- Freeradius-Users - lists.freeradius.org

Simultaneous-Use problem with Mikrotik NAS clients
by Fojtán Balázs István 11 Feb '10

11 Feb '10

Hello all! I have problem with the Simultaneous-Use on Freeradius + Mikrotik environment. I'm using freeradius 2.1.8 on Debian lenny with mysql support. I've found a checklist in the wiki (http://wiki.freeradius.org/index.php/FAQ#Simultaneous-Use_doesn.27t_work) The second line of this is: "2. Run radiusd -X and see if it parses the Simultaneous-Use line." But if I run radiusd -x | grep simul I've got only these lines: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" simul_verify_query = "SELECT radacctid, acctsessionid, username, nasipaddress, nasportid, framedipaddress, callingstationid, framedprotocol FROM radacct WHERE username = '%{SQL-User-Name}' AND acctstoptime IS NULL" I haven't got any output line which contents the "Simultaneous-Use" text-pattern. One of my question is: Could you describe me what can I see exactly in the output when the Simultaneous-Use function is on? I've uncommented in the /etc/freeradius/sql/mysql/dialup.conf the following lines: simul_count_query = "SELECT COUNT(*) \ FROM ${acct_table1} \ WHERE username = '%{SQL-User-Name}' \ AND acctstoptime IS NULL" and also uncommented in the /etc/freeradius/sites-enabled/default, the "sql" line in the session section. The radwho command regularly lists the online users. But if I try to login through another Mikrotik NAS client in the name of a user who is listed by the radwho, the freeradius send access-accept to the NAS client. My radius database's tables are look like this: mysql> select * from radcheck; +----+----------+---------------+----+------------+ | id | UserName | Attribute | op | Value | +----+----------+---------------+----+------------+ | 1 | hz00001 | user-password | == | Tfregep5uy | | 3 | hz00002 | user-password | == | 29riaejofu | | 4 | hz00003 | user-password | == | Razsgepiui | | 5 | hz00004 | user-password | == | 64Vifuzuxo | | 6 | hz00005 | user-password | == | 39Bygonony | | 7 | hz00006 | user-password | == | Zozyhomo25 | | 8 | hz00007 | user-password | == | awdeokihaY | | 9 | hz00008 | user-password | == | 33Vifakhde | +----+----------+---------------+----+------------+ mysql> select * from radusergroup; +----------+-----------+----------+ | username | groupname | priority | +----------+-----------+----------+ | hz00001 | HZ | 1 | | hz00002 | HZ | 1 | | hz00003 | HZ | 1 | | hz00004 | HZ | 1 | | hz00005 | HZ | 1 | | hz00006 | HZ | 1 | | hz00007 | HZ | 1 | | hz00008 | HZ | 1 | +----------+-----------+----------+ mysql> select * from radgroupreply; +----+-----------+------------------+----+-------+ | id | GroupName | Attribute | op | Value | +----+-----------+------------------+----+-------+ | 1 | HZ | Simultaneous-Use | := | 1 | +----+-----------+------------------+----+-------+ Please suggest me what causes the problem! Regards, fbi

3 3

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients
by Fojtán Balázs István 11 Feb '10

11 Feb '10

Hello Fajar, thanks for your rapid response! >> simul_count_query = "SELECT COUNT(*) \ >> FROM ${acct_table1} \ >> WHERE username = '%{SQL-User-Name}' \ >> AND acctstoptime IS NULL" > >it uses ${acct_table1} (should be radacct by default). Have you >enabled accounting? > Yes, the accounting is working. It is some field listed from radacct table: mysql> select radacctid,acctsessionid,username,nasipaddress,nasporttype,acctstarttime,acctstoptime,acctinputoctets,acctoutputoctets from radacct where username="hz00001"; +-----------+---------------+----------+---------------+-----------------+---------------------+---------------------+-----------------+------------------+ | radacctid | acctsessionid | username | nasipaddress | nasporttype | acctstarttime | acctstoptime | acctinputoctets | acctoutputoctets | +-----------+---------------+----------+---------------+-----------------+---------------------+---------------------+-----------------+------------------+ | 3 | 80600002 | hz00001 | 172.16.2.246 | Wireless-802.11 | 2010-01-28 12:47:46 | 2010-01-28 12:50:37 | 21399 | 51376 | | 4 | 80600003 | hz00001 | 172.16.2.246 | Wireless-802.11 | 2010-01-29 17:42:58 | 2010-01-29 17:45:17 | 20811 | 50802 | | 160 | 80800010 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-08 17:54:56 | 2010-02-08 17:56:01 | 18320 | 35545 | | 161 | 80800011 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-08 17:56:26 | 2010-02-08 18:18:37 | 590798 | 2356358 | | 183 | 80400003 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-09 13:48:52 | 2010-02-09 13:49:07 | 9573 | 10237 | | 189 | 80b00007 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-09 15:21:20 | 2010-02-09 15:21:26 | 8474 | 8869 | | 230 | 80600000 | hz00001 | 172.17.2.246 | Wireless-802.11 | 2010-02-10 15:44:02 | 2010-02-10 15:46:52 | 580051 | 896533 | +-----------+---------------+----------+---------------+-----------------+---------------------+---------------------+-----------------+------------------+ > > >> mysql> select * from radcheck; >> +----+----------+---------------+----+------------+ >> | id | UserName | Attribute | op | Value | >> +----+----------+---------------+----+------------+ >> | 1 | hz00001 | user-password | == | Tfregep5uy | > >what does radacct look like? What's the result of (for example) > >SELECT COUNT(*) \ > FROM radacct \ > WHERE username = 'hz00001' \ > AND acctstoptime IS NULL; mysql> SELECT COUNT(*) FROM radacct WHERE username = 'hz00001' AND acctstoptime IS NULL; +----------+ | COUNT(*) | +----------+ | 1 | +----------+ regards, fbi

1 0

Error: [sql] database query error
by Teguh Kurniawan 11 Feb '10

11 Feb '10

Hello, I need more advice from all of you about my freeradius 2.10 configuration on ubuntu server 9.10. I've got error message : Thu Feb 11 11:04:57 2010 : Error: [sql] database query error, SELECT groupname FROM radusergroup WHERE username = 'user' ORDER BY priority: Table 'radius.radusergroup' doesn't exist Thu Feb 11 11:04:57 2010 : Error: [sql] Error retrieving group list Thu Feb 11 11:04:57 2010 : Error: [sql] Error processing groups; rejecting user root@radiusmanager:/tmp# radtest user 1111 127.0.0.1 1812 testing123 Sending Access-Request of id 82 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "1111" NAS-IP-Address = 192.168.0.3 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=82, length=20 I was change "ipaddr = *" to "ipaddr = 127.0.0.1" on radiusd.conf What should I do ? Best Regards, Teguh Kurniawan

3 2

wpa_supplicant on Windows takes a long time to auth via freeradius
by Vieri 11 Feb '10

11 Feb '10

Hi, I'm noticing that at times my Windows wpa_supplicant takes a long time to authenticate via freeradius. It seems to associate quickly to a Linksys WAP2000 access point. However, it takes a full 4-5 minutes to complete the connection. I noticed that each time Freeradius sends an Access-Challenge it "wakes up in 4.9 seconds". Is this normal? I'm attaching the log files of both Freeradius and wpa_supplicant in the hope that someone can help me understand what's making my client PC take so much time to connect to my wireless network. Thanks, Vieri

1 0

no wait exec scripts end up as defunct zombie process
by Sajeewa Warnakulasuriya 11 Feb '10

