- Freeradius-Users - lists.freeradius.org

Multiple sqlippool with different Module-Success-Message values
by Zoltán Kristofóri 16 Feb '21

16 Feb '21

Hello Everyone! First of all I am glad to be here! But i got stuck on a problem. I am calling two different sqlippool module for IP address allocation (IPv4 and IPv6). My problem is that I need send both module result message to the linelog module. It should be easy because the sqlippool module writes the control:Module-Success-Message. But as far as I can see the Module-Success-Message field is not updated the second time. site configuration: post-auth { ... sqlippool_v4 log_sqlippool .. sqlippool_v6 log_sqlippool } sqlippool module configuration: sqlippool sqlippool_v4 { ... messages { exists = "Existing IPv4: %{reply:${..attribute_name}} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" success = "Allocated IPv4: %{reply:${..attribute_name}} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" ... sqlippool sqlippool_v6 { ... messages { exists = "Existing IPv6: %{reply:${..attribute_name}} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" success = "Allocated IPv6: %{reply:${..attribute_name}} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" ... linelog module configuration: ... linelog log_sqlippoolv4 { format = "%{control:Module-Success-Message}" filename = syslog permissions = 0600 } Also i can see the problem in debug mode: (1) sqlippool_v4: EXPAND Allocated IPv4: %{reply:Framed-IP-Address} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name}) (1) sqlippool_v4: --> Allocated IPv4: 10.1.1.1 from xpool (did cli xxx port 134219438 user x) (1) [sqlippool_v4] = ok (1) log_sqlippool: EXPAND %{control:Module-Success-Message} (1) log_sqlippool: --> Allocated IPv4: 10.1.1.1 from xpool (did cli xxx port 134219438 user x) (1) [log_sqlippool] = ok ... (1) sqlippool_v6: EXPAND Allocated IPv6: %{reply:Framed-IPv6-Prefix} from %{control:Pool-Name} (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name}) (1) sqlippool_v6: --> Allocated IPv6: 2000:::/64 from xpool (did cli xxx port 134219438 user x) (1) [sqlippool_v6] = ok (1) log_sqlippool: EXPAND %{control:Module-Success-Message} (1) log_sqlippool: --> Allocated IPv4: 10.1.1.1 from xpool (did cli xxx port 134219438 user x) (1) [log_sqlippool] = ok Can someone please clarify what am i doing wrong here? Regards!

1 1

user-name with MAC@ format is not accepted
by Hassan, Hazem (Nokia - EG/Cairo) 14 Feb '21

14 Feb '21

Hi , For the matter of getting FreeRadius ready to test , I tried to use some test users (hazem1 , Graham and MAC@) .. hazem1 and Graham went normal but when I edited the user files (adding new user with the given MAC= 64:20:9F:19:5F:53 and adding some AVPs) , it returns the below errors when run "radiusd -X" >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>............................................. tls: Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_peap peap { tls = "tls-common" default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" soh = no require_client_cert = no } tls: Using cached TLS configuration from previous invocation # Linked to sub-module rlm_eap_mschapv2 mschapv2 { with_ntdomain_hack = no send_error = no } # Instantiating module "expiration" from file /etc/raddb/mods-enabled/expiration # Instantiating module "files" from file /etc/raddb/mods-enabled/files reading pairlist file /etc/raddb/mods-config/files/authorize /etc/raddb/mods-config/files/authorize[97]: Entry does not begin with a user name Failed reading /etc/raddb/mods-config/files/authorize /etc/raddb/mods-enabled/files[9]: Instantiation failed for module "files" Any idea? Thanks, Hazem

