- Freeradius-Users - lists.freeradius.org

error too many open files error reading radiusd.conf
by Angel Rivera 28 Apr '09

28 Apr '09

[root@ws11 ws11]# radiusd -x Starting - reading configuration files ... Errors reading dictionary: dict_init: /usr/share/freeradius/dictionary[55]: Couldn't open dictionary "/usr/share/freeradius/dictionary.compat": Too many open files Errors reading radiusd.conf I already adjusted the limit of my system [root@ws11 ws11]# ulimit -aH core file size (blocks, -c) unlimited data seg size (kbytes, -d) unlimited scheduling priority (-e) 0 file size (blocks, -f) unlimited pending signals (-i) 8176 max locked memory (kbytes, -l) 32 max memory size (kbytes, -m) unlimited open files (-n) 2048 pipe size (512 bytes, -p) 8 POSIX message queues (bytes, -q) 819200 real-time priority (-r) 0 stack size (kbytes, -s) unlimited cpu time (seconds, -t) unlimited max user processes (-u) 8176 virtual memory (kbytes, -v) unlimited file locks (-x) unlimited but still end up with the same problem -- ICQ# 209485063 YM: kuroro.rucilful(a)yahoo.com MSN: angelseiai(a)hotmail.com AIM: SevarSS http://www.pie.us

3 2

Re: Freeradius-Users Digest, Vol 48, Issue 116
by Angel Rivera 28 Apr '09

28 Apr '09

I also run this line su -c lsof | more and return a long list of files I really need help on this one. Is there anything that should be done to make the radiusd.conf readable > > > Message: 7 > Date: Tue, 28 Apr 2009 01:33:18 +0200 > From: "Edvin Seferovic" <edvin.seferovic(a)kolp.at> > Subject: RE: error too many open files error reading radiusd.conf > To: "'FreeRadius users mailing list'" > <freeradius-users(a)lists.freeradius.org> > Message-ID: <038301c9c790$8b4b5d80$a1e21880$@seferovic@kolp.at> > Content-Type: text/plain; charset="us-ascii" > > Open files 2048 ?? > > > > Man LSOF ?? > > > > Regards, > > E:S > > > > From: freeradius-users-bounces+edvin.seferovic=kolp.at@ > lists.freeradius.org > [mailto:freeradius-users-bounces+edvin.seferovic<freeradius-users-bounces%2Bedvin.seferovic> > =kolp.at(a)lists.freeradius.or > g] On Behalf Of Angel Rivera > Sent: Dienstag, 28. April 2009 00:51 > To: freeradius-users(a)lists.freeradius.org > Subject: error too many open files error reading radiusd.conf > > > > > [root@ws11 ws11]# radiusd -x > Starting - reading configuration files ... > Errors reading dictionary: dict_init: /usr/share/freeradius/dictionary[55]: > Couldn't open dictionary "/usr/share/freeradius/dictionary.compat": Too > many > open files > Errors reading radiusd.conf > > > I already adjusted the limit of my system > > [root@ws11 ws11]# ulimit -aH > core file size (blocks, -c) unlimited > data seg size (kbytes, -d) unlimited > scheduling priority (-e) 0 > file size (blocks, -f) unlimited > pending signals (-i) 8176 > max locked memory (kbytes, -l) 32 > max memory size (kbytes, -m) unlimited > open files (-n) 2048 > pipe size (512 bytes, -p) 8 > POSIX message queues (bytes, -q) 819200 > real-time priority (-r) 0 > stack size (kbytes, -s) unlimited > cpu time (seconds, -t) unlimited > max user processes (-u) 8176 > virtual memory (kbytes, -v) unlimited > file locks (-x) unlimited > > > but still end up with the same problem > -- > ICQ# 209485063 > YM: kuroro.rucilful(a)yahoo.com > MSN: angelseiai(a)hotmail.com > AIM: SevarSS > > > http://www.pie.us > >

2 1

looking for a good "best practices" for campus-wide Freeradius installation
by john 27 Apr '09

27 Apr '09

Hi all, I'd would like to install .1x for all wired and wireless users across our campus by next fall. I'm looking for a really good howto/best practices for educational institutions. I hope folks on the list can point me to some good resources as I plan for deployment. Thanks! John

2 2

radpostauth sql logging of bad passwords
by Guy Fraser 27 Apr '09

27 Apr '09

I have installed : "radiusd: FreeRADIUS Version 2.1.3, for host i386-portbld-freebsd7.1, built on Feb 26 2009 at 15:47:46" I have not been able figure out how to get it to log failed authentication attempts into the radpostauth sql table, like I had it working in Version 1. -- Guy Fraser Network Administrator The Internet Centre 1-888-450-6787 (780)450-6787

3 8

freeradius with active directory
by David N'DAKPAZE 27 Apr '09

27 Apr '09

hello, I am configuring freeradius for authentication with active directory.I've used http://deployingradius.com/documents/configuration/active_directory but freeradius reject all the requests because of no known password.It what i have when i make a request: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 51084, id=198, length=61 User-Name = "azerty" User-Password = "uiop" NAS-IP-Address = 127.0.0.1 NAS-Port = 0 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop [suffix] No '@' in User-Name = "azerty", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Login incorrect: [azerty/uiop] (from client localhost port 0) Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> azerty attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 198 to 127.0.0.1 port 51084 Waking up in 4.9 seconds. Cleaning up request 0 ID 198 with timestamp +27 Thanks for your help

