- Freeradius-Users - lists.freeradius.org

Re: FreeRadius with Postgresql
by Sunday Olutayo 19 Mar '09

19 Mar '09

On following the messages; this is what I get from running freeradius -X but before point it to PostgreSQL it runs fine. Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/postgresql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yes Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/freeradius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/freeradius/huntgroups" preprocess: hints = "/etc/freeradius/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/freeradius/users" files: acctusersfile = "/etc/freeradius/acct_users" files: preproxy_usersfile = "/etc/freeradius/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded SQL sql: driver = "rlm_sql_postgresql" sql: server = "localhost" sql: port = "" sql: login = "postgres" sql: password = "hello" sql: radius_db = "radius" sql: nas_table = "nas" sql: sqltrace = yes sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{Stripped-User-Name:-%{User-Name:-none}}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_reply_query = "SELECT id, UserName, Attribute, Value, Op ??FROM radreply ??WHERE Username = '%{SQL-User-Name}' ??ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id, radgroupcheck.GroupName, ??radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op ??FROM radgroupcheck, usergroup ??WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ??ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id, radgroupreply.GroupName, radgroupreply.Attribute, ??radgroupreply.Value, radgroupreply.Op ??FROM radgroupreply,usergroup ??WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ??ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), AcctSessionTime = (EXTRACT(EPOCH FROM('%S'::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = 0 WHERE AcctSessionTime IS NULL AND AcctStopTime IS NULL AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'::timestamp" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, AcctSessionTime = (EXTRACT(EPOCH FROM('%S'::timestamp with time zone - AcctStartTime::timestamp with time zone - '%{Acct-Delay-Time:-0}'::interval)))::BIGINT, AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint) WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??ServiceType, FramedProtocol, FramedIPAddress, XAscendSessionSvrKey) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??'%{Acct-Session-Time}', '%{Acct-Authentic}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ??ConnectInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, XAscendSessionSvrKey) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), '%{Acct-Authentic}', '%{Connect-Info}', ??'%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, 0, '%{X-Ascend-Session-Svr-Key}')" sql: accounting_start_query_alt = "UPDATE radacct ??SET AcctStartTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), AcctStartDelay = 0, ??ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query = "UPDATE radacct ??SET AcctStopTime = ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), ??AcctSessionTime = NULLIF('%{Acct-Session-Time}', '')::bigint, ??AcctInputOctets = (('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??AcctOutputOctets = (('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), ??AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = 0, ??FramedIPAddress = NULLIF('%{Framed-IP-Address}', '')::inet, ConnectInfo_stop = '%{Connect-Info}' ??WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' ??AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime IS NULL" sql: accounting_stop_query_alt = "INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, ??AcctSessionTime, AcctAuthentic, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ??AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStopDelay) ??values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', ??'%{NAS-Port}', '%{NAS-Port-Type}', ('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval - '%{Acct-Session-Time:-0}'::interval), ??