11 Feb '10

Hi all, I know the issue no wait exec scripts end up as defunct zombie process was covered previously and appears to have been resolved after version 1.1(?) but the issue still appears to happening in the latest freeradius. Has anybody else noticed this? Linux version 2.6.26-2-amd64 (Debian 2.6.26-19lenny2) (dannf(a)debian.org) (gcc version 4.1.3 20080704 (prerelease) (Debian 4.1.2-25)) #1 SMP Thu Nov 5 02:23:12 UTC 2009 freeradius: FreeRADIUS Version 2.1.8, for host x86_64-pc-linux-gnu, built on Jan 19 2010 at 14:30:20 freerad 7011 1 7011 7011 0 09:22 ? 00:00:00 /usr/sbin/freeradius -x -n radiusd_bb_services freerad 7168 1 7168 7168 0 09:22 ? 00:00:00 /usr/sbin/freeradius -x -n radiusd_bb root 7175 2970 7175 7175 0 09:22 ? 00:00:00 sshd: swarnakulasuriya [priv] 1000 7177 7175 7175 7175 0 09:22 ? 00:00:00 sshd: swarnakulasuriya@pts/0 1000 7178 7177 7178 7178 0 09:22 pts/0 00:00:00 -bash root 7191 7178 7191 7178 0 09:22 pts/0 00:00:00 su - root 7192 7191 7192 7178 0 09:23 pts/0 00:00:00 -su root 7207 2970 7207 7207 0 09:23 ? 00:00:00 sshd: swarnakulasuriya [priv] 1000 7209 7207 7207 7207 0 09:23 ? 00:00:00 sshd: swarnakulasuriya@pts/2 1000 7210 7209 7210 7210 0 09:23 pts/2 00:00:00 -bash root 7223 7210 7223 7210 0 09:23 pts/2 00:00:00 su - root 7224 7223 7224 7210 0 09:23 pts/2 00:00:00 -su freerad 7749 7011 7011 7011 0 09:57 ? 00:00:00 [proxybbrealms] <defunct> freerad 7755 7011 7011 7011 0 09:57 ? 00:00:00 [proxybbrealms] <defunct> freerad 7759 7011 7011 7011 0 09:57 ? 00:00:00 [proxybbrealms] <defunct> freerad 7818 7011 7011 7011 0 10:02 ? 00:00:00 [proxybbrealms] <defunct> freerad 7822 7011 7011 7011 0 10:02 ? 00:00:00 [proxybbrealms] <defunct> freerad 7825 7011 7011 7011 0 10:02 ? 00:00:00 [updatebbservice] <defunct> freerad 7826 7011 7011 7011 0 10:02 ? 00:00:00 [proxybbrealms] <defunct> freerad 7885 7011 7011 7011 0 10:07 ? 00:00:00 [updatebbservice] <defunct> freerad 7886 7011 7011 7011 0 10:07 ? 00:00:00 [proxybbrealms] <defunct> freerad 7889 7011 7011 7011 0 10:07 ? 00:00:00 [updatebbservice] <defunct> freerad 7890 7011 7011 7011 0 10:07 ? 00:00:00 [proxybbrealms] <defunct> freerad 7904 7011 7011 7011 0 10:08 ? 00:00:00 [updatebbservice] <defunct> freerad 7905 7011 7011 7011 0 10:08 ? 00:00:00 [proxybbrealms] <defunct> freerad 7962 7011 7011 7011 0 10:12 ? 00:00:00 [updatebbservice] <defunct> freerad 7963 7011 7011 7011 0 10:12 ? 00:00:00 [proxybbrealms] <defunct> freerad 7977 7011 7011 7011 0 10:13 ? 00:00:00 [updatebbservice] <defunct> freerad 7978 7011 7011 7011 0 10:13 ? 00:00:00 [proxybbrealms] <defunct> freerad 7981 7011 7011 7011 0 10:13 ? 00:00:00 [updatebbservice] <defunct> freerad 7982 7011 7011 7011 0 10:13 ? 00:00:00 [proxybbrealms] <defunct> freerad 8049 7011 7011 7011 0 10:18 ? 00:00:00 [updatebbservice] <defunct> freerad 8050 7011 7011 7011 0 10:18 ? 00:00:00 [proxybbrealms] <defunct> freerad 8055 7011 7011 7011 0 10:18 ? 00:00:00 [updatebbservice] <defunct> freerad 8056 7011 7011 7011 0 10:18 ? 00:00:00 [proxybbrealms] <defunct> freerad 8059 7011 7011 7011 0 10:18 ? 00:00:00 [updatebbservice] <defunct> freerad 8060 7011 7011 7011 0 10:18 ? 00:00:00 [proxybbrealms] <defunct> freerad 8122 7011 7011 7011 0 10:23 ? 00:00:00 [updatebbservice] <defunct> freerad 8123 7011 7011 7011 0 10:23 ? 00:00:00 [proxybbrealms] <defunct> freerad 8126 7011 7011 7011 0 10:23 ? 00:00:00 [updatebbservice] <defunct> freerad 8127 7011 7011 7011 0 10:23 ? 00:00:00 [proxybbrealms] <defunct> freerad 8130 7011 7011 7011 0 10:23 ? 00:00:00 [updatebbservice] <defunct> freerad 8131 7011 7011 7011 0 10:23 ? 00:00:00 [proxybbrealms] <defunct> freerad 8191 7011 7011 7011 0 10:28 ? 00:00:00 [updatebbservice] <defunct> freerad 8192 7011 7011 7011 0 10:28 ? 00:00:00 [proxybbrealms] <defunct> freerad 8205 7168 7168 7168 0 10:29 ? 00:00:00 [proxybbrealms] <defunct> freerad 8207 7011 7011 7011 2 10:29 ? 00:00:00 [updatebbservice] <defunct> freerad 8208 7011 7011 7011 0 10:29 ? 00:00:00 [proxybbrealms] <defunct> FreeRADIUS Version 2.1.8, for host x86_64-pc-linux-gnu, built on Jan 19 2010 at 14:30:20 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd_bb_services.conf including configuration file /etc/freeradius/clients_bb.conf including configuration file /etc/freeradius/sql_bb_services.conf including configuration file /etc/freeradius/check_bb_service.conf including configuration file /etc/freeradius/check_bb_service_prepaid.conf including configuration file /etc/freeradius/proxy_bb_realms.conf including configuration file /etc/freeradius/bb_quota_update.conf including configuration file /etc/freeradius/policy_bb_services.conf including configuration file /etc/freeradius/default_bb_services main { user = "freerad" group = "freerad" allow_core_dumps = no } including dictionary file /etc/freeradius/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/freeradius" libdir = "/usr/lib/freeradius" radacctdir = "/var/log/freeradius/radacct" hostname_lookups = no max_request_time = 5 cleanup_delay = 2 max_requests = 2048 pidfile = "/var/run/freeradius/server_bb_services.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = no log { stripped_names = no auth = no auth_badpass = yes auth_goodpass = no } security { max_attributes = 200 reject_delay = 0 status_server = yes } } radiusd_bb_services: #### Loading Realms and Home Servers #### radiusd_bb_services: #### Loading Clients #### client 112.213.128.3 { ipaddr = 112.213.128.3 require_message_authenticator = no secret = "XXXXX" shortname = "MEL-LNS01" nastype = "cisco_7300" } client 112.213.128.4 { ipaddr = 112.213.128.4 require_message_authenticator = no secret = "XXXXXXX" shortname = "MEL-LNS02" nastype = "cisco_7300" } radiusd_bb_services: #### Instantiating modules #### instantiate { } radiusd_bb_services: #### Loading Virtual Servers #### server { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/etc/freeradius/huntgroups_bb" hints = "/etc/freeradius/hints_bb" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Loading virtual module accept_check_bb_service Module: Linked to module rlm_always Module: Instantiating reject always reject { rcode = "reject" simulcount = 0 mpp = no } Module: Loading virtual module accept_check_bb_service Module: Linked to module rlm_sql Module: Instantiating bb_auth sql bb_auth { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_auth" password = "XXXXX" radius_db = "Radius" read_groups = no sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 50 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "SELECT id, username, attribute, value, op FROM servicecheck WHERE username = '%{User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, username, attribute, value, op FROM servicereply WHERE username = '%{User-Name}' ORDER BY id" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "" accounting_start_query_alt = "" accounting_stop_query = "" accounting_stop_query_alt = "" group_membership_query = "" connect_failure_retry_delay = 3 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (bb_auth): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (bb_auth): Attempting to connect to bb_auth@localhost:/Radius rlm_sql (bb_auth): starting 0 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (bb_auth): Connected new DB handle, #0 rlm_sql (bb_auth): starting 1 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (bb_auth): Connected new DB handle, #1 rlm_sql (bb_auth): starting 2 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (bb_auth): Connected new DB handle, #2 rlm_sql (bb_auth): starting 3 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (bb_auth): Connected new DB handle, #3 rlm_sql (bb_auth): starting 4 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (bb_auth): Connected new DB handle, #4 rlm_sql (bb_auth): starting 5 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (bb_auth): Connected new DB handle, #5 rlm_sql (bb_auth): starting 6 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (bb_auth): Connected new DB handle, #6 rlm_sql (bb_auth): starting 7 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (bb_auth): Connected new DB handle, #7 rlm_sql (bb_auth): starting 8 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (bb_auth): Connected new DB handle, #8 rlm_sql (bb_auth): starting 9 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (bb_auth): Connected new DB handle, #9 rlm_sql (bb_auth): starting 10 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (bb_auth): Connected new DB handle, #10 rlm_sql (bb_auth): starting 11 