- Freeradius-Users - lists.freeradius.org

2.0.5 on Solaris
by Rafiqul Ahsan 08 Aug '08

08 Aug '08

Can anyone suggest the documents/wiki for installation steps for Freeradius 2.0.5 on Solaris ? -- Rafiqul Ahsan

2 5

Whether the FreeRADIUS supports switch 3Com 5500G-EI ?
by Gennadiy Redko 07 Aug '08

07 Aug '08

Hi,all. I wish to dispose authorization on the switch with the dynamic isolation VID on the port on the protocol of 802.1x on RADIUS Server. Stand: the switch of 3Com 5500-EI (Software Of version of 3Com OS Of v3.02.03s56), computer from OS Windows XP (SP2), RHEL 5 update 1, freeradius-1.1.3-1.2.el5,kernel 2.6.18-53.el5 #1 SMP. Technical support of the 3Com has advised to use here this document for adjustment: http://www.3com.com/products/en_US/result.jsp?selected=2&sort=effdt&order=d… DUA1725-0BAA02.pdf , page 415 The authorization to FreeRadius is passed at the given moment, but to port is not allotted necessary VID. FreeRADIUS does not support 3Com switches ?

5 25

Slow Starting..
by Cris Boisvert 07 Aug '08

07 Aug '08

Been using Freeradius for years.. Quad core Xeon server New Server setup UBUNTU 8.04 Mysql 5.0.51 Running newest version of freeradius Have dual mysql databases running .. One has all the user data and the other gets all the accounting. The server takes about 20-30 seconds to start.. Where on the previous servers old P3 500mhz it took only 2-3 seconds.. It works and responds perfectly fine.. But just takes a while to finish reading the configs.. Running debugging it loads. To the point where it says --------------Cut--------------------------------------- main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients ---------------------------end Cut------------------------------------ Then after about 30 seconds blasts out the rest of the normal load.. Attaching to all the databases etc..etc... Anyone have any Ideas what this may be waiting around for? Thanx

4 5

How to assign default gatway?
by Xiaochen Jing 07 Aug '08

07 Aug '08

Hello all, Is that possible to assign users a default gateway while allocating dynamic IP addresses from IP pool? Thank you

2 1

Does Avenda use freeradius?
by paul smith 07 Aug '08

07 Aug '08

Hi, I've been looking at getting an appliance from a company called Avenda Systems (www.avendasystems.com) Its a RADIUS appliance with a nice GUI, but I think FreeRADIUS offers all the features that it does. Does anyone have any experience of it? Or a comparison between it and FreeRADIUS? Also I think it may be FreeRADIUS underneath, does anyone know if that is the case? thanks, paul

2 5

Howto log wrong-password ( and other attempts ) to radacct ( sql_log ? )
by S Adrian 07 Aug '08

07 Aug '08

Hi again everybody Ok, it seems my freeradius only wants to log access-accept stuff to sql .. but when I login with wrong password .. it doesn't insert it in sql .. anyone can tell what do I need to have in what section please? Thanks in advance, Adrian.

