- Freeradius-Users - lists.freeradius.org

new to freeradius, securing LAN
by ldap.lippogeneral.com 29 May '09

29 May '09

Hello All, I am very new to FreeRadius, some of users are already knew our LAN IPs ... so they can manually configure an interface on their PC and completely bypass our DHCP server.. can I solve this by using FreeRadius? I thought this can be done by checking its MAC address, so although they use valid IP address but if their MAC address not recognized by our server then they must be denied and they cannot go anywhere and cannot do anything in our LAN.. I need advise.. many thanks in advance *********************** Our outgoing mail has been scanned by MSS. ***********-***********

4 6

rlm eap problem
by Michael Ziemann 29 May '09

29 May '09

Hi folks, Now I got a new problem with rlm_eap and the server doesn't start anymore. You were right, I commented $INCLUDE sites-enabled/ in radiusd.conf. So what can I do now? Best regards Michael FreeRADIUS Version 2.1.5, for host i686-pc-linux-gnu, built on Mar 26 2009 at 14:24:27 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /mypath/freeradius/etc/raddb/radiusd.conf including configuration file /mypath/freeradius/etc/raddb/proxy.conf including configuration file /mypath/freeradius/etc/raddb/clients.conf including files in directory /mypath/freeradius/etc/raddb/modules/ including configuration file /mypath/freeradius/etc/raddb/modules/chap including configuration file /mypath/freeradius/etc/raddb/modules/acct_unique including configuration file /mypath/freeradius/etc/raddb/modules/always including configuration file /mypath/freeradius/etc/raddb/modules/attr_filter including configuration file /mypath/freeradius/etc/raddb/modules/attr_rewrite including configuration file /mypath/freeradius/etc/raddb/modules/checkval including configuration file /mypath/freeradius/etc/raddb/modules/counter including configuration file /mypath/freeradius/etc/raddb/modules/detail including configuration file /mypath/freeradius/etc/raddb/modules/detail.example.com including configuration file /mypath/freeradius/etc/raddb/modules/detail.log including configuration file /mypath/freeradius/etc/raddb/modules/digest including configuration file /mypath/freeradius/etc/raddb/modules/echo including configuration file /mypath/freeradius/etc/raddb/modules/etc_group including configuration file /mypath/freeradius/etc/raddb/modules/exec including configuration file /mypath/freeradius/etc/raddb/modules/expiration including configuration file /mypath/freeradius/etc/raddb/modules/expr including configuration file /mypath/freeradius/etc/raddb/modules/files including configuration file /mypath/freeradius/etc/raddb/modules/inner-eap including configuration file /mypath/freeradius/etc/raddb/modules/ippool including configuration file /mypath/freeradius/etc/raddb/modules/krb5 including configuration file /mypath/freeradius/etc/raddb/modules/ldap including configuration file /mypath/freeradius/etc/raddb/modules/linelog including configuration file /mypath/freeradius/etc/raddb/modules/logintime including configuration file /mypath/freeradius/etc/raddb/modules/mac2ip including configuration file /mypath/freeradius/etc/raddb/modules/mac2vlan including configuration file /mypath/freeradius/etc/raddb/modules/mschap including configuration file /mypath/freeradius/etc/raddb/modules/otp including configuration file /mypath/freeradius/etc/raddb/modules/pam including configuration file /mypath/freeradius/etc/raddb/modules/pap including configuration file /mypath/freeradius/etc/raddb/modules/passwd including configuration file /mypath/freeradius/etc/raddb/modules/perl including configuration file /mypath/freeradius/etc/raddb/modules/policy including configuration file /mypath/freeradius/etc/raddb/modules/preprocess including configuration file /mypath/freeradius/etc/raddb/modules/radutmp including configuration file /mypath/freeradius/etc/raddb/modules/realm including configuration file /mypath/freeradius/etc/raddb/modules/smbpasswd including configuration file /mypath/freeradius/etc/raddb/modules/smsotp including configuration file /mypath/freeradius/etc/raddb/modules/sql_log including configuration file /mypath/freeradius/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /mypath/freeradius/etc/raddb/modules/sradutmp including configuration file /mypath/freeradius/etc/raddb/modules/unix including configuration file /mypath/freeradius/etc/raddb/modules/wimax including configuration file /mypath/freeradius/etc/raddb/eap.conf including configuration file /mypath/freeradius/etc/raddb/sql.conf including configuration file /mypath/freeradius/etc/raddb/sql/mysql/dialup.conf including configuration file /mypath/freeradius/etc/raddb/policy.conf including files in directory /mypath/freeradius/etc/raddb/sites-enabled/ including configuration file /mypath/freeradius/etc/raddb/sites-enabled/default including configuration file /mypath/freeradius/etc/raddb/sites-enabled/inner-tunnel including configuration file /mypath/freeradius/etc/raddb/sites-enabled/control-socket including dictionary file /mypath/freeradius/etc/raddb/dictionary main { prefix = "/mypath/freeradius" localstatedir = "/mypath/freeradius/var" logdir = "/mypath/freeradius/var/log/radius" libdir = "/mypath/freeradius/lib" radacctdir = "/mypath/freeradius/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/mypath/freeradius/var/run/radiusd/radiusd.pid" checkrad = "/mypath/freeradius/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client 91.50.12.116 { require_message_authenticator = no secret = "test" shortname = "91.50.12.116" } client 91.50.53.68 { require_message_authenticator = no secret = "test" shortname = "91.50.53.68" } client 127.0.0.1 { require_message_authenticator = no secret = "test" shortname = "127.0.0.1" nastype = "other" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/mypath/freeradius/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/mypath/freeradius/etc/raddb/certs/server.pem" certificate_file = "/mypath/freeradius/etc/raddb/certs/server.pem" CA_file = "/mypath/freeradius/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/mypath/freeradius/etc/raddb/certs/dh" random_file = "/mypath/freeradius/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/mypath/freeradius/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory rlm_eap_tls: Error reading Trusted root CA list /mypath/freeradius/etc/raddb/certs/ca.pem rlm_eap: Failed to initialize type tls /mypath/freeradius/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /mypath/freeradius/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /mypath/freeradius/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. } } Errors initializing modules

4 5

No authenticate method (Auth-Type) configuration found for the request: Rejecting the user - Failed to authenticate the user.
by Michael Ziemann 29 May '09

