- Freeradius-Users - lists.freeradius.org

problem installing freeradius
by Tomas D 13 Oct '08

13 Oct '08

Hi, I'm trying to fetch radius from git and install it on my ubuntu server. I'm having some issues compiling radius... Here's what I'm doing; get root@DEV1:~# git clone git://git.freeradius.org/freeradius-server.git radiusd Initialized empty Git repository in /root/radiusd/.git/ remote: Counting objects: 59514, done. remote: Compressing objects: 100% (14414/14414), done. remote: Total 59514 (delta 46293), reused 57698 (delta 44971) Receiving objects: 100% (59514/59514), 11.36 MiB | 2308 KiB/s, done. Resolving deltas: 100% (46293/46293), done. update root@DEV1:~# cd radiusd/ root@DEV1:~/radiusd# git pull origin master:master Already up-to-date. configure ... configure: creating ./config.status config.status: creating Makefile config.status: creating config.h make make[6]: Leaving directory `/root/radiusd/src/modules/frs_detail' Making all in frs_dhcp... make[6]: Entering directory `/root/radiusd/src/modules/frs_dhcp' /bin/sh /root/radiusd/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/root/radiusd/src -I/root/radiusd/libltdl -c frs_dhcp.c libtool: compile: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I/root/radiusd/src -I/root/radiusd/libltdl -c frs_dhcp.c -fPIC -DPIC -o .libs/frs_dhcp.o frs_dhcp.c:183: error: 'RAD_LISTEN_DHCP' undeclared here (not in a function) make[6]: *** [frs_dhcp.lo] Error 1 make[6]: Leaving directory `/root/radiusd/src/modules/frs_dhcp' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/radiusd/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/radiusd/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/radiusd/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/radiusd/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/radiusd' make: *** [all] Error 2 I tried configuring without dhcp (even though it is not enabled by default anyway...) ./configure --without-dhcp but still get same error Can somebody advise please? Companies Act 2006 : http://www.londonmet.ac.uk/companyinfo

2 2

Multiple Radius Instances on the same machine
by HRZ Konten 13 Oct '08

13 Oct '08

Hello all, I am interested in running more than one configuration including different authentification methods and different clients on one machine. I have Freeradius 1.1.7 in production, but I installed and tested Freeradius 2.0.5 because of the virtual servers. I want to run three separated radius instances on one radius server, for example: 1. instance with pam auth for internal clients (means clients list x) 2. instance with eap auth for external clients (means clients list y) 3. instance with pam auth for other external clients (means clients list z) The issue ist that the configurations of the virtual servers are separated but if one error occures in one instance configuration, the whole radius server can't be started. For example when I have a typing error in the config of the virtual server under sites-available like writing "ks pam" instead of "pam" then I can't start the whole server and none of the instances goes up. The problem is that I have many internal and external clients and the configs will be changed often from different people. I don't want that an error in the config for the external clients bothers the instance for internal clients. Furthermore I want to assign some resources to the different instances like max 5 server processes for instance "2" and max 15 server process for instance "1" and "3". But so far I understood it, this section is not in the config of the virtual servers but for the whole server. Therefore I have a few questions - can I run virtual servers without an error in one instance messing the whole server and the rest instances - is there a possibility to assign unequal resources to the separated instances like server processes, threads or number of requests. The goal is to limit the resources for external requests and give more resources to internal requests. - is possible to run several radius processes on one machine (not virtual servers) with different logs and configs. And how should I tell radiusd1 to use the configuration radusd1.conf and radiusd2 to use radiusd2.conf? Best regards, Irina

2 1

freeradius attributes
by Michael 12 Oct '08

12 Oct '08

How do I set freeradius attributes to establish a hotspot prepaid billing system. I'm using freeradius 1.1.7 with daloradius and chillispot. I am completely a newbie with very little knowledge in these things. Any help would be deeply appreciated. Thanks.

1 0

Beginner Help Compile.
by Jack Schneider 12 Oct '08

12 Oct '08

Hi, All I am about to compile per (freeradius 2.1.1 server) INSTALL doc on my Debian Lenny-AMD64 uptodate system. I have seen Debian put things in non-standard places. Are there any gotcha's I should be aware of???? -- What else should I read first? TIA, Jack

2 1

Link problem in v2.1.1
by John Center 12 Oct '08

12 Oct '08

Hi, I think I found a problem when compiling v2.1.1: gmake[4]: *** No rule to make target `-lreadline', needed by `radmin'. Stop. In src/main/Makefile: radmin: radmin.lo $(LIBREADLINE) $(LIBRADIUS) util.lo log.lo conffile.lo $(LIBTOOL) --mode=link $(CC) $(LDFLAGS) $(LINK_MODE) -o $@ $^ $(LIBS) I think it should be: radmin: radmin.lo $(LIBRADIUS) util.lo log.lo conffile.lo $(LIBTOOL) --mode=link $(CC) $(LDFLAGS) $(LINK_MODE) -o $@ $^ $(LIBS) "-lreadline -ltermcap" are already in LIBS in Make.inc, so I don't think LIBREADLINE is needed here. -John -- John Center Villanova University

2 2

Cisco VPN Radius with expiry & Windows domain password expiration
by kesm0724 12 Oct '08

