- Freeradius-Users - lists.freeradius.org

Sending Accounting Response
by Padam J Singh 13 Dec '08

13 Dec '08

Hello, According to the RFC 2866, it is possible to send back attributes to an accounting update packet sent from a NAS. What I have done is this: The authorization and authentication queries are basically calls to a stored procedure in postgres that returns a set of table type which contains the attribute, operator and value (for authorization), and encrypted password for authentication. I can write a stored procedure to return a set of attributes to send back in an accounting start/update/stop, but all the queries given as examples in the default dialup.conf are update queries that do not return any attribute. How do I configure the postgres module to return the attributes to the NAS? The NAS is an application I have written that parses all attributes sent back after an auth-request and acct-start/update/stop. Thanks, Padam -- PGP Id 9EED2E09

1 0

accounting bug in Mikrotik
by Santiago Balaguer García 12 Dec '08

12 Dec '08

Hi, I am working with freeradius and mikrotik gateway for a long time, but recently I detect in my PostgreSQL database, in radacct table some inconsistencies. First af all, I say that I have the standard configuration file (postgres.sql) for accounting queries. My problem is sometimes the field acctstoptime is full when the user is connected. I can see the user in my hotspot as alive session. What is my problem? the issue is all interim update queries are rejected because the SQL update query does not find the folloing SQL WHERE: AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND FramedIPAddress= '%{Framed-IP-Address}' AND AcctStopTime IS NULL because AcctStopTime = '<date>' When this field is fill in? Another thing is when the acctsopttime is not null, too the acctterminatecause = '' (it is a blank, instad of a NULL value) . Thanks. _________________________________________________________________ Descarga el nuevo Messenger, más divertido que nunca. http://download.live.com/

4 6

freeradius not responding on machine specific IPs
by kevin 12 Dec '08

12 Dec '08

I was loathe to ask a newbie question, but it appears I have one. How does one configure freeradius to listen on all IPs specific to a machine? I have a remote Ubuntu 7.10 server (32bit) which I want to use for authentication via freeradius. It (freeradius 1.1.6-2) installed all nice and is running properly in default config, or it would seem. I cannot get a response when a remote authenticate is made. When I ssh into the server, it appropriately responds to the following: > root@server3:/home/kevin# radtest fred wilma 127.0.0.1 1812 mysecret > Sending Access-Request of id 1 to 127.0.0.1 port 1812 > User-Name = "fred" > User-Password = "wilma" > NAS-IP-Address = 255.255.255.255 > NAS-Port = 1812 > Re-sending Access-Request of id 1 to 127.0.0.1 port 1812 > User-Name = "fred" > User-Password = "wilma" > NAS-IP-Address = 255.255.255.255 > NAS-Port = 1812 > rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=1, length=20 > rad_verify: Received Access-Reject packet from client 127.0.0.1 port 1812 with invalid signature (err=2)! (Shared secret is incorrect.) When I try radtest on the network IP, it fails, as per: > root@server3:/home/kevin# radtest fred wilma 192.168.3.199 1812 mysecret > Sending Access-Request of id 5 to 192.168.3.199 port 1812 > User-Name = "fred" > User-Password = "wilma" > NAS-IP-Address = 255.255.255.255 > NAS-Port = 1812 > Re-sending Access-Request of id 5 to 192.168.3.199 port 1812 > User-Name = "fred" > User-Password = "wilma" > NAS-IP-Address = 255.255.255.255 > NAS-Port = 1812 etc... I have tried setting the listen in Radiusd.conf to be the network IP of the machine (x.x.3.199), but that gave the same results. Any thoughts on what this n00b is doing wrong? Thanks, Kevin

