Ok, you're right, but in my case I know the client session can't last more than 24hrs. So, for me it's ok to remove all *inactive* entries older than that. But, as far as I know, this seems to be impossible with gdm pool. So, what the "maximum_timeout" parameter is useful for ??? >The best solution would be to fix the NAS to send the packets or fix the >network to make sure they get delivered. Obviously, but I can't manage over that. It's out of my control. So I need a method to avoid my pool being filled up by missing acct-stop. Thanks again. ST ______________________________________________________________________________________ La presente comunicazione ed i suoi allegati e' destinata esclusivamente ai destinatari. Qualsiasi suo utilizzo, comunicazione o diffusione non autorizzata e' proibita. Se ha ricevuto questa comunicazione per errore, la preghiamo di darne immediata comunicazione al mittente e di cancellare tutte le informazioni erroneamente acquisite. (Rif. D.Lgs. 196/2003). Grazie This message and its attachments are intended only for use by the addressees. Any use, re-transmission or dissemination not authorized of it is prohibited. If you received this e-mail in error, please inform the sender immediately and delete all the material. (Rif. D.Lgs. 196/2003). Thank you.

2 1

Set NoCat user class in Access-Accept
by Ana Gallardo 05 May '10

05 May '10

Hello, I want to send the NoCat user Class in the Access-Accept. I don't know if I can send an attribute defined by me. I have defined an attributed: # cat /etc/freeradius/dictionary $INCLUDE /usr/share/freeradius/dictionary ATTRIBUTE NoCat-User-Class 3000 string And I put this attribute in the reply list with MySQL: mysql> select * from radgroupreply; +----+-----------+------------------+----+------------------------------+ | id | groupname | attribute | op | value | +----+-----------+------------------+----+------------------------------+ | 6 | MEMBER | NoCat-User-Class | := | Member | +----+-----------+------------------+----+------------------------------+ mysql> select * from radusergroup; +----------+-----------+----------+ | username | groupname | priority | +----------+-----------+----------+ | ana | CAU1 | 0 | | ana | MEMBER | 8 | +----------+-----------+----------+ But the server don send this attribute to the user. Debug info: rad_recv: Access-Request packet from host X port 33606, id=250, length=55 User-Name = "ana" User-Password = "claveAna" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 +- entering group authorize {...} sql_xlat expand: %{User-Name} -> ana sql_set_user escaped user --> 'ana' expand: select shortname from nas where nasname="%{Client-IP-Address}" -> select shortname from nas where nasname="X" expand: /var/log/freeradius/sqltrace.sql -> /var/log/freeradius/sqltrace.sql rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: select shortname from nas where nasname="X" sql_xlat finished rlm_sql (sql): Released sql socket id: 3 expand: %{sql:select shortname from nas where nasname="%{Client-IP-Address}"} -> pcCAU1 ++[request] returns notfound ++[preprocess] returns ok ++[mschap] returns noop [suffix] No '@' in User-Name = "ana", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[files] returns noop [sql] expand: %{User-Name} -> ana [sql] sql_set_user escaped user --> 'ana' rlm_sql (sql): Reserving sql socket id: 2 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = BINARY '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = BINARY 'ana' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = BINARY 'ana' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = BINARY '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = BINARY 'ana' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radreply WHERE username = BINARY 'ana' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = BINARY '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = BINARY 'ana' ORDER BY priority rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = BINARY 'ana' ORDER BY priority [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'CAU1' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'CAU1' ORDER BY id [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'MEMBER' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'MEMBER' ORDER BY id [sql] User found in group MEMBER [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'MEMBER' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'MEMBER' ORDER BY id rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok [expiration] Checking Expiration time: '02 Dec 2010' ++[expiration] returns ok ++[pap] returns updated Found Auth-Type = PAP +- entering group PAP {...} [pap] login attempt with password "claveAna" [pap] Using clear text password "claveAna" [pap] User authenticated successfully ++[pap] returns ok +- entering group post-auth {...} [sql] expand: %{User-Name} -> ana [sql] sql_set_user escaped user --> 'ana' [sql] expand: INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( '%{User-Name}', '%{Calling-Station-Id}', '%C', '%{Nas-IP-Address}', '%{reply:Packet-Type}', NOW()) -> INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( 'ana', '', 'pcCAU1', '127.0.1.1', 'Access-Accept', NOW()) [sql] expand: /var/log/freeradius/sqltrace.sql -> /var/log/freeradius/sqltrace.sql rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( 'ana', '', 'pcCAU1', '127.0.1.1', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 1 rlm_sql_mysql: query: INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( 'ana', '', 'pcCAU1', '127.0.1.1', 'Access-Accept', NOW()) rlm_sql (sql): Released sql socket id: 1 ++[sql] returns ok Sending Access-Accept of id 250 to X port 33606 Reply-Message += "Hola Anita" Session-Timeout = 18189945 Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 250 with timestamp +6 Ready to process requests. I have found the attribute Class but I think that is more complex than I need. Some sugestion?? Thank you very much and sorry for my english. -- ____________________ Ana Gallardo Gómez ____________________

