August 2012 - Freeradius-Users - lists.freeradius.org

Re: non-blocking radius client
by Alan DeKok 24 Aug '12

24 Aug '12

al so wrote: > you will pay the price for sure.. Threats are rude. You've not only been banned from the list, but your threats are now on permanent record in the list archives. Anyone wanting to know who you really are just has to search for your email address. > On Fri, Aug 24, 2012 at 12:50 PM, al so <volkswak(a)gmail.com > <mailto:volkswak@gmail.com>> wrote: > > just go eat some shit > > > On Fri, Aug 24, 2012 at 12:49 PM, Alan DeKok > <aland(a)deployingradius.com <mailto:aland@deployingradius.com>> wrote: > > al so wrote: > > looks like you need to find some decent job.. > > Congratulations. You've been unsubscribed from the > freeradius-users > list. You've also been banned from every subscribing again. > > Alan DeKok. > > >

1 0

non-blocking radius client
by al so 24 Aug '12

24 Aug '12

> > I am trying to write my own Radius client using Java + Netty in a > non-blocking IO fashion. > > Is there a sample code I can look at or reuse? Obviously, trying not to > reinvent the wheel here. > > Also, any suggestion on RADIUS servers that I can install and test my > RADIUS client against? > Not much info out there to compare various implementations.

3 3

redundant-load-balance
by McNutt, Justin M. 24 Aug '12

24 Aug '12

>From 'man unlang' I see this: redundant-load-balance { ldap1 # 50%, unless ldap2 is down, then 100% ldap2 # 50%, unless ldap1 is down, then 100% } I clearly don't know what I'm doing when it comes to defining these "modules". If I have just "ldap" in there, it works. raddb/modules/ldap exists and is configured correctly. However, when I do this in my raddb/sites-enabled/FOO: authorize { ... redundant-load-balance { ldap1 ldap2 ldap3 } ... } I get the following errors from "radiusd -XC": /etc/raddb/sites-enabled/campus-main[179]: Failed to load module "ldap1". /etc/raddb/sites-enabled/campus-main[179]: Failed to parse "ldap1" entry. /etc/raddb/sites-enabled/campus-main[70]: Errors parsing authorize section. I tried copying modules/ldap to modules/ldap1, but that didn't work. Also changed the ldap { ... } in modules/ldap1 to ldap1 { ... }. No help there. This must be some syntactical aliasing that I haven't set up. What am I missing? For now, ldap1, ldap2, and ldap3 can all be identical (for testing). As it happens, they point to ldap.missouri.edu at the moment, which is itself a DNS round robin. My plan is that if it fails on the first attempt, it should attempt at least two more times, likely hitting different real servers before actually failing. Thoughts? Thanks! --J

4 5

Re: SMSotpd, Something goes wrong :(
by Thomas Glanzmann 24 Aug '12

24 Aug '12

Hello Joël, > I've adjusted some paths and other little things. > Freeradius is up > smsotpd is up > I've populated the berkeley db with my identifiant don't use the smsotpd, use the rlm_perl which is a complete different setup. The mininimal config you find in the README in the corresponding directory. > Use of uninitialized value $type in hash element at ./pap_challenge_request.pl line 51. this happens, when you have a way to old Authen::Radius module. On which distribution are you? > Additionaly i suppose that i will need to change values regarding my > corporate active directory. Could you point me out where it's needed ? No, rlm_perl expects the username already writen as username@REALM. > it is possible to test the first stage "krb5" with radtest ? huh !! I > think it could be possible to answer to this question by myself .. ;o) Yes, it is. See the rlm_perl/README file. Cheers, Thomas

1 0

Ussing many MAC Address wih one user
by Andres Gomez Ruiz 24 Aug '12

24 Aug '12

Hi everybody!! Im using freeradius in a simple way (freeradius + MySQL). I have some users attached to some groups... it works fine!! The groups have some simple attributes like "Max-All-Session" in radgroupcheck table. Now I need to limit the users to some MAC Address. I mean, I have the User "AAAA" and I need use it only with these MAC Address: 00:23:8B:7F:47:DD 00:23:8B:7F:AA:BB 00:23:8B:7F:CC:EE I'm using the atributte Calling-Station-Id in the radcheck table, like this: AAAA Calling-Station-Id == 00:23:8B:7F:47:DD It works fine, but just for only one MAC address, If I put 2 or more MAC address It doesnt work. What can I do in order to enable some MAC Address attached to users in mysql database? (not only one?) Thanks !! -- * **Andres Gomez*

2 2

Accounting pakets on layer 2
by Andreas Meyer 24 Aug '12

24 Aug '12

Hello! Excuse me please, if this is the wrong list for my question! If I have an AccessPoint working on layer 2 like the ALL0278, how are accounting pakets generated and sent to the radius-server on port 1813. Which application is responsible for generating those pakets? Thank you! Andreas

3 3

[ANN] rlm_cache
by Arran Cudbard-Bell 23 Aug '12

23 Aug '12

Hi All, A new module has been added to V2.1.x and 3.0 HEADs called rlm_cache (written by Alan DeKok). This provides an in-memory (volatile) cache, that can store and retrieve attribute values for control, request and reply lists (at some point the 3.0 version will be able to handle all lists). This is definitely not a cure for slow or unstable databases/directories, but may help for some temporary outages, and has additional uses for things like accounting stream de-duplication/ratelimiting, and query/congestion reduction. I've added some basic documentation here: http://wiki.freeradius.org/Rlm_cache, and there's more in the default module configuration file. Post on the list if you can think of any additional features you'd like to see added. -Arran

1 0

$INCLUDE ignored by freeradius
by Krzysztof Grobelak 23 Aug '12

23 Aug '12

Hello all, It seems that the $INCLUDE <filename> command is ignored by freeradius during authentication. I have three groups of users in three different files and those three files are added to the main users file in raddb directory using $INCLUDE users.group1 $INCLUDE users.group2 $INCLUDE users.group3 but for some reason during authentication freeradius just looks up the main users file and ignores the $INCLUDE command which results in REJECT being sent. I think that i simply missed a configuration step as this setup was working before i did the upgade to the MASTER version from git. Thanks in advance Kris http://www.livelinx.tv/ NEW! See our Ka Uplink Van at IBC in Amsterdam; Stand OE 117, September 7-11, 2012

5 22

Re: Re: "+=" allowed in attrs ??
by Joachim Brauer 23 Aug '12

23 Aug '12

Hi Arran > When you get the response? > post-proxy { > files.authorize > } works like a charm -- thx alot !!! Regards, Joachim (JoB) Brauer

1 0

Re: Re: "+=" allowed in attrs ??
by Joachim Brauer 23 Aug '12

23 Aug '12

Hi > You shouldn't be using the attribute filter to add attributes, that's what the > users file is there for? Hmmm I tried that but it didn t work so I went over to try via attrs.... Dumb question: How can I have the "files" directive being processed after having proxied an incoming auth request? I seem to be unable to find the answer on this -- so I m glad for any pointers. My apologies if this is a silly question.... Regards, Joachim (JoB) Brauer

3 3