- Freeradius-Users - lists.freeradius.org

FreeRadius + Cisco VPDN with multiple VRFs not working
by Jasper Jans 12 Aug '10

12 Aug '10

Hi, I hope someone on this lists still knows how to build this... We have an old setup that authenticates ISDN dial-in users and puts them in a Cisco VRF depending on which user authenticates. However this was all build about eight years ago using both home grown radius servers, etc. At the moment I'm trying to build a new platform using FreeRadius but I get stuck it seems at some point during the authentication and setup of the session. A quick overview of the setup: Cisco 180x as dial-in router Cisco AS5350 (NAS terminating the ISDN call) running IOS c5350-jk9s-mz.124-15.T9.bin Cisco 7200 (VHG/PE terminating the VPDN tunnel and ultimately the PPP session) running IOS c7200-jk9s-mz.123-20.bin Freeradius v1.1.3 (default that ships with CentOS 5.5) using MySQL as an backend. I manage to get the call to dial-in, the NAS to setup the VPDN tunnel and the VHG to send the radius request to terminate the PPP session. I actually see that the virtual-template gets cloned to a virtual-access interface - however after a few sessions the connection drops and if I issue a "show run" on the virtual-access interface it does not seem to have any config on it. I've included the output of a debug of both the VHG as well as of the radius server at the end of this mail. I've also included the running configuration of the AS5350 and 7200 incase I did something wrong there. I realize this makes for a rather large email - my apologies. I hope someone can tell me what it is that I'm doing wrong. Thanks a lot for taking the time to have a look. - Jasper ------------ Debug VHG: Aug 12 16:15:42.916 CEST: ppp55 PPP: Phase is ESTABLISHING Aug 12 16:15:42.916 CEST: ppp55 PPP: Send Message[Dynamic Bind Response] Aug 12 16:15:42.916 CEST: ppp55 LCP: I FORCED rcvd CONFACK len 30 Aug 12 16:15:42.916 CEST: ppp55 LCP: AuthProto CHAP (0x0305C22305) Aug 12 16:15:42.916 CEST: ppp55 LCP: MagicNumber 0x0D06A846 (0x05060D06A846) Aug 12 16:15:42.916 CEST: ppp55 LCP: MRRU 1524 (0x110405F4) Aug 12 16:15:42.916 CEST: ppp55 LCP: EndpointDisc 1 asd-tc3-ap01 (0x130F016173642D7463332D61703031) Aug 12 16:15:42.916 CEST: ppp55 LCP: I FORCED sent CONFACK len 38 Aug 12 16:15:42.916 CEST: ppp55 LCP: AuthProto CHAP (0x0305C22305) Aug 12 16:15:42.916 CEST: ppp55 LCP: MagicNumber 0x9A996122 (0x05069A996122) Aug 12 16:15:42.916 CEST: ppp55 LCP: MRRU 1500 (0x110405DC) Aug 12 16:15:42.916 CEST: ppp55 LCP: EndpointDisc 1 test-klant(a)backup.nl Aug 12 16:15:42.916 CEST: ppp55 LCP: (0x131701746573742D6B6C616E74406261) Aug 12 16:15:42.916 CEST: ppp55 LCP: (0x636B75702E6E6C) Aug 12 16:15:42.916 CEST: ppp55 PPP: Phase is FORWARDING, Attempting Forward Aug 12 16:15:42.916 CEST: ppp55 PPP SSS: Receive SSS-Mgr Connect-Local Aug 12 16:15:42.916 CEST: ppp55 PPP: Phase is AUTHENTICATING, Unauthenticated User Aug 12 16:15:42.916 CEST: RADIUS/ENCODE(0000003C):Orig. component type = VPDN Aug 12 16:15:42.916 CEST: RADIUS: AAA Unsupported Attr: interface [153] 14 Aug 12 16:15:42.916 CEST: RADIUS: 55 6E 69 71 2D 53 65 73 73 2D 49 44 [Uniq-Sess-ID] Aug 12 16:15:42.916 CEST: RADIUS(0000003C): Storing