- Freeradius-Users - lists.freeradius.org

How do I used my customized table in.
by johnson elangbam 03 Mar '08

03 Mar '08

hi, I am using free radius server 2.0 and Ms Sql 2000, I want to used my customized tables which contains only username and password.I've tried modyfying the query in dialup.conf, but it doesn't work. Please tell me the solution. here is the piece of output after rejecting the user that is stored in the database rad_recv: Access-Request packet from host 127.0.0.1 port 32807, id=226, length=56 User-Name = "John" User-Password = "1" NAS-IP-Address = 192.168.2.227 NAS-Port = 0 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "John", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop rlm_eap: No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop expand: %{User-Name} -> John rlm_sql (sql): sql_set_user escaped user --> 'John' rlm_sql (sql): Reserving sql socket id: 3 expand: SELECT UserName,Value FROM checking WHERE Username = '%{SQL-User-Name}' -> SELECT UserName,Value FROM checking WHERE Username = 'John' query: SELECT UserName,Value FROM checking WHERE Username = 'John' rlm_sql_getvpdata: database query error rlm_sql (sql): SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 3 ++[sql] returns fail Invalid user: [John/1] (from client localhost port 0) Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> John attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 1 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 1 Sending Access-Reject of id 226 to 127.0.0.1 port 32807 Waking up in 4.9 seconds. Cleaning up request 1 ID 226 with timestamp +17 Ready to process requests. Regards Elangbam Johnson

3 2

error running perl
by Oguzhan Kayhan 03 Mar '08

03 Mar '08

Hello, I am getting such an error when i try to run perl. symbol lookup error: /usr/lib/perl5/auto/DBI/DBI.so: undefined symbol: Perl_Tstack_sp_ptr Where should i check for debugging this error? What might be the possible reasons for that ? freeradius -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded perl perl: module = "/usr/local/bin/login.pl" perl: func_authorize = "authorize" perl: func_authenticate = "authenticate" perl: func_accounting = "accounting" perl: func_preacct = "preacct" perl: func_checksimul = "checksimul" perl: func_detach = "detach" perl: func_xlat = "xlat" perl: func_pre_proxy = "pre_proxy" perl: func_post_proxy = "post_proxy" perl: func_post_auth = "post_auth" perl: perl_flags = "(null)" perl: func_start_accounting = "(null)" perl: func_stop_accounting = "(null)" freeradius: symbol lookup error: /usr/lib/perl5/auto/DBI/DBI.so: undefined symbol: Perl_Tstack_sp_ptr ------------------- freeradius -v freeradius: FreeRADIUS Version 1.1.3, for host x86_64-pc-linux-gnu, built on Dec 17 2006 at 01:07:30 Copyright (C) 2000-2006 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. --------------------- perl -v This is perl, v5.8.8 built for x86_64-linux-gnu-thread-multi

1 0

Control Items. Make TTLS Require a client cert
by Wolfgang Burger 03 Mar '08

03 Mar '08

Hi, I have a short question (i hope). From eap.conf (2.0.2): # You can make TTLS require a client cert by setting # # EAP-TLS-Require-Client-Cert = Yes # # in the control items for a request. How or where do I set "Control Items". I can't find any information about them in the archive of the mailing list, wiki or faq. Or is this just a different name for check-items? Thank you very much Regards Wolfgang Burger

2 1

mideye authentication
by Norbert Wegener 03 Mar '08

03 Mar '08

One of our customers uses an authentication service from Mideye, which is described this way: The end-user requests access to a protected application, and is prompted for a user name and password. If the correct credentials have been provided, a one- time password (OTP) is presented on the user's mobile phone. The user is requested to enter the OTP, and if the correct OTP is returned, access is granted. http://www.mideye.com/index.php3?bredd=268.5 It should be simple to generate a one time password, throw it into a database,send it via sms and make it available for the next time, the user requests access. The problem here seems to be, that after a first successfull authentication another one with only a new password but the already entered username has to be done. Can this be realised with an actual freeradius? If so: Where can I find documentation about it? Norbert Wegener

3 6

Fetching username and password through perl script
by johnson elangbam 03 Mar '08

03 Mar '08

hi, I am using free radius 2 along with Ms Sql 2000, I need to authenticate with perl script using my own table schema which contains only username and password. How do I read username and password from these customize table using perl script. With Regards Elangbam Johnson

2 1

(no subject)
by Xiao Peng 03 Mar '08

03 Mar '08

Hi, I'm writing codes for a EAP-TTLS client, but I have some confusions when cope with diameter AVP format; Would anyone please send me some logs of EAP-TTLS handshake? ( I mean, just the EAP-TTLS messages exchange between a server and a client, which I can use for illustration ) Thanks so much!

2 1

limiting user access by day
by Budiono U. 03 Mar '08

03 Mar '08

Hi all, I'm currently setup freeradius server for hotspot, but right now I have some problem for limiting access user to particular day. As example : user1 accessing on Monday to Friday and user2 only accesing on Saturday or Sunday. And each user is limiting for one day access only, and after that day he/she can't login again. Is there any module or attribute to setup radius for this system. Any help would be appreciated. Thank you Budiono

4 3

stay in account list after disconnecting
by Zahra Bahar 02 Mar '08

02 Mar '08

Hi, some users stay in freeradius online users list after disconnecting. Is there any idea about the problem?

2 1

Need to authenticate with Perl
by johnson elangbam 01 Mar '08

01 Mar '08

Hi, I am trying to use authentication using Perl script, I've included a section of Perl in radiusd.conf which specifies the path of the Perl script, and I've included a section like Auth-Type Perl { perl }in the /sites-enabled/default file. I need to implement the stored procedures of MsSql in Perl script so that i can call the stored procedures through perl. Please help me how to implement it.With Regards Elangbam Johnson

2 1

NAS-Group? - different replies to different NASes?
by Adrian 01 Mar '08

01 Mar '08

Hello Everyone, I need help setting up custom replies for each NAS in my organization. I.E I have NAS A and NAS B When NAS A communicates with our Radius Server (Freeradius) I want to send back Tunnel attributes on domain matching. (i.e *(a)domain.com - a set of tunnel attributes Service-Type, Tunnel-Password, Tunnel-Type...etc - not user specific). When NAS B communicates with our Radius I want to send back specific information about the user it's requesting (i.e user(a)domain.com - Framed-IP, Framed-Netmask...etc) Since both requests are addressed to domain.com how can I selectively allow only certain responses to NAS A and others to NAS B? Thanks for the help Adrian Boros

5 23