- Freeradius-Users - lists.freeradius.org

Logging eap protocols
by Richard Timsit 04 Dec '08

04 Dec '08

Hello, i am using a Freeradius 2.1.1. I need logging authentication method by User-Name. I am trying using linelog module for this... but i don't know how to retrieve the information. Does anyone has a clue ? Thanks. -- Richard Timsit <Richard.Timsit(a)epfl.ch> EPFL DIT-TI

4 5

Re: Time based billing
by Sebo PL 04 Dec '08

04 Dec '08

I think it could be done by some special DB function. You can write one in plpgsql, then you can exec it using the sql radius module. 2008/12/3 regs(a)kinetix.gr <regs(a)kinetix.gr> These situations are often in the VoIP billing world. If the rate changes > during a call there is little > you can do in a prepaid billing system (in a postpaid situation this is not > a problem). You have to choose > either to bill your customer with the rate that is valid at the beginning > of the call or at the end of it. Most of the > implemantations choose to bill the customer with the rate that is valid at > the end of the call. I know > this is somewhat inconsistent because if you calculate the remaining time > with a low rate and the rate changes > during the call then you might end up with a negative credit on your > prepaid customer's balance. There is little > you can do to about that. You just have to choose one of the options above > and notify your customers > about your decision. The thing is that all this - although scary at first > sight - is somewhat balanced in the end > (fair-wise) because the probabilities that your customer can make a call > during a low-to-high rate change are > equal with the probabilities that the call follows a high-to-low rate > change. So in the end nobody really loses or wins. > > You don't have to be a perl expert to use the rlm_perl module. But I can > tell you from my experience that it > gives you control of all different scenarios that may arise. Your back-end > could (usually a DB in these situations) > be as complex as you like (pricelists per customer, per time-slice, per > type, per u-name-it), and your code could > be as complex as you like (and as dynamic as you like) using a 3rd > generation language that gives the flexibility to > do whatever you want. > > > > Alan DeKok wrote: > > Saeed Akhtar wrote: > > > Yes I know that freeradius doesn't know whether we are charging $ 1 or > 2. But the purpose of asking question was that If a user has 3 hrs left > @ $1/hr and after an hour the rate changes to 0.5/hr then technically > freeradius should reply Session-Timeout = 5hrs as (1hr @ $1/hr + 4hrs @ > $0.5/hr). So may be we can create some condition to do so. > > > See the "expr" module. It has limited support for some math expressions. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

3 2

Looking for freelance help to create a custom freeradius module for a 2-factor authentication
by Joshua Lim 03 Dec '08

03 Dec '08

Note: Sorry, please ignore my other post with no subject. I'm a newbie, i'm looking for freelance help to create a custom freeradius module for a 2-factor authentication requirement. If you are keen, you can find more details over here - http://www.rentacoder.com/RentACoder/misc/BidRequests/ShowBidRequest.asp?ln… Thank you. Rgds, Joshua _________________________________________________________________ Easily publish your photos to your Spaces with Photo Gallery. http://get.live.com/photogallery/overview

1 0

(no subject)
by Joshua Lim 03 Dec '08

03 Dec '08

Hi, I'm a newbie, i'm looking for freelance help to create a custom freeradius module for a 2-factor authentication requirement. If you are keen, you can find more details over here - http://www.rentacoder.com/RentACoder/misc/BidRequests/ShowBidRequest.asp?ln… Thank you. Rgds, Joshua _________________________________________________________________ Join the Fantasy Football club and win cash prizes here! http://fantasyfootball.sg.msn.com