1 3

Unlang Configuration Problem on Missing Attributes
by StreitLeak 13 Feb '21

13 Feb '21

I have problem on unlang when I want to build SQL Query. The Request packet is missing some attributes on VSA. The Dictionary which I custom it have 150 attributes. But the Request only sent 120 or 130. So if I set all attributes in my sql query, the query will fail with lacking some attributes in Request Packet. -----SQL Schema--- Ex: The table Schema Example create table radacct { attr1 int not null default 0. attr2 varchar(255) not null default '', attr3 int not null default 0. attr4 int not null default 0 } --- SQL Query in sql/main/mysql/querier.conf --- The Query = "insert into radacct ( attr1.attr2.attr3,attr4) values ('%{attr1}', '%{attr2}','%{attr3}','%{attr4}' );" --- Request Packet Example --- Acct-Delay-Time = 437 Attr1-Log-Time = "Mon Feb 8 15:15:11 2021\n" Acct-Status-Type = Stop Acct-Session-Id = "15934598980000000296" Attr2-Session-Ingress-CallId = 65535 Attr3-Session-Egress-CallId = 1 Attr5-Session-Generic-Id = 157 Acct-Multi-Session-Id = "1612768062157" ---- so the real query is "insert into radacct ( attr1.attr2.attr3,attr4) values (' Mon Feb 8 15:15:11 2021\n ', '65535','1','' ) As you can see . the Attr4 is missing in Request Packet. And it cause the query failed. So I need to set some rules to avoid it. But I can't understand the foreach how to check each VSA attributes. Or any easily way to avoid the missing attributes. Have any configuration Example can help me to understand it? 星たちよ汝の命短き眷族の望みな聞くがよい我らの望みそれほ汝の本將ちゆく末な看取るニと -------------《アーヴによる人類帝國》國歌の一節よリ

3 3

REST module Access-Reject 401 Reply-Message
by adrian.p.smith＠bt.com 11 Feb '21

11 Feb '21

Question regarding the REST module please. If we return a 401 which gets translated into an Access-Reject, is there any way to pass something back from REST which can be put into the reply message? In our scenario each user can have a maximum number of sessions, and if that limit is reached, we want to pass that specific error back in the Access-Reject. TIA

3 2

EAP-TLS host certificates
by Vieri Di Paola 10 Feb '21

10 Feb '21

Hi, Several years ago when Windows XP clients were around in my organization I had successfully configured freeradius with EAP-TLS and host certificates. Now, most of my clients are Windows 10 and just a few Windows 7. They can access with PEAP mschap-v2 via WiFi. I am now trying to configure WiFi access with EAP-TLS and host certificates. Please bear with me as I haven't handled freeradius for years now, and I'm a bit rusty. I already have a custom Signing Authority (ca.pem). So, within /etc/raddb/certs I ran the following after adjusting the corresponding *.cnf files: # make server.pem # make server.csr # make inner-server.pem # make client.pem The Windows 10 client has imported both the CA in trusted roots and the client certificate in the "local computer" store. I chose the common name "PC2036" (see below). The wireless connection is set up with a "smart card or other certificate" (computer account). When I try to connect I see this in the radiusd log (please let me know if you need