- Freeradius-Users - lists.freeradius.org

[OT (possibly)] problem with WinXP SP3 connecting, reconnecting
by Craig White 22 Apr '09

22 Apr '09

It's possible that this is my laptop that is causing this and not the Wireless AP or FreeRadius but I thought I would ask because my laptop doesn't do this on WPA-PSK on my home setup. Using Windows supplicant, clearly connects using PEAP and am given an IP address via LAN DHCP server. If I try to ping LAN devices, I get dropouts, perhaps as high as 100% but usally get at least 1 out of four, sometimes 3 out of 4 pings returned and frequently, the status try indicates reconnecting. I tried shutting off fast reconnect but it seems to not matter either way. I presume that this is somehow a problem between my Linksys Wireless AP and my laptop wireless (Atheros) and nothing at all to do with FreeRadius but I'm wondering if others have experienced this issue and might suggest something that I could try to remedy the problem. Craig -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

1 0

Re: Exec-Program problem
by Nirmal 22 Apr '09

22 Apr '09

Thanks man, done. --- On Wed, 4/22/09, Alan DeKok <aland(a)deployingradius.com> wrote: From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: Exec-Program problem To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Wednesday, April 22, 2009, 5:25 PM Nirmal wrote: ... > Wed Apr 22 17:05:03 2009 : Debug: Exec-Program-Wait: plaintext: Wed Apr > 22 17:05:03 2009 : Error: Exec-Program: FAILED to execute > /etc/raddb/getmac: Exec format error ... > #/bin/bash You can't run that program from a shell prompt, either. You have a typo. It should be: #!/bin/bash Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Exec-Program problem
by Nirmal 22 Apr '09

22 Apr '09

Hi, I am running freeradius-server-2.1.1-7. +----+----------+-------------------+----+-------------------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+-------------------------+ | 1 | spark | Exec-Program-Wait | := | /etc/raddb/getmac %u %i | +----+----------+-------------------+----+-------------------------+ radisud -XX -d /etc/raddb/ Wed Apr 22 17:05:03 2009 : Auth: Login OK: [spark] (from client localhost port 2 cli 00:19:D1:4A:53:F8) Wed Apr 22 17:05:03 2009 : Info: +- entering group post-auth {...} Wed Apr 22 17:05:03 2009 : Info: [exec] expand: %u -> spark Wed Apr 22 17:05:03 2009 : Info: [exec] expand: %i -> 00:19:D1:4A:53:F8 Wed Apr 22 17:05:03 2009 : Debug: Exec-Program output: Wed Apr 22 17:05:03 2009 : Error: Exec-Program: FAILED to execute /etc/raddb/getmac: Exec format error Wed Apr 22 17:05:03 2009 : Debug: Exec-Program-Wait: plaintext: Wed Apr 22 17:05:03 2009 : Error: Exec-Program: FAILED to execute /etc/raddb/getmac: Exec format error Wed Apr 22 17:05:03 2009 : Debug: Exec-Program: returned: 1 Wed Apr 22 17:05:03 2009 : Info: [exec] Login incorrect (external check said so) Wed Apr 22 17:05:03 2009 : Info: ++[exec] returns reject Wed Apr 22 17:05:03 2009 : Info: Delaying reject of request 1 for 1 seconds file /etc/raddb/getmac contains following with execute+radiusd permission #/bin/bash echo "$1 --- $2 ----- done" >> /etc/raddb/mac_entries What could be wrong? Nirmal Patel | Mumbai