nasport 55 in rad_db Aug 12 16:15:42.916 CEST: RADIUS(0000003C): Config NAS IP: 195.18.85.3 Aug 12 16:15:42.916 CEST: RADIUS/ENCODE(0000003C): acct_session_id: 60 Aug 12 16:15:42.916 CEST: RADIUS(0000003C): sending Aug 12 16:15:42.916 CEST: RADIUS(0000003C): Send Access-Request to 195.18.104.132:1812 id 1645/71, len 114 Aug 12 16:15:42.916 CEST: RADIUS: authenticator DD 7C 9E 37 25 71 75 C1 - 3A F2 17 44 A0 BA BF E4 Aug 12 16:15:42.916 CEST: RADIUS: Framed-Protocol [7] 6 PPP [1] Aug 12 16:15:42.916 CEST: RADIUS: User-Name [1] 22 " test-klant(a)backup.nl" Aug 12 16:15:42.916 CEST: RADIUS: CHAP-Password [3] 19 * Aug 12 16:15:42.916 CEST: RADIUS: NAS-Port-Type [61] 6 Virtual [5] Aug 12 16:15:42.916 CEST: RADIUS: NAS-Port [5] 6 55 Aug 12 16:15:42.916 CEST: RADIUS: Calling-Station-Id [31] 12 "0365465531" Aug 12 16:15:42.916 CEST: RADIUS: Called-Station-Id [30] 11 "207300300" Aug 12 16:15:42.916 CEST: RADIUS: Service-Type [6] 6 Framed [2] Aug 12 16:15:42.916 CEST: RADIUS: NAS-IP-Address [4] 6 195.18.85.3 Aug 12 16:15:42.920 CEST: RADIUS: Received from id 1645/71 195.18.104.132:1812, Access-Accept, len 150 Aug 12 16:15:42.920 CEST: RADIUS: authenticator 4B 16 16 8C 36 79 DB 45 - 61 5E D1 5D 34 51 1A 0E Aug 12 16:15:42.920 CEST: RADIUS: Service-Type [6] 6 Framed [2] Aug 12 16:15:42.920 CEST: RADIUS: Framed-Protocol [7] 6 PPP [1] Aug 12 16:15:42.920 CEST: RADIUS: Vendor, Cisco [26] 57 Aug 12 16:15:42.920 CEST: RADIUS: Cisco AVpair [1] 51 "lcp:interface-config=ip vrf forwarding test-klant" Aug 12 16:15:42.920 CEST: RADIUS: Vendor, Cisco [26] 55 Aug 12 16:15:42.920 CEST: RADIUS: Cisco AVpair [1] 49 "lcp:interface-config=ip unnumbered Loopback1132" Aug 12 16:15:42.920 CEST: RADIUS: Framed-IP-Address [8] 6 192.168.2.1 Aug 12 16:15:42.920 CEST: RADIUS(0000003C): Received from id 1645/71 Aug 12 16:15:42.920 CEST: ppp55 PPP: Phase is FORWARDING, Attempting Forward Aug 12 16:15:42.920 CEST: ppp55 PPP: Send Message[Connect Local] Aug 12 16:15:42.920 CEST: Vi2 PPP: Phase is DOWN, Setup Aug 12 16:15:42.920 CEST: ppp55 PPP: Bind to [Virtual-Access2] Aug 12 16:15:42.920 CEST: Vi2 PPP: Send Message[Static Bind Response] Aug 12 16:15:42.924 CEST: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to up Aug 12 16:15:42.924 CEST: Vi2 PPP: Phase is AUTHENTICATING, Authenticated User Aug 12 16:15:42.924 CEST: Vi2 CHAP: O SUCCESS id 2 len 4 Aug 12 16:15:43.924 CEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to up Aug 12 16:15:52.868 CEST: Vi2 CHAP: I CHALLENGE id 86 len 41 from " test-klant(a)backup.nl" Aug 12 16:15:52.868 CEST: RADIUS/ENCODE(0000003C): sendauth, failing over Aug 12 16:15:52.868 CEST: RADIUS/ENCODE(0000003C): send packet; BEGIN Aug 12 16:15:52.868 CEST: Vi2 CHAP: Unable to authenticate for peer Aug 12 16:15:52.868 CEST: Vi2 PPP: Sending Acct Event[Down] id[3C] Aug 12 16:15:52.868 CEST: Vi2 PPP: Phase is TERMINATING Aug 12 16:15:52.868 CEST: Vi2 LCP: O TERMREQ [Open] id 1 len 4 Aug 12 16:15:52.888 CEST: Vi2 LCP: I TERMACK [TERMsent] id 1 len 4 Aug 12 16:15:52.888 CEST: Vi2 LCP: State is Closed Aug 12 16:15:52.888 CEST: Vi2 PPP: Phase is DOWN Aug 12 16:15:52.888 CEST: Vi2 PPP: Send Message[Disconnect] Aug 12 16:15:52.892 CEST: %LINK-3-UPDOWN: Interface