2 2

rpmbuild errors 2.1.3-0
by Andrew Long 12 Dec '08

12 Dec '08

I'm back again trying to build the latest into rpm for our CentOS 5.x servers. I have edited the spec file so Name: freeradius and repacked the tgz so it is freeradius-2.1.3.tar.gz but I get [along@host SPECS]$ rpmbuild -ba --nobuild freeradius.spec Processing files: freeradius-2.1.3-0 error: File not found: /var/tmp/freeradius-root/etc/pam.d/radius error: File not found: /var/tmp/freeradius-root/etc/logrotate.d/radiusd error: File not found: /var/tmp/freeradius-root/etc/rc.d/init.d/radiusd error: File not found by glob: /var/tmp/freeradius-root/etc/raddb/* error: File not found: /var/tmp/freeradius-root/usr/share/doc/freeradius-2.1.3 error: File not found by glob: /var/tmp/freeradius-root/usr/bin/* error: File not found: /var/tmp/freeradius-root/usr/share/freeradius error: File not found by glob: /var/tmp/freeradius-root/usr/lib/* error: File not found by glob: /var/tmp/freeradius-root/usr/share/man/*/* error: File not found by glob: /var/tmp/freeradius-root/usr/sbin/* error: File not found by glob: /var/tmp/freeradius-root/usr/include/freeradius/* error: File not found: /var/tmp/freeradius-root/var/log/radius error: File not found: /var/tmp/freeradius-root/var/log/radius/radacct error: File not found: /var/tmp/freeradius-root/var/run/radiusd Processing files: freeradius-debuginfo-2.1.3-0 error: Could not open %files file /home/along/rpmbuild/BUILD/freeradius-2.1.3/debugfiles.list: No such file or directory RPM build errors: File not found: /var/tmp/freeradius-root/etc/pam.d/radius File not found: /var/tmp/freeradius-root/etc/logrotate.d/radiusd File not found: /var/tmp/freeradius-root/etc/rc.d/init.d/radiusd File not found by glob: /var/tmp/freeradius-root/etc/raddb/* File not found: /var/tmp/freeradius-root/usr/share/doc/freeradius-2.1.3 File not found by glob: /var/tmp/freeradius-root/usr/bin/* File not found: /var/tmp/freeradius-root/usr/share/freeradius File not found by glob: /var/tmp/freeradius-root/usr/lib/* File not found by glob: /var/tmp/freeradius-root/usr/share/man/*/* File not found by glob: /var/tmp/freeradius-root/usr/sbin/* File not found by glob: /var/tmp/freeradius-root/usr/include/freeradius/* File not found: /var/tmp/freeradius-root/var/log/radius File not found: /var/tmp/freeradius-root/var/log/radius/radacct File not found: /var/tmp/freeradius-root/var/run/radiusd Could not open %files file /home/along/rpmbuild/BUILD/freeradius-2.1.3/debugfiles.list: No such file or directory BTW - my last build was via rpmbuild: $ rpm -qv freeradius freeradius-2.0.3-0 Thank you. And look forward to a few more questions... -- I never think of the future - it comes soon enough. - Albert Einstein

1 1

Forging a RADIUS request within a module
by Geoffroy Arnoud 12 Dec '08

12 Dec '08

Hi all, During authentication process, I need to send an Accounting-Start to a network equipment when the authentication is successful (when processing the Access-Request), before sending the Access-Accept back. Is it possible to create the Accounting-Request from inside a module and "post it" as an event, to let FreeRADIUS core manage processing/sending? If not, I will have to trigger an external radiusclient to do the job. Thanks for your answers. Geoff.

5 6

Re: domain security problem
by tnt＠kalik.net 12 Dec '08

12 Dec '08

>here is the debug: (user-test- who is not in domain Well, he was found in AD. And in that domain. And with correct password. >[mschap] expand: --domain=%{mschap:NT-Domain} -> --domain=TEST >[mschap] expand: --username=%{mschap:User-Name} -> --username=test >[mschap] mschap2: 10 > >[mschap] expand: --challenge=%{mschap:Challenge:-00} -> --challenge=ad923676ac4c1b76 [mschap] expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=2b4dda1057bbf603f10d79c87e09e6203b600788c29e7ff5 >Exec-Program output: NT_KEY: 2066656E05C22F3A995AD9ECFED913D6 >Exec-Program-Wait: plaintext: NT_KEY: 2066656E05C22F3A995AD9ECFED913D6 >Exec-Program: returned: 0 >[mschap] adding MS-CHAPv2 MPPE keys >++[mschap] returns ok >MSCHAP Success Ivan Kalik Kalik Informatika ISP

