- Freeradius-Users - lists.freeradius.org

Re: dear everyone..
by Nizar Zulmi 19 Mar '09

19 Mar '09

still can't get it. can u show me please which script to do benchmarking the RADIUS server, and how to running the script,. --- On Thu, 3/19/09, A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> wrote: From: A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> Subject: Re: dear everyone.. To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Thursday, March 19, 2009, 4:20 PM -----Inline Attachment Follows----- Hi, > iam a new bie freeradius user, i have a duty from my lecture to build a hotspot captive portal using chillispot and freeradius. now i make it, chilispot and freeradius working well on ubuntu machine, but the problem is my lecture want me to do stress test on the radius server to make sure that the system is still working well in any condition.. > > i still confused how to perform the stress test...anyone help me please..thank you for your attentionsorry for bad english :D there are a couple of scripts supplied with the server to allow benchmarking which hit the server fast and hard. run a couple of those whilst eg flood pinging the system. but 'any condition' is hardly any kind of scientific or useful phrase. for example, is the system working well if half the packets get lost? does the system work well if packets are routed in different directions? does the system work well when an idiot logs into the box and runs other random processes that take up CPU time (nice bit of SETI or D2OL etc)? quantify the scenarios before you can demonstrate behaviour. useful exercise as you might uncover some wierd corner case to help improve the server (I've found several Linux kernel issues over the years on very stressed servers) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

4 3

Re: dear everyone..
by Nizar Zulmi 19 Mar '09

19 Mar '09

thanks, so nice...I'll Try it.. --- On Thu, 3/19/09, Alan DeKok <aland(a)deployingradius.com> wrote: From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: dear everyone.. To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Date: Thursday, March 19, 2009, 5:51 PM Nizar Zulmi wrote: > still can't get it. can u show me please which script to do benchmarking > the RADIUS server, and how to running the script,. $ man radclient Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: FreeRadius with Postgresql
by Sunday Olutayo 19 Mar '09

19 Mar '09

On following the messages; this is what I get from running freeradius -X but before point it to PostgreSQL it runs fine. Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/postgresql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yes Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded SQL sql: driver = "rlm_sql_postgresql" sql: server = "localhost" sql: port = "" sql: login = "postgres" sql: password = "hello" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = yes sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-none}}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), AcctSessionTime = (EXTRACT(EPOCH FROM('%S'::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = 0 WHERE AcctSessionTime IS NULL AND AcctStopTime IS NULL AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'::timestamp" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, AcctSessionTime = (EXTRACT(EPOCH FROM('%S'::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint) WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??ServiceType, FramedProtocol, FramedIPAddress, XAscendSessionSvrKey) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??'%{Acct-Session-Time}', '%{Acct-Authentic}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ??ConnectInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), '%{Acct-Authentic}', '%{Connect-Info}', ??'%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, 0, '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct ??SET AcctStartTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), AcctStartDelay = 0, ??ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query = "UPDATE radacct ??SET AcctStopTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), ??AcctSessionTime = NULLIF('%{Acct-Session-Time}', '')::bigint, ??AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), ??AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = 0, ??FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, ConnectInfo_stop = '%{Connect-Info}' ??WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query_alt = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, ??AcctSessionTime, AcctAuthentic, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStopDelay) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), NULLIF('%{Acct-Session-Time}', '')::bigint, ??'%{Acct-Authentic}', '%{Connect-Info}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, 0)" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "" sql: postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Could not link driver rlm_sql_postgresql: rlm_sql_postgresql.so: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[11]: sql: Module instantiation failed. radiusd.conf[1860] Unknown module "sql". radiusd.conf[1789] Failed to parse authorize section. ----- Original Message ----- From: freeradius-users-request(a)lists.freeradius.org To: freeradius-users(a)lists.freeradius.org Sent: Tuesday, 17 March, 2009 13:00:55 GMT +01:00 West Central Africa Subject: Freeradius-Users Digest, Vol 47, Issue 76 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: FreeRadius with Postgresql (A.L.M.Buxey(a)lboro.ac.uk) 2. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 3. Re: FreeRadius with Postgresql (phil lemelin) 4. Re: Radius and performance (Fajar A. Nugraha) 5. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 6. Re: Radius and performance (A.L.M.Buxey(a)lboro.ac.uk) 7. Re: FreeRadius with Postgresql (Marinko Tarlac) 8. Re: Radius and performance (tnt(a)kalik.net) 9. Re: Radius and performance (Marinko Tarlac) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 Mar 2009 11:05:09 +0000 From: A.L.M.Buxey(a)lboro.ac.uk Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20090317110509.GA28679(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? follow the usual MySQL/SQL stuff - just use postgres instead - ie 1) install postgres 2) configure postgres 3) install FreeRADIUS with postgres support 4) configure FreeRADIUS part 4 will need the SQL tables etc as supplied in the freeradius source to populate the DB. you will then need to configure a suitable user access rule for your chosen DB user (in usual postgres way). then edit the sql.conf file etc to call postgres module. edit postgres files (eg dialup.conf) with correct user/pass/table details alan ------------------------------ Message: 2 Date: Tue, 17 Mar 2009 12:11:51 +0100 From: <tnt(a)kalik.net> Subject: Re: FreeRadius with Postgresql To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <nZMwwgDz.1237288311.7684910.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? >- You configure raddb/sql.conf. And create the database with scripts in raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, accounting, session, ...) in raddb/sites-enabled/default. http://wiki.freeradius.org/SQL_HOWTO Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 3 Date: Tue, 17 Mar 2009 07:29:36 -0400 From: phil lemelin <phil.lemelin(a)gmail.com> Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <efe037fe0903170429l65ecdbcfk68bc504469127cc1(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" > Please link me to a resources on how to make FreeRadius to work with > postgreSQL on Ubuntu 8.04 LTS? > > > You configure raddb/sql.conf. And create the database with scripts in > raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, > accounting, session, ...) in raddb/sites-enabled/default. > > http://wiki.freeradius.org/SQL_HOWTO > > Ivan Kalik > Kalik Informatika ISP > I am currently looking into testing freeradius and started reading a couple of wiki/doc/man pages on the subject and ended on that SQL_HOWTO page. One of the prerequisite is to already have the NAS configured. Do you have any suggestion for a NAS running on a linux box ? Thank you. -- Philippe-Alexandre Lemelin

