July 2016 - Freeradius-Users - lists.freeradius.org

3.0.4: binary LDAP attributes
by Nikolai Kondrashov 24 Mar '17

24 Mar '17

Hi everyone, Our (Red Hat) QA was testing the effect of this entry in 3.0.4 ChangeLog: * Modify pairparsevalue to deal with embedded NULLs better, and use the binary versions of attribute values in rlm_ldap. They have noticed that binary LDAP values get truncated on embedded zero characters (\0) in RADIUS replies, in radiusReplyMessage in particular. I.e. for radiusReplyMessage:: cmVwbHkgd2l0aCBhAGI= The response output by radtest was Reply-Message = 'reply with a' The network capture also showed that RADIUS reply packets contained truncated values. Is this intended, or was there a fix for this? In related discoveries, it seems that backslashes get removed from LDAP attribute values in RADIUS replies, so radiusReplyMessage: reply with a\0b becomes Reply-Message = 'reply with a0b' in radtest output. Is this intended? Thank you. Nick

4 12

user-group for rejected users
by Fabricio Viana 21 Mar '17

21 Mar '17

Hello! Let´s suppose the following situations: 1) User exists but the password is wrong 2) User does not exist In both cases the answer is REJECT. It happens that certain hardware is making endless attempts that eventually saturating the server. - It is possible to cause the server, instead of rejecting the users, accept the login but responds ACCEPT with "framed-pool = pool-block" ? or/and - Is there any way to put REJECT users in a given group by default? Thanks! Fabricio

3 3

Update on 3.0, 3.1, and 3.2.
by Alan DeKok 16 Feb '17

16 Feb '17

We plan on releasing 3.0.12 on Monday. it's stable, and there no new issues being reported for it. This will ideally be the last release of the 3.0 series. Version 3.0 was released almost three years ago, and it's time for a new major version of the server. 3.1 supports a "map" keyword, redis cluster, and many other useful features. Many people have been using the 3.1 branch in production, so we're confident that it is stable and functional. To keep things simple, we don't release an official 3.1 version. Instead, we will call 3.1 a "development / experimental" branch. Once we're ready (later this summer), we'll release an official 3.2 release. The v3.1.x branch will then be frozen, and no further development will occur on it. All new development will then start with a 3.3 branch, which will likely turn into version 4.0. There are enough architecture changes needed that it warrants a 4.0. In summary: 2.1 and earlier: dead. Don't use them. 2.2: Only critical security fixes. We expect this won't happen. 3.0: stable. New installations can use 3.0. 3.1: development. Use it only if you know what you're doing. 3.2: (future stable). Mid 2016 on, new installations should use this. 3.3. (future development), more changes, with a goal of increasing performance substantially.

4 6

freeradius2 + iODBC + Informix
by vanish 28 Nov '16

28 Nov '16

Hello, Please help me set up freeradius2 + iODBC + Informix (I'm newbie in freeradius). - I have a test-machine with Ubuntu 14.04 and Freeradius-server v2.1.12. - I have a server with Informix Database Server v 10.00 Step 1: - I installed unixODBC on test-machine - I installed informix-csdk for connect to Informix Database Server (Driver) - I configured files /etc/odbc.ini and /etc/odbcinst.ini to connect to Informix Database Server - Checking with isql: +++++++++++++++++++++++++++++++++++++++++ root@test:/home/test# isql -v work +---------------------------------------+ | Connected! | | | | sql-statement | | help [tablename] | | quit | | | +---------------------------------------+ SQL> select 1 from TABLES(SET{1}) 1 +++++++++++++++++++++++++++++++++++++++++ - Everything is allright. Step 2: - I try to install freeradius-iodbc module to connect to Informix Database Server - During install I get next warning: +++++++++++++++++++++++++++++++++++++++++++++ The following packages will be REMOVED: unixodbc unixodbc-dev The following NEW packages will be installed: libiodbc2-dev +++++++++++++++++++++++++++++++++++++++++++++ - so unixodbc and unixodbc-dev packages was removed after install freeradius-iodbc - I included in radiusd.conf: +++++++++++++++++++++++++++++++++++++++++++++ sql { # # Set the database to one of: # # mysql, mssql, oracle, postgresql # database = "iodbc" # # Which FreeRADIUS driver to use. # driver = "rlm_sql_${database}" # Connection info: server = "test.server.ru" port = 1425 login = "test" password = "test123" radius_db = "test" ... +++++++++++++++++++++++++++++++++++++++++++++ - freeradius -XXX showed me next error: ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ... Fri Nov 21 14:53:48 2014 : Info: rlm_sql (sql): Driver rlm_sql_iodbc (module rlm_sql_iodbc) loaded and linked Fri Nov 21 14:53:48 2014 : Info: rlm_sql (sql): Attempting to connect to test@test.server.ru:1425/test Fri Nov 21 14:53:48 2014 : Debug: rlm_sql (sql): starting 0 Fri Nov 21 14:53:48 2014 : Info: rlm_sql (sql): Attempting to connect rlm_sql_iodbc #0 Fri Nov 21 14:53:48 2014 : Error: sql_create_socket: SQLConnectfailed: [iODBC][Driver Manager]Data source name not found and no default driver specified. Driver could not be loaded Fri Nov 21 14:53:48 2014 : Error: rlm_sql (sql): Failed to connect DB handle #0 ... +++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ - Error - "SQLConnectfailed: [iODBC][Driver Manager]Data source name not found and no default driver specified. Driver could not be loaded." - Where did I go wrong? - I found some information in net with same problem, but clear decision nowhere not found.