('%S'::timestamp - '%{Acct-Delay-Time:-0}'::interval), NULLIF('%{Acct-Session-Time}', '')::bigint, ??'%{Acct-Authentic}', '%{Connect-Info}', ??(('%{Acct-Input-Gigawords:-0}'::bigint << 32) + '%{Acct-Input-Octets:-0}'::bigint), ??(('%{Acct-Output-Gigawords:-0}'::bigint << 32) + '%{Acct-Output-Octets:-0}'::bigint), '%{Called-Station-Id}', ??'%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', ??NULLIF('%{Framed-IP-Address}', '')::inet, 0)" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "" sql: postauth_query = "INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ('%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Could not link driver rlm_sql_postgresql: rlm_sql_postgresql.so: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[11]: sql: Module instantiation failed. radiusd.conf[1860] Unknown module "sql". radiusd.conf[1789] Failed to parse authorize section. ----- Original Message ----- From: freeradius-users-request(a)lists.freeradius.org To: freeradius-users(a)lists.freeradius.org Sent: Tuesday, 17 March, 2009 13:00:55 GMT +01:00 West Central Africa Subject: Freeradius-Users Digest, Vol 47, Issue 76 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: FreeRadius with Postgresql (A.L.M.Buxey(a)lboro.ac.uk) 2. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 3. Re: FreeRadius with Postgresql (phil lemelin) 4. Re: Radius and performance (Fajar A. Nugraha) 5. Re: FreeRadius with Postgresql (tnt(a)kalik.net) 6. Re: Radius and performance (A.L.M.Buxey(a)lboro.ac.uk) 7. Re: FreeRadius with Postgresql (Marinko Tarlac) 8. Re: Radius and performance (tnt(a)kalik.net) 9. Re: Radius and performance (Marinko Tarlac) ---------------------------------------------------------------------- Message: 1 Date: Tue, 17 Mar 2009 11:05:09 +0000 From: A.L.M.Buxey(a)lboro.ac.uk Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20090317110509.GA28679(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? follow the usual MySQL/SQL stuff - just use postgres instead - ie 1) install postgres 2) configure postgres 3) install FreeRADIUS with postgres support 4) configure FreeRADIUS part 4 will need the SQL tables etc as supplied in the freeradius source to populate the DB. you will then need to configure a suitable user access rule for your chosen DB user (in usual postgres way). then edit the sql.conf file etc to call postgres module. edit postgres files (eg dialup.conf) with correct user/pass/table details alan ------------------------------ Message: 2 Date: Tue, 17 Mar 2009 12:11:51 +0100 From: <tnt(a)kalik.net> Subject: Re: FreeRadius with Postgresql To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <nZMwwgDz.1237288311.7684910.tnt(a)kalik.net> Content-Type: text/plain; charset=ISO-8859-2 >Please link me to a resources on how to make FreeRadius to work with postgreSQL on Ubuntu 8.04 LTS? >- You configure raddb/sql.conf. And create the database with scripts in raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, accounting, session, ...) in raddb/sites-enabled/default. http://wiki.freeradius.org/SQL_HOWTO Ivan Kalik Kalik Informatika ISP ------------------------------ Message: 3 Date: Tue, 17 Mar 2009 07:29:36 -0400 From: phil lemelin <phil.lemelin(a)gmail.com> Subject: Re: FreeRadius with Postgresql To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <efe037fe0903170429l65ecdbcfk68bc504469127cc1(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" > Please link me to a resources on how to make FreeRadius to work with > postgreSQL on Ubuntu 8.04 LTS? > > > You configure raddb/sql.conf. And create the database with scripts in > raddb/sql/postgresql/. Then uncomment sql where you need it (authorize, > accounting, session, ...) in raddb/sites-enabled/default. > > http://wiki.freeradius.org/SQL_HOWTO > > Ivan Kalik > Kalik Informatika ISP > I am currently looking into testing freeradius and started reading a couple of wiki/doc/man pages on the subject and ended on that SQL_HOWTO page. One of the prerequisite is to already have the NAS configured. Do you have any suggestion for a NAS running on a linux box ? Thank you. -- Philippe-Alexandre Lemelin