2 8

Problem with Freeradius and WiMAX
by Kristoffer Milligan 12 Dec '08

12 Dec '08

Good day list This is my first post to the list, so let me open by congratulating on a great piece of software. I'm impressed. I have the pleasure of working with WiMAX and a system called 4motion. We have chosen to use FreeRadius as our AAA server, but are experiencing some problems. http://pastebin.com/m269e9250 As far as I can tell, everything is fine till I get the "[eap] NAK asked for unsupported type 21" error? Could anyone give me any pointer or ideas about what I am doing wrong, and how I can fix it? Sincerely, Kristoffer Milligan

2 1

SUN_LEN Error
by Anton Borisov 12 Dec '08

12 Dec '08

Good day! I try to use new version 2.1.3 in Solaris10. (uname -a SunOS xxxxx 5.10 Generic_125100-06 sun4u sparc SUNW,Netra-240) I have installed 2.1.1 - ./configure + make + make install - all of them work fine, but when I try to make new version I get error: ./configure is ok, make is: ... ... ... creating .libs/radiusdS.c (cd .libs && gcc -g -O2 -c -fno-builtin "radiusdS.c") rm -f .libs/radiusdS.c .libs/radiusd.nm .libs/radiusd.nmS .libs/radiusd.nmT gcc .libs/radiusdS.o -o .libs/radiusd .libs/acct.o .libs/auth.o .libs/client.o .libs/conffile.o .libs/crypt.o .libs/exec.o .libs/files.o .libs/listen.o .libs/log.o .libs/mainconfig.o .libs/modules.o .libs/modcall.o .libs/radiusd.o .libs/stats.o .libs/session.o .libs/threads.o .libs/util.o .libs/valuepair.o .libs/version.o .libs/xlat.o .libs/event.o .libs/realms.o .libs/evaluate.o .libs/vmps.o .libs/detail.o /usr/local/src/freeradius-server-2.1.3/src/lib/.libs/libfreeradius-radius.so -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypt /usr/local/src/freeradius-server-2.1.3/libltdl/.libs/libltdl.so -ldl -R/opt/fr2/lib Undefined first referenced symbol in file SUN_LEN .libs/listen.o ld: fatal: Symbol referencing errors. No output written to .libs/radiusd collect2: ld returned 1 exit status make[4]: *** [radiusd] Error 1 make[4]: Leaving directory `/opt/src/freeradius-server-2.1.3/src/main' make[3]: *** [common] Error 2 make[3]: Leaving directory `/opt/src/freeradius-server-2.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/opt/src/freeradius-server-2.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/opt/src/freeradius-server-2.1.3' make: *** [all] Error 2 So, would you be so kind and tell me, where I make my mistake... -- Yours faithfully, Anton Borisov.

2 2

Configuration sample CDMA-EVDO
by Aldo 12 Dec '08

12 Dec '08

Hello, could please somebody provide a configuration sample of a CDMA network which provides EVDO using RADIUS? Thanks

2 1

rad_recv: Access-Reject #plz ignore the previous letter
by Ilya 12 Dec '08

12 Dec '08

hello! debugging freeRADIUS i met the problem like this: 'rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=194, length=20' At the beginning I thought that the problem was in the users file but in radiusd.log I saw the message: rlm_sql (sql): Driver rlm_sql_oracle (module rlm_sql_oracle) loaded and linked rlm_sql (sql): Attempting to connect to radius@localhost:/raddb rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_oracle #0 rlm_sql_oracle: Couldn't init Oracle OCI environment (OCIEnvCreate()) rlm_sql (sql): Failed to connect DB handle #0 rlm_sql (sql): starting 1 rlm_sql (sql): starting 2 rlm_sql (sql): starting 3 rlm_sql (sql): starting 4 rlm_sql (sql): Failed to connect to any SQL server. Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique what's wrong? could anybody help me plz? radiusd -X log , users file and cliens.conf is attached. have a good day, ilya ________________________________ ilya vishnyov billing department baykalwestcom 68, 2-zheleznodorozhnaya str., irkutsk, 664005, russia gsm: +7 9025 113 992 e-mail: ilya(a)bwc.ru icq #: 988-0-229 ________________________________

2 1