- Freeradius-Users - lists.freeradius.org

RE: adding users at run time
by Raghu V S 03 Jan '08

03 Jan '08

Hi all, i am using freeradius of version 1.1.7 i wanted to know "is it possible to add the users to the user list at the run time. " Thank you all Raghu V S

1 0

Reread config files
by Norbert Wegener 02 Jan '08

02 Jan '08

When I remember correctly, one issue in pre2 had been, that on SIGHUP freeradius did not reread its configration completely. Is this issue already solved in cvs? Will especially the clients be reread by SIGHUP? Norbert Wegener **

2 1

truncate_radacct script deleted more then desired
by YvesDM 02 Jan '08

02 Jan '08

Hi, FR1.1.6 on debian. I use the truncate_radacct script that comes with dialup admin to delete older accounting records. I got the $back_days set at 365 days in order to keep the accounting data for one year. It 's been working fine untill this morning (1/1/08, 00:01) Instead of deleting data older then 01/01/07 it deleted all data older then 01/01/08, or everything in radacct :-( I 've got backups, that's not the problem, but I wonder what went wrong here. Anyone experiencing the same, any clues? Kind regards Yves

2 2

Re: question
by Raghu V S 02 Jan '08

02 Jan '08

Hi sir, i am using freeradius server version(1.1.7) initially i sent some request to server (radiusd),it was turned failure by server. now is there any way, so that "without restarting the server (radiusd)" , further requests can be sent and get processed by the server. thank you best regards, ----- Original Message ----- From: <freeradius-users-request(a)lists.freeradius.org> To: <freeradius-users(a)lists.freeradius.org> Sent: Monday, December 31, 2007 4:30 PM Subject: Freeradius-Users Digest, Vol 32, Issue 84 > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. clients.conf and SQL? (Tuc at T-B-O-H.NET) > 2. RE: (Raghu V S) > 3. Re: (liran tal) > 4. Re: clients.conf and SQL? (liran tal) > 5. Re: (Marinko Tarlac) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Sun, 30 Dec 2007 20:15:27 -0500 (EST) > From: "Tuc at T-B-O-H.NET" <ml(a)t-b-o-h.net> > Subject: clients.conf and SQL? > To: freeradius-users(a)lists.freeradius.org > Message-ID: > <200712310115.lBV1FRDO012471(a)himinbjorg.tucs-beachin-obx-house.com> > Content-Type: text/plain; charset=us-ascii > > Hi, > > I can't seem to find any reference to making the > contents of the clients.conf accessible via SQL. We are > constantly making edits, and having to constantly reload > the server doesn't make sense. > > Pointers to where I missed putting it into > MySQL, or if anyone knows how to would be appreciated. > > Thanks, Tuc > > > ------------------------------ > > Message: 2 > Date: Mon, 31 Dec 2007 10:59:30 +0530 > From: "Raghu V S" <raghu.vs(a)lifetreeindia.com> > Subject: RE: > To: <freeradius-users(a)lists.freeradius.org> > Message-ID: <000201c84b72$a71befc0$a901a8c0@Raghu> > Content-Type: text/plain; charset="iso-8859-1" > > initially started radius with (radiusd command). > > then once more gave the cmmand (radiusd -x) > output was as follows... > > " Starting - reading configuration files ... > Using deprecated naslist file. Support for this will go away soon. > There appears to be another RADIUS server running on the authentication > port 1812" > > how restart the server in debug mode? >

2 1

RE:
by Raghu V S 01 Jan '08

01 Jan '08

initially started radius with (radiusd command). then once more gave the cmmand (radiusd -x) output was as follows... " Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. There appears to be another RADIUS server running on the authentication port 1812" how restart the server in debug mode?

4 3

Two 'secret' entries in clients.conf
by jonr＠destar.net 01 Jan '08

01 Jan '08

Hello, Our network group is going to be changing the 'secret' for all of their gear but they are going to do it in stages. I was wondering if there is a way to have two 'secret' entries in the clients.conf file. Leave the original until the change is complete and have the new 'secret' also available for the devices that have changed their 'secret'. I saw in the wiki(http://wiki.freeradius.org/index.php/Clients.conf) this little bit of the config and was wondering if it would work. The only difference in the below portion of that page is one has a /24 and the other a /16 also the 'shortname' is different. Can the two stanzas both have the same CIDR and can the 'shortnames' be the same or do they have to be different? Thanks for any ideas, Jon # # You can now specify one secret for a network of clients. # When a client request comes in, the BEST match is chosen. # i.e. The entry from the smallest possible network. # #client 192.168.0.0/24 { # secret = testing123-1 # shortname = private-network-1 #} # #client 192.168.0.0/16 { # secret = testing123-2 # shortname = private-network-2 #}

