- Freeradius-Users - lists.freeradius.org

Adding reply attributes when proxy
by mikoi 13 Aug '09

13 Aug '09

Hello. I have a FR 2.1.6+MySQL running on one box and a another box running Radius/Token server. Using realms in proxy.conf. Authentication works fine when proxying but the reply attributes from the SQL-table radreply are not added in the Access-Accept packet when proxy is used. If i use ClearText-Password it works fine. Googled and i found that earlier versions of FR had the post_proxy_authorize = yes that did this. How can i configure it so that attributes from radreply are sent? Regards Mika -- View this message in context: http://www.nabble.com/Adding-reply-attributes-when-proxy-tp24937303p2493730… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 2

Free Radius Compilation Error on RHEL5.3
by Kamal Garg 13 Aug '09

13 Aug '09

Hi, I am facing problem while making freeradius-server-2.1.6 on RHEL5.3, however I am able to successfully build and install the freeradius-server-2.1.6 on RHEL4.0. Following are the error logs I am getting while building freeradius server on RHEL5.3. [root@VMWare freeradius-server-2.1.6]# make gmake[1]: Entering directory `/home/freeradius-server-2.1.6' Making all in libltdl... gmake[2]: Entering directory `/home/freeradius-server-2.1.6/libltdl' /usr/bin/gmake all-am gmake[3]: Entering directory `/home/freeradius-server-2.1.6/libltdl' /bin/sh ./libtool --tag=CC --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -c -o ltdl.lo ltdl.c mkdir .libs gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -c ltdl.c -fPIC -DPIC -o .libs/ltdl.o ltdl.c: In function 'lt_dladderror': ltdl.c:967: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'tryall_dlopen_module': ltdl.c:2482: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2483: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2484: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'canonicalize_path': ltdl.c:2575: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2576: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'argzize_path': ltdl.c:2639: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2640: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2641: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'foreach_dirinpath': ltdl.c:2710: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'find_file_callback': ltdl.c:2750: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2751: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:2752: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'try_dlopen': ltdl.c:3068: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3069: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3095: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3127: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3333: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'lt_dlopenext': ltdl.c:3477: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'lt_argz_insertinorder': ltdl.c:3606: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3607: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3608: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'lt_argz_insertdir': ltdl.c:3636: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3637: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3638: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3672: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'list_files_by_dir': ltdl.c:3697: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3698: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3699: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3700: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c: In function 'lt_dlpath_insertdir': ltdl.c:3993: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:3994: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:4002: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:4007: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:4008: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:4017: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:4032: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type ltdl.c:4033: warning: passing argument 4 of '__assert_fail' discards qualifiers from pointer target type /usr/include/argz.h: In function 'argz_next': /usr/include/argz.h:181: internal compiler error: Segmentation fault Please submit a full bug report, with preprocessed source if appropriate. See <URL:http://bugzilla.redhat.com/bugzilla> for instructions. Preprocessed source stored into /tmp/ccYFkazU.out file, please attach this to your bugreport. gmake[3]: *** [ltdl.lo] Error 1 gmake[3]: Leaving directory `/home/freeradius-server-2.1.6/libltdl' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/home/freeradius-server-2.1.6/libltdl' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/home/freeradius-server-2.1.6' make: *** [all] Error 2 [root@VMWare freeradius-server-2.1.6]# Is there any compatibility issues between freeradius and RHEL5.3? Is there any way out to successfully build freeradius server on RHEL5.3 ? Thanks & Regards, Kamal

1 0

freeradius 2.1.6 radiusd process user
by ramesh p 13 Aug '09

13 Aug '09

Hi All, I have installed freeradius 2.1.6 on my linux box. But radiusd process is running as root. root 25027 1 0 04:23 ? 00:00:00 /usr/local/fnmt/freeradius2/sbin/radiusd I saw in older versions 1.1.6 running as nobody user/group. Is it fine if we run as root user? or we need to run as 'radius' user? How to that change. Please suggest. Thanks, Rams.

