- Freeradius-Users - lists.freeradius.org

Tru64 SIA Compilation Failure
by J Springer 03 Jan '09

03 Jan '09

Tru64 5.1b, Patch kit 6, cc, SIA ./configure; make Is gcc required? make[6]: Entering directory /usr/install/freeradius-server-2.1.3/src/modules/rlm_unix' /usr/install/freeradius-server-2.1.3/libtool --mode=compile cc -g -DNDEBUG -I/usr/install/freeradius-server-2.1.3/src -I/usr/install/freeradius-server-2.1.3/libltdl -c rlm_unix.c mkdir .libs cc -g -DNDEBUG -I/usr/install/freeradius-server-2.1.3/src -I/usr/install/freeradius-server-2.1.3/libltdl -c rlm_unix.c -DPIC -o .libs/rlm_unix.o cc: Error: rlm_unix.c, line 340: In this statement, "name" is not declared. (undeclared) if (sia_ses_init (&ent, 1, info, NULL, name, NULL, 0, NULL) != -----------------------------------------------^ cc: Error: rlm_unix.c, line 343: In this statement, "ret" is not declared. (undeclared) if ((ret = sia_ses_authent (NULL, passwd, ent)) != SIASUCCESS) { -------------^ cc: Error: rlm_unix.c, line 343: In this statement, "passwd" is not declared. (undeclared) if ((ret = sia_ses_authent (NULL, passwd, ent)) != SIASUCCESS) { ------------------------------------------^ make[6]: *** [rlm_unix.lo] Error 1 make[6]: Leaving directory `/usr/install/freeradius-server-2.1.3/src/modules/rlm_unix'

2 1

rlm_sql_oracle and instant client 11.1 rpm install
by Alok Vimawala 03 Jan '09

03 Jan '09

Hello, I spent the last few days fighting to get FreeRadius 2.1.3 installed on a RHEL-5 box with the Oracle Instant Client + SDK rpm install. The Oracle client version is 11.1. Every time, I issued the configure command it would skip over building the rlm_sql_oracle module. I eventually modified the configure.in file in "./src/modules/rlm_sql/ drivers/rlm_sql_oracle/" I went ahead and created a patch for the directory in question, but I am not sure where to submit it to. I tried using the bugs.freeradius.org website, but it was unable to create an account (the system never emailed me with a password). If you folks can direct me to where I can do that, it would be most appreciated. Thanks, Alok ----------------------------------------------------- Alok Vimawala Senior Network Administrator Housing Information Technology Office University of Michigan avimawal(a)umich.edu

3 4

Group Authorization Question
by Mike Diggins 02 Jan '09

02 Jan '09

I have authentication working from my cisco ASA550 VPN appliance to a FreeRadius 2.1.1 server, using NTLM_AUTH for backend authentication. That all works. Now I need to add authorization into the mix. 1. On the Radius server, I want to add a group X with a list of authorized usernames. 2. On the VPN side, the user selects a profile, and logs in, but I only want members of group X to be able to connect to that profile, even if the authentication is correct. I have no idea how to make the connection between the group profile I select on the VPN side, with the group X on the radius side. I'm not even sure how (or where) to create such a group with freeRadius. Can anyone point me in the right direction? -Mike

4 7

CoA-Request and Disconnect-Request in the server
by Alan DeKok 02 Jan '09

02 Jan '09

Thanks to a sponsor (details to follow), the server now has limited support for CoA-Request and Disconnect-Request. The functionality enables you to define policies that *originate* a CoA-Request or Disconnect-Request. i.e. "if user has used their bandwidth quota for the month, disconnect them". As always, there are some caveats: * the server cannot RECEIVE CoA requests. * the server cannot therefore PROXY CoA requests * the NAS MUST support CoA for this to work * The NAS must be listed as a "home_server" of type "CoA". See raddb/sites-enabled/originate-coa for more details. Alan DeKok.

1 0

FreeRADIUS and Foxpro
by Michael Schwartzkopff 02 Jan '09

02 Jan '09

Hi, is there anybody having Foxpro as a backend database. Is this possible? Thanks for sharing your experiences. Michael Schwartzkopff.

