- Freeradius-Users - lists.freeradius.org

VSA extension
by Larry Ross 04 Nov '09

04 Nov '09

Hello All; I am trying to add a new vendor to the dictionary directory. I created the file in /usr/local/share/freeradius/dictionary.procera contents below. The vendor in question provided their Vendor ID # -*- text -*- ############################################################################## # # Procera VSAs, # # $Id$ # ############################################################################## VENDOR Procera 12913 BEGIN-VENDOR Procera ATTRIBUTE Procera-Local-User-Name 1 string END-VENDOR Procera I then add Procera-Local-User-Name = "admin" to my username in users.conf Now when I try and execute radiusd I recieve /usr/local/etc/raddb/users[68]: Parse error (reply) for entry lfross: Invalid octet string "admin" for attribute name "Procera-Local-User-Name" Errors reading /usr/local/etc/raddb/users I have never encountered issues adding vendors before, any information is greatly appreciated. Thank you Larry Ross Network Operations University California Davis http://www-noc.ucdavis.edu lfross(a)ucdavis.edu<mailto:lfross@ucdavis.edu>

2 2

Clean script session in raddact
by michel＠casa.co.cu 04 Nov '09

04 Nov '09

Hi list Need to know if there's a script that allows users to clean their session has been connected by a long period in the table raddact. Thanks Michel ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

3 2

Re: Re: Re: checking user connect time
by Yagnesh Dave 04 Nov '09

04 Nov '09

Hi, I also found this command in the Radius E-book by O`reilly. radiusreport -i 0 -f detail But this command does not work, i get an error message saying not found. Please help me. Regards, Yagnesh Dave On Wed, 04 Nov 2009 17:50:55 +0530 wrote >Hi, > > Thanks for your quick answer. I am very new to radius server, so i was not able to understand what you pointed out below. It would be great if you can elaborate a bit on it. > > Regards, > Yagnesh Dave. > > On Mon, 02 Nov 2009 17:04:11 +0530 wrote > >> Can you let me know where can we check the time for which a particular > > user is connected, basically this is required so that we can advice the > > customer if his ISDN line is connected for too long. > > SELECT (now() - AcctStartTime) FROM radacct WHERE UserName='some_user' AND > AcctStopTime IS NULL > > Ivan Kalik > Kalik Informatika ISP > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >

2 1

NTLM
by Paul Ryszka 04 Nov '09

04 Nov '09

Hi, I was setting up NTLM auth against AD and it works well however I wanted to add another server sections in the config and that was working ok too up to the point when somebody wants to do mschap authentication against something else than AD I followed the recommendations and add the following: with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username={mschap:User-Name:-None} --domain={mschap:NT-Domain:-WEBANGEL} --challenge={mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" to the module section in mschap but now it seams that it cannot do any other backends I have sql engine returning ok before mschap and than mschap returning reject and whole request is rejected. I attach log of activity from radius -X I would like to have two separate server sections one authenticating against AD and the other against SQL and I would like the end-client to be able to use MSCHAPv2 to use both. Thank you in advance for your help. Regards Paul

2 2

Re: Re: checking user connect time
by Yagnesh Dave 04 Nov '09

04 Nov '09

Hi, Thanks for your quick answer. I am very new to radius server, so i was not able to understand what you pointed out below. It would be great if you can elaborate a bit on it. Regards, Yagnesh Dave. On Mon, 02 Nov 2009 17:04:11 +0530 wrote >> Can you let me know where can we check the time for which a particular > user is connected, basically this is required so that we can advice the > customer if his ISDN line is connected for too long. SELECT (now() - AcctStartTime) FROM radacct WHERE UserName='some_user' AND AcctStopTime IS NULL Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Monthly 'rollover'
by Jeremy Brooking 04 Nov '09

04 Nov '09

Hi, We bill based on data from radius, using dpkg install of Freeradius2.0.4 with mysql, however, when a user maintains a connection for say longer than a month, it throws our accounting out. What we would like to do, is at the end of each month (Just before date rolls into next month), the current accounting record to stop, a new record to start (As if a start record had been recieved) without disconnecting the user from the nas. Giving the appearance in the radacct table, the the user disconnected and reconnected, keeping all data records for that month, within that month. I've tried googling for the answers, but can only assume my search strings are wrong. Could someone here help me with this, or point me in the direction I need to be looking. regards, Jeremy

3 2

Differencent assigments in users files
by verhoem 04 Nov '09

04 Nov '09

Hello, I'am a newbee in freeradius but after reading o'reilly's Radius book for dummies i still can't figure out what the difference is between := == and = in the usersfile. steve Auth-Type := Local, User-Password == " Testing" etc. I also see notations like Jonathan Password = Unix-PW. In the end my config seems to work but I'm wondering if i'm missing out on something important. Explanation or an url would be very appreciated ! Greetings Marcel -- View this message in context: http://old.nabble.com/Differencent-assigments-in-users-files-tp26193201p261… Sent from the FreeRadius - User mailing list archive at Nabble.com.

4 4

RE: Monthly 'rollover'
by Jeremy Brooking 04 Nov '09

04 Nov '09

>> We bill based on data from radius, using dpkg install of Freeradius2.0.4 with mysql, >>however, when a user maintains a connection for say longer than a month, it throws our accounting out. >> >That's because your billing program can't count. Youre right, it merely sums totals of AcctInputOctets, AcctOutputOctets for all records that occur during that month. >> What we would like to do, is at the end of each month (Just before date rolls into next month), the current accounting record to stop, a new record to start (As if a start record had been recieved) without disconnecting the user from the nas. Giving the appearance in the radacct table, the the user disconnected and reconnected, keeping all data records for that month, within that month. >> >Don't do that. Im curious as to why not?

2 1

Re: Freeradius-Users Digest, Vol 55, Issue 10
by Gilbert Lo 04 Nov '09

04 Nov '09

Thank you for your message. I am away until Nov 10th. I will respond to your message on my return . For urgent matters, please contact helpdesk(a)stgeorges.bc.ca . Cheers, Gilbert Lo

1 0

Password expiration and change on next logon options
by Alexey Ponomarev 03 Nov '09

03 Nov '09

Hello All, I am trying to figure out how to do password aging and on next logon change with freeRadius. I am using ASA firewall with MS-CHAP2 support. mschap is also enabled in freeRadius. Could somebody point to where I can find any documentation about it? Also, should I use system passwords or keep them in the postgres to make it working? Thanks, Alex.

4 3