- Freeradius-Users - lists.freeradius.org

Problem with building 2.0.5 package for Debian Etch
by DaSilva 16 Jul '08

16 Jul '08

I have a problem with building a 2.0.5 package for Debian Etch. I have used http://wiki.freeradius.org/Build#Building_Debian_packages this tutorial for that but I only got this error message: # dpkg-buildpackage -b -uc dpkg-buildpackage: source package is freeradius dpkg-buildpackage: source version is 2.0.5-0 dpkg-buildpackage: source changed by Alan DeKok <aland(a)freeradius.org> dpkg-buildpackage: host architecture i386 dpkg-buildpackage: source version without epoch 2.0.5-0 debian/rules clean dpatch deapply-all 02-dialupadmin-help not applied to ./ . attempting to revert failed patch 01-radiusd-to-freeradius from ./: md5sums match, proceeding ... done (neither success nor failure guaranteed) rm -rf patch-stamp patch-stampT debian/patched dh_testdir dh_clean rm -f build-arch-stamp build-indep-stamp libltdl/stamp-h1 rm -f install-arch-stamp install-indep-stamp configure-stamp [ -f Make.inc ] && make distclean || true # The make clean forgets to remove this build directory [ -d src/modules/lib ] && rm -fr src/modules/lib || true # Put the original autotools files back in place [ -f config.sub.dist ] && rm config.sub && mv config.sub.dist config.sub || true [ -f config.guess.dist ] && rm config.guess && mv config.guess.dist config.guess || true debian/rules build test -d debian/patched || install -d debian/patched dpatch apply-all applying patch 01-radiusd-to-freeradius to ./ ... failed. make: *** [patch-stamp] Fehler 1 How can I solve that? Thanks in advance. -- View this message in context: http://www.nabble.com/Problem-with-building-2.0.5-package-for-Debian-Etch-t… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 2

python module log back to radius.log
by Michael da Silva Pereira 16 Jul '08

16 Jul '08

Hi All, I previously used a perl module and wrote content back to the radius.log file by using: &radiusd::radlog(0,"rlm_perl::Detaching. Reloading. Done."); Has anybody got something doing this in python, I don't really want to open up the file and write data into it as radiusd has the file open already. Thanks, Mike

1 1

unlang question
by Norbert Wegener 16 Jul '08

16 Jul '08

With unlang I achive the following: Check, whether a special VLAN exists on a switch and if so, assign it. This works with the construct below. if ("%{sqlquery:SELECT value from radcheck where ( attribute='SIE-VLAN1' != '' and username='%{User-Name}') and value in (select vlan from vlan where nasname= '%{NAS-IP-Address}' ) }"!='') { update reply { Tunnel-Private-Group-ID ="%{sqlquery:SELECT value from radcheck where ( attribute='SIE-VLAN1' != '' and username='%{User-Name}') and value in (select vlan from vlan where nasname= '%{NAS-IP-Address}' )}" Tunnel-Medium-Type = IEEE-802 Tunnel-Type = VLAN } } To reduce sql queries I want to avoid the second. Can I store the result of the first query and use the value to assign Tunnel-Private-Group-ID? Thanks Norbert Wegener

2 1

How to configure FreeRadius so that clients don't have to be changed?
by DaSilva 16 Jul '08

16 Jul '08

I want to set up a FreeRadius server for WLAN authentification without the need to change anything on client PCs (because we have so much clients that this would be to much work). Is that possible? Thanks in advance. -- View this message in context: http://www.nabble.com/How-to-configure-FreeRadius-so-that-clients-don%27t-h… Sent from the FreeRadius - User mailing list archive at Nabble.com.

5 8

Logging NAS IP address and supplicant MAC/IP address with subnet in clients.conf
by lowbassman＠gmail.com 15 Jul '08

15 Jul '08

Hi, I'm running freeradius-1.1.7.1 and have switched to using a subnet for my NAS devices in clients.conf. Unfortunately, my logs no longer tell me which NAS device a request came from and show only the MAC address of the user's laptop. Is there a way to get the NAS IP address as well in the logs? Having the NAS IP, the user's laptop IP and also MAC address in one line would be great. Thanks! ~Matt

