May 2010 - Freeradius-Users - lists.freeradius.org

R: rlm_ippool: No available ip addresses in pool
by Tabacchiera Stefano 03 May '10

03 May '10

Can anyone please give me an hint? Does the rlm_ippool module works as expected or should I swich to something else? Thanks. ST ------------------------------------------ Stefano Tabacchiera Lottomatica Group S.p.A. Architectures Viale del Campo Boario, 56/d 00154 Rome Italy Phone: +39 06.5189.4067 Email: stefano.tabacchiera(a)lottomatica.it<mailto:stefano.tabacchiera@lottomatica.it> ------------------------------------------ Da: Tabacchiera Stefano Inviato: venerdì 30 aprile 2010 15.49 A: 'freeradius-users(a)lists.freeradius.org' Oggetto: rlm_ippool: No available ip addresses in pool Priorità: Alta Hi there, we have a major issue with our production server running RHEL 5.2 with FreeRadius 2.0.5. The problem is that ip addresses are released only when we receive a ACCT-STOP from the NAS, and not when maximum_timeout expires. So periodically we see the aforementioned error in logfiles and we can't serve ip addresses anymore to our clients. Is this a known bug? Is/will be this fixed in a newer release? Here's our ippool setup: ippool pool2 { range-start = 10.146.160.0 range-stop = 10.146.191.255 netmask = 255.255.128.0 cache-size = 8192 override = yes maximum-timeout = 3600 session-db = ${raddbdir}/db-2.ippool ip-index = ${raddbdir}/db-2.ipindex } Thanks in advance. ST ______________________________________________________________________________________ La presente comunicazione ed i suoi allegati e' destinata esclusivamente ai destinatari. Qualsiasi suo utilizzo, comunicazione o diffusione non autorizzata e' proibita. Se ha ricevuto questa comunicazione per errore, la preghiamo di darne immediata comunicazione al mittente e di cancellare tutte le informazioni erroneamente acquisite. (Rif. D.Lgs. 196/2003). Grazie This message and its attachments are intended only for use by the addressees. Any use, re-transmission or dissemination not authorized of it is prohibited. If you received this e-mail in error, please inform the sender immediately and delete all the material. (Rif. D.Lgs. 196/2003). Thank you.

2 1

"Exiting normally" on FreeBSD -- Synopsis?
by Brian A. Seklecki 03 May '10

03 May '10

All: Did anyone ever track this down? I'm assuming the consensus is that the kernel is SIGTERM'ing the process when it exceeds login_class(3) restrictions in login.conf(5) Obviously, other reports have eliminated the usual sources of signals as a cause. As for the root cause, are we talking about a memory leek introduced in a recent version or something less insidious, such as threading/process concurrency defaults that exceed defaults for non-root users? I'm still seeing documented behavior on freeradius-2.1.8 on FreeBSD/amd64 RELENG_8_0, but not RELENG_6_3. The only thing that I can see that has changed is the max open file limits 6.3: open files (-n) 11095 8: open files (-n) 3520 I guess maybe lsof(8) or fstat(8) to try to track down possibly a file descriptor problem? Ahhh, Monday. ~BAS

2 4

NETBIOS OVER TCP/IP
by Danie J. Steenkamp 03 May '10

03 May '10

Hi, I am using Freeradius 2.1.6 on Centos 5.3 with MySQL backend. On a windows DHCP server you can set that when a IP is supplied not to allow "NetBIOS over TCP/IP" on that connection. I would like to know if it is possible to send something similar on FreeRadius when a Accept-Accept is send? We do supply a static IP to our clients via the radius server. Thanks. __________ Information from ESET NOD32 Antivirus, version of virus signature database 5082 (20100503) __________ The message was checked by ESET NOD32 Antivirus. http://www.eset.com (GAAP DISCLAIMER) The contents of and attachments to this e-mail are intended for the addressee only, and may contain the confidential information of UCS Group and/or its subsidiaries. Any review, use or dissemination thereof by anyone other than the intended addressee is prohibited. If you are not the intended addressee please notify the writer immediately and destroy the e-mail. UCS Group Limited and its subsidiaries distance themselves from and accept no liability for unauthorised use of their e-mail facilities or e-mails sent other than strictly for business purposes. -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