Virtual-Access2, changed state to down Aug 12 16:15:53.868 CEST: %LINEPROTO-5-UPDOWN: Line protocol on Interface Virtual-Access2, changed state to down ------------------------ Debug radius: rad_recv: Access-Request packet from host 195.18.85.193:1645, id=42, length=122 User-Name = "backup.nl" User-Password = "cisco" NAS-Port = 20326 NAS-Port-Id = "Serial3/3:26" NAS-Port-Type = ISDN Calling-Station-Id = "0365465531" Called-Station-Id = "207300300" Connect-Info = "64000 HDLC" Service-Type = Dialout-Framed-User NAS-IP-Address = 195.18.85.193 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 radius_xlat: '/var/log/radius/radacct/auth-detail-20100812' rlm_detail: /var/log/radius/radacct/auth-detail-%Y%m%d expands to /var/log/radius/radacct/auth-detail-20100812 modcall[authorize]: module "auth_log" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 radius_xlat: 'backup.nl' rlm_sql (sql): sql_set_user escaped user --> 'backup.nl' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'backup.nl' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'backup.nl' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'backup.nl' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'backup.nl' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: user supplied User-Password matches local User-Password Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 radius_xlat: '/var/log/radius/radacct/reply-detail-20100812' rlm_detail: /var/log/radius/radacct/reply-detail-%Y%m%d expands to /var/log/radius/radacct/reply-detail-20100812 modcall[post-auth]: module "reply_log" returns ok for request 0 modcall: leaving group post-auth (returns ok) for request 0 Sending Access-Accept of id 42 to 195.18.85.193 port 1645 Cisco-AVPair += "vpdn:tunnel-id=AS5350-All" Cisco-AVPair += "vpdn:ip-addresses=195.18.85.3" Cisco-AVPair += "vpdn:tunnel-type=l2tp" Cisco-AVPair += "vpdn:l2tp-tunnel-password=cisco" Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 195.18.85.3:1645, id=73, length=114 Framed-Protocol = PPP User-Name = "test-klant(a)backup.nl" CHAP-Password = 0x02011f8ce0ed5275d50c7a786cc7e47c6b NAS-Port-Type = Virtual NAS-Port = 57 Calling-Station-Id = "0365465531" Called-Station-Id = "207300300" Service-Type = Framed-User NAS-IP-Address = 195.18.85.3 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 radius_xlat: '/var/log/radius/radacct/auth-detail-20100812' rlm_detail: /var/log/radius/radacct/auth-detail-%Y%m%d expands to /var/log/radius/radacct/auth-detail-20100812 modcall[authorize]: module "auth_log" returns ok for request 1 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 1 radius_xlat: 'test-klant(a)backup.nl' rlm_sql (sql): sql_set_user escaped user --> 'test-klant(a)backup.nl' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'test-klant(a)backup.nl' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = ' test-klant(a)backup.nl' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'test-klant(a)backup.nl' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = ' test-klant(a)backup.nl' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found Auth-Type CHAP auth: type "CHAP" Processing the authenticate section of radiusd.conf modcall: entering group CHAP for