the full log): (132) Received Access-Request Id 67 from 192.168.216.36:58425 to 10.215.144.91:1812 length 209 (132) User-Name = "host/PC2036" (132) NAS-IP-Address = 192.168.216.36 (132) NAS-Identifier = "10:be:f5:c9:ce:90" (132) NAS-Port = 0 (132) Called-Station-Id = "10-BE-F5-C9-CE-98:HMprv" (132) Calling-Station-Id = "4C-1D-96-4E-48-0F" (132) Framed-MTU = 1400 (132) NAS-Port-Type = Wireless-802.11 (132) Connect-Info = "CONNECT 0Mbps 802.11b" (132) EAP-Message = 0x028a001201686f73742f484d414e32303336 (132) Message-Authenticator = 0xc6775ce6e83151b7ecde4018fb87f5d8 (132) # Executing section authorize from file /etc/raddb/sites-enabled/default (132) authorize { [...] (132) ntdomain: Checking for prefix before "\" (132) ntdomain: No '\' in User-Name = "host/PC2036", looking up realm NULL (132) ntdomain: No such realm "NULL" (132) [ntdomain] = noop (132) [expiration] = noop (132) [logintime] = noop (132) } # authorize = updated (132) Found Auth-Type = eap (132) # Executing group from file /etc/raddb/sites-enabled/default (132) authenticate { (132) eap: Peer sent packet with method EAP Identity (1) (132) eap: Calling submodule eap_tls to process data (132) eap_tls: Initiating new TLS session (132) eap_tls: Setting verify mode to require certificate from client (132) eap_tls: [eaptls start] = request (132) eap: Sending EAP Request (code 1) ID 139 length 6 (132) eap: EAP session adding &reply:State = 0x007a782400f175f1 (132) [eap] = handled (132) } # authenticate = handled (132) Using Post-Auth-Type Challenge (132) # Executing group from file /etc/raddb/sites-enabled/default (132) Challenge { ... } # empty sub-section is ignored (132) Sent Access-Challenge Id 67 from 10.215.144.91:1812 to 192.168.216.36:58425 length 0 (132) EAP-Message = 0x018b00060d20 (132) Message-Authenticator = 0x00000000000000000000000000000000 (132) State = 0x007a782400f175f114c01cbf42164dc9 (132) Finished request Waking up in 4.9 seconds. (132) Cleaning up request packet ID 67 with timestamp +2318 Ready to process requests I then read this: https://wiki.freeradius.org/guide/certificate-compatibility So I decided to replace the whole certificate directory just to make sure the test certs work. So I ran this: # ./bootstrap # make inner-server.pem However, when I run the server I get an error reading its certificate. # radiusd -X [...] tls: Failed reading private key file "/etc/raddb/certs/server.pem" tls: error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt tls: error:23077074:PKCS12 routines:PKCS12_pbe_crypt:pkcs12 cipherfinal error tls: error:2306A075:PKCS12 routines:PKCS12_item_decrypt_d2i:pkcs12 pbe crypt error tls: error:0907B00D:PEM routines:PEM_read_bio_PrivateKey:ASN1 lib tls: error:140B0009:SSL routines:SSL_CTX_use_PrivateKey_file:PEM lib rlm_eap_tls: Failed initializing SSL context rlm_eap (EAP): Failed to initialise rlm_eap_tls /etc/raddb/mods-enabled/eap[14]: Instantiation failed for module "eap" # ls -l /etc/raddb/certs/server.pem -rw-r----- 1 root radius 3588 Jun 12 2020 /etc/raddb/certs/server.pem freeradius v. 3.0.20 I'm sure this is a silly mistake on my behalf. Any suggestions? Vieri

