October 2017 - Freeradius-Users - lists.freeradius.org

freeradius authentication against gmail
by Eero Volotinen 04 Oct '17

04 Oct '17

Hi, Is there plugin that allows authentication against gmail servers? Trying to implement wlan access with gmail password? -- Eero

2 5

Re: freeradius authentication against gmail
by Eero Volotinen 04 Oct '17

04 Oct '17

I already code my pam-imap module. works fine with radtest, but not from wlan controller. any ideas why? Eero 3.10.2017 18.41 "Arran Cudbard-Bell" <a.cudbardb(a)freeradius.org> kirjoitti: > On 3 Oct 2017, at 21:05, Eero Volotinen <eero.volotinen(a)iki.fi> wrote: > > Is there example of that kind of configuration? I think I saw it when I was browsing through GitHub for 3rd party modules. IIRC someone did it in Perl. -Arran

2 3

strange brakes down freeradius
by Anton Kiryushkin 03 Oct '17

03 Oct '17

Hello. I have a strange fall down of the freeradius process version 3.0.15 (last stable version from your site). Do you need additional information about configuration or last auth request? *** Error in `radiusd': free(): invalid pointer: 0x000055f488a9c770 *** ======= Backtrace: ========= /lib64/libc.so.6(+0x721af)[0x7f15c04691af] /lib64/libc.so.6(+0x77706)[0x7f15c046e706] /lib64/libc.so.6(+0x78453)[0x7f15c046f453] /usr/lib64/libtalloc.so.2(+0xa3b4)[0x7f15c122f3b4] /usr/lib64/libtalloc.so.2(+0xa30b)[0x7f15c122f30b] /usr/lib64/libtalloc.so.2(+0xa30b)[0x7f15c122f30b] /usr/lib64/libtalloc.so.2(_talloc_free+0x123)[0x7f15c1228e53] radiusd(+0x3fe19)[0x55f487808e19] radiusd(+0x404b6)[0x55f4878094b6] radiusd(+0x40c69)[0x55f487809c69] radiusd(+0x3fdc2)[0x55f487808dc2] /usr/lib64/freeradius/libfreeradius-radius.so(fr_event_run+0x126)[0x7f15c1d3f8b8] /usr/lib64/freeradius/libfreeradius-radius.so(fr_event_loop+0x4f0)[0x7f15c1d401df] radiusd(radius_event_process+0x26)[0x55f487812f54] radiusd(main+0xc80)[0x55f4877ff261] /lib64/libc.so.6(__libc_start_main+0xf5)[0x7f15c04176e5] radiusd(_start+0x29)[0x55f4877ddb69] ======= Memory map: ======== 55f4877c9000-55f487844000 r-xp 00000000 fe:01 161269 /usr/sbin/radiusd 55f487a43000-55f487a46000 r--p 0007a000 fe:01 161269 /usr/sbin/radiusd 55f487a46000-55f487a4a000 rw-p 0007d000 fe:01 161269 /usr/sbin/radiusd 55f487a4a000-55f487a4c000 rw-p 00000000 00:00 0 55f4886dd000-55f488bf1000 rw-p 00000000 00:00 0 [heap] 7f15b4000000-7f15b4021000 rw-p 00000000 00:00 0 7f15b4021000-7f15b8000000 ---p 00000000 00:00 0 7f15b9fe5000-7f15b9ffb000 r-xp 00000000 fe:01 524378 /lib64/libgcc_s.so.1 7f15b9ffb000-7f15ba1fa000 ---p 00016000 fe:01 524378 /lib64/libgcc_s.so.1 7f15ba1fa000-7f15ba1fb000 r--p 00015000 fe:01 524378 /lib64/libgcc_s.so.1 7f15ba1fb000-7f15ba1fc000 rw-p 00016000 fe:01 524378 /lib64/libgcc_s.so.1 7f15ba1fc000-7f15ba1ff000 r-xp 00000000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba1ff000-7f15ba3fe000 ---p 00003000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba3fe000-7f15ba3ff000 r--p 00002000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba3ff000-7f15ba400000 rw-p 00003000 fe:01 664654 /usr/lib64/freeradius/rlm_cache_rbtree.so 7f15ba400000-7f15ba404000 r-xp 00000000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba404000-7f15ba603000 ---p 00004000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba603000-7f15ba604000 r--p 00003000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba604000-7f15ba605000 rw-p 00004000 fe:01 664713 /usr/lib64/freeradius/rlm_eap_mschapv2.so 7f15ba605000-7f15ba60d000 r-xp 00000000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba60d000-7f15ba80c000 ---p 00008000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba80c000-7f15ba80d000 r--p 00007000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba80d000-7f15ba80e000 rw-p 00008000 fe:01 664714 /usr/lib64/freeradius/rlm_eap_peap.so 7f15ba80e000-7f15ba815000 r-xp 00000000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15ba815000-7f15baa14000 ---p 00007000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15baa14000-7f15baa15000 r--p 00006000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15baa15000-7f15baa16000 rw-p 00007000 fe:01 664718 /usr/lib64/freeradius/rlm_eap_ttls.so 7f15baa16000-7f15baa18000 r-xp 00000000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15baa18000-7f15bac17000 ---p 00002000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15bac17000-7f15bac18000 r--p 00001000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15bac18000-7f15bac19000 rw-p 00002000 fe:01 664717 /usr/lib64/freeradius/rlm_eap_tls.so 7f15bac19000-7f15bac1b000 r-xp 00000000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bac1b000-7f15bae1a000 ---p 00002000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bae1a000-7f15bae1b000 r--p 00001000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bae1b000-7f15bae1c000 rw-p 00002000 fe:01 664711 /usr/lib64/freeradius/rlm_eap_gtc.so 7f15bae1c000-7f15bae21000 r-xp 00000000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bae21000-7f15bb021000 ---p 00005000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bb021000-7f15bb022000 r--p 00005000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bb022000-7f15bb023000 rw-p 00006000 fe:01 665154 /usr/lib64/freeradius/rlm_eap_leap.so 7f15bb023000-7f15bb026000 r-xp 00000000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb026000-7f15bb225000 ---p 00003000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb225000-7f15bb226000 r--p 00002000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb226000-7f15bb227000 rw-p 00003000 fe:01 664712 /usr/lib64/freeradius/rlm_eap_md5.so 7f15bb227000-7f15bb232000 r-xp 00000000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb232000-7f15bb431000 ---p 0000b000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb431000-7f15bb432000 r--p 0000a000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb432000-7f15bb433000 rw-p 0000b000 fe:01 524321 /lib64/libnss_files-2.22.so 7f15bb433000-7f15bb439000 rw-p 00000000 00:00 0 7f15bb439000-7f15bb43c000 r-xp 