request 1 rlm_chap: login attempt by "test-klant(a)backup.nl" with CHAP password rlm_chap: Using clear text password test for user test-klant(a)backup.nlauthentication. rlm_chap: chap user test-klant(a)backup.nl authenticated succesfully modcall[authenticate]: module "chap" returns ok for request 1 modcall: leaving group CHAP (returns ok) for request 1 Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 1 radius_xlat: '/var/log/radius/radacct/reply-detail-20100812' rlm_detail: /var/log/radius/radacct/reply-detail-%Y%m%d expands to /var/log/radius/radacct/reply-detail-20100812 modcall[post-auth]: module "reply_log" returns ok for request 1 modcall: leaving group post-auth (returns ok) for request 1 Sending Access-Accept of id 73 to 195.18.85.3 port 1645 Service-Type := Framed-User Framed-Protocol := PPP Cisco-AVPair += "lcp:interface-config#1=ip vrf forwarding test-klant" Cisco-AVPair += "lcp:interface-config#2=ip vrf forwarding test-klant" Finished request 1 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 42 with timestamp 4c64044c Cleaning up request 1 ID 73 with timestamp 4c64044c Nothing to do. Sleeping until we see a request. rad_recv: Accounting-Request packet from host 195.18.85.193:1646, id=43, length=263 Acct-Session-Id = "00000114" Framed-Protocol = PPP Tunnel-Medium-Type:0 = IP Tunnel-Client-Endpoint:0 = "195.18.85.193" Tunnel-Server-Endpoint:0 = "195.18.85.3" Tunnel-Type:0 = L2TP Acct-Tunnel-Connection = "1057600042" Tunnel-Client-Auth-Id:0 = "AS5350-All" Tunnel-Server-Auth-Id:0 = "asd-cap-dr03" User-Name = "test-klant(a)backup.nl" Acct-Authentic = RADIUS Acct-Session-Time = 10 Acct-Input-Octets = 53 Acct-Output-Octets = 16 Acct-Input-Packets = 2 Acct-Output-Packets = 2 Acct-Terminate-Cause = Host-Request Acct-Status-Type = Stop NAS-Port = 20326 NAS-Port-Id = "Serial3/3:26" NAS-Port-Type = ISDN Calling-Station-Id = "0365465531" Called-Station-Id = "207300300" Connect-Info = "64000 HDLC" Service-Type = Framed-User NAS-IP-Address = 195.18.85.193 Acct-Delay-Time = 0 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 2 modcall[preacct]: module "preprocess" returns noop for request 2 rlm_acct_unique: Hashing 'NAS-Port = 20326,Client-IP-Address = 195.18.85.193,NAS-IP-Address = 195.18.85.193,Acct-Session-Id = "00000114",User-Name = "test-klant(a)backup.nl"' rlm_acct_unique: Acct-Unique-Session-ID = "76ea71aaa12d8845". modcall[preacct]: module "acct_unique" returns ok for request 2 modcall: leaving group preacct (returns ok) for request 2 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 2 radius_xlat: '/var/log/radius/radacct/detail-20100812' rlm_detail: /var/log/radius/radacct/detail-%Y%m%d expands to /var/log/radius/radacct/detail-20100812 modcall[accounting]: module "detail" returns ok for request 2 modcall[accounting]: module "unix" returns ok for request 2 radius_xlat: '/var/log/radius/radutmp' radius_xlat: 'test-klant(a)backup.nl' rlm_radutmp: Logout for NAS asd-tc3-ap01 port 20326, but no Login record modcall[accounting]: module "radutmp" returns ok for request 2 radius_xlat: 'test-klant(a)backup.nl' rlm_sql (sql): sql_set_user escaped user --> 'test-klant(a)backup.nl' radius_xlat: 'UPDATE radacct SET AcctStopTime = '2010-08-12 