- Freeradius-Users - lists.freeradius.org

Problem building on Debian 5.0.4 / 2.6.24-etchnhalf.1-686
by Tim Robinson 28 Apr '10

28 Apr '10

Hi all I am having problems building FR 2.1.8 on Debian 5.0.4 I have followed the process: Building Debian packages $ tar zxf freeradius-server-2.X.Y.tar.gz $ cd freeradius-server-2.X.Y $ fakeroot dpkg-buildpackage -b -uc ... All looks well until.... gcc -o .libs/radclient .libs/radclient.o /home/tim/freeradius-server-2.1.8/src/lib/.libs/libfreeradius-radius.so -lnsl -lresolv -lpthread -Wl,--rpath -Wl,/usr/lib/freeradius creating radclient /usr/bin/libtool --mode=compile gcc -g -O2 -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wca st-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls - Wundef -I/home/tim/freeradius-server-2.1.8/src -DHOSTINFO=\"i486-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.1.8\" -DOPENSSL_NO_KRB5 -c radmin.c gcc -g -O2 -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-str ings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/home/tim/freeradius-se rver-2.1.8/src -DHOSTINFO=\"i486-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.1.8\" -DOPENSSL_NO_KRB5 -c radmin.c -fPIC -DPIC -o .libs/radmin.o radmin.c:55: warning: function declaration isn't a prototype radmin.c: In function 'main': radmin.c:437: warning: implicit declaration of function 'using_history' radmin.c:437: warning: nested extern declaration of 'using_history' radmin.c:438: warning: implicit declaration of function 'rl_bind_key' radmin.c:438: warning: nested extern declaration of 'rl_bind_key' radmin.c:438: error: 'rl_insert' undeclared (first use in this function) radmin.c:438: error: (Each undeclared identifier is reported only once radmin.c:438: error: for each function it appears in.) radmin.c:530: warning: implicit declaration of function 'add_history' radmin.c:530: warning: nested extern declaration of 'add_history' make[5]: *** [radmin.lo] Error 1 make[5]: Leaving directory `/home/tim/freeradius-server-2.1.8/src/main' make[4]: *** [common] Error 2 make[4]: Leaving directory `/home/tim/freeradius-server-2.1.8/src' make[3]: *** [all] Error 2 make[3]: Leaving directory `/home/tim/freeradius-server-2.1.8/src' make[2]: *** [common] Error 2 make[2]: Leaving directory `/home/tim/freeradius-server-2.1.8' make[1]: *** [all] Error 2 make[1]: Leaving directory `/home/tim/freeradius-server-2.1.8' make: *** [build-arch-stamp] Error 2 dpkg-buildpackage: failure: debian/rules build gave error exit status 2 wendolene:/home/tim/freeradius-server-2.1.8# uname -a Linux wendolene 2.6.24-etchnhalf.1-686 #1 SMP Thu Feb 25 05:42:02 UTC 2010 i686 GNU/Linux wendolene:/home/tim/freeradius-server-2.1.8# less /etc/deb debconf.conf debian_version wendolene:/home/tim/freeradius-server-2.1.8# less /etc/debian_version wendolene:/home/tim/freeradius-server-2.1.8# Any ideas please? I have googled for days on this.... Cheers Rgds Tim -- With Best Regards Tim Robinson, Director TxRx Communications Ltd +44 1256 810630 http://www.txrxcomms.co.uk Registered in England 6260998

3 3

Writing Accounting Detail log to DataBase
by Nasser Heidari 28 Apr '10

28 Apr '10

Dear All, I want to know how can I insert accounting detail log to Mysql database. Thanks .