00000000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb43c000-7f15bb63b000 ---p 00003000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb63b000-7f15bb63c000 r--p 00002000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb63c000-7f15bb63d000 rw-p 00003000 fe:01 664652 /usr/lib64/freeradius/rlm_attr_filter.so 7f15bb63d000-7f15bb645000 r-xp 00000000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb645000-7f15bb844000 ---p 00008000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb844000-7f15bb845000 r--p 00007000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb845000-7f15bb846000 rw-p 00008000 fe:01 664850 /usr/lib64/freeradius/rlm_expr.so 7f15bb846000-7f15bb84a000 r-xp 00000000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bb84a000-7f15bba49000 ---p 00004000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bba49000-7f15bba4a000 r--p 00003000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bba4a000-7f15bba4b000 rw-p 00004000 fe:01 664861 /usr/lib64/freeradius/rlm_passwd.so 7f15bba4b000-7f15bba4c000 r-xp 00000000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bba4c000-7f15bbc4c000 ---p 00001000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bbc4c000-7f15bbc4d000 r--p 00001000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bbc4d000-7f15bbc4e000 rw-p 00002000 fe:01 664883 /usr/lib64/freeradius/rlm_utf8.so 7f15bbc4e000-7f15bbc54000 r-xp 00000000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbc54000-7f15bbe53000 ---p 00006000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbe53000-7f15bbe54000 r--p 00005000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbe54000-7f15bbe55000 rw-p 00006000 fe:01 665158 /usr/lib64/freeradius/rlm_pap.so 7f15bbe55000-7f15bbe60000 r-xp 00000000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bbe60000-7f15bc05f000 ---p 0000b000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bc05f000-7f15bc060000 r--p 0000a000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bc060000-7f15bc061000 rw-p 0000b000 fe:01 664858 /usr/lib64/freeradius/rlm_mschap.so 7f15bc061000-7f15bc065000 r-xp 00000000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc065000-7f15bc264000 ---p 00004000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc264000-7f15bc265000 r--p 00003000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc265000-7f15bc266000 rw-p 00004000 fe:01 664704 /usr/lib64/freeradius/rlm_detail.so 7f15bc266000-7f15bc268000 r-xp 00000000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc268000-7f15bc467000 ---p 00002000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc467000-7f15bc468000 r--p 00001000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc468000-7f15bc469000 rw-p 00002000 fe:01 664655 /usr/lib64/freeradius/rlm_chap.so 7f15bc469000-7f15bc470000 r-xp 00000000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc470000-7f15bc66f000 ---p 00007000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc66f000-7f15bc670000 r--p 00006000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc670000-7f15bc671000 rw-p 00007000 fe:01 664921 /usr/lib64/freeradius/libfreeradius-dhcp.so 7f15bc671000-7f15bc673000 r-xp 00000000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc673000-7f15bc873000 ---p 00002000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc873000-7f15bc874000 r--p 00002000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc874000-7f15bc875000 rw-p 00003000 fe:01 664706 /usr/lib64/freeradius/rlm_dhcp.so 7f15bc875000-7f15bc878000 r-xp 00000000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bc878000-7f15bca77000 ---p 00003000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bca77000-7f15bca78000 r--p 00002000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bca78000-7f15bca79000 rw-p 00003000 fe:01 665160 /usr/lib64/freeradius/rlm_realm.so 7f15bca79000-7f15bca7b000 r-xp 00000000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bca7b000-7f15bcc7a000 ---p 00002000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bcc7a000-7f15bcc7b000 r--p 00001000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bcc7b000-7f15bcc7c000 rw-p 00002000 fe:01 664702 /usr/lib64/freeradius/rlm_date.so 7f15bcc7c000-7f15bcc81000 r-xp 00000000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bcc81000-7f15bce80000 ---p 00005000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bce80000-7f15bce81000 r--p 00004000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bce81000-7f15bce82000 rw-p 00005000 fe:01 664653 /usr/lib64/freeradius/rlm_cache.so 7f15bce82000-7f15bce85000 r-xp 00000000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bce85000-7f15bd084000 ---p 00003000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bd084000-7f15bd085000 r--p 00002000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bd085000-7f15bd086000 rw-p 00003000 fe:01 665165 /usr/lib64/freeradius/rlm_unix.so 7f15bd086000-7f15bd088000 r-xp 00000000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd088000-7f15bd288000 ---p 00002000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd288000-7f15bd289000 r--p 00002000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd289000-7f15bd28a000 rw-p 00003000 fe:01 665161 /usr/lib64/freeradius/rlm_replicate.so 7f15bd28a000-7f15bd28c000 r-xp 00000000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd28c000-7f15bd48c000 ---p 00002000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd48c000-7f15bd48d000 r--p 00002000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd48d000-7f15bd48e000 rw-p 00003000 fe:01 664882 /usr/lib64/freeradius/rlm_unpack.so 7f15bd48e000-7f15bd491000 r-xp 00000000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd491000-7f15bd690000 ---p 00003000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd690000-7f15bd691000 r--p 00002000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd691000-7f15bd692000 rw-p 00003000 fe:01 665155 /usr/lib64/freeradius/rlm_exec.so 7f15bd692000-7f15bd696000 r-xp 