29 May '09

Hello People, I have some problems with my RADIUS, when I send a message with radtest, I get following error: DEBUG-INFO: FreeRADIUS Version 2.1.5, for host i686-pc-linux-gnu, built on Mar 26 2009 at 14:24:27 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file mypath/freeradius/etc/raddb/radiusd.conf including configuration file mypath/freeradius/etc/raddb/proxy.conf including configuration file mypath/freeradius/etc/raddb/clients.conf including files in directory mypath/freeradius/etc/raddb/modules/ including configuration file mypath/freeradius/etc/raddb/modules/chap including configuration file mypath/freeradius/etc/raddb/modules/acct_unique including configuration file mypath/freeradius/etc/raddb/modules/always including configuration file mypath/freeradius/etc/raddb/modules/attr_filter including configuration file mypath/freeradius/etc/raddb/modules/attr_rewrite including configuration file mypath/freeradius/etc/raddb/modules/checkval including configuration file mypath/freeradius/etc/raddb/modules/counter including configuration file mypath/freeradius/etc/raddb/modules/detail including configuration file mypath/freeradius/etc/raddb/modules/detail.example.com including configuration file mypath/freeradius/etc/raddb/modules/detail.log including configuration file mypath/freeradius/etc/raddb/modules/digest including configuration file mypath/freeradius/etc/raddb/modules/echo including configuration file mypath/freeradius/etc/raddb/modules/etc_group including configuration file mypath/freeradius/etc/raddb/modules/exec including configuration file mypath/freeradius/etc/raddb/modules/expiration including configuration file mypath/freeradius/etc/raddb/modules/expr including configuration file mypath/freeradius/etc/raddb/modules/files including configuration file mypath/freeradius/etc/raddb/modules/inner-eap including configuration file mypath/freeradius/etc/raddb/modules/ippool including configuration file mypath/freeradius/etc/raddb/modules/krb5 including configuration file mypath/freeradius/etc/raddb/modules/ldap including configuration file mypath/freeradius/etc/raddb/modules/linelog including configuration file mypath/freeradius/etc/raddb/modules/logintime including configuration file mypath/freeradius/etc/raddb/modules/mac2ip including configuration file mypath/freeradius/etc/raddb/modules/mac2vlan including configuration file mypath/freeradius/etc/raddb/modules/mschap including configuration file mypath/freeradius/etc/raddb/modules/otp including configuration file mypath/freeradius/etc/raddb/modules/pam including configuration file mypath/freeradius/etc/raddb/modules/pap including configuration file mypath/freeradius/etc/raddb/modules/passwd including configuration file mypath/freeradius/etc/raddb/modules/perl including configuration file mypath/freeradius/etc/raddb/modules/policy including configuration file mypath/freeradius/etc/raddb/modules/preprocess including configuration file mypath/freeradius/etc/raddb/modules/radutmp including configuration file mypath/freeradius/etc/raddb/modules/realm including configuration file mypath/freeradius/etc/raddb/modules/smbpasswd including configuration file mypath/freeradius/etc/raddb/modules/smsotp including configuration file mypath/freeradius/etc/raddb/modules/sql_log including configuration file mypath/freeradius/etc/raddb/modules/sqlcounter_expire_on_login including configuration file mypath/freeradius/etc/raddb/modules/sradutmp including configuration file mypath/freeradius/etc/raddb/modules/unix including configuration file mypath/freeradius/etc/raddb/modules/wimax including configuration file mypath/freeradius/etc/raddb/eap.conf including configuration file mypath/freeradius/etc/raddb/sql.conf including configuration file mypath/freeradius/etc/raddb/sql/mysql/dialup.conf including configuration file mypath/freeradius/etc/raddb/policy.conf including dictionary file mypath/freeradius/etc/raddb/dictionary main { prefix = "mypath/freeradius" localstatedir = "mypath/freeradius/var" logdir = "mypath/freeradius/var/log/radius" libdir = "mypath/freeradius/lib" radacctdir = "mypath/freeradius/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "mypath/freeradius/var/run/radiusd/radiusd.pid" checkrad = "mypath/freeradius/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Loading Clients #### client 91.50.12.116 { require_message_authenticator = no secret = "test" shortname = "91.50.12.116" } client 91.50.53.68 { require_message_authenticator = no secret = "test" shortname = "91.50.53.68" } client 127.0.0.1 { require_message_authenticator = no secret = "test" shortname = "127.0.0.1" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### modules { } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 41090, id=213, length=59 User-Name = "michael" User-Password = "1234" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 213 to 127.0.0.1 port 41090 Waking up in 4.9 seconds. Cleaning up request 0 ID 213 with timestamp +55 Ready to process requests. Radtest access-reject packet: (13:29:52) [bin] ./radtest michael 1234 127.0.0.1 0 test Sending Access-Request of id 213 to 127.0.0.1 port 1812 User-Name = "michael" User-Password = "1234" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=213, length=20 I changed the original path in the email to mypath for security reasons. Thanks for your help. Best regards Michael.................................................................... Email: Michael.Ziemann(a)HERBER-HERBER.de D-66706 Nennig Oberwiesstraße 31 Tel.:fill30 +49 (0)6866 / 930 15 Fax:fill30 +49 (0)6866 / 930 16 Inhaber: Ingo und Jürgen Herber Rechtsform: GbR Ust-Id: DE-205 934 442 St-Nr.: 020/155/00002 www.HERBER-HERBER.de info(a)HERBER-HERBER.de ...................................................................

