- Freeradius-Users - lists.freeradius.org

Freeradius + Postgres not working with init.d script
by Baltazar Ruiz 27 Dec '07

27 Dec '07

Hello everyone, I'm running: Freeradius 1.1.3 + Postgresql Version: 8.1.9, Release: 1.el5 on CentOS 5 My problem is that when I execute: radiusd -sxxx everything runs fine, but, when I execute: /etc/init.d/radiusd start I get the following error: Error: rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server user@localhost:database Error: rlm_sql_postgresql: Postgresql error 'could not connect to server: Permission denied ?Is the server running on host "localhost" and accepting ?TCP/IP connections on port 5432? ' Error: rlm_sql (pgsql-voip): Failed to connect DB handle #0 To me it seems that everything is configured properly because it runs fine when executed manually, but I just can't find the way to make it work with the init.d script.. Thanks for your help.

3 2

NAS-IP-Address groupcheck item
by Jeff Crowe 27 Dec '07

27 Dec '07

Hi all, I am trying to deny a user from logging in through a couple of nas I have on my network. I am using freeradius 1.1.3 with mysql. In my table radgroupcheck, I have added Groupname Attribute Op Value Dial-Up NAS-IP-Address != 1.1.1.1 Dial-Up NAS-IP-Address != 2.2.2.2 The SQL check always seems to return the last value of 2.2.2.2 and never compare against the 1.1.1.1. If my user is connecting to 1.1.1.1, they will authenticate and be allowed online. Can someone please point me in the correct direction to allow me to define multiple nas servers that I can deny authentication from? Thanks and happy holidays Jeff

2 2

Re: freeradius + OpenWrt
by tran thang 27 Dec '07

27 Dec '07

Hello I am using Freeradius with Cisco AP and MS AD, Regards Thang ----- Original Message ---- From: "A.L.M.Buxey(a)lboro.ac.uk" <A.L.M.Buxey(a)lboro.ac.uk> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Wednesday, December 26, 2007 10:17:22 PM Subject: Re: freeradius + OpenWrt Hi, > Hi, > I want to know is someone is using freeradius with APs with OpenWRT > installed. I'd like to hear experiences about it. works. i wouldnt get a too complex system though - unless you are fortunate enough to have one of the routers with 32Mb of RAM and 16Mb of storage.... alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

2 1

Configure Cisco Aironet 1130 with PEAP/Ms-Chap2
by Julian Stöver 27 Dec '07

27 Dec '07

Hi, after solving my problem with creating certificates i got another problem: I enabled MsCHAP in the Radius configuration and added the server as an radius authentication and accounting server and also enables aes-ccmp and wpa2 mendatory key. but if i want to login, i get the message "login faild" on the login prompt. and the radius server didn't get any requests... whats wrong in the configuration? radtest succes when i run it from my notebook from the same subnet, so it can't be the firewall... thanks for help and some hints ;) julian

3 4

Perl problem When restarting FreeRadius Deamon after adding some perl module
by Ram Akuka 27 Dec '07

