November 2011 - Freeradius-Users - lists.freeradius.org

Re: Why Authorization before Authentication?
by Alan Buxey 24 Nov '11

24 Nov '11

What are you going to send from authenticate? It should be simple, password correct or password wrong. Everything else should be in post auth, authorize or post proxy even alan -- Message may be brief as it has been sent from my mobile

1 0

rlm_perl radiusd::radlog $type codes
by Edgar Fuß 24 Nov '11

24 Nov '11

The rlm_perl Documentation (in the Wiki) lists the $type values for radiusd::radlog($type, $message) as 0 - Debug 1 - Auth 2 - Proxy 3 - Info 4 - Error while include/radiusd.h says #define L_DBG 1 #define L_AUTH 2 #define L_INFO 3 #define L_ERR 4 #define L_PROXY 5 #define L_ACCT 6 #define L_CONS 128 and I can see no translation in src/modules/rlm_perl.c. Am I missing something or is this a documentation error?

1 0

Technical paper how Freeradius works?
by Andreas Rudat 24 Nov '11

24 Nov '11

Hi, are there any and I don't see them, besides man pages/config files? Thanks

3 4

Testing Wlan
by Andreas Rudat 24 Nov '11

24 Nov '11

Hi, is there any possibility to test if two machines with the same login can sniff each others traffic? Thanks

3 4

How to use radacct in two different databases
by Nataniel Klug 24 Nov '11

24 Nov '11

Hello all, I am having a problem. The problem is I was trying to use MySQL and SQLIPPOOL but I had many problems with IP allocation and release so I choose to try PostgreSQL and it worked really fine in every aspect. The problem is: I use a software made by a third part company that can only read MySQL tables (they use some kind of a socket to connect to database) and I need to measure my clients usage and show it to the clients so they have a web PHP/Java page where my client can see his usage. So, as I am using PostgreSQL this become impossible so, is there any way to use PostgreSQL for authentication and MySQL for accounting? Is this possible? -- Descrição: 111027-nata_at_cnett

3 5

Number of queued Requests
by Mohd Khaldi 24 Nov '11

24 Nov '11

Hellow all, I have question how to find number of Access_Requests and Accounting_Request are actualy in the Radius queue. best regards Rasmi

2 1

Question at certificates
by Andreas Rudat 24 Nov '11

24 Nov '11

Hi, I'm a little bit confused, I configure radius with self signed cert, peap+mschap, so if I tried to connect with an android or apple device I get the question if I want to accept the server cert, thats ok, but with windows or linux I get the error that there is no cert, but it still works, why these clients don't download the cert? I can manually add them sure but why is that so different? Thanks

2 1

radzap: Nothing to send
by Angel L. Mateo 24 Nov '11

24 Nov '11

Hello, I have a script using radzap to zap clients. This script with freeradius 1.1.7 worked, but since I updated to 2.1.10 it didn't work. The command I run is: root@vulpes21:~/scripts/radius# radzap -P 9937 -u <user> -N 10.57.112.8 localhost <secret> radclient: Nothing to send. The output for this user in radwho -R is: User-Name = "<user>" Acct-Session-Id = "00002CC6" NAS-IP-Address = 10.57.112.8 NAS-Port = 9938 Service-type = Login-User Framed-IP-Address = Acct-Session-Time = 92 Calling-Station-Id = "9084.0d64.2d83" Any idea? One difference between my 1.1.7 config and the new one is that now I'm using virtual servers? Could it be the reason? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 868887590 Fax: 868888337

3 6

OpenVPN + pam_auth_radius + Windows 2008 Radius Server
by Nate 23 Nov '11

23 Nov '11

I'm running the following, Centos 5.7 openVPN 2.2.1 pam_radius 1.3.17 I've installed the /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so into this directory /usr/share/openvpn/plugin/lib. Here are the contents of my pam_radius_auth file auth sufficient /lib/security/pam_radius_auth.so debug account sufficient /lib/security/pam_radius_auth.so I installed the pam_radius_auth.so module into /lib/security. Next I used the same configuration file for openvpn server, but added these lines to the bottom and changed it from "dev tun" to "dev tap" plugin /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so openvpn client-cert-not-required username-as-common-name for the openvpn client, I added the line "auth-user-pass" Next, I set up the radius server to accept the ip address of the openvpn server. Finally, I tried connecting with the client and I keep getting this error message. Here's the output of the openvpn logs that I get: AUTH-PAM: BACKGROUND: user 'myuser' failed to authenticate: Permission denied Tue Nov 22 14:26:21 2011 {MYRADIUS_IP}:61645 PLUGIN_CALL: POST /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so/PLUGIN_AUTH_USER_PASS_VERIFY status=1 Tue Nov 22 14:26:21 2011 {MYRADIUS_IP}:61645 PLUGIN_CALL: plugin function PLUGIN_AUTH_USER_PASS_VERIFY failed with status 1: /usr/share/openvpn/plugin/lib/openvpn-auth-pam.so Tue Nov 22 14:26:21 2011 {MYRADIUS_IP}:61645 TLS Auth Error: Auth Username/Password verification failed for peer Tue Nov 22 14:26:21 2011 {MYRADIUS_IP}:61645 Control Channel: TLSv1, cipher TLSv1/SSLv3 DHE-RSA-AES256-SHA Tue Nov 22 14:26:21 2011 {MYRADIUS_IP}:61645 [] Peer Connection Initiated with {MYRADIUS_IP}:61645 Tue Nov 22 14:26:22 2011 {MYRADIUS_IP}:61645 PUSH: Received control message: 'PUSH_REQUEST' Tue Nov 22 14:26:22 2011 {MYRADIUS_IP}:61645 Delayed exit in 5 seconds Tue Nov 22 14:26:22 2011 {MYRADIUS_IP}:61645 SENT CONTROL [UNDEF]: 'AUTH_FAILED' (status=1) Tue Nov 22 14:26:24 2011 read UDPv4 [ECONNREFUSED]: Connection refused (code=111) Tue Nov 22 14:26:27 2011 {MYRADIUS_IP}:61645 SIGTERM[soft,delayed-exit] received, client-instance exiting On the windows radius client, I only get this in the tracing logs: [5624] 11-22 14:26:21:280: IAS extension host returned responseType=2, reasonCode=21 [5624] 11-22 14:26:21:280: No AUTHORIZATION extensions, continuing Any ideas on what I'm missing? (and yes, I have googled it!)

2 4

Fwd: freeradius logging
by sandmann＠uni-greifswald.de 23 Nov '11

23 Nov '11

Hi all, I am hoping that someone can help me. I need more informations in the logs because sometimes the radius service will be stopped. But i don't know why. Where i must configure this Loglevel to get more informations in this logs? best regards David Sandmann

2 1