2 2

rlm_raw
by Johan Meiring 29 May '09

29 May '09

Apologies for reposting, but I was too lazy to type the address into my Thunderbird, "replied" to an old message, deleted subject/body, and I see my message sits at the bottom of the other thread.... Something remained in the headers, so people with threaded readers, will probably not see it..... ------------------------------------------------------------------- Hi all, I am trying to use the rlm_raw module to test a piece of code. Downloaded freeradius 2.1.7 pre from git Found rlm_raw here. http://lists.cistron.nl/pipermail/freeradius-devel/2005-January/007873.html After struggling for a few hours to convince my compiler to include the module, the following seemed to work. 1) touch src/modules/rlm_raw/configure 2) ./autogen.sh 3) added rlm_raw to debian configure by editing debian/rules Now it tries to compile it, but fails horribly. (See compile failure below). Does anyone have a clue how to add rlm_raw to the current git tar file? ------------SNIP-------------- make[6]: Entering directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules/rlm_raw' /usr/bin/libtool --mode=compile gcc -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/libltdl -D_LIBRADIUS -c rlm_raw.c gcc -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src -I/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/libltdl -D_LIBRADIUS -c rlm_raw.c -fPIC -DPIC -o .libs/rlm_raw.o rlm_raw.c:22:22: error: autoconf.h: No such file or directory rlm_raw.c:23:23: error: libradius.h: No such file or directory rlm_raw.c:28:21: error: radiusd.h: No such file or directory rlm_raw.c:29:21: error: modules.h: No such file or directory rlm_raw.c:30:22: error: conffile.h: No such file or directory rlm_raw.c:46: error: expected specifier-qualifier-list before ‘uint8_t’ rlm_raw.c:57: error: expected declaration specifiers or ‘...’ before ‘REQUEST’ rlm_raw.c:59: error: expected declaration specifiers or ‘...’ before ‘RADIUS_ESCAPE_STRING’ rlm_raw.c: In function ‘raw_xlat’: rlm_raw.c:61: error: ‘uint8_t’ undeclared (first use in this function) rlm_raw.c:61: error: (Each undeclared identifier is reported only once rlm_raw.c:61: error: for each function it appears in.) rlm_raw.c:61: error: expected ‘;’ before ‘strvalue’ rlm_raw.c:62: error: ‘uint32_t’ undeclared (first use in this function) rlm_raw.c:62: error: expected ‘;’ before ‘lvalue’ rlm_raw.c:63: error: expected ‘;’ before ‘vendorcode’ rlm_raw.c:70: error: ‘PW_TYPE_OCTETS’ undeclared (first use in this function) rlm_raw.c:71: error: ‘ATTR_FLAGS’ undeclared (first use in this function) rlm_raw.c:71: error: expected ‘;’ before ‘flags’ rlm_raw.c:72: error: ‘DICT_ATTR’ undeclared (first use in this function) rlm_raw.c:72: error: ‘da’ undeclared (first use in this function) rlm_raw.c:73: error: ‘DICT_VALUE’ undeclared (first use in this function) rlm_raw.c:73: error: ‘dv’ undeclared (first use in this function) rlm_raw.c:76: error: ‘request’ undeclared (first use in this function) rlm_raw.c:77: error: ‘ptr’ undeclared (first use in this function) rlm_raw.c:77: error: ‘radius_packet_t’ has no member named ‘data’ rlm_raw.c:78: error: ‘subptr’ undeclared (first use in this function) rlm_raw.c:79: error: ‘AUTH_HDR_LEN’ undeclared (first use in this function) rlm_raw.c:82: error: storage size of ‘s_tm’ isn’t known rlm_raw.c:87: warning: implicit declaration of function ‘dict_attrbyname’ rlm_raw.c:87: warning: nested extern declaration of ‘dict_attrbyname’ rlm_raw.c:89: warning: implicit declaration of function ‘strNcpy’ rlm_raw.c:89: warning: nested extern declaration of ‘strNcpy’ rlm_raw.c:92: error: ‘flags’ undeclared (first use in this function) rlm_raw.c:96: error: ‘vendorcode’ undeclared (first use in this function) rlm_raw.c:109: error: ‘PW_VENDOR_SPECIFIC’ undeclared (first use in this function) rlm_raw.c:111: warning: implicit declaration of function ‘memcpy’ rlm_raw.c:111: warning: incompatible implicit declaration of built-in function ‘memcpy’ rlm_raw.c:111: error: ‘lvalue’ undeclared (first use in this function) rlm_raw.c:112: warning: implicit declaration of function ‘ntohl’ rlm_raw.c:112: warning: nested extern declaration of ‘ntohl’ rlm_raw.c:151: error: ‘VENDORPEC_USR’ undeclared (first use in this function) rlm_raw.c:154: warning: implicit declaration of function ‘dict_attrbyvalue’ rlm_raw.c:154: warning: nested extern declaration of ‘dict_attrbyvalue’ rlm_raw.c:180: error: ‘PW_TYPE_STRING’ undeclared (first use in this function) rlm_raw.c:182: warning: implicit declaration of function ‘TAG_VALID_ZERO’ rlm_raw.c:182: warning: nested extern declaration of ‘TAG_VALID_ZERO’ rlm_raw.c:182: error: ‘FLAG_ENCRYPT_TUNNEL_PASSWORD’ undeclared (first use in this function) rlm_raw.c:186: warning: incompatible implicit declaration of built-in function ‘memcpy’ rlm_raw.c:186: error: ‘strvalue’ undeclared (first use in this function) rlm_raw.c:192: error: ‘PW_NAS_PORT’ undeclared (first use in this function) rlm_raw.c:195: warning: implicit declaration of function ‘librad_safeprint’ rlm_raw.c:195: warning: nested extern declaration of ‘librad_safeprint’ rlm_raw.c:205: error: ‘PW_TYPE_INTEGER’ undeclared (first use in this function) rlm_raw.c:206: error: ‘PW_TYPE_DATE’ undeclared (first use in this function) rlm_raw.c:207: error: ‘PW_TYPE_IPADDR’ undeclared (first use in this function) rlm_raw.c:239: warning: implicit declaration of function ‘dict_valbyattr’ rlm_raw.c:239: warning: nested extern declaration of ‘dict_valbyattr’ rlm_raw.c:247: warning: implicit declaration of function ‘strftime’ rlm_raw.c:247: warning: incompatible implicit declaration of built-in function ‘strftime’ rlm_raw.c:247: warning: implicit declaration of function ‘localtime_r’ rlm_raw.c:247: warning: nested extern declaration of ‘localtime_r’ rlm_raw.c:247: warning: passing argument 4 of ‘strftime’ makes pointer from integer without a cast rlm_raw.c:251: warning: implicit declaration of function ‘ip_ntoa’ rlm_raw.c:251: warning: nested extern declaration of ‘ip_ntoa’ rlm_raw.c:251: warning: assignment makes pointer from integer without a cast rlm_raw.c:257: error: ‘PW_TYPE_IFID’ undeclared (first use in this function) rlm_raw.c:262: warning: implicit declaration of function ‘ifid_ntoa’ rlm_raw.c:262: warning: nested extern declaration of ‘ifid_ntoa’ rlm_raw.c:262: warning: assignment makes pointer from integer without a cast rlm_raw.c:268: error: ‘PW_TYPE_IPV6ADDR’ undeclared (first use in this function) rlm_raw.c:273: warning: implicit declaration of function ‘ipv6_ntoa’ rlm_raw.c:273: warning: nested extern declaration of ‘ipv6_ntoa’ rlm_raw.c:273: warning: assignment makes pointer from integer without a cast rlm_raw.c:277: warning: implicit declaration of function ‘DEBUG’ rlm_raw.c:277: warning: nested extern declaration of ‘DEBUG’ rlm_raw.c:282: warning: implicit declaration of function ‘strcpy’ rlm_raw.c:282: warning: incompatible implicit declaration of built-in function ‘strcpy’ rlm_raw.c:292: warning: implicit declaration of function ‘DEBUG2’ rlm_raw.c:292: warning: nested extern declaration of ‘DEBUG2’ rlm_raw.c:294: warning: implicit declaration of function ‘strlen’ rlm_raw.c:294: warning: incompatible implicit declaration of built-in function ‘strlen’ rlm_raw.c:82: warning: unused variable ‘s_tm’ rlm_raw.c:57: warning: unused parameter ‘instance’ rlm_raw.c: At top level: rlm_raw.c:307: error: expected ‘)’ before ‘*’ token rlm_raw.c: In function ‘raw_detach’: rlm_raw.c:335: warning: implicit declaration of function ‘xlat_unregister’ rlm_raw.c:335: warning: nested extern declaration of ‘xlat_unregister’ rlm_raw.c: At top level: rlm_raw.c:351: error: expected ‘=’, ‘,’, ‘;’, ‘asm’ or ‘__attribute__’ before ‘rlm_raw’ make[6]: *** [rlm_raw.lo] Error 1 make[6]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules/rlm_raw' make[5]: *** [common] Error 2 make[5]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/usr/src/freeradius-server-2.1.7-pre/freeradius-server-2.1.7' make: *** [all] Error 2 --------------SNIP------------------------ -- -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

1 0

Re: question about windows users
by Bartosz Chodzinski 29 May '09

29 May '09

Problem was solved thanks to Ivan assistance, Main problem was on switch side and its configuration, Second problem was - proper certificate to proper certificate store And third - in my head :). Thank you again Bartosz.

