- Freeradius-Users - lists.freeradius.org

Re : What is the Class attribute for?
by Alexandre Chapellon 25 May '10

25 May '10

Yes, the attribute you need to return Back to your NAS, might be vendor specific (take a look at the dictionnaries). Sending this Attr in Access-Accept, should do the trick but I suggest you still use accounting cause It's always helpfull, and because It's one A in AAA! Sent from my HTC. ----- Reply message ----- De : "weiwei fang" <fangvv(a)gmail.com> Date : Lun, mai 24, 2010 15:09 Objet : Re : What is the Class attribute for? Pour : "Arran Cudbard-Bell" <a.cudbardb(a)gmail.com> Cc : "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org>

1 0

FreeRadius pre 2.1.9 logging behavior
by reedho＠gmail.com 25 May '10

25 May '10

Dear Users, We are in the process migrating our production server running 2.1.3 version and testing the pre 2.1.9. All running well so far except the logging output generated by radiusd. We set logging to stderr or stdout, when started with debug_level = 0, no log generated except the first "starting virtual server..." line, but when first started with debug_level > 0 and set back to 0 with radmin, the log show normal output as seen on the production server. This behavior not seen when logging to files or syslog, only when set to stdout/stderr. So, my best guess after looking the source is that logging to stdout/err does not go to same processing flow as the others. I have searching for this issue but still no luck, do I miss something? Thanks n best regards, --- Ridho

3 2

Decode + sign
by Ahmed Munir 25 May '10

25 May '10

Hi, I want to know how can I decode + sign in radius? Because in radcheck table the username I enlisted is +911234567789, when I want to register on this number the output I'm getting is listed down below; [sql] expand: %{Stripped-User-Name} -> +911234567789 [sql] sql_set_user escaped user --> '+911234567789' rlm_sql (sql): Reserving sql socket id: 2 [sql] expand: SELECT id, username, attribute, value, op FROM rad_check WHERE username = '%{SQL-User-Name}' -> SELECT id, name, attribute, secret, op FROM rad_check WHERE username = '=2B911234567789' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = '=2B911234567789' ORDER BY priority rlm_sql (sql): Released sql socket id: 2 [sql] User +911234567789 not found ++[sql] returns notfound ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. The SQL is converting + sign to 2B, that is why I can't get registered to radius. Please advise how can I resolve this issue. -- Regards, Ahmed Munir

2 1

hi.all
by 李立明 25 May '10

25 May '10

Hi,all I am a newer about freeradius. I have installed freeradius version 2.1.4. Now I am doing a test about EAP-md5. I add the attribute 'Class' into the radreply table of mysql database. I find the 'Class' attribute in Accesss-Challenge and Access-Accept radius packets, but the RFC2865 said the attribute 'Class' should only exist in Access-Accept radius packet. However, I hope that this attribute is only to be returned in the last Access-Accept packet. What should I do? Your reply wll be appreciated.Thank you.

1 0

Login scripts
by tyllerd 25 May '10

25 May '10

Hi I have been testing freeradius for a while and its seems really straight forward. I would just like to know if its possible to right "login scripts". What I am trying to achieve is this. we currently have two different gateways out there (nomadix and mikrotik) and if the users from nomadix ventures to a mikrotik site I would like to change his attributes to one of the VSA's that mikrotik will understand. Is this possible at all, where would one go about writing such a script? Thanks alot -- View this message in context: http://old.nabble.com/Login-scripts-tp28644158p28644158.html Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 2

