- Freeradius-Users - lists.freeradius.org

freeradius 2.1.0 default mysql schema don't have nasidentifier table
by piston 23 Sep '08

23 Sep '08

freeradius 2.1.0 default mysql schema don't have nasidentifier table. And the mysql query in dialup.conf also don't have nasidentifier value. It is purposely left out the nasidentifier? My work around is adding nasidentifier and it's value as below. accounting_start_query = " \ INSERT INTO ${acct_table1} \ (acctsessionid, acctuniqueid, username, \ realm, nasipaddress, nasidentifier, nasportid, \ nasporttype, acctstarttime, acctstoptime, \ acctsessiontime, acctauthentic, connectinfo_start, \ connectinfo_stop, acctinputoctets, acctoutputoctets, \ calledstationid, callingstationid, acctterminatecause, \ servicetype, framedprotocol, framedipaddress, \ acctstartdelay, acctstopdelay, xascendsessionsvrkey) \ VALUES \ ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', \ '%{SQL-User-Name}', \ '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Identifier}', '%{NAS-Port}', \ '%{NAS-Port-Type}', '%S', NULL, \ '0', '%{Acct-Authentic}', '%{Connect-Info}', \ '', '0', '0', \ '%{Called-Station-Id}', '%{Calling-Station-Id}', '', \ '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', \ '%{%{Acct-Delay-Time}:-0}', '0', '%{X-Ascend-Session-Svr-Key}')" accounting_stop_query_alt = " \ INSERT INTO ${acct_table2} \ (acctsessionid, acctuniqueid, username, \ realm, nasipaddress, nasidentifier, nasportid, \ nasporttype, acctstarttime, acctstoptime, \ acctsessiontime, acctauthentic, connectinfo_start, \ connectinfo_stop, acctinputoctets, acctoutputoctets, \ calledstationid, callingstationid, acctterminatecause, \ servicetype, framedprotocol, framedipaddress, \ acctstartdelay, acctstopdelay) \ VALUES \ ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', \ '%{SQL-User-Name}', \ '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Identifier}', '%{NAS-Port}', \ '%{NAS-Port-Type}', \ DATE_SUB('%S', \ INTERVAL (%{%{Acct-Session-Time}:-0} + \ %{%{Acct-Delay-Time}:-0}) SECOND), \ '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', \ '%{Connect-Info}', \ '%{%{Acct-Input-Gigawords}:-0}' << 32 | \ '%{%{Acct-Input-Octets}:-0}', \ '%{%{Acct-Output-Gigawords}:-0}' << 32 | \ '%{%{Acct-Output-Octets}:-0}', \ '%{Called-Station-Id}', '%{Calling-Station-Id}', \ '%{Acct-Terminate-Cause}', \ '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', \ '0', '%{%{Acct-Delay-Time}:-0}')"

2 1

SQL and ippool
by Xiaochen Jing 23 Sep '08

23 Sep '08

Hello all, The scenario will be: when Freeradius receives a user request, it forwards it to SQL server (local or remote) for authenticating the username/password. If the username/password is valid, then Freeradius will use a certain ippool to assign IP address to the user, based on username. Can this be accomplished? I am wondering, when SQL sends a reply back to Freeradius, how can Freeradius knows what ippool it should use to assign IP based on user name? Can anyone shed some light on it? Thanks in advance

5 5

..::Segmentation Fault::..
by Ing. Alfonso Reyes 23 Sep '08

23 Sep '08

Hi Team. This is my first alias, the reason of this alias is because I have a freeradius server on my server to provide authentication, everything was working fine until I tried to set it up to use mysql, after I configure my server to check the mysql database I'm getting the segmentation fault issue and I can't even start the radius server, any ideas? Configuration files and error attached. Thanks for your help. Have a great day. Alfonso.

2 1

autentication against active directory does not work
by luis a 22 Sep '08

22 Sep '08

hey there i have a trouble in my freeradius im trying to autenticate user to active directory there is my config at http://pastebin.ca/1205169 any help ? regards

5 8

another 2.1.0 compile error
by Greg Woods 22 Sep '08

22 Sep '08

I am running on CentOS 5.2 on an x86_64 architecture. I note a previous report for a similar system here on the list, but this is not the same error. That one was an error compiling radmin, this is an error compiling the server: gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/local/src/freeradius-server-2.1.0/src -DHOSTINFO= \"x86_64-unknown-linux-gnu\" -DRADIUSD_VERSION=\"2.1.0\" -DOPENSSL_NO_KRB5 -c listen.c -fPIC -DPIC -o .libs/listen.o listen.c: In function 'client_listener_find': listen.c:189: warning: assignment discards qualifiers from pointer target type In file included from command.c:26, from listen.c:1046: /local/src/freeradius-server-2.1.0/src/freeradius-devel/modpriv.h:9:18: error: ltdl.h: No such file or directory In file included from command.c:26, from listen.c:1046: /local/src/freeradius-server-2.1.0/src/freeradius-devel/modpriv.h: At top level: /local/src/freeradius-server-2.1.0/src/freeradius-devel/modpriv.h:30: error: expected specifier-qualifier-list before 'lt_dlhandle' gmake[4]: *** [listen.lo] Error 1 gmake[4]: Leaving directory `/local/src/freeradius-server-2.1.0/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/local/src/freeradius-server-2.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/local/src/freeradius-server-2.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/local/src/freeradius-server-2.1.0' make: *** [all] Error 2 I realize this isn't a complete enough report to fully debug this, I'm just curious to know if anyone else has seen this one or whether it's something obvious. I also know that the ltdl.h file is actually there in the libltdl subdirectory, so I can probably figure out how to get around this if I have to. --Greg