2 2

Not doing Peap/ttls
by Leighton Man 29 May '09

29 May '09

Hi all, Help please and sorry for the long post. Quick description of the problem: New build Freeradius 2.1.4/5 on solaris x86 vmware. Client is a laptop running windows XP through a cisco switch configured for 802.1x. Will not do peap. Reconfigure the switch to use a different freeradius server (2.1.3 on sparc solaris) and it works fine. Output of raduisd -X on the non-working server below. Longer description: I have freeradius2.1.3 running on a test server and working fine. It authenticates users against Active Directory using peap or ttls with mschapv2. I've built 2.1.4 on what is to be the production server and it will not authenticate users. "./configure | grep WARN" on both systems shows the same modules not being built so by elimination the required ones are. (Is that a valid assumption? I checked by hand just in case) I've tarred the raddb directory on the working server and transferred it to the new one. Still doesn't do peap. Test certificates were created during the build process. I'm still fairly new to freeradius so I've probably missed something obvious but I've been struggling with this for several days now. Any assistance gratefully received. Regards, Leighton Leighton Man University of Huddersfield # /usr/local/sbin/radiusd -X FreeRADIUS Version 2.1.5, for host i386-pc-solaris2.10, built on May 11 2009 at 09:35:31 Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radiusd.conf including configuration file /usr/local/etc/raddb/proxy.conf including configuration file /usr/local/etc/raddb/clients.conf including files in directory /usr/local/etc/raddb/modules/ including configuration file /usr/local/etc/raddb/modules/acct_unique including configuration file /usr/local/etc/raddb/modules/always including configuration file /usr/local/etc/raddb/modules/attr_filter including configuration file /usr/local/etc/raddb/modules/attr_rewrite including configuration file /usr/local/etc/raddb/modules/chap including configuration file /usr/local/etc/raddb/modules/checkval including configuration file /usr/local/etc/raddb/modules/counter including configuration file /usr/local/etc/raddb/modules/detail including configuration file /usr/local/etc/raddb/modules/detail.example.com including configuration file /usr/local/etc/raddb/modules/detail.log including configuration file /usr/local/etc/raddb/modules/digest including configuration file /usr/local/etc/raddb/modules/echo including configuration file /usr/local/etc/raddb/modules/etc_group including configuration file /usr/local/etc/raddb/modules/exec including configuration file /usr/local/etc/raddb/modules/expiration including configuration file /usr/local/etc/raddb/modules/expr including configuration file /usr/local/etc/raddb/modules/files including configuration file /usr/local/etc/raddb/modules/inner-eap including configuration file /usr/local/etc/raddb/modules/ippool including configuration file /usr/local/etc/raddb/modules/krb5 including configuration file /usr/local/etc/raddb/modules/ldap including configuration file /usr/local/etc/raddb/modules/linelog including configuration file /usr/local/etc/raddb/modules/logintime including configuration file /usr/local/etc/raddb/modules/mac2ip including configuration file /usr/local/etc/raddb/modules/mac2vlan including configuration file /usr/local/etc/raddb/modules/mschap including configuration file /usr/local/etc/raddb/modules/otp including configuration file /usr/local/etc/raddb/modules/pam including configuration file /usr/local/etc/raddb/modules/pap including configuration file /usr/local/etc/raddb/modules/passwd including configuration file /usr/local/etc/raddb/modules/perl including configuration file /usr/local/etc/raddb/modules/policy including configuration file /usr/local/etc/raddb/modules/preprocess including configuration file /usr/local/etc/raddb/modules/radutmp including configuration file /usr/local/etc/raddb/modules/realm including configuration file /usr/local/etc/raddb/modules/smbpasswd including configuration file /usr/local/etc/raddb/modules/smsotp including configuration file /usr/local/etc/raddb/modules/sql_log including configuration file /usr/local/etc/raddb/modules/sqlcounter_expire_on_login including configuration file /usr/local/etc/raddb/modules/sradutmp including configuration file /usr/local/etc/raddb/modules/unix including configuration file /usr/local/etc/raddb/modules/wimax including configuration file /usr/local/etc/raddb/eap.conf including configuration file /usr/local/etc/raddb/policy.conf including files in directory /usr/local/etc/raddb/sites-enabled/ including configuration file /usr/local/etc/raddb/sites-enabled/default including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel including configuration file /usr/local/etc/raddb/sites-enabled/control-socket group = radius user = radius including dictionary file /usr/local/etc/raddb/dictionary main { prefix = "/usr/local" localstatedir = "/usr/local/var" logdir = "/usr/local/var/log/radius" libdir = "/usr/local/lib" radacctdir = "/usr/local/var/log/radius/radacct" hostname_lookups = no max_request_time = 30 cleanup_delay = 5 max_requests = 1024 allow_core_dumps = no pidfile = "/usr/local/var/run/radiusd/radiusd.pid" checkrad = "/usr/local/sbin/checkrad" debug_level = 0 proxy_requests = yes log { stripped_names = no auth = no auth_badpass = no auth_goodpass = no } security { max_attributes = 200 reject_delay = 1 status_server = yes } } radiusd: #### Loading Realms and Home Servers #### proxy server { retry_delay = 5 retry_count = 3 default_fallback = no dead_time = 120 wake_all_if_all_dead = no } home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 require_message_authenticator = no zombie_period = 40 status_check = "status-server" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 irt = 2 mrt = 16 mrc = 5 mrd = 30 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } realm NULL { authhost = LOCAL accthost = LOCAL } realm hud.ac.uk { authhost = LOCAL accthost = LOCAL } radiusd: #### Loading Clients #### client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } client 10.127.0.0/16 { require_message_authenticator = no secret = "secret" shortname = "hudds_switches" } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = yes ntlm_auth = "/usr/sfw/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "whatever" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" cache { enable = no lifetime = 24 max_entries = 255 } } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = yes proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } Module: Linked to module rlm_ldap Module: Instantiating ldap_staff ldap ldap_staff { server = "burns.hud.ac.uk" port = 389 password = "password" identity = "cn=cn,ou=ou,ou=ou,dc=ad,dc=hud,dc=ac,dc=uk" net_timeout = 1 timeout = 4 timelimit = 3 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=staff, dc=ad, dc=hud, dc=ac, dc=uk" filter = "(sAMAccountName=%{mschap:User-Name:-%{User-Name}})" base_filter = "(objectclass=radiusprofile)" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 5 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute ldap_staff-Ldap-Group rlm_ldap: Registering ldap_groupcmp for ldap_staff-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap_staff rlm_ldap: Over-riding set_auth_type, as there is no module ldap_staff listed in the "authenticate" section. rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 8193118 Module: Instantiating ldap_student ldap ldap_student { server = "burns.hud.ac.uk" port = 389 password = "password" identity = "cn=cn,ou=ou,ou=ou,dc=ad,dc=hud,dc=ac,dc=uk" net_timeout = 1 timeout = 4 timelimit = 3 tls_mode = no start_tls = no tls_require_cert = "allow" tls { start_tls = no require_cert = "allow" } basedn = "ou=students, dc=ad, dc=hud, dc=ac, dc=uk" filter = "(sAMAccountName=%{mschap:User-Name:-%{User-Name}})" base_filter = "(objectclass=radiusprofile)" auto_header = no access_attr_used_for_allow = yes groupname_attribute = "cn" groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap_debug = 0 ldap_connections_number = 5 compare_check_items = no do_xlat = yes set_auth_type = yes } rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Creating new attribute ldap_student-Ldap-Group rlm_ldap: Registering ldap_groupcmp for ldap_student-Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap_student rlm_ldap: Over-riding set_auth_type, as there is no module ldap_student listed in the "authenticate" section. rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP sambaLmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNtPassword mapped to RADIUS NT-Password rlm_ldap: LDAP dBCSPwd mapped to RADIUS LM-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message conns: 8197930 Module: Linked to module rlm_always Module: Instantiating reject always reject { rcode = "reject" simulcount = 0 mpp = no } Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } listen { type = "control" listen { socket = "/usr/local/var/run/radiusd/radiusd.sock" } } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file /usr/local/var/run/radiusd/radiusd.sock Listening on proxy address * port 1814 Ready to process requests. rad_recv: Access-Request packet from host 10.127.240.217 port 1645, id=17, length=170 User-Name = "XPTESTPC\\cmsxja-stu" Service-Type = Framed-User Framed-MTU = 1500 Called-Station-Id = "00-1B-54-DB-BB-01" Calling-Station-Id = "00-0D-88-23-D9-49" EAP-Message = 0x020200180158505445535450435c636d73786a612d737475 Message-Authenticator = 0xe1b11e8c0aa2816223f48de4af9f0b02 NAS-Port-Type = Ethernet NAS-Port = 50001 NAS-Port-Id = "FastEthernet0/1" NAS-IP-Address = 10.127.240.217 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "XPTESTPC\test", looking up realm NULL [suffix] Found realm "NULL" [suffix] Adding Stripped-User-Name = "XPTESTPC\test" [suffix] Adding Realm = "NULL" [suffix] Authentication realm is LOCAL. ++[suffix] returns ok [eap] EAP packet type response id 2 length 24 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP +- entering group authenticate {...} [eap] EAP Identity [eap] processing type md5 rlm_eap_md5: Issuing Challenge ++[eap] returns handled Sending Access-Challenge of id 17 to 10.127.240.217 port 1645 EAP-Message = 0x0103001604109627983660d4b7e34e5e7ccd04c3a534 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xf8540867f8570c152885b8f703c4be6b Finished request 2. Going to the next request Waking up in 4.9 seconds. ________________________________ <img src="http://www.hud.ac.uk/images/emails/neutral_navy_blue_003976.gif" alt="Inspiring tomorrow's professionals"> --- This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail and remove it from your system. If the content of this e-mail does not relate to the business of the University of Huddersfield, then we do not endorse it and will accept no liability.

