- Freeradius-Users - lists.freeradius.org

segmentation fault freeradius 2.1.7 using rlm_sql
by Amir Tal 03 Aug '11

03 Aug '11

Hi all, freeRADIUS version 2.1.7 (package freeradius2 on centos 5.6) Radius is configured to store user info (auth) in ldap - running on same machine as freeradius, and use rlm_sql for accounting info (and simultaneous use checks) - running on remote machine. For some unknown reason radiusd keeps getting segmentation faults, every few days and even after several hours of work. Jul 27 04:01:03 RADIUS4 kernel: radiusd[29903]: segfault at 00000000000000c8 rip 00002aef39fb9cfb rsp 00000000456d6170 error 4 Last lines in the radius.log : [sql] expand: UPDATE radacct SET acctstoptime = '%S', acctsessiontime = '%{Acct-Session-Time}', acctinputoctets = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', acctoutputoctets = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', acctterminatecause = '%{Acct-Terminate-Cause}', acctstopdelay = '%{%{Acct-Delay-Time}:-0}', connectinfo_stop = '%{Connect-Info}' WHERE acctsessionid = '%{Acct-Session-Id}' AND username = '%{SQL-User-Name}' AND nasipaddress = '%{NAS-IP-Address}' -> UPDATE radacct SET acctstoptime = '2011-07-27 04:01:03', acctsessiontime = '0', acctinputoctets = '0' << 32 | '0', acctoutputoctets = '0' << 32 | [sql] expand: /var/log/radius/sqltrace.sql -> /var/log/radius/sqltrace.sql rlm_sql (sql): Trying to (re)connect unconnected handle 12.. rlm_sql (sql): Attempting to connect rlm_sql_mysql #12 since configuration files are quite large, I didn't attach complete dump or radius -X , let me know what other info is needed. Regards, Amir Tal.

7 13

Re: Error: User-Name is not the same as MS-CHAP name
by broo0ose＠googlemail.com 03 Aug '11

03 Aug '11

Hi, I seem to have the same issue as described in this thread, I also have XP/Novell legacy clients, and I want to move to AD from eDir. Re: Error: User-Name is not the same as MS-CHAP name<https://lists.freeradius.org/pipermail/freeradius-users/2011-June/msg00070.…> The last mention I can see of this was a few months ago, has anything changed since ? I was wondering if I can work around the issue by using realms to strip the username and then force the domain into the ntlm_auth line in the mschap module. I got some way with this approach but it still seems to wants to create the hash using the DOMAIN/USER which I'm guessing is wrong. Anyway, if there is a fix or workaround I'd be grateful if you could you let me know. Thanks, Bruce

1 0

Disable mysql dbm during freeradius installation
by Vasanth Ragavendran 03 Aug '11

03 Aug '11

Hi I am installing Freeradius and for my scenario i just need to authenticate from local files and there is no need for DBM or mysql or anything. how do i disable them during installation of freeradius. I tried using --disable-rlm-dbm and similar but it din't work out. How do i disable them from installing? Awaiting any help! Many thanks. Thanks and regards R.Vasanth Ragavendran.

4 4

Packet of Disconnect PHP
by mark fennema 03 Aug '11

03 Aug '11

Hello, I'm working on getting a hotspot set up, and I need the ability to have a user log themselves out, so that they can connect on another computer. I have it set up so that the user can enter their information and have it log them out, but it doesn't disconnect them from the router, so they can continue using the internet until they disconnect from the wireless, so I need to send a packet of disconnect. Is there a way to do this in php?

4 3

max users in radius
by ANGEL RICO GUZMAN 02 Aug '11

02 Aug '11

Hello all! I´m a begineer on radius. I will install radius on two systems : windows and linux ( each one in a separate network and different environments ). my question : How many concurrent users can be authenticated on radius? where can I see the radius restrictions ? Is there a academic version of radius? ( I work in an University ) Thanks in advance. Regards.

3 3

coova-chilli + freeradius + kerberos
by Massimiliano Tommasi 02 Aug '11

02 Aug '11

Hi All, is it possible to send the password from coova-chilli(for example) as CHAP or MSCHAPv2 format to authenticate the clients on Kerberos through FreeRADIUS? Is it possible to do it without plain-text password? Let me know, please. Max