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (bb_auth): Connected new DB handle, #11 rlm_sql (bb_auth): starting 12 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (bb_auth): Connected new DB handle, #12 rlm_sql (bb_auth): starting 13 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (bb_auth): Connected new DB handle, #13 rlm_sql (bb_auth): starting 14 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (bb_auth): Connected new DB handle, #14 rlm_sql (bb_auth): starting 15 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #15 rlm_sql_mysql: Starting connect to MySQL server for #15 rlm_sql (bb_auth): Connected new DB handle, #15 rlm_sql (bb_auth): starting 16 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #16 rlm_sql_mysql: Starting connect to MySQL server for #16 rlm_sql (bb_auth): Connected new DB handle, #16 rlm_sql (bb_auth): starting 17 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #17 rlm_sql_mysql: Starting connect to MySQL server for #17 rlm_sql (bb_auth): Connected new DB handle, #17 rlm_sql (bb_auth): starting 18 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #18 rlm_sql_mysql: Starting connect to MySQL server for #18 rlm_sql (bb_auth): Connected new DB handle, #18 rlm_sql (bb_auth): starting 19 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (bb_auth): Connected new DB handle, #19 rlm_sql (bb_auth): starting 20 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #20 rlm_sql_mysql: Starting connect to MySQL server for #20 rlm_sql (bb_auth): Connected new DB handle, #20 rlm_sql (bb_auth): starting 21 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #21 rlm_sql_mysql: Starting connect to MySQL server for #21 rlm_sql (bb_auth): Connected new DB handle, #21 rlm_sql (bb_auth): starting 22 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #22 rlm_sql_mysql: Starting connect to MySQL server for #22 rlm_sql (bb_auth): Connected new DB handle, #22 rlm_sql (bb_auth): starting 23 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #23 rlm_sql_mysql: Starting connect to MySQL server for #23 rlm_sql (bb_auth): Connected new DB handle, #23 rlm_sql (bb_auth): starting 24 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #24 rlm_sql_mysql: Starting connect to MySQL server for #24 rlm_sql (bb_auth): Connected new DB handle, #24 rlm_sql (bb_auth): starting 25 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #25 rlm_sql_mysql: Starting connect to MySQL server for #25 rlm_sql (bb_auth): Connected new DB handle, #25 rlm_sql (bb_auth): starting 26 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #26 rlm_sql_mysql: Starting connect to MySQL server for #26 rlm_sql (bb_auth): Connected new DB handle, #26 rlm_sql (bb_auth): starting 27 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #27 rlm_sql_mysql: Starting connect to MySQL server for #27 rlm_sql (bb_auth): Connected new DB handle, #27 rlm_sql (bb_auth): starting 28 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #28 rlm_sql_mysql: Starting connect to MySQL server for #28 rlm_sql (bb_auth): Connected new DB handle, #28 rlm_sql (bb_auth): starting 29 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #29 rlm_sql_mysql: Starting connect to MySQL server for #29 rlm_sql (bb_auth): Connected new DB handle, #29 rlm_sql (bb_auth): starting 30 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #30 rlm_sql_mysql: Starting connect to MySQL server for #30 rlm_sql (bb_auth): Connected new DB handle, #30 rlm_sql (bb_auth): starting 31 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #31 rlm_sql_mysql: Starting connect to MySQL server for #31 rlm_sql (bb_auth): Connected new DB handle, #31 rlm_sql (bb_auth): starting 32 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #32 rlm_sql_mysql: Starting connect to MySQL server for #32 rlm_sql (bb_auth): Connected new DB handle, #32 rlm_sql (bb_auth): starting 33 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #33 rlm_sql_mysql: Starting connect to MySQL server for #33 rlm_sql (bb_auth): Connected new DB handle, #33 rlm_sql (bb_auth): starting 34 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #34 rlm_sql_mysql: Starting connect to MySQL server for #34 rlm_sql (bb_auth): Connected new DB handle, #34 rlm_sql (bb_auth): starting 35 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #35 rlm_sql_mysql: Starting connect to MySQL server for #35 rlm_sql (bb_auth): Connected new DB handle, #35 rlm_sql (bb_auth): starting 36 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #36 rlm_sql_mysql: Starting connect to MySQL server for #36 rlm_sql (bb_auth): Connected new DB handle, #36 rlm_sql (bb_auth): starting 37 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #37 rlm_sql_mysql: Starting connect to MySQL server for #37 rlm_sql (bb_auth): Connected new DB handle, #37 rlm_sql (bb_auth): starting 38 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #38 rlm_sql_mysql: Starting connect to MySQL server for #38 rlm_sql (bb_auth): Connected new DB handle, #38 rlm_sql (bb_auth): starting 39 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #39 rlm_sql_mysql: Starting connect to MySQL server for #39 rlm_sql (bb_auth): Connected new DB handle, #39 rlm_sql (bb_auth): starting 40 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #40 rlm_sql_mysql: Starting connect to MySQL server for #40 rlm_sql (bb_auth): Connected new DB handle, #40 rlm_sql (bb_auth): starting 41 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #41 rlm_sql_mysql: Starting connect to MySQL server for #41 rlm_sql (bb_auth): Connected new DB handle, #41 rlm_sql (bb_auth): starting 42 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #42 rlm_sql_mysql: Starting connect to MySQL server for #42 rlm_sql (bb_auth): Connected new DB handle, #42 rlm_sql (bb_auth): starting 43 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #43 rlm_sql_mysql: Starting connect to MySQL server for #43 rlm_sql (bb_auth): Connected new DB handle, #43 rlm_sql (bb_auth): starting 44 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #44 rlm_sql_mysql: Starting connect to MySQL server for #44 rlm_sql (bb_auth): Connected new DB handle, #44 rlm_sql (bb_auth): starting 45 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #45 rlm_sql_mysql: Starting connect to MySQL server for #45 rlm_sql (bb_auth): Connected new DB handle, #45 rlm_sql (bb_auth): starting 46 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #46 rlm_sql_mysql: Starting connect to MySQL server for #46 rlm_sql (bb_auth): Connected new DB handle, #46 rlm_sql (bb_auth): starting 47 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #47 rlm_sql_mysql: Starting connect to MySQL server for #47 rlm_sql (bb_auth): Connected new DB handle, #47 rlm_sql (bb_auth): starting 48 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #48 rlm_sql_mysql: Starting connect to MySQL server for #48 rlm_sql (bb_auth): Connected new DB handle, #48 rlm_sql (bb_auth): starting 49 rlm_sql (bb_auth): Attempting to connect rlm_sql_mysql #49 rlm_sql_mysql: Starting connect to MySQL server for #49 rlm_sql (bb_auth): Connected new DB handle, #49 Module: Linked to module rlm_exec Module: Instantiating check_bb_service exec check_bb_service { wait = yes program = "/etc/freeradius/scripts/checkbbservice %{User-Name} %{NAS-IP-Address} %{Acct-Session-Id}" input_pairs = "request" output_pairs = "reply" shell_escape = yes } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Checking accounting {...