April 2014 - Freeradius-Users - lists.freeradius.org

Access Reject Conditional Attributes
by Muhammad Usman 23 Apr '14

23 Apr '14

Hi, I need a suggestion on how can I send extra information in Access Reject, In my scenario, user will provide credentials and those credentials will be checked from database(I have already achieved this functionality) I want to differentiate between two scenarios, one is where user provide incorrect credentials and second is where user does not have resources in their account. In second scenario I want to send an extra attribute in Access Reject, so that proper error message will be displayed to user. Suggestions will be highly appreciated. Thanks

3 3

MySQL Cluster + FreeRADIUS
by Antonio Fernández Pérez 23 Apr '14

23 Apr '14

Hi Antonio, I had the same question/problem few months ago. Now, after study the posibilities, we have in our company a DRBD cluster using Pacemaker and Corosync to manage resources. Using this, you will get HA in your database service. With FreeRADIUS service, you could have in two different machines, managing the requests with a load balancer. If one fails, the other one should attend to all requests. You can choose this or Galera Cluster for MySQL. I have read about FreeRADIUS proxy but I'm not sure that will be the best solution in this case. Regards, Antonio.

1 0

copying module instead of build
by Lloyd Gill 23 Apr '14

23 Apr '14

For systems with similar OS versions, would it be ok to build the module on one server and copy over the pam_radius_auth.so module to other servers? I understand it would likely be ideal to build fresh on each server, but would it be advised to simply copy the module for quicker deployment? Thanks, Lloyd

2 1

MySQL Cluster + FreeRADIUS
by Antonio Modesto 23 Apr '14

23 Apr '14

Hi there, We are an ISP and we want to build a high redundancy radius environment. We are thinking about using the MySQL Cluster DBMS, once it would be compatible with our actual schema and would not require any changes in our management application or freeradius. Has anybody got any experience with this scenario? If so, what had to be changed? Were the results good? I would be very thankful for any tips. Thanks in advance. Regards. -- Atenciosamente, Antonio Modesto Amaral Sousa Gerente de rede Praça Getúlio Vargas, 77 - Sala 308 - Centro Santo Antônio do Monte/MG - 35.560-000 (37) 3281-2800 (ramal: 110) / 0800-300-2800 / *37.9814-8465* *modesto(a)isimples.com.br* / faleconosco(a)isimples.com.br http://www.isimples.com.br

2 1

multiple ldap servers in freeradius
by val john 23 Apr '14

23 Apr '14

Hi Guys Is it possible to add multiple ldap servers in freeradius configuration Thank you John

7 8

freeradius and heartbleed tests in Debian
by Rui Ribeiro 23 Apr '14

23 Apr '14

Hi, Just to let you know the Debian 7 update version of ssl is 1.0.1e-2+deb7u7, and as such FreeRadius refuses to boot unless you put allow_vulnerable_openssl in radiusd.conf. Regards, Rui Ribeiro

4 4

RE: Where to download Freeradius version 2.2.4 debian package?
by Rui Ribeiro 22 Apr '14

