- Freeradius-Users - lists.freeradius.org

Starting freeradius with ip/port options only works in debug mode?
by Vivek Mehrotra 13 Mar '12

13 Mar '12

Hello, When I wish to give IP/Port options to start radiusd, I cannot get it started in non-debug mode. Any idea why? Looks like certain configuration happens the very first time after which I can re-start in non-debug mode. Thanks in advance, vivek

1 0

How to reject users who don't match unlang
by Scott McLane Gardner 13 Mar '12

13 Mar '12

I have the following in my sites-available/default: authorize { ... # Allow only NET Staff members to log into BAND and HAPF if (Ldap-Group == "NET Staff" && (NAS-IP-Address == "192.168.6.5" || NAS-IP-Address == "192.168.6.4")) { update reply { Passport-Access-Priority = 6 } } # Reject everyone else elsif (NAS-IP-Address == "192.168.6.5" || NAS-IP-Address == "192.168.6.4") { reject = 1 } ... What I want is to only allow NET Staff members to log in and reject everyone else who tries to log into these resources. I'm getting the following in my log: Tue Mar 13 12:55:32 2012 : Info: ++? elsif (NAS-IP-Address == "192.168.6.5" || NAS-IP-Address == "192.168.6.4") -> TRUE Tue Mar 13 12:55:32 2012 : Info: ++- entering elsif (NAS-IP-Address == "192.168.6.5" || NAS-IP-Address == "192.168.6.4") {...} Tue Mar 13 12:55:32 2012 : Info: +++- elsif (NAS-IP-Address == "192.168.6.5" || NAS-IP-Address == "192.168.6.4") returns notfound Tue Mar 13 12:55:32 2012 : Info: ++- group authorize returns notfound What is the correct syntax to reject this way?

2 4

freeradius packages for RedHat Entreprise 6?
by Mohamed Lrhazi 13 Mar '12

13 Mar '12

Does anyone know why I can't find freeradius or freeradius2 rpms for RedHat Entreprise 6.x? Googling I found a document that seems to indicate they do have such rpms: http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Techn… But I cant seem to locate them in the normal channel! Thanks a lot, Mohamed.

2 1

[SOLVED] RE: Centos 6 Compile error
by David Peterson 13 Mar '12

13 Mar '12

Thanks for the expert advices guys! That worked like a charm. David -----Original Message----- From: freeradius-users-bounces+davidp=wirelessconnections.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org] On Behalf Of David Peterson Sent: Tuesday, March 13, 2012 8:01 AM To: FreeRadius users mailing list Subject: RE: Centos 6 Compile error I am checking out the master, should I be using something earlier? David -----Original Message----- From: Fajar A. Nugraha [mailto:list@fajar.net] Sent: Tuesday, March 13, 2012 7:21 AM To: David Peterson-WirelessConnections; FreeRadius users mailing list Subject: Re: Centos 6 Compile error On Tue, Mar 13, 2012 at 6:12 PM, David Peterson <davidp(a)wirelessconnections.net> wrote: > Has anyone seen this error? I am not sure what might be missing: > > In file included from rlm_eap_pwd.h:37, > from rlm_eap_pwd.c:39: > eap_pwd.h:42:24: error: openssl/ec.h: No such file or directory You didn't mention which version you're compiling. 2.1.12 compiles just fine. Anyway, I'd start on that last line. You're probably missing openssl-devel or something similar (try "yum provides */ec.h") -- Fajar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Centos 6 Compile error
by David Peterson 13 Mar '12