2 1

Proxy Accounting Records only to another MySQL Server
by Eric.Hernandez＠allegiantair.com 28 Apr '10

28 Apr '10

Accounting methods The following accounting logging methods are supported by the server Local 'detail' files Local 'wtmp' and 'utmp' files Proxy to another RADIUS server Replicate to one or more RADIUS servers SQL (Oracle, MySQL, PostgreSQL, Sybase, IODBC, etc) from http://freeradius.org/features.html Hi All, Is it possible to have a freeradius box, that use a local copy of mysql for everything except accounting. The accouting records would be written via a proxy to another MySQL box? If so where do i configure it? Thanks, -Eric

1 1

error message connection to MySQL. (Error Message :rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 0)
by bslee (HKBU) 28 Apr '10

28 Apr '10

Hi, I try to authenticate freeradius 2.1.8 using mysql5.0.26. Information of my system: 1. OS is SuSE Linux SLES10 SP2. 2. I have installed following RPM for FreeRadius 2.1.8: #rpm -qa |grep freeradius freeradius-server-utils-2.1.8-1.1 freeradius-client-libs-1.1.6-4.1 freeradius-server-2.1.8-1.1 freeradius-client-devel-1.1.6-4.1 freeradius-server-devel-2.1.8-1.1 freeradius-client-1.1.6-4.1 freeradius-server-debuginfo-2.1.8-1.1 freeradius-server-libs-2.1.8-1.1 3. installed following MySQL RPM: # rpm -qa |grep mysql apache2-mod_auth_mysql-3.0.0-14.2 mysql-5.0.26-12.18 mysql-shared-5.0.26-12.18 perl-DBD-mysql-3.0002-15.2 php5-mysql-5.2.5-9.5 mysql-client-5.0.26-12.18 I have successfully installed the RPM for freeradius and test for authentication using file "users" is successful. When I tried to authenticate via MySQL, it failed. There is no connection record to MySQL in log file of MySQL. Searching the WWW, I found out there is a RPM named freeradius-mysql* for Red Hat FC. There is no such RPM for SuSE in download website of freeradius.org. Is corresponding RPM required for SLES10SP2? Where to download? Or, such functionality is already included in one of my installed RPM? Terminal 1 message: # radtest user1 test1 localhost 1812 RAD7429secret Sending Access-Request of id 250 to 127.0.0.1 port 1812 User-Name = "user1" User-Password = "test1" NAS-IP-Address = 158.182.158.61 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=250, length=20 Terminal 2 message: Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 32768, id=250, length =57 User-Name = "user1" User-Password = "test1" NAS-IP-Address = 158.182.158.61 NAS-Port = 1812 +- entering group authorize {...} ++[preprocess] returns ok [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-deta il-%Y%m%d -> /var/log/radius/radacct/127.0.0.1/auth-detail-20100428 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d exp ands to /var/log/radius/radacct/127.0.0.1/auth-detail-20100428 [auth_log] expand: %t -> Wed Apr 28 20:38:07 2010 ++[auth_log] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "user1", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound [sql] expand: %{User-Name} -> user1 [sql] sql_set_user escaped user --> 'user1' rlm_sql (sql): Ignoring unconnected handle 4.. rlm_sql (sql): Ignoring unconnected handle 3.. rlm_sql (sql): Ignoring unconnected handle 2.. rlm_sql (sql): Ignoring unconnected handle 1.. rlm_sql (sql): Ignoring unconnected handle 0.. rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 0 ++[sql] returns fail Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> user1 attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 250 to 127.0.0.1 port 32768 Waking up in 4.9 seconds. Cleaning up request 0 ID 250 with timestamp +10 Ready to process requests. --------------- Cheers, Joe __________ Information from ESET Smart Security, version of virus signature database 5066 (20100427) __________ The message was checked by ESET Smart Security. http://www.eset.com

