- Freeradius-Users - lists.freeradius.org

AUTO: Freitag, Thoralf is out of the office. (returning 05.01.2009)
by Thoralf Freitag 19 Dec '08

19 Dec '08

I am out of the office until 05.01.2009. In urgent cases contact HSS via eMail admin(a)ews.biotronik.de, or via telephone -4616. Note: This is an automated response to your message "Re: Restricting dialup users to certain client definitions only" sent on 12/19/08 19:26:08. This is the only notification you will receive while this person is away.

1 0

How to compile 2.1.3 under Cygwin
by Joachim Altenhein 19 Dec '08

19 Dec '08

Hello, i'm trying to compile Freeradius 2.1.3 under Cygwin. I used './configure --without-rlm_perl' and './configure --without-rlm_perl --without-snmp --enable-static' which compile successfully. I'm using a fresh cygwin installation and 'make install' works great. But when i start 'radiusd -X' i always get: ... realm LOCAL { } radiusd: #### Instantiating modules #### instantiate { /usr/local/etc/raddb/modules/exec[24]: Failed to link to module 'rlm_exec': No such file or directory Errors initializing modules I do have the files rlm_exec-2.1.3.la, rlm_exec.a and rlm_exec.la in /usr/local/lib. Note, that the problem is not specific to rlm_exec. Same is true e.g. for rlm_expr and i think my installation is not able to load any rlm_*file. Shouldn't be there some typ of .dll/.so? Could anybody please tell my who to make freeradius for windows/cygwin. Thanks, Achim

2 1

How to log failed auth attempts?
by Todd R. 19 Dec '08

19 Dec '08

Hello all, been spending lots of time reading the list archives, reading the docs, sample configs and so on but can't find a solution so I thought I would ping the list for some help. I am running FR 2.1.3 which I installed a few days ago. I have it doing most of what I need it to after a bit of work and lots of reading :) The thing I am stuck on right now is how to get FR to log failed login attempts with the reason for the failure. At the moment I have it logging the failed attempts in the radpostauth table in MySQL. The problem is it only logs the result as a failure with no other info.. I would love to get the Reply-Message in the table but will settle for this info in the Radius.log or any text based log. It seems that most things I have read suggest that failed authentication attempts are logged to the radius.log by default but they do not show up for me. How can I either get the failed authentications in a text log with the failure reason or get them in the MySQL table? The latter being preferred but again I will settle for the text logging if it's all that's available. I am a FR newb so the simple the solution, the better :) Thanks in advance for any help provided.. Regards, Todd R.

6 18

Re:Need help on Accounting Response
by Do Nguyen Ha 19 Dec '08

19 Dec '08

Hi Ivan Kalik thank you for your answer as i explain, i read the man unlang times but cannot figure out how to use it and Alan asked me the specific case >at the line 529 + 530, i should to send back to NAS server with the Acces Reject with attribute h323-return-code == "h323-return-code=2" not 0 > .. >520 Using Post-Auth-Type Reject >521 +- entering group REJECT {...} >522 [attr_filter.access_reject] expand: %{User-Name} -> 0873000001 >523 attr_filter: Matched entry DEFAULT at line 11 >524 ++[attr_filter.access_reject] returns updated >525 Delaying reject of request 9 for 1 seconds >526 Going to the next request >527 Waking up in 0.9 seconds. >528 Sending delayed reject for request 9 >529 Sending Access-Reject of id 206 to 172.26.0.8 port 1645 >530 h323-return-code == "h323-return-code=0" and the man unlang says the unlang is used in the configuration file --> radiusd.conf and there are some blocks in radiusd.conf such as listen block, module block, log block ... where should i put the unlang as your suggestion the Post-Auth-Type REJECT. but i dont know where to put it so put it at the end of the radiusd.conf the radiusd.conf ........... $INCLUDE sites-enabled/ Post-Auth-Type REJECT { h323-return-code := "h323-return-code=2" } but it doesnt work :( Thank you Ha`

2 1

Re: Huawei Dictionary...
by Aldo Zavala 19 Dec '08

19 Dec '08

Oh... I just downloaded the 2.1.3 there are a huawei dictionary... thanks!! (I was using the old 1.1.7_2 freebsd port version) Aldo Zavala

1 0

Re: EAP/MD5 with mysql authentication failed
by henry1412 19 Dec '08

19 Dec '08

> EAP-MD5 doesn't use inner-tunnel. Enable sql in default virtual server. > Ivan Kalik > Kalik Informatika ISP The problem has resolved by your way. Thank your ver much!

1 0

Re: How to log failed auth attempts?
by Todd R. 19 Dec '08

19 Dec '08

Can't view it now until I get back in front of a computer but as I remember it was complaining about the exact line that I added this to. I will check further later and post the exact error from the debug console. Thanks! ------Original Message------ From: tnt(a)kalik.net Sender: freeradius-users-bounces+tjrlist=lightwavetech.com(a)lists.freeradius.org To: FreeRadius users mailing list ReplyTo: FreeRadius users mailing list Subject: RE: How to log failed auth attempts? Sent: Dec 18, 2008 6:06 PM >>>>> > Just... edit the queries. Adding %{Module-Failure-Message} to the >queries should get you lots of that information. >>>>> > >Am I suppose to put a Module name in place of "Module" or leave it as is? I >copied and pasted %{Module-Failure-Message} in place of >%{reply:Reply-Message} and I could no longer start FR. > What was the error message when you start with radiusd -X? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Sent via BlackBerry by AT&T

1 0

Huawei Dictionary...
by Aldo Zavala 18 Dec '08

18 Dec '08

Hello, does somebody knows what dictionary can use with a Huawei PDSN? Thanks in advance.!

2 1

WISPr-Bandwidth question
by kevin 18 Dec '08

18 Dec '08

While an "out of the box" solution is where I'll probably end up, I'm battling with myself over the idea of how to best manage bandwidth on a network including multiple remote locations, with both wired and wireless connections. I'm moving to using freeradius to authenticate (which ultimately will be done by MAC for initial ease of setup) but I'm trying to figure out where the Bandwidth attributes actually are used. IOW, when using WISPr-Bandwidth, does that modify the client connection at the client computer or does that occur at a proxy or firewall device? What I'm getting at is, is a captive portal necessary or can a person simply have client authentication via freeradius and the client network card handle managing its own bandwidth? And if so, is there any possibility that the client computer could be modified by someone with a bit of skill to bypass those controls? Hope that made sense. Cheers, Kevin

4 6

WiMAX Auth
by Kristoffer Milligan 18 Dec '08

18 Dec '08

Here's my problem: Wed Dec 17 15:53:16 2008 : Info: [wimax] WARNING: WiMAX-MN-NAI was not found in the request or in the reply. Wed Dec 17 15:53:16 2008 : Info: [wimax] WARNING: We cannot calculate MN-HA keys. Wed Dec 17 15:53:16 2008 : Info: [wimax] WARNING: WiMAX-IP-Technology not found in reply. Wed Dec 17 15:53:16 2008 : Info: [wimax] WARNING: Not calculating MN-HA keys My question is, where do I add these replies? I currently have my radius doing its lookups in a MySQL database. - Milligan -

3 4