} for more modules to load Module: Instantiating bb_acct_usage sql bb_acct_usage { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_accounting" password = "XXXXXXXX" radius_db = "Radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 50 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "UPDATE SRVUSAGE_%Y%m SET TIME_STAMP = UNIX_TIMESTAMP('%S'), ACCTSTATUSTYPE = '3', ACCTSESSIONTIME = '%{Acct-Session-Time}', ACCTINPUTOCTETS = '%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}', ACCTOUTPUTOCTETS = '%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}', ACCTTERMINATECAUSE = '%{Acct-Terminate-Cause}' WHERE ACCTSESSIONID = '%{Acct-Session-Id}' AND USERNAME = '%{User-Name}' AND NASIDENTIFIER = '%{NAS-IP-Address}' AND TIME_STAMP >= UNIX_TIMESTAMP('%Y-%m-%d 00:00:00') AND TIME_STAMP <= UNIX_TIMESTAMP('%Y-%m-%d 23:59:59') AND ACCTSTATUSTYPE = '3'" accounting_update_query_alt = "INSERT DELAYED INTO SRVUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, CALLEDSTATIONID, CALLINGSTATIONID, SERVICENAME, PARENT_ACCTSESSIONID) VALUES ('%{User-Name}',UNIX_TIMESTAMP('%S'),'3','%{Acct-Delay-Time}','%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}','%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{Cisco-Service-Info}',SUBSTRING('%{Cisco-AVPair}',(LOCATE('=','%{Cisco-AVPair}')+ 1)))" accounting_start_query = "INSERT DELAYED INTO SRVUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, CALLEDSTATIONID, CALLINGSTATIONID, SERVICENAME, PARENT_ACCTSESSIONID) VALUES ('%{User-Name}',UNIX_TIMESTAMP('%S'),'1','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{Cisco-Service-Info}',SUBSTRING('%{Cisco-AVPair}',(LOCATE('=','%{Cisco-AVPair}')+ 1)))" accounting_start_query_alt = "" accounting_stop_query = "INSERT DELAYED INTO SRVUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, CALLEDSTATIONID, CALLINGSTATIONID, SERVICENAME, PARENT_ACCTSESSIONID) VALUES ('%{User-Name}',UNIX_TIMESTAMP('%S'),'2','%{Acct-Delay-Time}','%{%{Acct-Input-Gigawords}:-0}' << 32 | '%{%{Acct-Input-Octets}:-0}','%{%{Acct-Output-Gigawords}:-0}' << 32 | '%{%{Acct-Output-Octets}:-0}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{Cisco-Service-Info}',SUBSTRING('%{Cisco-AVPair}',(LOCATE('=','%{Cisco-AVPair}')+ 1)))" accounting_stop_query_alt = "" connect_failure_retry_delay = 1 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (bb_acct_usage): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (bb_acct_usage): Attempting to connect to bb_accounting@localhost:/Radius rlm_sql (bb_acct_usage): starting 0 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (bb_acct_usage): Connected new DB handle, #0 rlm_sql (bb_acct_usage): starting 1 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (bb_acct_usage): Connected new DB handle, #1 rlm_sql (bb_acct_usage): starting 2 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (bb_acct_usage): Connected new DB handle, #2 rlm_sql (bb_acct_usage): starting 3 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (bb_acct_usage): Connected new DB handle, #3 rlm_sql (bb_acct_usage): starting 4 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (bb_acct_usage): Connected new DB handle, #4 rlm_sql (bb_acct_usage): starting 5 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (bb_acct_usage): Connected new DB handle, #5 rlm_sql (bb_acct_usage): starting 6 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (bb_acct_usage): Connected new DB handle, #6 rlm_sql (bb_acct_usage): starting 7 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (bb_acct_usage): Connected new DB handle, #7 rlm_sql (bb_acct_usage): starting 8 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (bb_acct_usage): Connected new DB handle, #8 rlm_sql (bb_acct_usage): starting 9 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (bb_acct_usage): Connected new DB handle, #9 rlm_sql (bb_acct_usage): starting 10 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (bb_acct_usage): Connected new DB handle, #10 rlm_sql (bb_acct_usage): starting 11 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (bb_acct_usage): Connected new DB handle, #11 rlm_sql (bb_acct_usage): starting 12 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (bb_acct_usage): Connected new DB handle, #12 rlm_sql (bb_acct_usage): starting 13 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (bb_acct_usage): Connected new DB handle, #13 rlm_sql (bb_acct_usage): starting 14 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (bb_acct_usage): Connected new DB handle, #14 rlm_sql (bb_acct_usage): starting 15 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #15 rlm_sql_mysql: Starting connect to MySQL server for #15 rlm_sql (bb_acct_usage): Connected new DB handle, #15 rlm_sql (bb_acct_usage): starting 16 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #16 rlm_sql_mysql: Starting connect to MySQL server for #16 rlm_sql (bb_acct_usage): Connected new DB handle, #16 rlm_sql (bb_acct_usage): starting 17 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #17 rlm_sql_mysql: Starting connect to MySQL server for #17 rlm_sql (bb_acct_usage): Connected new DB handle, #17 rlm_sql (bb_acct_usage): starting 18 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #18 rlm_sql_mysql: Starting connect to MySQL server for #18 rlm_sql (bb_acct_usage): Connected new DB handle, #18 rlm_sql (bb_acct_usage): starting 19 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (bb_acct_usage): Connected new DB handle, #19 rlm_sql (bb_acct_usage): starting 20 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #20 rlm_sql_mysql: Starting connect to MySQL server for #20 rlm_sql (bb_acct_usage): Connected new DB handle, #20 rlm_sql (bb_acct_usage): starting 21 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #21 rlm_sql_mysql: Starting connect to MySQL server for #21 rlm_sql (bb_acct_usage): Connected new DB handle, #21 rlm_sql (bb_acct_usage): starting 22 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #22 rlm_sql_mysql: Starting connect to MySQL server for #22 rlm_sql (bb_acct_usage): Connected new DB handle, #22 rlm_sql (bb_acct_usage): starting 23 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #23 rlm_sql_mysql: Starting connect to MySQL server for #23 rlm_sql (bb_acct_usage): Connected new DB handle, #23 rlm_sql (bb_acct_usage): starting 24 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #24 rlm_sql_mysql: Starting connect to MySQL server for #24 rlm_sql (bb_acct_usage): Connected new DB handle, #24 rlm_sql (bb_acct_usage): starting 25 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #25 rlm_sql_mysql: Starting connect to MySQL server for #25 rlm_sql (bb_acct_usage): Connected new DB handle, #25 rlm_sql (bb_acct_usage): starting 26 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #26 rlm_sql_mysql: Starting connect to MySQL server for #26 rlm_sql (bb_acct_usage): Connected new DB handle, #26 rlm_sql (bb_acct_usage): starting 27 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #27 rlm_sql_mysql: Starting connect to MySQL server for #27 rlm_sql (bb_acct_usage): Connected new DB handle, #27 rlm_sql (bb_acct_usage): starting 28 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #28 rlm_sql_mysql: Starting connect to MySQL server for #28 rlm_sql (bb_acct_usage): Connected new DB handle, #28 rlm_sql (bb_acct_usage): starting 29 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #29 rlm_sql_mysql: Starting connect to MySQL server for #29 rlm_sql (bb_acct_usage): Connected new DB handle, #29 rlm_sql (bb_acct_usage): starting 30 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #30 rlm_sql_mysql: Starting connect to MySQL server for #30 rlm_sql (bb_acct_usage): Connected new DB handle, #30 rlm_sql (bb_acct_usage): starting 31 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #31 rlm_sql_mysql: Starting connect to MySQL server for #31 rlm_sql (bb_acct_usage): Connected new DB handle, #31 rlm_sql (bb_acct_usage): starting 32 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #32 rlm_sql_mysql: Starting connect to MySQL server for #32 rlm_sql (bb_acct_usage): Connected new DB handle, #32 rlm_sql (bb_acct_usage): starting 33 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #33 rlm_sql_mysql: Starting connect to MySQL server for #33 rlm_sql (bb_acct_usage): Connected new DB handle, #33 rlm_sql (bb_acct_usage): starting 34 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #34 rlm_sql_mysql: Starting connect to MySQL server for #34 rlm_sql (bb_acct_usage): Connected new DB handle, #34 rlm_sql (bb_acct_usage): starting 35 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #35 rlm_sql_mysql: Starting connect to MySQL server for #35 rlm_sql (bb_acct_usage): Connected new DB handle, #35 rlm_sql (bb_acct_usage): starting 36 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #36 rlm_sql_mysql: Starting connect to MySQL server for #36 rlm_sql (bb_acct_usage): Connected new DB handle, #36 rlm_sql (bb_acct_usage): starting 37 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #37 rlm_sql_mysql: Starting connect to MySQL server for #37 rlm_sql (bb_acct_usage): Connected new DB handle, #37 rlm_sql (bb_acct_usage): starting 38 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #38 rlm_sql_mysql: Starting connect to MySQL server for #38 rlm_sql (bb_acct_usage): Connected new DB handle, #38 rlm_sql (bb_acct_usage): starting 39 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #39 rlm_sql_mysql: Starting connect to MySQL server for #39 rlm_sql (bb_acct_usage): Connected new DB handle, #39 rlm_sql (bb_acct_usage): starting 40 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #40 rlm_sql_mysql: Starting connect to MySQL server for #40 rlm_sql (bb_acct_usage): Connected new DB handle, #40 rlm_sql (bb_acct_usage): starting 41 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #41 rlm_sql_mysql: Starting connect to MySQL server for #41 rlm_sql (bb_acct_usage): Connected new DB handle, #41 rlm_sql (bb_acct_usage): starting 42 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #42 rlm_sql_mysql: Starting connect to MySQL server for #42 rlm_sql (bb_acct_usage): Connected new DB handle, #42 rlm_sql (bb_acct_usage): starting 43 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #43 rlm_sql_mysql: Starting connect to MySQL server for #43 rlm_sql (bb_acct_usage): Connected new DB handle, #43 rlm_sql (bb_acct_usage): starting 44 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #44 rlm_sql_mysql: Starting connect to MySQL server for #44 rlm_sql (bb_acct_usage): Connected new DB handle, #44 rlm_sql (bb_acct_usage): starting 45 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #45 rlm_sql_mysql: Starting connect to MySQL server for #45 rlm_sql (bb_acct_usage): Connected new DB handle, #45 rlm_sql (bb_acct_usage): starting 46 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #46 rlm_sql_mysql: Starting connect to MySQL server for #46 rlm_sql (bb_acct_usage): Connected new DB handle, #46 rlm_sql (bb_acct_usage): starting 47 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #47 rlm_sql_mysql: Starting connect to MySQL server for #47 rlm_sql (bb_acct_usage): Connected new DB handle, #47 rlm_sql (bb_acct_usage): starting 48 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #48 rlm_sql_mysql: Starting connect to MySQL server for #48 rlm_sql (bb_acct_usage): Connected new DB handle, #48 rlm_sql (bb_acct_usage): starting 49 rlm_sql (bb_acct_usage): Attempting to connect rlm_sql_mysql #49 rlm_sql_mysql: Starting connect to MySQL server for #49 rlm_sql (bb_acct_usage): Connected new DB handle, #49 Module: Instantiating bb_acct_online sql bb_acct_online { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_accounting" password = "xxxxxx" radius_db = "Radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 50 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "INSERT INTO SRVRADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, SERVICENAME) VALUES ('%{User-Name}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{Acct-Session-Id}', UNIX_TIMESTAMP('%S'), '%{Framed-IP-Address}', '0%{NAS-Port-Type}', '%{Service-Type}', '%{Calling-Station-Id}', '%{Called-Station-Id}','%{Cisco-Service-Info}')" accounting_start_query_alt = "" accounting_stop_query = "DELETE FROM SRVRADONLINE WHERE USERNAME = '%{User-Name}' AND NASIDENTIFIER = '%{NAS-IP-Address}' AND ACCTSESSIONID = '%{Acct-Session-Id}' AND SERVICENAME = '%{Cisco-Service-Info}'" accounting_stop_query_alt = "" connect_failure_retry_delay = 3 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (bb_acct_online): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (bb_acct_online): Attempting to connect to bb_accounting@localhost:/Radius rlm_sql (bb_acct_online): starting 0 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (bb_acct_online): Connected new DB handle, #0 rlm_sql (bb_acct_online): starting 1 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (bb_acct_online): Connected new DB handle, #1 rlm_sql (bb_acct_online): starting 2 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (bb_acct_online): Connected new DB handle, #2 rlm_sql (bb_acct_online): starting 3 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (bb_acct_online): Connected new DB handle, #3 rlm_sql (bb_acct_online): starting 4 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (bb_acct_online): Connected new DB handle, #4 rlm_sql (bb_acct_online): starting 5 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (bb_acct_online): Connected new DB handle, #5 rlm_sql (bb_acct_online): starting 6 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (bb_acct_online): Connected new DB handle, #6 rlm_sql (bb_acct_online): starting 7 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (bb_acct_online): Connected new DB handle, #7 rlm_sql (bb_acct_online): starting 8 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (bb_acct_online): Connected new DB handle, #8 rlm_sql (bb_acct_online): starting 9 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (bb_acct_online): Connected new DB handle, #9 rlm_sql (bb_acct_online): starting 10 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #10 rlm_sql_mysql: Starting connect to MySQL server for #10 rlm_sql (bb_acct_online): Connected new DB handle, #10 rlm_sql (bb_acct_online): starting 11 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #11 rlm_sql_mysql: Starting connect to MySQL server for #11 rlm_sql (bb_acct_online): Connected new DB handle, #11 rlm_sql (bb_acct_online): starting 12 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #12 rlm_sql_mysql: Starting connect to MySQL server for #12 rlm_sql (bb_acct_online): Connected new DB handle, #12 rlm_sql (bb_acct_online): starting 13 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #13 rlm_sql_mysql: Starting connect to MySQL server for #13 rlm_sql (bb_acct_online): Connected new DB handle, #13 rlm_sql (bb_acct_online): starting 14 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #14 rlm_sql_mysql: Starting connect to MySQL server for #14 rlm_sql (bb_acct_online): Connected new DB handle, #14 rlm_sql (bb_acct_online): starting 15 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #15 rlm_sql_mysql: Starting connect to MySQL server for #15 rlm_sql (bb_acct_online): Connected new DB handle, #15 rlm_sql (bb_acct_online): starting 16 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #16 rlm_sql_mysql: Starting connect to MySQL server for #16 rlm_sql (bb_acct_online): Connected new DB handle, #16 rlm_sql (bb_acct_online): starting 17 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #17 rlm_sql_mysql: Starting connect to MySQL server for #17 rlm_sql (bb_acct_online): Connected new DB handle, #17 rlm_sql (bb_acct_online): starting 18 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #18 rlm_sql_mysql: Starting connect to MySQL server for #18 rlm_sql (bb_acct_online): Connected new DB handle, #18 rlm_sql (bb_acct_online): starting 19 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #19 rlm_sql_mysql: Starting connect to MySQL server for #19 rlm_sql (bb_acct_online): Connected new DB handle, #19 rlm_sql (bb_acct_online): starting 20 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #20 rlm_sql_mysql: Starting connect to MySQL server for #20 rlm_sql (bb_acct_online): Connected new DB handle, #20 rlm_sql (bb_acct_online): starting 21 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #21 rlm_sql_mysql: Starting connect to MySQL server for #21 rlm_sql (bb_acct_online): Connected new DB handle, #21 rlm_sql (bb_acct_online): starting 22 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #22 rlm_sql_mysql: Starting connect to MySQL server for #22 rlm_sql (bb_acct_online): Connected new DB handle, #22 rlm_sql (bb_acct_online): starting 23 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #23 rlm_sql_mysql: Starting connect to MySQL server for #23 rlm_sql (bb_acct_online): Connected new DB handle, #23 rlm_sql (bb_acct_online): starting 24 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #24 rlm_sql_mysql: Starting connect to MySQL server for #24 rlm_sql (bb_acct_online): Connected new DB handle, #24 rlm_sql (bb_acct_online): starting 25 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #25 rlm_sql_mysql: Starting connect to MySQL server for #25 rlm_sql (bb_acct_online): Connected new DB handle, #25 rlm_sql (bb_acct_online): starting 26 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #26 rlm_sql_mysql: Starting connect to MySQL server for #26 rlm_sql (bb_acct_online): Connected new DB handle, #26 rlm_sql (bb_acct_online): starting 27 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #27 rlm_sql_mysql: Starting connect to MySQL server for #27 rlm_sql (bb_acct_online): Connected new DB handle, #27 rlm_sql (bb_acct_online): starting 28 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #28 rlm_sql_mysql: Starting connect to MySQL server for #28 rlm_sql (bb_acct_online): Connected new DB handle, #28 rlm_sql (bb_acct_online): starting 