16:25:26', AcctSessionTime = '10', AcctInputOctets = '53', AcctOutputOctets = '16', AcctTerminateCause = 'Host-Request', AcctStopDelay = '0', ConnectInfo_stop = '64000 HDLC' WHERE AcctSessionId = '00000114' AND UserName = ' test-klant(a)backup.nl' AND NASIPAddress = '195.18.85.193'' rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('00000114', '76ea71aaa12d8845', ' test-klant(a)backup.nl', '', '195.18.85.193', '20326', 'ISDN', DATE_SUB('2010-08-12 16:25:26', INTERVAL (10 + 0) SECOND), '2010-08-12 16:25:26', '10', 'RADIUS', '', '64000 HDLC', '53', '16', '207300300', '0365465531', 'Host-Request', 'Framed-User', 'PPP', '', '0', '0')' rlm_sql (sql): Released sql socket id: 2 modcall[accounting]: module "sql" returns ok for request 2 modcall: leaving group accounting (returns ok) for request 2 Sending Accounting-Response of id 43 to 195.18.85.193 port 1646 Finished request 2 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 2 ID 43 with timestamp 4c640456 Nothing to do. Sleeping until we see a request. ------------------- Database entries MySQL: mysql> select * from radcheck where UserName = 'backup.nl'; +------+-----------+-----------+----+-------+ | id | UserName | Attribute | op | Value | +------+-----------+-----------+----+-------+ | 1445 | backup.nl | Password | == | cisco | +------+-----------+-----------+----+-------+ 1 row in set (0.00 sec) mysql> select * from radreply where UserName = 'backup.nl'; +------+-----------+--------------+----+---------------------------------+ | id | UserName | Attribute | op | Value | +------+-----------+--------------+----+---------------------------------+ | 2246 | backup.nl | Cisco-AVPair | += | vpdn:tunnel-id=AS5350-All | | 2247 | backup.nl | Cisco-AVPair | += | vpdn:ip-addresses=195.18.85.3 | | 2248 | backup.nl | Cisco-AVPair | += | vpdn:tunnel-type=l2tp | | 2249 | backup.nl | Cisco-AVPair | += | vpdn:l2tp-tunnel-password=cisco | +------+-----------+--------------+----+---------------------------------+ 4 rows in set (0.00 sec) mysql> select * from radcheck where UserName = 'test-klant(a)backup.nl'; +------+----------------------+-----------+----+-------+ | id | UserName | Attribute | op | Value | +------+----------------------+-----------+----+-------+ | 1444 | test-klant(a)backup.nl | Password | == | test | +------+----------------------+-----------+----+-------+ 1 row in set (0.00 sec) mysql> select * from radreply where UserName = 'test-klant(a)backup.nl'; +------+----------------------+-------------------+----+-----------------------------------------------------+ | id | UserName | Attribute | op | Value | +------+----------------------+-------------------+----+-----------------------------------------------------+ | 2231 | test-klant(a)backup.nl | Service-Type | := | Framed-User | | 2250 | test-klant(a)backup.nl | Framed-Protocol | := | PPP | | 2263 | test-klant(a)backup.nl | Cisco-AVPair | += | lcp:interface-config#1=ip vrf forwarding test-klant | | 2264 | test-klant(a)backup.nl | Cisco-AVPair | += | lcp:interface-config#2=ip vrf forwarding test-klant | +------+----------------------+-------------------+----+-----------------------------------------------------+ 4 rows in set (0.00 sec)