27 Dec '07

Hi, i trying to configure mac-address authentication system with FreeRadius and FreeNAC. after installing the FreeRadius and FreeNAC (ubuntu 7.10) i added the following to the Radius configuration: modules: perl check_mac { module = "/opt/nac/bin/rad2vmps" } authorize: # Enable MAC lookup via VMPS: collect request data from radius check_mac authenticate: Auth-Type MAC-Auth-Bypass { check_mac } post-auth # Enable MAC lookup via VMPS: query vmps and assign vlan or deny check_mac when trying to start the radius server i get the following error: # /etc/init.d/freeradius start * Starting FreeRADIUS daemon freeradius Thu Dec 27 10:28:34 2007 : Info: Starting - reading configuration files ... /usr/sbin/freeradius: symbol lookup error: /usr/lib/perl/5.8/auto/Fcntl/Fcntl.so: undefined symbol: Perl_Tstack_sp_ptr [ OK ] when trying to run the rad2vmps script independently is working fine, heres some details : # freeradius -version freeradius: FreeRADIUS Version 1.1.6, for host i486-pc-linux-gnu, built on Jun 8 2007 at 17:17:46 Copyright (C) 2000-2007 The FreeRADIUS server project. perl -V Summary of my perl5 (revision 5 version 8 subversion 8) configuration: Platform: osname=linux, osvers=2.6.15.7, archname=i486-linux-gnu-thread-multi uname='linux terranova 2.6.15.7 #1 smp thu jul 12 14:27:56 utc 2007 i686 gnulinux ' config_args='-Dusethreads -Duselargefiles -Dccflags=-DDEBIAN -Dcccdlflags=-fPIC -Darchname=i486-linux-gnu -Dprefix=/usr -Dprivlib=/usr/share/perl/5.8 -Darchlib=/usr/lib/perl/5.8 -Dvendorprefix=/usr -Dvendorlib=/usr/share/perl5 -Dvendorarch=/usr/lib/perl5 -Dsiteprefix=/usr/local -Dsitelib=/usr/local/share/perl/5.8.8 -Dsitearch=/usr/local/lib/perl/5.8.8 -Dman1dir=/usr/share/man/man1 -Dman3dir=/usr/share/man/man3 -Dsiteman1dir=/usr/local/man/man1 -Dsiteman3dir=/usr/local/man/man3 -Dman1ext=1 -Dman3ext=3perl -Dpager=/usr/bin/sensible-pager -Uafs -Ud_csh -Uusesfio -Uusenm -Duseshrplib -Dlibperl=libperl.so.5.8.8 -Dd_dosuid -des' hint=recommended, useposix=true, d_sigaction=define usethreads=define use5005threads=undef useithreads=define usemultiplicity=define useperlio=define d_sfio=undef uselargefiles=define usesocks=undef use64bitint=undef use64bitall=undef uselongdouble=undef usemymalloc=n, bincompat5005=undef Compiler: cc='cc', ccflags ='-D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -pipe -I/usr/local/include -D_LARGEFILE_SOURCE -D_FILE_OFFSET_BITS=64', optimize='-O2', cppflags='-D_REENTRANT -D_GNU_SOURCE -DTHREADS_HAVE_PIDS -DDEBIAN -fno-strict-aliasing -pipe -I/usr/local/include' ccversion='', gccversion='4.1.3 20070929 (prerelease) (Ubuntu 4.1.2-16ubuntu2)', gccosandvers='' intsize=4, longsize=4, ptrsize=4, doublesize=8, byteorder=1234 d_longlong=define, longlongsize=8, d_longdbl=define, longdblsize=12 ivtype='long', ivsize=4, nvtype='double', nvsize=8, Off_t='off_t', lseeksize=8 alignbytes=4, prototype=define Linker and Libraries: ld='cc', ldflags =' -L/usr/local/lib' libpth=/usr/local/lib /lib /usr/lib libs=-lgdbm -lgdbm_compat -ldb -ldl -lm -lpthread -lc -lcrypt perllibs=-ldl -lm -lpthread -lc -lcrypt libc=/lib/libc-2.6.1.so, so=so, useshrplib=true, libperl=libperl.so.5.8.8 gnulibc_version='2.6.1' Dynamic Linking: dlsrc=dl_dlopen.xs, dlext=so, d_dlsymun=undef, ccdlflags='-Wl,-E' cccdlflags='-fPIC', lddlflags='-shared -L/usr/local/lib' Characteristics of this binary (from libperl): Compile-time options: MULTIPLICITY PERL_IMPLICIT_CONTEXT PERL_MALLOC_WRAP THREADS_HAVE_PIDS USE_ITHREADS USE_LARGE_FILES USE_PERLIO USE_REENTRANT_API Built under linux Compiled at Sep 29 2007 05:57:38 @INC: /etc/perl /usr/local/lib/perl/5.8.8 /usr/local/share/perl/5.8.8 /usr/lib/perl5 /usr/share/perl5 /usr/lib/perl/5.8 /usr/share/perl/5.8 /usr/local/lib/site_perl uname -a Linux XXXXXX 2.6.22-14-generic #1 SMP Tue Dec 18 08:02:57 UTC 2007 i686 GNU/Linx any ideas how can i fix this ? thanks in advance -- Ram

