June 2010 - Freeradius-Users - lists.freeradius.org

FR 2.1.7: Error: Failed binding to proxy address
by John Horne 11 Jun '10

11 Jun '10

Hello, We are running Freeradius 2.1.7 (on CentOS 5 - freeradius2-2.1.7-7.el5), and are seeing many of these messages in our log files: Fri Jun 11 11:44:19 2010 : Error: Failed binding to proxy address * port 1815: Address already in use The server is already running and so would already be bound to the port, so why is it trying to bind to it again? These seem to occur initially in ones or twos, but eventually the server stops responding completely to requests. At that point we have to restart the radiusd process. Is this known about and maybe fixed in 2.1.9? Or is something else going on here? Thanks, John. -- John Horne Tel: +44 (0)1752 587287 University of Plymouth, UK Fax: +44 (0)1752 587001

3 4

RE: Looking for an editor for FreeRADIUS documentation
by Jack Martin 11 Jun '10

11 Jun '10

I would be willing to help as well-if its a collaboration. I can't code and this would be a way to give back. The money could be used someplace it's really needed. -----Original Message----- From: Ramm-Ericson, Johannes <Johannes.Ramm-Ericson(a)sonyericsson.com> Sent: Tuesday, May 18, 2010 3:14 AM To: 'freeradius-users(a)lists.freeradius.org' <freeradius-users(a)lists.freeradius.org> Subject: RE: Looking for an editor for FreeRADIUS documentation Hi, I'd definitely be willing to help out with this task. Particularly if it could be turned into a collaborative effort. Money is nice, however my primary motive would actually be to contribute to an outstanding piece of software that has been essential in my job. So, should I become involved in this effort you can happily use the money elsewhere. :) Best Regards, Johannes R-E -----Original Message----- Date: Tue, 18 May 2010 09:16:06 +0200 From: Alan DeKok <aland(a)deployingradius.com> Subject: Looking for an editor for FreeRADIUS documentation To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <4BF23EB6.7080300(a)deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 In the interest of making the project better, we're looking for an editor for the documentation. The existing documentation is an "ad hoc" collection of files thrown together over a decade of effort, and written by many different people. We'd like to organize the documentation ("doc/" directory), and clean it up. We're looking for an editor with the following skills: [The entire original message is not included]

5 6

RE: Looking for an editor for FreeRADIUS documentation
by Ramm-Ericson, Johannes 11 Jun '10

11 Jun '10

Alan DeKok wrote: > Arran Cudbard-Bell wrote: >> The problem with volunteer 're-factoring' work, is that although people mean well when they offer their >> assistance, it doesn't usually work out... They'll often spend a couple of weeks working on the task, >> get bored, figure they'll take a break and come back to it later, and it never gets completed. > I'd say the hard part is getting people to just write docs. It's not as sexy as programming, but it > has arguably more *positive* impact on the end user. I concede both points. Now it just gets down to showing that it won't happen this time. :-) > It looks like a good set of volunteers wanting to help. My suggestion > is to convert the docs to "Restructured text": > > http://docutils.sourceforge.net/rst.html Looks very straight forward. :) I'll be creating a github account for myself later this evening and will start getting my hands dirty after that. Best Regards, Johannes R-E PS. By the way; for the sake of not duplicating effort does Peter Nixon want to lead the way on this or is it just a simple free-for-all?

2 3

FR 2.1.9 Frequent SegFault, didn't happen with FR 2.1.8
by James J J Hooper 11 Jun '10

11 Jun '10

Hi Alan, All, Since upgrading to 2.1.9, FR is segfaulting frequently (every 20 minutes with load, every ~8 hours with less load). Attached -X at startup, and the last 100 lines before segfault. If someone can explain how to drive GDB (or any other method to track this down), I'm happy to try it. Thanks, James -- James J J Hooper Network Specialist Information Services University of Bristol http://www.wireless.bristol.ac.uk http://www.jamesjj.net --