3 2

Adding users in the database from a client computer
by Joeven Rex Dizon 19 Mar '09

19 Mar '09

Again, I'm a relatively new freeradius user so I am not really an expert with it. In our project, we need to "add" and "delete" users from the server database from an authorized client computer. And we're a little confused on how adding and removing users work. When the client makes a request to add a user in the database, does it simply ask access in the mysql backend of the server, or make the request to the server first, and the server itself will "request" its database backend to add the user? How exactly do we request an addition or deletion of a user? Do we use the simple sql queries in the radcheck table? By the way, we've already configured the server to allow access from this client computer in the clients.conf file. We've tested it using radtest in it receives an access-accept packet. Our installed version is 2.1.0+dfsg-0ubuntu2, running on Ubuntu 8.10. The backend database we used is MySql. Thanks in advance. -- Joeven Rex L. Dizon BS Computer Engineering, UP Diliman http://jrldizon.blogspot.com

3 2

Re: freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 19 Mar '09

19 Mar '09

I don`t have firewall How i solve the problem ? Tanks advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE ------------------------------------- Powered by Mail.BG - http://mail.bg

4 3

RADIUS challenge response using the PAM module
by Robert Svensson 19 Mar '09

19 Mar '09

Hi, I've been pulling my hair trying to get the PAM radius module to successfully authenticate against a radius server that thows a password challenge response AFTER a user has been verified using their user name and password (it's not a FreeRadius server). By looking at the source code, It seems as if this should be possible. But I can't figure this one out. The PAM module recieves the access challenge from the radius server. The problem is that instead of asking the user for additional input, the module returns an invald challenge back to the radius server and therefore the authentication fails. Does anyone out there have a working PAM module configuration that asks the user for additional input, such as a token value, after their user name and password has been checked? Any help is greatly appreciated thanx Robert

3 7

Re: freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 18 Mar '09

18 Mar '09

Sorry i`m new mail-list user While tracking installed following instructions http://abills.net.ua/wiki/doku.php?id=abills:docs_03:install:en[1] the all debug log is # radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/eap.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 2 main: max_requests = 102400 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yes Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) exec: wait = yes exec: program = "/usr/abills/libexec/rauth.pl pre_auth" exec: input_pairs = "request" exec: output_pairs = "config" exec: packet_type = "(null)" Module: Instantiated exec (pre_auth) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) exec: wait = yes exec: program = "/usr/abills/libexec/rauth.pl post_auth" exec: input_pairs = "request" exec: output_pairs = "config" exec: packet_type = "(null)" Module: Instantiated exec (post_auth) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 4 NAS-Port-Type = Ethernet User-Name = "lacho" Calling-Station-Id = "00:15:AF:1F:23:1A" Called-Station-Id = "pppoe-in" NAS-Port-Id = "ether1" CHAP-Challenge = 0x00000a2d5c17177c86733bd3ed908d0c CHAP-Password = 0x0189c958b6e077d36f87977f590271a3dc NAS-Identifier = "TEST-RADIUS" NAS-IP-Address = 192.168.200.4 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 Exec-Program output: Auth-Type := Accept Exec-Program-Wait: value-pairs: Auth-Type := Accept Exec-Program: returned: 0 modcall[authorize]: module "pre_auth" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 users: Matched entry DEFAULT at line 52 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type Accept rad_check_password: Auth-Type = Accept, accepting the user Exec-Program output: Acct-Interim-Interval = 300, Session-Timeout = 31, Mikrotik-Xmit-Limit = 1073217536, Framed-IP-Address = 10.8.15.114, Mikrotik-Recv-Limit = 1073217536, Framed-IP-Netmask = 255.255.255.255, Exec-Program-Wait: value-pairs: Acct-Interim-Interval = 300, Session-Timeout = 31, Mikrotik-Xmit-Limit = 1073217536, Framed-IP-Address = 10.8.15.114, Mikrotik-Recv-Limit = 1073217536, Framed-IP-Netmask = 255.255.255.255, Exec-Program: returned: 0 Sending Access-Accept of id 2 to 192.168.200.4 port 32768 Acct-Interim-Interval = 300 Session-Timeout = 31 Mikrotik-Xmit-Limit = 1073217536 Framed-IP-Address = 10.8.15.114 Mikrotik-Recv-Limit = 1073217536 Framed-IP-Netmask = 255.255.255.255 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 3 seconds... rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Sending duplicate reply to client TEST-RADIUS:32768 - ID: 2 Re-sending Access-Accept of id 2 to 192.168.200.4 port 32768 --- Walking the entire request list --- Waking up in 2 seconds... rad_recv: Access-Request packet from host 192.168.200.4:32768, id=2, length=144 Sending duplicate reply to client TEST-RADIUS:32768 - ID: 2 Re-sending Access-Accept of id 2 to 192.168.200.4 port 32768 Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 2 with timestamp 49c168d6 Nothing to do. Sleeping until we see a request. That`s all 10x to advanced -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE Links: ------ [1] http://abills.net.ua/wiki/doku.php?id=abills:docs_03:install:en ------------------------------------- Sportingbet – €1500 всеки ден, бонуси тенис залози на живо! http://bg.sportingbet.com/

2 1

None
by ahmed adel 18 Mar '09

18 Mar '09

Dear All I hope anyone can help me with these errors I have in the radius.log file: Error: rlm_sql_getvpdata: database query error Error: rlm_sql (sql): SQL query error; rejecting user Error: rlm_sql (sql): Couldn't update SQL accounting ALIVE record - 00000 I am using freeradius 1.1.7 with freetds and MSSQL 2005 as the backend database, the radius receives interim accounting update packets to calculate users utlized bandwidth and the data is inserted into the MSSQL database using SQL Procedures. Does anyone knows what may cause these errors to occure, note that when I run radius -X most of the update statements return with status ok and for the statements that return with this error, they run fine from the MSSQL console. Thanks in advance Ahmed Adel

