- Freeradius-Users - lists.freeradius.org

stress test or performance test result
by Nizar Zulmi 01 Jun '09

01 Jun '09

dear all..i want to compare my RADIUS server result test with someone who perform stress test or performance test. please anyone has did performance test or stress test send me the result, it could be screenshoot or anything related to.it just for compare. thank you.

3 2

Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid ELF header
by Nakul Deshpande 01 Jun '09

01 Jun '09

Hi, When I give the command radiusd –X start, i get the the message: radiusd.conf[1600] Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid ELF header I have read the previous posts and tried to install different packages. I know that this is a issue with Linux/Debian and not a Freeradius issue. But if anybody has faced this problem and has been able link the “rlm_exec” module, please do let me know. Thanks, Nakul Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/freeradius/freeradius.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib radiusd.conf[1600] Failed to link to module 'rlm_exec': /usr/local/lib/rlm_exec.a: invalid ELF header

1 0

Building a test tool
by Vinit Karandikar 01 Jun '09

01 Jun '09

Hello folks, I'm new to Free Radius and would like to use it to build a test tool for testing a AAA server. I'd like the test tool to simulate (say) 10 network elements that talk to a AAA server - using threads on different ports that are controlled by the main thread. Some of these will initiate traffic to the AAA server (like the one simulating the PDSN). Others will receive traffic and talk back to the AAA server (like the one simulating the Pre-paid Server). I'm sure I'm not going to find something like this in the wild. So I'm planning to write code to do the above. I was wondering if there are bits of code that I can shamelessly pilfer from or use as a starting point. Any tips are plenty welcome... Thanks in advance to all, -Vinit

2 1

conditional acct proxy?
by Fajar A. Nugraha 01 Jun '09

01 Jun '09

Is it possible to proxy certain acct packets only? For example, I want to forward acct start and stop packets to another radius server, but I don't want to forward interim-update packets. -- Fajar

1 0

Members of two groups
by Andrew Paternoster 01 Jun '09

01 Jun '09

Hi List Sorry if this is a simple problem i have been pulling my hair out for 3 days. I running Freeradius 2.1.6 and its all working great. Ecept for my users that are members of 2 groups. I have been reading on the net and it looks like it can be done but for the life of me i can not get it to work The only grop that applies is the lowest priorty. The system just seems to ingor the rest of the list. The strange this is that if i run the SQL querys it looks like it pulling the right data back but not adding each attibute to the logon only the first one. I have moved the prioritys around and it works will all of them but only one at a time and only the lowest priority. Can anyone point out what i'm missing Thanks Andrew Paternoster Mon Jun 1 22:24:46 2009 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radcheck WHERE username = 'andrew.home(a)gpknet.com.au' ORDER BY id Mon Jun 1 22:24:46 2009 : Info: [sql] User found in radcheck table Mon Jun 1 22:24:46 2009 : Info: [sql] expand: SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{SQL-User-Name}' ORDER BY id -> SELECT id, username, attribute, value, op FROM radreply WHERE username = 'andrew.home(a)gpknet.com.au' ORDER BY id Mon Jun 1 22:24:46 2009 : Info: [sql] expand: SELECT groupname FROM radusergroup WHERE username = '%{SQL-User-Name}' ORDER BY priority -> SELECT groupname FROM radusergroup WHERE username = 'andrew.home(a)gpknet.com.au' ORDER BY priority Mon Jun 1 22:24:46 2009 : Info: [sql] expand: SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, Value, op FROM radgroupcheck WHERE groupname = '8M Download' ORDER BY id Mon Jun 1 22:24:46 2009 : Info: [sql] User found in group 8M Download Mon Jun 1 22:24:46 2009 : Info: [sql] expand: SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id -> SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '8M Download' ORDER BY id

1 0

around radius - printers, ip phones and others
by Bartosz Chodzinski 01 Jun '09

01 Jun '09

Hi, What do you suggest to do with printers, ip phones and other network devices wchich can not support 802.1x ? What are you doing to secure this backdoor? One idea is to identify such devices by MAC but I think it should be something else - cause someone can disconnect fi printer - change mac addres on pc on the same as printer and welcome home :). any suggestions? Bartosz Chodzinski.