1 0

Does freeRADIUS support RadSec
by John 05 May '10

05 May '10

I found this draft "draft-dekok-radext-dtls-02.txt". Does freeRADIUS support RadSec feature? Is there any guidance for RadSec feature? Best regards. John

3 2

Basic wifi config
by Philippe Schwarz 05 May '10

05 May '10

Hi, I set up the following config, tried to follow the advices of freeradius website (don't touch anything you could break in the raddb directory ;-) ) The config (in french, sorry) i used : http://www.openbsd-edu.net/index.php/FreeRadius FreeRadius OS: OpenBSD 4.5 freeradius-2.1.3 RADIUS server implementation 192.168.1.9 & 172.16.0.133 AP : Linksys WRT54G WPA Entreprise & TKIP 192.168.1.1 Client WinXP; SP2 DHCP On the server : pkg_add -v http://ftp.arcane-networks.fr/pub/OpenBSD/$(uname -r)/packages/$(uname -m)/freeradius echo "if [ -x /usr/local/sbin/radiusd ]; then install -d -o _freeradius /var/run/radiusd echo -n ' radiusd'; /usr/local/sbin/radiusd fi " >> /etc/rc.local cp radius.pem /etc/raddb/certs/server.pem chmod 744 /etc/raddb/certs/server.pem cp ca.pem /etc/raddb/certs/ca.pem chmod 744 /etc/raddb/certs/ca.pem openssl verify -verbose -CApath /etc/raddb/certs/ -CAfile /etc/raddb/certs/ca.pem /etc/raddb/certs/server.pem => /etc/raddb/certs/server.pem: OK dd if=/dev/urandom of=/etc/raddb/certs/random bs=1024 count=100 openssl dhparam -out /etc/raddb/certs/dh 1024 echo " usertest Cleartext-Password := \"password\" " >> /etc/raddb/users echo " #Nagios client Nagios { secret = SECRETNAGIOS shortname = Nagios ipaddr = @IP NAgios } #Wifi AP3 client AP3 { secret = \"SECRET_AP3\" shortname = AP3 ipaddr = @IP AP3 nastype = other } # En local client localhost { ipaddr = 127.0.0.1 secret = \"SECRETLOCAL\" require_message_authenticator = no shortname = localhost nastype = other } " > /etc/raddb/clients.conf ifconfig em0 alias 192.168.1.9 netmask 255.255.255.0 ifconfig -a =>em0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500 =>inet 172.16.0.223 netmask 0xffff0000 broadcast 172.16.255.255 =>inet 192.168.1.9 netmask 0xffffff00 broadcast 192.168.1.255 /usr/local/sbin/radiusd -X radtest local & radtest remote are OK for the local and Nagios clients. Let's go to the XP... When i try to use the Wifi, the radiusd -X tells : .......I paste the logs to http://networkradius.com/freeradius.html and only copied the neither white nor blue parts : WARNING: You set Proxy-To-Realm = LOCAL, but the realm does not exist! Cancelling invalid proxy request. No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. grep roxy * |grep -v "#" attrs.access_reject: Proxy-State =* ANY attrs.accounting_response: Proxy-State =* ANY experimental.conf: mod_preproxy = radiusd_test experimental.conf: func_preproxy = preproxy experimental.conf: mod_postproxy = radiusd_test experimental.conf: func_postproxy = postproxy proxy.conf:proxy server { radiusd.conf:proxy_requests = no What is the missing magic command which could help me ?? Thanks. Best regards. -- Lycée polyvalent Alfred Nobel, Clichy sous Bois http://www.lyceenobel.org