2 2

Acct-Session-Id special characters changed to hex
by Sajeewa Warnakulasuriya 28 May '09

28 May '09

Hi All, I'm having some issues with the acct-session-id, where special characters for instance [] being converted to it's hex equivalent. For example below, the Acct-Session-Id = "301[]426932183" when inserted into the accounting table it is inserted as 301=5B=5D426932183. I have noticed the same happens with the sql-group. Please advise how I could insert the data as received without conversion. Thanks Sajeewa @ ispONE ================================================================== Wed May 27 09:19:48 2009 : Info: FreeRADIUS Version 2.0.4, for host i486-pc-linux-gnu, built on Sep 7 2008 at 23:35:34 Wed May 27 09:19:48 2009 : Info: Copyright (C) 1999-2008 The FreeRADIUS server project and contributors. Wed May 27 09:19:48 2009 : Info: There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A Wed May 27 09:19:48 2009 : Info: PARTICULAR PURPOSE. Wed May 27 09:19:48 2009 : Info: You may redistribute copies of FreeRADIUS under the terms of the Wed May 27 09:19:48 2009 : Info: GNU General Public License. Wed May 27 09:19:48 2009 : Info: Starting - reading configuration files ... Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/radiusd_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/proxy_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/clients_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/sql_dial.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/sql_prepaid_counter.conf Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/policy.conf Wed May 27 09:19:48 2009 : Debug: including files in directory /etc/freeradius/sites-enabled/ Wed May 27 09:19:48 2009 : Debug: including configuration file /etc/freeradius/sites-enabled/default_dial Wed May 27 09:19:48 2009 : Debug: including dictionary file /etc/freeradius/dictionary Wed May 27 09:19:48 2009 : Debug: main { Wed May 27 09:19:48 2009 : Debug: prefix = "/usr" Wed May 27 09:19:48 2009 : Debug: localstatedir = "/var" Wed May 27 09:19:48 2009 : Debug: logdir = "/var/log/freeradius" Wed May 27 09:19:48 2009 : Debug: libdir = "/usr/lib/freeradius" Wed May 27 09:19:48 2009 : Debug: radacctdir = "/var/log/freeradius/radacct" Wed May 27 09:19:48 2009 : Debug: hostname_lookups = no Wed May 27 09:19:48 2009 : Debug: max_request_time = 30 Wed May 27 09:19:48 2009 : Debug: cleanup_delay = 5 Wed May 27 09:19:48 2009 : Debug: max_requests = 1024 Wed May 27 09:19:48 2009 : Debug: allow_core_dumps = no Wed May 27 09:19:48 2009 : Debug: pidfile = "/var/run/freeradius/freeradius_dial.pid" Wed May 27 09:19:48 2009 : Debug: user = "freerad" Wed May 27 09:19:48 2009 : Debug: group = "freerad" Wed May 27 09:19:48 2009 : Debug: checkrad = "/usr/sbin/checkrad" Wed May 27 09:19:48 2009 : Debug: debug_level = 0 Wed May 27 09:19:48 2009 : Debug: proxy_requests = yes Wed May 27 09:19:48 2009 : Debug: security { Wed May 27 09:19:48 2009 : Debug: max_attributes = 200 Wed May 27 09:19:48 2009 : Debug: reject_delay = 0 Wed May 27 09:19:48 2009 : Debug: status_server = yes Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 144.130.4.5 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 144.130.4.5 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "11oneONEV6" Wed May 27 09:19:48 2009 : Debug: shortname = "telstra-1" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 144.130.7.5 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 144.130.7.5 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "11oneONEV6" Wed May 27 09:19:48 2009 : Debug: shortname = "telstra-2" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 192.168.0.19 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.19 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "11oneONEV6" Wed May 27 09:19:48 2009 : Debug: shortname = "test-1" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 192.168.0.212 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.212 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "secret" Wed May 27 09:19:48 2009 : Debug: shortname = "test-2" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: client 192.168.0.151 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.151 Wed May 27 09:19:48 2009 : Debug: require_message_authenticator = no Wed May 27 09:19:48 2009 : Debug: secret = "secret" Wed May 27 09:19:48 2009 : Debug: shortname = "test-3" Wed May 27 09:19:48 2009 : Debug: nastype = "other" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Loading Realms and Home Servers #### Wed May 27 09:19:48 2009 : Debug: proxy server { Wed May 27 09:19:48 2009 : Debug: retry_delay = 5 Wed May 27 09:19:48 2009 : Debug: retry_count = 3 Wed May 27 09:19:48 2009 : Debug: default_fallback = no Wed May 27 09:19:48 2009 : Debug: dead_time = 120 Wed May 27 09:19:48 2009 : Debug: wake_all_if_all_dead = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server hugonet_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 114.111.142.98 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "w89100kwq" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool hugonet_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = hugonet_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm hugonet.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = hugonet_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server planetisp_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 210.50.6.202 Wed May 27 09:19:48 2009 : Debug: port = 1646 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "62gys8j" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool planetisp_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = planetisp_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm planetisp.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = planetisp_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm 21century.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = planetisp_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm computersmobile.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = planetisp_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server tecknowlogy_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 202.125.168.246 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "2rtYhamfG" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool tecknowlogy_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = tecknowlogy_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm rtele.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = tecknowlogy_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server waterfront_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 203.123.80.196 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "tkwuIm278va" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool waterfront_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = waterfront_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm waterfront.net.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = waterfront_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server beagle_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 202.4.231.249 Wed May 27 09:19:48 2009 : Debug: port = 1813 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "tkwuIm278va" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool beagle_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = beagle_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm beagle.com.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = beagle_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server summit_1 { Wed May 27 09:19:48 2009 : Debug: ipaddr = 203.94.170.204 Wed May 27 09:19:48 2009 : Debug: port = 1646 Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: secret = "b92e1e3ab274" Wed May 27 09:19:48 2009 : Debug: response_window = 20 Wed May 27 09:19:48 2009 : Debug: max_outstanding = 65536 Wed May 27 09:19:48 2009 : Debug: zombie_period = 40 Wed May 27 09:19:48 2009 : Debug: status_check = "request" Wed May 27 09:19:48 2009 : Debug: ping_check = "none" Wed May 27 09:19:48 2009 : Debug: ping_interval = 30 Wed May 27 09:19:48 2009 : Debug: check_interval = 30 Wed May 27 09:19:48 2009 : Debug: num_answers_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: num_pings_to_alive = 3 Wed May 27 09:19:48 2009 : Debug: revive_interval = 300 Wed May 27 09:19:48 2009 : Debug: status_check_timeout = 4 Wed May 27 09:19:48 2009 : Debug: username = "statuscheck(a)ispone.com.au" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: home_server_pool summit_failover { Wed May 27 09:19:48 2009 : Debug: type = fail-over Wed May 27 09:19:48 2009 : Debug: home_server = summit_1 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm summit.net.au { Wed May 27 09:19:48 2009 : Debug: acct_pool = summit_failover Wed May 27 09:19:48 2009 : Debug: nostrip Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: realm DEFAULT { Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Instantiating modules #### Wed May 27 09:19:48 2009 : Debug: instantiate { Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_exec, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_exec Wed May 27 09:19:48 2009 : Debug: Module: Instantiating echo Wed May 27 09:19:48 2009 : Debug: exec echo { Wed May 27 09:19:48 2009 : Debug: wait = yes Wed May 27 09:19:48 2009 : Debug: program = "/bin/echo %{User-Name}" Wed May 27 09:19:48 2009 : Debug: input_pairs = "request" Wed May 27 09:19:48 2009 : Debug: output_pairs = "reply" Wed May 27 09:19:48 2009 : Debug: packet_type = "Access-Reject" Wed May 27 09:19:48 2009 : Debug: shell_escape = yes Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_expr, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_expr Wed May 27 09:19:48 2009 : Debug: Module: Instantiating expr Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Loading Virtual Servers #### Wed May 27 09:19:48 2009 : Debug: server { Wed May 27 09:19:48 2009 : Debug: modules { Wed May 27 09:19:48 2009 : Debug: Module: Checking authenticate {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_pap, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_pap Wed May 27 09:19:48 2009 : Debug: Module: Instantiating pap Wed May 27 09:19:48 2009 : Debug: pap { Wed May 27 09:19:48 2009 : Debug: encryption_scheme = "auto" Wed May 27 09:19:48 2009 : Debug: auto_header = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_chap, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_chap Wed May 27 09:19:48 2009 : Debug: Module: Instantiating chap Wed May 27 09:19:48 2009 : Debug: Module: Checking authorize {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_preprocess, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_preprocess Wed May 27 09:19:48 2009 : Debug: Module: Instantiating preprocess Wed May 27 09:19:48 2009 : Debug: preprocess { Wed May 27 09:19:48 2009 : Debug: huntgroups = "/etc/freeradius/huntgroups_dial" Wed May 27 09:19:48 2009 : Debug: hints = "/etc/freeradius/hints_dial" Wed May 27 09:19:48 2009 : Debug: with_ascend_hack = no Wed May 27 09:19:48 2009 : Debug: ascend_channels_per_line = 23 Wed May 27 09:19:48 2009 : Debug: with_ntdomain_hack = no Wed May 27 09:19:48 2009 : Debug: with_specialix_jetstream_hack = no Wed May 27 09:19:48 2009 : Debug: with_cisco_vsa_hack = no Wed May 27 09:19:48 2009 : Debug: with_alvarion_vsa_hack = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_realm, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_realm Wed May 27 09:19:48 2009 : Debug: Module: Instantiating suffix Wed May 27 09:19:48 2009 : Debug: realm suffix { Wed May 27 09:19:48 2009 : Debug: format = "suffix" Wed May 27 09:19:48 2009 : Debug: delimiter = "@" Wed May 27 09:19:48 2009 : Debug: ignore_default = no Wed May 27 09:19:48 2009 : Debug: ignore_null = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_sql, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_sql Wed May 27 09:19:48 2009 : Debug: Module: Instantiating auth_1 Wed May 27 09:19:48 2009 : Debug: sql auth_1 { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "SELECT id, username, attribute, value, op FROM radcheck WHERE username = '%{User-Name}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "SELECT id, username, attribute, value, op FROM radreply WHERE username = '%{User-Name}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "SELECT id, groupname, attribute, value, op FROM radgroupcheck WHERE groupname = '%{Sql-Group}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "SELECT id, groupname, attribute, value, op FROM radgroupreply WHERE groupname = '%{Sql-Group}' ORDER BY id" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: group_membership_query = "SELECT groupname FROM radusergroup WHERE username = '%{User-Name}' ORDER BY priority" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "SELECT ACCTSESSIONID, USERNAME, NASIDENTIFIER, NASPORT, FRAMEDIPADDRESS, CALLINGSTATIONID, SERVICETYPE FROM RADONLINE WHERE USERNAME = '%{User-Name}'" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_1): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_1): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_1): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_sqlcounter, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_sqlcounter Wed May 27 09:19:48 2009 : Debug: Module: Instantiating dial_prepaid_counter Wed May 27 09:19:48 2009 : Debug: sqlcounter dial_prepaid_counter { Wed May 27 09:19:48 2009 : Debug: counter-name = "Max-All-Session-Time" Wed May 27 09:19:48 2009 : Debug: check-name = "Max-All-Session" Wed May 27 09:19:48 2009 : Debug: key = "User-Name" Wed May 27 09:19:48 2009 : Debug: sqlmod-inst = "prepaid" Wed May 27 09:19:48 2009 : Debug: query = "SELECT SESSIONTIMEUSED FROM PREPAIDDIALUPTIME WHERE USERNAME = '%{%k}'" Wed May 27 09:19:48 2009 : Debug: reset = "never" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Reply attribute set to Session-Timeout. Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Counter attribute Max-All-Session-Time is number 11273 Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Check attribute Max-All-Session is number 11274 Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Current Time: 1243379988 [2009-05-27 09:19:48], Next reset 0 [2009-05-27 09:00:00] Wed May 27 09:19:48 2009 : Debug: rlm_sqlcounter: Current Time: 1243379988 [2009-05-27 09:19:48], Prev reset 0 [2009-05-27 09:00:00] Wed May 27 09:19:48 2009 : Debug: Module: Checking preacct {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Checking accounting {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Instantiating accounting_1 Wed May 27 09:19:48 2009 : Debug: sql accounting_1 { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','3','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','1','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','2','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_1): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_1): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_1): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: Module: Instantiating accounting_2 Wed May 27 09:19:48 2009 : Debug: sql accounting_2 { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "INSERT INTO RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, CALLZONE) VALUES ('%{User-Name}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{Acct-Session-Id}', '%T', '%{Framed-IP-Address}', '0%{NAS-Port-Type}', '%{Service-Type}', '%{Calling-Station-Id}', '%{Called-Station-Id}', '%{X-Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "DELETE FROM RADONLINE WHERE USERNAME = '%{User-Name}' AND NASIDENTIFIER = '%{NAS-IP-Address}' AND NASPORT = '%{NAS-Port}'" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_2): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (accounting_2): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (accounting_2): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: Module: Instantiating prepaid Wed May 27 09:19:48 2009 : Debug: sql prepaid { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "UPDATE PREPAIDDIALUPTIME SET SESSIONTIMEUSED = (SESSIONTIMEUSED + %{Acct-Session-Time}) WHERE USERNAME = '%{User-Name}'" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (prepaid): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (prepaid): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (prepaid): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: Module: Checking session {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Checking post-auth {...