- Freeradius-Users - lists.freeradius.org

SQLippool problems (duplicate IPs handed out).
by Dave 14 Jan '08

14 Jan '08

I use the sql IP pool setup with mysql, and been using it fine for a while, but I have a problem where if I have an influx of connections at one time (30++) That freeradius will hand out an IP to my NAS, but it doesnt get written to the database fast enuff and another thread of freeradius hands out the same IP to another user, and logs that entry to the radippool table. So I get users with duplicate IP addresses.. this never happens if the connections are coming in slow enough, (1 or 2 at a time). freeradius 1.1.6 with mysql 5.0.26. Here is my sqlippool.conf. ---------------------------------------------------------------------------------------------------------------------------- sqlippool { ## SQL instance to use (from sql.conf) sql-instance-name = "sql" ## Table to keep ippool info ippool_table = "radippool" ## lease_duration. fix for lost acc-stop packets lease-duration = 3600 ## Attribute which should be considered unique per NAS ## Using NAS-Port gives behaviour similar to rlm_ippool. Calling-Station-Id is for NAS that send fixed NAS-Port pool-key = "%{NAS-Port}" # pool-key = "%{Calling-Station-Id}" ## Logging configuration. sqlippool_log_exists = "Existing IP: %{reply:Framed-IP-Address} \ (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" sqlippool_log_success = "Allocated IP: %{reply:Framed-IP-Address} from %{check:Pool-Name} \ (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" sqlippool_log_clear = "Released IP %{Framed-IP-Address}\ (did %{Called-Station-Id} cli %{Calling-Station-Id} user %{User-Name})" sqlippool_log_failed = "IP Allocation FAILED from %{check:Pool-Name} \ (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" sqlippool_log_nopool = "No Pool-Name defined \ (did %{Called-Station-Id} cli %{Calling-Station-Id} port %{NAS-Port} user %{User-Name})" # ## This series of queries allocates an IP address # allocate-clear = "UPDATE ${ippool_table} \ # SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', \ # expiry_time = '0000-00-00 00:00:00' \ # WHERE pool_key = '${pool-key}'" ## This will clear all expired leases for lost acc-stop packets allocate-clear = "UPDATE radippool \ SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', \ expiry_time = '0000-00-00 00:00:00' \ WHERE expiry_time <= NOW() - INTERVAL 1 SECOND" # ## The ORDER BY clause of this query tries to allocate the same IP-address # ## which user had last session... allocate-find = "SELECT framedipaddress FROM ${ippool_table} \ WHERE pool_name = '%{check:Pool-Name}' AND expiry_time < NOW() \ ORDER BY (username <> '%{User-Name}'), (callingstationid <> '%{Calling-Station-Id}'), expiry_time \ LIMIT 1 \ FOR UPDATE" ## If you prefer to allocate a random IP address every time, use this query instead #allocate-find = "SELECT framedipaddress FROM ${ippool_table} \ # WHERE pool_name = '%{check:Pool-Name}' AND expiry_time = '0000-00-00 00:00:00' \ # ORDER BY RAND() \ # LIMIT 1 \ # FOR UPDATE" ## If an IP could not be allocated, check to see if the pool exists or not ## This allows the module to differentiate between a full pool and no pool ## Note: If you are not running redundant pool modules this query may be commented ## out to save running this query every time an ip is not allocated. pool-check = "SELECT id FROM ${ippool_table} WHERE pool_name='%{check:Pool-Name}' LIMIT 1" allocate-update = "UPDATE ${ippool_table} \ SET nasipaddress = '%{NAS-IP-Address}', pool_key = '${pool-key}', \ callingstationid = '%{Calling-Station-Id}', username = '%{User-Name}', \ expiry_time = NOW() + INTERVAL ${lease-duration} SECOND \ WHERE framedipaddress = '%I'" ## This series of queries frees an IP number when an accounting ## START record arrives start-update = "UPDATE ${ippool_table} \ SET expiry_time = NOW() + INTERVAL ${lease-duration} SECOND \ WHERE nasipaddress = '%{NAS-IP-Address}' AND pool_key = '${pool-key}'" ## This series of queries frees an IP number when an accounting ## STOP record arrives stop-clear = "UPDATE ${ippool_table} \ SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', \ expiry_time = '0000-00-00 00:00:00' \ WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '${pool-key}' AND username = '%{User-Name}' \ AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'" ## This series of queries frees an IP number when an accounting ## ALIVE record arrives alive-update = "UPDATE ${ippool_table} \ SET expiry_time = NOW() + INTERVAL ${lease-duration} SECOND \ WHERE nasipaddress = '%{Nas-IP-Address}' AND pool_key = '${pool-key}' AND username = '%{User-Name}' \ AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'" ## This series of queries frees the IP numbers allocate to a ## NAS when an accounting ON record arrives on-clear = "UPDATE ${ippool_table} \ SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', \ expiry_time = '0000-00-00 00:00:00' \ WHERE nasipaddress = '%{Nas-IP-Address}' AND username = '%{User-Name}' \ AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'" ## This series of queries frees the IP numbers allocate to a ## NAS when an accounting OFF record arrives off-clear = "UPDATE ${ippool_table} \ SET nasipaddress = '', pool_key = 0, callingstationid = '', username = '', \ expiry_time = '0000-00-00 00:00:00' \ WHERE nasipaddress = '%{Nas-IP-Address}' AND username = '%{User-Name}' \ AND callingstationid = '%{Calling-Station-Id}' AND framedipaddress = '%{Framed-IP-Address}'" } ----------------------------------------------------------------------------------------------------------------- Anyone have any ideas? Thanks