2 1

R: R: R: NAS-Identifier and radgroupcheck table
by Ana Gallardo 28 Apr '10

28 Apr '10

Hello, sorry to ask again about this isuue, but I can't get the correct configuration. I follow your howto: http://wiki.freeradius.org/SQL_Huntgroup_HOWTO I want to filter users login from fixed NAS,but I always get an reject. I don't understand why in the example bellow: ++[request] returns notfound Thank you very much. EXAMPLE My SQL database: mysql> select * from radcheck; +----+------------+--------------------+----+-------------+ | id | username | attribute | op | value | +----+------------+--------------------+----+-------------+ | 1 | ana | Cleartext-Password | := | claveAna | +----+------------+--------------------+----+-------------+ 1 rows in set (0.00 sec) mysql> select * from radreply; +----+----------+---------------+----+--------------------------+ | id | username | attribute | op | value | +----+----------+---------------+----+--------------------------+ | 1 | ana | Reply-Message | += | Hola Anita | +----+----------+---------------+----+--------------------------+ 1 rows in set (0.00 sec) mysql> select * from radusergroup; +----------+-----------+----------+ | username | groupname | priority | +----------+-----------+----------+ | ana | CAU1 | 0 | +----------+-----------+----------+ 1 rows in set (0.00 sec) mysql> select * from radgroupcheck; +----+-----------+----------------+----+--------+ | id | groupname | attribute | op | value | +----+-----------+----------------+----+--------+ | 1 | CAU1 | Huntgroup-Name | == | pccau1 | | 2 | CAU1 | Auth-Type | := | Accept | +----+-----------+----------------+----+--------+ 2 rows in set (0.00 sec) mysql> select * from radgroupreply; +----+-----------+---------------+----+------------------------------+ | id | groupname | attribute | op | value | +----+-----------+---------------+----+------------------------------+ | 1 | CAU1 | Reply-Message | += | Hola miembros del grupo CAU1 | +----+-----------+---------------+----+------------------------------+ 1 rows in set (0.00 sec) mysql> select * from nas; +----+----------------+-----------+-------+-------+--------+--------+-----------+---------------+ | id | nasname | shortname | type | ports | secret | server | community | description | +----+----------------+-----------+-------+-------+--------+--------+-----------+---------------+ | 1 | X.X.X.X | pcCAU1 | other | NULL | cau123 | NULL | NULL | CAU1 computer | +----+----------------+-----------+-------+-------+--------+--------+-----------+---------------+ 1 rows in set (0.00 sec) In my users file: debian:/etc/freeradius# cat users DEFAULT Auth-Type := Reject bob Cleartext-Password := "hello" Reply-Message = "Hola %{User-Name}" My default server: authorize { update request { Huntgroup-Name = "%{sql:select shortname from nas where nasname=\"%{Client-IP-Address}\"}" } preprocess mschap suffix eap { ok = return } files sql expiration pap } Request with radtest + ana + pcCAU1 rad_recv: Access-Request packet from host X.X.X.X port 45281, id=133, length=55 User-Name = "ana" User-Password = "claveAna" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 +- entering group authorize {...