- Freeradius-Users - lists.freeradius.org

FreeRADIUS PostgreSQL schema.sql: 'now' => now()
by Jos Vos 27 Jun '08

27 Jun '08

Hi, I think the 'now' (*with* quotes) in postgresql/schema.sql (table radpostauth, field authdate) should become now() (*without* quotes). In the old way the default date will be the fixed date from the time the table was created, which is not the intention I presume. In the new way the default date is the date the row is added. This is in FreeRADIUS 2.0.3, I didn't check if newer versions have corrected this. It may also apply to schemas for other databases, but I only have the PostgreSQL files installed here. -- -- Jos Vos <jos(a)xos.nl> -- X/OS Experts in Open Systems BV | Phone: +31 20 6938364 -- Amsterdam, The Netherlands | Fax: +31 20 6948204

1 0

pam_radius_auth accounting configuration
by Brook Wondu 26 Jun '08

26 Jun '08

I am using pam_radius_auth 1.3.17 and I am having difficulty getting accounting to work. I have defined a service called openvpn in /etc/pam.d and the config lines are below auth required /lib/security/pam_radius_auth.so debug session required /lib/security/pam_radius_auth.so debug account required /lib/security/pam_radius_auth.so debug I have also created /etc/raddb/server and put in radius_server_ip:port secret time_out. The authentication piece works fine, but we don't see any accounting packets being forwarded to the radius server (Microsoft IAS 2003). Thanks, BW

1 0

radrelay.conf in freeradius 2.0.5
by Sanjeeva Rao 26 Jun '08

26 Jun '08

Hi, We are newbie to free radius. We have done some exploration with 1.1.7. Now we have moved from freeradius 1.1.7 to freeradius 2.0.5. As per the documentation (doc/radrelay), there should be radrelay.conf in /usr/local/etc/raddb. But this file is not present in our setup. Moreover , after reading "man radrelay.conf", we tried $./radiusd -X -n radrelay The output we got : Starting - reading configuration files ... including configuration file /usr/local/etc/raddb/radrelay.conf Unable to open file "/usr/local/etc/raddb/radrelay.conf": No such file or directory Errors reading /usr/local/etc/raddb/radrelay.conf. Please let us know if we are messing up the something here or is there any configuration related parameter to generate these files. We are stuck on this. Any pointers are welcome. Regards, Sanjeev

4 13

about eap_handler
by blue_11j＠yahoo.co.jp 26 Jun '08

26 Jun '08

Hi, I'm sorry that I am not good at English because I'm Japanese... I have a question about eap_handler. I understand that... if radiusd recieved EAP-Identify packet, eap_handler is allocated and added to eaplist. if radiusd will be not received next EAP packet(except EAP-Identiry) forever, When is the eap_handler deleted from the eaplist and freed ? will radiusd use too large memory by 'Dos attack using EAP-Identiry' ? -------------------------------------- GANBARE! NIPPON! Chance to win 50,000 Yahoo! Points! http://pr.mail.yahoo.co.jp/ganbare-nippon/

3 14

problems with building freeradius on solaris 10
by Ubale, Abhishek Amarnath 26 Jun '08

26 Jun '08

Hi Everyone, Im trying to build freeradius on a solaris10 sparx box. im only interested in rlm_perl modules of freeradius and I face no issues with "configure" ./configure --prefix=/usr/local/radius --without-threads --with-static-modules="rlm_perl" --without-rlm_sql --without-rlm_eap --without-rlm_ldap --without-rlm_krb5 --without-rlm_python --without-rlm_counter --without-rlm_ippool --without-rlm_otp but my make is erroring out with following error: In file included from /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/libradius.h:41, from crypt.c:24: /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/token.h:27: warning: `used' attribute directive ignored In file included from /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/libradius.h:42, from crypt.c:24: /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/hash.h:28: warning: `used' attribute directive ignored In file included from /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/libradius.h:54, from crypt.c:24: /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/md4.h:13: warning: `used' attribute directive ignored In file included from /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/libradius.h:466, from crypt.c:24: /var/tmp/freeradius-server-2.0.4/src/freeradius-devel/packet.h:28: warning: `used' attribute directive ignored gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/tmp/freeradius-server-2.0.4/src -DHOSTINFO=\"sparc-sun-solaris2.10\" -DRADIUSD_VERSION=\"2.0.4\" -DNO_OPENSSL -c crypt.c -o crypt.o >/dev/null 2>&1 /var/tmp/freeradius-server-2.0.4/libtool --mode=compile gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/tmp/freeradius-server-2.0.4/src -DHOSTINFO=\"sparc-sun-solaris2.10\" -DRADIUSD_VERSION=\"2.0.4\" -DNO_OPENSSL -c exec.c gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/tmp/freeradius-server-2.0.4/src -DHOSTINFO=\"sparc-sun-solaris2.10\" -DRADIUSD_VERSION=\"2.0.4\" -DNO_OPENSSL -c exec.c -fPIC -DPIC -o .libs/exec.o exec.c:226: macro `rad_fork' used without args gmake[4]: *** [exec.lo] Error 1 gmake[4]: Leaving directory `/var/tmp/freeradius-server-2.0.4/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/var/tmp/freeradius-server-2.0.4/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/var/tmp/freeradius-server-2.0.4/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/var/tmp/freeradius-server-2.0.4' make: *** [all] Error 2 Please help. thanks Abhishek

