- Freeradius-Users - lists.freeradius.org

undefined symbol: sql_get_socket
by Giovanni Lovato 28 May '08

28 May '08

I compiled deb packages from 2.0.4 sources. I would use rlm_sqlippool but I get this message: symbol lookup error: /usr/lib/freeradius/rlm_sqlippool-2.0.4.so: undefined symbol: sql_get_socket How can I solve that?

4 7

newbie - authentication error
by pkc_mls 28 May '08

28 May '08

Hi all, I'd like to tetst my radius conf with a basic setting. I'm running freeradius-2.0.4-2 on linux debian. my client.conf contains the following : client localhost { ipaddr = 127.0.0.1 secret = testing123 nastype=other } my users file contains the following : testuser

3 10

newbie - authentication error
by pkc_mls 28 May '08

28 May '08

Hi all, I'd like to tetst my radius conf with a basic setting. I'm running freeradius-2.0.4-2 on linux debian. my client.conf contains the following : client localhost { ipaddr = 127.0.0.1 secret = testing123 nastype=other } I still don't know which kind of parametre I have to set in my /etc/freeradius/users file to allow my radtest to work. all my tests with cleartext-password, user-password, aht-type, and := =, ==, leads to the same error message : rad_recv: Access-Request packet from host 127.0.0.1 port 57756, id=178, length=59 User-Name = "testuser" User-Password = "testpasswd" NAS-IP-Address = x.x.x.x NAS-Port = 1812 Wed May 28 11:41:06 2008 : Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user next step, how to set up the users file so my local unix users can also be authenticated via radius ? thanks

2 2

gigawords how to?
by Oguzhan Kayhan 27 May '08

27 May '08

Hello, i tried to add gigawords for freeradius 2.0 And added the gigawords lines as i seen on web and final version was like this.. accounting_update_query = "UPDATE ${acct_table1} \ SET FramedIPAddress = '%{Framed-IP-Address}', \ AcctSessionTime = '%{Acct-Session-Time}', \ AcctInputOctets = '%{Acct-Input-Octets}', \ AcctInputGigawords = '%{Acct-Input-Gigawords}', \ AcctOutputOctets = '%{Acct-Output-Octets}' \ AcctOutputGigawords='%{Acct-Output-Gigawords}', \ WHERE AcctSessionId = '%{Acct-Session-Id}' \ AND UserName = '%{SQL-User-Name}' \ AND NASIPAddress= '%{NAS-IP-Address}'" But after restarting the freeradius i started to get the following errors. Couldn't update SQL accounting ALIVE record - You have an error in your SQL syntax; check the manual that corresponds to your MySQL server version for the right syntax to use near 'AcctOutputGigawords= '0', WHERE AcctSessionId = '483bfd5200000007' ' at line 1 So what can be the error?

1 1

Re: Can i have a group of roles
by avihai marchiano 27 May '08

27 May '08

Lets say i have the following roles: 1. admin 2. tech 3. student 4. simple Group - is a collection of roles. Group1 = role (admin,student) Group2(student,simple) User has group, for example user1 have group2. Is it make sense to build authorization is this way or to prefer to define roles without group and then i need to define for each user all the roles that he has (in this way if i have common combination of roles i will need to define all of them again and again for each user that use them). Thank you ----- Original Message ---- From: Ivan Kalik <tnt(a)kalik.net> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Tuesday, May 27, 2008 1:33:05 PM Subject: Re: Can i have a group of roles >I am new to Radiues. Make an effort to spell the word correctly. >I need the user to have group. The group is group of roles? >Can i do this or i need to define the roles in a "flat way" (i mean that i need to define all roles). >Does someone has an example? > Do you have an example of what you want to do? You want the same user to have different login credentials ... for what? Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Can i have a group of roles
by avihai marchiano 27 May '08

27 May '08

Hey, I am new to Radiues. I want to create a simple configuration, only for testing. I need the user to have group. The group is group of roles? Can i do this or i need to define the roles in a "flat way" (i mean that i need to define all roles). Does someone has an example?

2 1

mysql queries help needed
by gaetano ortisi 27 May '08

27 May '08

Hello, I am developing a small project to manage accounts provided by a captive portal solution chillispot-freeradius-mysql, and I need help about working with sql tables to do those few tasks the web interface should provide to admin users. I need to know how to: - add an account - remove an account - show all accounts with the total time of all their connections >From what I understand, add an account is simple, all I have to do is add a record to radcheck table like after checked that the username is not already present:   mysql> select username from radcheck where username = 'John Doe'; .. (if 0 rows returned, continue)   mysql> insert into radcheck (username, attribute, value) values ('John Doe', 'Password', 'x2jadfds'); However in an example from the oreilly book that the op is left as the default value ('=='), while in another software that do a task like what I what should like to do (phpmyprepaid), the attribute is "User-Password", and the op is ":=". What difference?   To remove an account, I should delete all the records in radcheck that have the username I want to remove, so:   mysql> delete from radcheck where username = 'John Doe';   But I would like to know, if the user has currently a session active, i.e. it is connected to the service provided, it is immediately disconnected or the session continue? And moreover, I have some problems with radacct. How to do the last task? On the web I found few resources about manage freeradius with mysql. Suggestions? Links? Thanks,             tano ___________________________________ Scopri il Blog di Yahoo! Mail: trucchi, novità, consigli... e la tua opinione! http://www.ymailblogit.com/blog/

3 2

Is Multiple radcheck tables possible?
by Pete Kay 27 May '08

27 May '08

Hi, I want to have two radcheck tables, one for storing user-password for system accessing and the other for storing user-password for management interface accessing. Is it possible to config the server to switch to different table according to some parameters pass by the client? I think it can be done by having two servers and each server has its own config and each config has its own dialup sql setting. However, since I would hope to see if it is possible to do it with just one server. Thanks in advance for any suggestion. Regards, Pete

3 2

authentic and authorize
by Zahra Bahar 27 May '08

27 May '08

Hi, there is freeradius sever uses ldap server for authorization and authentication of a VPN server. I set another vpn server with the same setting as previous one, but it accepts all users with error username and password. if username is true it will check the password but if enter non-valid username it accepts that. I don't know what is wrong.

3 2

RE: can not initiate sim, no RAND1 attribute
by Kalyani Garigipati (kagarigi) 27 May '08

27 May '08

Hi , Could someone take time and reply on this please.. Regards, Kalyani -----Original Message----- From: Kalyani Garigipati (kagarigi) Sent: Monday, May 26, 2008 4:54 PM To: 'freeradius-users(a)lists.freeradius.org' Subject: can not initiate sim, no RAND1 attribute Hi, Now I am able to start the Radiusd without any errors. But I am getting the following messages when I initiate EAP-SIM request to free Radius rlm_pap: Found existing Auth-Type, not changing it. ++[pap] returns noop rad_check_password: Found Auth-Type EAP auth: type "EAP" +- entering group authenticate rlm_eap: EAP Identity rlm_eap: processing type sim can not initiate sim, no RAND1 attribute rlm_eap: Default EAP type sim failed in initiate rlm_eap: Failed in EAP select ++[eap] returns invalid auth: Failed to validate the user. Login incorrect: [dummy(a)cisco.com/<via Auth-Type = EAP>] (from client cisco port 0 cli dummy(a)cisco.com) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> dummy(a)cisco.com attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Waking up in 4.9 seconds. I have configures EAP -type as SIM in eap.conf Regards, Kalyani

3 2