} sql_xlat expand: %{User-Name} -> ana sql_set_user escaped user --> 'ana' expand: select shortname from nas where nasname="%{Client-IP-Address}" -> select shortname from nas where nasname="X.X.X.X" expand: /var/log/freeradius/sqltrace.sql -> /var/log/freeradius/sqltrace.sql rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: select shortname from nas where nasname="X.X.X.X" sql_xlat finished rlm_sql (sql): Released sql socket id: 3 expand: %{sql:select shortname from nas where nasname="%{Client-IP-Address}"} -> pcCAU1 ++[request] returns notfound ++[preprocess] returns ok ++[mschap] returns noop [suffix] No '@' in User-Name = "ana", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry DEFAULT at line 9 ++[files] returns ok [sql] expand: %{User-Name} -> ana [sql] sql_set_user escaped user --> 'ana' rlm_sql (sql): Reserving sql socket id: 2 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = BINARY '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = BINARY 'ana' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radcheck WHERE username = BINARY 'ana' ORDER BY id [sql] User found in radcheck table [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = BINARY '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = BINARY 'ana' ORDER BY id rlm_sql_mysql: query: SELECT id, username, attribute, value, op FROM radreply WHERE username = BINARY 'ana' ORDER BY id [sql] expand: SELECT groupname FROM radusergroup WHERE username = BINARY '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = BINARY 'ana' ORDER BY priority rlm_sql_mysql: query: SELECT groupname FROM radusergroup WHERE username = BINARY 'ana' ORDER BY priority [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'CAU1' ORDER BY id rlm_sql_mysql: query: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = 'CAU1' ORDER BY id rlm_sql (sql): Released sql socket id: 2 ++[sql] returns ok [expiration] Checking Expiration time: '02 Dec 2010' ++[expiration] returns ok [pap] Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = Reject Auth-Type = Reject, rejecting user Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [sql] expand: %{User-Name} -> ana [sql] sql_set_user escaped user --> 'ana' [sql] expand: INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( '%{User-Name}', '%{Calling-Station-Id}', '%C', '%{Nas-IP-Address}', '%{reply:Packet-Type}', NOW()) -> INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( 'ana', '', 'pcCAU1', '127.0.1.1', 'Access-Reject', NOW()) [sql] expand: /var/log/freeradius/sqltrace.sql -> /var/log/freeradius/sqltrace.sql rlm_sql (sql) in sql_postauth: query is INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( 'ana', '', 'pcCAU1', '127.0.1.1', 'Access-Reject', NOW()) rlm_sql (sql): Reserving sql socket id: 1 rlm_sql_mysql: query: INSERT INTO radpostauth (username, mac, client, nas, reply, authdate) VALUES ( 'ana', '', 'pcCAU1', '127.0.1.1', 'Access-Reject', NOW()) rlm_sql (sql): Released sql socket id: 1 ++[sql] returns ok [attr_filter.access_reject] expand: %{User-Name} -> ana attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 133 to X.X.X.X port 45281 Reply-Message += "Hola Anita" Sorry for my english. -- ____________________ Ana Gallardo Gómez ____________________