4 12

DHCP4 and DHCP6
by Hassan, Hazem (Nokia - EG/Cairo) 10 Feb '21

10 Feb '21

Hi , Can anyone guide me how to install DHCP4 and DHCP6 on Cento7 . I plan to run DHCP proxy on BNG and external DHCP is external. Thanks, Hazem

2 1

Freeradius to authenticate against Google LDAP
by Christian Bednarz 10 Feb '21

10 Feb '21

Hi all. I finally managed to get an Access-Accept in radtest (I apparently forgot to uncomment the ldap section in sites-enabled/default’s authenticate section), so I went on trying to implement the whole free radius solution within our Ubiquity network for VPN. And communication between client, vpn gateway, freeradius and Google LDAP itself seem to work fine, telling from the debug log, which makes me extremely happy. But what fails it the authentication part while trying to connect with built-in VPN connect from macOS Big Sur (11.2.0). Here is the log: (0) Received Access-Request Id 161 from 192.168.4.1:54219 to 192.168.5.119:1812 length 152 (0) Service-Type = Framed-User (0) Framed-Protocol = PPP (0) User-Name = "it-test(a)lanes-planes.com" (0) MS-CHAP-Challenge = 0x36169958932d4caae570b84f9d904bc4 (0) MS-CHAP2-Response = 0x73005bd7ede08f3f079761ea9347b33f9ab1000000000000000006e7f9e1e8a8cf46c100571989fc4c56437a955c64263d4a (0) NAS-IP-Address = 127.0.1.1 (0) NAS-Port = 100000 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (0) authorize { (0) policy filter_username { (0) if (&User-Name) { (0) if (&User-Name) -> TRUE (0) if (&User-Name) { (0) if (&User-Name =~ / /) { (0) if (&User-Name =~ / /) -> FALSE (0) if (&User-Name =~ /@[^@]*@/ ) { (0) if (&User-Name =~ /@[^@]*@/ ) -> FALSE (0) if (&User-Name =~ /\.\./ ) { (0) if (&User-Name =~ /\.\./ ) -> FALSE (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) { (0) if ((&User-Name =~ /@/) && (&User-Name !~ /(a)(.+)\.(.+)$/)) -> FALSE (0) if (&User-Name =~ /\.$/) { (0) if (&User-Name =~ /\.$/) -> FALSE (0) if (&User-Name =~ /(a)\./) { (0) if (&User-Name =~ /(a)\./) -> FALSE (0) } # if (&User-Name) = notfound (0) } # policy filter_username = notfound (0) [preprocess] = ok (0) [chap] = noop (0) mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap' (0) [mschap] = ok (0) [digest] = noop (0) suffix: Checking for suffix after "@" (0) suffix: Looking up realm "lanes-planes.com" for User-Name = "it-test(a)lanes-planes.com" (0) suffix: Found realm "lanes-planes.com" (0) suffix: Adding Stripped-User-Name = "it-test" (0) suffix: Adding Realm = "lanes-planes.com" (0) suffix: Authentication realm is LOCAL (0) [suffix] = ok (0) eap: No EAP-Message, not doing EAP (0) [eap] = noop (0) files: users: Matched entry DEFAULT at line 181 (0) [files] = ok rlm_ldap (ldap): Reserved connection (0) (0) ldap: EXPAND (uid=%{%{Stripped-User-Name}:-%{User-Name}}) (0) ldap: --> (uid=it-test) (0) ldap: Performing search in "dc=lanes-planes,dc=com" with filter "(uid=it-test)", scope "sub" (0) ldap: Waiting for search result... (0) ldap: User object found at DN "uid=it-test,ou=Users,dc=lanes-planes,dc=com" (0) ldap: Processing user attributes (0) ldap: WARNING: No "known good" password added. Ensure the admin user has permission to read the password attribute (0) ldap: WARNING: PAP authentication will *NOT* work with Active Directory (if that is what you were trying to configure) rlm_ldap (ldap): Released connection (0) Need 5 more connections to reach 10 spares rlm_ldap (ldap): Opening additional connection (5), 1 of 27 pending slots used rlm_ldap (ldap): Connecting to ldaps://ldap.google.com:636 rlm_ldap (ldap): Waiting for bind result... ber_get_next failed. rlm_ldap (ldap): Bind successful (0) [ldap] = ok (0) [expiration] = noop (0) [logintime] = noop (0) if (User-Password) { (0) if (User-Password) -> FALSE Not doing PAP as Auth-Type is already set. (0) [pap] = noop (0) } # authorize = ok (0) Found Auth-Type = mschap (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) authenticate { (0) mschap: WARNING: No Cleartext-Password configured. Cannot create NT-Password (0) mschap: Creating challenge hash with username: it-test(a)lanes-planes.com (0) mschap: Client is using MS-CHAPv2 (0) mschap: ERROR: FAILED: No NT/LM-Password. Cannot perform authentication (0) mschap: ERROR: MS-CHAP2-Response is incorrect (0) [mschap] = reject (0) } # authenticate = reject (0) Failed to authenticate the user (0) Using Post-Auth-Type Reject (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Post-Auth-Type REJECT { (0) attr_filter.access_reject: EXPAND %{User-Name} (0) attr_filter.access_reject: --> it-test(a)lanes-planes.com (0) attr_filter.access_reject: Matched entry DEFAULT at line 11 (0) [attr_filter.access_reject] = updated (0) [eap] = noop (0) policy remove_reply_message_if_eap { (0) if (&reply:EAP-Message && &reply:Reply-Message) { (0) if (&reply:EAP-Message && &reply:Reply-Message) -> FALSE (0) else { (0) [noop] = noop (0) } # else = noop (0) } # policy remove_reply_message_if_eap = noop (0) } # Post-Auth-Type REJECT = updated (0) Delaying response for 1.000000 seconds Waking up in 0.9 seconds. (0) Sending delayed response (0) Sent Access-Reject Id 161 from 192.168.5.119:1812 to 192.168.4.1:54219 length 103 (0) MS-CHAP-Error = "sE=691 R=1 C=5d2530561851dae0ec888c0efaa2434c V=3 M=Authentication rejected" Waking up in 3.9 seconds. (0) Cleaning up request packet ID 161 with timestamp +43 Ready to process requests Would anyone be so kind to point me to the right direction what exactly to change in this setup in order to get it to work? Any help much appreciated. I feel quite close to the solution, but I might be lacking the necessary understanding of authentication protocols to get this sorted. :-/ Thank you. Best regards Christian

