- Freeradius-Users - lists.freeradius.org

help needed --- jradius configuration with freeradius 2.1.1
by Saeed Akhtar 29 Nov '08

29 Nov '08

Hi, I want to configure jradius with freeradius 2.1.1. I added jradius in modules section of freeradius radiusd.conf file... also added jradius in authorize section. Now when I run send request to freeradius its trace is like this: rlm_jradius: Reserving JRadius socket id: 7 rlm_jradius: packing attribute User-Name (type: 1; len: 7) rlm_jradius: packing attribute User-Password (type: 2; len: 5) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing packet with code: 1 (attr length: 80) rlm_jradius: packing packet with code: 0 (attr length: 0) rlm_jradius: sending 121 bytes to socket 7 rlm_jradius: error sending request with socket 7 rlm_jradius: Closing JRadius connection 7 rlm_jradius: reconnecting socket id 7 rlm_jradius: sending 121 bytes to socket 7 rlm_jradius: error sending request with socket 7 rlm_jradius: problem packing the data[socket_send/first_read] rlm_jradius: Closing JRadius connection 7 rlm_jradius: Released JRadius socket id: 7 +++[jradius] returns noop On the other side I got exception in jradius with is as: java.io.EOFException at java.io.DataInputStream.readFully(DataInputStream.java:180) at java.io.DataInputStream.readFully(DataInputStream.java:152) at net.sf.jradius.packet.PacketFactory.parsePacket(PacketFactory.java:136) at net.sf.jradius.packet.PacketFactory.parse(PacketFactory.java:167) at net.sf.jradius.freeradius.FreeRadiusProcessor.parseRequest(FreeRadiusProcessor.java:76) at net.sf.jradius.freeradius.FreeRadiusProcessor.processRequest(FreeRadiusProcessor.java:55) at net.sf.jradius.server.Processor.process(Processor.java:119) at net.sf.jradius.server.Processor.run(Processor.java:91) net.sf.jradius.freeradius.FreeRadiusProcessor(7): process() method threw an exception: java.lang.NegativeArraySizeException java.lang.NegativeArraySizeException at net.sf.jradius.freeradius.FreeRadiusProcessor.parseRequest(FreeRadiusProcessor.java:79) at net.sf.jradius.freeradius.FreeRadiusProcessor.processRequest(FreeRadiusProcessor.java:55) at net.sf.jradius.server.Processor.process(Processor.java:119) at net.sf.jradius.server.Processor.run(Processor.java:91) Can anyone please help me where is the problem?? Thanks Regards, Saeed Akhtar

1 1

Service-Type based on Unix group of the user
by Artur Rodrigues 29 Nov '08

29 Nov '08

Hi, I am running FreeRADIUS Version 1.1.7 for host i386-redhat-linux-gnu and I have finally managed to get it to work. I use Allied Telesyn routers and used SSH to authenticate to it. To get a more flexible method I decided to go to Radius authentication, using the passwd of the server in wich FreeRADIUS is installed to authenticate the people who need to access the router. Each person who access it have an Unix account on the server. My users file is: DEFAULT Auth-Type = System Service-Type = 7, Login-Service = Telnet The main problem now is that not everyone who have an account in the server should be able to access the router. So I wanted to change the Service-Type parameter according to the group of each user. Is that possible? Thank you for your support and sorry for the bad english.

2 3

Linux radiusclients and Gigaword
by NiTr0 29 Nov '08

29 Nov '08

Is there a Linux radiusclient with pppd module, that supports Gigaword attributes in interim packets?

1 0

Class attribute
by Alexandre Chapellon 29 Nov '08

29 Nov '08

Hello, This message is more precisely direted to Alan. I have noticed that the "Class" attribute as defined in rfc2865 is a string value, but looking at dictionary that comes with freeradius i saw that it's an octet value. As far as I know none of the rfc updating 2865 redefine the class attribute. Is there a reason for this, is it safe to make it a string value?

3 4

broken home server communication
by Alexandre Chapellon 29 Nov '08

29 Nov '08

Hy, I have a weird problem I am proxying accounting to a home server which is an AIX with kind a fault tolerant setup (HACMP). In some situations (HACMP in degraded mode) , this home server responds to my proxied queries with random source IP address. So freeradius doesn't realise the quey has been received and "replied". In addition I have radius listeners (setup as hom servers) on some machines that do not respond the proxied at all (I use to make it work with other radius and so i'm sure it's their "normal" behaviour). How Can I prevent freeradius from checking acknoledgement of proxyed request and just dumbly sends packets... whatever is the state of the home server?

2 1

math operation
by Alexandre Chapellon 29 Nov '08

29 Nov '08

Is it possible to do math operation upon attribute value and have a result that is greater than a 32bit number? (I would like to send this result in an ttribute, to proxy it to a home server)

2 1

802.1x dinamic vlan, using AD information
by Hegedus Gabor 28 Nov '08

28 Nov '08

Hi all, I have a question. I use this combination: cisco 2950 sw as NAS freeRadius 2.1.1 as authenticator, Active Directory as the database, and the win xp client. It wokrs fine. I want one more thing, witch is dynamic vlan assignment. How can I implement it? My idea is enlarge the AD schema with vlanids and get it with freeradius and send to the switch. Is it good? or have an easier better way. I think somebody has met this problem, please tell me the solutions. Thank you. Gabor

2 1

Problem in using counters
by Saeed Akhtar 28 Nov '08

28 Nov '08

Hi all, I have upgraded to Freeradius ver 2.1.1. I want to use counter (using sql) so I added counter.conf in modules, nonresetcounter, dailycounter and monthlycounter in authorize section in default. Also added an entry in radcheck Username=123, attribute = Max-Daily-Session , op = := ,Value = 100. Now when I execute radius and send auth packet for user=123 it goes to sql_rlm and ends up with following error: rlm_sql: Failed to create the pair: Invalid octet string "100" for attribute name "Max-Daily-Session" rlm_sql (sql): Error getting data from database [sql] SQL query error; rejecting user And then it sends Accept-Reject reply Can anyone tell me where is the problem??? Regards, Saeed Akhtar

2 2

Re: Is it possible to recognize clients not by their IP addresses?
by David Mitton 28 Nov '08

28 Nov '08

2 1

Centos 5.2 How To
by Bashir Jahed 28 Nov '08

28 Nov '08

Hi All, New to freeradius I am needs to be said... I have been struggling for days trying to get freeradius installed on Centos 5.2 i386, I get basic pap authentication working but when i try and use authentication with mysql as the db i get errors saying "can't find module sql" when running "radiusd -X" As soon as i uncomment "sql" in "/etc/radddb/sites-enabled/default" file it starts up with no problems. I have started to rebuild the server now as I have broke it trying to fix it out of frustration. Can anyone pint me to the right place to find a decent how to? Thanks Bash

9 29