- Freeradius-Users - lists.freeradius.org

Re: PEAP mschapv2 using xp native supplicant
by Ryan Setiawan H 07 Aug '08

07 Aug '08

2 1

MAC authenticating with mySQL database
by Kjell Bruheim 07 Aug '08

07 Aug '08

Hi all! I have been trying to read up on MAC authentication and implementing that into a sql database. The MAC authentication with a userfile was no problem. But i hit the wall when i wanted to use a database instead of text file. Is there any good HOWTO's out there on this one? The configuration of the intended network. Radius server--->wifi-routers with MAC auth--->clients The reason for this MAC authentication is for engineers to have access to internet on sites we have equipment on. But not the users of the equipment. And the reason for wanting to implement sql database to store MAC addresses in, is to make it easier for admins to edit and that we want to implement other software to also use the info for our engineers. Cheers. -- Kjell Christian Bruheim Helpdesk Supportingit

3 5

Installation problem
by Frederick William Borges Pohl 07 Aug '08

07 Aug '08

Hello, I am rather new to freeradius and I´m having trouble running the server after installation I installed using: ./configure --sysconfdir=/etc Make Make install When I try running with radiusd I get the following error: /usr/local/sbin/radiusd: error while loading shared libraries: libfreeradius-radius-2.0.5.so: cannot open shared object file: No such file or directory The libfreeradius-radius-2.0.5.so file is located at the following directory: ns1:/usr/local # find / -name libfreeradius-radius-2.0.5.so /usr/local/lib/libfreeradius-radius-2.0.5.so This is my radiusd.conf prefix = /usr/local exec_prefix = ${prefix} sysconfdir = /etc localstatedir = /var sbindir = ${exec_prefix}/sbin logdir = ${localstatedir}/log/radius raddbdir = ${sysconfdir}/raddb radacctdir = ${logdir}/radacct confdir = ${raddbdir} run_dir = ${prefix}/${localstatedir}/run/radiusd db_dir = /usr/local/lib/ libdir = ${exec_prefix}/lib >From what is configured above, the libdir should be /usr/local/lib which is exactly where the file is located. Is there something I am missing? Thank you, Frederick Pohl Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.

3 8

ERROR: Failed to open socket: cannot bind socket: Address already in use
by Martin Silvero 07 Aug '08

07 Aug '08

: ERROR: Failed to open socket: cannot bind socket: Address already in use hello! when ejecute radiusd -X -x : Wed Aug 6 16:53:31 2008 : Error: ERROR: Failed to open socket: cannot bind socket: Address already in use Wed Aug 6 16:53:31 2008 : Error: /usr/local/etc/raddb/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812 what is? thanks!! -- -- Silvero Martin -- -- Silvero Martin

2 1

service-type passed in response
by Josh Yost 07 Aug '08

07 Aug '08

I am having a problem configuring management users for Cisco WLC. Here's my basic users file: DEFAULT Service-Type = NAS-Prompt-User, cisco-avpair += "shell:priv-lvl=2", Fall-Through = 1 test User-Password == "xxxx" Service-Type = Administrative-User, cisco-avpair += "shell:priv-lvl=15" The problem I am having is that when user "test" logs in, the access-accept packet passes the DEFAULT Service-Type Value (along with all other attributes in DEFAULT). I only want the default Service-Type value to be passed if I don't otherwise have one assigned in the individual users' entries. Any Assistance here would be much appreciated!

2 1

Where to put EAP-TLS-Require-Client-Cert = Yes ?
by Martin Silvero 06 Aug '08

06 Aug '08

for example mi have this problem: when I run radiusd-X -x strip me this mistake even if the PATH're ok. what is? > > > > > Tue Aug 5 11:00:31 2008 : Error: rlm_eap: SSL error error:06065064:digital > envelope routines:EVP_DecryptFinal_ex:bad decrypt > Tue Aug 5 11:00:31 2008 : Error: rlm_eap_tls: Error reading private key > file /usr/local/etc/raddb/certs/server.pem > Tue Aug 5 11:00:31 2008 : Error: rlm_eap: Failed to initialize type tls > Tue Aug 5 11:00:31 2008 : Error: /usr/local/etc/raddb/eap.conf[17]: > Instantiation failed for module "eap" > Tue Aug 5 11:00:31 2008 : Error: > /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module > "eap". > Tue Aug 5 11:00:31 2008 : Error: > /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing > authenticate section. > Tue Aug 5 11:00:31 2008 : Debug: } > Tue Aug 5 11:00:31 2008 : Debug: } > Tue Aug 5 11:00:31 2008 : Error: Errors initializing modules > > > > thanks!!!!! > > > > -- > >