1 0

Re: Re: freeradius2.1.6 module errors
by ramesh p 13 Aug '09

13 Aug '09

Thanks alot. i can use either 'Stop' or 'stop'. It's not case sensitive am i correct? Thanks, Rams. Thu, 13 Aug 2009 00:56:21 -0700 On 13/8/09 08:41, Michael Bryant wrote: > Wrong operator. > Use = or not := > --Mike It's a comparison so it should be: if (Acct-Status-Type == 'stop') { sql } Steve -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953

1 0

Re:freeradius2.1.6 module errors
by ramesh p 13 Aug '09

13 Aug '09

Hi, Here is the full accounting section of sites-available/default accounting { # # Create a 'detail'ed log of the packets. # Note that accounting requests which are proxied # are also logged in the detail file. detail # daily # Update the wtmp file # # If you don't use "radlast", you can delete this line. unix # # For Simultaneous-Use tracking. # # Due to packet losses in the network, the data here # may be incorrect. There is little we can do about it. radutmp # sradutmp # Return an address to the IP Pool when we see a stop record. # main_pool # # Log traffic to an SQL database. # # See "Accounting queries" in sql.conf #sql * if(Acct-Status-Type := 'stop') { sql }* # # Instead of sending the query to the SQL server, # write it into a log file. # # sql_log # Cisco VoIP specific bulk accounting # pgsql-voip # Filter attributes from the accounting response. attr_filter.accounting_response # # See "Autz-Type Status-Server" for how this works. # Acct-Type Status-Server { } } Thanks, Rams. On 13/8/09 07:10, ramesh p wrote: > Though i have placed the code in sites-available/default > under accounting section: > > if(Acct-Status-Type := 'stop'){ > sql Can you post the full section that you have added this to, if you have only added just those 2 lines then you haven't closed the statement off with a "}". Steve -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953

3 2

Re: Freeradius-Users Digest, Vol 52, Issue 59
by ramesh p 13 Aug '09

13 Aug '09

Hi, Here is the full accounting section of sites-available/default accounting { # # Create a 'detail'ed log of the packets. # Note that accounting requests which are proxied # are also logged in the detail file. detail # daily # Update the wtmp file # # If you don't use "radlast", you can delete this line. unix # # For Simultaneous-Use tracking. # # Due to packet losses in the network, the data here # may be incorrect. There is little we can do about it. radutmp # sradutmp # Return an address to the IP Pool when we see a stop record. # main_pool # # Log traffic to an SQL database. # # See "Accounting queries" in sql.conf #sql * if(Acct-Status-Type := 'stop') { sql }* # # Instead of sending the query to the SQL server, # write it into a log file. # # sql_log # Cisco VoIP specific bulk accounting # pgsql-voip # Filter attributes from the accounting response. attr_filter.accounting_response # # See "Autz-Type Status-Server" for how this works. # Acct-Type Status-Server { } } Thanks, Rams. On 13/8/09 07:10, ramesh p wrote: > Though i have placed the code in sites-available/default > under accounting section: > > if(Acct-Status-Type := 'stop'){ > sql Can you post the full section that you have added this to, if you have only added just those 2 lines then you haven't closed the statement off with a "}". Steve -- Steven Carr Systems Development Officer SLS/ITS/Systems - (0191) 515 3953