2 2

issues when compiling freeradius 2.1.9 on solaris 10 x86
by maximatt 12 Aug '10

12 Aug '10

hi... i try to compile freeradius 2.1.9 on solaris 10, but i have some problems.... i install from freeware the following packages . gcc-3.4.6-sol10-x86-local and /libiconv-1.13.1-sol10-x86-local.gz and then i try to just have a simple compilation. # PATH=/usr/local/bin/:/usr/sfw/bin/:$PATH; export PATH # CC=gcc ./configure # gmake . . /Desktop/freeRadius/tmp/freeradius-server-2.1.9/libtool --mode=link gcc -release 2.1.9 \ -export-dynamic -o libfreeradius-radius.la -rpath /usr/local/lib dict.lo filters.lo hash.lo hmac.lo hmacsha1.lo isaac.lo log.lo misc.lo missing.lo md4.lo md5.lo print.lo radius.lo rbtree.lo sha1.lo snprintf.lo strlcat.lo strlcpy.lo token.lo udpfromto.lo valuepair.lo fifo.lo packet.lo event.lo getaddrinfo.lo vqp.lo heap.lo dhcp.lo gcc -shared -Wl,-h -Wl,libfreeradius-radius-2.1.9.so -o .libs/ libfreeradius-radius-2.1.9.so .libs/dict.o .libs/filters.o .libs/hash.o .libs/hmac.o .libs/hmacsha1.o .libs/isaac.o .libs/log.o .libs/misc.o .libs/missing.o .libs/md4.o .libs/md5.o .libs/print.o .libs/radius.o .libs/rbtree.o .libs/sha1.o .libs/snprintf.o .libs/strlcat.o .libs/strlcpy.o .libs/token.o .libs/udpfromto.o .libs/valuepair.o .libs/fifo.o .libs/packet.o .libs/event.o .libs/getaddrinfo.o .libs/vqp.o .libs/heap.o .libs/dhcp.o -lc (cd .libs && rm -f libfreeradius-radius.so && ln -s libfreeradius-radius-2.1.9.so libfreeradius-radius.so) false cru .libs/libfreeradius-radius.a dict.o filters.o hash.o hmac.o hmacsha1.o isaac.o log.o misc.o missing.o md4.o md5.o print.o radius.o rbtree.o sha1.o snprintf.o strlcat.o strlcpy.o token.o udpfromto.o valuepair.o fifo.o packet.o event.o getaddrinfo.o vqp.o heap.o dhcp.o gmake[4]: *** [libfreeradius-radius.la] Error 1 gmake[4]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/lib' gmake[3]: *** [lib] Error 2 gmake[3]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src' gmake[1]: *** [src] Error 2 gmake[1]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9' gmake: *** [all] Error 2 what could be happend' thanks -- *Salu2 ;)*

2 1

Freeradius 2.1.9 stop working
by BELLIERE Eric 12 Aug '10

12 Aug '10

Ok Fine we made a RPM with The Git source and the radius is no more "crashing" so bug # 34 seems to be resolved. Thanks, Eric B. -----Original Message----- From: freeradius-users-bounces+eric.belliere=mail.mobistar.be(a)lists.freeradius.org [mailto:freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.freera dius.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Thursday 5 August 2010 12:00 To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 64, Issue 18 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Fwd: FreeRadius2&MySQL (Alan Buxey) 2. Re: Freeradius 2.1.9 stop working (Alan Buxey) 3. Re: Freeradius 2.1.9 stop working (Johan Meiring) ---------------------------------------------------------------------- Message: 1 Date: Thu, 5 Aug 2010 10:02:53 +0100 From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: Fwd: FreeRadius2&MySQL To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20100805090253.GA20214(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Can you please provide me with the link of document you talk about , http://wiki.freeradius.org/SQL_HOWTO alan ------------------------------ Message: 2 Date: Thu, 5 Aug 2010 10:04:38 +0100 From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: Freeradius 2.1.9 stop working To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Cc: ROUSSEAU David <David.ROUSSEAU(a)mail.mobistar.be> Message-ID: <20100805090438.GB20214(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Thanks Alan. But maybe you can update me with the out date of the RPM in > 2.1.10? 2.1.10 isnt out yet. but when it is, then your package maintainers should ensure a new RPM is available. alan ------------------------------ Message: 3 Date: Thu, 05 Aug 2010 11:19:48 +0200 From: Johan Meiring <jmeiring(a)pcservices.co.za> Subject: Re: Freeradius 2.1.9 stop working To: freeradius-users(a)lists.freeradius.org Message-ID: <4C5A8234.1040209(a)pcservices.co.za> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 2010/08/05 11:04 AM, Alan Buxey wrote: > > 2.1.10 isnt out yet. but when it is, then your package maintainers should > ensure a new RPM is available. > This page might tell you how to build an RPM from source. http://wiki.freeradius.org/Red_Hat_FAQ Use git as the "source". -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 64, Issue 18 ************************************************

