- Freeradius-Users - lists.freeradius.org

Help w/ pam radius
by Jeff Fishbaugh 18 Dec '07

18 Dec '07

Hello: I am having trouble getting pam_radius working and was wondering if someone might be of help since I followed the INSTALL instructions as well as a howto (as provided by the Wikid folks) and I am still coming up short getting it working. Here are some of my details - My PAM is such it is by service (Fedora 7 -- 0.99.7.1-5.1)....sshd being what I am most interested in, the default config for it looks like the below on a host I want talking to radius. What does this need to look like in terms of the pam_radius_auth.so related stanzas to get it working? Neither the INSTALL instructions or a howto I found would work. /etc/pam.d/sshd (default below) #%PAM-1.0 auth include system-auth account required pam_nologin.so account include system-auth password include system-auth session optional pam_keyinit.so force revoke session include system-auth session required pam_loginuid.so - My Radius box runs freeradius (freeradius-1.1.7-3.1) with LDAP (fedora-ds) backending it with the user/pass info, got it working for Cisco's but have yet to get PAM working. I just get 'Access denied' -- tried the later with a user defined on the host with no password or with a password and won't work. Pretty simple, no huntgroups or anythig like that just plain and simple binding against LDAP. I think what I am looking for are... 1- Pam configuration on the host (ie- /etc/pam.d/sshd) 2- Pam configuration requirements as far as the radius server is concerned. Be helpful to see what all I might need that I am possibly missing in conf files. Thank you!

1 0

Expiration attribute limitation - max year?
by Marinko Tarlac 18 Dec '07

18 Dec '07

Hello I'm working on something and I can figure what is the max year for expiration attribute? Here is the problem rlm_sql: Failed to create the pair: failed to parse time string "December 31 2039 00:00:00" When I enter December 31 2035 00:00:00 as a year it works but 2039 doesn't. Is there any way to avoid this limit? I know that 2035th year is a far from now but.. :)

2 1

freeradius server and access point do not communicate each other
by Gianni Socionovo 18 Dec '07

18 Dec '07

Hello guys, i am a newby in installing and configuring an access point with a radius server. I set up a free radius server (IP 10.1.1.1) and i checked that is on. I set up a wireless access point (D-LINK DLW3200 AP, IP 10.1.1.2) with wpa2-enterprise authentication settings. In the screen of DWL authentication setting i set 10.1.1.1 as radius server and "radiussecret" as Radius Secret. In freeradius configuration file clients.conf i added the following: client 10.1.1.2 { secret = radiussecret shortname = dlink nastype = other } and i switched on sql authorizing because i use freeradius-mysql in radiusd.conf. I set up freeradius dialupadmin and it works right. I added a test user to table radcheck ('test', 'testpwd', 'radiussecret') I lauched the command: radtest test testpwd 10.1.1.2 0 radiussecret and i got the following message: radclient: no response from server for ID xx. if i ping the devices from one to another they respond each other. Is there anyone who can help me. I need to set the access point up asap for my company. thanks in advance for your help best regards soxio