} for more modules to load Wed May 27 09:19:48 2009 : Debug: Module: Instantiating auth_reject Wed May 27 09:19:48 2009 : Debug: sql auth_reject { Wed May 27 09:19:48 2009 : Debug: driver = "rlm_sql_mysql" Wed May 27 09:19:48 2009 : Debug: server = "localhost" Wed May 27 09:19:48 2009 : Debug: port = "" Wed May 27 09:19:48 2009 : Debug: login = "dial_radius" Wed May 27 09:19:48 2009 : Debug: password = "radius912m87" Wed May 27 09:19:48 2009 : Debug: radius_db = "Radius" Wed May 27 09:19:48 2009 : Debug: read_groups = yes Wed May 27 09:19:48 2009 : Debug: sqltrace = no Wed May 27 09:19:48 2009 : Debug: sqltracefile = "/var/log/freeradius/sqltrace_dial.sql" Wed May 27 09:19:48 2009 : Debug: readclients = no Wed May 27 09:19:48 2009 : Debug: deletestalesessions = yes Wed May 27 09:19:48 2009 : Debug: num_sql_socks = 5 Wed May 27 09:19:48 2009 : Debug: sql_user_name = "" Wed May 27 09:19:48 2009 : Debug: default_user_profile = "" Wed May 27 09:19:48 2009 : Debug: nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" Wed May 27 09:19:48 2009 : Debug: authorize_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_reply_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_check_query = "" Wed May 27 09:19:48 2009 : Debug: authorize_group_reply_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_onoff_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_update_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_start_query_alt = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query = "" Wed May 27 09:19:48 2009 : Debug: accounting_stop_query_alt = "" Wed May 27 09:19:48 2009 : Debug: connect_failure_retry_delay = 10 Wed May 27 09:19:48 2009 : Debug: simul_count_query = "" Wed May 27 09:19:48 2009 : Debug: simul_verify_query = "" Wed May 27 09:19:48 2009 : Debug: postauth_query = "INSERT DELAYED INTO RADAUTHLOG (REASON, TIME_STAMP, TYPE, USERNAME, CALLEDSTATIONID, CALLINGSTATIONID, PASS_WORD, CALLZONE) values ('%{%{Module-Failure-Message}:-%{reply:Packet-Type}}','%S','0','%{User-Name}','%{Called-Station-Id}','%{Calling-Station-Id}','%{%{User-Password}:-%{Chap-Password}}','%{Ascend-Billing-Number}')" Wed May 27 09:19:48 2009 : Debug: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_reject): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed May 27 09:19:48 2009 : Info: rlm_sql (auth_reject): Attempting to connect to dial_radius@localhost:/Radius Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #0 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #0 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #1 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #1 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #2 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #2 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #3 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #3 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): starting 4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Attempting to connect rlm_sql_mysql #4 Wed May 27 09:19:48 2009 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Wed May 27 09:19:48 2009 : Debug: rlm_sql (auth_reject): Connected new DB handle, #4 Wed May 27 09:19:48 2009 : Debug: (Loaded rlm_attr_filter, checking if it's valid) Wed May 27 09:19:48 2009 : Debug: Module: Linked to module rlm_attr_filter Wed May 27 09:19:48 2009 : Debug: Module: Instantiating attr_filter.access_reject Wed May 27 09:19:48 2009 : Debug: attr_filter attr_filter.access_reject { Wed May 27 09:19:48 2009 : Debug: attrsfile = "/etc/freeradius/attrs.access_reject" Wed May 27 09:19:48 2009 : Debug: key = "%{User-Name}" Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: radiusd_dial: #### Opening IP addresses and Ports #### Wed May 27 09:19:48 2009 : Debug: listen { Wed May 27 09:19:48 2009 : Debug: type = "auth" Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.212 Wed May 27 09:19:48 2009 : Debug: port = 1645 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: listen { Wed May 27 09:19:48 2009 : Debug: type = "acct" Wed May 27 09:19:48 2009 : Debug: ipaddr = 192.168.0.212 Wed May 27 09:19:48 2009 : Debug: port = 1646 Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: main { Wed May 27 09:19:48 2009 : Debug: snmp = no Wed May 27 09:19:48 2009 : Debug: smux_password = "" Wed May 27 09:19:48 2009 : Debug: snmp_write_access = no Wed May 27 09:19:48 2009 : Debug: } Wed May 27 09:19:48 2009 : Debug: Listening on authentication address 192.168.0.212 port 1645 Wed May 27 09:19:48 2009 : Debug: Listening on accounting address 192.168.0.212 port 1646 Wed May 27 09:19:48 2009 : Debug: Listening on proxy address 192.168.0.212 port 1647 Wed May 27 09:19:48 2009 : Debug: Ready to process requests. rad_recv: Accounting-Request packet from host 192.168.0.19 port 1778, id=1, length=164 User-Name = "sajeewaw(a)isp1.net.au" Acct-Status-Type = Start NAS-Port-Type = Async Client-Port-Id = 1227 Acct-Status-Type = Start Acct-Delay-Time = 4 Caller-ID = "0386249797" Client-Port-DNIS = "0198308020" Framed-Protocol = PPP Framed-Address = 121.79.64.225 X-Ascend-Billing-Number = "W5" User-Service-Type = Framed Client-Id = 124.254.72.20 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Delay-Time = 0 Acct-Session-Time = 0 Acct-Session-Id = "301[]426932183" Wed May 27 09:19:54 2009 : Debug: +- entering group preacct Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: calling preprocess (rlm_preprocess) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: %{User-Name} -> sajeewaw(a)isp1.net.au Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: returned from preprocess (rlm_preprocess) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[preprocess] returns ok Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: calling suffix (rlm_realm) for request 0 Wed May 27 09:19:54 2009 : Debug: rlm_realm: Looking up realm "isp1.net.au" for User-Name = "sajeewaw(a)isp1.net.au" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Found realm "DEFAULT" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Adding Stripped-User-Name = "sajeewaw" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Adding Realm = "DEFAULT" Wed May 27 09:19:54 2009 : Debug: rlm_realm: Accounting realm is LOCAL. Wed May 27 09:19:54 2009 : Debug: modsingle[preacct]: returned from suffix (rlm_realm) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[suffix] returns noop Wed May 27 09:19:54 2009 : Debug: +- entering group accounting Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: calling accounting_1 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: INSERT DELAYED INTO RADUSAGE_%Y%m (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('%{User-Name}','%T','1','%{Acct-Delay-Time}','%{Acct-Input-Octets}','%{Acct-Output-Octets}','%{Acct-Session-Id}','%{Acct-Session-Time}','%{Ascend-Disconnect-Cause}','%{Framed-IP-Address}','%{NAS-IP-Address}','%{NAS-Port}','%{Called-Station-Id}','%{Calling-Station-Id}','%{X-Ascend-Billing-Number}') -> INSERT DELAYED INTO RADUSAGE_200905 (USERNAME, TIME_STAMP, ACCTSTATUSTYPE, ACCTDELAYTIME, ACCTINPUTOCTETS, ACCTOUTPUTOCTETS, ACCTSESSIONID, ACCTSESSIONTIME, ACCTTERMINATECAUSE, FRAMEDIPADDRESS, NASIDENTIFIER, NASPORT, DNIS, CALLINGSTATIONID, CALLZONE) VALUES ('sajeewaw(a)isp1.net.au','2009-05-27-09.19.54.000000','1','4','0','0','301=5B=5D426932183','0','','121.79.64.225','124.254.72.20','1227','0198308020','0386249797','W5') Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_1): Reserving sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_1): Released sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: returned from accounting_1 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[accounting_1] returns ok Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: calling accounting_2 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: INSERT INTO RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, CALLZONE) VALUES ('%{User-Name}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{Acct-Session-Id}', '%T', '%{Framed-IP-Address}', '0%{NAS-Port-Type}', '%{Service-Type}', '%{Calling-Station-Id}', '%{Called-Station-Id}', '%{X-Ascend-Billing-Number}') -> INSERT INTO RADONLINE (USERNAME, NASIDENTIFIER, NASPORT, ACCTSESSIONID, TIME_STAMP, FRAMEDIPADDRESS, NASPORTTYPE, SERVICETYPE, CALLINGSTATIONID, CALLEDSTATIONID, CALLZONE) VALUES ('sajeewaw(a)isp1.net.au', '124.254.72.20', '1227', '301=5B=5D426932183', '2009-05-27-09.19.54.000000', '121.79.64.225', '0Async', 'Framed', '0386249797', '0198308020', 'W5') Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_2): Reserving sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: rlm_sql (accounting_2): Released sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: returned from accounting_2 (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[accounting_2] returns ok Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: calling prepaid (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: expand: -> Wed May 27 09:19:54 2009 : Debug: rlm_sql (prepaid): Reserving sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: rlm_sql (prepaid): Released sql socket id: 4 Wed May 27 09:19:54 2009 : Debug: modsingle[accounting]: returned from prepaid (rlm_sql) for request 0 Wed May 27 09:19:54 2009 : Debug: ++[prepaid] returns ok Sending Accounting-Response of id 1 to 192.168.0.19 port 1778 Wed May 27 09:19:54 2009 : Debug: Finished request 0. Wed May 27 09:19:54 2009 : Debug: Cleaning up request 0 ID 1 with timestamp +6 Wed May 27 09:19:54 2009 : Debug: Going to the next request Wed May 27 09:19:54 2009 : Debug: Ready to process requests. Regards, Sajeewa Warnakulasuriya Systems Development Manager ispONE is a wholesale ISP built to help internet access resellers and independent ISPs to compete in the Australian marketplace through ONE Brand, ONE Provider, ONE Solution. Level 14 520 Collins Street Melbourne 3000 VIC Phone: 1300 663 400 Fax: 1300 665 400 E-Mail: sajeewaw(a)ispone.com.au Web: http://www.ispone.com.au/