2 1

Somewhat OT: Captive portal on acess points instead complex supplicant at level end user?
by Sergio Belkin 02 Jan '09

02 Jan '09

Hi, Currently I'm using: *OpenWRT Kamikaze in AP's *Freeradius 2.1.2 *LDAP End users either use ttls or peap on their notebooks, as I have a LDAP server, each use his username and a password. Problem with this approach is that is somewhat complex for end users, they must either install a software or do a complicated configuration (think in end users terms, please). I'd want to have a open wireless network and that each user access to captive portal and enter his username and password, that captive portal "redirects" request to freeradius and freeradius in turn queries to ldap server. I'd want to know if CoovaAP (or something similar, what?) can perform such task as portal captive installed on APs. I'd be glad to read suggestions Thanks in advance!! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

5 6

freeradius on ubuntu 8.04
by John Hottel 31 Dec '08

31 Dec '08

All: I have recently built a new freeradius server. I built an old one a few years ago that has served me very well. I am not sure of the freeradius version on my new server, as i installed it using the apt-get process. The server is working great for the most part, but i am having a weird problem. I am using freeradius to do a radius to ldap conversion. We have Novell Edir 8.7.3 running ldap servers. My old freeradius box is running suse 7.2 and freeradius .0.9.3. It is attaching to the same ldap server and i have no issues with it. My issue is the first ldap connection works great. The first time. I then see a message on the server saying: "Nothing to do. Sleeping until we see a request." If i happen to make a login attempt within 15 seconds of that coming up, i see: "---Walking the entire request list--- Waking up in 1 seconds... sending Access-Reject waking up in 4 seconds... " When i try again, it works. Any ideas what this could be? If you need more info as to my version of freeradius, i will be more then happy to supply the info, if you tell me how to retrieve it :) Thanks for your help! John

3 6

Re: Freeradius-Users Digest, Vol 44, Issue 140
by Eric 31 Dec '08

31 Dec '08

I am sorry I mean that I can't find the problem. the detaild of sending packets are here. Is there any problem? rad_recv: Access-Request packet from host 10.10.10.3:11857, id=216, length=207 Acct-Session-Id = "118382" NAS-IP-Address = 10.10.10.3 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 4 MS-RAS-Vendor = 311 MS-RAS-Version = "MSRASV5.20" NAS-Port-Type = Virtual Tunnel-Type:0 = PPTP Tunnel-Medium-Type:0 = IP Calling-Station-Id = "192.168.201.59" Tunnel-Client-Endpoint:0 = "192.168.201.59" Microsoft-Attr-35 = 0x4d5352415356352e3130 Microsoft-Attr-34 = 0x4d535241532d302d312d34304432454332364243374334 User-Name = "school" User-Password = "123456" rlm_ldap: - authorize rlm_ldap: performing user authorization for school rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: (re)connect to 192.168.1.21:389, authentication 0 rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow rlm_ldap: bind as / to 192.168.1.21:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: checking if remote access for school is allowed by vpnAccess rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21 rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 0 rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11 rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval := 300 rlm_ldap: Adding radiusSimultaneousUse as Simultaneous-Use, value 1 & op=21 rlm_ldap: extracted attribute Max-Monthly-Session from generic item Max-Monthly-Session := 360000 rlm_ldap: Adding radiusIdleTimeout as Idle-Timeout, value 1200 & op=11 rlm_ldap: extracted attribute Acct-Interim-Interval from generic item Acct-Interim-Interval := 300 rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: user school authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: Running registered xlat function of module sql-Vpn for string 'SELECT SUM(AcctSessionTime - GREATEST((1228077000 - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='school' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > 1228077000 ' rlm_sql (sql-Vpn): - sql_xlat rlm_sql (sql-Vpn): Reserving sql socket id: 4 rlm_sql (sql-Vpn): row[0] returned NULL rlm_sql (sql-Vpn): Released sql socket id: 4 rlm_ldap: - authenticate rlm_ldap: login attempt by "school" with password "123456" rlm_ldap: user DN: uid=school,ou=TEMP,ou=organisations,dc=iut,dc=ac,dc=ir rlm_ldap: (re)connect to 192.168.1.21:389, authentication 1 rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow rlm_ldap: bind as uid=school,ou=TEMP,ou=organisations,dc=iut,dc=ac,dc=ir/123456 to 192.168.1.21:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: user school authenticated succesfully rlm_sql (sql-Vpn): Reserving sql socket id: 3 rlm_sql (sql-Vpn): Released sql socket id: 3 Login OK: [school] (from client VPN port 4 cli 192.168.201.59) rlm_sql (sql-Vpn): Processing sql_postauth rlm_sql (sql-Vpn): Reserving sql socket id: 2 rlm_sql (sql-Vpn): Released sql socket id: 2 Sending Access-Accept of id 216 to 62.60.198.18 port 11857 Service-Type = Framed-User Framed-Protocol = PPP Framed-Compression = Van-Jacobson-TCP-IP Acct-Interim-Interval := 300 Idle-Timeout = 1200 Session-Timeout = 389554 rad_recv: Accounting-Request packet from host 10.10.10.3:11858, id=133, length=260 Acct-Status-Type = Start Acct-Delay-Time = 0 NAS-IP-Address = 10.10.10.3 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 4 MS-RAS-Vendor = 311 MS-RAS-Version = "MSRASV5.20" NAS-Port-Type = Virtual Tunnel-Type:0 = PPTP Tunnel-Medium-Type:0 = IP Calling-Station-Id = "192.168.201.59" Tunnel-Client-Endpoint:0 = "192.168.201.59" Microsoft-Attr-35 = 0x4d5352415356352e3130 Microsoft-Attr-34 = 0x4d535241532d302d312d34304432454332364243374334 Acct-Session-Id = "118382" User-Name = "school" Framed-IP-Address = 10.10.10.4 Framed-MTU = 1400 Session-Timeout = 389554 Idle-Timeout = 1200 Acct-Multi-Session-Id = "953" Acct-Link-Count = 1 Event-Timestamp = "Dec 31 2008 15:45:03 IRST" Acct-Authentic = RADIUS MS-MPPE-Encryption-Types = 0x00000000 Sending Accounting-Response of id 133 to 10.10.10.3 port 11858 > > Message: 2 > Date: Tue, 30 Dec 2008 12:40:27 +0100 > From: <tnt(a)kalik.net> > Subject: Re: freeradius doesn't sent information to mysql > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: <DShqoEOi.1230637227.0700950.tnt(a)kalik.net> > Content-Type: text/plain; charset=ISO-8859-2 > > Are we suposed to use a crystal ball or are you going to post the debug? > > Ivan Kalik > Kalik Informatika ISP > > > Dana 30/12/2008, "Eric" <bbahar3(a)gmail.com> pi?e: > > >Hi, > >My freeradius server was working properly and it's tables in mysql had all > >the logs and online users. now the informations of users couldn't be > intered > >in tables . > >what may be the reason? > > > > > > >