00000000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd696000-7f15bd895000 ---p 00004000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd895000-7f15bd896000 r--p 00003000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd896000-7f15bd897000 rw-p 00004000 fe:01 665150 /usr/lib64/freeradius/rlm_digest.so 7f15bd897000-7f15bd899000 r-xp 00000000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bd899000-7f15bda98000 ---p 00002000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bda98000-7f15bda99000 r--p 00001000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bda99000-7f15bda9a000 rw-p 00002000 fe:01 664849 /usr/lib64/freeradius/rlm_expiration.so 7f15bda9a000-7f15bda9d000 r-xp 00000000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bda9d000-7f15bdc9c000 ---p 00003000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bdc9c000-7f15bdc9d000 r--p 00002000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bdc9d000-7f15bdc9e000 rw-p 00003000 fe:01 664857 /usr/lib64/freeradius/rlm_logintime.so 7f15bdc9e000-7f15bdca1000 r-xp 00000000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdca1000-7f15bdea1000 ---p 00003000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdea1000-7f15bdea2000 r--p 00003000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdea2000-7f15bdea3000 rw-p 00004000 fe:01 664864 /usr/lib64/freeradius/rlm_preprocess.so 7f15bdea3000-7f15bdea6000 r-xp 00000000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15bdea6000-7f15be0a5000 ---p 00003000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15be0a5000-7f15be0a6000 r--p 00002000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15be0a6000-7f15be0a7000 rw-p 00003000 fe:01 664855 /usr/lib64/freeradius/rlm_linelog.so 7f15be0a7000-7f15be0aa000 r-xp 00000000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be0aa000-7f15be2a9000 ---p 00003000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be2a9000-7f15be2aa000 r--p 00002000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be2aa000-7f15be2ab000 rw-p 00003000 fe:01 664852 /usr/lib64/freeradius/rlm_files.so 7f15be2ab000-7f15be2ad000 r-xp 00000000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be2ad000-7f15be4ac000 ---p 00002000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be4ac000-7f15be4ad000 r--p 00001000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be4ad000-7f15be4ae000 rw-p 00002000 fe:01 665163 /usr/lib64/freeradius/rlm_soh.so 7f15be4ae000-7f15be4b0000 r-xp 00000000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be4b0000-7f15be6af000 ---p 00002000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be6af000-7f15be6b0000 r--p 00001000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be6b0000-7f15be6b1000 rw-p 00002000 fe:01 664651 /usr/lib64/freeradius/rlm_always.so 7f15be6b1000-7f15be6bc000 r-xp 00000000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be6bc000-7f15be8bb000 ---p 0000b000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be8bb000-7f15be8bc000 r--p 0000a000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be8bc000-7f15be8bd000 rw-p 0000b000 fe:01 665152 /usr/lib64/freeradius/rlm_eap.so 7f15be8bd000-7f15be8bf000 r-xp 00000000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15be8bf000-7f15beabe000 ---p 00002000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15beabe000-7f15beabf000 r--p 00001000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15beabf000-7f15beac0000 rw-p 00002000 fe:01 665151 /usr/lib64/freeradius/rlm_dynamic_clients.so 7f15beac0000-7f15beda6000 r-xp 00000000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15beda6000-7f15befa6000 ---p 002e6000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15befa6000-7f15befad000 r--p 002e6000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15befad000-7f15bf013000 rw-p 002ed000 fe:01 154715 /usr/lib64/libmysqlclient.so.18.0.0 7f15bf013000-7f15bf01c000 rw-p 00000000 00:00 0 7f15bf01c000-7f15bf020000 r-xp 00000000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf020000-7f15bf21f000 ---p 00004000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf21f000-7f15bf220000 r--p 00003000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf220000-7f15bf221000 rw-p 00004000 fe:01 664873 /usr/lib64/freeradius/rlm_sql_mysql.so 7f15bf221000-7f15bf22c000 r-xp 00000000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf22c000-7f15bf42c000 ---p 0000b000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf42c000-7f15bf42d000 r--p 0000b000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf42d000-7f15bf42e000 rw-p 0000c000 fe:01 664869 /usr/lib64/freeradius/rlm_sql.so 7f15bf42e000-7f15bf432000 r-xp 00000000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf432000-7f15bf631000 ---p 00004000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf631000-7f15bf632000 r--p 00003000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf632000-7f15bf633000 rw-p 00004000 fe:01 664865 /usr/lib64/freeradius/rlm_radutmp.so 7f15bf633000-7f15bf72f000 r-xp 00000000 fe:01 524309 /lib64/libm-2.22.so 7f15bf72f000-7f15bf92e000 ---p 000fc000 fe:01 524309 /lib64/libm-2.22.so 7f15bf92e000-7f15bf92f000 r--p 000fb000 fe:01 524309 /lib64/libm-2.22.so 7f15bf92f000-7f15bf930000 rw-p 000fc000 fe:01 524309 /lib64/libm-2.22.so 7f15bf930000-7f15bf976000 r-xp 00000000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bf976000-7f15bfb75000 ---p 00046000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bfb75000-7f15bfb76000 r--p 00045000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bfb76000-7f15bfb77000 rw-p 00046000 fe:01 524349 /lib64/libdbus-1.so.3.8.14 7f15bfb77000-7f15bfb93000 r-xp 00000000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfb93000-7f15bfd92000 ---p 0001c000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfd92000-7f15bfd94000 r--p 0001b000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfd94000-7f15bfd95000 rw-p 0001d000 fe:01 134593 /usr/lib64/libnl-3.so.200.18.0 7f15bfd95000-7f15bfd9a000 r-xp 