- Freeradius-Users - lists.freeradius.org

question
by Martin Silvero 05 Aug '08

05 Aug '08

regarding this settlement, and delete certificates and regenerate, but remains the same mistake: Tue Aug 5 15:01:28 2008 : Error: rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Tue Aug 5 15:01:28 2008 : Error: rlm_eap_tls: Error reading private key file /usr/local/etc/raddb/certs/server.pem Tue Aug 5 15:01:28 2008 : Error: rlm_eap: Failed to initialize type tls Tue Aug 5 15:01:28 2008 : Error: /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" Tue Aug 5 15:01:28 2008 : Error: /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". Tue Aug 5 15:01:28 2008 : Error: /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. Tue Aug 5 15:01:28 2008 : Debug: } Tue Aug 5 15:01:28 2008 : Debug: } Tue Aug 5 15:01:28 2008 : Error: Errors initializing modules it seems to me like a certificate`s password problem. take a look at server.cnf ca.cnf and clients.cnf. or read the document that came with the package how to remove all certificates and create the 3some ( :) ) of them. 2008/8/5 Martin Silvero <silvero.martin(a)gmail.com>: > > Hello my name is martin and I'm from Argentina. > > I'm trying to configure for use with FreeRADIUS eap + tls and ldap, but > recently started doing this and I am wrong in the first configurations, what > I did was set a cleinte which is a AP's and when I run radiusd-X -x strip me > this mistake even if the PATH're ok. Can someone could give me a hand > please? > > > > Tue Aug 5 11:00:31 2008 : Error: rlm_eap: SSL error error:06065064:digital > envelope routines:EVP_DecryptFinal_ex:bad decrypt > Tue Aug 5 11:00:31 2008 : Error: rlm_eap_tls: Error reading private key > file /usr/local/etc/raddb/certs/ > server.pem > Tue Aug 5 11:00:31 2008 : Error: rlm_eap: Failed to initialize type tls > Tue Aug 5 11:00:31 2008 : Error: /usr/local/etc/raddb/eap.conf[17]: > Instantiation failed for module "eap" > Tue Aug 5 11:00:31 2008 : Error: > /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module > "eap". > Tue Aug 5 11:00:31 2008 : Error: > /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing > authenticate section. > Tue Aug 5 11:00:31 2008 : Debug: } > Tue Aug 5 11:00:31 2008 : Debug: } > Tue Aug 5 11:00:31 2008 : Error: Errors initializing modules > > > > thanks!!!!! -- -- Silvero Martin

1 0

Server not responding to requests
by Yoho, Cindy 05 Aug '08

05 Aug '08

Hi All, I have freeradius 1.1.7 running on RHEL 5. radtest works with a local user setup, and also with authentication via Active Directory. However, anything outside the radius server host does not get a reply. I have configured a Multitech MA820 and also tried ntradping, and both get the same results - "Could not receive a response from server" is the message when I use ntradping, and "Server did not respond in a timely manner" is the response when I try to connect from the Multitech. Is there some setting I need to check to make sure external access is enabled? Thanks in advance ~ Cindy Yoho Systems Engineer United Methodist Publishing House Nashville, TN

4 3

Problems with FREERADIUS configurations
by Martin Silvero 05 Aug '08

05 Aug '08

Hello im from Argentina and im configure freeradius with eap+tls but give me one error: Tue Aug 5 13:11:37 2008 : Error: rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Tue Aug 5 13:11:37 2008 : Error: rlm_eap_tls: Error reading private key file /usr/local/etc/raddb/certs/server.pem Tue Aug 5 13:11:37 2008 : Error: rlm_eap: Failed to initialize type tls Tue Aug 5 13:11:37 2008 : Error: /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" Tue Aug 5 13:11:37 2008 : Error: /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". Tue Aug 5 13:11:37 2008 : Error: /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. Tue Aug 5 13:11:37 2008 : Debug: } Tue Aug 5 13:11:37 2008 : Debug: } Tue Aug 5 13:11:37 2008 : Error: Errors initializing modules im need help please!! many thanks!!! -- -- Silvero Martin

1 0

Re: question
by Martin Silvero 05 Aug '08

05 Aug '08

Hello my name is martin and I'm from Argentina. I'm trying to configure for use with FreeRADIUS eap + tls and ldap, but recently started doing this and I am wrong in the first configurations, what I did was set a cleinte which is a AP's and when I run radiusd-X -x strip me this mistake even if the PATH're ok. Can someone could give me a hand please? Tue Aug 5 11:00:31 2008 : Error: rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt Tue Aug 5 11:00:31 2008 : Error: rlm_eap_tls: Error reading private key file /usr/local/etc/raddb/certs/server.pem Tue Aug 5 11:00:31 2008 : Error: rlm_eap: Failed to initialize type tls Tue Aug 5 11:00:31 2008 : Error: /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" Tue Aug 5 11:00:31 2008 : Error: /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". Tue Aug 5 11:00:31 2008 : Error: /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. Tue Aug 5 11:00:31 2008 : Debug: } Tue Aug 5 11:00:31 2008 : Debug: } Tue Aug 5 11:00:31 2008 : Error: Errors initializing modules thanks!!!!!