1 0

Re: freeradius2.1.6 module errors
by ramesh p 13 Aug '09

13 Aug '09

Though i have placed the code in sites-available/default under accounting section: if(Acct-Status-Type := 'stop'){ sql getting the following error with radiusd -X: [root@localhost raddb]# ../../sbin/radiusd -X FreeRADIUS Version 2.1.6, for host i686-pc-linux-gnu, built on Aug 10 2009 at 04:51:09 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/fnmt/freeradius2//etc/raddb/radiusd.conf including configuration file /usr/local/fnmt/freeradius2//etc/raddb/proxy.conf including configuration file /usr/local/fnmt/freeradius2//etc/raddb/clients.conf including files in directory /usr/local/fnmt/freeradius2//etc/raddb/modules/ including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/ldap including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/pap including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/exec including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/expr including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/attr_filter including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/radutmp including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/preprocess including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/always including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/sqlcounter_expire_on_login including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/ detail.example.com including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/attr_rewrite including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/etc_group including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/unix including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/mac2vlan including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/chap including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/smsotp including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/expiration including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/pam including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/inner-eap including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/acct_unique including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/wimax including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/smbpasswd including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/logintime including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/sql_log including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/realm including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/linelog including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/otp including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/mac2ip including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/checkval including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/krb5 including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/mschap including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/counter including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/detail including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/digest including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/passwd including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/sradutmp including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/files including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/policy including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/detail.log including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/perl including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/ippool including configuration file /usr/local/fnmt/freeradius2//etc/raddb/modules/echo including configuration file /usr/local/fnmt/freeradius2//etc/raddb/eap.conf including configuration file /usr/local/fnmt/freeradius2//etc/raddb/sql.conf including configuration file /usr/local/fnmt/freeradius2//etc/raddb/sql/mysql/dialup.conf including configuration file /usr/local/fnmt/freeradius2//etc/raddb/policy.conf including files in directory /usr/local/fnmt/freeradius2//etc/raddb/sites-enabled/ including configuration file /usr/local/fnmt/freeradius2//etc/raddb/sites-enabled/status including configuration file /usr/local/fnmt/freeradius2//etc/raddb/sites-enabled/control-socket including configuration file /usr/local/fnmt/freeradius2//etc/raddb/sites-enabled/default */usr/local/fnmt/freeradius2//etc/raddb/sites-enabled/default[355]: Parse error in condition at: Acct-Status-Type := "stop") Errors reading /usr/local/fnmt/freeradius2//etc/raddb/radiusd.conf * Please suggest ... Thanks, Rams. > > > Message: 3 > Date: Wed, 12 Aug 2009 20:49:17 +0100 > From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> > Subject: Re: freeradius2.1.6 module errors > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20090812194917.GE24232(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > Hi, > > > default { > > accounting { > > if(Acct-Status-Type = 'stop'){ > > sql > > or edit the required dialup.conf for the chosen SQL solution > and only have the STOP insert command there? > > alan > > > ------------------------------ > > Message: 4 > Date: Wed, 12 Aug 2009 21:25:55 +0100 > From: Arran Cudbard-Bell <a.cudbard-bell(a)sussex.ac.uk> > Subject: Re: freeradius2.1.6 module errors > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <2F3CCBEC-14E8-4AF5-B3C3-13F2187E6ADA(a)sussex.ac.uk> > Content-Type: text/plain; charset=us-ascii; format=flowed > > It used to get angry when you did that.... > > -- > > On 12 Aug 2009, at 20:49, Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> wrote: > > > Hi, > > > >> default { > >> accounting { > >> if(Acct-Status-Type = 'stop'){ > >> sql > > > > or edit the required dialup.conf for the chosen SQL solution > > and only have the STOP insert command there? > > > > alan > > - > > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > ------------------------------ > > Message: 5 > Date: Wed, 12 Aug 2009 21:55:55 +0100 > From: Alan Buxey <A.L.M.Buxey(a)lboro.ac.uk> > Subject: Re: freeradius2.1.6 module errors > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20090812205555.GA24520(a)lboro.ac.uk> > Content-Type: text/plain; charset=us-ascii > > Hi, > > It used to get angry when you did that.... > > ..it might still do - hence my email was a question > rather than a statement ;-) > > alan > > >