00000000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bfd9a000-7f15bff9a000 ---p 00005000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bff9a000-7f15bff9b000 r--p 00005000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bff9b000-7f15bff9c000 rw-p 00006000 fe:01 134597 /usr/lib64/libnl-genl-3.so.200.18.0 7f15bff9c000-7f15bffb1000 r-xp 00000000 fe:01 524345 /lib64/libz.so.1.2.8 7f15bffb1000-7f15c01b0000 ---p 00015000 fe:01 524345 /lib64/libz.so.1.2.8 7f15c01b0000-7f15c01b1000 r--p 00014000 fe:01 524345 /lib64/libz.so.1.2.8 7f15c01b1000-7f15c01b2000 rw-p 00015000 fe:01 524345 /lib64/libz.so.1.2.8 7f15c01b2000-7f15c01f5000 r-xp 00000000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c01f5000-7f15c03f4000 ---p 00043000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c03f4000-7f15c03f6000 r--p 00042000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c03f6000-7f15c03f7000 rw-p 00044000 fe:01 135444 /usr/lib64/libpcap.so.1.8.1 7f15c03f7000-7f15c0590000 r-xp 00000000 fe:01 524301 /lib64/libc-2.22.so 7f15c0590000-7f15c0790000 ---p 00199000 fe:01 524301 /lib64/libc-2.22.so 7f15c0790000-7f15c0794000 r--p 00199000 fe:01 524301 /lib64/libc-2.22.so 7f15c0794000-7f15c0796000 rw-p 0019d000 fe:01 524301 /lib64/libc-2.22.so 7f15c0796000-7f15c079a000 rw-p 00000000 00:00 0 7f15c079a000-7f15c07a5000 r-xp 00000000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c07a5000-7f15c09a5000 ---p 0000b000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c09a5000-7f15c09a6000 r--p 0000b000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c09a6000-7f15c09a7000 rw-p 0000c000 fe:01 524305 /lib64/libcrypt-2.22.so 7f15c09a7000-7f15c09d5000 rw-p 00000000 00:00 0 7f15c09d5000-7f15c09ed000 r-xp 00000000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c09ed000-7f15c0bec000 ---p 00018000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c0bec000-7f15c0bed000 r--p 00017000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c0bed000-7f15c0bee000 rw-p 00018000 fe:01 524331 /lib64/libpthread-2.22.so 7f15c0bee000-7f15c0bf2000 rw-p 00000000 00:00 0 7f15c0bf2000-7f15c0bf4000 r-xp 00000000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0bf4000-7f15c0df4000 ---p 00002000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0df4000-7f15c0df5000 r--p 00002000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0df5000-7f15c0df6000 rw-p 00003000 fe:01 524307 /lib64/libdl-2.22.so 7f15c0df6000-7f15c0e0a000 r-xp 00000000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c0e0a000-7f15c1009000 ---p 00014000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c1009000-7f15c100a000 r--p 00013000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c100a000-7f15c100b000 rw-p 00014000 fe:01 524333 /lib64/libresolv-2.22.so 7f15c100b000-7f15c100d000 rw-p 00000000 00:00 0 7f15c100d000-7f15c1022000 r-xp 00000000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1022000-7f15c1221000 ---p 00015000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1221000-7f15c1222000 r--p 00014000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1222000-7f15c1223000 rw-p 00015000 fe:01 524313 /lib64/libnsl-2.22.so 7f15c1223000-7f15c1225000 rw-p 00000000 00:00 0 7f15c1225000-7f15c1235000 r-xp 00000000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1235000-7f15c1434000 ---p 00010000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1434000-7f15c1435000 r--p 0000f000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1435000-7f15c1436000 rw-p 00010000 fe:01 160961 /usr/lib64/libtalloc.so.2.1.6 7f15c1436000-7f15c1497000 r-xp 00000000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c1497000-7f15c1697000 ---p 00061000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c1697000-7f15c169b000 r--p 00061000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c169b000-7f15c16a2000 rw-p 00065000 fe:01 524364 /lib64/libssl.so.1.0.0 7f15c16a2000-7f15c18d1000 r-xp 00000000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c18d1000-7f15c1ad1000 ---p 0022f000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c1ad1000-7f15c1aec000 r--p 0022f000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c1aec000-7f15c1afa000 rw-p 0024a000 fe:01 524363 /lib64/libcrypto.so.1.0.0 7f15c1afa000-7f15c1afe000 rw-p 00000000 00:00 0 7f15c1afe000-7f15c1b0b000 r-xp 00000000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1b0b000-7f15c1d0a000 ---p 0000d000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1d0a000-7f15c1d0b000 r--p 0000c000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1d0b000-7f15c1d0c000 rw-p 0000d000 fe:01 664922 /usr/lib64/freeradius/libfreeradius-eap.so 7f15c1d0c000-7f15c1d52000 r-xp 00000000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1d52000-7f15c1f51000 ---p 00046000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1f51000-7f15c1f52000 r--p 00045000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1f52000-7f15c1f53000 rw-p 00046000 fe:01 664899 /usr/lib64/freeradius/libfreeradius-radius.so 7f15c1f53000-7f15c1f55000 rw-p 00000000 00:00 0 7f15c1f55000-7f15c1f8d000 r-xp 00000000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c1f8d000-7f15c218d000 ---p 00038000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c218d000-7f15c218e000 r--p 00038000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c218e000-7f15c218f000 rw-p 00039000 fe:01 664902 /usr/lib64/freeradius/libfreeradius-server.so 7f15c218f000-7f15c21b0000 r-xp 00000000 fe:01 524293 /lib64/ld-2.22.so 7f15c2395000-7f15c239e000 rw-p 00000000 00:00 0 7f15c23ac000-7f15c23af000 rw-p 00000000 00:00 0 7f15c23af000-7f15c23b0000 r--p 00020000 fe:01 524293 /lib64/ld-2.22.so 7f15c23b0000-7f15c23b1000 rw-p 00021000 fe:01 524293 /lib64/ld-2.22.so 7f15c23b1000-7f15c23b2000 rw-p 00000000 00:00 0 7ffc1530f000-7ffc15330000 rw-p 00000000 00:00 0 [stack] 7ffc15343000-7ffc15345000 r--p 00000000 00:00 0 [vvar] 7ffc15345000-7ffc15347000 r-xp 00000000 00:00 0 [vdso] ffffffffff600000-ffffffffff601000 r-xp 00000000 00:00 0 [vsyscall] Aborted -- Best regards, Anton Kiryushkin

