- Freeradius-Users - lists.freeradius.org

voip accounting
by Noel Rwamatsika 25 Oct '08

25 Oct '08

Hi there, I have setup a SuSE 11 server with freeradius and mysql. The freeradius and mysql are rpm packages from the SuSE 11 dvd. How can I setup voip accounting on this server? Which files should I configure in mysql and freeradius and how should i do it? regards, Noel

2 1

Tr : error when using radtest
by ELOM ETSE 24 Oct '08

24 Oct '08

Please i need your help for this error message i get when i want to use radtest utility. #radtest jerry cool 127.0.0.1:1812 0 testing123 Here are results i get: Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 radclient: no response from server for ID 197 socket 3 Here is the result of the command radiusd -X: Starting - reading configuration files ... client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Loading Realms and Home Servers #### home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_check = "none" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "tls" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "EsCuJePaII" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } Module: Linked to module rlm_sql Module: Instantiating sql sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "****" password = "*****" radius_db = "radius" read_groups = yes sqltrace = no sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" readclients = yes deletestalesessions = yes num_sql_socks = 5 sql_user_name = "%{User-Name}" default_user_profile = "" Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 192.168.1.30 port = 1812 } listen { type = "acct" ipaddr = * port = 1813 } Listening on authentication address 192.168.1.30 port 1812 Listening on accounting address * port 1813 Listening on proxy address 192.168.1.30 port 1814 Ready to process requests. I can get this message with radtest: Ignoring request to authentication address 192.168.1.30 port 1812 from unknown client 192.168.1.30 port 59982 Ready to process requests. Please help me ________________________________ ETSE Elom, Etudiant en fin de formation en informatique au CIC/UL-TOGO ________________________________

1 0

SMD5 format, for hash and salt?
by Julie Starr 24 Oct '08

24 Oct '08

I'm using FreeRADIUS v 2.1.1 on CentOS 5.2. I have everything working well, where I'm reading the user file for Cleartext and MD5 hashes. Here are two examples from my user file: bob Cleartext-Password := "testing123" carol MD5-Password := "f30aa7a662c728b7407c54ae6bfd27d1" (where carol's password is just hello123) However, it appears the data I have access to is actually stored as salted MD5 hashes. An example of an SMD5 hash that doesn't work in my user file: abe SMD5-Password := "37d0aa2d0d2b1f282eb2b393c9413998:rqZAS049NrEgN9bD" (where the above is :=salted MD5 hash:salt) I see the rlm_pap man page lists SMD5-Password as an attribute, but I'm at a loss as to the correct format for the MD5 hash and its associated salt. I've tried not just the colon above, but a semicolon, dash, period, a space, or tacked the salt to the beginning or to the end. I tried looking through the src, but couldn't figure it out. The output from radiusd -X and radtest for user abe is: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 55280, id=91, length=55 User-Name = "abe" User-Password = "hellojulie" NAS-IP-Address = 127.0.0.1 NAS-Port = 1812 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "abe", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound [files] users: Matched entry abe at line 3 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP +- entering group PAP {...} [pap] login attempt with password "hellojulie" [pap] Using SMD5 encryption. [pap] Passwords don't match ++[pap] returns reject Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> abe attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 91 to 127.0.0.1 port 55280 Waking up in 4.9 seconds. And if anyone is curious, I was told this is how these particular SMD5 entries I was given were generated: function mosMakePassword($length=8) { $salt = "abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789"; $makepass = ''; mt_srand(10000000*(double)microtime()); for ($i = 0; $i < $length; $i++) $makepass .= $salt[mt_rand(0,61)]; return $makepass; } list($hash, $salt) = explode(':', $row->password); $cryptpass = md5($passwd.$salt); if ($hash != $cryptpass) { if ( $bypost ) { mosErrorAlert(_LOGIN_INCORRECT); } else { $this->logout(); mosRedirect('index.php'); } exit(); } If anyone has any ideas or point out what I've completely misunderstood, please let me know. thanks, Julie