4 4

Adding additional password encryption options
by Laurens Vets 03 Sep '16

03 Sep '16

Hello list, Is it possible to add additional password encryption options to FreeRADIUS so that the user database can be used as a user/password store (For instance PBKDF2 or scrypt)? When I look at "man rlm_pap", the amount of encryption options for passwords are limited when FreeRADIUS is your only user database. I'm creating a POC where users can register for an account to use certain services (accessible via radius authentication) and I'm trying to only use the FreeRADIUS mysql database as a backend to keep it simple, but the password encryption methods aren't considered secure by today's standards. Short of maintaining 2 databases with user information, how are people on the list handling these cases or is my use case a bit out of the ordinary?

4 4

Child is hung for request # in component session module
by Roman 23 Aug '16

23 Aug '16

Hi, Thanks for freeradius! I was googling and fight with this issue for the last 23 hours. My setup is: Mikrotik as PPPoE server and Debian Jessie 8.5 with Freeradius 2.2.5. Also tested with Debian Wheezy 7.11 and Freeradius 2.1.12. I use radutmp for Simultaneous-Use = 1 control and store users in users file. Don't plan to switch to SQL, as this setup won't grow that large. checkrad working fine on both setups (I use mikrotik_snmp method) So it asks Mikrotik by SNMP if there are virtual interfaces with usernames and reports if user allowed to login. The problem starts with stale sessions. We know, that accounting runs over udp and we could lose some logoff packets, but it should not be an issue, when checkrad does it's job. So if there is a session in radius server (radwho shows loged in user) and no session on PPPoE server, Freeradius just hangs and shows it in logs pretty honestly: ed Jul 13 01:41:02 2016 : Info: WARNING: Child is hung for request 17 in component session module . Wed Jul 13 01:41:02 2016 : Debug: Waking up in 0.1 seconds. Wed Jul 13 01:41:02 2016 : Info: WARNING: Child is hung for request 16 in component session module . Wed Jul 13 01:41:02 2016 : Debug: Waking up in 0.9 seconds. Wed Jul 13 01:41:03 2016 : Error: Discarding duplicate request from client cli-ter1-lo0 port 38676 - ID: 115 due to unfinished request 18 Wed Jul 13 01:41:03 2016 : Debug: Waking up in 0.3 seconds. Wed Jul 13 01:41:03 2016 : Info: WARNING: Child is hung for request 15 in component session module . Wed Jul 13 01:41:03 2016 : Debug: Waking up in 0.3 seconds. Nothing more interesting in logs. If I run server in debug mode, it just freezes on this step: Wed Jul 13 01:54:44 2016 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group authorize { Wed Jul 13 01:54:44 2016 : Info: ++[preprocess] = ok Wed Jul 13 01:54:44 2016 : Info: [chap] Setting 'Auth-Type := CHAP' Wed Jul 13 01:54:44 2016 : Info: ++[chap] = ok Wed Jul 13 01:54:44 2016 : Info: ++[mschap] = noop Wed Jul 13 01:54:44 2016 : Info: [suffix] No '@' in User-Name = "tt23kswp17", looking up realm NULL Wed Jul 13 01:54:44 2016 : Info: [suffix] No such realm "NULL" Wed Jul 13 01:54:44 2016 : Info: ++[suffix] = noop Wed Jul 13 01:54:44 2016 : Info: [files] users: Matched entry tt23kswp17 at line 106 Wed Jul 13 01:54:44 2016 : Info: ++[files] = ok Wed Jul 13 01:54:44 2016 : Info: ++[expiration] = noop Wed Jul 13 01:54:44 2016 : Info: ++[logintime] = noop Wed Jul 13 01:54:44 2016 : Info: +} # group authorize = ok Wed Jul 13 01:54:44 2016 : Info: Found Auth-Type = CHAP Wed Jul 13 01:54:44 2016 : Info: # Executing group from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group CHAP { Wed Jul 13 01:54:44 2016 : Info: [chap] login attempt by "tt23kswp17" with CHAP password Wed Jul 13 01:54:44 2016 : Info: [chap] Using clear text password "secret" for user tt23kswp17 authentication. Wed Jul 13 01:54:44 2016 : Info: [chap] chap user tt23kswp17 authenticated succesfully Wed Jul 13 01:54:44 2016 : Info: ++[chap] = ok Wed Jul 13 01:54:44 2016 : Info: +} # group CHAP = ok Wed Jul 13 01:54:44 2016 : Info: # Executing section session from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group session { Wed Jul 13 01:54:44 2016 : Info: [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp Wed Jul 13 01:54:44 2016 : Info: [radutmp] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:54:44 2016 : Info: # Executing section preacct from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group preacct { Wed Jul 13 01:54:44 2016 : Info: ++[preprocess] = ok Wed Jul 13 01:54:44 2016 : Info: [acct_unique] WARNING: Attribute NAS-Identifier was not found in request, unique ID MAY be inconsistent