1 0

Is Mikrotik-Rate-Limit used to limit users speed
by Spacelee 12 Aug '10

12 Aug '10

PPTP+PPP+FreeRadius+MySQL It seems it doesn't work. -- Spacelee

2 1

ldap fallback to local password
by Aqdas Muneer 12 Aug '10

12 Aug '10

hi, i would like to configure freeradius so that it can failover to a local password when the ldap server cannot be contacted. i was able to create a admin account in the users file with cleartext password, but when i enable it, it becomes accessible even when ldap is up and running. we are running version 2.1.7 of freeradius. thanks Aqdas

2 2

LDAP Check Item Issue
by Asin Silva 12 Aug '10

12 Aug '10

Hi All, I use freeradius version 2.1.3 and LDAP to authenticate ADSL users. I have a requirement to compare the NAS-Port-Id in the user request to the one in the LDAP. But when I test it, radius debug output says "Pairs do not match. Rejecting user.". But the values in the request and LDAP are same. I have attached the debug output. Asin

2 2

Last call for 2.1.0
by Alan DeKok 12 Aug '10

12 Aug '10

Version 2.1.10 should be released soon. If there are any pressing issues people would like to get addressed, now is the time to speak up. The proposed change log is available online at: http://github.com/alandekok/freeradius-server/blob/v2.1.x/doc/ChangeLog There are a number of feature improvements in what's supposed to be a "stable" release. These improvements are limited to documentation updates, and changes to the client programs to make them easier to use. The main benefit most people should see is that radclient and radtest now make it easier to send MS-CHAP requests. The server now also listens on 127.0.0.1:18120 for the "inner-tunnel" virtual server. These two changes mean that the "inner-tunnel" portion of PEAP can be tested using nothing more than radtest && a default server installation. This should help people debug PEAP issues. i.e. They can avoid the issue of "but it works with radtest", when their passwords aren't compatible with MS-CHAP. There only major thing missing now is a DHCP pool allocation strategy. There's been more interest recently in using FreeRADIUS as a DHCP server, so patches to help would be most welcome. Alan DeKok.

4 9

Freeradius Authentication
by rrperez 12 Aug '10

12 Aug '10

I have configured a Freeradius2.1.7 with an openLDAP backend and I'm planning to established a different type of authentication. The plan was to create one password for all the users. And the users are checked by the Freeradius in the openLDAP directory. Is it possible? If so, can anyone help me configure my freeradius server. Thanks in advance. -- View this message in context: http://old.nabble.com/Freeradius-Authentication-tp29415473p29415473.html Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

Why the"authhost"or"accthost"item's value in "real NULL" can't be a home_server_pool in proxy.conf ?
by freddychu 12 Aug '10

12 Aug '10

Hi, I want to proxy requests which's User-Name hasn't realm domain to a home server pool, so I configure the realm NULL, but the radius server would proxy the request to a nonexistent IP address. Why the "authhost" or "accthost" item's value in "real NULL" can't be a home_server_pool in proxy.conf ? How to configure it? Any body can help me? #realm NULL { # authhost = radius.company.com:1600 # accthost = radius.company.com:1601 # secret = testing123 #} Freddy Chu

1 0

Issues with NTLM_AUTH and Windows
by Alan DeKok 11 Aug '10

11 Aug '10

A number of people have reported failed authentications with ntlm_auth when using Samba and Active Directory. This issue appears to have been tracked down, and a patch posted: https://bugzilla.samba.org/show_bug.cgi?id=6563 A few people have reported that the patch works, but the Samba team is looking for more widespread testing. We're asking that anyone who has the problem try the patch, and post a response on the above bug report reporting success / failure. Thanks to everyone for the reports, and the patience while this was tracked down. Alan DeKok.

1 0