2 2

Access-request proxied, but accounting-request not proxied
by Mr. K 28 May '09

28 May '09

Hi all, I am trying to use a FreeRadius server as a proxy server using the realm. Apparently my configuration is working for the Access-Request messages, but not for the Accounting-request messages. The proxy.conf is very simple: realm test.com { type = radius authhost = NNN.NNN.NN5.7:1812 accthost = NNN.NNN.NN5.7:1813 secret = ****** ldflag = round_robin nostrip } With this configuration, the access request messages are sent to the proper server, as you can see in the next radiusd –X output: We receive the message from the PDSN: Waking up in 1 seconds... rad_recv: Access-Request packet from host 172.17.7.214:32786, id=6, length=337 Calling-Station-Id = "310008172268681" User-Name = "8177899857(a)test.com" NAS-IP-Address = 172.17.7.214 NAS-Identifier = "bws" The radius sent it to the proper server: Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 radius_xlat: '/usr/freeRadius/log/radius/radacct/172.17.7.214/auth-detail-20090528' rlm_detail: /usr/freeRadius/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/freeRadius/log/radius/radacct/172.17.7.214/auth-detail-20090528 modcall[authorize]: module "auth_log" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '/' in User-Name = "8177899857(a)test.com", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 2 rlm_realm: Looking up realm "test.com" for User-Name ="8177899857(a)test.com" rlm_realm: Found realm "test.com" rlm_realm: Proxying request from user 8177899857 to realm test.com rlm_realm: Adding Realm = "test.com" rlm_realm: Preparing to proxy authentication request to realm "test.com" modcall[authorize]: module "suffix" returns updated for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 radius_xlat: '8177899857(a)test.com' rlm_sql (sql): sql_set_user escaped user --> '8177899857(a)test.com' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '8177899857(a)test.com' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '8177899857(a)test.com' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY usergroup.priority, radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '8177899857(a)test.com' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '8177899857(a)test.com' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY usergroup.priority, radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 2 modcall: leaving group authorize (returns updated) for request 2 Processing the pre-proxy section of radiusd.conf modcall: entering group pre-proxy for request 2 radius_xlat: '/usr/freeRadius/log/radius/radacct/172.17.7.214/pre-proxy-detail-20090528' rlm_detail: /usr/freeRadius/log/radius/radacct/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d expands to /usr/freeRadius/log/radius/radacct/172.17.7.214/pre-proxy-detail-20090528 modcall[pre-proxy]: module "pre_proxy_log" returns ok for request 2 modcall: leaving group pre-proxy (returns ok) for request 2 Sending Access-Request of id 1 to NNN.NNN.NN5.7 port 1812 Calling-Station-Id = "310008172268681" User-Name = "8177899857(a)test.com" NAS-IP-Address = 172.17.7.214 The problem arises, when the same PDSN ask for an Accounting-Request and the server. The server replies that the shared-key is not correct. Waking up in 2 seconds... rad_recv: Accounting-Request packet from host 172.17.7.214:32786, id=7, length=735 Received Accounting-Request packet from 172.17.7.214 with invalid signature! (Shared secret is incorrect.) Dropping packet without response. Finished request 3 The shared key configured is one per node in both the radius and the PDSN; so it is difficult for me to understand this behavior. Is there any configuration missing? Is it possible that the freeradius server is not checking shared key when sending the access-request message to it’s destination and checking the key while processing the accounting-request? Regards, K -- View this message in context: http://www.nabble.com/Access-request-proxied%2C-but-accounting-request-not-… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 2

freeRADIUS first test with PostgreSQL?
by Just E. Mail 28 May '09

28 May '09

I am ready to test my first freeRADIUS server with PostgreSQK backend. He is my setup: freeRADIUS Server: -CentOS 5.3 -freeRADIUS V# 2.1.6 (RPM install) -PostgreSQL V# 8.3.7 (RPM install) - Client eth0: Connect to the Internet eth1: Connected to the backend server thru a hub Backend Server: -CentOS 5.3 -PostgreSQL V# 8.3.7 (RPM install) - Server eth0: Connects to freeRADIUSserver via a hub. Both servers talk. I have ================= First I configured the necessary files (without backend SQL) and tested the RADIUS server in debug mode: radtest testid testpw localhost 0 testing123 -and- NTRadPing Test was a SUCCESS!!! ================= Now I have configured so that freeRADIUS uses the backend for sql data/tables. I have created the radius database & radius role. I have created RADIUS tables from schema.sql text file. ================= Now I need HELP. I need to add a couple of USER/PW into the PostgreSQL tables to test. How do I do that? Is there a GUI to add UID/PW? Are UID/PW added manually? Where can read about it? (Please donotjust point to the manual. I have read them all. At least mention Chapter #) What else should I know?

3 2

Reading material!
by Just E. Mail 28 May '09

28 May '09

1. Is there any written description of all the tables, columns, etc. What they are? What data goes in them? How & when they are created? 2. PostgreSQL/freeRADIUS: Where are the accounting tables? Where can I read about them? How are they created?

2 1