2 1

Re: Exec-Program problem
by Nirmal 22 Apr '09

22 Apr '09

changed permission of /etc/raddb/mac_entries now getting wrong format error. Wed Apr 22 17:21:27 2009 : Auth: Login OK: [spark] (from client localhost port 0 cli 00:19:D1:4A:53:F8) Wed Apr 22 17:21:27 2009 : Info: +- entering group post-auth {...} Wed Apr 22 17:21:27 2009 : Info: [exec] expand: %u -> spark Wed Apr 22 17:21:27 2009 : Info: [exec] expand: %i -> 00:19:D1:4A:53:F8 Wed Apr 22 17:21:27 2009 : Debug: Exec-Program output: Wed Apr 22 17:21:27 2009 : Error: Exec-Program: FAILED to execute /etc/raddb/getmac: Exec format error Wed Apr 22 17:21:27 2009 : Debug: Exec-Program-Wait: plaintext: Wed Apr 22 17:21:27 2009 : Error: Exec-Program: FAILED to execute /etc/raddb/getmac: Exec format error Wed Apr 22 17:21:27 2009 : Debug: Exec-Program: returned: 1 in my previous version i was using the same format. +----+----------+-------------------+----+-------------------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+-------------------------+ | 1 | spark | Exec-Program-Wait | := | /etc/raddb/getmac %u %i | +----+----------+-------------------+----+-------------------------+ where to check syntax for exec-program ? --- On Wed, 4/22/09, Nirmal <nirmal_909(a)yahoo.com> wrote: From: Nirmal <nirmal_909(a)yahoo.com> Subject: Exec-Program problem To: "freeradius users" <freeradius-users(a)lists.freeradius.org> Date: Wednesday, April 22, 2009, 5:11 PM Hi, I am running freeradius-server-2.1.1-7. +----+----------+-------------------+----+-------------------------+ | id | username | attribute | op | value | +----+----------+-------------------+----+-------------------------+ | 1 | spark | Exec-Program-Wait | := | /etc/raddb/getmac %u %i | +----+----------+-------------------+----+-------------------------+ radisud -XX -d /etc/raddb/ Wed Apr 22 17:05:03 2009 : Auth: Login OK: [spark] (from client localhost port 2 cli 00:19:D1:4A:53:F8) Wed Apr 22 17:05:03 2009 : Info: +- entering group post-auth {...} Wed Apr 22 17:05:03 2009 : Info: [exec] expand: %u -> spark Wed Apr 22 17:05:03 2009 : Info: [exec] expand: %i -> 00:19:D1:4A:53:F8 Wed Apr 22 17:05:03 2009 : Debug: Exec-Program output: Wed Apr 22 17:05:03 2009 : Error: Exec-Program: FAILED to execute /etc/raddb/getmac: Exec format error Wed Apr 22 17:05:03 2009 : Debug: Exec-Program-Wait: plaintext: Wed Apr 22 17:05:03 2009 : Error: Exec-Program: FAILED to execute /etc/raddb/getmac: Exec format error Wed Apr 22 17:05:03 2009 : Debug: Exec-Program: returned: 1 Wed Apr 22 17:05:03 2009 : Info: [exec] Login incorrect (external check said so) Wed Apr 22 17:05:03 2009 : Info: ++[exec] returns reject Wed Apr 22 17:05:03 2009 : Info: Delaying reject of request 1 for 1 seconds file /etc/raddb/getmac contains following with execute+radiusd permission #/bin/bash echo "$1 --- $2 ----- done" >> /etc/raddb/mac_entries What could be wrong? Nirmal Patel | Mumbai -----Inline Attachment Follows----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Exec-Program-Wait problem
by enid 22 Apr '09

22 Apr '09

Hello all, I' running FreeRADIUS Version 2.1.5, and I'm trying to execute an external script when users authenticate. I have included the exec module. The script is executed in this form (in the users file): DEFAULT Simultaneous-Use := 1 Idle-Timeout = 600, Session-Timeout = 5400, Framed-IP-Address = 255.255.255.254, Framed-Compression = Van-Jacobson-TCP-IP, Exec-Program-Wait = "/etc/freeradius/somescript", Fall-Through = Yes but I want that the output of it to append to the AV pair reply that goes back to the client. So I have the problem that when the script is executed, its output doesn't append to the AV pair reply. (For example: Reply-Message=Email Only Account) I can post here my configuration files, if you tell me which. Thanks in advance ! -- View this message in context: http://www.nabble.com/Exec-Program-Wait-problem-tp23161038p23161038.html Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 3

sql.conf failover readclients=yes
by leopold 21 Apr '09

21 Apr '09

Recently in rel 2.1.4 you fixed and issue for replicated databases that allow readclients=yes option in sql.conf. This worked great if ALL databases are up and running. The issue happens if radiusd can't connect to a database and process cannot start even though it can read NAS info from sql2 if sql1 is down. Could you please check if you can still enable readclients=yes but allow radiusd to start if at least one of sql1 or sql2 is UP? Thanks for your reply. -- View this message in context: http://www.nabble.com/sql.conf-failover-readclients%3Dyes-tp23103617p231036… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 5

rlm_linelog & locking
by Phil Mayers 21 Apr '09

21 Apr '09

It appears rlm_linelog doesn't lock the file before writing to it. Should it? Won't lines get interspersed at high logging rates if not?

2 2

Re: How to calling-station-id attribute in check item
by Nirmal 21 Apr '09

21 Apr '09

:-D Thanks Alan. --- On Tue, 4/21/09, Alan DeKok <aland(a)deployingradius.com> wrote: From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: How to calling-station-id attribute in check item To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Tuesday, April 21, 2009, 1:41 PM Nirmal wrote: > I am using free radius + user database in Mysql + PPPoE server. I am > done with authentication but i want to "bind + log" mac addr with > username but i am not getting the attribute Calling-station-id. Please > guide how to get it there. Fix the PPPoE server to send it. FreeRADIUS can't magically invent a value for Calling-Station-Id. The RADIUS client has the value, and it needs to send the attribute to FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

MsCHAP with freeradius-server-2.1.3
by David N'DAKPAZE 21 Apr '09

21 Apr '09

Hello, I am using freeradius with Active Directory.I want to use mschap for authentication but the users are all rejected for no known good password.It seems that only PAP authentication works. Any help will be appreciated.

2 1

How to calling-station-id attribute in check item
by Nirmal 21 Apr '09

21 Apr '09

Hi, I am using free radius version 2.1.1-7. I am using free radius + user database in Mysql + PPPoE server. I am done with authentication but i want to "bind + log" mac addr with username but i am not getting the attribute Calling-station-id. Please guide how to get it there. Access-Request as below. rad_recv: Access-Request packet from host 127.0.0.1 port 55229, id=248, length=90 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "spark" CHAP-Challenge = 0xaa7ad2fc8f118f0184dcdaa5c6fb2929f78f CHAP-Password = 0x79237be1217344f61fe5a6972daaf9f93c NAS-IP-Address = 127.0.0.1 NAS-Port = 0 Thanks and regards Nirmal Patel | Mumbai

2 1