April 2012 - Freeradius-Users - lists.freeradius.org

FreeRADIUS + MySQL + DHCP Opt82
by IVB 02 Apr '12

02 Apr '12

I need help. Software: FreeRADIUS v2.1.11, MySQL v5.1.61. Hardware: RB SE100 under SEOS-6.4.1.4-Release BRAS sends Opt-82 related attributes in following format: Attributes Agent-* described in radius dictionary as 'octets'. Attributes ADSL-Agent-* described in radius dictionary as 'string'. I was try to store needed data in MySQL database from which Radius gets 'check' attributes: to Radius select that attributes to authenticate. But I got 'Login incorrect' message in Radius log. If I remove both Agent-* attributes from DB (that means that I dont validate Opt-82 parameters) - I got 'Login OK'. I think that I use wrong format for Agent-* attributes, but I was try some different variants without success. I was try to use ADSL-Agent-* instead Agent-* in DB, but I receive 'Login OK' with _any_ attributes values - match and mismatch. So I need help. Very need. And exuse me my english - it is not my native language. -- View this message in context: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-MySQL-DHCP-Opt82-tp56061… Sent from the FreeRadius - User mailing list archive at Nabble.com.

4 16

Freeradius crash with two radclient
by fulvio fabiani 01 Apr '12

01 Apr '12

Hi all, i’ve a problem with concurrent accounting requests with free radius 2.1.11. In details: I’ve 2 free radius servers balanced by bigip f5 through roundrobin algorithm. I use to send account request using radclient on a machine placed in the same sub-netmask of f5, and it forward the request on the another net (which is the servers). If I launch two or more rad client that inject traffic to free radius server (always through f5), the free radius servers kill. Under the same conditions but free radius starts with –X (debug) mode, two, three and more rad client all works fine. Because I’ve read that the debug mode starts the server with single thread but not the normal mode, I suppose that there is something concurrency that kills my radius servers. Anyone had the same issue? Any ideas to resolve? We are running freeradius on Redhat 5.6 VM on VMVare VSphere 5 infrastructure Thanks in advice

5 17

Re: Using %{User-Password} in sql query for mschapv2
by Fajar A. Nugraha 01 Apr '12

01 Apr '12

IMHO this question should be on freeradius-users, so moving it there. On Sun, Apr 1, 2012 at 8:30 AM, Oliver <oliver(a)anonsphere.com> wrote: > Hi everybody, > > I use FreeRADIUS Version 2.1.10 on Debian with OpenVPN and > xl2tp/openswan and the rlm_sql module. I want to use the user password > in a sql query in dialup.conf. This works fine with ssh and openvpn > logins but not with mschapv2. I don't know if the password is really not > submitted or just not replaced in the sql query. in mschapv2, the the client doesn't send user's cleartext password. > > Is there a simple way to make this work? For that purpose, you need user's cleartext password. Which means you can't use chap (or any of its variants). Only use PAP, TTLS-PAP, or EAP-GTC. Or change the way your system works so you don't need user's cleartext password. -- Fajar

1 0