- Freeradius-Users - lists.freeradius.org

freeradius sql modul faild to load
by ziko 05 Aug '10

05 Aug '10

Hello. I have freeradius 2.1.9 on Fedora 13. I also have mysql-server installed and freeradius-mysql package. I created database with Daloradius sql script and everything works, but when i uncomment "sql" in /raddb/sites-enabled/default file, freeradius gives error, failed to load sql modules. what can i do? please help me.

2 1

problems to buid freeRadius v2.1.9 on Solaris 10 (x86)
by maximatt 05 Aug '10

05 Aug '10

hi... :) I have some problems to build freeRadius v2.1.9 on Solaris (x86). I install libCap, GDBM, libTool, openLDAP and openSSL to resolve some dependences and i can generate "make" without problems. But, when i try to compile them (using "gmake") i have the following issue: # gmake : : feof 0x48d /usr/local/ssl/lib/libcrypto.a(bss_file.o) feof 0x323 /usr/local/ssl/lib/libcrypto.a(ui_openssl.o) fseek 0x49b /usr/local/ssl/lib/libcrypto.a(bss_file.o) __udivdi3 0xce /usr/local/ssl/lib/libcrypto.a(b_print.o) __udivdi3 0x4a6 /usr/local/ssl/lib/libcrypto.a(b_print.o) ld: fatal: relocations remain against allocatable but non-writable sections collect2: ld returned 1 exit status gmake[9]: *** [rlm_eap_tls.la] Error 1 gmake[9]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/modules/rlm_eap/types/rlm_eap_tls' gmake[8]: *** [rlm_eap_tls] Error 2 gmake[8]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/modules/rlm_eap/types' gmake[7]: *** [all] Error 2 gmake[7]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/modules/rlm_eap/types' gmake[6]: *** [types] Error 2 gmake[6]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/modules/rlm_eap' gmake[5]: *** [rlm_eap] Error 2 gmake[5]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src/modules' gmake[3]: *** [modules] Error 2 gmake[3]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9/src' gmake[1]: *** [src] Error 2 gmake[1]: Leaving directory `/Desktop/freeRadius/tmp/freeradius-server-2.1.9' gmake: *** [all] Error 2 I try to fix them setting some parameters when i build make script , search in www but i can find nothing that help me fix them... :( Any idea? Thanks in advance! :) -- *Salu2 ;)*

2 4

Trouble migrating EAP TLS authentication from Free Radius 1.1.8 to 2.1.9
by SEELEMANN, Sven 05 Aug '10