2 1

Some Help Regarding Remote Free Radius Server.
by pushpraj nimbalkar 31 Dec '08

31 Dec '08

Hello All, First Of All New Year Wishes to all of you. I have configured freeradius server which is working fine for me. Now my wifi environment is like 2 hotels and radius server in different location. My radius server is kept in head office and i want my hotel wifi users to be authenticated by head office radius server. It's only authentication and accounting. Every Hotel have 1 ADSL connection with one static IP. Then I configured Linksys54GL with chillispot and defined my head office radius server IP address(i.e. public IP address of my radius server.). Now in hotel when user connects to linksys router then router forwards request to ADLS router and ADSL router forwards same request to my Head Office Radius server. But Problem is that radius server rejects request it gives error like : "Ignoring request to authentication address * port 1812 from unknown client 59.181.96.194 port 2054" and when i start radius -X at one place it gives error like rlm_sql (sql): Read entry nasname= 59.181.96.194,shortname=AP2,secret= rlm_sql (sql): Failed to look up hostname 59.181.96.194: ip_nton: Name or service not known It's is the Ip address of my hotel ADSL connection. And ADSL Router dont have any option of defining radius server and secret. Please Help me to sort out this problem. Thanks Pushpraj N.

6 9

FreeRADIUS.net DemoCerts
by Canticle 30 Dec '08

30 Dec '08

Hello all, Does anybody know how to use the FreeRADIUS.net DemoCerts in windows XP? I want to test EAPTLS with a windows XP client. For windows XP certificate management, FreeRADIUS.net-CA.der can't be imported, then I imported FreeRADIUS.net-CA.crt and FreeRADIUS.net-Client.p12. It looks fine, and can be seen in personal certificate and trusted root certificate. But when I set up the wireless interface to support the EAPTLS, it always said there are no available certificate. What is the matter? How to use the files in \etc\raddb\certs\FreeRADIUS.net\DemoCerts for windows client? I can use the Democerts for wpa_supplicant under linux, and the AP used the same setting. Then I think it is the windows XP configuration question. Does anyone know the key point? Thanks. Best Regards, Canticle canticle.zhu(a)gmail.com 2008-12-29

2 1