29 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #29 rlm_sql_mysql: Starting connect to MySQL server for #29 rlm_sql (bb_acct_online): Connected new DB handle, #29 rlm_sql (bb_acct_online): starting 30 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #30 rlm_sql_mysql: Starting connect to MySQL server for #30 rlm_sql (bb_acct_online): Connected new DB handle, #30 rlm_sql (bb_acct_online): starting 31 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #31 rlm_sql_mysql: Starting connect to MySQL server for #31 rlm_sql (bb_acct_online): Connected new DB handle, #31 rlm_sql (bb_acct_online): starting 32 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #32 rlm_sql_mysql: Starting connect to MySQL server for #32 rlm_sql (bb_acct_online): Connected new DB handle, #32 rlm_sql (bb_acct_online): starting 33 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #33 rlm_sql_mysql: Starting connect to MySQL server for #33 rlm_sql (bb_acct_online): Connected new DB handle, #33 rlm_sql (bb_acct_online): starting 34 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #34 rlm_sql_mysql: Starting connect to MySQL server for #34 rlm_sql (bb_acct_online): Connected new DB handle, #34 rlm_sql (bb_acct_online): starting 35 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #35 rlm_sql_mysql: Starting connect to MySQL server for #35 rlm_sql (bb_acct_online): Connected new DB handle, #35 rlm_sql (bb_acct_online): starting 36 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #36 rlm_sql_mysql: Starting connect to MySQL server for #36 rlm_sql (bb_acct_online): Connected new DB handle, #36 rlm_sql (bb_acct_online): starting 37 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #37 rlm_sql_mysql: Starting connect to MySQL server for #37 rlm_sql (bb_acct_online): Connected new DB handle, #37 rlm_sql (bb_acct_online): starting 38 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #38 rlm_sql_mysql: Starting connect to MySQL server for #38 rlm_sql (bb_acct_online): Connected new DB handle, #38 rlm_sql (bb_acct_online): starting 39 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #39 rlm_sql_mysql: Starting connect to MySQL server for #39 rlm_sql (bb_acct_online): Connected new DB handle, #39 rlm_sql (bb_acct_online): starting 40 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #40 rlm_sql_mysql: Starting connect to MySQL server for #40 rlm_sql (bb_acct_online): Connected new DB handle, #40 rlm_sql (bb_acct_online): starting 41 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #41 rlm_sql_mysql: Starting connect to MySQL server for #41 rlm_sql (bb_acct_online): Connected new DB handle, #41 rlm_sql (bb_acct_online): starting 42 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #42 rlm_sql_mysql: Starting connect to MySQL server for #42 rlm_sql (bb_acct_online): Connected new DB handle, #42 rlm_sql (bb_acct_online): starting 43 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #43 rlm_sql_mysql: Starting connect to MySQL server for #43 rlm_sql (bb_acct_online): Connected new DB handle, #43 rlm_sql (bb_acct_online): starting 44 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #44 rlm_sql_mysql: Starting connect to MySQL server for #44 rlm_sql (bb_acct_online): Connected new DB handle, #44 rlm_sql (bb_acct_online): starting 45 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #45 rlm_sql_mysql: Starting connect to MySQL server for #45 rlm_sql (bb_acct_online): Connected new DB handle, #45 rlm_sql (bb_acct_online): starting 46 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #46 rlm_sql_mysql: Starting connect to MySQL server for #46 rlm_sql (bb_acct_online): Connected new DB handle, #46 rlm_sql (bb_acct_online): starting 47 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #47 rlm_sql_mysql: Starting connect to MySQL server for #47 rlm_sql (bb_acct_online): Connected new DB handle, #47 rlm_sql (bb_acct_online): starting 48 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #48 rlm_sql_mysql: Starting connect to MySQL server for #48 rlm_sql (bb_acct_online): Connected new DB handle, #48 rlm_sql (bb_acct_online): starting 49 rlm_sql (bb_acct_online): Attempting to connect rlm_sql_mysql #49 rlm_sql_mysql: Starting connect to MySQL server for #49 rlm_sql (bb_acct_online): Connected new DB handle, #49 Module: Instantiating bb_quota_update exec bb_quota_update { wait = no program = "/etc/freeradius/scripts/updatebbservicequota %{User-Name} %{Cisco-Service-Info} %{Acct-Output-Octets} %{Acct-Input-Octets} %{Framed-IP-Address} %{NAS-IP-Address} %{Acct-Status-Type} %{Acct-Output-Gigawords} %{Acct-Input-Gigawords}" input_pairs = "request" shell_escape = yes } Module: Instantiating proxy_bb_realms exec proxy_bb_realms { wait = no program = "/etc/freeradius/scripts/proxybbrealms %u %Z" input_pairs = "request" shell_escape = yes } Module: Checking post-auth {...} for more modules to load Module: Instantiating auth_reject sql auth_reject { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "bb_auth" password = "xxxxx" radius_db = "Radius" read_groups = yes sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace_bb.sql" readclients = no deletestalesessions = yes num_sql_socks = 10 lifetime = 0 max_queries = 0 sql_user_name = "" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "" accounting_start_query_alt = "" accounting_stop_query = "" accounting_stop_query_alt = "" connect_failure_retry_delay = 3 simul_count_query = "" simul_verify_query = "" postauth_query = "INSERT DELAYED INTO SRVRADAUTHLOG (REASON, TIME_STAMP, TYPE, ACCTSESSIONID, SERVICENAME, CALLEDSTATIONID, CALLINGSTATIONID, PASS_WORD) values ('%{%{reply:Reply-Message}:-%{reply:Packet-Type}}',UNIX_TIMESTAMP('%S'),'0','%{Acct-Session-Id}','%{User-Name}','%{Called-Station-Id}','%{Calling-Station-Id}','%{%{User-Password}:-%{Chap-Password}}')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /[]()=" } rlm_sql (auth_reject): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (auth_reject): Attempting to connect to bb_auth@localhost:/Radius rlm_sql (auth_reject): starting 0 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (auth_reject): Connected new DB handle, #0 rlm_sql (auth_reject): starting 1 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (auth_reject): Connected new DB handle, #1 rlm_sql (auth_reject): starting 2 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (auth_reject): Connected new DB handle, #2 rlm_sql (auth_reject): starting 3 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (auth_reject): Connected new DB handle, #3 rlm_sql (auth_reject): starting 4 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (auth_reject): Connected new DB handle, #4 rlm_sql (auth_reject): starting 5 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #5 rlm_sql_mysql: Starting connect to MySQL server for #5 rlm_sql (auth_reject): Connected new DB handle, #5 rlm_sql (auth_reject): starting 6 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #6 rlm_sql_mysql: Starting connect to MySQL server for #6 rlm_sql (auth_reject): Connected new DB handle, #6 rlm_sql (auth_reject): starting 7 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #7 rlm_sql_mysql: Starting connect to MySQL server for #7 rlm_sql (auth_reject): Connected new DB handle, #7 rlm_sql (auth_reject): starting 8 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #8 rlm_sql_mysql: Starting connect to MySQL server for #8 rlm_sql (auth_reject): Connected new DB handle, #8 rlm_sql (auth_reject): starting 9 rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #9 rlm_sql_mysql: Starting connect to MySQL server for #9 rlm_sql (auth_reject): Connected new DB handle, #9 Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/etc/freeradius/attrs.access_reject" key = "%{User-Name}" } } # modules } # server radiusd_bb_services: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 124.254.72.146 port = 1815 } listen { type = "acct" ipaddr = 124.254.72.146 port = 1816 } Listening on authentication address 124.254.72.146 port 1815 Listening on accounting address 124.254.72.146 port 1816 Ready to process requests. Regards, Sajeewa Warnakulasuriya Systems Development Manager ispONE is a wholesale ISP built to help internet access resellers and independent ISPs to compete in the Australian marketplace through ONE Brand, ONE Provider, ONE Solution. Level 14 520 Collins Street Melbourne 3000 VIC Phone: 1300 663 400 Fax: 1300 665 400 E-Mail: sajeewaw(a)ispone.com.au Web: http://www.ispone.com.au/