05 Aug '10

Hi, I've been trying to migrate the FreeRadius server from 1.1.8 to the latest (stable) release (2.1.9 at the last try, 2.1.8 before that). I'm using EAP TLS to authenticate modem connection to our DSLAM (using 2 way authentication). The 1.1.8 server has no trouble performing the task, however, the 2.1.x server doesn't ever complete the authentication process. From what I can tell, once the 1.1.8 server gets the final TLS ACK it allows the connection, but the 2.1.x server is looking for something else. Is this a FreeRadius issue or a DSLAM problem? If DSLAM, where is the best place to start looking for description of what should be happening? I have openssl 1.0.0 installed on the sparc Solaris 10 server that is running FreeRadius. Using a single modem and debug mode, I've got the following log snippets (from the end of the session each): Version 1.1.8: Waking up in 5 seconds... rad_recv: Access-Request packet from host 138.120.206.110:10000, id=56, length=158 NAS-Identifier = "SSL-7330-3" NAS-IP-Address = 138.120.206.110 User-Name = "00:18:3F:5E:57:B0" NAS-Port = 136383488 NAS-Port-Type = xDSL Acct-Session-Id = "173:26:18::0075" NAS-Port-Id = "atm 1/1/04/13:0:32" Calling-Station-Id = "\000\030?^W\260" EAP-Message = 0x020700060d00 Message-Authenticator = 0x778fd2a832af2ac150c6df5119a51f88 State = 0x2638193a96b23d3b2ac39fe35dff53cb Processing the authorize section of radiusd.conf modcall: entering group authorize for request 49 modcall[authorize]: module "preprocess" returns ok for request 49 radius_xlat: '/usr/local/etc/raddb/var/log/radius/radacct/138.120.206.110/auth-detail-20100306' rlm_detail: /usr/local/etc/raddb/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/etc/raddb/var/log/radius/radacct/138.120.206.110/auth-detail-20100306 modcall[authorize]: module "auth_log" returns ok for request 49 modcall[authorize]: module "chap" returns noop for request 49 modcall[authorize]: module "mschap" returns noop for request 49 rlm_realm: No '@' in User-Name = "00:18:3F:5E:57:B0", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 49 rlm_eap: EAP packet type response id 7 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 49 modcall[authorize]: module "files" returns notfound for request 49 modcall: group authorize returns updated for request 49 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 49 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake is finished eaptls_verify returned 3 eaptls_process returned 3 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns ok for request 49 modcall: group authenticate returns ok for request 49 Sending Access-Accept of id 56 to 138.120.206.110:10000 MS-MPPE-Recv-Key = 0x7b94ecfc920b6cd85506aee431a4d876e4af891c3dc51c433af623302ace6490 MS-MPPE-Send-Key = 0x370e00c44f3145ad3eaa77720d9e48a102750fcefdb44f980156c67c2dc790ee EAP-Message = 0x03070004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "00:18:3F:5E:57:B0" Finished request 49 Going to the next request Waking up in 5 seconds... Version 2.1.9: Waking up in 4.2 seconds. rad_recv: Access-Request packet from host 138.120.206.113 port 10000, id=202, length=158 NAS-Identifier = "SSL-7330-4" NAS-IP-Address = 138.120.206.113 User-Name = "00:1B:5B:10:97:88" NAS-Port = 136392448 NAS-Port-Type = xDSL Acct-Session-Id = "157:52:37::0371" NAS-Port-Id = "atm 1/1/04/48:0:32" Calling-Station-Id = "\000\033[\020\227\210" EAP-Message = 0x020e00060d00 Message-Authenticator = 0xdffd259e9fa9cef084a12d640fb51073 State = 0x056b0543006508967ef0ed7dafcf0427 +- entering group authorize {...} ++[preprocess] returns ok [eap] EAP packet type response id 14 length 6 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/tls [eap] processing type tls [tls] Authenticate [tls] processing EAP-TLS [tls] Received TLS ACK [tls] No SSL info available. Waiting for more SSL data. [tls] eaptls_verify returned 1 [tls] eaptls_process returned 13 ++[eap] returns handled Sending Access-Challenge of id 202 to 138.120.206.113 port 10000 EAP-Message = 0x010f000a0d8000000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x056b0543036408967ef0ed7dafcf0427 Finished request 13. Going to the next request Thanks for any assistance, Sven. -- Sven A. Seelemann, P. Eng. Alcatel-Lucent SIT Designer 600 March Road, PO Box 13600 Ottawa, Ontario, CANADA K2K 2E6 email: sven.seelemann(a)alcatel-lucent.com Phone: 613-784-3202 Fax: 613-599-3684

2 1

FreeRadius2 + OpenLDAP for Wifi Authentication
by rrperez＠apc.edu.ph 05 Aug '10

05 Aug '10

I configured a freeradius2 server and an openldap server on the same machine, actually a virtual machine. I would like to ask why does it only works locally? If I try to connect to the wireless network, it gives me a "No Authentication Method Found" in the debug mode. I really need help for this matter.

2 1

Re: Fwd: FreeRadius2&MySQL
by shark_l 05 Aug '10

05 Aug '10

//I am planing to migrate from Aradial to FreeRadius2 //and i currently have 10000 subscribers A piece of advice: DO NOT deploy Freeradius2 now! I am using FreeRadius 2.1.9 + Mysql 5.3 on FreeBSD 8.1, and the radiusd exits abnormally (although it says "info: exiting normally" by itself ) many times a day! I have been driven mad! and I decide to revert to freeradius 1.1.8. Believe me, or you can search "exit normally but unexpectedly" in maillist archive yourself. PS: deployment of freeradius is rather easy. Read its sample configuration files, and you will find them easy to understand.