3 3

help again
by adnan deura 14 Jan '08

14 Jan '08

if the website is old where should i go buddy http://www.aerospacesoftware.com/radius.html ? _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

3 2

help
by adnan deura 14 Jan '08

14 Jan '08

please help! i have to install freeRADIUS 1.1.7 on fedora core 7 ,but i am unable to add users to the 'users' file . i am getting help from the website : www.aerospacesoftware.com/radius.html i add the user in this way, johndoe Auth-Type := Local, User-Password == "johndoepassword" Reply-Message = "Hello, %u" AND AFTER THAT # radiusd -X# radtest johndoe johndoepassword localhost 1812 yoursharedsecret BUT THE RESPONSE FROM THE SERVER IS NOT "rad_recv: Access Accept packet...". BUT "rad_recv: Access-Rejected packet...". please tell me what to do should i install an older version ? _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

3 2

Problem with accounting
by Marinko Tarlac 14 Jan '08

14 Jan '08

Hi We have FreeRadius 1.1.4 and Mikrotik (as a NAS) with MySql as a database. Accounting works fine for all users except for one user. Authentication works fine and NAS sends updates as I specify for all users and I can't find any reason why it doesn't work for specific username. In debugging mode (radiusd -X and radiusd -x) I can see updates but MySql is empty...

4 3

help help help
by adnan deura 14 Jan '08

14 Jan '08

hello everybody i am given the task of installing freeradius 1.1.7 on fedora core 7 for my computer networking course's final project. my sir has a very little idea of freeRADIUS ., what should i do to get a good grade . i have installed ,configured( i think so ),and added a user in the 'user' file and it all works well . i do not know what to do next please tell me that what i can i do next or at least tell me what to do on google. how is a user going to access the radius server on my machine , and what are the things i can do with this tool to show to my lecturer, and what things are that i can do to avail the full features of freeRADIUS 1.1.7 waiting for your reply thanks in advance. _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

3 2

R: help help help
by Francesco Cristofori 14 Jan '08

14 Jan '08

I think you're asking us to do the homework for you.... ;-) Take a look on google for "radius architecture" and read radius rfcs . After reading it should be clear what radius can and cannot do. Regards, Francesco. ________________________________ Da: freeradius-users-bounces+f.cristofori=satcom.it(a)lists.freeradius.org [mailto:freeradius-users-bounces+f.cristofori=satcom.it@lists.freeradius.org] Per conto di adnan deura Inviato: lunedì 14 gennaio 2008 12.26 A: freeradius-users(a)lists.freeradius.org Oggetto: help help help hello everybody i am given the task of installing freeradius 1.1.7 on fedora core 7 for my computer networking course's final project. my sir has a very little idea of freeRADIUS ., what should i do to get a good grade . i have installed ,configured( i think so ),and added a user in the 'user' file and it all works well . i do not know what to do next please tell me that what i can i do next or at least tell me what to do on google. how is a user going to access the radius server on my machine , and what are the things i can do with this tool to show to my lecturer, and what things are that i can do to avail the full features of freeRADIUS 1.1.7 waiting for your reply thanks in advance. ________________________________ Express yourself instantly with MSN Messenger! MSN Messenger <http://clk.atdmt.com/AVE/go/onm00200471ave/direct/01/>

1 0

Version 2.0.0 has been released
by Alan T DeKok 13 Jan '08

13 Jan '08

January 10, 2007 - Version 2.0.0 has been released. We are pleased to announce that Version 2.0.0 has been released. This version is a tremendous step forward in functionality for the server. See http://freeradius.org for more information, including downloads, and major updates to the web site. Feature Improvements * simple policy language (see "man unlang") * virtual servers ("raddb/sites-available/README") * IPv6 support * better proxy support ("raddb/proxy.conf") * More EAP types * Debugging output should be <em>much</em> easier to understand * VMPS support * More modules have been moved to "stable" status (python, etc.) * SQL configuration has been cleaned up (see "raddb/sql/*") * limited support for HUP. (The configuration for some modules is re-loaded on HUP. Nothing else is reloaded.) * check configuration and exit ("radiusd -C") * Server core is now event based (simpler, more powerful) Bug Fixes * The server re-design has resulted in simple fixes for many issues that were too difficult to correct in Version 1.1.x. Alan DeKok.

10 12

SALE 75% OFF on Pfizer
by admin＠Viagra.com 13 Jan '08

13 Jan '08

1 0

freeradius and error "can't resolve symbol '__uClibc_start_main"
by kaskada＠email.cz 13 Jan '08

13 Jan '08

Hello, I`ve installed freeradius on OpenWRT (http://openwrt.org/) on RouterBoard 1xx platform. I`m having a problem with running package freeradius_1.1.1-1 (freeradius_1.1.2-1 does the same error). When I type command "radiusd" I get this error: radiusd: can't resolve symbol '__uClibc_start_main' I`ve no idea what it tries to tell me and neither google nor some forum search helped me. I use these packages, which freeradius depends on: zlib_1.2.3-4_mipsel.ipk libopenssl_0.9.8e-3_mipsel.ipk libltdl_1.5.22-1_mipsel.ipk libpthread_0.9.28.2-10_mipsel.ipk Thak you a lot for your help. Pepe

4 3

Proxy requests based on Called-Id
by Abel Alejandro 12 Jan '08

12 Jan '08

Hello, I want to proxy requests to different radius servers matching the Called-Id of the request instead of matching a realm attached to the username. Is this possible with freeradius? Abel, Thanks.

2 1