2 1

Re: freeradius2.1.6 module errors
by ramesh p 12 Aug '09

12 Aug '09

I'am trying to store only "Stop" packets in database, and i'm not storing Acct-Status-Type = start,Tunnel-Stop, Tunnel-start,Failed etc... packets in db. How i can achieve this? Please advice. Thanks, Rams. > > > On Wed, Aug 12, 2009 at 3:30 PM, < > freeradius-users-request(a)lists.freeradius.org> wrote: > >> Send Freeradius-Users mailing list submissions to >> freeradius-users(a)lists.freeradius.org >> >> To subscribe or unsubscribe via the World Wide Web, visit >> http://lists.freeradius.org/mailman/listinfo/freeradius-users >> or, via email, send a message with subject or body 'help' to >> freeradius-users-request(a)lists.freeradius.org >> >> You can reach the person managing the list at >> freeradius-users-owner(a)lists.freeradius.org >> >> When replying, please edit your Subject line so it is more specific >> than "Re: Contents of Freeradius-Users digest..." >> >> >> Today's Topics: >> >> 1. Re: freeradius2.1.6 module errors (Doug Hardie) >> 2. Freeradius with jradius (shivashankar) >> 3. Help with passwords (David Jansen) >> 4. Re: Help with passwords (Alan DeKok) >> >> >> ---------------------------------------------------------------------- >> >> Message: 1 >> Date: Tue, 11 Aug 2009 16:05:21 -0700 >> From: Doug Hardie <bc979(a)lafn.org> >> Subject: Re: freeradius2.1.6 module errors >> To: FreeRadius users mailing list >> <freeradius-users(a)lists.freeradius.org> >> Message-ID: <EBEB797D-D771-46BE-BA70-C8BE1F2959FA(a)lafn.org> >> Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes >> >> >> On 11 August 2009, at 06:54, ramesh p wrote: >> >> > Am doing it correctly? Please suggest? >> >> Obviously not since FreeRADIUS is telling you it doesn't understant >> the Acct-Type of Ignore. I suspect you are not getting a good answer >> is that I (for one) do not understand what you are trying to >> accomplish. You use the term ignore which implies to me that you want >> FreeRADIUS to drop any non Stop packets and not respond at all. That >> means that the NAS will continue to retry every one of those packets >> for some predetermined number of times wasting bandwidth. I would >> recommend providing some details on what you want to accomplish and >> someone may be able to show you how to do that. >> >> > >> > Thanks, >> > Rams. >> > >> > 4. freeradius2.1.6 module errors (ramesh p) >> > >> > >> > ---------------------------------------------------------------------- >> > >> > Message: 4 >> > Date: Tue, 11 Aug 2009 12:50:30 +0530 >> > From: ramesh p <rock786143(a)gmail.com> >> > Subject: freeradius2.1.6 module errors >> > To: FreeRadius users mailing list >> > <freeradius-users(a)lists.freeradius.org> >> > Message-ID: >> > <6b6aa6710908110020r50a6d15aked46497f07cdadc7(a)mail.gmail.com> >> > Content-Type: text/plain; charset="iso-8859-1" >> > >> > Hi All, >> > >> > I have placed a small module "IGNORE" to ignore packets other than >> > "Stop" >> > type. >> > >> > modified acct_users file as: >> > >> > DEFAULT Acct-Status-Type == "Tunnel-Stop", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Tunnel-Start", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Start", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Failed", Acct-Type := "IGNORE" >> > #DEFAULT Acct-Status-Type == "Checkpoint", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Accounting-On", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Accounting-Off", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Tunnel-Reject", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Tunnel-Link-Start", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Tunnel-Link-Stop", Acct-Type := "IGNORE" >> > DEFAULT Acct-Status-Type == "Tunnel-Link-Reject", Acct-Type := >> > "IGNORE" >> > >> > and added the following in accounting section of main configuration >> > file : >> > >> > Acct-Type IGNORE { >> > >> > ok >> > >> > } >> > >> > The above configuration was working in 1.1.6 version. However getting >> > following error in 2.1.6 version. >> > Module: Instantiating files >> > files { >> > usersfile = "/usr/local/fnmt/freeradius2//etc/raddb/users" >> > acctusersfile = "/usr/local/fnmt/freeradius2//etc/raddb/ >> > acct_users" >> > preproxy_usersfile = >> > "/usr/local/fnmt/freeradius2//etc/raddb/preproxy_users" >> > compat = "no" >> > } >> > /usr/local/fnmt/freeradius2//etc/raddb/acct_users[25]: Parse error >> > (check) >> > for entry DEFAULT: Unknown value IGNORE for attribute Acct-Type >> > >> > >> > Errors reading /usr/local/fnmt/freeradius2//etc/raddb/acct_users >> > /usr/local/fnmt/freeradius2//etc/raddb/modules/files[7]: Instantiation >> > failed for module "files" >> > >> > please help. >> > >> > Thanks, >> > Rams. >> > Please help >> >