no access-accept with users file
by Robert Wilkinson 25 May '10

25 May '10

I feel defeated. I was able to get an access-accept result. During my attempt to use MySQL it appears that I broke my configuration. I am using freeradius 2.1.8 on ubuntu 10.4 server. Here is my freeradius -X debug output: freeradius -X FreeRADIUS Version 2.1.8, for host i486-pc-linux-gnu, built on Jan 5 2010 at 02:49:11 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd.conf including configuration file /etc/freeradius/clients.conf including files in directory /etc/freeradius/modules/ including configuration file /etc/freeradius/modules/ldap including configuration file /etc/freeradius/modules/preprocess including configuration file /etc/freeradius/modules/pap including configuration file /etc/freeradius/modules/exec including configuration file /etc/freeradius/modules/krb5 including configuration file /etc/freeradius/modules/wimax including configuration file /etc/freeradius/modules/policy including configuration file /etc/freeradius/modules/ntlm_auth including configuration file /etc/freeradius/modules/sql_log including configuration file /etc/freeradius/modules/linelog including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login including configuration file /etc/freeradius/modules/mac2ip including configuration file /etc/freeradius/modules/otp including configuration file /etc/freeradius/modules/detail.example.com including configuration file /etc/freeradius/modules/expiration including configuration file /etc/freeradius/modules/perl including configuration file /etc/freeradius/modules/unix including configuration file /etc/freeradius/modules/etc_group including configuration file /etc/freeradius/modules/files including configuration file /etc/freeradius/modules/chap including configuration file /etc/freeradius/modules/radutmp including configuration file /etc/freeradius/modules/attr_rewrite including configuration file /etc/freeradius/modules/passwd including configuration file /etc/freeradius/modules/inner-eap including configuration file /etc/freeradius/modules/attr_filter including configuration file /etc/freeradius/modules/realm including configuration file /etc/freeradius/modules/acct_unique including configuration file /etc/freeradius/modules/mschap including configuration file /etc/freeradius/modules/sradutmp including configuration file /etc/freeradius/modules/digest including configuration file /etc/freeradius/modules/echo including configuration file /etc/freeradius/modules/mac2vlan including configuration file /etc/freeradius/modules/cui including configuration file /etc/freeradius/modules/always including configuration file /etc/freeradius/modules/expr including configuration file /etc/freeradius/modules/ippool including configuration file /etc/freeradius/modules/detail.log including configuration file /etc/freeradius/modules/pam including configuration file /etc/freeradius/modules/counter including configuration file /etc/freeradius/modules/logintime including configuration file /etc/freeradius/modules/checkval including configuration file /etc/freeradius/modules/detail including configuration file /etc/freeradius/modules/smsotp including configuration file /etc/freeradius/modules/smbpasswd including configuration file /etc/freeradius/sql.conf including configuration file /etc/freeradius/sql/mysql/dialup.conf including configuration file /etc/freeradius/policy.conf main { user = "freerad" group = "freerad" allow_core_dumps = no } including dictionary file /etc/freeradius/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/freeradius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/freeradius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/var/run/freeradius/freeradius.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = no log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server { modules { } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 41227, id=30, length=55 User-Name = "bob" User-Password = "hello" NAS-IP-Address = 74.207.237.249 NAS-Port = 0 WARNING: Empty section. Using default return values. No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 30 to 127.0.0.1 port 41227 Waking up in 4.9 seconds. Cleaning up request 0 ID 30 with timestamp +14 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 54343, id=126, length=55 User-Name = "bob" User-Password = "hello" NAS-IP-Address = 74.207.237.249 NAS-Port = 0 WARNING: Empty section. Using default return values. No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Delaying reject of request 1 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 1 Sending Access-Reject of id 126 to 127.0.0.1 port 54343 Waking up in 4.9 seconds. Cleaning up request 1 ID 126 with timestamp +1574 Ready to process requests. I have spent 2 days on this with little reward. Please help. Thank you. Robert Wilkinson -- Chief Geek Open Technology Group Bermuda Please visit www.otgb.net.

2 2

Re : What is the Class attribute for?
by Alexandre Chapellon 25 May '10

25 May '10

I personnally use it for QoS definition. It works as expected but i can't garantee this is the regular use for this attribute. What's special with the class attribute is that if you send It in Access-Accept, It should be added in later accounting packets. This can be very usefull and if you don't nées this features i suggest you use another attribute. Sent from my HTC. ----- Reply message ----- De : "weiwei fang" <fangvv(a)gmail.com> Date : Dim, mai 23, 2010 23:15 Objet : What is the Class attribute for? Pour : <freeradius-users(a)lists.freeradius.org>

4 3

execute programme when receiving account packet
by Toure Mamadou 24 May '10

24 May '10

Hi, All i'd like to execute an external program when receiving an Accounting-Request. I've try exec ipoque { wait = yes program = "/bin/sh /opt/mytest %{User-Name}" input_pairs = request output_pairs = reply shell_escape = yes output = none packet_type = Accounting-Request } But the program is not execute even if I comment packet_type = Accounting-Request line (#packet_type = Accounting-Request). Can someone help me please. Regards.

1 0

(no subject)
by C. Diego Raffaelli A. 24 May '10

24 May '10

unsubscribe Magusero09= c.diegoraffaelli(a)gmail.com

1 0

incorrect static ip sometimes
by Jeff Stockett 24 May '10

24 May '10

I'm using CentOS 5.4 and freeradius1.3 with a mysql backend with a redback se800 access device. Nearly everything has been working great, but I have a problem periodically, where DSL modems will receive the wrong static IP. It appears that if a customer power cycles their DSL modem, the modem comes back up before the redback has realized the previous session has ended , but instead of just failing, freeradius is giving another static IP (like the next free one it finds in same static range). Do I need to configure simultaneous use and if so how do I get it to check the redback (I couldn't find any mibs for that model) or is this maybe a problem with freeradius1.3 that could be fixed by upgrading to freeradius2??? Any advice would be appreciated! Thanks, Jeff ------------------------- Msg sent via MCC Webmail - http://www.molalla.net/

5 5