2 3

Allow unlimited simultanious users ?
by James Hallahan 05 May '10

05 May '10

Hi Everbdody, Right off the bat I will tell you that this is my first experience with FreeRadius. I have a customer that wants to do be able to connect their laptops to a private network where we are running Edirectory as the authentication directory. Elements include - FreeRadius 2.1.6, Edirectory 8.7.x, SLES 11, LDAP authentication, Windows XP sp3, Novell Client32 4.91 sp5 I have this working Windows XP sp3 workstation and the user is prompted for username and passowrd for network access. Import of root CA from FreeRadius Server to Windows XP (SLES 11) PEAP and MSCHAP2 configuration on Windows XP The workstations only login to Edir to authtenicate and sync their local passwords all the applications are in a Citrx farm running off a Portal and the user has to login an extra time to access the portal. (Which could be a different username / password) Actually the certificate + username and password are only giving the user an IP address, there are no rights involved. I was wondering if it is possible to get rid of the pop-up with username and password by using a predefined username and password for all the users ? This could mean (worst case) 200-300 simultanious users with same FreeRadius username-password. This shouldn't be a problem for Edirectory but I am unsure in regard to FreeRadius. I can change the passowrd on the workstation at intervals by way of software distribution. All the users will be connecting by way of 1 Cisco controller connected to the APs by way of a VPN. Any thoughts - Experience with this ? Jim

1 0

Re: R: Re: R: Re: R: rlm_ippool: No available ip addresses in pool
by Tabacchiera Stefano 04 May '10

04 May '10

>Tabacchiera Stefano wrote: >> Alan, >> here's the content of gdbm db: > > Ah... it's the DBM pools. I already stated that in the subject of my mail (did you notice the module name?). > > Well.. use "rlm_ippool_tool" to manage the pool. > Great idea! Too bad that tool allow only to cleal *all* the entries in the DBM pool. Or am I just missing something? > Or, get your NAS to send accounting stop packets. It's *supposed* to >send stop packets when a user session is cleared. As I already said, I know the NAS sometimes doesn't send acct-stop pkts, but it's out of my control. My questions (still unanswered, let me say) are: 1) is maximum_timeout useless? 2) Is there a way to keep my dbm pool safe and updated (I mean no expired addresses), even in the case some acct-stop pkt are loss? 3) Should I switch to sql pool, 'cause dbm it's actually unreliable? Thanks again. ST ______________________________________________________________________________________ La presente comunicazione ed i suoi allegati e' destinata esclusivamente ai destinatari. Qualsiasi suo utilizzo, comunicazione o diffusione non autorizzata e' proibita. Se ha ricevuto questa comunicazione per errore, la preghiamo di darne immediata comunicazione al mittente e di cancellare tutte le informazioni erroneamente acquisite. (Rif. D.Lgs. 196/2003). Grazie This message and its attachments are intended only for use by the addressees. Any use, re-transmission or dissemination not authorized of it is prohibited. If you received this e-mail in error, please inform the sender immediately and delete all the material. (Rif. D.Lgs. 196/2003). Thank you.

3 2

sqlcounter and ldap backend
by Carlos Antonio Gómez Brizulela 04 May '10

04 May '10

Hello I have installed freeradius + LDAP backend. I need to limit the connection time per user. I found sqlcounter as a solution but I have two problems: 1 - I need to take the values: Max-Daily-Session and Max-Monthly-Session from LDAP and not from mysql DB. 2 - I need to terminate the connection when it meets the maximum connection time. Best regards, Carlos A. Sorry my English, I speak Spanish.

1 0

R: Re: R: Re: R: rlm_ippool: No available ip addresses in pool
by Tabacchiera Stefano 04 May '10