1 0

undefined symbol: eaptls_session_idx
by Pat Riehecky 24 Oct '08

24 Oct '08

I built my own version of freeradius from the ubuntu package for 8.10. The ubuntu version stamp on it is 2.1.0+dfsg-0ubuntu2 so I expect it is freeradius 2.1.0 (and the source confirms this). I modified the package scripts so that I can link the program to openssl and get the eap modules. The program built without a hitch so I was a bit shocked to find that I get a linking error when I start the server. What can I do to fix this? Ubuntu 8.04, x86 My guess is recompile, but without knowing what I did wrong I will just get a bad build again and again and again. <snip> Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no max_sessions = 2048 } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } rlm_eap: Failed to link EAP-Type/tls: /usr/lib/freeradius/rlm_eap_tls.so: undefined symbol: eaptls_session_idx /etc/freeradius/eap.conf[17]: Instantiation failed for module "eap" /etc/freeradius/sites-enabled/inner-tunnel-ldap[223]: Failed to find module "eap". /etc/freeradius/sites-enabled/inner-tunnel-ldap[176]: Errors parsing authenticate section. } } Errors initializing modules

1 0

error when using radtest
by ELOM ETSE 24 Oct '08

24 Oct '08

Please i need your help for this error message i get when i want to use radtest utility. #radtest jerry cool 127.0.0.1:1812 0 testing123 Here are results i get: Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 Sending Access-Request of id 197 to 192.168.1.30 port 1812 User-Name = "jery" User-Password = "cool" NAS-IP-Address = 127.0.1.1 NAS-Port = 43459 radclient: no response from server for ID 197 socket 3 Here is the result of the command radiusd -X: Starting - reading configuration files ... client localhost { ipaddr = 127.0.0.1 require_message_authenticator = no secret = "testing123" nastype = "other" } radiusd: #### Loading Realms and Home Servers #### home_server localhost { ipaddr = 127.0.0.1 port = 1812 type = "auth" secret = "testing123" response_window = 20 max_outstanding = 65536 zombie_period = 40 status_check = "status-server" ping_check = "none" ping_interval = 30 check_interval = 30 num_answers_to_alive = 3 num_pings_to_alive = 3 revive_interval = 120 status_check_timeout = 4 } home_server_pool my_auth_failover { type = fail-over home_server = localhost } realm example.com { auth_pool = my_auth_failover } realm LOCAL { } radiusd: #### Instantiating modules #### instantiate { Module: Linked to module rlm_exec Module: Instantiating exec exec { wait = no input_pairs = "request" shell_escape = yes } Module: Linked to module rlm_expr Module: Instantiating expr Module: Linked to module rlm_expiration Module: Instantiating expiration expiration { reply-message = "Password Has Expired " } Module: Linked to module rlm_logintime Module: Instantiating logintime logintime { reply-message = "You are calling outside your allowed timespan " minimum-timeout = 60 } } radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "tls" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/server.pem" certificate_file = "/usr/local/etc/raddb/certs/server.pem" CA_file = "/usr/local/etc/raddb/certs/ca.pem" private_key_password = "EsCuJePaII" dh_file = "/usr/local/etc/raddb/certs/dh" random_file = "/usr/local/etc/raddb/certs/random" fragment_size = 1024 include_length = yes check_crl = no cipher_list = "DEFAULT" } Module: Linked to sub-module rlm_eap_ttls Module: Instantiating eap-ttls ttls { default_eap_type = "md5" copy_request_to_tunnel = no use_tunneled_reply = no virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_peap Module: Instantiating eap-peap peap { default_eap_type = "mschapv2" copy_request_to_tunnel = no use_tunneled_reply = no proxy_tunneled_request_as_eap = yes virtual_server = "inner-tunnel" } Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } Module: Linked to module rlm_sql Module: Instantiating sql sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "****" password = "*****" radius_db = "radius" read_groups = yes sqltrace = no sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" readclients = yes deletestalesessions = yes num_sql_socks = 5 sql_user_name = "%{User-Name}" default_user_profile = "" Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 192.168.1.30 port = 1812 } listen { type = "acct" ipaddr = * port = 1813 } Listening on authentication address 192.168.1.30 port 1812 Listening on accounting address * port 1813 Listening on proxy address 192.168.1.30 port 1814 Ready to process requests. I can get this message with radtest: Ignoring request to authentication address 192.168.1.30 port 1812 from unknown client 192.168.1.30 port 59982 Ready to process requests. Please help me ________________________________ ETSE Elom, Etudiant en fin de formation en informatique au CIC/UL-TOGO ________________________________