2 1

standard attributes
by Hassan, Hazem (Nokia - EG/Cairo) 09 Feb '21

09 Feb '21

Hi , Is there a way to include both standard attributes and VSAa on Freeradius running on Centos7? The below path doesn’t have any dictionaries [root@host-80-194-79-145 share]# cd /usr/share/ [root@host-80-194-79-145 share]# ls | egrep dictionary I am asking because after installation , I get the below error while trying to start "radiusd -X" [root@host-80-194-79-145 share]# systemctl start radiusd.service Job for radiusd.service failed because the control process exited with error code. See "systemctl status radiusd.service" and "journalctl -xe" for details. [root@host-80-194-79-145 share]# systemctl status radiusd.service ● radiusd.service - FreeRADIUS high performance RADIUS server. Loaded: loaded (/usr/lib/systemd/system/radiusd.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2021-02-09 19:02:39 GMT; 11s ago Process: 2874 ExecStartPre=/usr/sbin/radiusd -C (code=exited, status=1/FAILURE) Process: 2872 ExecStartPre=/bin/chown -R radiusd.radiusd /var/run/radiusd (code=exited, status=0/SUCCESS) Feb 09 19:02:38 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: S... Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: r... Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: F... Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: U... Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: r... Hint: Some lines were ellipsized, use -l to show in full. [root@host-80-194-79-145 share]# systemctl status radiusd.service -l ● radiusd.service - FreeRADIUS high performance RADIUS server. Loaded: loaded (/usr/lib/systemd/system/radiusd.service; disabled; vendor preset: disabled) Active: failed (Result: exit-code) since Tue 2021-02-09 19:02:39 GMT; 38s ago Process: 2874 ExecStartPre=/usr/sbin/radiusd -C (code=exited, status=1/FAILURE) Process: 2872 ExecStartPre=/bin/chown -R radiusd.radiusd /var/run/radiusd (code=exited, status=0/SUCCESS) Feb 09 19:02:38 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Starting FreeRADIUS high performance RADIUS server.... Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiusd.service: control process exited, code=exited status=1 Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Failed to start FreeRADIUS high performance RADIUS server.. Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Unit radiusd.service entered failed state. Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiusd.service failed. [root@host-80-194-79-145 share]# systemctl stop radiusd.service [root@host-80-194-79-145 share]# systemctl start radiusd.service Job for radiusd.service failed because the control process exited with error code. See "systemctl status radiusd.service" and "journalctl -xe" for details. [root@host-80-194-79-145 share]# journalctl -xe WARNING: terminal is not fully functional Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiFeb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:32 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:32 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Star-- Subject: Unit radiusd.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit radiusd.service has begun starting up. Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiFeb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Fail-- Subject: Unit radiusd.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit radiusd.service has failed. -- -- The result is failed. Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: UnitFeb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiFeb 09 19:03:37 host-80-194-7lines 1338-1360/1360 (END)edia.com polkitd[24270]: lines 1338-1360/1360 (END) [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# journalctl -xe WARNING: terminal is not fully functional Feb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiFeb 09 19:02:39 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:32 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:32 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com polkitd[24270]: Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Star-- Subject: Unit radiusd.service has begun start-up -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit radiusd.service has begun starting up. Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiFeb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: Fail-- Subject: Unit radiusd.service has failed -- Defined-By: systemd -- Support: http://lists.freedesktop.org/mailman/listinfo/systemd-devel -- -- Unit radiusd.service has failed. -- -- The result is failed. Feb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: UnitFeb 09 19:03:37 host-80-194-79-145.static.cable.virginmedia.com systemd[1]: radiFeb 09 19:03:37 host-80-194-7lines 1338-1360/1360 (END)edia.com polkitd[24270]: lines 1338-1360/1360 (END) [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# [root@host-80-194-79-145 share]# radiusd -X FreeRADIUS Version 3.0.13 Copyright (C) 1999-2017 The FreeRADIUS server project and contributors There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License For more information about these matters, see the file named COPYRIGHT Starting - reading configuration files ... including dictionary file /usr/share/freeradius/dictionary including dictionary file /usr/share/freeradius/dictionary.dhcp including dictionary file /usr/share/freeradius/dictionary.vqp Errors reading /etc/raddb/dictionary: dict_init: /etc/raddb/dictionary[30]: Couldn't open dictionary "/usr/share/freeradius/dictionary.nokia19.txt": No such file or directory Thanks, Hazem

3 4

Unsubscribe
by P. R.M. 09 Feb '21

09 Feb '21

Unsubscribe

1 0

installing Freeradius on Debian 10 (buster)
by Hassan, Hazem (Nokia - EG/Cairo) 09 Feb '21

09 Feb '21

Hi , I have installed freeradius 3.0 on Debian 10 as follows : #sudo apt-get install freeradius And after that I added the BNG on clinets.conf file , adding a test-user for test on users file ... it doesn't work and making some troubles while restarting the freeradius service with "exit code" error. My questions are : * The above command is enough to install freeradius on Debian 10 (buster)? * I didn't add any MySql databas as it should be part of the package , is not ? * I googled and see some sites that drives to have daloRadius along with Debian , however I understand it shouldn't be and they are fully independent? Thanks, Hazem

3 3