22 Apr '14

Hi Stefan and Ila, For Debian 7 (Ubuntu is Debian based), I do before compiling: aptitude install libssl-dev quilt libtool libltdl3-dev libpam0g-dev libmysqlclient-dev libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev libperl-dev libpcap-dev python-dev libsnmp-dev libpq-dev debhelper > > Message: 1 > Date: Tue, 22 Apr 2014 11:54:08 +0000 > From: Stefan Paetow <Stefan.Paetow(a)ja.net> > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Subject: RE: Where to download Freeradius version 2.2.4 debian > package? > Message-ID: <C072996E0B81144DBB9426B44462540CE61415@EXC001> > Content-Type: text/plain; charset="utf-8" > > There is no version 2.2.4 of FreeRADIUS on Debian or Ubuntu. > > You will have to build it yourself. Now, you?ve posted some build output. > It shows that you do not have the postgresql development libraries > installed (and likely a lot of other development libraries are missing as > well. You must install those with ?apt-get install? first before you > attempt to build them. > > With Regards > > Stefan > > From: freeradius-users-bounces+stefan.paetow=ja.net(a)lists.freeradius.org[mailto: > freeradius-users-bounces+stefan.paetow=ja.net(a)lists.freeradius.org] On > Behalf Of Ilavajuthy Palanisamy > Sent: 22 April 2014 07:44 > To: FreeRadius users mailing list > Subject: Where to download Freeradius version 2.2.4 debian package? > > Hi, > > I'm looking for Freeradius version 2.2.4 debian package to install in > Ubuntu 12.04. > I there any location where I can download the Freeradius 2.2.4 debian > package? > When I do 'sudo apt-get install freeradius', it is installing Freeradius > 2.1.12 version. > Is there a way to specify a particular version of freeradius during > apt-get install? > > What are the steps to create debian package from the source code? > I tried the below command, but the debian package creation failed. > > > > > tar zxf freeradius-server-2.X.Y.tar.gz > > cd freeradius-server-2.X.Y > > > > sudo su > > dpkg-buildpackage -b -uc > .... > checking for suffix of executables... > checking for suffix of object files... (cached) o > checking whether we are using the GNU C compiler... (cached) yes > checking whether gcc accepts -g... (cached) yes > checking for gcc option to accept ISO C89... (cached) none needed > checking for libpq-fe.h... yes > checking for PQconnectdb in -lpq... no > configure: error: set --without-rlm_sql_postgresql to disable it > explicitly. > configure: error: ./configure failed for ./drivers/rlm_sql_postgresql > configure: error: ./configure failed for src/modules/rlm_sql > make: *** [config.status] Error 1 > dpkg-buildpackage: error: debian/rules build gave error exit status 2 > > > > Any pointers will be really helpful. > > Thanks, > Ila. > > > Janet(UK) is a trading name of Jisc Collections and Janet Limited, a > not-for-profit company which is registered in England under No. 2881024 > and whose Registered Office is at Lumen House, Library Avenue, > Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 > >

1 0

Where to download Freeradius version 2.2.4 debian package?
by Ilavajuthy Palanisamy 22 Apr '14

22 Apr '14

Hi, I'm looking for Freeradius version 2.2.4 debian package to install in Ubuntu 12.04. I there any location where I can download the Freeradius 2.2.4 debian package? When I do 'sudo apt-get install freeradius', it is installing Freeradius 2.1.12 version. Is there a way to specify a particular version of freeradius during apt-get install? What are the steps to create debian package from the source code? I tried the below command, but the debian package creation failed. tar zxf freeradius-server-2.X.Y.tar.gz cd freeradius-server-2.X.Y sudo su dpkg-buildpackage -b -uc .... checking for suffix of executables... checking for suffix of object files... (cached) o checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking for libpq-fe.h... yes checking for PQconnectdb in -lpq... no configure: error: set --without-rlm_sql_postgresql to disable it explicitly. configure: error: ./configure failed for ./drivers/rlm_sql_postgresql configure: error: ./configure failed for src/modules/rlm_sql make: *** [config.status] Error 1 dpkg-buildpackage: error: debian/rules build gave error exit status 2 Any pointers will be really helpful. Thanks, Ila.

2 1

Imminent release of 2.2.5 and 3.0.3
by Alan DeKok 22 Apr '14

22 Apr '14

For people with time, please test the v2.x.x branch, and the v3.0.x branch. We'd like to issue new releases to address the "heartbleed" issue with OpenSSL. Alan DeKok.

11 30

FreeRadius - Multiple Clients
by Casey Daniels 21 Apr '14

21 Apr '14

Hello, Starting to get into using FreeRADIUS and had a question, that I can't seem to find the answer to, I'm guessing its because I'm not even totally clear of the correct terminology. I'm using FreeRADIUS 3.0.? not sure of the exact version as I complied it a month or two ago and I don't have access to the computer right this second. Okay, my question is how do I set things up so the FreeRADIUS will evaluate a request based on where its coming from. So given the following Set up. Have two services wanting to use FreeRADIUS for authentication 1. Wifi 2. a HTTP Proxy I also have a bunch of users. All users can use Wifi (unless of course I need to revoke them for a little bit) Then certain Users need to be authenticated against the HTTP Proxy to allow them to do direct connections instead I plan on using the standard users file if possible. Thank You, Casey

5 20