radusd debug
by Коньков Евгений 03 May '10

03 May '10

Hi, FreeRadius. /usr/local/etc/rc.d/radiusd debug must ignore /etc/rc.conf radiusd_enable="YES" and must act like /usr/local/etc/rc.d/radiusd one start -- С уважением, Коньков mailto:kes-kes@yandex.ru

3 4

format input to radclient (or radtest) for EAP-TTLS and EAP-PEAK (MSCHAPv2) test
by bslee (HKBU) 03 May '10

03 May '10

Hi, I am using v2.1.8 in SuSE 11. Question1: I don't have the client and nas environment right now. I want to input "EAP-TTLS" and "EAP-PEAP (MSCHAPv2)" respectively into radclient (or radtest) to test my freeradius configuration. What should be the input to radclient (or radtest) (i.e. the red string in the example below)? eg, echo "User-Name=test,Password=mypass,Framed-Protocol=PPP " | /usr/local/bin/radclient localhost:1812 auth s3cr3t Question 2: When freeradius receives a authentication request of either one of those 2 types in question 1, a script will be invoked to authenticate mysql (i.e. to replace corresponding rlm_eap_xxx module). a. May I know related configurations for invoking the script? b. some attributes should be sent to the script from freeradius. What are these attributes? How to get these attributes from PHP script? c. After accessing MYSQL, PHP script should return some attributes back to freeradius, What are these attributes? How to allow freeradius to accept authentication result and those attributes? --------------- Cheers, Joe __________ Information from ESET Smart Security, version of virus signature database 5080 (20100502) __________ The message was checked by ESET Smart Security. http://www.eset.com

2 1

supplicant winxp+freeradius+ldap
by Daniel Soto 03 May '10

03 May '10

hi. i think that this problem is very similar to many people but i can´t find the solution. i´m trying authenticate users of windows with is own supplicant, when i try authenticate in local users no problem, however the problem is when i try it with openldap. i received a message. Auth: rlm_ldap: Attribute "User-Password" is required for authentication. Thu Apr 29 16:44:57 2010 : Auth: Login incorrect: [peter] (from client wifi port 6145 cli 00-74-05-A6-91-BD) i have read most about this problem but i can´t find de solution. I think that the problem is in mschap. i hope can help me. thanks -- i received a message. Auth: rlm_ldap: Attribute "User-Password" is required for authentication. Thu Apr 29 16:44:57 2010 : Auth: Login incorrect: [peter] (from client wifi port 6145 cli 00-74-05-A6-91-BD) i have read most about this problem but i can´t find de solution. I think that the problem is in mschap. i hope can help me. thanks --

4 5

radiusd -X
by dorra aa 03 May '10

03 May '10

HI I try to test freeradius with this command radiusd -X. but i get that error: radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 Failed binding to authentication address * port 1812: Address already in use /usr/local/etc/raddb/radiusd.conf[240]: Error binding to port for 0.0.0.0 port 1812 What's the problem plz THanks _________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

5 5

(no subject)
by Richie Lee 02 May '10

02 May '10

http://wepizil.t35.com/ _________________________________________________________________ Videos that have everyone talking! Now also in HD! http://go.microsoft.com/?linkid=9724465

2 1

is file outside component root?
by Shingirai Ngwenya 01 May '10

01 May '10

I just completed installing my first freeside 1.9.3 with RT. /etc/init.d/freeside start... is good without error and same goes for my apache. When I try to access my server from my server browser, I get: [Mason] Cannot resolve file to component: /var/www/html/freeside/index.html (is file outside component root?) at /usr/lib/perl5/site_perl/5.8.8/HTML/Mason/ApacheHandler.pm line 852 Shingi

1 0