1 0

Make error
by Olavo 03 Dec '08

03 Dec '08

Hello all, I am trying again with this issue hoping that someone can take a look at it. I am trying to compile on a RedHat ES5, 64 bits. Any help will be very much appreciated. thanks Olavo Hi again, It didn't "make" . It has returned errors. .libs/radmin.o: In function `main': /usr/src/freeradius-server-2.1.1/src/main/radmin.c:489: undefined reference to `readline' /usr/src/freeradius-server-2.1.1/src/main/radmin.c:411: undefined reference to `using_history' /usr/src/freeradius-server-2.1.1/src/main/radmin.c:412: undefined reference to `rl_insert' /usr/src/freeradius-server-2.1.1/src/main/radmin.c:412: undefined reference to `rl_bind_key' /usr/src/freeradius-server-2.1.1/src/main/radmin.c:498: undefined reference to `add_history' collect2: ld returned 1 exit status gmake[4]: *** [radmin] Error 1 gmake[4]: Leaving directory `/usr/src/freeradius-server-2.1.1/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/usr/src/freeradius-server-2.1.1/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/usr/src/freeradius-server-2.1.1/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/usr/src/freeradius-server-2.1.1' make: *** [all] Error 2 Olavo > -----Original Message----- > From: > freeradius-users-bounces+jsantos5954=gmail.com(a)lists.freeradiu > s.org > [ <mailto:freeradius-users-bounces+jsantos5954=gmail.com@lists.f> mailto:freeradius-users-bounces+jsantos5954=gmail.com@lists.f > reeradius.org] On Behalf Of Alan DeKok > Sent: Wednesday, November 19, 2008 1:14 PM > To: FreeRadius users mailing list > Subject: Re: configure error > > > Olavo wrote: > > I downloaded version 2.1 from <http://freeradius.org/download.html> http://freeradius.org/download.html . > > When configuring ( ./configure) I got several errors on config.log. > > The only reason to look at that file is to debug the > "configure" scripts. The log is SUPPOSED to be full of > errors, because it's testing for platforms other than the one > you're using. > > Don't look at it. > > Perhaps you could explain if there are *other* errors. > Like maybe you're trying to do something... ? Right now, all > it looks like is you're trying to understand the contents of > "config.log", which is a complete waste of time. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > <http://www.freeradius.org/list/users.html> http://www.freeradius.org/list/users.html >

10 31

PAM to authenticate - ldap to authorize?
by Zahid Mehmood 03 Dec '08

03 Dec '08

Hi, I have freeradius 2.0.5 configured to use pam (using kerb) for user authentication. I am trying to find out if it is possible to limit access based on ldap groups. I've checked the list archive as well as the web and am not able to find a solution. I'd appreciate it very much if someone can provide some guidance/tips in this regard. Thanks. -- Zahid

2 1

Problem with CPU load
by Angel L. Mateo 03 Dec '08

03 Dec '08

Hello, We have a debian server (debian 4.0 etch) running freeradius 1.1.7. We have compile it from debian source package, but including eap_tls and eap_ttls support. Our user repository is an LDAP server (openldap 2.3.30) running in another host. This radius server is a Xen virtual machine with 512MB of RAM. The problem we have is that sometimes it loads the CPU too much. An uptime of the host reports loads over 100 points and a 99% of CPU utilization. These loads last least than a minute, but during this minute, you can't authorize anybody. Any idea of what could be happening? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información _o) y las Comunicaciones Aplicadas (ATICA) / \\ http://www.um.es/atica _(___V Tfo: 968367590 Fax: 968398337

2 1

Re[4]:
by NiTr0 03 Dec '08

03 Dec '08

> I will do probably do it. The network have more than 100 computer, and > i have seen that the ldap can be used by Freeradius. That way, the > second method of authentification come by itself. For MAC-only auth security it doesn't matter how many PCs in network. The only thing that is matter - # of PCs in subnet. Because subnets are physically splitted by router.

1 0

(no subject)
by Sebastien Serre 03 Dec '08

03 Dec '08

Hi all, I have to implement my first freeradius, and after a search in the faq and the net, an interrogation still remain. I need to authenticate machines, to grant them normal access to the lan, and if they are not known , put them on a special VLAN. I was think to do that with MAC address, but i know they can be easily spoofed. I m reading the book of FreeRadius (Oreilly), and there is a doubt for the usage of Radius in this case of figure. Could someone give me keyword or suggestions that can help me in my search? At least, may i persist in the way of using radius in this case? Thanks

3 3

Time based billing
by Saeed Akhtar 03 Dec '08

03 Dec '08

Hi all, I want to ask that if there is some kind of flexibility in freeradius to have time based billing. I want a customer to be charged at different rate at different time. Like I want to introduce a package which has different rate at morning eg. $1/hr from 0800 to 1200 then 0.5/hr from 1200 to 1800 then 0.25/hr from 1800 to 0800hrs. Now what should I do. I know that there are sqlcounters but these are for flat rates. Now is there any flexibility to do so. And if not then is there any plugable module available by which i could achieve this. I'll be thankful for your help Regards, Saeed Akhtar

6 6