February 2013 - Freeradius-Users - lists.freeradius.org

user doesnt connect but freeradius say connect
by armagan yaman 24 Feb '13

24 Feb '13

I have a problem on the freeradius. When I was using these commands "radwho" and "radlast" it shows "still login" but some users doesnt connect. How can I fixed this Sorry for my bad english.

1 0

radlast and radwho commands
by armagan yaman 23 Feb '13

23 Feb '13

I have a problem on the freeradius. When I was using this commands "radwho" and "radlast" it shows "still login" but some users doesnt connect. what is wrong , ı dont understand. Sorry for my bad english.

1 0

Re: Re: Server exits without warning on radtest‏
by Adrien Morvan 22 Feb '13

22 Feb '13

Thanks So i ran it with gdb. There is a seg fault but i don't understand what is happening. I just noticed the 0xdeadbeef value. Program received signal SIGSEGV, Segmentation fault. rad_mangle (request=0x82ba520, data=<optimized out>) at rlm_preprocess.c:217 217 request_pairs = request->packet->vps; (gdb) p request $6 = (REQUEST *) 0x82ba520 (gdb) p request->packet $7 = (RADIUS_PACKET *) 0xdeadbeef (gdb) p request->packet->vps Cannot access memory at address 0xdeadbf4f (gdb) p request_pairs $8 = <optimized out> My system is a Ubuntu 12.04 LTS and the version is FreeRADIUS Version 2.1.10. Adrien

3 2

Re: Re: Server exits without warning on radtest‏
by Adrien Morvan 22 Feb '13

22 Feb '13

I changed my version of freeradius to the 2.2.0 and my radtest is working now. So thank you for the support.

1 0

RE: proxy the radius server
by Lakshmi Narayana Baliah 22 Feb '13

22 Feb '13

Hi all, I want to configure the proxy from my free radius to another free radius server How do i do that ??? please help.... Thanks Lakshmi ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

RE: proxy the radius server
by Lakshmi Narayana Baliah 22 Feb '13

22 Feb '13

Hi all, I want to configure the proxy from my free radius to another free radius server How do i do that ??? please help.... Thanks Lakshmi ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

Server exits without warning on radtest‏
by Adrien Morvan 22 Feb '13

22 Feb '13

HelloI'm facing a problem with the server. I set it and test it with a basic radtest and it exits without warning or error message.The last line is Thu Feb 21 08:33:14 2013 : Info: +- entering group authorize {...}So i guessed there was a problem in the very beginning of authorize, as the preprocess module doesn't output anything.But i couldn't find anything weird in the first lines :authorize { # The preprocess module takes care of sanitizing some bizarre # attributes in the request, and turning them into attributes # which are more standard. # # It takes care of processing the 'raddb/hints' and the # 'raddb/huntgroups' files. preprocessI didn't do big changes in the configuration files I only uncommented the sql related lines und set the SQL server info.Do you have an idea of the origin of the problem ?Here is the debug output of the server :Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and ! linkedThu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radiusThu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 0Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #0Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 1Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #1Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 2Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2Thu Feb 21 08:33:10 2013 : Info: rlm_sq! l (sql): Connected new DB handle, #2Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 3Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #3Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 4Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #4Thu Feb 21 08:33:10 2013 : Debug: Module: Checking preacct {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: (Loaded rlm_acct_unique, checking if it's valid)Thu Feb 21 08:33:10 2013 : Debug: Module: Linked to module rlm_acct_uniqueThu Feb 21 08:33:10 2013 : Debug: Module: Instantiating module "acct_unique" from file /etc/freeradius/modules/acct_uniqueThu Feb 21 08:33:10 2013 : Debug: ! acct_unique {Thu Feb 21 08:33:10 2013 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: Module: Checking accounting {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: (Loaded rlm_detail, checking if it's valid)Thu Feb 21 08:33:10 2013 : Debug: Module: Linked to module rlm_detailThu Feb 21 08:33:10 2013 : Debug: Module: Instantiating module "detail" from file /etc/freeradius/modules/detailThu Feb 21 08:33:10 2013 : Debug: detail {Thu Feb 21 08:33:10 2013 : Debug: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d"Thu Feb 21 08:33:10 2013 : Debug: header = "%t"Thu Feb 21 08:33:10 2013 : Debug: detailperm = 384Thu Feb 21 08:33:10 2013 : Debug: dirperm = 493Thu Feb 21 08:33:10 2013 : Debug: locking = noThu Feb 21 08:33:10 2013 : Debug: log_packet_header = noThu Feb 21 08:33:10 2013 : Debug: }T! hu Feb 21 08:33:10 2013 : Debug: Module: Instantiating module "attr_f ilter.accounting_response" from file /etc/freeradius/modules/attr_filterThu Feb 21 08:33:10 2013 : Debug: attr_filter attr_filter.accounting_response {Thu Feb 21 08:33:10 2013 : Debug: attrsfile = "/etc/freeradius/attrs.accounting_response"Thu Feb 21 08:33:10 2013 : Debug: key = "%{User-Name}"Thu Feb 21 08:33:10 2013 : Debug: relaxed = noThu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: Module: Checking session {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: Module: Checking post-proxy {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: Module: Checking post-auth {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: } # modulesThu Feb 21 08:33:10 2013 : Debug: } # serverThu Feb 21 08:33:10 2013 : Debug: radiusd: #### Opening IP addresses and Ports ####Thu Feb 21 08:33:10 2013 : Debug: listen {Thu Feb 21 08:33:10 2013 : Debug: type = "auth"Thu Feb 21 08:33:10 2013 : Debug: ipaddr = *Thu Feb 2! 1 08:33:10 2013 : Debug: port = 0Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: listen {Thu Feb 21 08:33:10 2013 : Debug: type = "acct"Thu Feb 21 08:33:10 2013 : Debug: ipaddr = *Thu Feb 21 08:33:10 2013 : Debug: port = 0Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: listen {Thu Feb 21 08:33:10 2013 : Debug: type = "auth"Thu Feb 21 08:33:10 2013 : Debug: ipaddr = 127.0.0.1Thu Feb 21 08:33:10 2013 : Debug: port = 18120Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: Listening on authentication address * port 1812Thu Feb 21 08:33:10 2013 : Debug: Listening on accounting address * port 1813Thu Feb 21 08:33:10 2013 : Debug: Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnelThu Feb 21 08:33:10 2013 : Debug: Listening on proxy address * port 1814Thu Feb 21 08:33:10 2013 : Info: Ready to process requests.rad_recv: Access-Request packet from host 127.0.0.1 port 4! 3468, id=182, length=56 User-Name = "jean" User-Password = "pw" NAS-IP-Address = 127.0.1.1 NAS-Port = 0Thu Feb 21 08:33:14 2013 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/defaultThu Feb 21 08:33:14 2013 : Info: +- entering group authorize {...}Thank you