2 1

Problems authenticating with freeRADIUS and LEAP
by smaaland 01 Jun '09

01 Jun '09

Hi! I have set up a freeradius server, which are pointed to by my Linksys WRT54GL router. Everything seems to work with LEAP authentication, such as radtest from localhost and also from my laptop (When router is running WPA2 Personal, and i can connect to the network). The problem comes when i switch to WPA2 Enterprise. I try to connect with my user credentials to the access point, and the radius server gets the request, authenricates and sends a "Access-Accept" message back to the AP. But my laptop never gets connected completely. It just says that it is "trying to authenticate", and seems to send more access requests to the AP, and the radiusserver reponds to them with more Access-Accept, but it never works. I have tried with both a laptop running Linux Mint, and a macbook, and the same thing happens at both of them. Does anyone have an idea please? -- View this message in context: http://www.nabble.com/Problems-authenticating-with-freeRADIUS-and-LEAP-tp23… Sent from the FreeRadius - User mailing list archive at Nabble.com.

5 4

freeradius-users@lists.freeradius.org
by Just E. Mail 29 May '09

29 May '09

Is there any way to setup freeRADIUS to connect to "my_db" instead of "radius" database? I have setup freeRADIUS successfully to connect to a backend PostgreSQL database. My original TEST setup is done by following the standard instruction bt creating a "radius" database & "radius" role/User. sql.con has the following instructions,which I believe make this connection; database = postgres server = "pg1" login = "radius" password = "radpass" When I start the RADIUS in the DEBUG mode, I see this line; radius@pg1:/radius and it connects & no error is displayed. -------------------- No I want to change the database to"my_db" & a Schema "radius". PostgreSQL is both of them created. I changed "sql.conf" to: database = postgres server = "pg1" login = "my_db" password = "radpass" This does not work. --------------------- Is there any way to further change the freeRADIUS configuration to have it connect to"my_db" & "radius" Schema? Is it possible that freeRADIUS software is hard coded that it will only connect to a "radius" Database with "radius" Schema?

2 2

FreeRadius with Novell
by Magnus Larsson 29 May '09

29 May '09

Hi, I'm using FreeRadius as a "radius proxy" to authenticate wireless users and send which VLAN ID they should be using. The authentication server is two Novell servers with two different trees. Now to the problem .. I can't use context less login since the FreeRadius first need to authenticate to place the user on a VLAN and then the client logs in to the Novell server. Is it possible somehow to have FreeRadius hardcoded with all possible contexts to search for the user or somehow first give a temporary VLAN to the user and then move the user to the real VLAN after the context less authentication? I hope you understand what I mean Best Regards, Magnus Larsson MCE, CWSP, BCCPP, WCSE+, CICSP _________________________________________________________________________ AddPro AB Stubbengatan 2, SE-703 44 Örebro Mobile: +46 (0)70 417 45 02 Direct: +46 (0)19 760 45 02 magnus.larsson(a)addpro.se<mailto:magnus.larsson@addpro.se> | www.addpro.se<http://www.addpro.se/> AddPro_Signatur

3 2

problem with rlm_counter module when reset option is set to never
by Ahmed Nifaz Faizabadi 29 May '09

29 May '09

Hi all, Here is the issue I am facing with rlm_counter module. I am using freeradius-server-2.1.4 and configuring Max session time for each user. for example: user1 Max-Session-Time := 1800, Auth-Type := Reject Reply-Message = "Your time limit is used" user2 Max-Session-Time := 3600, Auth-Type := Reject Reply-Message = "Your time limit is used" and rlm_counter options are : counter daily { counter-name = Max-All-Session-Time check-name = Max-All-Session key = User-Name reset = never } I am observing that the user accounting record is not deleted from rlm_counter module once the user has used his allocated time. For example when user1 has used 1800 seconds allocated to him then I will be deleting the user from users config and then add the same user back. I am getting the "Your time limit is used" message :(. Does somebody has information about how to delete the records from rlm_counter module once they are expired with reset-option set to never. Regards Ahmed Nifaz

4 11