12 Oct '08

Hello All, I have a cisco vpn concentrator and in the past have had it pointed to a Windows IAS Server. I have now switched to Freeradius and have discovered that when a user needs to "Change password on next logon" the cisco vpn client does not prompt for a password change. Prior to moving to Freeradius the password change prompt comes up allowing the user to change their password. On the concentrator I do have "Radius with Expiry" configured and have switched back and forth between the IAS Server and the Freeradius server to ensure it was something particular to the authentication servers not the concentrator. I notice the following in debug: rlm_mschap: Told to do MS-CHAPv2 for test with NT-Password expand: --username=%{mschap:User-Name} -> --username=test mschap2: 83 expand: --challenge=%{mschap:Challenge:-00} -> --challenge=04e843995bfbdbca expand: --nt-response=%{mschap:NT-Response:-00} -> --nt-response=a378afdf127434783890d2e2e4f9d5bd97976a00d2c51fa4 Exec-Program output: Must change password (0xc0000224) Exec-Program-Wait: plaintext: Must change password (0xc0000224) Exec-Program: returned: 1 rlm_mschap: External script failed. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect I have been looking on Google for windows domain password expiry + freeradius amongst other search strings all to no avail. Can anyone tell me what I'm doing wrong? Thanks. -- View this message in context: http://www.nabble.com/Cisco-VPN-Radius-with-expiry---Windows-domain-passwor… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 2

FR 2.1.1 compile failed - Solaris 5.10 x86 64-bit
by Chris Howley 12 Oct '08

12 Oct '08

All, FR2.1.1, Solaris 5.10 x86 64-bit ./configure --enable-developer --without-rlm_perl bash-3.00# gcc -v Reading specs from /usr/sfw/lib/gcc/i386-pc-solaris2.10/3.4.3/specs Configured with: /builds/sfw10-gate/usr/src/cmd/gcc/gcc-3.4.3/configure --prefix=/usr/sfw --with-as=/usr/sfw/bin/gas --with-gnu-as --with-ld=/usr/ccs/bin/ld --without-gnu-ld --enable-languages=c,c++ --enable-shared Thread model: posix gcc version 3.4.3 (csl-sol210-3_4-branch+sol_rpath) The latest source code from git.freeradius.org failed to compile. Any help in fixing this problem would be appreciated. Thanks, Chris Howley gmake[4]: Entering directory `/sandbox/radiusd/src/lib' /bin/sh /sandbox/radiusd/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I/sandbox/radiusd/src -c dict.c /sandbox/radiusd/libtool: syntax error at line 650: `func_arith_result=$' unexpected gmake[4]: *** [dict.lo] Error 2 gmake[4]: Leaving directory `/sandbox/radiusd/src/lib' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/sandbox/radiusd/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/sandbox/radiusd/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/sandbox/radiusd' gmake: *** [all] Error 2

2 1

Asking freeradius for the status
by Michael Schwartzkopff 11 Oct '08

11 Oct '08

Hi, I am just digging into the status server of freeradius. I read man radclient and the comments of status server. But it seems I do nat have the right clue: 1) Copying the example from the man pages of radclient: $ echo "Message-Authenticator = 0x00" | radclient localhost sta tus testing123 results in: Received response ID 137, code 2, length = 20 and not, as described in the manual. What is my error? The logfile of radiusd is: rad_recv: Status-Server packet from host 127.0.0.1 port 32770, id=137, length=38 Message-Authenticator = 0xf068e18b120a18d84d00a1dba1cba97d Sending Access-Accept of id 137 to 127.0.0.1 port 32770 Finished request 0. Cleaning up request 0 ID 137 with timestamp +6 Going to the next request Ready to process requests. 2) How to get other status info from the server? Using the FreeRADIUS-Statistics-Type attribute? How exactly? Please post an example. Thanks for any hints. Sincerely, Michael Schwartzkopff.

2 1

ldap/krb5 auth and access point Authentication methods ?
by FM 11 Oct '08

11 Oct '08

Hello, We are using openldap/kerberos (MIT) and just bought 2 CISCO Aironet 1250. I'd like to use freeradius to auth. our users. I read that freeradius can use openldap and kerberos, so i suppose I will setup these for auth. Most of my Wi-Fi users will be Windows/Mac Os and I'd like to avoid custom installation on the laptops. The question is : Which auth method should I use on the access points ? tx !

3 2

Dialup admin questions
by Frederik.Niedernolte＠Bertelsmann.de 10 Oct '08

10 Oct '08

Does it make it sense to use dialup admin for administration if the freeRADIUS server uses the active directory for authentification? Because I have the following errors in the interface: Warning: asort() expects parameter 1 to be array, null given in /usr/share/freeradius-dialupadmin/htdocs/accounting.php3 on line 47 Warning: mktime() expects parameter 1 to be long, string given in /usr/share/freeradius-dialupadmin/lib/functions.php3 on line 95 Warning: mktime() expects parameter 1 to be long, string given in /usr/share/freeradius-dialupadmin/lib/functions.php3 on line 95 DEBUG(SQL,MYSQL DRIVER): Query: SELECT COUNT(radacctid) AS res_1,sum(acctsessiontime) AS res_2,sum(acctoutputoctets) AS res_3 FROM radacct WHERE username LIKE '%' AND acctstoptime >= '2008-10-11 00:00:00' AND acctstoptime <= '2008-10-11 23:59:59' ; Database query failed: Table 'radius.radacct' doesn't exist DEBUG(SQL,MYSQL DRIVER): Query: SELECT COUNT(radacctid) AS res_1,sum(acctsessiontime) AS res_2,sum(acctoutputoctets) AS res_3 FROM radacct WHERE username LIKE '%' AND acctstoptime >= '2008-10-03 00:00:00' AND acctstoptime <= '2008-10-03 23:59:59' ; Database query failed: Table 'radius.radacct' doesn't exist How should I fix them? Thanks. F. Niedernolte

3 4