2 1

Freeradius does not assign IP from main_pool
by Xiaochen Jing 07 Aug '08

07 Aug '08

Hello all, I want to use Freeradius to assign IP addresses to clients from main_pool. After all set up (I think), L2tp tunnel is established but user cannot get an IP from Freeradius. From the Reply message, I see no IP is replied to user. Could anyone take a look at the debug and give me a hint? Debug: radiusd: #### Loading Virtual Servers #### server inner-tunnel { modules { Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_pap Module: Instantiating pap pap { encryption_scheme = "auto" auto_header = no } Module: Linked to module rlm_chap Module: Instantiating chap Module: Linked to module rlm_mschap Module: Instantiating mschap mschap { use_mppe = yes require_encryption = no require_strong = no with_ntdomain_hack = no } Module: Linked to module rlm_unix Module: Instantiating unix unix { radwtmp = "/usr/local/var/log/radius/radwtmp" } Module: Linked to module rlm_eap Module: Instantiating eap eap { default_eap_type = "md5" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5 Module: Linked to sub-module rlm_eap_leap Module: Instantiating eap-leap Module: Linked to sub-module rlm_eap_gtc Module: Instantiating eap-gtc gtc { challenge = "Password: " auth_type = "PAP" } rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_realm Module: Instantiating suffix realm suffix { format = "suffix" delimiter = "@" ignore_default = no ignore_null = no } Module: Linked to module rlm_files Module: Instantiating files files { usersfile = "/usr/local/etc/raddb/users" acctusersfile = "/usr/local/etc/raddb/acct_users" preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" compat = "no" } [/usr/local/etc/raddb/users]:107 WARNING! Check item "Group" found in reply i tem list for user "testuser". This attribute MUST go on the first line with th e other check items [/usr/local/etc/raddb/users]:107 WARNING! Check item "Pool-Name" found in reply item list for user "testuser". This attribute MUST go on the first line with the other check items Module: Checking session {...} for more modules to load Module: Linked to module rlm_radutmp Module: Instantiating radutmp radutmp { filename = "/usr/local/var/log/radius/radutmp" username = "%{User-Name}" case_sensitive = yes check_with_nas = yes perm = 384 callerid = yes } Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load Module: Linked to module rlm_attr_filter Module: Instantiating attr_filter.access_reject attr_filter attr_filter.access_reject { attrsfile = "/usr/local/etc/raddb/attrs.access_reject" key = "%{User-Name}" } } } server { modules { Module: Checking authenticate {...} for more modules to load Module: Checking authorize {...} for more modules to load Module: Linked to module rlm_preprocess Module: Instantiating preprocess preprocess { huntgroups = "/usr/local/etc/raddb/huntgroups" hints = "/usr/local/etc/raddb/hints" with_ascend_hack = no ascend_channels_per_line = 23 with_ntdomain_hack = no with_specialix_jetstream_hack = no with_cisco_vsa_hack = no with_alvarion_vsa_hack = no } Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NA S-Port" } Module: Checking accounting {...} for more modules to load Module: Linked to module rlm_detail Module: Instantiating detail detail { detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/det ail-%Y%m%d" header = "%t" detailperm = 384 dirperm = 493 locking = no log_packet_header = no } Module: Linked to module rlm_ippool Module: Instantiating main_pool ippool main_pool { session-db = "/usr/local/etc/raddb/db.ippool" ip-index = "/usr/local/etc/raddb/db.ipindex" key = "%{NAS-IP-Address} %{NAS-Port}" range-start = 192.168.1.1 range-stop = 192.168.3.254 netmask = 255.255.255.0 cache-size = 800 override = yes maximum-timeout = 0 } Module: Instantiating attr_filter.accounting_response attr_filter attr_filter.accounting_response { attrsfile = "/usr/local/etc/raddb/attrs.accounting_response" key = "%{User-Name}" } Module: Checking session {...} for more modules to load Module: Checking post-proxy {...} for more modules to load Module: Checking post-auth {...} for more modules to load } } radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = * port = 0 } listen { type = "acct" ipaddr = * port = 0 } Listening on authentication address * port 1812 Listening on accounting address * port 1813 Ready to process requests. Here is the process: rad_recv: Access-Request packet from host 127.0.0.1 port 32915, id=0, length=145 User-Name = "testuser" User-Password = "testing" NAS-Port = 1 Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "atm 9/0.438:13.172#184577265#atm xyz#speed:UBR#ppp oe 00:1c:23:b6:d3:45#" NAS-IP-Address = 0.0.0.0 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound users: Matched entry testuser at line 107 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated rad_check_password: Found Auth-Type auth: type "PAP" +- entering group PAP rlm_pap: login attempt with password "testing" rlm_pap: Using clear text password "testing" rlm_pap: User authenticated successfully ++[pap] returns ok Login OK: [testuser/testing] (from client localhost port 1 cli atm 9/0.438:13.17 2#184577265#atm xyz#speed:UBR#pppoe 00:1c:23:b6:d3:45#) +- entering group post-auth rlm_ippool: Could not find Pool-Name attribute. ++[main_pool] returns noop Sending Access-Accept of id 0 to 127.0.0.1 port 32915 Service-Type == Framed-User Framed-Protocol == PPP Finished request 0. Going to the next request Waking up in 0.9 seconds. Waking up in 3.9 seconds. Cleaning up request 0 ID 0 with timestamp +283 Ready to process requests.