2 1

Re :
by Reveal MAP 15 Jul '08

15 Jul '08

Thank you Ivan for the response. yes, i first supplied the entired output of radiusd -X, but the mail was too long and was expected to be moderate. so i cut it. I will try to send a mschap request and see. ------ ntlm_auth is in mschap module and you are sending a pap request. Test with mschap (or real peap user). BTW that's not " the entire output of RADIUSD -X." It's radtest output. Ivan Kalik Kalik Informatika ISP Dana 15/7/2008, "Reveal MAP" <revealmapp(a)yahoo.fr> piše: >Hello list! > >after >i succeed creating my CA, (thanks a lot sergio), i encounter a new >problem with Active Directory integration! i succeded it with help of >this mailing list a couple of week ago, but in FR-2.0.2. > >Now i use FR-2.0.5. >I >followed the HOWTO, so ntlm_auth and winbind authenticate successfully. >i didn't take a look at winbind_priviledge yet, but, when i try to >authenticate with a user of existing in active Directory (using >radtest), it just reject the user without no more message (taht i could >interpretate to find what is missing). > > > >i set in /etc/raddb/module/mschap that lines: >---------------------------------------------------------------------------------------------- >mschap { > use_mppe = yes > #require_encryption = yes > #require_strong = yes > with_ntdomain_hack = yes > >ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key >--username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} >--nt-response=%{mschap:NT-Response:-00}" >} > >but still noticed this line on the ouput too (at radiusd -X startup): >---------------------------------------------------------------------------------------------- >Module: Linked to sub-module rlm_eap_mschapv2 > Module: Instantiating eap-mschapv2 > mschapv2 { > with_ntdomain_hack = no //shouldn't it be yes instead of no here? >------------------------------------------------------------------------------------------------- > > >here is the entire output of RADIUSD -X. thanx for help: >-------------------------------------------------------------------------------------------- >aaa:~ # radtest glouglou glouglou localhost 1812 testing123 >Sending Access-Request of id 74 to 127.0.0.1 port 1812 > User-Name = "glouglou" > User-Password = "glouglou" > NAS-IP-Address = 127.0.0.2 > NAS-Port = 1812 >rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=74, length=20 >-------------------------------------------------------------------------------------------- > > > > _____________________________________________________________________________ >Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoofr > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

1 0

None
by Reveal MAP 15 Jul '08

15 Jul '08

Hello list! after i succeed creating my CA, (thanks a lot sergio), i encounter a new problem with Active Directory integration! i succeded it with help of this mailing list a couple of week ago, but in FR-2.0.2. Now i use FR-2.0.5. I followed the HOWTO, so ntlm_auth and winbind authenticate successfully. i didn't take a look at winbind_priviledge yet, but, when i try to authenticate with a user of existing in active Directory (using radtest), it just reject the user without no more message (taht i could interpretate to find what is missing). i set in /etc/raddb/module/mschap that lines: ---------------------------------------------------------------------------------------------- mschap { use_mppe = yes #require_encryption = yes #require_strong = yes with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap:User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" } but still noticed this line on the ouput too (at radiusd -X startup): ---------------------------------------------------------------------------------------------- Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no //shouldn't it be yes instead of no here? ------------------------------------------------------------------------------------------------- here is the entire output of RADIUSD -X. thanx for help: -------------------------------------------------------------------------------------------- aaa:~ # radtest glouglou glouglou localhost 1812 testing123 Sending Access-Request of id 74 to 127.0.0.1 port 1812 User-Name = "glouglou" User-Password = "glouglou" NAS-IP-Address = 127.0.0.2 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=74, length=20 -------------------------------------------------------------------------------------------- _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

2 1

rlm_pap: WARNING! No "known good" password found for the user.
by Maciej Drobniuch 15 Jul '08