3 5

Freeradius 2.1.9 stop working
by BELLIERE Eric 05 Aug '10

05 Aug '10

Thanks. I saw on http://koji.fedoraproject.org/koji/buildinfo?buildID=187278 that there is a new RPM freeradius-2.1.9-3.fc15.src.rpm and in the changelog I can see " Work-around for bug #35 " So I will upgrade with this RPM. Maybe someone can confirm that the problem is well corrected with this RPM? Thanks Eric Bellière -----Original Message----- From: freeradius-users-bounces+eric.belliere=mail.mobistar.be(a)lists.freeradius.org [mailto:freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.freera dius.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Thursday 5 August 2010 12:00 To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 64, Issue 18 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Fwd: FreeRadius2&MySQL (Alan Buxey) 2. Re: Freeradius 2.1.9 stop working (Alan Buxey) 3. Re: Freeradius 2.1.9 stop working (Johan Meiring) ---------------------------------------------------------------------- Message: 1 Date: Thu, 5 Aug 2010 10:02:53 +0100 From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: Fwd: FreeRadius2&MySQL To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20100805090253.GA20214(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Can you please provide me with the link of document you talk about , http://wiki.freeradius.org/SQL_HOWTO alan ------------------------------ Message: 2 Date: Thu, 5 Aug 2010 10:04:38 +0100 From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: Freeradius 2.1.9 stop working To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Cc: ROUSSEAU David <David.ROUSSEAU(a)mail.mobistar.be> Message-ID: <20100805090438.GB20214(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Thanks Alan. But maybe you can update me with the out date of the RPM in > 2.1.10? 2.1.10 isnt out yet. but when it is, then your package maintainers should ensure a new RPM is available. alan ------------------------------ Message: 3 Date: Thu, 05 Aug 2010 11:19:48 +0200 From: Johan Meiring <jmeiring(a)pcservices.co.za> Subject: Re: Freeradius 2.1.9 stop working To: freeradius-users(a)lists.freeradius.org Message-ID: <4C5A8234.1040209(a)pcservices.co.za> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 2010/08/05 11:04 AM, Alan Buxey wrote: > > 2.1.10 isnt out yet. but when it is, then your package maintainers should > ensure a new RPM is available. > This page might tell you how to build an RPM from source. http://wiki.freeradius.org/Red_Hat_FAQ Use git as the "source". -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 64, Issue 18 ************************************************