Wed Jul 13 01:54:44 2016 : Info: [acct_unique] Hashing 'NAS-Port = 15728739,,NAS-IP-Address = my.ip,Acct-Session-Id = "81300063",User-Name = "tt23kswp17"' Wed Jul 13 01:54:44 2016 : Info: [acct_unique] Acct-Unique-Session-ID = "5cddac4e2d445dcf". Wed Jul 13 01:54:44 2016 : Info: ++[acct_unique] = ok Wed Jul 13 01:54:44 2016 : Info: [suffix] No '@' in User-Name = "tt23kswp17", looking up realm NULL Wed Jul 13 01:54:44 2016 : Info: [suffix] No such realm "NULL" Wed Jul 13 01:54:44 2016 : Info: ++[suffix] = noop Wed Jul 13 01:54:44 2016 : Info: ++[files] = noop Wed Jul 13 01:54:44 2016 : Info: +} # group preacct = ok Wed Jul 13 01:54:44 2016 : Info: # Executing section accounting from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group accounting { Wed Jul 13 01:54:44 2016 : Info: [detail] expand: %{Packet-Src-IP-Address} -> my.ip Wed Jul 13 01:54:44 2016 : Info: [detail] expand: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/freeradius/radacct/my.ip/detail-20160713 Wed Jul 13 01:54:44 2016 : Info: [detail] /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/my.ip/detail-20160713 Wed Jul 13 01:54:44 2016 : Info: [detail] expand: %t -> Wed Jul 13 01:54:44 2016 Wed Jul 13 01:54:44 2016 : Info: ++[detail] = ok and if i look at logs after some time, I get this: Wed Jul 13 01:42:29 2016 : Info: [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp Wed Jul 13 01:42:29 2016 : Info: [radutmp] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:42:29 2016 : Info: ++[radutmp] = ok Wed Jul 13 01:42:29 2016 : Info: [sradutmp] expand: /var/log/freeradius/sradutmp -> /var/log/freeradius/sradutmp Wed Jul 13 01:42:29 2016 : Info: [sradutmp] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:42:29 2016 : Info: ++[sradutmp] = ok Wed Jul 13 01:42:29 2016 : Info: ++[exec] = noop Wed Jul 13 01:42:29 2016 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:42:29 2016 : Debug: attr_filter: Matched entry DEFAULT at line 12 Wed Jul 13 01:42:29 2016 : Info: ++[attr_filter.accounting_response] = updated Wed Jul 13 01:42:29 2016 : Info: +} # group accounting = updated Wed Jul 13 01:42:29 2016 : Info: Finished request 1. Wed Jul 13 01:42:29 2016 : Debug: Going to the next request Wed Jul 13 01:42:29 2016 : Debug: Thread 7 waiting to be assigned a request Wed Jul 13 01:42:30 2016 : Info: Cleaning up request 1 ID 137 with timestamp +2 Wed Jul 13 01:42:30 2016 : Debug: Waking up in 3.9 seconds. Wed Jul 13 01:42:34 2016 : Info: Cleaning up request 0 ID 136 with timestamp +2 Wed Jul 13 01:42:34 2016 : Info: Ready to process requests. Wed Jul 13 01:54:21 2016 : Info: Ready to process requests. Wed Jul 13 01:54:21 2016 : Info: Signalled to terminate Wed Jul 13 01:54:21 2016 : Info: Exiting normally. Wed Jul 13 01:54:21 2016 : Debug: Thread 9 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 9 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 10 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 10 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 6 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 6 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 5 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 5 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 4 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 4 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 3 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 3 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 2 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 2 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 1 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 1 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 8 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 8 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 7 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 7 exiting... Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 1 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 2 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 3 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 4 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 5 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 6 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 7 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 8 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 9 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 10 And none of users are able to login, I even can't radzap session. I have to delete the radutmp file and radacc directory and start Freeradius over to get ovet this. Any ideas? I've ran out of them. -- Best regards, Roman.

