August 2019 - Freeradius-Users - lists.freeradius.org

mysql driver for freeradius 4.x
by Prem Khanal 05 Aug '19

05 Aug '19

Hi Team, I have a server running freeradius 3.016 as proxy and it is working perfectly. I would like to migrate to freeradius version 4.x . I have installed free radius 4.x version from the source at ( https://github.com/pwdng/freeradius-server ) . It runs fine without mysql enabled. I tried to change the configuration to use mysql but I am getting the error message *"Failed to link to module "rlm_sql_mysql": /usr/local/lib/rlm_sql_mysql.so: cannot open shared object file: No such file or directory"* >From the error message I can see that freeradius mysql driver needs to be installed. But I couldn't find the source/or executable for mysql driver for freeradius version 4.x. It would be great if I could get some help regarding this. -- Regards Prem

2 1

freeRadius fails to authenticate the users
by Niloofar Toorchi 02 Aug '19

02 Aug '19

Hi All, We are using freeRadius to authenticate 16 supplicants. The early ones get authorized but the last 3 or 4 ones get rejected corresponding the following logs in freeRadius: Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/default +group authenticate { rlm_eap: No EAP session matching the State variable. [eap] Either EAP-request timed out OR EAP-response to an unknown EAP-request [eap] Failed in handler ++[eap] = invalid +} # group authenticate = invalid Failed to authenticate the user. Login incorrect: [user] (from client 0.0.0.0/0 port 0) Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +group REJECT { rlm_eap: No EAP session matching the State variable. [eap] Either EAP-request timed out OR EAP-response to an unknown EAP-request [eap] Failed to get handler, probably already removed, not inserting EAP-Failure ++[eap] = noop [attr_filter.access_reject] expand: %{User-Name} -> user attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] = updated +} # group REJECT = updated Delaying reject of request 26 for 1 seconds Can any one help me to tackle this problem? Thanks, Niloofar

2 3

Freeradius w/ FreeIPA and DUO 2FA
by Andrew Meyer 02 Aug '19

02 Aug '19

Apologizing for starting a new thread I had messages turned off for a while. But this continues from the previous emails I sent. I have successfully gotten FreeRADIUS to work with LDAP and am working on the kerberos portion. Will these need to be configured together? When I go to configure the users would I change the Auth-Type := to krb5 instead of LDAP? Thanks! Andrew M.

2 5

Radacct looping insertion
by juliana sales porto 01 Aug '19

01 Aug '19

Hello my name is juliana I am developer from Brazil and I work with a hotspot system connecting in a freeradius database. We are facing problems with pfsense and freeradius. When we configure on pfsense to insert the users connection on radacct table there are many insertions from the same user [cid:d92ed80a-860f-4dbc-85ed-a349a0888781] minute by minute the radius is connecting and disconnecting this user. We would like to know how to solve this problem Att, Juliana Porto

2 4

Issue with FreeRadius filling up root
by Sharma, Nitin 01 Aug '19

01 Aug '19

Hello Guys, Radius is generating NULL file under / and it keep growing , seems like accounting logs. Can somebody help me know how can I disable it as it is filling up root space over server. # ls -l /NULL -rw-r--r-- 1 root root 672768 Jul 12 08:26 /NULL We are using freeradius version “3.0.11-2” Any help or suggestion will be highly appreciated. Thanks & Regards, Nitin Sharma

3 4