2 1

Freeradius 2.1.9 stop working
by BELLIERE Eric 05 Aug '10

05 Aug '10

Thanks Alan. But maybe you can update me with the out date of the RPM in 2.1.10? I would like to upgrade from the RPM. I don't want to make a ./configure to install the FreeRadius. Thanks Eric B. -----Original Message----- From: freeradius-users-bounces+eric.belliere=mail.mobistar.be(a)lists.freeradius.org [mailto:freeradius-users-bounces+eric.belliere=mail.mobistar.be@lists.freera dius.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Tuesday 3 August 2010 16:53 To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 64, Issue 10 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Freeradius 2.1.9 digest authentication problem (Alan Buxey) 2. Re: Tag and Untag a port in several VLAN (fcombernous(a)kezia.com) 3. Re: Freeradius 2.1.9 stop working (Alan DeKok) 4. Re: Freeradius 2.1.9 digest authentication problem (Nicolas Goutte) 5. Re: Freeradius 2.1.9 digest authentication problem (Alan Buxey) 6. Re: Freeradius 2.1.9 digest authentication problem (alexb(a)arctel.ru) 7. Re: Freeradius 2.1.9 digest authentication problem (Alan DeKok) 8. Re: Tag and Untag a port in several VLAN (Fabien COMBERNOUS) 9. Re: Freeradius 2.1.9 digest authentication problem (Nicolas Goutte) ---------------------------------------------------------------------- Message: 1 Date: Tue, 3 Aug 2010 13:26:27 +0100 From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20100803122627.GD16747(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Tried Cleartext-Password := "test", Cleartext-Password == "test", > Cleartext-Password = "test", result is the same. and remember - if you are changing the users file and not doing anything funky, you will have to restart the server! alan ------------------------------ Message: 2 Date: Tue, 3 Aug 2010 14:34:47 +0200 (CEST) From: fcombernous(a)kezia.com Subject: Re: Tag and Untag a port in several VLAN To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <e90578a477a443c9f260c2f6b6fc8b28.squirrel(a)kezia.com> Content-Type: text/plain;charset=iso-8859-1 > On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote: >> Thank you for your answer. >> I can't change FreeRadius version. So i need to use decimal number. >> Can you give me an exemple about to untag a port in vlan 7 ? >> > > > Just convert 0x320007 to decimal?? No. Just a correct example in hexa to untag in vlan 7. I'll translate in decimal. Thank you for your help. ------------------------------ Message: 3 Date: Tue, 03 Aug 2010 14:35:34 +0200 From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: Freeradius 2.1.9 stop working To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <4C580D16.6000006(a)deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 BELLIERE Eric wrote: > Then if it is a bug I will have to upgrade? or do you have a patch? > you send me the link for GIT.freeradius.org but what must I do to correct > this problem? Try using the v2.1.x branch from http://git.freeradius.org. i.e. download it and install it. The instructions are on that web page. Go read them. > For the log rotate I will add kill -HUP `cat /var/run/radiusd/radiusd.pid` > in postrotate. > Like this : > /var/log/radius/radius.log { > daily > rotate 4 > create > missingok > postrotate > kill -HUP `cat /var/run/radiusd/radiusd.pid` > compress > } > > Must I put this KILL -HUP for each log to rotate? > (/var/log/radius/radacct/*/detail, /var/log/radius/checkrad.log, ...) or > only for radius.log ? Only for radius.log. Alan DeKok. ------------------------------ Message: 4 Date: Tue, 3 Aug 2010 14:42:44 +0200 From: Nicolas Goutte <nicolas.goutte(a)extragroup.de> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <B32493C2-246D-4FED-B43E-C163AF85802C(a)extragroup.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed; delsp=yes Am 03.08.2010 um 14:25 schrieb Alan Buxey: > Hi, > >> Tried Cleartext-Password := "test", Cleartext-Password == "test", >> Cleartext-Password = "test", result is the same. > > why? why did you do that? > > Cleartext-Password := "test" > > is the only correct way. you just compl;eted ignored the information/ > help given by the actual > author of FreeRADIUS. you dont trust him to know how the code works?? > Alan Cox's email was sent only minutes later. > alan > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Have a nice day. Nicolas Goutte extragroup GmbH - Karlsruhe Waldstr. 