4 11

RadPerf running in another server.
by Jim 19 Aug '16

19 Aug '16

Hello, I'm currently running FreeRADIUS 3.0.4 on a CentOS server and I wanted to use RadPerf for testing. Since I cannot install RadPerf in CentOS, I installed RadPerf in a separate Ubuntu 14.04 server, my question is: which is better for RadPerf installation? on the same server where FreeRADIUS was installed or different server?

4 4

authentication-failed
by Ejaz 04 Aug '16

04 Aug '16

Hello all. 1. NAS (MDG from Motorola, do we need add addionational attributes in dictionary file for the Motorola MDG) 2. Freeradius version 3.x, oracle 11g client (installed or Dell PowerEdge R730 or oracle 11x86) 3. Database (installed or Sparc remote server) 4. Driver rlm_sql is already installed . <mailto:root@ruh02saaa02:/usr/local/freeradius3/lib> root@ruh02saaa02:/usr/local/freeradius3/lib# ls -l rlm_sql_oracle* -rwxr-xr-x 1 root root 964808 Apr 14 14:35 rlm_sql_oracle.a -rwxr-xr-x 1 root root 27 Apr 14 14:35 <http://rlm_sql_oracle.la/> rlm_sql_oracle.la -rwxr-xr-x 1 root root 775232 Apr 14 14:35 rlm_sql_oracle.so The Radius server is able to connect to the database as below but the authentication is failed. as i am very new to freeradius any help would be highly appreciated.. } Listening on auth address 127.0.0.1 port 18120 bound to server inner-tunnel Listening on auth address * port 1812 bound to server default Listening on acct address * port 1813 bound to server default Listening on auth address :: port 1812 bound to server default Listening on acct address :: port 1813 bound to server default Listening on proxy address * port 59512 Listening on proxy address :: port 52582 Ready to process requests (0) Received Access-Request Id 0 from <http://10.99.10.135:54942/> 10.99.10.135:54942 to <http://0.0.0.0:1812/> 0.0.0.0:1812 length 52 (0) User-Name = "10.10.82.80 " (0) User-Password = "cisco" (0) # Executing section authorize from file /usr/local/freeradius3/etc/raddb/sit es-enabled/default (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> TRUE (0) if (&User-Name =~ / /) { (0) update request { (0) &Module-Failure-Message += 'Rejected: User-Name contains whitesp ace' (0) } # update request = noop (0) [reject] = reject (0) } # if (&User-Name =~ / /) = reject (0) } # if (&User-Name) = reject (0) } # policy filter_username = reject (0) } # authorize = reject (0) Using Post-Auth-Type Reject (0) # Executing group from file /usr/local/freeradius3/etc/raddb/sites-enabled/d efault (0) Post-Auth-Type REJECT { (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Closing connection (0): Hit idle_timeout, was idle for 104 second s rlm_sql (sql): Closing connection (1): Hit idle_timeout, was idle for 104 second s rlm_sql (sql): Closing connection (2): Hit idle_timeout, was idle for 104 second s rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): Closing connection (3): Hit idle_timeout, was idle for 104 second s rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): Closing connection (4): Hit idle_timeout, was idle for 104 second s rlm_sql (sql): You probably need to lower "min" rlm_sql (sql): 0 of 0 connections in use. You may need to increase "spare" rlm_sql (sql): Opening additional connection (5), 1 of 32 pending slots used rlm_sql (sql): Reserved connection (5) (0) sql: EXPAND %{User-Name} (0) sql: --> 10.10.82.80 (0) sql: SQL-User-Name set to '10.10.82.80 ' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet- Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '10.10.82.80 ', 'cisco', 'Access-Reject', '2016-04-14 16:32:58') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authda te) VALUES ( '10.10.82.80 ', 'cisco', 'Access-Reject', '2016-04-14 16:32:58') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (5) rlm_sql (sql): Need 2 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 31 pending slots used (0) [sql] = ok (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> 10.10.82.80 (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.3 seconds. Waking up in 0.6 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 0 from <http://0.0.0.0:1812/> 0.0.0.0:1812 to <http://10.99.10.135:54942/> 10.99.10.135:54942 length 20 Waking up in 3.9 seconds. (0) Cleaning up request packet ID 0 with timestamp +104 Ready to process requests Thanks, Mohammed Ejaz Asst. Operation Director of Systems. Cyberia SAUDI ARABIA P.O.Box: 301079, Riyadh 11372 Phone: (+966) 11 464 7114 Ext. 140 Mobile: (+966) 562311787 Fax: (+966) 11 465 4735 Website: http://www.cyberia.net.sa

