- Freeradius-Users - lists.freeradius.org

Re: accounting through detail module help
by ramesh p 28 Aug '09

28 Aug '09

Thanks. It's working fine.

1 0

deny access with huntgroups
by mikoi 28 Aug '09

28 Aug '09

Hello. How can i deny access for all other users that don´t have a Huntgroup-Name defined and if NAS-IP-Address is not included or wrong in the request = deny? My current configuration accepts all authentications as long the password is correct. users: localuser Huntgroup-Name == "vpn", Cleartext-Password := "localuser" huntgroups: vpn NAS-IP-Address == 164.9.158.65 I am missing something. Please point me in the right direction. Thanks. -- View this message in context: http://www.nabble.com/deny-access-with-huntgroups-tp25151127p25151127.html Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 6

monitoring buffered-sql
by ramesh p 28 Aug '09

28 Aug '09

Hi All, I installed freeradius with detail, buffered-sql active. How to monitor the buffered-sql module. If it stops or sleeps for very long time responding to mysql db.? I saw all of a sudden buffered-sql not pushing packets to mysql db yesterday. After restarting radius process it started processing. Please suggest. Thanks, Rams.

2 1

Selective Update of User-Name
by Mike O'Connor 28 Aug '09

28 Aug '09

Hi Guys This email tries to ask my question in a different way, to last time. I need to Rewrite the User-Name of individual accounts to add a realm, this would need to reliable up to at least 10000 users. Does any one have any ideas on how this might be done, in a way that can be updated with out restarting Freeradius ? We do have some python code running in this proxy which might be able to help. Thanks Mike O'Connor

2 3

freeradius+postgresql
by Magui 28 Aug '09

28 Aug '09

If it is posible: How to combine freeradius with postgresql? How I can conect freeradius to postgres? some one know about this or have experience? any help will be welcome, thank you -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas Infomed: http://www.sld.cu/

2 1

Setting FreeRadius and Ldap.
by Steven Sprague 27 Aug '09

27 Aug '09

Hello All My needs are simple. Use an exiting LDAP server to communicate with FreeRadius. After reading a number of sources (including the FAQ) I am a bit confused as to what is required? I will start out simple with WPA using LEAP - since all my client boxes can use it. Questions: Do I need any special schema for ldap to use this plan? Y/N If YES, where can I find example? If NO, what other settings need to be set on the client, ldap and FreeRadius server for testing. I need a simple systematic step by step would be great. _:) Sorry, my only book - LDAP by O'Reilly is a bit dated and incomplete. My test setup is one access point (D-LInk DIR-655), two RHEL servers and one workstation client for testing. Server 1 - DNS & FreeRadius Server 2 - LDAP,Postfix,Dovecot,Apache,Squid. ** They are on the same network. I appreciate any advice to get me moving the right direction. Steven -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 3

rlm_pool problem
by up＠3.am 27 Aug '09

27 Aug '09

I've had FreeRadius 2.1.6 running ippools fine on one linux server and just installed it on a new one. They run with --prefix=/usr on both servers, which neccessitated me putting /usr/lib in /etc/ld.so.conf to get rlm_ippool to load on the new server. I copied over the old raddb tree, but when I start radiusd in debug, I get this: Module: Linked to module rlm_ippool Module: Instantiating medium_pool ippool medium_pool { session-db = "/usr/etc/raddb/db.medium_ippool" ip-index = "/usr/etc/raddb/db.medium_ipindex" key = "%{NAS-IP-Address} %{NAS-Port}" range-start = 172.16.31.101 range-stop = 172.16.31.253 netmask = 255.255.255.0 cache-size = 251 override = yes maximum-timeout = 0 } rlm_ippool: Failed to open file /usr/etc/raddb/db.medium_ippool: Invalid argument /usr/etc/raddb/radiusd.conf[1824]: Instantiation failed for module "medium_pool" /usr/etc/raddb/sites-enabled/default[337]: Failed to find module "medium_pool". /usr/etc/raddb/sites-enabled/default[314]: Errors parsing accounting section. the db files for the pools, in this case: /usr/etc/raddb/db.medium_ippool do exist as chmod 600 root.wheel, just like the old server. We run as root to auth against shadow passwords. What did I miss? James Smallacombe PlantageNet, Inc. CEO and Janitor up(a)3.am http://3.am =========================================================================

1 1

Copy of accounting packets
by kokkola＠anonymizer.cz 27 Aug '09

27 Aug '09

Hello. I am trying to setup FreeRadius server so it proxies all requests to Server1 and also sends copy of accounting packets to Server2. Proxying is working fine, but I cant get the copy-acct-to-home-server function to work. At the moment, authentication works fine, but accounting packets gets only to Server2. Any idea what I do wrong ? Thanks in advance for any help, its appreciated. --- Server log --- Polling for detail file /var/log/radius/radacct/detail detail_recv: Renaming /var/log/radius/radacct/detail -> /var/log/radius/radacct/detail.work detail_recv: Read packet from /var/log/radius/radacct/detail.work Acct-Session-Id = "6000006B" User-Name = "xxx" NAS-Port-Type = Ethernet Acct-Status-Type = Start Acct-Delay-Time = 1 NAS-IP-Address = x.x.x.x Acct-Unique-Session-Id = "3abb2fc097796361" Stripped-User-Name = "xxx" Realm = "DEFAULT" Packet-Original-Timestamp = "Aug 26 2009 00:27:37 EDT" server copy-acct-to-home-server { +- entering group preacct {...} ++[preprocess] returns ok [suffix] Request already proxied. Ignoring. ++[suffix] returns ok +- entering group accounting {...} ++[ok] returns ok } # server copy-acct-to-home-server Finished request 1. Cleaning up request 1 ID 24938 with timestamp +6 Going to the next request Waking up in 1.0 seconds. --- proxy.conf --- proxy server { default_fallback = yes } home_server acct_server1 { type = acct port = 1813 ipaddr = x.x.x.x secret = xxxx } home_server acct_server2 { type = acct port = 1813 ipaddr = x.x.x.x secret = xxxx } home_server_pool my_acct_pool { home_server = acct_server1 home_server = acct_server2 } realm DEFAULT { type = radius authhost = server1:1812 accthost = server1:1813 acct_pool = my_acct_pool secret = xxxx }

2 1

GTC and XP
by Il Neofita 27 Aug '09

27 Aug '09

Hi I have installed free radius, with GTC and NIS on Mac, iphone, linux is working however, I am not able to configure XP SP2 When I go on EAP PEAP properties I can choise only EAP_MSCHAP2 and autre certificate I would like that XP was able to download the certificate automaticaly What I am doing wrong

2 1

Re: Rewrite domain
by David Rodríguez Fernández 27 Aug '09

27 Aug '09

Hi, I have a wifi with wpa2, with peap and mschap2, with db users with active directory, and all is working fine if my users log in with: WINDOWSDOMAIN\userlogin as username, but if the users auth as userlogin, the server reply: Auth: Login incorrect (rlm_mschap: No such user (0xc0000064)): There's a method to rewrite the login name to add WINDOWSDOMAIN\ to the beginning of login or to make that radius add a default domain to all users? Thanks.

3 4