- Freeradius-Users - lists.freeradius.org

Freeradius Ldap mosule is authenticating with wrong password also
by vijaysingh 26 Jul '11

26 Jul '11

Hi, I have configured freeradius with LDAP authetication with my windows 2008 active directory. Two condition should met to authenticate the user 1.) User password should match 2.) user should be member of cisco group. Freeradius is cheking second condition only and if user enter wrong or blank password it is autheticating the user. Kindly help what can be the issue? I am getting following two errors in logs :- [ldap] WARNING: Deprecated conditional expansion ":-". See "man unlang" for details [ldap] ... expanding second conditional [ldap] looking for reply items in directory... WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? If required I can post full logs and configuration file here. Vijay. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Freeradius-Ldap-mosule-is-authentic… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 6

Problem with max-all-session check
by ShR3K 26 Jul '11

26 Jul '11

Hello, I installed freeradius with SQL module but when I try to connect it always says : (Check item - counter) is less than zero Rejected user test, check_item=0, counter=1139 I have define the check-name in my counter (Max-All-Session) and I have a line for each user in the database with Max-All-Session attribute and other line for other parameter like password... I don't understand why it always return 0. I tried with another query for my counter which return a negative number but after it's transformed into unsigned integer and the soustraction doesn't work. Thanks for yout help. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Problem-with-max-all-session-check-… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 2

Accounting - limits
by Evgeny Yurchenko 26 Jul '11

26 Jul '11

Hello list! I am sorry if the question has been asked thousand times, searching archives did not give me anything. -( Is FreeRADIUS natively capable of data consumption monitoring and limiting on per user basis. Let's say I want a user to be disabled (no messages to be generated just next authentication fails) after he downloads/uploads 1GB of data. Any hint in this direction would be highly appreciated. Thanks, Evgeny.

3 4

View attributes of an connection
by Jean Carlos Oliveira Guandalini 25 Jul '11

25 Jul '11

I need to find the value of an attribute created by a module, it is possible? radiusd -X or radiusd -xxx does not show these values. Thanks Jean

3 4

MySQL - One RADIUS database per realm
by Dave Thompson 25 Jul '11

25 Jul '11

At my place of employment we have a web frontend to our radius server. This frontend will be used by several different clients. We want to store each client's usernames/passwords and MAC addresses in their own database. The database name will be the client's realm name. The reason we want this database separation is to hide users and MAC addresses that don't belong to a client from the web frontend. For obvious reasons, the client should only be able to see and modify the authentication details that belong to them. I haven't been able to find much documentation on the subject, leading me to believe that either A) This is not a smart idea and not recommended or B) Stuff like this isn't done often and therefore there isn't much documentation. So, my question is this: Is there a better way for me to achieve the desired results of client separation(modify the frontend and use one database probably)? Or, if this is possible, any instructions would be greatly appreciated. Thank you. -- - Dave