3 12

unlang, variable and SQL (freeradius 3.0.15)
by petr.linke＠seznam.cz 03 Oct '17

03 Oct '17

Hi, I try to store result from SQL into local variable to eliminate running same queries at time. I prepare following scenario: 1/ define new attribute (will be used for store the result from SQL) in the dictionary, attribute type is string (e.g. ATTRIBUTE SQLRESULT 3000 string) 2/ in inner tunnel post-auth section: update control { &SQLRESULT = "%{sql::SELECT count(*) from some_table where .. .}" } if ( %{integer:SQLRESULT} == some_value ) { ... } elsif ( %{integer:SQLRESULT} == other_value ) { ... } in debug I can see, that the SQL return some value, and the value is filled into attribute &SQLRESULT, but afterwards condition do not match (attribute has no value) (10) EXPAND %{sql:SELECT count(*) from table where username = '% {User-Name}' ... (10) --> 2 (10) &SQLRESULT = 2 (10) } # update control = noop (10) if ("%{integer:SQLRESULT}" == 2) { (10) EXPAND %{integer:SQLRESULT} (10) --> (10) if ("%{integer:SQLRESULT}" == 2) -> FALSE Maybe I do not fully understand unlang. Is possible to store the result from SQL in some variable, and afterward use this variable in some conditions? Thank you for any suggestion, Petr Linke