2 7

freeradius and mikrotik auth problem pppoe error 691
by Lazar Cherveniakov 18 Mar '09

18 Mar '09

Hello, I`m new radius user and i`m beginner. I have problem with connect mikrotik with radius server. My clients using pppoe server but i have connect to radius server but after configuration from internet documentation my server don`t work and i receive errors in radius.log and pppoe server show 691 error this is the errors Wed Mar 11 17:59:23 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 8 due to unfinished request 0 Wed Mar 11 17:59:26 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 9 due to unfinished request 1 Wed Mar 11 17:59:28 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 10 due to unfinished request 2 Wed Mar 11 18:44:28 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 11 18:44:28 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 11 18:44:28 2009 : Info: Ready to process requests. Wed Mar 11 18:57:43 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 11 18:57:43 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 11 18:57:43 2009 : Info: Ready to process requests. Mon Mar 16 22:20:07 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Mon Mar 16 22:20:07 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Mon Mar 16 22:20:07 2009 : Info: Ready to process requests. Wed Mar 18 22:35:19 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 18 22:35:19 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 18 22:35:19 2009 : Info: Ready to process requests. Wed Mar 18 22:35:25 2009 : Info: Using deprecated naslist file. Support for this will go away soon. Wed Mar 18 22:35:25 2009 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Mar 18 22:35:25 2009 : Info: Ready to process requests. Wed Mar 18 22:35:39 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 1 due to unfinished request 0 Wed Mar 18 22:35:40 2009 : Error: Discarding duplicate request from client TEST-RADIUS:32768 - ID: 1 due to unfinished request 0 ~ ~ this is the mikrotik error mar/13 23:42:18 pppoe,info PPPoE connection established from 00:15:AF:1F:23:1A mar/13 23:42:18 pppoe,ppp,info <pppoe-0>: waiting for call... mar/13 23:42:19 pppoe,ppp,info <pppoe-lacho>: terminating... - user lacho authentication failed - radius timeout (6) mar/13 23:42:19 pppoe,ppp,info <pppoe-lacho>: disconnected please help me advanced Tanks. -- Lazar Cherveniakov Micro computers system - Lazkom LIVE FREE OR DIE ------------------------------------- Sportingbet – €1500 всеки ден, бонуси тенис залози на живо! http://bg.sportingbet.com/

2 1

AW: AW: gigawords and bandwith
by Lars 18 Mar '09

18 Mar '09

> So... get the NAS to send it. Or buy a NAS that semds it. I hoped that one of you can give me a hint on how. > See the NAS documentation for instructions on using RADIUS to limit > bandwidth. I wrote the version and the kind of NAS before, so I hoped it could be true that one of all the guys here did it before with the same configuration. The documentation of the NAS is not detailed enough to get the needed information! I wrote in freeradius-users also, but i think I can not get the list, but I subscribed to it and send to it without errors - so I ask here again. Regards Lars

3 2

Re: FreeRadius only works in debug mode
by Greg.Webster＠westfraser.com 18 Mar '09