2 3

Device authentication and User+Device authentication
by Cristian Novac 07 Aug '08

07 Aug '08

Hi all, Could someone tell me what has to be configured to be able to do Device authentication and User+Device authentication. Thank you! Cristian NOVAC

2 11

Problem when using custom attributes for radius extra parameter
by Krunal Patel 07 Aug '08

07 Aug '08

I'm trying to configure openser & freeradius with AAA. I'm using custom mysql tables for authentication & accounting. I've modified queries in sql.conf in raddb folder. Authentication works fine. I've added additional fields in radius_extra parameter of acc module. I've added those parameters in dictionaries of radiusclient-ng & freeradius. But I get blank values for custom fields. Any idea what can be wrong? *openser.cfg* modparam("acc", "radius_extra","User-Name=$fU; Dialstatus=$avp(s:dialstatus);User-Rate=$avp(i:2016);User-Duration=$avp(i:2016);User-Clid=$fU;User_ClidName=$avp(s:callerid);User_Dst_Name=$avp(s:2014);User_Dst_Code=$avp(i:2015);User_Account_Id=$fU;Lcr_Rate=$avp(i:2030);Lcr_Duration=$avp(i:2016);Lcrtrunk_Id=$avp(i:2027);Lcr_Dst_Name=$avp(s:2028);Lcr_Dst_Code=$avp(i:2029);Real_Duration=$avp(i:2016)") *dictionary.openser* ATTRIBUTE Dialstatus 1073 string ATTRIBUTE User-Rate 1074 string ATTRIBUTE User-Duration 1075 string ATTRIBUTE User-Channel 1076 string ATTRIBUTE User-Clid 1077 string ATTRIBUTE User_ClidName 1080 string ATTRIBUTE User_Dst_Name 1081 string ATTRIBUTE User_Dst_Code 1082 string ATTRIBUTE User_Account_Id 1083 string ATTRIBUTE Lcr_Rate 1084 string ATTRIBUTE Lcr_Duration 1085 string ATTRIBUTE Lcrtrunk_Id 1086 string ATTRIBUTE Lcr_Dst_Name 1087 string ATTRIBUTE Lcr_Dst_Code 1088 string ATTRIBUTE DialedTime 1089 string ATTRIBUTE Real_Duration 1090 string ATTRIBUTE Startleg 1091 string ATTRIBUTE Stopleg 1092 string *dictionary.radius* ATTRIBUTE Dialstatus 1073 string ATTRIBUTE User-Rate 1074 string ATTRIBUTE User-Duration 1075 string ATTRIBUTE User-Channel 1076 string ATTRIBUTE User-Clid 1077 string ATTRIBUTE User_ClidName 1080 string ATTRIBUTE User_Dst_Name 1081 string ATTRIBUTE User_Dst_Code 1082 string ATTRIBUTE User_Account_Id 1083 string ATTRIBUTE Lcr_Rate 1084 string ATTRIBUTE Lcr_Duration 1085 string ATTRIBUTE Lcrtrunk_Id 1086 string ATTRIBUTE Lcr_Dst_Name 1087 string ATTRIBUTE Lcr_Dst_Code 1088 string ATTRIBUTE DialedTime 1089 string ATTRIBUTE Real_Duration 1090 string ATTRIBUTE Startleg 1091 string ATTRIBUTE Stopleg 1092 string Thanks in advance -- Krunal Patel

3 3

Scour.com invite from yawar hadi noshahi
by yawar hadi noshahi 07 Aug '08

07 Aug '08

Hey, Did you hear about Scour? It is the next gen search engine with Google/Yahoo/MSN results and user comments all on one page. Best of all we get paid for using it by earning points with every search, comment and vote. The points are redeemable for Visa gift cards! It's like earning credit card or airline points just for searching! Hit the link below to join for free and we will both get points! http://scour.com/invite/yawar/ I know you'll like it! - yawar hadi noshahi

1 0