1 0

RES: Installation problem
by Frederick William Borges Pohl 06 Aug '08

06 Aug '08

Thanks again, Alan. Radius is now running and working fine. I tested it using radtest "radtest fpohl <password> localhost 1812 <password>" and I got an OK result "rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=162, length=20" My question is now regarding users. The user fpohl is a regular Unix user I created with useradd but it does not belong to the same group as radiusd. It is configured as follow: fpohl:x:1000:110:Fred:/home/fpohl:/bin/bash radiusd:x:107:109:Radius daemon:/var/lib/radiusd:/bin/false ns1:~ # id fpohl uid=1000(fpohl) gid=110 groups=110,16(dialout),33(video) ns1:~ # id radiusd uid=107(radiusd) gid=109(radiusd) groups=109(radiusd) How can I configure freeradius to only accept connections from users that belong to the same groups as radiusd? What I really need is to not allow all unix users to be a radius client, only the ones that belong to a specific group. If my questions are too basic and there are documents on the web that can help new users like me, please show me the way. Frederick Pohl -----Mensagem original----- De: freeradius-users-bounces+frederick.pohl=oi.net.br(a)lists.freeradius.org [mailto:freeradius-users-bounces+frederick.pohl=oi.net.br@lists.freeradius.org] Em nome de A.L.M.Buxey(a)lboro.ac.uk Enviada em: terça-feira, 5 de agosto de 2008 13:48 Para: FreeRadius users mailing list Assunto: Re: RES: Installation problem Hi, > > After running /sbin/ldconfig -v , I was able to execute radiusd. > > The only weird thing is that the daemon is not showing when I type ps aux. > > Even after running /usr/sbin/radiusd, nothing happens. yep - at this point you run radiusd -X to see whats wrong alan Esta mensagem, incluindo seus anexos, pode conter informações privilegiadas e/ou de caráter confidencial, não podendo ser retransmitida sem autorização do remetente. Se você não é o destinatário ou pessoa autorizada a recebê-la, informamos que o seu uso, divulgação, cópia ou arquivamento são proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.

1 0

postauth sql logging
by Jeff Crowe 06 Aug '08

06 Aug '08

Hi all, I have just recently migrated from 1.1.7 to 2.0.5. In 1.1.7 I had the postauth sql logging turned on to log successful and failed auth attempts. I not able to find where I would add it in 2.0.5 to enable this feature. I see the sql statement in the dialup.conf config file but I am unsure on how to invoke the sql query. Any pointers would be great. Thanks, Jeff.

2 1

Problem with rlm_sql_oracle.so
by andreiv 06 Aug '08

06 Aug '08

I tried to insert accounting requests in oracle db, but the following error occurs when i try to start the radius server : rlm_sql_oracle.so: cannot open shared object file: No such file or directory Module: Linked to module rlm_sql Module: Instantiating sql sql { driver = "rlm_sql_oracle" server = "localhost" port = "" login = "system" password = "manager" radius_db = "(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=localhost)(PORT=1521))(CONNECT_DATA=(SID=orcl)))" read_groups = yes sqltrace = yes sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" readclients = no deletestalesessions = yes num_sql_socks = 5 sql_user_name = "%{User-Name}" default_user_profile = "" nas_query = "SELECT id,nasname,shortname,type,secret FROM nas" authorize_check_query = "" authorize_group_check_query = "" authorize_group_reply_query = "" accounting_onoff_query = "" accounting_update_query = "" accounting_update_query_alt = "" accounting_start_query = "INSERT into RADACCT (ID, CALLING_STATION_ID, DATE, TIME, ID_APEL, LOCATION) VALUES('', '%{Calling-Station-Id}', '%{Setup-Date}', '%{Setup-Time}', '%{Acct-Session-Id}', '%{Location}')" accounting_start_query_alt = "" accounting_stop_query = "" accounting_stop_query_alt = "" connect_failure_retry_delay = 60 simul_count_query = "" simul_verify_query = "" postauth_query = "" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } rlm_sql (sql): Could not link driver rlm_sql_oracle: rlm_sql_oracle.so: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. /usr/local/etc/raddb/sql.conf[22]: Instantiation failed for module "sql" /usr/local/etc/raddb/sites-enabled/default[341]: Failed to find module "sql". /usr/local/etc/raddb/sites-enabled/default[313]: Errors parsing accounting section. } } Errors initializing modules Can anyone help ? -- View this message in context: http://www.nabble.com/Problem-with-rlm_sql_oracle.so-tp18851356p18851356.ht… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

Re: Login incorrect (Home Server says so)... - But why?
by uni＠christiankraus.de 06 Aug '08

06 Aug '08

Hi >Is the "outside central server" configured to forward mydomain.com to >your server? >Check if you see his failed attempt on your own server at all. If it >isn't there, the request was rejected earlier in the proxy chain. It definitely is configured to proxy the request to my server. (We are not the first ones having this service, there are more than 100 I think that already have this. So I trust those peaple managing the "outside central server" when they say it it configured...) Regards, Christian

2 1