4 12

VLAN info disappears
by Andras Dosztal 11 Jun '10

11 Jun '10

Dear FR users, I've configured FR2 (2.1.8) to authenticate users from the users file, and I ran into a strange problem. In the first case, I've configured it to direct a user to VLAN 129: user1 Cleartext-Password := "Default1234" Tunnel-type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = "129", Termination-Action = "RADIUS-Request" User authentication works fine, but the user isn't directed to the correct VLAN, the switch port remains at its default VLAN. Debug log: http://pastebin.ca/1880327 In the second case, I've turned off 802.1X on the client, then I've set it's MAC address in the users file (of cource, mab is enabled on my Cisco switch): 000bcd0axxxx Cleartext-Password := "000bcd0axxxx" Tunnel-type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = "129", Termination-Action = "RADIUS-Request" Authentication works, the PC is directed to its VLAN. What did I do wrong? Can you help me solve this issue? Thanks in advance. Regards, Andras

3 4

RE: LDAP groups
by Génaël VALET 11 Jun '10

11 Jun '10

Is there anybody who could help me on the below topic ? -----Message d'origine----- De : freeradius-users-bounces+genael.valet=diderot.org(a)lists.freeradius.org [mailto:freeradius-users-bounces+genael.valet=diderot.org@lists.freeradius.o rg] De la part de Génaël VALET Envoyé : mercredi 9 juin 2010 15:39 À : 'FreeRadius users mailing list' Objet : LDAP groups Hello, I use LDAP groups for EAP-PEAP Authentication in wifi WPA context. For now, I used a DEFAULT line in "users" file like this : DEFAULT ldap_1x-Ldap-Group != "radius" , Auth-Type := Reject Reply-Message = "ACCES REFUSE" I have a LDAP Group named "radius" but I don't know howto permit another one LDAP Group Somebody could help me ? G.VALET - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

radmin
by Alexandre Chapellon 11 Jun '10

11 Jun '10

Hello, I have to debug some problem from a specific NAS and so I'd like to use the "debug condition' of radmin. conditionnal debug is really a great feature for helping quickly find out problems. Unfortunately it just doens't work and everythings is debuged and not only packet matching the condition. Here what i did: radmin>debug condition '(NAS-IP-Address == "1.2.3.4")' radmin> debug level 4 radmin> show debug level 4 radmin> show debug condition (NAS-IP-Address == "202.3.238.209") Unfortunately, when looking at the log file I seen stuf like this: ++[preprocess] returns ok [acct_unique] Hashing 'NAS-Port = 302458251,Client-IP-Address = 192.168.110.45,NAS-IP-Address = 42.123.21.78,Acct-Session-Id = "0001003F28000B60-4C11A0B6",User-Name = "A4NJkfU@toto"' Does anybody uses this feature of radmin successfully? Is it supposed to be stable? Thx -- Alexandre Chapellon <alexandre.chapellon(a)mana.pf> Mana SAS

2 1

radacct
by Arjun Prasad 11 Jun '10

11 Jun '10

Hi All, Can anybody explain with example that, how to use radacct command. I compiled freeradius-client code and got the radacct executable. What is the prerequisite to execute this command. What command line arguments we need to pass with this command to send a Accounting-Request. Please explaing with example. Thanks & Regards Arjun prasad

2 1

RE: Freeradius is unable to read NAS table in mysql db
by superataru - 11 Jun '10

11 Jun '10

Ok. Thank you so much! It's coming time to turn all winradius server in freeradius units :-) Now let's working on PEAP . . . so i argue, we'll have to talk again! :-) Gtrz Superataru, -- _______________________________________________ Sono solo un passeggero del volo e mi credevo pilota . . .

1 0

radtest with MS-CHAPv2?
by Andrew Chiarello 10 Jun '10

10 Jun '10

I'm very new to freeradius, and I need to test whether my configuration is correctly accepting MS-CHAPv2 requests. I'm not sure exactly how to do this with radtest (or am I using the wrong tool?) Andrew J. Chiarello Network Engineer Bryn Mawr College 610-526-7966 achiarello(a)brynmawr.edu

3 4