- Freeradius-Users - lists.freeradius.org

Re: safe_characters in freeradius 2.0.3
by snaut＠snaut.ru 28 Mar '08

28 Mar '08

Why the %{Event-Timestamp} is =22Mar 27 2008 20:59:09 MSK=22. And what is the =22?? Whence it undertakes?

6 11

how-to freeradius + aes
by Mateus Lpi 28 Mar '08

28 Mar '08

hi, I'm looking for a how-to to configure a freeradius+aes under linux (debian). At moment I just found a ttls guide, that's not my intention. thanks. Mateus Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento! http://br.mail.yahoo.com/ Abra sua conta no Yahoo! Mail, o único sem limite de espaço para armazenamento! http://br.mail.yahoo.com/

2 1

2.0.2 Radius stop work with Error...
by banga 28 Mar '08

28 Mar '08

Hello. I use FreeRadius + Postgres for accounting purpose only (avarage 3-5 accounting updates per second). For some reason very often radius stop work. Every time with the same error. > Wed Mar 12 18:08:34 2008 : Error: ]event.c:1946] Failed to insert event > Did anybody now how I can fix that? The only one way to make radius working is start radius with -X (???). -- View this message in context: http://www.nabble.com/2.0.2-Radius-stop-work-with-Error...-tp16046484p16046… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 5

RE: safe_characters in freeradius 2.0.3
by Dmitry A. Sysoev 28 Mar '08

28 Mar '08

Please, help. In what file it is necessary to make changes that variable Event-Timestamp was transferred without double quote - "? While the unique reason on which I do not pass it to version 2.0.3 -----Original Message----- From: Dmitry A. Sysoev [mailto:snaut@snaut.ru] Sent: Friday, March 28, 2008 8:10 AM To: 'FreeRadius users mailing list' Subject: RE: safe_characters in freeradius 2.0.3 As I should act, that all worked for me, as well as in 1.1.7? -----Original Message----- From: freeradius-users-bounces+snaut=snaut.ru(a)lists.freeradius.org [mailto:freeradius-users-bounces+snaut=snaut.ru@lists.freeradius.org] On Behalf Of Ivan Kalik Sent: Thursday, March 27, 2008 11:52 PM To: FreeRadius users mailing list Subject: Re: safe_characters in freeradius 2.0.3 >And what is the =22?? ASCII for double quote - ". Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 2

PDP-Context support
by M U 28 Mar '08

28 Mar '08

Dear all, I'm using Freeradius-1.1.0-19 on Suse Linux. I want to know how many pdp-context will be supported on freeradius per second. It depends on the server's specifiation but is there any reference ? I'm using Pentium4 machine of Dell optiplex. Please give me an advice asap. _________________________________________________________________ 今話題になってる出来事や有名人をランキングで毎週発表「MSN 気になる言葉」 http://keyword.jp.msn.com/default.aspx

2 1

Consuming card code
by Juraj Bilic 27 Mar '08

27 Mar '08

Im using freeradius-1.1.7 on my remote unix machine and developing on my client .net application. By now i succesfully made authorization and start/stop accounting request/responses (packet send/recieve logic). With radiusManager3 i generated card series, services .. Can i implement user login, consuming of card codes, etc. with only packets (acct) or im missing some crucial points? I hope that i (user, client) can make an behaviour of communicating with freeradius every 10sec and consuming 10sec of currently selected card code. thank you for your time, Juraj ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