2 1

How to link radiusd statically?
by abhay＠clearcrypt.com 05 Aug '08

05 Aug '08

Hi, I would like to build radiusd with all necessary libraries statically linked in. I have tried the following command ./configure --enable-shared=no --enable-static=yes During linking phase, there are a bunch of problems; 1. libperl.a is not found (that has been fixed by downloading Perl 5.8.8 and building it locally); 2. many undefined functions, mainly in libkrb5.a Is this a way to go? Has anyone successfully built freeradius 2.0.5 with static linkage? Thanks! Abhay

4 3

Re: Seek through several RADIUS severs without realms
by Alan DeKok 05 Aug '08

05 Aug '08

Ronen Kfir wrote: > I would like to use FreeRADIUS as proxy to IAS servers. The question now > is how do I create those FreeRADIUS groups and how do I manage the > groups membership within FreeRADIUS. Read "man rlm_passwd"? This is documented. Alan DeKok.

1 0

rlm_ippool.so missing ?
by Xiaochen Jing 05 Aug '08

05 Aug '08

Hello all, When I was trying to run Freeradius, I got the following errors. It says no "rlm_ippool.so" exists. I took a look into /usr/local/lib, and there is no such file. Could someone help me on this? Thanks so much. I need to let Freeradius assign dynamic IP address from IP_Pool to PPPoE clients. Here is the error message: /usr/local/etc/raddb/radiusd.conf[1739]: Failed to link to module 'rlm_ippool': rlm_ippool.so: cannot open shared object file: No such file or directory /usr/local/etc/raddb/sites-enabled/default[354]: Failed to find module "main_pool". /usr/local/etc/raddb/sites-enabled/default[352]: Errors parsing post-auth section.

2 2

Re: Seek through several RADIUS severs without realms
by Ronen Kfir 05 Aug '08

05 Aug '08

> Unfortunately I lost the previous message of this thread, where Alan > Dekok's respond is presented. > Anyway, the content of it was he offered to use groups membership. He > also gave a specific file: rlm_passwd which should be configured in > order to achieve groups membership as an indication which IAS server > would respond each authentication request. No. You configure groups on the FREERADIUS server. > The thing is, though went over the help file of rlm_passwd a couple of > times, I didn't see clear explanation how to configure it when working > in IAS-Active Directory environment. If you're using IAS and not FreeRADIUS, don't ask questions here. If you're using FreeRADIUS a proxy to IAS, you can configure groups on FreeRADIUS, and apply policies there. Alan DeKok. Ronen Kfir: I would like to use FreeRADIUS as proxy to IAS servers. The question now is how do I create those FreeRADIUS groups and how do I manage the groups membership within FreeRADIUS.

1 0

simultaneous-use check via sql
by Oguzhan Kayhan 05 Aug '08

05 Aug '08

Hello I am trying to run Simultaneous-Use parameter on freeradius 2.0.5 which i have 2 virtual servers on. There can be same usernames on both virtual servers, so im not sure about how it works but i prefer to use sql instead of radutmp file for simultaneous check. Anyway, I added the following lines to users file as it is said /usr/share/doc/freeradius/Simultaneous-Use file. DEFAULT Simultaneous-Use := 0 Fall-Through = 1 I made the value 0 for testing purposes.. But no success.It still authenticates the user without any sim. check parameter. And I also wonder where did the Simul.Use queries in sql.conf in 1.1.7 version dissapeared? My virtual server config as follows..: server dormnet { authorize { preprocess files sql_dormnet } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } unix eap } accounting { unix radutmp sql_dormnet } session { radutmp sql_dormnet } post-auth { exec Post-Auth-Type REJECT { attr_filter.access_reject } } }

3 5

radacct insert issue.
by S Adrian 05 Aug '08

05 Aug '08

Ok, thanks, I got the latest git .. and I get this upon compilation :| gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -DEAPLIB -I. -I.. -I/root/radiusd/src -DOPENSSL_NO_KRB5 -c eap_tls.c -o eap_tls.o >/dev/null 2>&1 /usr/bin/libtool --mode=link gcc -release 2.0.6 \ -export-dynamic -o libfreeradius-eap.la -rpath /usr/local/lib eapcommon.lo eapcrypto.lo eapsimlib.lo fips186prf.lo cb.lo eap_tls.lo mppe_keys.lo tls.lo \ /root/radiusd/src/lib/libfreeradius-radius.la -lnsl -lresolv -lpthread libtool: link: `eapcommon.lo' is not a valid libtool object gmake[7]: *** [libfreeradius-eap.la] Error 1 gmake[7]: Leaving directory `/root/radiusd/src/modules/rlm_eap/libeap' gmake[6]: *** [common] Error 2 /usr/bin/libtool --mode=link gcc -release 2.0.6 \ -export-dynamic -o libfreeradius-eap.la -rpath /usr/local/lib eapcommon.lo eapcrypto.lo eapsimlib.lo fips186prf.lo cb.lo eap_tls.lo mppe_keys.lo tls.lo \ /root/radiusd/src/lib/libfreeradius-radius.la -lnsl -lresolv -lpthread libtool: link: `eapcommon.lo' is not a valid libtool object gmake[7]: *** [libfreeradius-eap.la] Error 1 gmake[7]: Leaving directory `/root/radiusd/src/modules/rlm_eap/libeap' gmake[6]: *** [libeap/freeradius-eap.la] Error 2 gmake[6]: Leaving directory `/root/radiusd/src/modules/rlm_eap' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/root/radiusd/src/modules' gmake[4]: *** [all] Error 2 which isn't good .. but still regarding my initial issue .. is the rp-pppoe server sending 2 accounting requests ? :| why would he do that ?! Thanks again for the quick answer. Adrian.

2 1