18 Mar '09

Thanks for the thoughts on this...it looks like the permissions on those directories are all good: # ls -al /var/log/radius/ total 10 drwx------ 3 radiusd radiusd 128 Mar 12 14:54 . drwxr-xr-x 13 root root 1552 Mar 17 11:36 .. drwx------ 2 radiusd radiusd 48 Apr 23 2008 radacct -rw-r--r-- 1 radiusd radiusd 5150 Mar 17 11:51 radius.log -rw-r--r-- 1 radiusd radiusd 0 Apr 23 2008 radutmp # ls -al /tmp drwxrwxrwt 9 root root 616 Mar 18 08:54 . # ls -al /etc/raddb/ total 208 drwxr-xr-x 3 root root 664 Mar 12 16:11 . drwxr-xr-x 83 root root 7072 Mar 17 11:33 .. -rw-r--r-- 1 root radiusd 422 Apr 23 2008 acct_users -rw-r--r-- 1 root radiusd 4074 Apr 23 2008 attrs drwxr-x--- 3 root radiusd 472 Mar 12 14:41 certs -rw-r----- 1 root radiusd 2937 Apr 23 2008 clients.conf -rw-r--r-- 1 root radiusd 929 Apr 23 2008 dictionary -rw-r----- 1 root radiusd 9332 Apr 23 2008 eap.conf -rw-r----- 1 root radiusd 4620 Apr 23 2008 example.pl -rw-r--r-- 1 root radiusd 2396 Apr 23 2008 hints -rw-r--r-- 1 root radiusd 1604 Apr 23 2008 huntgroups -rw-r--r-- 1 root radiusd 2333 Apr 23 2008 ldap.attrmap -rw-r----- 1 root radiusd 9330 Apr 23 2008 mssql.conf -rw-r----- 1 root radiusd 856 Apr 23 2008 naspasswd -rw-r--r-- 1 root radiusd 7316 Apr 23 2008 otp.conf -rw-r----- 1 root radiusd 1396 Apr 23 2008 otppasswd.sample -rw-r----- 1 root radiusd 14467 Apr 23 2008 postgresql.conf -rw-r----- 1 root radiusd 1039 Apr 23 2008 preproxy_users -rw-r----- 1 root radiusd 8834 Apr 23 2008 proxy.conf -rw-r--r-- 1 root radiusd 64646 Mar 12 16:06 radiusd.conf -rw-r----- 1 root radiusd 1405 Apr 23 2008 snmp.conf -rw-r----- 1 root radiusd 14173 Apr 23 2008 sql.conf -rw-r----- 1 root radiusd 6974 Mar 12 14:54 users So, unless there's another location that the radiusd user needs access to? I've verified that the service is definitely running as radiusd. I also looked up the possibility of the selinux protection and it's not set up at all on this system. Other thoughts? I'm stumped on this one. Thanks, Greg A.L.M.Buxey(a)lboro.ac.uk wrote: > Hi, > > > when run in debug, it runs with greater privs - check your eg /var/log/radius > directory, your used tmp directories, /etc/raddb etc for their permissions - does the > user/group you have defined in radiusd.conf have relevant read/write permissions > > other common issue is eg selinux daemon/service protection > > alan ---------------------------- This e-mail message and any attachments are confidential. Any dissemination or use of this information by a person other than the intended recipient is unauthorized. If you are not the intended recipient, please notify me by return e-mail, do not open any attachment and delete this communication and any copy. Thank you

2 1

radclient:: Failed to find IP address for dhcppc0
by vnsquall 18 Mar '09

18 Mar '09

Hi everyone, i'm a newbie for configuring radius and i have some problems when i try to use radtest to test the freeradius-server-2.1.3. I have installed by following commands: $ ./configure --prefix=/usr/local/freeradius $ make $ make install Everything is OK and i type: [root@localhost ~]# /usr/local/freeradius/sbin/radiusd -X .................................. .................................. radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on proxy address * port 1814 Ready to process requests. After that, on another shell command, i try to test with radtest: /usr/local/freeradius/bin/radtest test test 127.0.0.1 0 testing123 radclient:: Failed to find IP address for dhcppc0 radclient: Nothing to send. I try to test with ping command: [root@dhcppc0 ~]# ping 127.0.0.1 PING 127.0.0.1 (127.0.0.1) 56(84) bytes of data. 64 bytes from 127.0.0.1: icmp_seq=1 ttl=64 time=0.046 ms 64 bytes from 127.0.0.1: icmp_seq=2 ttl=64 time=0.046 ms 64 bytes from 127.0.0.1: icmp_seq=3 ttl=64 time=0.050 ms 64 bytes from 127.0.0.1: icmp_seq=4 ttl=64 time=0.044 ms ^C --- 127.0.0.1 ping statistics --- 4 packets transmitted, 4 received, 0% packet loss, time 2999ms rtt min/avg/max/mdev = 0.044/0.046/0.050/0.007 ms -All the others conf file is the default setting. Thank you for any try to help me!!!! -- View this message in context: http://www.nabble.com/radclient%3A%3A-Failed-to-find-IP-address-for-dhcppc0… Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0