3 2

any other suggestions?
by Martin Silvero 24 Oct '08

24 Oct '08

I want to achieve is to create a certificate for several machines and use TLS - I created all the certificates as they said in README, I tried and nothing. - I created the certificates according to README and follow some tips here: https: / / lists.freeradius.org/pipermail/freeradius-users/2008-October/msg00460.html and nothing - I made several attempts over the HOWTO wiki and nothing Is there the possibility that some other configuration may be restricting me to run my radius? no longer must try. if something happens they hear suggestions. now thank you very much for your help. if need something tellme and I post

2 1

problem reading users file
by Mohammad Belgaumkar 24 Oct '08

24 Oct '08

Hi I have configured freeradius for EAP AKA by applying the patch. I m using radeapclient to test it. Below is my configuration for server in raddb/users file DEFAULT Auth-Type := EAP, EAP-Type := AKA EAP-Sim-AUTN=0xa0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0 EAP-Aka-IK=0xb0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0 EAP-Aka-CK=0xc0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0 EAP-Sim-RES=0xd0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0 EAP-Sim-RAND=0xe0e0e0e0e0e0e0e0e0e0e0e0e0e0e0e0 But i get this "eap-aka can not find EAP-Sim-RAND" error in server Please help Regards Mohammad Arif Belgaumkar L&T Infotech Ltd, Whitefield, Bangalore - 66 Ph - 91-80-66242424 extn 2018 www.Lntinfotech.com ( ) L&T Infotech General Business (+) L&T Infotech Internal Use ( ) L&T Infotech Confidential ( ) L&T Infotech Proprietary Larsen & Toubro Infotech Ltd. www.Lntinfotech.com This Document is classified as: |------| | [X] | |------|L&T Infotech Proprietary |------| | [ ] | |------|L&T Infotech Confidential |------| | [ ] | |------| L&T Infotech Internal Use Only |------| | [ ] | |------|L&T Infotech General Business This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