2 1

edir authentication problem
by Generic Generic 31 Dec '07

31 Dec '07

Hi, I really need help with this one. I'm setting up Freeradius 1.1.4 on a SUSE 10 server for our wireless users with XP SP2 using PEAP. Because we use eDirectory I strip the computer name from the username, not every users uses the Novell client. The user get authorize but I can't get the authentication to work. For some reason the first character of the users password is change for a "a", if the first character is a "a" then it is change for something else. ??? I installed the 885453 and 917021 patches for Windows XP SP2 and changed the supplicant mode to 3, didn't help. This problem does not occur with users using the Novell client SP4. I included a few lines from the debug, the password should be mypassw instead of aypassw. Robert ldap_msgfree TLS trace: SSL_connect:before/connect initialization TLS trace: SSL_connect:SSLv2/v3 write client hello A TLS trace: SSL_connect:SSLv3 read server hello A TLS certificate verification: depth: 1, err: 0, subject: /OU=Organizational CA/O=CS, issuer: /OU=Organizational CA/O=CS TLS certificate verification: depth: 0, err: 0, subject: /O=CS/CN= rep01.mydomain.ca, issuer: /OU=Organizational CA/O=CS TLS trace: SSL_connect:SSLv3 read server certificate A TLS trace: SSL_connect:SSLv3 read server done A TLS trace: SSL_connect:SSLv3 write client key exchange A TLS trace: SSL_connect:SSLv3 write change cipher spec A TLS trace: SSL_connect:SSLv3 write finished A TLS trace: SSL_connect:SSLv3 flush data TLS trace: SSL_connect:SSLv3 read finished A rlm_ldap: bind as cn=User1,ou=Techs,o=ORG/aypassw to rep01.mydomain.ca:389 <= ldap_bind ... ldap_chase_referrals read1msg: V2 referral chased, mark request completed, id = 2 new result: res_errno: 49, res_error: <NDS error: failed authentication (-669)>, res_matched: <> read1msg: ld 0x8013f578 0 new referrals read1msg: mark request completed, ld 0x8013f578 msgid 2 request done: ld 0x8013f578 msgid 2 res_errno: 49, res_error: <NDS error: failed authentication (-669)>, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_free_connection 0 1 ldap_free_connection: refcnt 1 ldap_parse_result ldap_msgfree rlm_ldap: LDAP login failed: check identity, password settings in ldap section of radiusd.conf ldap_free_connection 1 1 ldap_send_unbind ldap_free_connection: actually freed TLS trace: SSL3 alert write:warning:close notify rlm_ldap: eDirectory account policy check failed. rlm_ldap: NDS error: failed authentication (-669) rlm_ldap: ldap_release_conn: Release Id: 0 modcall[post-auth]: module "ldap1" returns reject for request 1 modcall: leaving group REJECT (returns reject) for request 1 Delaying request 1 for 1 seconds Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 24 to 10.228.14.81 port 20000 Reply-Message = "NDS error: failed authentication (-669)"

1 0

clients.conf and SQL?
by Tuc at T-B-O-H.NET 31 Dec '07

31 Dec '07

Hi, I can't seem to find any reference to making the contents of the clients.conf accessible via SQL. We are constantly making edits, and having to constantly reload the server doesn't make sense. Pointers to where I missed putting it into MySQL, or if anyone knows how to would be appreciated. Thanks, Tuc

2 1

Autoreply: Re: building problem wit actual cvs
by rcupardo＠tnet.it 29 Dec '07

29 Dec '07

Salve, sono assente dall'ufficio e non tornerò fino al 07/01/2008. Risponderò al messaggio al mio ritorno. Per eventuali comunicazioni urgenti potete contattare il numero verde 800.91.92.99 o inviare una email ad info(a)tnet.it specificando la natura del problema. Saluti -- Riccardo Cupardo Area Network mailto:rcupardo@tnet.it Tel: +39 095 37 83 111 Fax: +39 095 37 83 444 __________________ T. NET ________________ Sede T. net Italia S.r.l.: Viale Africa, 84 - 95129 Catania - Italy Tel: +39 095 37 83 111 - Fax: +39 095 37 83 444 P. I.V.A.: 03979950874 www.tnet.it www.lavocevola.it __________T. NET Telecommunication Company________ *************************************************************** Le informazioni in questa e-mail sono confidenziali e riservate esclusivamente al destinatario del messaggio. Information in this email is confidential and intended solely for the addressee; it may be legally privileged.

1 0

building problem wit actual cvs
by Norbert Wegener 29 Dec '07

29 Dec '07

With the actual cvs there is a build problem: ./configure .... ... gcc -g -O2 -I/usr/src/packages/BUILD/freeradius-server-2.0.0-281207/src -DHOSTINFO=\"i686-pc-linux-gnu\" -DRADIUSD_VERSION=\"2.0.0-beta\" -DOPENSSL_NO_KRB5 -c radiusd.c -fPIC -DPIC -o .libs/radiusd.o radiusd.c: In function 'main': radiusd.c:148: error: 'buffer' undeclared (first use in this function) radiusd.c:148: error: (Each undeclared identifier is reported only once radiusd.c:148: error: for each function it appears in.) radiusd.c:175: warning: passing argument 1 of 'free' discards qualifiers from pointer target type radiusd.c:440: warning: passing argument 1 of 'free' discards qualifiers from pointer target type gmake[4]: *** [radiusd.lo] Fehler 1 gmake[4]: Leaving directory `/usr/src/packages/BUILD/freeradius-server-2.0.0-281207/src/main' Norbert Wegener

3 5