3 2

Adding users in the database from a client computer
by Joeven Rex Dizon 19 Mar '09

19 Mar '09

Again, I'm a relatively new freeradius user so I am not really an expert with it. In our project, we need to "add" and "delete" users from the server database from an authorized client computer. And we're a little confused on how adding and removing users work. When the client makes a request to add a user in the database, does it simply ask access in the mysql backend of the server, or make the request to the server first, and the server itself will "request" its database backend to add the user? How exactly do we request an addition or deletion of a user? Do we use the simple sql queries in the radcheck table? By the way, we've already configured the server to allow access from this client computer in the clients.conf file. We've tested it using radtest in it receives an access-accept packet. Our installed version is 2.1.0+dfsg-0ubuntu2, running on Ubuntu 8.10. The backend database we used is MySql. Thanks in advance. -- Joeven Rex L. Dizon BS Computer Engineering, UP Diliman http://jrldizon.blogspot.com

3 2

Re: freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 19 Mar '09

19 Mar '09

I don`t have firewall How i solve the problem ? Tanks advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE ------------------------------------- Powered by Mail.BG - http://mail.bg

4 3

RADIUS challenge response using the PAM module
by Robert Svensson 19 Mar '09

19 Mar '09

Hi, I've been pulling my hair trying to get the PAM radius module to successfully authenticate against a radius server that thows a password challenge response AFTER a user has been verified using their user name and password (it's not a FreeRadius server). By looking at the source code, It seems as if this should be possible. But I can't figure this one out. The PAM module recieves the access challenge from the radius server. The problem is that instead of asking the user for additional input, the module returns an invald challenge back to the radius server and therefore the authentication fails. Does anyone out there have a working PAM module configuration that asks the user for additional input, such as a token value, after their user name and password has been checked? Any help is greatly appreciated thanx Robert

