- Freeradius-Users - lists.freeradius.org

Traffic Accounting Update
by Teguh Kurniawan 20 Mar '10

20 Mar '10

Hi, My traffic accounting was running well. The problem is, accounting only update once when client is disconnected. Is possible, accounting update in a given time, eg every 5 minutes. I use FR 2.1.8 with mysql 5.5. Thank's Teguh Kurniawan

3 4

serge bothorel
by Benjamin Marvin 20 Mar '10

20 Mar '10

http://acasianverbe.com/Rachel.html _________________________________________________________________ Hotmail: posta elettronica attendibile grazie alla protezione avanzata Microsoft dalla posta indesiderata. https://signup.live.com/signup.aspx?id=60969

1 0

(no subject)
by Richie Lee 20 Mar '10

20 Mar '10

http://www.advanza.com.br/aR7N4ClASY.html _________________________________________________________________ Take your contacts everywhere http://go.microsoft.com/?linkid=9712959

1 0

Re: log_badlogins include SRC IP Address
by Gary Gatten 19 Mar '10

19 Mar '10

First, you need to make sure the "client" (switch, not host) is providing that info. ________________________________ From: freeradius-users-bounces+ggatten=waddell.com(a)lists.freeradius.org <freeradius-users-bounces+ggatten=waddell.com(a)lists.freeradius.org> To: freeradius-users(a)lists.freeradius.org <freeradius-users(a)lists.freeradius.org> Sent: Fri Mar 19 18:05:35 2010 Subject: log_badlogins include SRC IP Address Hi, I am trying to configure the log_badlogins to include the src IP address of the client host. I am noticing that in the radius.log does not include the src IP. Example. Fri Mar 19 15:11:39 2010 : Auth: Login incorrect: [jack] (from client testswitch port 0) Does anyone know how to change either radius or syslog-ng to include the src ip of the host that is attempting to break in? -Eric <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>

1 0

log_badlogins include SRC IP Address
by Eric.Hernandez＠allegiantair.com 19 Mar '10

19 Mar '10

1 0

Re: NAS type when NAS is stored in SQL?
by John Doppke 19 Mar '10

19 Mar '10

-- -John >>> On 3/19/2010 at 4:21 PM, <freeradius-users-request(a)lists.freeradius.org> wrote: > t does if the info is there: > > SELECT id, nasname, shortname, type, secret FROM ${nas_table} > > (in fact, it can also populate the 'server' too - add that as last > option in the SELECT - latest version of FreeRADIUS only!) > > what does the server say when you start - ie radiusd -X > > alan > I think this is the relevent part: radius_db = "radius" read_groups = yes sqltrace = yes sqltracefile = "/var/log/radius/sqltrace.sql" readclients = yes deletestalesessions = yes num_sql_socks = 5 lifetime = 0 max_queries = 0 sql_user_name = "%{User-Name}" default_user_profile = "sqldefault" nas_query = "SELECT id, nasname, shortname, type, secret FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, groupname, attribute, value, op Also: rlm_sql (sql): Processing generate_sql_clients rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id, nasname, shortname, type, secret FROM nas rlm_sql (sql): Read entry nasname=192.168.41.233,shortname= LAFAYETTE-IN-WAP10,secret=xxx rlm_sql (sql): Adding client 192.168.41.233 ( LAFAYETTE-IN-WAP10, server=<none>) to clients list rlm_sql (sql): Read entry nasname=140.171.181.215,shortname= WAP16,secret=xxx rlm_sql (sql): Adding client 192.168.181.215 ( WAP16, server=<none>) to clients list ...

1 0

Re: NAS type when NAS is stored in SQL?
by John Doppke 19 Mar '10

19 Mar '10

>>> On 3/19/2010 at 1:40 PM, <freeradius-users-request(a)lists.freeradius.org> wrote: > Do an SQL query. > > %{sql: SELECT ...} > > Alan DeKok. > I was afraid of that. I looked through the code and it appears as if rlm_sql should populate nastype along with shortname, secret, etc. Anyone know why it's not? -John

2 1

EAP (PEAP)+ntlm_auth doesn't send password by it self
by Cesar Ortega 19 Mar '10

19 Mar '10

Good morning fellas, After several unsuccessful attempts I could install Freeradius with OpenSSL support for do ntlm_auth for the users with Active Directory integration. The problem is, when the windows xp machine try to connect to the wireless network, Freeradius (or windows xp machine, reallly dont know) doesn't fill the password field like user-name does. So, Any one knows why it is happening? Because for this reason I get the error in the auithentication (Exec-Program output: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) ) Listening on authentication address * port 1645 Listening on accounting address * port 1646 Listening on proxy address * port 1647 Ready to process requests. rad_recv: Access-Request packet from host "AP's IP" port 1645, id=76, length=181 User-Name = "MYDOMAIN\\ortegaca" Framed-MTU = 1400 Called-Station-Id = "0015.62c8.75d0" Calling-Station-Id = "001f.3c2d.78d6" Cisco-AVPair = "ssid=radiusd" Service-Type = Login-User Message-Authenticator = 0x3408edc72d37acf533d28f0b24f43f81 EAP-Message = 0x02020017015044565341323030305c6f72746567616361 NAS-Port-Type = Wireless-802.11 Cisco-NAS-Port = "3259" NAS-Port = 3259 NAS-IP-Address = "AP's IP" NAS-Identifier = "ap" +- entering group authorize {...} [ntlm_auth] expand: --username=%{mschap:User-Name} -> --username=ortegaca [ntlm_auth] expand: --password=%{User-Password} -> --password= Exec-Program output: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) Exec-Program-Wait: plaintext: NT_STATUS_WRONG_PASSWORD: Wrong Password (0xc000006a) Exec-Program: returned: 1 ++[ntlm_auth] returns reject Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> PDVSA2000\ortegaca attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.7 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 76 to "AP's IP" port 1645 Waking up in 4.9 seconds. Cleaning up request 0 ID 76 with timestamp +17 Ready to process requests. Thanks in advance, Cesar _________________________________________________________________ Explore the seven wonders of the world http://search.msn.com/results.aspx?q=7+wonders+world&mkt=en-US&form=QBRE

2 1

simultaneous-use via exec ?
by power159 19 Mar '10

19 Mar '10

hi all I am trying to load simultaneous-use parameter via exec . I have tried it in any section ( authorize / accounting / post-auth and .. ) at beginning and end of the section , but I dont know why freeradius is not reading it .. its just working when I am using it in sql .

2 1

NAS type when NAS is stored in SQL?
by John Doppke 19 Mar '10

19 Mar '10

I'm using the nas table in mysql to store my clients. I've found that if I try to test for client:nastype, a value is returned only for entries from clients.conf. Is there a way to get the nas type for clients in SQL? John Doppke

2 1