3 5

Multiple Customer Databases
by Oliver Kutscher 03 Aug '16

03 Aug '16

Hi, I'm using freeradius 3.0.4 on a Red Hat Centos 7 and it seems I missed a fundamental point. I have several customers with their own database. I do logging accounting data to sql. My problem is that any accounting data of any customers is logged to any radacct tables. E.g. accounting data of customer1 is logged to (sql) customer1.radacct, but also to customer2.radacct and vise versa. /etc/raddb/mods-enabled/sql: sql customer1 { driver = "rlm_sql_mysql" dialect = "mysql" server = "localhost" port = 3306 login = "radius" password = "ffgfdfdgfdgdg" radius_db = "customer1" acct_table1 = "radacct" acct_table2 = "radacct" postauth_table = "radpostauth" authcheck_table = "radcheck" groupcheck_table = "radgroupcheck" authreply_table = "radreply" groupreply_table = "radgroupreply" usergroup_table = "radusergroup" delete_stale_sessions = yes pool { start = 5 min = 4 max = ${thread[pool].max_servers} spare = 3 uses = 0 lifetime = 0 idle_timeout = 60 } read_clients = yes client_table = "nas" $INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf } sql customer2 { driver = "rlm_sql_mysql" dialect = "mysql" server = "localhost" port = 3306 login = "radius" password = "fgfdgdg" radius_db = "customer2" acct_table1 = "radacct" acct_table2 = "radacct" postauth_table = "radpostauth" authcheck_table = "radcheck" groupcheck_table = "radgroupcheck" authreply_table = "radreply" groupreply_table = "radgroupreply" usergroup_table = "radusergroup" delete_stale_sessions = yes pool { start = 5 min = 4 max = ${thread[pool].max_servers} spare = 3 uses = 0 lifetime = 0 idle_timeout = 60 } read_clients = yes client_table = "nas" $INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf } ... /etc/raddb/sites-enabled/default: [..] accounting { .. customer1 customer2 .. } Any help would be appreciated. -- MrLINK

3 3

Eduroam: Realm NULL in Accounting
by Marcio Luiz Ota 28 Jul '16

28 Jul '16

Hi, its possible some domains autheticated (proxies) hide Realm (Realm NULL) ? In 'Autorize' the User-Name contains @domain... but in 'Accounting' Realm = NULL...

2 4