13 Mar '12

Has anyone seen this error? I am not sure what might be missing: In file included from rlm_eap_pwd.h:37, from rlm_eap_pwd.c:39: eap_pwd.h:42:24: error: openssl/ec.h: No such file or directory In file included from rlm_eap_pwd.h:37, from rlm_eap_pwd.c:39: eap_pwd.h:93: error: expected specifier-qualifier-list before 'EC_GROUP' rlm_eap_pwd.c: In function 'free_session': rlm_eap_pwd.c:143: error: 'pwd_session_t' has no member named 'private_value' rlm_eap_pwd.c:144: error: 'pwd_session_t' has no member named 'peer_scalar' rlm_eap_pwd.c:145: error: 'pwd_session_t' has no member named 'my_scalar' rlm_eap_pwd.c:146: error: 'pwd_session_t' has no member named 'k' rlm_eap_pwd.c:147: warning: implicit declaration of function 'EC_POINT_free' rlm_eap_pwd.c:147: warning: nested extern declaration of 'EC_POINT_free' rlm_eap_pwd.c:147: error: 'pwd_session_t' has no member named 'my_element' rlm_eap_pwd.c:148: error: 'pwd_session_t' has no member named 'peer_element' rlm_eap_pwd.c:149: warning: implicit declaration of function 'EC_GROUP_free' rlm_eap_pwd.c:149: warning: nested extern declaration of 'EC_GROUP_free' rlm_eap_pwd.c:149: error: 'pwd_session_t' has no member named 'group' rlm_eap_pwd.c:150: error: 'pwd_session_t' has no member named 'pwe' rlm_eap_pwd.c:151: error: 'pwd_session_t' has no member named 'order' rlm_eap_pwd.c:152: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c: In function 'eap_pwd_initiate': rlm_eap_pwd.c:245: error: 'pwd_session_t' has no member named 'private_value' rlm_eap_pwd.c:246: error: 'pwd_session_t' has no member named 'peer_scalar' rlm_eap_pwd.c:247: error: 'pwd_session_t' has no member named 'my_scalar' rlm_eap_pwd.c:248: error: 'pwd_session_t' has no member named 'k' rlm_eap_pwd.c:249: error: 'pwd_session_t' has no member named 'my_element' rlm_eap_pwd.c:250: error: 'pwd_session_t' has no member named 'peer_element' rlm_eap_pwd.c:251: error: 'pwd_session_t' has no member named 'group' rlm_eap_pwd.c:252: error: 'pwd_session_t' has no member named 'pwe' rlm_eap_pwd.c:253: error: 'pwd_session_t' has no member named 'order' rlm_eap_pwd.c:254: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c:294: warning: pointer targets in passing argument 1 of 'strcpy' differ in signedness /usr/include/string.h:128: note: expected 'char * __restrict__' but argument is of type 'unsigned char *' rlm_eap_pwd.c: In function 'eap_pwd_authenticate': rlm_eap_pwd.c:436: warning: pointer targets in passing argument 2 of '__builtin_strncpy' differ in signedness rlm_eap_pwd.c:436: note: expected 'const char *' but argument is of type 'unsigned char *' rlm_eap_pwd.c:525: warning: implicit declaration of function 'EC_POINT_get_affine_coordinates_GFp' rlm_eap_pwd.c:525: warning: nested extern declaration of 'EC_POINT_get_affine_coordinates_GFp' rlm_eap_pwd.c:525: error: 'pwd_session_t' has no member named 'group' rlm_eap_pwd.c:526: error: 'pwd_session_t' has no member named 'my_element' rlm_eap_pwd.c:536: error: 'pwd_session_t' has no member named 'order' rlm_eap_pwd.c:537: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c:545: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c:548: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c:549: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c:552: error: 'pwd_session_t' has no member named 'prime' rlm_eap_pwd.c:553: error: 'pwd_session_t' has no member named 'order' rlm_eap_pwd.c:553: error: 'pwd_session_t' has no member named 'my_scalar' rlm_eap_pwd.c:554: error: 'pwd_session_t' has no member named 'my_scalar' rlm_eap_pwd.c:575: error: 'pwd_session_t' has no member named 'my_confirm' rlm_eap_pwd.c:588: error: 'pwd_session_t' has no member named 'my_confirm' gmake[9]: *** [rlm_eap_pwd.lo] Error 1 gmake[8]: *** [rlm_eap_pwd] Error 2 gmake[7]: *** [all] Error 2 gmake[6]: *** [types] Error 2 gmake[5]: *** [rlm_eap] Error 2 gmake[4]: *** [all] Error 2 gmake[3]: *** [modules] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [src] Error 2 make: *** [all] Error 2 David

4 5

Conditional attributes with AD
by Scott McLane Gardner 13 Mar '12

13 Mar '12

I've successfully gotten AD auth working, and now I'd like to be able to assign VLAN's based on group membership, but I'm having a hard time figuring out where and how to do that. Where do I put the "if" statements to check group membership? Does AD auth even work like this, or do I need to be using LDAP auth? Thank you, -Scott

5 14

Re: Freeradius crashes everyday
by Morteza Milani 13 Mar '12

13 Mar '12

@Tim et al: Actually running radius -X is not possible because It generates a lot of output and I don't know when it goes into sleep. It may take a day or more. Can you read that long log?!! @Phil I'm using 2.1.11 according to VERSION file. Is that too old? Yes I use mysql for accounting. But mysql works just fine. I don't know how to use that tools you mentioned. May I ask you for a good guide/tutorial link on how to use them? > Which version are you running? > What sort of config do you have - do you do any proxying? SQL? LDAP? > As others have said, you should run it in debug mode - "radiusd -X" and > see what happens. However, you may find this generates a lot out output > before it stops working, so investigate other tools to inspect the > "sleeping" daemon - gdb, strace, etc. > > I'm betting you're running an older version with bugs in it. 2.1.12 is > the latest.

3 2

[pap] Found unknown header {{MD4}}: Not doing anything
by Mohamed Lrhazi 13 Mar '12

13 Mar '12

Hello, My LDAP server has the passwords stored in MD4 encoded format, which I am suspecting is the same as NT format... Is there a way to tell freeradius to treat {MD4} as it it was {NT} ? I am using: radiusd: FreeRADIUS Version 2.1.12, for host x86_64-redhat-linux-gnu, built on Jan 5 2012 at 18:31:23 Thanks a lot, Mohamed.

2 2

Freeradius crashes everyday
by Morteza Milani 13 Mar '12

13 Mar '12

Hi, I don't know what's wrong with freeradius. It's running but does not handle authentication requests. After restarting, it works fine but after a while it goes to sleep;) Does freeradius log details somewhere to see what happens?

4 3

Add Users in MySQL database
by Fabricio Flores 12 Mar '12

12 Mar '12

Hi everyone... I have a little problem... I want to add users in the MySQL database, but before everything (before AAA) what module i need to edit o configuring to add a script that manage the mysql? -- Fabricio A. Flores G.

1 0