3 4

Freeradius with MS Active directory
by tran thang 27 Dec '07

27 Dec '07

Hello all, I am configuring freeradius with Cisco AP as access device and Microsoft AD as User database for users authentication by email and password but still having some bugs. So if anyone have used familiar solution please kindly guide me config radiusd.conf file so FreeRadius can communicate with MS AD. Yours Respectfully, Tran Nam Thang. ----- Original Message ---- From: Oguzhan Kayhan <oguzhank(a)bilkent.edu.tr> To: Peter Nixon <listuser(a)peternixon.net> Cc: freeradius-users(a)lists.freeradius.org Sent: Thursday, December 27, 2007 7:16:21 AM Subject: Re: Hello Peter and all, Yes i managed to work authentication via rlm_perl. I can get accept or reject without a problem. WHat i wonder is can i use it as a hybrid system as, to keep radacct logs in sql, or to get some info data from radgrouprelpy or smwhere? Or some stuff similar like this. I just wanna use rlm_perl for user/pass matching thats all. Rest should be by mysql. Or do i have to write all this modules manually in my perl script too? > Selam Oguzhan > > You need to be aware of a few things: > > Firstly, unless your clients use PAP you will not have a plain text > password > to use when loging into the IMAP server. > > Secondly, It is almost always a better idea to directly check the same > backend credential store that yoru IMAP server uses than going via the > IMAP > protocol. If its a large mail server (At bilkent for example ;-) then you > probably have an LDAP tree or SQL server at the backend which FreeRADIUS > can > directly talk to which would save several steps and protocol conversions > and > be much faster than going via IMAP. (You would also likely not have to > write > a perl module..) > > Ä°yi Ã§alÄ±Å�malar > > Peter > > On Mon 24 Dec 2007, Oguzhan Kayhan wrote: >> Hello all, >> I am trying to figure out how to use rlm_perl module for authentication >> purposes. >> Whats in my mind is to use my existing IMAP server to check if account >> exists or not. >> On the wiki page of rlm_perl i see an example script as : >> >> # Function to handle accounting >> sub accounting { >> # For debugging purposes only >> # &log_request_attributes; >> >> # You can call another subroutine from here >> &test_call; >> >> return RLM_MODULE_OK; >> } >> >> Ok... >> Now.. what should be my return value for test_call subroutine to make it >> work. I am planning to call an Imap module here and as a return value i >> should return what? >> Im not good at perl so, any tiny help will be appreciated. >> >> I am planning to make smthing like this but i am really not sure if it >> works or not: >> >> sub imapLogin { >> my $host = shift; >> my $account = shift; >> my $password = shift; >> my $server = shift; >> >> # open a connection to the IMAP server >> if (! ($server = new Net::IMAP::Simple($host))) { >> return "cannot connect IMAP server"; >> } >> >> # login, if success return 1 (true?) and 0 (false?) >> if ($server->login( $account, $password )) { >> return RLM_MODULE_OK; >> } else { >> return RLM_MODULE_REJECT; >> } >> } >> >> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > > > > -- > > Peter Nixon > http://peternixon.net/ > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ____________________________________________________________________________________ Be a better friend, newshound, and know-it-all with Yahoo! Mobile. Try it now. http://mobile.yahoo.com/;_ylt=Ahu06i62sR8HDtDypao8Wcj9tAcJ

1 0

freeradius + OpenWrt
by Sergio Belkin 26 Dec '07

26 Dec '07

Hi, I want to know is someone is using freeradius with APs with OpenWRT installed. I'd like to hear experiences about it. Thanks in advance. -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 1

Mysql error
by Pablo Lucchetti 25 Dec '07

25 Dec '07

Hi, I've an error with mysql, I think is php mysql client. I did upgrade to php5 but the erros remains the same. Mysql is Ver 14.12 Distrib 5.0.32, for pc-linux-gnu (i486) using readline 5.2 rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius rlm_sql_mysql: Mysql error 'Client does not support authentication protocol requested by server; consider upgrading MySQL client' rlm_sql (sql): Failed to connect DB handle #0 rlm_sql (sql): starting 1 rlm_sql (sql): starting 2 rlm_sql (sql): starting 3 rlm_sql (sql): starting 4 rlm_sql (sql): Failed to connect to any SQL server. Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. Any help? Thanks in advance Pablo

5 17

User with ntdomain authenticate with freeRADIUS + AD
by Hangjun He 24 Dec '07

24 Dec '07

Hi, freeRADIUS version 1.1.6. When I use DOMAIN\user format, Can work. When I use user@DOMAIN format, Can not work. Why? Thanks! John --------------------------------- 雅虎邮箱传递新年祝福，个性贺卡送亲朋！

2 1

Looking for feedback
by Geoffroy ARNOUD 23 Dec '07

23 Dec '07

Hi all, First I apologize, because the question I am about to ask is not directly linked to FreeRADIUS. I am a FreeRADIUS user, and I am looking for feedback regarding the NAS all of you use. Actually, I am looking for a NAS, able to manage access for several Wifi hotspot (> 500 hotspots, > 5000 users). The NAS would be the gateway, restricting user to access Internet, by redirecting users' traffic to a Web portal. EAP must alos be supported transparently (the NAS would act as a RADIUS proxy, between APs and FreeRADIUS, but would open the connection transparently). I took a look at Coova, but it seems to me that it is not adpated for a centralized solution, where each hotspot has its own DHCP server. All options are opened for me (opensource or manufacturer), so don't hesitate to reply to me (directly, because this list is not the purpose of my request). Any feedback woul be appreciated. Many thanks Daniel

3 4