04 May '10

Alan, here's the content of gdbm db: rlm_ippool_tool -v db.ippool db.ipindex KEY: '9067fe4e396704b709d9cb2a592485fa' - ipaddr:192.168.1.5 active:1 cli:0 num:1 KEY: '3502b76273775d9a81147f003ee0c913' - ipaddr:192.168.1.3 active:1 cli:0 num:1 KEY: '7dfab3787e18fa9ac9aa1d29a364259b' - ipaddr:192.168.1.2 active:1 cli:0 num:1 KEY: '2e8e64b237e81be655e98029e4e746eb' - ipaddr:192.168.1.1 active:1 cli:0 num:1 KEY: '959f1236c1743765bd67472af2b043d4' - ipaddr:192.168.1.4 active:1 cli:0 num:1 And here's the output of radiusd -X: FreeRADIUS Version 2.1.8, for host x86_64-unknown-linux-gnu, built on May 3 2010 at 08:21:55 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /home/test/etc/raddb/radiusd.conf including configuration file /home/test/etc/raddb/clients.conf including files in directory /home/test/etc/raddb/modules/ including configuration file /home/test/etc/raddb/modules/attr_filter including configuration file /home/test/etc/raddb/modules/digest including configuration file /home/test/etc/raddb/modules/mac2ip including configuration file /home/test/etc/raddb/modules/preprocess including configuration file /home/test/etc/raddb/modules/logintime including configuration file /home/test/etc/raddb/modules/pap including configuration file /home/test/etc/raddb/modules/detail.log including configuration file /home/test/etc/raddb/modules/acct_unique including configuration file /home/test/etc/raddb/modules/counter including configuration file /home/test/etc/raddb/modules/expiration including configuration file /home/test/etc/raddb/modules/linelog including configuration file /home/test/etc/raddb/modules/realm including configuration file /home/test/etc/raddb/modules/sradutmp including configuration file /home/test/etc/raddb/modules/exec including configuration file /home/test/etc/raddb/modules/krb5 including configuration file /home/test/etc/raddb/modules/detail including configuration file /home/test/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /home/test/etc/raddb/modules/radutmp including configuration file /home/test/etc/raddb/modules/mschap including configuration file /home/test/etc/raddb/modules/checkval including configuration file /home/test/etc/raddb/modules/passwd including configuration file /home/test/etc/raddb/modules/unix including configuration file /home/test/etc/raddb/modules/etc_group including configuration file /home/test/etc/raddb/modules/otp including configuration file /home/test/etc/raddb/modules/sql_log including configuration file /home/test/etc/raddb/modules/perl including configuration file /home/test/etc/raddb/modules/inner-eap including configuration file /home/test/etc/raddb/modules/policy including configuration file /home/test/etc/raddb/modules/pam including configuration file /home/test/etc/raddb/modules/files including configuration file /home/test/etc/raddb/modules/echo including configuration file /home/test/etc/raddb/modules/ippool including configuration file /home/test/etc/raddb/modules/mac2vlan including configuration file /home/test/etc/raddb/modules/cui including configuration file /home/test/etc/raddb/modules/wimax including configuration file /home/test/etc/raddb/modules/always including configuration file /home/test/etc/raddb/modules/chap including configuration file /home/test/etc/raddb/modules/ldap including configuration file /home/test/etc/raddb/modules/detail.example.com including configuration file /home/test/etc/raddb/modules/attr_rewrite including configuration file /home/test/etc/raddb/modules/ntlm_auth including configuration file /home/test/etc/raddb/modules/smbpasswd including configuration file /home/test/etc/raddb/modules/expr including configuration file /home/test/etc/raddb/modules/smsotp including configuration file /home/test/etc/raddb/policy.conf including files in directory /home/test/etc/raddb/sites-enabled/ including configuration file /home/test/etc/raddb/sites-enabled/control-socket including configuration file /home/test/etc/raddb/sites-enabled/default including dictionary file /home/test/etc/raddb/dictionary main { prefix = "/home/test" localstatedir = "/home/test/var" logdir = "/home/test/var/log/radius" libdir = "/home/test/lib" radacctdir = "/home/test/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/home/test/var/run/radiusd/radiusd.pid" checkrad = "/home/test/sbin/checkrad" debug_level = 0 proxy_requests = no log { stripped_names = no auth = yes auth_badpass = yes auth_goodpass = yes } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/home/test/var/log/radius/radwtmp" } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/home/test/etc/raddb/huntgroups" hints = "/home/test/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/home/test/etc/raddb/users" acctusersfile = "/home/test/etc/raddb/acct_users" preproxy_usersfile = "/home/test/etc/raddb/preproxy_users" compat = "no" } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/home/test/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 420 dirperm = 493 locking = no log_packet_header = no } Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/home/test/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Linked to module rlm_ippool Module: Instantiating main_pool ippool main_pool { session-db = "/home/test/etc/raddb/db.ippool" ip-index = "/home/test/etc/raddb/db.ipindex" key = "%{NAS-IP-Address} %{NAS-Port}" range-start = 192.168.1.1 range-stop = 192.168.1.5 netmask = 255.255.255.0 cache-size = 5 override = yes maximum-timeout = 10 } Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/home/test/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/home/test/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 127.0.0.1 port = 11812 } listen { type = "acct" ipaddr = 127.0.0.1 port = 11813 } listen { type = "control" listen { socket = "/home/test/var/run/radiusd/radiusd.sock" } } Listening on authentication address 127.0.0.1 port 11812 Listening on accounting address 127.0.0.1 port 11813 Listening on command file /home/test/var/run/radiusd/radiusd.sock Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 36923, id=139, length=38 NAS-IP-Address = 127.0.0.1 User-Name = "void" NAS-Port = 32157 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "void", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[unix] returns notfound [files] users: Matched entry DEFAULT at line 136 [files] users: Matched entry DEFAULT at line 139 ++[files] returns ok ++[logintime] returns noop [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = Accept Auth-Type = Accept, accepting the user Login OK: [void/<via Auth-Type = Accept>] (from client localhost port 32157) +- entering group post-auth {...} [main_pool] expand: %{NAS-IP-Address} %{NAS-Port} -> 127.0.0.1 32157 [main_pool] MD5 on 'key' directive maps to: 71d62669eac0a05008e47c4d54c85193 [main_pool] Searching for an entry for key: '71d62669eac0a05008e47c4d54c85193' [main_pool] No available ip addresses in pool. ++[main_pool] returns notfound ++[exec] returns noop Sending Access-Accept of id 139 to 127.0.0.1 port 36923 Finished request 0. Going to the next request Waking up in 4.9 seconds. Do you see anything wrong? Thanks ST ______________________________________________________________________________________ La presente comunicazione ed i suoi allegati e' destinata esclusivamente ai destinatari. Qualsiasi suo utilizzo, comunicazione o diffusione non autorizzata e' proibita. Se ha ricevuto questa comunicazione per errore, la preghiamo di darne immediata comunicazione al mittente e di cancellare tutte le informazioni erroneamente acquisite. (Rif. D.Lgs. 196/2003). Grazie This message and its attachments are intended only for use by the addressees. Any use, re-transmission or dissemination not authorized of it is prohibited. If you received this e-mail in error, please inform the sender immediately and delete all the material. (Rif. D.Lgs. 196/2003). Thank you.