4 6

Dan Schaffer is not in the office
by Dan Schaffer 28 Apr '10

28 Apr '10

I will be out of the office starting 04/28/2010 and will not return until 05/03/2010. I will respond to your message when I return.

1 0

Segmentation fault
by Kristoffer Milligan 28 Apr '10

28 Apr '10

Hello again list, Thanks for the prompt reply on my previous inquiry regarding the compiling error. Worked perfectly with a new checkout. A new problem has arrived though. I am trying to do some authentication on the WiMAX platform. radiusd: FreeRADIUS Version 2.2.0, for host x86_64-unknown-linux-gnu, built on Apr 27 2010 at 08:06:03 Everything seems to be working fine. Client sends access request. server sends challenge. This happens back and forth as it should, the user is identified and the final challenges are ment to be exchanged: Wed Apr 28 09:04:01 2010 : Info: (6) [ttls] Got tunneled Access-Accept Wed Apr 28 09:04:01 2010 : Info: (6) [ttls] Got MS-CHAP2-Success, tunneling it to the client in a challenge. Followed by Sending Access-Challenge of id 39 to 192.168.106.11 port 1812 EAP-Message = 0x0107005f15800000005517030100503aaea6b28c1d5d90e71ec96d69f5846508965193166f92b750af976df6b0363867e15725dfc8a2370622601bc3e9487f6aa9843bf2e469cc773c7e9815c52e15755de3a962215e0674d1368fbab98f24 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x912a18ab942d0dffd8d9c931385c748e Wed Apr 28 09:04:01 2010 : Info: (6) Finished request 6. Wed Apr 28 09:04:01 2010 : Debug: Going to the next request Wed Apr 28 09:04:01 2010 : Debug: Waking up in 3.9 seconds. rad_recv: Access-Request packet from host 192.168.106.11 port 1812, id=40, length=194 User-Name = "{am=1}15a251baf3194e3ca5681323e82848a0(a)domain.tld" EAP-Message = 0x020700061500 Message-Authenticator = 0xfbce37cd2ed55658b94dbf0312e430fb NAS-Identifier = "AAALAB" NAS-IP-Address = 192.168.106.11 Calling-Station-Id = "00-12-CF-C7-4D-A8" WiMAX-BS-Id = 0x002f01010101 NAS-Port-Type = 27 Framed-MTU = 2000 Service-Type = Framed-User WiMAX-GMT-Timezone-offset = 0 State = 0x912a18ab942d0dffd8d9c931385c748e Wed Apr 28 09:04:01 2010 : Info: (7) +- entering group authorize {...} Wed Apr 28 09:04:01 2010 : Info: (7) ++[preprocess] returns ok Wed Apr 28 09:04:01 2010 : Info: (7) ++[wimax] returns ok Wed Apr 28 09:04:01 2010 : Info: (7) ++[chap] returns noop Wed Apr 28 09:04:01 2010 : Info: (7) ++[mschap] returns noop Wed Apr 28 09:04:01 2010 : Info: (7) [suffix] Looking up realm domain.tld for User-Name = "{am=1}15a251baf3194e3ca5681323e82848a0(a)domain.tld" Wed Apr 28 09:04:01 2010 : Info: (7) [suffix] Found realm "domain.tld" Wed Apr 28 09:04:01 2010 : Info: (7) [suffix] Adding Stripped-User-Name = "{am=1}15a251baf3194e3ca5681323e82848a0" Wed Apr 28 09:04:01 2010 : Info: (7) [suffix] Adding Realm = "nextnet.no" Wed Apr 28 09:04:01 2010 : Info: (7) [suffix] Authentication realm is LOCAL. Wed Apr 28 09:04:01 2010 : Info: (7) ++[suffix] returns ok Wed Apr 28 09:04:01 2010 : Info: (7) [eap] EAP packet type response id 7 length 6 Wed Apr 28 09:04:01 2010 : Info: (7) [eap] Continuing tunnel setup. Wed Apr 28 09:04:01 2010 : Info: (7) ++[eap] returns ok Wed Apr 28 09:04:01 2010 : Info: (7) Found Auth-Type = EAP Wed Apr 28 09:04:01 2010 : Info: (7) +- entering group authenticate {...} Wed Apr 28 09:04:01 2010 : Info: (7) [eap] Request found, released from the list Wed Apr 28 09:04:01 2010 : Info: (7) [eap] EAP/ttls Wed Apr 28 09:04:01 2010 : Info: (7) [eap] processing type ttls Wed Apr 28 09:04:01 2010 : Info: (7) [ttls] Authenticate Wed Apr 28 09:04:01 2010 : Info: (7) [ttls] processing EAP-TLS Wed Apr 28 09:04:01 2010 : Info: (7) [ttls] Received TLS ACK Wed Apr 28 09:04:01 2010 : Info: (7) [ttls] ACK handshake is finished Wed Apr 28 09:04:01 2010 : Info: (7) [ttls] eaptls_verify returned 3 Wed Apr 28 09:04:01 2010 : Info: (7) [ttls] eaptls_process returned 3 Segmentation fault Any ideas why radiusd is segfaulting?

2 1

No authenticate method (Auth-Type) configuration found for the request: Rejecting the user
by Johnny R 27 Apr '10