2 3

Class attribute in Reply message
by Umut Arus 03 Oct '17

03 Oct '17

Hello, I need to reply an deniedServices ldap variable in Class attribute for a controller. I added it "replyItem Class deniedServices +=" at ldap.attrmap file. and sites-available/default file includes it. But it override the Class value to empty. update reply { Class += "%{Reply-Message}" } Where it is wrong? FreeRADIUS Version 2.2.8 Output parts are: [peap] Setting User-Name to tayfund Sending tunneled request EAP-Message = 0x020900421a0209003d3167738a93d83ed76e5251bbbaa183542f0000000000000000008955f2389888dbc3771d940bc5c9ade688b2ec3b08e4f80074617966756e64 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "tayfund" State = 0xb024cc1cb02dd66832d4a5f6f46a2d5f NAS-IP-Address = 10.200.0.2 NAS-Port = 0 NAS-Identifier = "10.200.0.5" NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "748D08E39D7F" Called-Station-Id = "001A1E0015F0" Service-Type = Framed-User Framed-MTU = 1100 Aruba-Essid-Name = "SABANCIUNIV" Aruba-Location-Id = "BM_IT_NETSYS_7b:fe" Aruba-AP-Group = "BM_binasi" Aruba-Device-Type = "iPhone" server inner-tunnel { # Executing section authorize from file /etc/freeradius/sites-enabled/inner-tunnel +group authorize { ++[mschap] = noop [suffix] No '@' in User-Name = "tayfund", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] EAP packet type response id 9 length 66 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] = updated [ldap] performing user authorization for tayfund [ldap] expand: (uid=%{mschap:User-Name:-%{User-Name}}) -> (uid=tayfund) [ldap] expand: o=sabanciuniv.edu -> o=sabanciuniv.edu [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] performing search in o=sabanciuniv.edu, with filter (uid=tayfund) [ldap] Added User-Password = 5F479EB90623041F464CD3F4B685C80A in check items [ldap] No default NMAS login sequence [ldap] looking for check items in directory... [ldap] userPassword -> Password-With-Header == "{SSHA}wM3CoVk5jYLVnHz8jyv6vHBlqv52bw==" [ldap] sambaNtPassword -> NT-Password == 0x3546343739454239303632333034314634363443443346344236383543383041 [ldap] sambaLmPassword -> LM-Password == 0x3836413243354632393945434139444343313745393630323543414633314130 [ldap] radiusAuthType -> Auth-Type == EAP [ldap] looking for reply items in directory... * [ldap] deniedServices -> Class += 0x7375636f75727365* [ldap] ou -> Operator-Name = "admin" [ldap] ou -> Operator-Name = "IT" [ldap] ldap_release_conn: Release Id: 0 ++[ldap] = ok +} # group authorize = updated Found Auth-Type = EAP !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Replacing User-Password in config items with Cleartext-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! !!! Please update your configuration so that the "known good" !!! !!! clear text password is in Cleartext-Password, and not in User-Password. !!! !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!! # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel +group authenticate { [eap] Request found, released from the list [eap] EAP/mschapv2 [eap] processing type mschapv2 [mschapv2] # Executing group from file /etc/freeradius/sites-enabled/inner-tunnel [mschapv2] +group MS-CHAP { [mschap] Found LM-Password [mschap] Found NT-Password [mschap] Creating challenge hash with username: tayfund [mschap] Client is using MS-CHAPv2 for tayfund, we need NT-Password [mschap] adding MS-CHAPv2 MPPE keys ++[mschap] = ok ++update outer.request { expand: %{User-Name} -> tayfund ++} # update outer.request = noop ++update outer.reply { expand: %{User-Name} -> tayfund ++} # update outer.reply = noop +} # group MS-CHAP = ok MSCHAP Success ++[eap] = handled +} # group authenticate = handled } # server inner-tunnel [peap] Got tunneled reply code 11 Class += 0x7375636f75727365 Operator-Name = "admin" EAP-Message = 0x010a00331a0309002e533d38384136303239324543424441413244303139424145343031363537393336353637364246453633 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xb024cc1cb12ed66832d4a5f6f46a2d5f [peap] Got tunneled reply RADIUS code Access-Challenge * Class += 0x7375636f75727365* Operator-Name = "admin" EAP-Message = 0x010a00331a0309002e533d38384136303239324543424441413244303139424145343031363537393336353637364246453633 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xb024cc1cb12ed66832d4a5f6f46a2d5f [peap] Got tunneled Access-Challenge [peap] >>> Unknown TLS version [length 0005] ++[eap] = handled +} # group authenticate = handled Going to the next request rad_recv: Access-Request packet from host 10.200.0.5 port 52530, id=108, length=259 User-Name = "tayfund" NAS-IP-Address = 10.200.0.2 NAS-Port = 0 NAS-Identifier = "10.200.0.5" NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "748D08E39D7F" Called-Station-Id = "001A1E0015F0" Service-Type = Framed-User Framed-MTU = 1100 EAP-Message = 0x020b002e190017030300239b010c14db2db49adb4087eaadbbbcf3628daf65188a552fdc7d8fbeb850ded62316e3 State = 0x0f5a59a0065140db3a8c7af8ad4bf4cc Aruba-Essid-Name = "SABANCIUNIV" Aruba-Location-Id = "BM_IT_NETSYS_7b:fe" Aruba-AP-Group = "BM_binasi" Aruba-Device-Type = "iPhone" Message-Authenticator = 0xa1cfe667210437f5f5eaf132bf431a90 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] No '@' in User-Name = "tayfund", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] EAP packet type response id 11 length 46 [eap] Continuing tunnel setup. ++[eap] = ok +} # group authorize = ok Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/default +group authenticate { [eap] Request found, released from the list [eap] EAP/peap [eap] processing type peap [peap] processing EAP-TLS [peap] eaptls_verify returned 7 [peap] Done initial handshake [peap] <<< Unknown TLS version [length 0005] [peap] eaptls_process returned 7 [peap] EAPTLS_OK [peap] Session established. Decoding tunneled attributes. [peap] Peap state send tlv success [peap] Received EAP-TLV response. [peap] Success [eap] Freeing handler ++[eap] = ok +} # group authenticate = ok Login OK: [tayfund] (from client 10.200.0.0/24 port 0 cli 748D08E39D7F) # Executing section post-auth from file /etc/freeradius/sites-enabled/default +group post-auth { [reply_log] expand: %{Packet-Src-IP-Address} -> 10.200.0.5 [reply_log] expand: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/10.200.0.5/reply-detail-20171003 [reply_log] /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/10.200.0.5/reply-detail-20171003 [reply_log] expand: %t -> Tue Oct 3 12:06:11 2017 ++[reply_log] = ok ++[ldap] = noop ++[exec] = noop ++update reply { expand: %{Reply-Message} -> ++} # update reply = noop +} # group post-auth = ok Sending Access-Accept of id 108 to 10.200.0.5 port 52530 MS-MPPE-Recv-Key = 0xfc792d0aa5a1ff4c6e90676c80c47b799958fb603caf17dc11b68eeb182f922f MS-MPPE-Send-Key = 0x00176d351e6d75e96c0429fefa871f38022b851e2a897921fbc2ab0cc891ee5b EAP-Message = 0x030b0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "tayfund" Class = 0x Finished request 785. Going to the next request Cleaning up request 596 ID 154 with timestamp +11 Waking up in 0.1 seconds. rad_recv: Access-Request packet from host 10.200.0.5 port 52530, id=101, length=211 User-Name = "dbostan" NAS-IP-Address = 10.200.0.2 NAS-Port = 0 NAS-Identifier = "10.200.0.5" NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "E0C767163B2F" Called-Station-Id = "001A1E0015F0" Service-Type = Framed-User Framed-MTU = 1100 EAP-Message = 0x020500061900 State = 0xf8fdecb8fbf8f57eaba961c2ded7fb6f Aruba-Essid-Name = "SABANCIUNIV" Aruba-Location-Id = "Yurt_A5_Kat1_AP4_60:6c" Aruba-AP-Group = "Yurt_Binasi" Message-Authenticator = 0xb071cd65a32ccfd350f5f7349f570df5 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] No '@' in User-Name = "dbostan", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [reply_log] expand: %{Packet-Src-IP-Address} -> 10.200.0.5 [reply_log] expand: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d -> /var/log/freeradius/radacct/10.200.0.5/reply-detail-20171003 [reply_log] /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/reply-detail-%Y%m%d expands to /var/log/freeradius/radacct/10.200.0.5/reply-detail-20171003 [reply_log] expand: %t -> Tue Oct 3 12:06:11 2017 ++[reply_log] = ok ++[ldap] = noop ++[exec] = noop ++update reply { * expand: %{Reply-Message} -> * ++} # update reply = noop +} # group post-auth = ok Sending Access-Accept of id 108 to 10.200.0.5 port 52530 MS-MPPE-Recv-Key = 0xfc792d0aa5a1ff4c6e90676c80c47b799958fb603caf17dc11b68eeb182f922f MS-MPPE-Send-Key = 0x00176d351e6d75e96c0429fefa871f38022b851e2a897921fbc2ab0cc891ee5b EAP-Message = 0x030b0004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "tayfund" * Class = 0x* Finished request 785. Going to the next request Cleaning up request 596 ID 154 with timestamp +11 Waking up in 0.1 seconds. rad_recv: Access-Request packet from host 10.200.0.5 port 52530, id=101, length=211 User-Name = "dbostan" NAS-IP-Address = 10.200.0.2 NAS-Port = 0 NAS-Identifier = "10.200.0.5" NAS-Port-Type = Wireless-802.11 Calling-Station-Id = "E0C767163B2F" Called-Station-Id = "001A1E0015F0" Service-Type = Framed-User Framed-MTU = 1100 EAP-Message = 0x020500061900 State = 0xf8fdecb8fbf8f57eaba961c2ded7fb6f Aruba-Essid-Name = "SABANCIUNIV" Aruba-Location-Id = "Yurt_A5_Kat1_AP4_60:6c" Aruba-AP-Group = "Yurt_Binasi" Message-Authenticator = 0xb071cd65a32ccfd350f5f7349f570df5 # Executing section authorize from file /etc/freeradius/sites-enabled/default +group authorize { ++[preprocess] = ok ++[chap] = noop ++[mschap] = noop ++[digest] = noop [suffix] No '@' in User-Name = "dbostan", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] = noop [eap] EAP packet type response id 5 length 6 [eap] Continuing tunnel setup. ++[eap] = ok +} # group authorize = ok Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/default +group authenticate { [eap] Request found, released from the list [eap] EAP/peap [eap] processing type peap [peap] processing EAP-TLS [peap] Received TLS ACK [peap] ACK handshake fragment handler [peap] eaptls_verify returned 1 [peap] eaptls_process returned 13 [peap] EAPTLS_HANDLED ++[eap] = handled +} # group authenticate = handled Sending Access-Challenge of id 101 to 10.200.0.5 port 52530 EAP-Message = 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 EAP-Message = 0x55b131ca32435839495c0a854ab8507fdf5c7a420c64e3f205ef607f2df152265f4544b6b1a5673e05417a38f1e10b63c28438bda216249aff502a43efc8a154ce646da60df5da11d182a059f010c082389b4ad9f901113c159cfd4a0653583ea745983ba8ef9aae665699c04d3a9b642a33ba7bdb9d8960948823747e88e115f41d2114d4cb5f63aec906b7c53c45fb117bccf41276015597025d295aed742520a5bfd019b54e91c4986655fee8f7832ac166433b1f9897eb02f307bae930dc01b8cd0edd0d526d8bd201a8b416030100040e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf8fdecb8fcfbf57eaba961c2ded7fb6f Finished request 786. thanks.. -- *Umut A* System Specialist Information Technology Sabancı University