3 5

Re: freeradius2.1.6 module errors (Doug Hardie)
by ramesh p 12 Aug '09

12 Aug '09

I'am trying to log only "Stop" packets, and i'm not storing start,Tunnel-Stop, Tunnel-start,Failed etc... packets Please advice. Thanks, Rams. On Wed, Aug 12, 2009 at 3:30 PM, < freeradius-users-request(a)lists.freeradius.org> wrote: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: freeradius2.1.6 module errors (Doug Hardie) > 2. Freeradius with jradius (shivashankar) > 3. Help with passwords (David Jansen) > 4. Re: Help with passwords (Alan DeKok) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Tue, 11 Aug 2009 16:05:21 -0700 > From: Doug Hardie <bc979(a)lafn.org> > Subject: Re: freeradius2.1.6 module errors > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <EBEB797D-D771-46BE-BA70-C8BE1F2959FA(a)lafn.org> > Content-Type: text/plain; charset=US-ASCII; format=flowed; delsp=yes > > > On 11 August 2009, at 06:54, ramesh p wrote: > > > Am doing it correctly? Please suggest? > > Obviously not since FreeRADIUS is telling you it doesn't understant > the Acct-Type of Ignore. I suspect you are not getting a good answer > is that I (for one) do not understand what you are trying to > accomplish. You use the term ignore which implies to me that you want > FreeRADIUS to drop any non Stop packets and not respond at all. That > means that the NAS will continue to retry every one of those packets > for some predetermined number of times wasting bandwidth. I would > recommend providing some details on what you want to accomplish and > someone may be able to show you how to do that. > > > > > Thanks, > > Rams. > > > > 4. freeradius2.1.6 module errors (ramesh p) > > > > > > ---------------------------------------------------------------------- > > > > Message: 4 > > Date: Tue, 11 Aug 2009 12:50:30 +0530 > > From: ramesh p <rock786143(a)gmail.com> > > Subject: freeradius2.1.6 module errors > > To: FreeRadius users mailing list > > <freeradius-users(a)lists.freeradius.org> > > Message-ID: > > <6b6aa6710908110020r50a6d15aked46497f07cdadc7(a)mail.gmail.com> > > Content-Type: text/plain; charset="iso-8859-1" > > > > Hi All, > > > > I have placed a small module "IGNORE" to ignore packets other than > > "Stop" > > type. > > > > modified acct_users file as: > > > > DEFAULT Acct-Status-Type == "Tunnel-Stop", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Tunnel-Start", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Start", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Failed", Acct-Type := "IGNORE" > > #DEFAULT Acct-Status-Type == "Checkpoint", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Accounting-On", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Accounting-Off", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Tunnel-Reject", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Tunnel-Link-Start", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Tunnel-Link-Stop", Acct-Type := "IGNORE" > > DEFAULT Acct-Status-Type == "Tunnel-Link-Reject", Acct-Type := > > "IGNORE" > > > > and added the following in accounting section of main configuration > > file : > > > > Acct-Type IGNORE { > > > > ok > > > > } > > > > The above configuration was working in 1.1.6 version. However getting > > following error in 2.1.6 version. > > Module: Instantiating files > > files { > > usersfile = "/usr/local/fnmt/freeradius2//etc/raddb/users" > > acctusersfile = "/usr/local/fnmt/freeradius2//etc/raddb/ > > acct_users" > > preproxy_usersfile = > > "/usr/local/fnmt/freeradius2//etc/raddb/preproxy_users" > > compat = "no" > > } > > /usr/local/fnmt/freeradius2//etc/raddb/acct_users[25]: Parse error > > (check) > > for entry DEFAULT: Unknown value IGNORE for attribute Acct-Type > > > > > > Errors reading /usr/local/fnmt/freeradius2//etc/raddb/acct_users > > /usr/local/fnmt/freeradius2//etc/raddb/modules/files[7]: Instantiation > > failed for module "files" > > > > please help. > > > > Thanks, > > Rams. > > Please help > >

1 0

Help with passwords
by David Jansen 12 Aug '09

12 Aug '09

Hi, Although passwords are filtered in radius log i do still see unencrypted passwords in auth-detail-%% files in /var/log/radius/radacct. How can I get rid of these passwords? Kind regards David Jansen

2 1