27 Apr '10

Dear All, I am about deploying an AAA services: All authentication is centralized on my freeradius-server (on debian lenny), in the green zone behind ipcop in which I installed ipcop addons called copspot ( like chilispot) for the captive portal. The authentication worked well locally against openldap (in the same server). When an user try to connect to internet in the Blue Zone (WLAN), it generates the following error in the radius-server. I am really stuck here, any help will be welcome. Thu Apr 22 14:14:51 2010 : Debug: } Thu Apr 22 14:14:51 2010 : Debug: Listening on authentication address * port 1812 Thu Apr 22 14:14:51 2010 : Debug: Listening on accounting address * port 1813 Thu Apr 22 14:14:51 2010 : Debug: Listening on proxy address * port 1814 Thu Apr 22 14:14:51 2010 : Info: Ready to process requests. rad_recv: Access-Request packet from host 192.168.2.1 port 32790, id=0, length=216 User-Name = "kkigor14" CHAP-Challenge = 0xd12e07a5f57980aa86a4aa049fc7bb40 CHAP-Password = 0x0005cff525e5508c82bc3ebb315c0b09e5 NAS-IP-Address = 0.0.0.0 Service-Type = Login-User Framed-IP-Address = 192.168.4.7 Calling-Station-Id = "00-21-63-6B-C8-40" Called-Station-Id = "00-08-74-D4-7A-F5" NAS-Identifier = "nas01" Acct-Session-Id = "4bd058be00000003" NAS-Port-Type = Wireless-802.11 NAS-Port = 3 Message-Authenticator = 0x5d8d6302e9684a55c2db247bdafc022e WISPr-Logoff-URL = "http://192.168.4.1:3990/logoff" Thu Apr 22 14:17:59 2010 : Info: +- entering group authorize {...} Thu Apr 22 14:17:59 2010 : Info: ++[preprocess] returns ok Thu Apr 22 14:17:59 2010 : Info: [auth_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -> /var/log/freeradius/radacct/192.168.2.1/auth-detail-20100422 Thu Apr 22 14:17:59 2010 : Info: [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.2.1/auth-detail-20100422 Thu Apr 22 14:17:59 2010 : Info: [auth_log] expand: %t -> Thu Apr 22 14:17:59 2010 Thu Apr 22 14:17:59 2010 : Info: ++[auth_log] returns ok Thu Apr 22 14:17:59 2010 : Info: [suffix] No '@' in User-Name = "kkigor14", looking up realm NULL Thu Apr 22 14:17:59 2010 : Info: [suffix] No such realm "NULL" Thu Apr 22 14:17:59 2010 : Info: ++[suffix] returns noop Thu Apr 22 14:17:59 2010 : Info: [eap] No EAP-Message, not doing EAP Thu Apr 22 14:17:59 2010 : Info: ++[eap] returns noop Thu Apr 22 14:17:59 2010 : Info: ++[unix] returns notfound Thu Apr 22 14:17:59 2010 : Info: [ldap] performing user authorization for kkigor14 Thu Apr 22 14:17:59 2010 : Info: [ldap] expand: %{Stripped-User-Name} -> Thu Apr 22 14:17:59 2010 : Info: [ldap] ... expanding second conditional Thu Apr 22 14:17:59 2010 : Info: [ldap] expand: %{User-Name} -> kkigor14 Thu Apr 22 14:17:59 2010 : Info: [ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=kkigor14) Thu Apr 22 14:17:59 2010 : Info: [ldap] expand: dc=csimaroc, dc=lan -> dc=csimaroc, dc=lan Thu Apr 22 14:17:59 2010 : Debug: [ldap] ldap_get_conn: Checking Id: 0 Thu Apr 22 14:17:59 2010 : Debug: [ldap] ldap_get_conn: Got Id: 0 Thu Apr 22 14:17:59 2010 : Debug: [ldap] attempting LDAP reconnection Thu Apr 22 14:17:59 2010 : Debug: [ldap] (re)connect to 127.0.0.1:389, authentication 0 Thu Apr 22 14:17:59 2010 : Debug: [ldap] bind as / to 127.0.0.1:389 Thu Apr 22 14:17:59 2010 : Debug: [ldap] waiting for bind result ... Thu Apr 22 14:17:59 2010 : Debug: [ldap] Bind was successful Thu Apr 22 14:17:59 2010 : Debug: [ldap] performing search in