September 2012 - Freeradius-Users - lists.freeradius.org

Re: error of segmentation during the implementation of eap2
by alan buxey 18 Sep '12

18 Sep '12

Hi, > Hi, > We do this before, when we started freeradius compilation. yes - and now you have to do it again (well, just the git pull) as a patch has been made to the repository. alan

1 0

Re: Freeradius-Users Digest, Vol 89, Issue 58
by Matthew 18 Sep '12

18 Sep '12

1 0

Failed login lockout protection in FreeRADIUS
by mr. s 17 Sep '12

17 Sep '12

Hello, I was reading an article in computer world comparing a few RADIUS servers. It said that FreeRADIUS had "failed login lockout protection", however I can't find that particular verbiage in the FreeRADIUS documentation, FAQ or HowTos. Can anyone point me to what this may be referring to or clear up my confusion. Thanks for your time.

5 8

generating ssl certs in debian squeeze
by austin wonderly 17 Sep '12

17 Sep '12

Hello, I was wondering if anyone knew of any tutorials for generating ssl certificates for freeradius in debian squeeze? Have been trying to find a method that would work over the last few days and have not found a solution yet (have probably spent around 6-7 hrs just getting this part to work so far), I am trying to setup a radius server to provide eap-ttls authentication for a non public network (windows machines, as well linux based machines would be on the network), if someone could point me in the right direction though or possibly offer some advice I would really appreciate it as i've pretty much exhausted my options at this point in time. having said that, would there be any downsides to just using the "snakeoil" certificates in this type of configuration? thanks

3 5

max_queue_size > 65536
by Arran Cudbard-Bell 17 Sep '12

17 Sep '12

A friendly heads up. The bug fixes item "Use max_queue_size in threading code" refers to an issue in the threading code where the value used to initialise the request queue, was different to the value used to check when the max entries had been added into the queue, thus if you'd set the config item max_queue_size to something larger than 65536 and actually used more than that number of queue slots the server would crash. This config item was previously undocumented so hopefully few people have altered it. If you have and you're using a version < 2.2.0, please remove the config item to set it back to defaults, or set it to a value less than 65536. -Arran

1 0

Proxy and requests queue
by AemNet 17 Sep '12

17 Sep '12

Hi everybody I've a question about the management of the queue in freeradius 2.1.12. Let's assume my server are used for local authentication for the realm mydomanin.org and proxy the request for the realm remote.org (a pool with a single home server). Let's assume also that max_servers and max_spare_server are sets correctly. What happens if the home server for the proxy takes too long to respond? The requests for the local side are ignored or have their own queue? And if my proxy are used for different realm (remote1.org, remote2.org etc...) all with their own single home_server what happens if a remote home server takes too long to respond? To make a long story short it's possible that a problem on a remote home server (that receives a huge number of requests) blocks the requests for my local server? Thanks I know this can be a stupid question but I didn't find an answer in the wiki or in the docs (probably I've searched in the wrong place or the wrong terms sorry) PS: sorry for my English

2 2

users file case sensitive
by Gregg Douglas 17 Sep '12

17 Sep '12

Hi, Background: FreeRadius Version: 2.1.1-7.10.1 Users are stored in LDAP, I am using the users file to assign static IP Addresses to certain users. It seems that the users file is case sensitive, I found a few articles on the net regarding this, but none really supplied a definitive answer. Is there a way to prevent the users file from being case sensitive ? If not, what is the recommended method to elegantly avoid this problem. Regards Gregg

2 1

Segmentation fault when linking 2.2.0 against openSSL 1.0.1c
by Stefan Winter 17 Sep '12

17 Sep '12

Hi, until today, I have been running FreeRADIUS 2.2.0 successfully with a system-supplied openSSL. Today, I compiled with --with-openssl --with-openssl-includes=/usr/local/freeradius/openssl-1.0.1c/include/openssl --with-openssl-libraries=/usr/local/freeradius/openssl-1.0.1c/lib the path is in ld.so.conf, and ldd shows that linking against this new version works. However, when running PEAP on this version, I get a segmentation fault now: [eap] Request found, released from the list [eap] EAP/peap [eap] processing type peap [peap] processing EAP-TLS [peap] eaptls_verify returned 7 [peap] Done initial handshake [peap] eaptls_process returned 7 [peap] EAPTLS_OK [peap] Session established. Decoding tunneled attributes. [peap] Peap state send tlv success [peap] Received EAP-TLV response. [peap] Success [peap] Using saved attributes from the original Access-Accept User-Name = "test.eduroam(a)education.lu" Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Reply-Message = "What shall we do with the drunken sailor? What shall we do with the drunken sailor? What shall we do with the drunken sailor - early in the morning? Give him eduroam." Segmentation fault The repetition of that attribute is NOT an error; it's there to inflate the packet beyond 1500 bytes to trigger UDP fragmentation (this is our Nagios testing). In 2.2.0 against the old openSSL version, everything works fine - Access-Accept. Any hints? Greetings, Stefan winter -- Stefan WINTER Ingenieur de Recherche Fondation RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg Tel: +352 424409 1 Fax: +352 422473

3 4

(no subject)
by QASIM RAO 17 Sep '12

17 Sep '12

hi, i want to test performance of my radius server. can any body give me suggestion how i can perform performance test of my radius server. i have check some performance testing tools like (radlogin,radtest,Evolynx RADIUS Load Test tool) but they are not working according to my requirement i want to send bulk number of request including additional attributes i have included in my server. regards, Qasim Rao

2 1

module loaded while running Radius
by QASIM RAO 17 Sep '12

17 Sep '12

hi,i have a probelm related to performance of free radius. so i want to know how many module are loading when i run radiusd -X command. like auth module and accounting module... please help me in this.

2 1