3 3

FreeRadius and MAC OS X Install
by Saurabh Bhasin 24 Oct '08

24 Oct '08

Folks, I've been trying to compile (using MacPorts 1.600) freeradius on Leopard (10.5.5) and continue to get the following error. I've been able to trace this down to https://trac.macports.org/ticket/13503 but it looks like there was no closure there and nothing definitive on what's supposed to work....I'd appreciate if you could please point me in the right direction. ---> Building freeradius with target all Error: Target org.macports.build returned: shell command " cd "/opt/ local/var/macports/build/ _opt_local_var_macports_sources_rsync .macports.org_release_ports_sysutils_freeradius/work/freeradius- server-2.0.4" && make all " returned error 2 Command output: Making all in rlm_krb5... make[6]: Nothing to be done for `all'. Making all in rlm_ldap... Making all in rlm_logintime... Making all in rlm_mschap... Making all in rlm_otp... Making all in rlm_pam... Making all in rlm_pap... Making all in rlm_passwd... Making all in rlm_perl... /opt/local/var/macports/build/ _opt_local_var_macports_sources_rsync .macports.org_release_ports_sysutils_freeradius/work/freeradius- server-2.0.4/libtool --mode=link /usr/bin/gcc-4.0 -release 2.0.4 \ -module -export-dynamic -L/opt/local/lib -o rlm_perl.la \ -rpath /opt/local/lib rlm_perl.lo rlm_perl.c /opt/local/var/macports/ build/ _opt_local_var_macports_sources_rsync .macports.org_release_ports_sysutils_freeradius/work/freeradius- server-2.0.4/src/lib/libfreeradius-radius.la `perl -MExtUtils::Embed - e ldopts` -framework DirectoryService -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the *** static library /System/Library/Perl/5.8.8/darwin-thread- multi-2level/auto/DynaLoader/DynaLoader.a is not portable! rm -fr .libs/rlm_perl-2.0.4.so .libs/rlm_perl.a .libs/rlm_perl.so /usr/bin/gcc-4.0 ${wl}-flat_namespace ${wl}-undefined ${wl}suppress - o .libs/rlm_perl-2.0.4.so -bundle .libs/rlm_perl.o -L/opt/local/lib / opt/local/var/macports/build/ _opt_local_var_macports_sources_rsync .macports.org_release_ports_sysutils_freeradius/work/freeradius- server-2.0.4/src/lib/.libs/libfreeradius-radius.dylib -L/usr/local/ lib /System/Library/Perl/5.8.8/darwin-thread-multi-2level/auto/ DynaLoader/DynaLoader.a -L/System/Library/Perl/5.8.8/darwin-thread- multi-2level/CORE -lperl -ldl -lm -lutil -lc -lresolv -lpthread -arch i386 -arch ppc -framework DirectoryService ld warning: in /opt/local/var/macports/build/ _opt_local_var_macports_sources_rsync .macports.org_release_ports_sysutils_freeradius/work/freeradius- server-2.0.4/src/lib/.libs/libfreeradius-radius.dylib, file is not of required architecture (cd .libs && rm -f rlm_perl.so && ln -s rlm_perl-2.0.4.so rlm_perl.so) ar cru .libs/rlm_perl.a /System/Library/Perl/5.8.8/darwin-thread- multi-2level/auto/DynaLoader/DynaLoader.a rlm_perl.o /System/Library/ Perl/5.8.8/darwin-thread-multi-2level/auto/DynaLoader/DynaLoader.a ranlib: archive member: .libs/rlm_perl.a(DynaLoader.a) fat file for cputype (18) cpusubtype (0) is not an object file (bad magic number) ar: internal ranlib command failed make[6]: *** [rlm_perl.la] Error 1 make[5]: *** [common] Error 2 make[4]: *** [all] Error 2 make[3]: *** [common] Error 2 make[2]: *** [all] Error 2 make[1]: *** [common] Error 2 make: *** [all] Error 2 Error: Status 1 encountered during processing. Thanks, -Saurabh

5 5

Re: Redback attributes
by Alexandre Chapellon 23 Oct '08

23 Oct '08

Le 22.10.2008 12:16, Chris a écrit : > Are you certain it didn't tear down the session and immediately > rebuild it? That's what I would expect it to do. I'm gonna check this > > You need to somehow use RADIUS accounting to update a database that > the RADIUS server will use to Access-Reject further connection > attempts. The Redback isn't going to keep track of anything like that. Of course, the NAS doesn't make any decision about authenticating > > Sorry, but I don't have anything more for you, though I would be > really surprised if nobody had written such a beast already. If not > specifically for the Redback, then another NAS. > > Take a look at rlm_counter. It works already for Session-Timeout > > On Oct 22, 2008, at 3:05 PM, Alexandre Chapellon wrote: > >> Hello, >> >> I have redback NASes for bringing up DSL connections. >> I would like to make the RedBack boxes bring connection down for a user >> once he has reached his total amount of traffic allowed (UP+DOWN). >> Does anyone using redback devices (or not!) knows how to achive this? I >> tried sending the Session-Traffic-Limit to the boxes, but it didn't >> seemed to change anything! >> Does anyone knows what this attribute is for? >> >> regards >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > >

2 3

more proxy problems
by Paul A 23 Oct '08

23 Oct '08

Hi, hoping someone has some advise on thise but I had DNIS proxy working and im not sure what I did and now it has stopped working. In the acct_users file I have DEFAULT Called-Station-Id == "5500", Proxy-To-Realm := "xxx" Fall-Through = yes In the proxy file I have realm xxx { type = radius authhost = xxxx:1645 accthost = xxxx:1646 secret = something } But when I test it never seems to trigger the DNIS proxy setup. This is what I get below, also named realms are working. rad_recv: Access-Request packet from host 209.213.66.12:1650, id=114, length=94 User-Name = "ectest" User-Password = "test123" NAS-IP-Address = 127.0.0.1 NAS-Port = 1 Called-Station-Id = "5500" Proxy-State = 0x471e493f7f0000010495000000000000000000000000000000000000 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "ectest", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 modcall[authorize]: module "files" returns notfound for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list ---

2 1