6 10

Compile Error on FreeR 2.0.3
by Breuer Nicolas 27 Mar '08

27 Mar '08

I've an error on compilation : MYSQL 4.1 - FC 7 ./configure --without-threads --with-mysql-lib-dir=/usr/lib64/ gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/instapp/freeradius- server-2.0.3/src -DHOSTINFO=\"x86_64-unknown-linux-gnu\" - DRADIUSD_VERSION=\"2.0.3\" -DOPENSSL_NO_KRB5 -c xlat.c -o xlat.o >/dev/null 2>&1 /var/instapp/freeradius-server-2.0.3/libtool --mode=compile gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/instapp/freeradius-server-2.0.3/src - DHOSTINFO=\"x86_64-unknown-linux-gnu\" - DRADIUSD_VERSION=\"2.0.3\" -DOPENSSL_NO_KRB5 -c event.c gcc -g -O2 -Wall -D_GNU_SOURCE -DNDEBUG -I/var/instapp/freeradius- server-2.0.3/src -DHOSTINFO=\"x86_64-unknown-linux-gnu\" - DRADIUSD_VERSION=\"2.0.3\" -DOPENSSL_NO_KRB5 -c event.c -fPIC - DPIC -o .libs/event.o event.c: In function 'event_socket_handler': event.c:2305: error: 'argval' undeclared (first use in this function) event.c:2305: error: (Each undeclared identifier is reported only once event.c:2305: error: for each function it appears in.) gmake[4]: *** [event.lo] Error 1 gmake[4]: Leaving directory `/var/instapp/freeradius-server-2.0.3/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/var/instapp/freeradius-server-2.0.3/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/var/instapp/freeradius-server-2.0.3/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/var/instapp/freeradius-server-2.0.3' gmake: *** [all] Error 2

2 1

safe_characters in freeradius 2.0.3
by Dmitry A. Sysoev 27 Mar '08

27 Mar '08

Good afternoon! After upgrade from 1.1.7 to 2.0.3 version i have a problem in sql-queries: sql.conf: AcctStopTime = TO_TIMESTAMP_TZ('%{Event-Timestamp}','Mon dd YYYY hh24:mi:ss tzd'), \ radiusd -X (ver 2.0.3) ... AcctStopTime = TO_TIMESTAMP_TZ('=22Mar 27 2008 18:35:25 MSK=22'.... ... rlm_sql_oracle: execute query failed in sql_query: ORA-01843: not a valid month rlm_sql_oracle: OCI_SERVER_NORMAL rlm_sql (sqlacct): Couldn't update SQL accounting STOP record - ORA-01843: not a valid month rlm_sql (sqlacct): Released sql socket id: 2 and radiusd -X (ver 1.1.7): AcctStopTime = TO_TIMESTAMP_TZ('Mar 27 2008 18:35:25 MSK'.... sql.conf on both servers is same file /usr/local/sbin/radiusd -X | grep safe (1.1.7) sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" sql_log: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" и на 2.0.3: /usr/local/sbin/radiusd -X | grep safe (2.0.3) safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /"

1 0

RADIUS ports
by Santiago Balaguer García 27 Mar '08

27 Mar '08

Hi, Recently I have just configured another RADIUS server and I use /etc/services for radius service ports. I use auth port 1645 and acct port 1646. But, are these ports better than auth port 1812 and act port 1813 ? What ports are more standart ? Santiago _________________________________________________________________ Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar siempre a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance…

5 4

radius.log behaviour change v1 -> v2
by Stefan Winter 27 Mar '08

27 Mar '08

Hi, when doing tunneled EAP methods, the logging behaviour is different between v1 and v2. v1 used to be: inner request = localhost, outer request = real client, like below: Wed Dec 5 21:11:11 2007 : Auth: Login OK: [stefan.winter(a)restena.lu] (from client localhost port 0) Wed Dec 5 21:11:11 2007 : Auth: Login OK: [@restena.lu] (from client radius-1 port 1 cli 00-13-ce-c2-b1-86) v2 format is: both are logged as coming from real client, like: > Thu Mar 27 11:00:00 2008 : Auth: Login incorrect: [x.y(a)uni.lu] (from client WLC-Walferdange2 port 0) > Thu Mar 27 11:00:00 2008 : Auth: Login incorrect: [x.y(a)uni.lu] (from client WLC-Walferdange2 port 29 cli 00-1C-BF-73-E6-0A) That makes parsing the log file more difficult, if the number of authentications happening is to be taken out of the radius.log file. If a NAS doesn't send Calling-Station-Id, the two are almost not correlatable, except for the timestamp and a possibly different port (both seem whacky ways of doing it). Was this change advertantly? Can I get the old behaviour back? Or at least, add "-inner" to the client name for inner requests? Greetings, Stefan Winter -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter(a)restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473

1 0