49 76133 Karlsruhe Germany Gesch?ftsf?hrer: Lars Busch Registergericht: Amtsgericht M?nster / HRB: 5624 Steuer Nr.: 337/5903/0421 / UstID: DE 204607841 ------------------------------ Message: 5 Date: Tue, 3 Aug 2010 14:24:44 +0100 From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20100803132444.GC16890(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Alan Cox's email was sent only minutes later. Alan Cox? wow. RedHat finally taking development to new levels...... you meant Alan DeKok I assume? Too many Alan's for you? ;-) alan ------------------------------ Message: 6 Date: Tue, 3 Aug 2010 17:36:46 +0400 From: alexb(a)arctel.ru Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20100803133646.GB4282(a)arctel.ru> Content-Type: text/plain; charset=us-ascii On Tue, Aug 03, 2010 at 01:56:48PM +0200, Alan DeKok wrote: > alexb(a)arctel.ru wrote: > > trying to test digest authentication (freeradius 2.1.9). After > > uncommenting 'digest' in sites-available/default 'radiusd -X' > > starts fine. but after I added (according to 'man rlm_digest') > > to users file: > > > > test Auth-Type := Digest, User-Password = "test" > > Reply-Message = "Hello, test with digest" > > (1) Don't force Auth-Type > (2) Use: Cleartext-Password := 'test" > Not: User-Password = "test" Ok, it works as expected (according test procedure in 'man rlm_digest') with this config: test Cleartext-Password := "test" Reply-Message = "Hello, test with digest" i.e. without Auth-Type attrubute. I MUST NOT use Auth-Type? > (3) search for "digest" in raddb/sites-available/default found and uncommented "digest" in "authorize" and "authenticate" sections already (before posting here). > (4) READ the comments > (5) enable digest as instructed Thank You -- Alexander Belov ------------------------------ Message: 7 Date: Tue, 03 Aug 2010 15:58:17 +0200 From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <4C582079.9010506(a)deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 alexb(a)arctel.ru wrote: > i.e. without Auth-Type attrubute. I MUST NOT use Auth-Type? No. It has VERY limited uses. Nearly everyone who tries to use it gets it wrong. Ignore all of the third-party web sites that say to set Auth-Type. They're wrong, and they've been wrong for about 5 years. Alan DeKok. ------------------------------ Message: 8 Date: Tue, 03 Aug 2010 16:01:46 +0200 From: Fabien COMBERNOUS <fcombernous(a)kezia.com> Subject: Re: Tag and Untag a port in several VLAN To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <4C58214A.2090206(a)kezia.com> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Alan DeKok wrote: > Fabien COMBERNOUS wrote: > >> I'm using FreeRadius 2.1.3. I'm doing a mac based port assignment with >> sql backend. >> > ... > >> But when i plug the equipment radius give this debug : >> [sql1] expand: SELECT id, groupname, attribute, value, >> op FROM radgroupreply WHERE groupname = >> '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, >> attribute, value, op FROM radgroupreply >> WHERE groupname = 'test' ORDER BY id >> rlm_sql: Failed to create the pair: Unknown value 0x320007 for attribute >> Egress-VLANID >> >> What am i missing or misunderstanding ? >> > > The hex value isn't accepted in 2.1.3. You'll need to run 2.1.6 or later. > > Or, change the hex number to a decimal number. > So i used the other possibility with Egress-VLAN-Name instead of Egress-VLANID. It is easier to understand the meaning of the value and it works with my version of FreeRadius. Thank you for your help. -- *Fabien COMBERNOUS* /unix system engineer/ www.kezia.com <http://www.kezia.com/> *Tel: +33 (0) 467 992 986* Kezia Group ------------------------------ Message: 9 Date: Tue, 3 Aug 2010 16:53:01 +0200 From: Nicolas Goutte <nicolas.goutte(a)extragroup.de> Subject: Re: Freeradius 2.1.9 digest authentication problem To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <885F2DEE-D290-4F30-A78F-96EBFA2075FE(a)extragroup.de> Content-Type: text/plain; charset=ISO-8859-1; format=flowed Am 03.08.2010 um 15:24 schrieb Alan Buxey: > Hi, > >> Alan Cox's email was sent only minutes later. > > Alan Cox? wow. RedHat finally taking development to new levels...... > > you meant Alan DeKok I assume? Too many Alan's for you? ;-) Sorry for the mistyping. > > alan > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Nicolas Goutte extragroup GmbH - Karlsruhe Waldstr. 49 76133 Karlsruhe Germany Gesch?ftsf?hrer: Lars Busch Registergericht: Amtsgericht M?nster / HRB: 5624 Steuer Nr.: 337/5903/0421 / UstID: DE 204607841 ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 64, Issue 10 ************************************************