dc=csimaroc, dc=lan, with filter (uid=kkigor14) Thu Apr 22 14:17:59 2010 : Info: [ldap] No default NMAS login sequence Thu Apr 22 14:17:59 2010 : Info: [ldap] looking for check items in directory... Thu Apr 22 14:17:59 2010 : Debug: [ldap] sambaNtPassword -> NT-Password == 0x4535334337353245323438413034353342353531353646383131303237453139 Thu Apr 22 14:17:59 2010 : Debug: [ldap] sambaLmPassword -> LM-Password == 0x4432433038394334374245444535364641414433423433354235313430344545 Thu Apr 22 14:17:59 2010 : Info: [ldap] looking for reply items in directory... Thu Apr 22 14:17:59 2010 : Debug: WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? Thu Apr 22 14:17:59 2010 : Info: [ldap] user kkigor14 authorized to use remote access Thu Apr 22 14:17:59 2010 : Debug: [ldap] ldap_release_conn: Release Id: 0 Thu Apr 22 14:17:59 2010 : Info: ++[ldap] returns ok Thu Apr 22 14:17:59 2010 : Info: ++[expiration] returns noop Thu Apr 22 14:17:59 2010 : Info: ++[logintime] returns noop Thu Apr 22 14:17:59 2010 : Info: [pap] Normalizing NT-Password from hex encoding Thu Apr 22 14:17:59 2010 : Info: [pap] Normalizing LM-Password from hex encoding Thu Apr 22 14:17:59 2010 : Info: [pap] No clear-text password in the request. Not performing PAP. Thu Apr 22 14:17:59 2010 : Info: ++[pap] returns noop Thu Apr 22 14:17:59 2010 : Info: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Thu Apr 22 14:17:59 2010 : Info: Failed to authenticate the user. Thu Apr 22 14:17:59 2010 : Info: Using Post-Auth-Type Reject Thu Apr 22 14:17:59 2010 : Info: +- entering group REJECT {...} Thu Apr 22 14:17:59 2010 : Info: [attr_filter.access_reject] expand: %{User-Name} -> kkigor14 Thu Apr 22 14:17:59 2010 : Debug: attr_filter: Matched entry DEFAULT at line 11 Thu Apr 22 14:17:59 2010 : Info: ++[attr_filter.access_reject] returns updated Thu Apr 22 14:17:59 2010 : Info: Delaying reject of request 0 for 1 seconds Thu Apr 22 14:17:59 2010 : Debug: Going to the next request Thu Apr 22 14:17:59 2010 : Debug: Waking up in 0.9 seconds. Thu Apr 22 14:18:00 2010 : Info: Sending delayed reject for request 0 Sending Access-Reject of id 0 to 192.168.2.1 port 32790 Thu Apr 22 14:18:00 2010 : Debug: Waking up in 4.9 seconds. Thu Apr 22 14:18:05 2010 : Info: Cleaning up request 0 ID 0 with timestamp +188 Thu Apr 22 14:18:05 2010 : Info: Ready to process requests. All the Best -- ----------------------------------------------------------------- |JJohnny RANDRIAMAMPIONONA | | Phone: +212663682554 | | National School of Applied Sciences | | 1818 TANGIER 90000 | |----------------------------------------------------------------|

3 6

proxy based on number of numeric char.
by Agent Smith 27 Apr '10

27 Apr '10

I'd like to have a radius proxy setup where it can proxy users based on number of numeric characters in the userid. so for example, if the userid is abc123 (with 3 numeric char. at the end) it should proxy to an instance of radius running on the same box and if the user id is abcxxx it should proxy the request to a different instance of radius running on the same box, is this doable or did I miss something in the documentation?

2 2

Redundant Audit logs
by Natr Brazell 27 Apr '10

27 Apr '10

I have 3 geographically distributed Radius servers. I'd like all audit logs to go to a central log server. What is the best way? How do you all accomplish this? Please provide valid feedback or references. Thanks, N

2 1