15 Jul '08

Hi! >radtest fred somepass localhost 1813 somesecret Sending Access-Request of id 102 to 127.0.0.1 port 1812 User-Name = "fred" User-Password = "somepass" NAS-IP-Address = 127.0.0.1 NAS-Port = 1813 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=102, length=20 rad_verify: Received Access-Reject packet from client 127.0.0.1 port 1812 with invalid signature (err=2)! (Shared secret is incorrect.) >radiusd -X rad_recv: Access-Request packet from host 127.0.0.1 port 32770, id=102, length=56 User-Name = "fred" User-Password = "h\347`\005\270\202\336<\336i~e\031\r\021[" NAS-IP-Address = 127.0.0.1 NAS-Port = 1813 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "fred", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. WARNING: Unprintable characters in the password. Double-check the shared secret on the server and the NAS! Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> fred attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Sending Access-Reject of id 102 to 127.0.0.1 port 32770 Finished request 2. Going to the next request Waking up in 4.9 seconds. Cleaning up request 2 ID 102 with timestamp +151 Ready to process requests. >cat client.conf client 127.0.0.1 { secret = somesecret shortname = localhost nastype = other } >cat users fred Cleartext-Password =="somepass" Service-Type = Framed-User, Framed-Protocol = PPP wilma Auth-Type := CHAP, User-password =="somepass" Service-Type = Framed-User, Framed-Protocol = PPP barney Auth-Type := MS-CHAP, User-Password == "somepass" Service-Type = Framed-User, Framed-Protocol = PPP What's wrong with this line >User-Password = "h\347`\005\270\202\336<\336i~e\031\r\021[" ??? Thanks for the support! -- ------------------------ Maciej Drobniuch

5 9

freeradius 2.0.5 linking error with rlm_perl on solaris10
by Ubale, Abhishek Amarnath 15 Jul '08

15 Jul '08

Hi, Im trying to install freeradius 2.0.5 on solaris10 (sparc) and Im only interested in rlm_perl module. My configure script is ./configure --prefix=/usr/local/radius --with-static-modules=perl --disable-shared --without-rlm_sql --without-rlm_eap --without-rlm_ldap --without-rlm_krb5 --without-rlm_python --without-rlm_counter --without-rlm_ippool --without-rlm_otp --without-rlm_acctlog --without-rlm_caching --without-rlm_chap --without-rlm_dbm --without-rlm_detail --without-rlm_digest --without-rlm_mschap --without-rlm_unix --without-rlm_smb --without-rlm_realm --without-rlm_radutmp --without-rlm_preprocess --without-rlm_passwd --without-rlm_pap --without-rlm_pam --without-rlm_opendirectory --without-rlm_logintime --without-rlm_linelog --without-rlm_jradius --without-rlm_files --without-rlm_fastusers --without-rlm_detail --without-rlm_cram --without-rlm_copy_packet --without-rlm_checkval --without-rlm_attr_filter --without-rlm_attr_rewrite --without-rlm_always --without-rlm_sqlippool ./gmake is throwing out errors as follows: [...] gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG -I/var/tmp/freeradius-server-2 2.0.5/src -I/var/tmp/freeradius-server-2.0.5/libltdl -I/usr/local/include -I/opt/local/include -D_LARGEFILE_SOURCE -D D_FILE_OFFSET_BITS=64 -I/usr/local/perl-5.8.3/lib/5.8.3/sun4-solaris/CORE -c rlm_perl.c -o rlm_perl.o >/dev/null 2>&1 /var/tmp/freeradius-server-2.0.5/libtool --mode=link gcc -release 2.0.5 \ -module -static -o rlm_perl.la \ -rpath /usr/local/radius/lib rlm_perl.lo rlm_perl.c /var/tmp/freeradius-server-2.0.5/src/lib/libfreeradius-radius.la `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lsocket -lposix4 -lpthread *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/local/perl-5.8.3/lib/5.8.3/sun4-solaris/auto/DynaLoader/DynaLoader.a is not portable! [...] /usr/local/gnu/bin/nm: DynaLoader.a: File format not recognized /usr/local/gnu/bin/nm: DynaLoader.a: File format not recognized /usr/local/gnu/bin/nm: DynaLoader.a: File format not recognized /usr/local/gnu/bin/nm: DynaLoader.a: File format not recognized ../modules/rlm_perl/.libs/rlm_perl.a(rlm_perl.o): In function `xs_init': rlm_perl.o(.text+0x110): undefined reference to `boot_DynaLoader' rlm_perl.o(.text+0x114): undefined reference to `boot_DynaLoader' collect2: ld returned 1 exit status gmake[4]: *** [radiusd] Error 1 gmake[3]: *** [common] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [common] Error 2 gmake: *** [all] Error 2 Please help me out here. thanks Abhishek

2 2

How to configure radius server
by Sandeep 15 Jul '08

15 Jul '08

Hi, all members of free radius..I install fras fedora9 and want to make radius server but i am new in this field is any body help me to do this. first of all please provide me step to step tutorials so that i can read it and install configure my server .. with testing PLEASE HELP ME Sandeep rohilla

4 3