3 3

%RADIUS-4-RADIUS_ALIVE | %RADIUS-4-RADIUS_DEAD help
by ramesh p 27 Apr '09

27 Apr '09

I'm seeing the following weirdness from my freeradiusserver and when i see the radiusd process its stopped status. why this happens. any valid reasons for this? Apr 26 00:18:44.498: %RADIUS-4-RADIUS_ALIVE: RADIUS server X.X.X.X:0,1813 is being marked alive. Apr 26 00:18:50.777: %RADIUS-4-RADIUS_DEAD: RADIUS server X.X.X.X:0,1813 is not responding. Apr 26 00:18:50.777: %RADIUS-4-RADIUS_ALIVE: RADIUS server X.X.X.X:0,1813 is being marked alive. Apr 26 00:18:59.133: %RADIUS-4-RADIUS_DEAD: RADIUS server X.X.X.X:0,1813 is not responding. Apr 26 00:18:59.133: %RADIUS-4-RADIUS_ALIVE: RADIUS server X.X.X.X:0,1813 is being marked alive. Apr 26 00:19:04.765: %RADIUS-4-RADIUS_DEAD: RADIUS server X.X.X.X:0,1813 is not responding. Thanks in advance. Regards, Rams.

5 13

RE: Adding vendor specefic attributes
by anoop c 27 Apr '09

27 Apr '09

Hi Is it possible to configure vendor specific attributes in Free RADIUS. Please guide where can I edit the configuration. I am using MAC authentication by editing the user file shown below. '020a6-5a7fd9 Auth-Type:=Local,User-Password=="secret" MAC authentication is working and I would like to add a vendor specific attribute. Regards Anoop Get your world in your inbox! Mail, widgets, documents, spreadsheets, organizer and much more with your Sifymail WIYI id! Log on to http://www.sify.com ********** DISCLAIMER ********** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If this is a forwarded message, the content of this E-MAIL may not have been sent with the authority of the Company. If you are not the intended recipient, an agent of the intended recipient or a person responsible for delivering the information to the named recipient, you are notified that any use, distribution, transmission, printing, copying or dissemination of this information in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at admin(a)sifycorp.com

3 2

%RADIUS-4-RADIUS_ALIVE %RADIUS-4-RADIUS_DEAD help
by ramesh p 27 Apr '09

27 Apr '09

I'm getting the following messges/alarms from freereadius server version 1.1.6. and when i oberserved the radiusd process it's stopped. Why this happens? Apr 26 00:18:44.498: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.199.32.34:0,1813 is being marked alive. Apr 26 00:18:50.777: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.199.32.34:0,1813 is not responding. Apr 26 00:18:50.777: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.199.32.34:0,1813 is being marked alive. Apr 26 00:18:59.133: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.199.32.34:0,1813 is not responding. Apr 26 00:18:59.133: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.199.32.34:0,1813 is being marked alive. Apr 26 00:19:04.765: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.199.32.34:0,1813 is not responding. Apr 26 00:19:04.765: %RADIUS-4-RADIUS_ALIVE: RADIUS server 10.199.32.34:0,1813 is being marked alive. Apr 26 00:19:11.293: %RADIUS-4-RADIUS_DEAD: RADIUS server 10.199.32.34:0,1813 is not responding. ... Please share the information. Regards, Rams..

1 0

Freeradius on windows
by Mitul Modi 27 Apr '09

27 Apr '09

hi i have installed freeradius version 1.0.3 on windows xp. any body have resource to generate certificates on windows. thanks, mitul modi

2 2

pam_radius_auth configuration options
by F. Soriano 24 Apr '09

24 Apr '09

Hi list, I browsed quite a long time all previous threads and various material available on the web, with no success. So maybe someone can help wit this... I am using the latest available release of FreeRADIUS on my Linux server (RHEL 5.3, x86_64), with authentication against local users file. This works like a charm so far. Authentication is set up in this order: pam_radius_auto.so, then pam_unix.so. Is there a way to configure the pam_radius_auto.so module so that as long as the FreeRADIUS daemon is up and running, authentications will be *only* performed against FreeRADIUS, and all other authentication methods are ignored (even if this account exists locally, not in FreeRADIUS)? Of course, if FreeRADIUS is stopped or does not respond anymore, authentication against regular Linux files would work. I am only looking to make it work for the login process (local ttys). This is an example of my /etc/pam.d/login file: --snip-- #%PAM-1.0 auth [user_unknown=ignore success=ok ignore=ignore default=bad] pam_securetty.so auth [success=done new_authtok_reqd=done authinfo_unavail=ignore ignore=ignore default=die] pam_radius_auth.so ruser debug auth required pam_unix.so use_first_pass #auth include system-auth account required pam_nologin.so #account required pam_radius_auth.so #account include system-auth --snip-- I also tried with the "localifdown" keyword: --snip-- auth [success=done new_authtok_reqd=done ignore=ignore default=die] pam_radius_auth.so localifdown ruser debug --snip-- without success... Let's suppose I have a centralized account "remote-admin", and FreeRADIUS is the only one to know its password. Now I have another account, "local-admin", that is not declared within /etc/raddb/users file, but only in local /etc/passwd and /etc/shadow. With the first example, when FreeRADIUS is up, I can log in as remote-admin, and the logs shows that pam_radius_auth got clearance from radiusd. I can also log in as "local-admin", no matter if radiusd is up or not (the logs show that radiusd failed to respond, but that pam_unix accepted the credentials and then granted login). Thanks for your clues. Regards, Frank Créez votre adresse électronique prenom.nom(a)laposte.net 1 Go d'espace de stockage, anti-spam et anti-virus intégrés.

1 0