1 1

accsessionid in SQL schemas is too short
by Giovanni Lovato 25 Jun '08

25 Jun '08

In SQL schemas, accsessionid as VARCHAR(32) is too short, some NAS (e.g. Juniper ERX) send to RADIUS long Acct-Session-Id (up to 48 chars). I manually set it to VARCHAR(64) and now it seems to work correctly.

1 0

About ipaddr
by ELOM ETSE 25 Jun '08

25 Jun '08

Hi! I installed and configured the server freeRADIUS. When i didn't fill the ipaddr field or fill it with 127.0.0.1, all seem going well. But when i specify this field with an address of 192.168.1.0 network, i have this result: radiusd: #### Opening IP addresses and Ports #### listen { type = "auth" ipaddr = 192.168.2.1 port = 1812 ERROR: Failed to open socket: cannot bind socket: Cannot assign requested address /usr/local/etc/raddb/radiusd.conf[236]: Error binding to port for 192.168.2.1 port 1812 Please Where is the problem? Can i use localhost address for ipaddr field? or fill with *? With what can i fill the acess point security field? Please help me because i'am installing this server since saturday but no good result. Thanks _____________________________________________________________________________ Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr

2 1

I need to cancel or to active a user with a new attrib "Canceled" that I have added to radcheck table, in the authenticate stage.
by Jose Maira Iranzo Marin 25 Jun '08

25 Jun '08

I need to cancel or to active a user with a new attrib Canceled that I have added to radcheck table, in the authenticate stage. But I dont know if this method is the correct. Can you help me? Un saludo ------------------------------------------------------------ Jose María Iranzo Marín ---------- HYPERLINK "mailto:jmiranzo@simauria.net"jmiranzo(a)simauria.net ------------------------------------------------------------ Simauria Networks - HYPERLINK "http://www.simauria.net"www.simauria.net C/ Velázquez, 24 bajo. 46018 Valencia Tlf: +34 902.877.206 - Fax: +34 902.929.028 ------------------------------------------------------------- No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 270.4.0/1509 - Release Date: 19/06/2008 8:00

2 2

Bill Gates on using WiFi on Windows.
by Alan DeKok 25 Jun '08

25 Jun '08

The following article about Bill Gates trying to install software has a gem near the bottom: http://blog.seattlepi.nwsource.com/microsoft/archives/141821.asp The lack of attention to usability represented by these experiences blows my mind. I thought we had reached a low with Windows Network places or the messages I get when I try to use 802.11. (don't you just love that root certificate message?) i.e. The wireless networking experience is a "low" for Windows. So for everyone on this list fighting with Windows: It's not just you. Bill Gates has the exact same problems. Alan DeKok.

1 0

Web-based OTP authentication
by Jaishankar J 25 Jun '08

25 Jun '08

Hi, I have a server which can authenticate a phone-generated counter-based OTP using a web-service (http or https). Can anyone suggest the easiest method for integrating that authentication method with the latest version of FreeRadius? I have looked at PAM and rlm_otp, but was wondering if there is a way in which I can call the web-service from a tool using exec-wait. My idea is to use the FreeRadius at the edge to receive the RADIUS requests and then pass the username and OTP using the web-service for authentication. Thanks in advance, Jai

2 1