2 1

Cannot use syslog
by Olivier 03 Oct '17

03 Oct '17

Hi, One last question. I would like to use syslog to log the activity of FreeRadius 3.0.15. My radius server is running chrooted and nothing shows in syslog despite I add a rule to log *.* in /var/log/all in syslog configuration. How FreeRadius is accessing syslog? Through the Unix socket (and then I need it in the chroot environment) of through the network stack? The server is FreeBSD. Thanks in advance, olivier --

2 3

Re: EAP request to FreeRADIUS 3 server backed by MariaDB has empty password
by Oliver Webb 02 Oct '17

02 Oct '17

Alan, I have now used your example to create a new version of "req.txt" and it is indeed now working: User-Name = "tu" Cleartext-Password = "testp2" NAS-IP-Address = 192.168.1.106 EAP-Code = Response EAP-Id = 210 EAP-Type-Identity = "tu" Message-Authenticator = 0 NAS-Port = 0 Thank you so much for your help. Kindest regards, Oliver

1 0

EAP request to FreeRADIUS 3 server backed by MariaDB has empty password
by Oliver Webb 02 Oct '17

02 Oct '17

Dear all, Apologies for the double email, I understand you have no obligation to help me, but I am struggling here. Last week I asked here about the following ServerFault question, I was kindly offered help but we were not able to resolve the issue. https://serverfault.com/q/871802/292782 I have included details and debug outputs in the linked question, if you need any more details I will happily gather them. I wonder if anyone would have the time to take a closer look in the hope that this can be resolved. Thank you, Oliver

2 4

cucm and ip phones
by Vacheslav 02 Oct '17

02 Oct '17

Peace, I configured my ip phones to use mab, but I read that with Radius it is possible to authenticate capable ip phones with tls. I searched the internet on how to do it but found almost nothing. Should I import the created self signed certificates from the freeradius server to the cucm? Or is that I have to export the cucm certificates to the cert directory of the freeradius server? Anyone has experience in configuring cucm with dot1x?

3 7

Configuring Authentication with Active Directory and TLS
by Tom Yard 02 Oct '17

02 Oct '17

Dear, finally I could put in work my Freeradius server following the "Configuring Authentication with Active Directory" tutorial from Alan Dekok, using NTLM_AUTH for MS-CHAP. But now I have the following question: in order to create a secure TLS channel to authenticate WiFi users with a valid TLS certificate, is the use of EAP mechanism and inner-tunnel file the right way for this ??? Special thanks, Tom Yard

2 1