2 7

rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=227, length=20
by Teguh Kurniawan 11 Feb '10

11 Feb '10

Hello, I use freeradius 2.1.0 package from ubuntu server 9.10 with freeradius-mysql installed. But I've got error message when tested. What should I do ? root@radius:/etc/freeradius# radtest user 1111 localhost 1812 testing123 Sending Access-Request of id 227 to 127.0.0.1 port 1812 User-Name = "user" User-Password = "1111" NAS-IP-Address = 192.168.0.3 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=227, length=20 Below freeradius log on var/log/freeradius/radius.log Thu Feb 11 10:31:02 2010 : Error: [sql] database query error, SELECT groupname FROM radusergroup WHERE username = 'user' ORDER BY priority: Table 'radius.radusergroup' doesn't exist Thu Feb 11 10:31:02 2010 : Error: [sql] Error retrieving group list Thu Feb 11 10:31:02 2010 : Error: [sql] Error processing groups; rejecting user Thank You Teguh Kurniawan

1 0

RE: Freeradius + External PHP script
by J Doe 10 Feb '10

10 Feb '10

1. Freeradius calls the external script for validating username/password 2. If the credentials are ok, script returns ok, else fail 3. If the credentials are ok, script also needs to provide a few attributes along with the Access-Accept packet (based on username) How can this be achieved? (in example of using EAP/TTLS) I guess modifying only 3 files is enough... *radiusd.conf* exec php { wait = yes program = "/usr/bin/php -f myscript.php" input_pairs = request output_pairs = reply } and the other two are sites-enabled/inner_tunnel & users? Is it possible to do it with 1 script? Or there needs to be a special script for user/pass validation and another one for getting attributes? _________________________________________________________________ Hotmail: Powerful Free email with security by Microsoft. https://signup.live.com/signup.aspx?id=60969