2 2

Re: Accounting - limits
by Rizky Marunda Dinata 25 Jul '11

25 Jul '11

Dear Evgeny, Yes, freeradius is able to monitor and limit usage, for example will reject login after 1 GB of sum ( download+upload), please read info about sql-counter (http://wiki.freeradius.org/Rlm_sqlcounter) On Mon, Jul 25, 2011 at 3:53 PM, < freeradius-users-request(a)lists.freeradius.org> wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: Freeradius Ldap mosule is authenticating with wrong > password also (Alan Buxey) > 2. Please help me ASAP (Its Me) > 3. Re: Please help me ASAP (Harry Hoffman) > 4. Accounting - limits (Evgeny Yurchenko) > 5. How to allow a user login in a certain time? (Lingfeng Xiong) > 6. RE: Accounting - limits (Ryan Williams) > 7. Download/Upload Calculation (radiusus) > 8. counter daily (Angus JIANG Jian) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 24 Jul 2011 12:48:34 +0100 > From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> > Subject: Re: Freeradius Ldap mosule is authenticating with wrong > password also > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20110724114834.GA5422(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > Hi, > > > DEFAULT LDAP-Group == "CiscoRWL2Lr", Auth-Type := Accept > > Reply-Message = "Welcome! You have administrative access.", > > Service-Type = NAS-Prompt-User, > > cisco-avpair = "shell:priv-lvl=15" > > as already said, you've configured your RADIUS server to accept > ANYONE who is in the CiscoRW2Lr group - even if their password > is 100% wrong. Auth-Type := Accept opens your box to basically not > caring about authentication.... only authorization. > > remove the auth-type and ensure your authentication is working - > which will need some work for AD > > alan > > > ------------------------------ > > Message: 2 > Date: Sun, 24 Jul 2011 06:29:56 -0700 (PDT) > From: Its Me <ktscse(a)yahoo.com> > Subject: Please help me ASAP > To: "freeradius-users(a)lists.freeradius.org" > <freeradius-users(a)lists.freeradius.org> > Message-ID: > <1311514196.43660.YahooMailNeo(a)web110116.mail.gq1.yahoo.com> > Content-Type: text/plain; charset="iso-8859-1" > > Hi, > I am new user in Linux,I have install freeradius2 rpm in my Linux > machine(RHEL-5.5 Server),I m facing problem below detail ,please help me how > can i install and setup my radiusd -X output below problem. > > radiusd: #### Opening IP addresses and Ports #### > listen { > ??????? type = "auth" > ??????? ipaddr = * > ??????? port = 0 > Failed binding to authentication address * port 1812: Address already in > use > /etc/raddb/radiusd.conf[240]: Error binding to port for 0.0.0.0 port 1812 >

1 0

Please help me ASAP
by Its Me 25 Jul '11

25 Jul '11

Hi, I am new user in Linux,I have install freeradius2 rpm in my Linux machine(RHEL-5.5 Server),I m facing problem below detail ,please help me how can i install and setup my radiusd -X output below problem. radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 Failed binding to authentication address * port 1812: Address already in use /etc/raddb/radiusd.conf[240]: Error binding to port for 0.0.0.0 port 1812

3 2

Download/Upload Calculation
by radiusus 25 Jul '11

25 Jul '11

Hello, I am new to radius server and I need some information if possible. Can anybody help with any documentation regarding the calculation of input/output octets on user/daily basis? I am interested only in reporting and analyzing the traffic of download/upload. I have been trying to use some Analytical functions and get somewhere but still can't be sure as I do not need how to use the Gigawords condition etc. My cdr's are stored in Oracle DB. Some information would be really appreciated. Thanks. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Download-Upload-Calculation-tp46300… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0

How to allow a user login in a certain time?
by Lingfeng Xiong 25 Jul '11

25 Jul '11

hi there, I am writing a authentication system for a public Cisco System laboratory of a university. This system allow user to subscribe a cisco device in a certain time and during that time, the subscriber should be able to login that device. I have already build a FreeRadius server and configure my Cisco device to authenticate user via Radius. But I have no idea how to configure FreeRadius to control the login time. For example, a user subscribe a device named 'Test1' for 'July 30, 2011' from '10:00 a.m.' to '12:00 p.m.'. He should be able to login 'test1' during that time, but not before or after. I know there existed a module named 'rlm_logintime', but it seems like that module can only supply me with scheduled login plan, not a certain time period. So could you give me some advice? Thanks. BTW: I am runing FreeRadius 2.1.11 on a FreeBSD 8.2-RELEASE system. A MySQL database is also running for FreeRadius.

1 0

How to run a perl script
by Tyller D 21 Jul '11

21 Jul '11

Hi I would like to run a perl script, using rlm_perl, at specific times. For example, when a Stop request comes in run stop.pl, when an interim-update comes in run update.pl. Can someone tell me where to do this. I am sorry if my question seems vague but I am fairly lost. I can write the script I just don't know how to call it. Any assistance would be appreciated. Thanks

3 2