3 7

Re: freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 18 Mar '09

18 Mar '09

Sorry i`m new mail-list user While tracking installed following instructions http://abills.net.ua/wiki/doku.php?id=abills:docs_03:install:en[1] the all debug log is # radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/eap.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 2 main: max_requests = 102400 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yes Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) exec: wait = yes exec: program = "/usr/abills/libexec/rauth.pl pre_auth" exec: input_pairs = "request" exec: output_pairs = "config" exec: packet_type = "(null)" Module: Instantiated exec (pre_auth) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) exec: wait = yes exec: program = "/usr/abills/libexec/rauth.pl post_auth" exec: input_pairs = "request" exec: output_pairs = "config" exec: packet_type = "(null)" Module: Instantiated exec (post_auth) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 4 NAS-Port-Type = Ethernet User-Name = "lacho" Calling-Station-Id = "00:15:AF:1F:23:1A" Called-Station-Id = "pppoe-in" NAS-Port-Id = "ether1" CHAP-Challenge = 0x00000a2d5c17177c86733bd3ed908d0c CHAP-Password = 0x0189c958b6e077d36f87977f590271a3dc NAS-Identifier = "TEST-RADIUS" NAS-IP-Address = 192.168.200.4 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 Exec-Program output: Auth-Type := Accept Exec-Program-Wait: value-pairs: Auth-Type := Accept Exec-Program: returned: 0 modcall[authorize]: module "pre_auth" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 users: Matched entry DEFAULT at line 52 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type Accept rad_check_password: Auth-Type = Accept, accepting the user Exec-Program output: Acct-Interim-Interval = 300, Session-Timeout = 31, Mikrotik-Xmit-Limit = 1073217536, Framed-IP-Address = 10.8.15.114, Mikrotik-Recv-Limit = 1073217536, Framed-IP-Netmask = 255.255.255.255, Exec-Program-Wait: value-pairs: Acct-Interim-Interval = 300, Session-Timeout = 31, Mikrotik-Xmit-Limit = 1073217536, Framed-IP-Address = 10.8.15.114, Mikrotik-Recv-Limit = 1073217536, Framed-IP-Netmask = 255.255.255.255, Exec-Program: returned: 0 Sending Access-Accept of id 2 to 192.168.200.4 port 32768 Acct-Interim-Interval = 300 Session-Timeout = 31 Mikrotik-Xmit-Limit = 1073217536 Framed-IP-Address = 10.8.15.114 Mikrotik-Recv-Limit = 1073217536 Framed-IP-Netmask = 255.255.255.255 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 3 seconds... rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Sending duplicate reply to client TEST-RADIUS:32768 - ID: 2 Re-sending Access-Accept of id 2 to 192.168.200.4 port 32768 --- Walking the entire request list --- Waking up in 2 seconds... rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Sending duplicate reply to client TEST-RADIUS:32768 - ID: 2 Re-sending Access-Accept of id 2 to 192.168.200.4 port 32768 Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 2 with timestamp 49c168d6 Nothing to do. Sleeping until we see a request. That`s all 10x to advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE Links: ------ [1] http://abills.net.ua/wiki/doku.php?id=abills:docs_03:install:en ------------------------------------- Sportingbet – €1500 всеки ден, бонуси тенис залози на живо! http://bg.sportingbet.com/

2 1

None
by ahmed adel 18 Mar '09

18 Mar '09

Dear All I hope anyone can help me with these errors I have in the radius.log file: Error: rlm_sql_getvpdata: database query error Error: rlm_sql (sql): SQL query error; rejecting user Error: rlm_sql (sql): Couldn't update SQL accounting ALIVE record - 00000 I am using freeradius 1.1.7 with freetds and MSSQL 2005 as the backend database, the radius receives interim accounting update packets to calculate users utlized bandwidth and the data is inserted into the MSSQL database using SQL Procedures. Does anyone knows what may cause these errors to occure, note that when I run radius -X most of the update statements return with status ok and for the statements that return with this error, they run fine from the MSSQL console. Thanks in advance Ahmed Adel

2 7

freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 18 Mar '09

18 Mar '09

Hello, I`m new radius user and i`m beginner. I have problem with connect mikrotik with radius server. My clients using pppoe server but i have connect to radius server but after configuration from internet documentation my server don`t work and i receive errors in radius.log and pppoe server show 691 error this is the errors Wed Mar 11 17:59:23 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 8 due to unfinished request 0 Wed Mar 11 17:59:26 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 9 due to unfinished request 1 Wed Mar 11 17:59:28 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 10 due to unfinished request 2 Wed Mar 11 18:44:28 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 11 18:44:28 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 11 18:44:28 2009 : Info: Ready to process requests. Wed Mar 11 18:57:43 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 11 18:57:43 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 11 18:57:43 2009 : Info: Ready to process requests. Mon Mar 16 22:20:07 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Mon Mar 16 22:20:07 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Mon Mar 16 22:20:07 2009 : Info: Ready to process requests. Wed Mar 18 22:35:19 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 18 22:35:19 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 18 22:35:19 2009 : Info: Ready to process requests. Wed Mar 18 22:35:25 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 18 22:35:25 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 18 22:35:25 2009 : Info: Ready to process requests. Wed Mar 18 22:35:39 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 1 due to unfinished request 0 Wed Mar 18 22:35:40 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 1 due to unfinished request 0 ~ ~ this is the mikrotik error mar/13 23:42:18 pppoe,info PPPoE connection established from 00:15:AF:1F:23:1A mar/13 23:42:18 pppoe,ppp,info <pppoe-0>: waiting for call... mar/13 23:42:19 pppoe,ppp,info <pppoe-lacho>: terminating... - user lacho authentication failed - radius timeout (6) mar/13 23:42:19 pppoe,ppp,info <pppoe-lacho>: disconnected please help me advanced Tanks. -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE ------------------------------------- Sportingbet – €1500 всеки ден, бонуси тенис залози на живо! http://bg.sportingbet.com/

2 1

AW: AW: gigawords and bandwith
by Lars 18 Mar '09

18 Mar '09

> So... get the NAS to send it. Or buy a NAS that semds it. I hoped that one of you can give me a hint on how. > See the NAS documentation for instructions on using RADIUS to limit > bandwidth. I wrote the version and the kind of NAS before, so I hoped it could be true that one of all the guys here did it before with the same configuration. The documentation of the NAS is not detailed enough to get the needed information! I wrote in freeradius-users also, but i think I can not get the list, but I subscribed to it and send to it without errors - so I ask here again. Regards Lars

3 2