1 0

Migrating from Cisco Access Registrar to FreeRADIUS
by SerpentoR 10 Feb '10

10 Feb '10

Hello All, Let me just say I'm a big fan of FreeRADIUS and highly appreciate the work and effort put in to this project. We've been thinking of ditching our current cisco Radius server as it has been prone to massive memory leaks, daily restart required. We did some testing of FreeRADIUS with one of our NAS gear, Samsung's General ATM Switch Network (GAN) deployed in a 3GPP2 EV-DO network. Things didn't go as I'd hoped. Following is the output of Radiusd -x. Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 172.16.1.24 port 1812, id=252, length=88 User-Name = "92421013626" CHAP-Password = 0x01ef28b52424c1b5f35683fb12ffb371f8 NAS-IP-Address = 172.16.1.24 CHAP-Challenge = 0xfd2f308b721c8fbbd198087e43ed71f0 3GPP2-Attr-60 = 0x00000001 +- entering group authorize {...} ++[preprocess] returns ok Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop No '@' in User-Name = "92421013626", looking up realm NULL No such realm "NULL" ++[suffix] returns noop No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry 92421013626 at line 85 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = CHAP +- entering group CHAP {...} login attempt by "92421013626" with CHAP password Using clear text password "0D2379B0" for user 92421013626 authentication. chap user 92421013626 authenticated succesfully ++[chap] returns ok +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 252 to 172.16.1.24 port 1812 Callback-Id = "410530421013626" Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 252 with timestamp +5 Ready to process requests. rad_recv: Access-Request packet from host 172.16.1.24 port 1812, id=253, length=88 User-Name = "92421013626" CHAP-Password = 0x01ff3da64a9d26f7eddeb6043deafcdc5b NAS-IP-Address = 172.16.1.24 CHAP-Challenge = 0x79bc887e81bdff4ebacb6bacd26945f9 3GPP2-Attr-60 = 0x00000001 +- entering group authorize {...} ++[preprocess] returns ok Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop No '@' in User-Name = "92421013626", looking up realm NULL No such realm "NULL" ++[suffix] returns noop No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry 92421013626 at line 85 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = CHAP +- entering group CHAP {...} login attempt by "92421013626" with CHAP password Using clear text password "0D2379B0" for user 92421013626 authentication. chap user 92421013626 authenticated succesfully ++[chap] returns ok +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 253 to 172.16.1.24 port 1812 Callback-Id = "410530421013626" Finished request 1. Going to the next request Waking up in 4.9 seconds. Cleaning up request 1 ID 253 with timestamp +39 Ready to process requests. rad_recv: Access-Request packet from host 172.16.1.24 port 1812, id=254, length=88 User-Name = "92421013626" CHAP-Password = 0x0122be6028d9a8501e7df9d2da160d5366 NAS-IP-Address = 172.16.1.24 CHAP-Challenge = 0x7db1dfd61694cc5d964c6ceb1f15dd67 3GPP2-Attr-60 = 0x00000001 +- entering group authorize {...} ++[preprocess] returns ok Setting 'Auth-Type := CHAP' ++[chap] returns ok ++[mschap] returns noop No '@' in User-Name = "92421013626", looking up realm NULL No such realm "NULL" ++[suffix] returns noop No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry 92421013626 at line 85 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop Found existing Auth-Type, not changing it. ++[pap] returns noop Found Auth-Type = CHAP +- entering group CHAP {...} login attempt by "92421013626" with CHAP password Using clear text password "0D2379B0" for user 92421013626 authentication. chap user 92421013626 authenticated succesfully ++[chap] returns ok +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 254 to 172.16.1.24 port 1812 Callback-Id = "410530421013626" Finished request 2. Going to the next request Waking up in 4.9 seconds. Cleaning up request 2 ID 254 with timestamp +62 Ready to process requests. As you can see access-accepts are being sent to the NAS with the callback-id but the user is unable to connect. From what I am able to understand the NAS is sending a 3GPP2-Attr-60 VSA which is the 3GPP2-HRPD-Access-Attribute not defined in the 3GPP2 dictionary of Freeradius but is defined in Cisco' Access Registrar would patching the 3GPP2 dictionary do the trick or am I missing something? I would've tested this already but this would require approval from other departments as well which in gonna take a couple of days but any help in this matter would be appreciated. Regards.

2 1

radiusd not responding to radtest
by Colin Byelong 10 Feb '10

10 Feb '10

Hello, Im very new to freeradius so apologies if this is a dumb question. I installed freeradius2.1.8 on a Fedora 12 system today, when the install had finished I started radius with "radiusd -X" Another window was opened to run radtest: radtest test test localhost 0 testing123 Sending Access-Request of id 253 to ::1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Sending Access-Request of id 253 to ::1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Sending Access-Request of id 253 to ::1 port 1812 User-Name = "test" User-Password = "test" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 radclient: no response from server for ID 253 socket 3 I expected to see a Access-Accept or Access-Reject. The output from radiusd -X is below: Thanks Colin =~=~=~=~=~=~=~=~=~=~=~= PuTTY log 2010.02.10 14:58:54 =~=~=~=~=~=~=~=~=~=~=~= FreeRADIUS Version 2.1.8, for host x86_64-redhat-linux-gnu, built on Jan 8 2010 at 18:16:21 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/raddb/radiusd.conf including configuration file /etc/raddb/proxy.conf including configuration file /etc/raddb/clients.conf including files in directory /etc/raddb/modules/ including configuration file /etc/raddb/modules/radutmp including configuration file /etc/raddb/modules/policy including configuration file /etc/raddb/modules/checkval including configuration file /etc/raddb/modules/sql_log including configuration file /etc/raddb/modules/cui including configuration file /etc/raddb/modules/perl including configuration file /etc/raddb/modules/linelog including configuration file /etc/raddb/modules/expr including configuration file /etc/raddb/modules/chap including configuration file /etc/raddb/modules/passwd including configuration file /etc/raddb/modules/pap including configuration file /etc/raddb/modules/mac2ip including configuration file /etc/raddb/modules/mschap including configuration file /etc/raddb/modules/preprocess including configuration file /etc/raddb/modules/ldap including configuration file /etc/raddb/modules/detail.log including configuration file /etc/raddb/modules/otp including configuration file /etc/raddb/modules/digest including configuration file /etc/raddb/modules/attr_rewrite including configuration file /etc/raddb/modules/inner-eap including configuration file /etc/raddb/modules/sradutmp including configuration file /etc/raddb/modules/smsotp including configuration file /etc/raddb/modules/ippool including configuration file /etc/raddb/modules/ntlm_auth including configuration file /etc/raddb/modules/logintime including configuration file /etc/raddb/modules/acct_unique including configuration file /etc/raddb/modules/etc_group including configuration file /etc/raddb/modules/realm including configuration file /etc/raddb/modules/files including configuration file /etc/raddb/modules/smbpasswd including configuration file /etc/raddb/modules/attr_filter including configuration file /etc/raddb/modules/detail.example.com including configuration file /etc/raddb/modules/wimax including configuration file /etc/raddb/modules/echo including configuration file /etc/raddb/modules/expiration including configuration file /etc/raddb/modules/krb5 including configuration file /etc/raddb/modules/detail including configuration file /etc/raddb/modules/always including configuration file /etc/raddb/modules/mac2vlan including configuration file /etc/raddb/modules/counter including configuration file /etc/raddb/modules/pam including configuration file /etc/raddb/modules/sqlcounter_expire_on_login including configuration file /etc/raddb/modules/exec including configuration file /etc/raddb/modules/unix including configuration file /etc/raddb/eap.conf including configuration file /etc/raddb/policy.conf including files in directory /etc/raddb/sites-enabled/ including configuration file /etc/raddb/sites-enabled/default including configuration file /etc/raddb/sites-enabled/inner-tunnel including configuration file /etc/raddb/sites-enabled/control-socket main { user = "radiusd" group = "radiusd" allow_core_dumps = no } including dictionary file /etc/raddb/dictionary main { prefix = "/usr" localstatedir = "/var" logdir = "/var/log/radius" libdir = "/usr/lib64/freeradius" radacctdir = "/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 pidfile = "/var/run/radiusd/radiusd.pid" checkrad = "/usr/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 4096 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/etc/raddb/certs/server.pem" certificate_file = "/etc/raddb/certs/server.pem" CA_file = "/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/etc/raddb/certs/dh" random_file = "/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" cache { enable = no lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" include_length = yes } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/etc/raddb/users" acctusersfile = "/etc/raddb/acct_users" preproxy_usersfile = "/etc/raddb/preproxy_users" compat = "no" } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } # modules } # server server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/etc/raddb/huntgroups" hints = "/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } # modules } # server radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/var/run/radiusd/radiusd.sock" } } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /var/run/radiusd/radiusd.sock Listening on proxy address * port 1814 Ready to process requests. -- ----------------------------------------------------------------------- Colin Byelong Email: C.Byelong(a)ucl.ac.uk Senior Network Development Officer Network Group Information Systems Division University College London Gower Street Phone: 020 7679-2572 London WC1E 6BT ------------------------------------------------------------------------

2 2

(no subject)
by Richie Lee 10 Feb '10

10 Feb '10

http://alitrader.net/r6ClBzJasl.html _________________________________________________________________ Check your Hotmail from your phone. http://go.microsoft.com/?linkid=9708121

1 0