9 39

mod_radius error
by Oguzhan Kayhan 22 Sep '08

22 Sep '08

Hello I am trying to use mod_radius on ubuntu. But i am getting error: Invalid command 'AddModule', perhaps misspelled or defined by a module not included in the server configuration. When i comment out the line with AddModule from httpd.conf i got the following error message. Invalid command 'AuthAuthoritative', perhaps misspelled or defined by a module not included in the server configuration. These are the enabled modules on apache alias.conf authn_file.load authz_host.load cgi.load mime.conf php5.conf ssl.conf alias.load auth_radius.load authz_user.load dir.conf mime.load php5.load ssl.load auth_basic.load authz_default.load autoindex.conf dir.load negotiation.conf setenvif.conf status.conf auth_mysql.load authz_groupfile.load autoindex.load env.load negotiation.load setenvif.load status.load And this is my apache version. Server version: Apache/2.2.8 (Ubuntu) Server built: Jun 25 2008 13:54:13

2 1

if not found proxy
by Twanny Azzopardi 21 Sep '08

21 Sep '08

Hello list, I didn't post the output of the server for I don't know how I am to accomplish this. I want to authenticate a user, user@realm on the local server, if not found proxied on to another server. What are then entries I want to make in proxy.conf? Regards, Twanny. _________________________________________________________________ News, entertainment and everything you care about at Live.com. Get it now! http://www.live.com/getstarted.aspx

1 0

Compilinh in Ubuntu Hardy and where can i add an realm?
by jose caceres 21 Sep '08

21 Sep '08

Hello, I am trying to compile freeradius in ubuntu hardy, for using it to make the authetication an accounting of an equipment similar to cisco authentication, the first thing i notice is that apart of the build-essecial pakage there is also needed to get libltdl3-dev. After the compilation and the install I tried to run freeradius, with radiusd -X, but i get the next message: # radiusd -X radiusd: error while loading shared libraries: libfreeradius-radius-2.1.0.so: cannot open shared object file: No such file or directory I solver this by using ldconfig. now i have created the client and defined a user in a file just to start testing the registration. but when i try to make the registration i found some error because it does not detect the real of the nas. I searched arround i don't know where can i add that suffix: this is the way i declared the client at the end of clients.conf client 200.X.X.X { secret = sharedpassword shortname = 200.X.X.X } and the user, at the end of users file test Auth-Type == "digest", User-Password = "test" Reply-Message = "Hello, test with digest", Class = "prueba" I also tried to put the word digest without double quotes but i received an indication of the debud saying that was wrong, so i putted the quotes and the debug mode started well. But when i sent a request i got the next errors: rad_recv: Access-Request packet from host 200.X.X.X port 38573, id=84, length=198 NAS-Identifier = "my.telestart.cl" Digest-Attributes = 0x030a5245474953544552 Digest-Attributes = 0x06054d4435 Digest-Attributes = 0x022a30623463373838366463633265393735343763343839616338363163616530376639646634633861 Digest-Attributes = 0x0a0674657374 User-Name = "test(a)200.X.X.X" Digest-Attributes = 0x04127369703a3230302e362e3131352e3235 Digest-Response = "5d72ee0f0579e1c11a75d2717ea2bd7f" Digest-Attributes = 0x010e3230302e362e3131352e3235 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [digest] Adding Auth-Type = DIGEST ++[digest] returns ok [suffix] Looking up realm "200.X.X.X" for User-Name = "test(a)200.X.X.X" [suffix] No such realm "200.X.X.X" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP I searched arround but couldn't fine where i need to set up the suffing, please i know there is something i am missing, so can anybody please tellme where can i define the realms. thanks -- Josexato

2 1

2.1.1-pre
by Alan DeKok 21 Sep '08

21 Sep '08

I've made a number of changes to fix issues in 2.1.0. Can some people please try git head? See git.freeradius.org for how to get a "tar" file. If there are no complaints, we can issue 2.1.1 tomorrow. The new command tool "radmin" is starting to get insane. As in "insanely useful". Alan DeKok.

6 21

Re: MySQL not in the default port
by Marcelo Freitas 20 Sep '08

20 Sep '08

Thanks man, it worked ... Sorry, I hadn't found any docs about this directive ... ----- Original Message ----- From: a.l.m.buxey(a)lboro.ac.uk Sent: Fri, September 19, 2008 2:09 Subject:Re: MySQL not in the default port Hi, > Hello, > > I had to install my MySQL not in the default port (3306), and I'm not able to connect to the server ... I tried everything in the sql.conf like localhost:5999, my.IP:5999, hostname, etc and nothing makes it to connect ... Is there any (right) way to specify a port to connect ? is it possible ? > > P.S: I tried to make FreeRadius to connect to an outside MySQL server (standard port) and it connected without problems ... in sql.conf right after the hostname, add a port option. hostname = "nameofhost" port = "5999" alan ----- End of original message -----

2 1