2 1

srpm build error
by Athiqur Rahman 04 May '10

04 May '10

I am trying to build freeradius rpm by following the instructions at http://wiki.freeradius.org/Red_Hat_FAQ#How_to_build_an_SRPM I however get the follwing errors at the fist step # rpm -ivh freeradius-2.1.7-7.fc12.src.rpm 1:freeradius warning: user mockbuild does not exist - using root warning: group mockbuild does not exist - using root ########################################### [100%] error: unpacking of archive failed on file /usr/src/redhat/SOURCES/freeradius-logrotate;4be01a23: cpio: MD5 sum mismatch I did a rpm -K which shows # rpm -K freeradius-2.1.7-7.fc12.src.rpm freeradius-2.1.7-7.fc12.src.rpm: sha1 md5 OK I installed all the rpm-build packages before hand so do not know why this is happening. I am using Centos 5.4 --Athiq

3 3

(no subject)
by dorra aa 04 May '10

04 May '10

Hi. After installing Radius. i try to do some exemple.I d'ont know if it is correct because i'm new in it. I add on Users: "sonia" Auth-Type := Local, User-Password == "salut" Reply-Message = "Hello, %u", Reply-Message = "are you fine, %u" And i add on Clients.conf: client 127.0.0.1 { secret = testing123 # notre clé partagée shortname = class nastype = other } when i do this command, i have: pfe@pfe-laptop:~$ sudo radtest sonia salut 127.0.0.1:1812 1812 testing123 Sending Access-Request of id 11 to 127.0.0.1 port 1812 User-Name = "sonia" User-Password = "salut" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=11, length=20 What is the problem please.is there someting messing in my test? Thank you _________________________________________________________________ Hotmail: Trusted email with powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969

4 4