2 1

eap over lan simulation
by tabibel sami 22 Feb '13

22 Feb '13

Hi freeradiusers, In purpose to implementing eap-sim supplicant i created the following virtual infrastructure : supplicant -------------------------- NAS (Access Point) --------------------------------------------- freeradius server 10.0.0.1 Ethernet 10.0.0.2 UDP 195.12.16.17 supplicant :: is my real computer NAS:: is a vmplayer virtual machien and freeradius server: is lxc container (virtual machine too) i have to test communications between supplicant <-> NAS and then between NAS <-> server thanks to eapol_test i can know test udp communications between NAS and server (thank you matthew your answer was very apreciated) and know i have to test (simulate, understand )802.1x eap communication between supplicant and nas, i can't find a way to simulate a NAS (Point ACCESS) with 802.1x supplicant thant can controle ethernet and not wireless access from supplicant, because i use linux bridge to connect my virtuel machines to each others (so no wireless or can we simulate wireless connexion too ?) clarification on this point will be very appreciated ! Thanks in advance

2 1

WARNING! for check item
by A.L.M.Buxey＠lboro.ac.uk 22 Feb '13

22 Feb '13

hi, quick query with some outout I see when radiusd starts uo (this is 3.x HEAD). I see the following message when attr_filter modules are being loaded up: reading pairlist file /etc/raddb/attrs [/etc/raddb/attrs]:134 WARNING! Check item "Local-Priv-Level" found in filter list for realm "DEFAULT". sure, there is an item in DEFAULT section of attrs: Called-Station-Id =* ANY, Operator-Name =* ANY, Port-Limit <= 2, Local-Priv-Level =* ANY, Session-Timeout <= 28800 and the entry in dictionary is: ATTRIBUTE Local-Priv-Level 3069 string what exactly is wrong here that is triggering this WARNING ? many thanks alan

2 1

segfault
by David Peterson 21 Feb '13

21 Feb '13

I had a bit of code cause a segfault in 3.0.0. Post-Auth-Type REJECT { attr_filter.access_reject update reply { EAP-Message = "0x04040004" Message-Authenticator = "%{Message-Authenticator}" } } Is there any reason I could not add this to sites-enabled/default? Here is the entry in syslog: Feb 21 11:18:59 freeradius1 kernel: [6021244.475983] radiusd[8535]: segfault at 80 ip 0000000000410ad7 sp 00007fff32516300 error 4 in radiusd[400000+57000] David Peterson

3 8