2 1

[PATCH] Adding new attributes to the ERX dictionary
by Bjørn Mork 02 Aug '11

02 Aug '11

This should make it compatible with JUNOSe version 12.1.1 and JUNOS version 11.2. Signed-off-by: Bjørn Mork <bjorn(a)mork.no> --- share/dictionary.erx | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-) diff --git a/share/dictionary.erx b/share/dictionary.erx index 93584d2..7b84f0c 100644 --- a/share/dictionary.erx +++ b/share/dictionary.erx @@ -11,6 +11,7 @@ # This dictionary applies to access services on Juniper JUNOS (M/MX) # based platforms as well as JUNOSe, although some of the attributes # have been given new names on JUNOS: +# http://www.juniper.net/techpubs/software/junos/junos112/radius-dictionary/u… # http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aa… # # In this file, we keep the ERX prefix and the JUNOSe attribute names @@ -168,6 +169,7 @@ ATTRIBUTE ERX-MLD-No-Tracking-V1-Grps 105 integer ATTRIBUTE ERX-IPv6-Ingress-Policy-Name 106 string ATTRIBUTE ERX-IPv6-Egress-Policy-Name 107 string ATTRIBUTE ERX-CoS-Shaping-Pmt-Type 108 string +ATTRIBUTE ERX-DHCP-Guided-Relay-Server 109 ipaddr ATTRIBUTE ERX-Acc-Loop-Cir-Id 110 string ATTRIBUTE ERX-Acc-Aggr-Cir-Id-Bin 111 octets @@ -201,7 +203,9 @@ ATTRIBUTE ERX-Max-Clients-Per-Interface 143 integer ATTRIBUTE ERX-PPP-Monitor-Ingress-Only 144 integer ATTRIBUTE ERX-CoS-Scheduler-Pmt-Type 146 string +ATTRIBUTE ERX-Backup-Address-Pool 147 string +ATTRIBUTE ERX-ICR-Partition-Id 150 string ATTRIBUTE ERX-IPv6-Acct-Input-Octets 151 integer ATTRIBUTE ERX-IPv6-Acct-Output-Octets 152 integer ATTRIBUTE ERX-IPv6-Acct-Input-Packets 153 integer @@ -209,6 +213,10 @@ ATTRIBUTE ERX-IPv6-Acct-Output-Packets 154 integer ATTRIBUTE ERX-IPv6-Acct-Input-Gigawords 155 integer ATTRIBUTE ERX-IPv6-Acct-Output-Gigawords 156 integer ATTRIBUTE ERX-IPv6-NdRa-Pool-Name 157 string +ATTRIBUTE ERX-PppoE-Padn 158 string +ATTRIBUTE ERX-Dhcp-Option-82 159 octets +ATTRIBUTE ERX-Vlan-Map-Id 160 integer +ATTRIBUTE ERX-IPv6-Delegated-Pool-Name 161 string # -- 1.7.2.5

3 3

[freeradius+mysql]new field of table
by gary 02 Aug '11

02 Aug '11

Hi to all Anybody give me some guideline? I would like to add new field in mysql table, how to configure freeradius recognize the field and fill out the correct value that I want? Best Regards Gary BROWAN COMMUNICATIONS INC. Tel:886-3-600-6899 ext.4842 Fax:886-3-597-2970 e-mail:gary.yang@browan.com

3 7

Machine Authentication
by Leonardo Drumond 01 Aug '11

01 Aug '11

Hi to All, I need configure Freeradius, with machine authentication (hosts) in LDAP database. Anybody have a tutorial ? Who can help me ? Thanks, Leonardo Leonardo José Drumond Analista de Suporte Seção de Infraestrutura de Tecnologia da Informação - SECITI Câmara Municipal de Belo Horizonte Tel.: 55-31-3555-1241/1135 <mailto:leodrumond@cmbh.mg.gov.br> leonardo.drumond(a)cmbh.mg.gov.br <http://www.cmbh.mg.gov.br> http://www.cmbh.mg.gov.br Esta mensagem, incluindo seus anexos, pode conter informacoes privilegiadas e/ou de carater confidencial, nao podendo ser retransmitida sem autorizacao do remetente. Se voce nao e o destinatario ou pessoa autorizada a recebe-la, informamos que o seu uso, divulgacao, copia ou arquivamento sao proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.

1 0

Security issues with 1.1.3 flatfile
by d.tom.schmitt＠L-3com.com 01 Aug '11

01 Aug '11

Currently running 1.1.3 on CentOS 5.x. I am currently using the flat file option and it works just fine as long as the permissions on the file are: 664 RW-RW-R- Record in the file looks like: Tom <tab> Auth-Type := Local, User-Password := "tompass" This allows everyone to read the file - not good security. If I change the permissions to 660 RW-RW---- then freeRADIUS will not restart. I started setting up freeRADIUS to use MySQL DB for access but I must have something setup incorrectly. I tried to follow the How-To but still must be missing something in the setup. I have inserted a record into DB=radius and TALBE=radcheck where: Id = selected by the MySQL as the next index number UserName = tom Attribute = 'Cleartext-Password' Op = ':=' Value = tompass is the password So my questions are: 1. Is there a way to just secure the flatfile permissions? 2. Is there a complete How-To for using MySQL with freeRADIUS? Thanks, Tom Schmitt Senior IT Staff - R&D L-3 Communication Systems West Phone (801) 594-3030 \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo-- Have A Nice Day !

5 7