3 2

Multiple LDAP search
by Wayne Van der Merwe 04 Aug '10

04 Aug '10

Hi all I got LDAP working on FreeRADIUS Version 2.1.8, with SUSE 10.1 Now i need to do the following if the user is not found in the 1st LDAP search, that searches in o=EC, then it must search again in o=HLT. I would like to know where to create these files. Thank you Wayne van der Merwe

3 2

freeradius, rlm_sql and tagged attributes
by Evgeniy Kozhuhovskiy 04 Aug '10

04 Aug '10

I need to reply to NAS with same attributes with different tags. All works ok when i'm using users file. But when i'm migrating to rlm_sql, only first instance of attribute goes in reply: mysql> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id; +----+-----------+-----------------------+-----------------+----+ | id | groupname | attribute | value | op | +----+-----------+-----------------------+-----------------+----+ | 6 | test | Framed-IP-Address | 255.255.255.254 | = | | 7 | test | Service-Type | Framed-User | = | | 8 | test | Acct-Interim-Interval | 1800 | = | | 9 | test | PPPD-Pool-Number | ippool | = | | 16 | test | Ip-Address-Pool-Name | ippool | = | | 19 | test | Service-Name:1 | GUEST | = | | 20 | test | Service-Name:2 | INET | = | | 21 | test | Service-Options:1 | 0 | = | | 22 | test | Service-Options:2 | 1 | = | | 28 | test | Context-Name | Internet | = | +----+-----------+-----------------------+-----------------+----+ 10 rows in set (0.01 sec) rad_recv: Access-Request packet from host 127.0.0.1 port 11113, id=248, length=252 User-Name = "test@test" CHAP-Password = 0x01f304695c088000b6a248776d9ec67084 CHAP-Challenge = 0xc581f30d3a2736d1a039596397c627fd Service-Type = Framed-User Framed-Protocol = PPP NAS-Identifier = "Redback" NAS-Port = 33619968 NAS-Real-Port = 553652128 NAS-Port-Type = Virtual NAS-Port-Id = "2/1 vlan-id 4000 pppoe 6" Medium-Type = 11 Mac-Address = "00-0c-29-bd-8b-a1" Platform-Type = 3 OS-Version = "6.2.1.2" Acct-Session-Id = "0100FFFF680000BE-4C596DEB" NAS-IP-Address = 172.26.201.21 Proxy-State = 0x3632 server guest { +- entering group authorize ++[preprocess] returns ok rlm_chap: Setting 'Auth-Type := CHAP' ++[chap] returns ok users: Matched entry DEFAULT at line 163 ++[files] returns ok expand: %{User-Name} -> test@test rlm_sql (sql): sql_set_user escaped user --> 'test@test' rlm_sql (sql): Reserving sql socket id: 65 expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'test@test' ORDER BY id rlm_sql (sql): User found in radcheck table expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'test@test' ORDER BY id expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'test@test' ORDER BY priority expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'test' ORDER BY id rlm_sql (sql): User found in group test expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = 'test' ORDER BY id rlm_sql (sql): Released sql socket id: 65 ++[sql] returns ok rad_check_password: Found Auth-Type CHAP auth: type "CHAP" +- entering group CHAP rlm_chap: login attempt by "test@test" with CHAP password rlm_chap: Using clear text password "ilser56" for user test@test authentication. rlm_chap: chap user test@test authenticated succesfully ++[chap] returns ok Login OK: [test@test/<CHAP-Password>] (from client localhost port 33619968) } # server guest Sending Access-Accept of id 248 to 127.0.0.1 port 11113 Framed-Protocol = PPP Session-Timeout = 172800 Framed-IP-Address = 255.255.255.254 Framed-Compression = Van-Jacobson-TCP-IP Service-Type = Framed-User Acct-Interim-Interval = 1800 PPPD-Pool-Number = "ippool" Ip-Address-Pool-Name = "ippool" Service-Name:1 = "GUEST" Service-Options:1 = 0 Context-Name = "Internet" Proxy-State = 0x3632 Finished request 374. -- С уважением, Евгений Кожуховский Руководитель группы сервисных платформ УИТ ЦИТС МГТС РУП Белтелеком +375-29-3998175 +375-29-7561625 +375-17-3060026

2 2

Prevent logging of testusers?
by Jens Weibler 04 Aug '10

04 Aug '10

Hi, I'm searching for a way to prevent testlogins getting logged. Is this possible? How? ;) -- Jens Weibler IT Services Hochschule Darmstadt www.h-da.de University of Applied Sciences Fachbereich Informatik www.fbi.h-da.de Schöfferstr. 8b D-64295 Darmstadt Tel +49 6151 16-8425 Fax +49 6151 16-8935 jens.weibler(a)h-da.de

1 0