2 2

no logging => reject?
by Norbert Wegener 18 Dec '07

18 Dec '07

I am using a recent pre-2, authentication via a mysql database. In post-auth I have a sql module, that reports accept/reject to a another mysql database. When this database is not available, the user is rejected, although I get Auth-Type = Accept before. Is this a desired behaviour, bug or feature? ... rad_check_password: Auth-Type = Accept, accepting the user Login OK: [000000007989] (from client 149.246.185.169 port 1812) +- entering group post-auth ++? if ("%{User-Name}" =~ /.net/i || "%{User-Name}" =~ /@/ ) expand: %{User-Name} -> 000000007989 ? Evaluating ("%{User-Name}" =~ /.net/i) -> FALSE expand: %{User-Name} -> 000000007989 Evaluating ("%{User-Name}" =~ /@/) -> FALSE ++? if ("%{User-Name}" =~ /.net/i || "%{User-Name}" =~ /@/ ) -> FALSE expand: //var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d -> //var/log/radius/radacct/149.246.185.169/reply-detail-20071218 rlm_detail: //var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to //var/log/radius/radacct/149.246.185.169/reply-detail-20071218 expand: %t -> Tue Dec 18 15:29:07 2007 ++[reply_log] returns ok rlm_sql (sql): Processing sql_postauth expand: %{User-Name} -> 000000007989 rlm_sql (sql): sql_set_user escaped user --> '000000007989' expand: INSERT into radpostauth (id, user, pass, reply, date,nasname) values ('', '%{User-Name}', '%{User-Password}', '%{reply:Packet-Type}', NOW(),'%{NAS-IP-Address}') -> INSERT into radpostauth (id, user, pass, reply, date,nasname) values ('', '000000007989', '000000007989', 'Access-Accept', NOW(),'139.25.153.222') rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date,nasname) values ('', '000000007989', '000000007989', 'Access-Accept', NOW(),'139.25.153.222') rlm_sql (sql): Ignoring unconnected handle 4.. rlm_sql (sql): Ignoring unconnected handle 3.. rlm_sql (sql): Ignoring unconnected handle 2.. rlm_sql (sql): Ignoring unconnected handle 1.. rlm_sql (sql): Ignoring unconnected handle 0.. rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 0 ++[sql] returns fail Found Post-Auth-Type Reject +- entering group REJECT rlm_sql (sql): Processing sql_postauth expand: %{User-Name} -> 000000007989 rlm_sql (sql): sql_set_user escaped user --> '000000007989' expand: INSERT into radpostauth (id, user, pass, reply, date,nasname) values ('', '%{User-Name}', '%{User-Password}', '%{reply:Packet-Type}', NOW(),'%{NAS-IP-Address}') -> INSERT into radpostauth (id, user, pass, reply, date,nasname) values ('', '000000007989', '000000007989', 'Access-Reject', NOW(),'139.25.153.222') rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date,nasname) values ('', '000000007989', '000000007989', 'Access-Reject', NOW(),'139.25.153.222') rlm_sql (sql): Ignoring unconnected handle 4.. rlm_sql (sql): Ignoring unconnected handle 3.. rlm_sql (sql): Ignoring unconnected handle 2.. rlm_sql (sql): Ignoring unconnected handle 1.. rlm_sql (sql): Ignoring unconnected handle 0.. rlm_sql (sql): There are no DB handles to use! skipped 5, tried to connect 0 ++[sql] returns fail Sending Access-Reject of id 51 to 149.246.185.169 port 32833 Finished request 0. Going to the next request Waking up in 0.9 seconds. Waking up in 4.0 seconds. Cleaning up request 0 ID 51 with timestamp +1 Ready to process requests. Norbert Wegener

4 4

NT Passwords
by Andreas Moroder 18 Dec '07

18 Dec '07

Hello, we would like to activate PEAP authentication with openLDAP. According to radiusd.conf #Note that NT-Passwords MUST be stored as a 32-digit hex # string, and MUST start off with "0x", such as: # # 0x000102030405060708090a0b0c0d0e0f # # Without the leading "0x", NT-Passwords will not work. # This goes for NT-Passwords stored in SQL, too. The problem is that samba itself and othe management tools like webmin store the NT and the LM password as 32.digit hex string but without the 0x. I tried to add the 0x but the logon to main domain does not work with this added. Is there a good reason why freeradius needs a differen tformat then samba ? Thanks Andreas

2 2

EAP-SIM need help...
by Raghavendra. S 18 Dec '07

18 Dec '07

Hi, I added following lines in eap.conf inside eap block. sim { } I added following lines to users file. eapsim Auth-Type := EAP, EAP-Type := SIM EAP-Sim-Rand1 = 0xabcd1234abcd1234abcd1234abcd1234, EAP-Sim-SRES1 = 0x1234abcd, EAP-Sim-KC1 = 0x0011223344556677, EAP-Sim-Rand2 = 0xbcd1234abcd1234abcd1234abcd1234a, EAP-Sim-SRES2 = 0x234abcd1, EAP-Sim-KC2 = 0x1021324354657687, EAP-Sim-Rand3 = 0xcd1234abcd1234abcd1234abcd1234ab, EAP-Sim-SRES3 = 0x34abcd12, EAP-Sim-KC3 = 0x30415263748596a7 In src/tests/eapsim-03 there is one extra parameter, Autz-Type:=EAP, for which I am getting some error while enabling radiusd. So I removed Autz-Type:=EAP from first line. Is that OK? I want to know how I to get above Hex values? -- Regards & Thanks Raghavendra. S

2 1

Could'nt authenticate windows host account with freeradius + ldap backend + samba domain controller
by david.barbion＠adeoservices.com 18 Dec '07

18 Dec '07

Hello, We have a Samba domain controller (3.0.9) with freeradius on it and several windows XP SP2 workstations attached to it. Actually, this wired setup is working correctly. We are planning to use wifi on those workstations but we encounters many problems. Here our wifi setup: Our APs are cisco 12xx, WPA/PEAP/MSCHAPV2 + 802.1x to the Samba/freeradius servers. Samba is configured to use LDAP as a backend to store its accounts (computers/users/groups). On the XP workstations, we use its own supplicant. Freeradius version 1.1.7 is configured to authorize computers and users from ldap and the authentication is made in mschapv2 through eap. The user authentication is working but not the computer and we must have this to work so that if the computer is switched on and nobody logged in, it can even have access to the network (for applying nightly updates for examples). The problem is when a computer tries to authenticate, the User-Name sent is "host//computername/", but in ldap we have entrie like /computername/$. So we have some attr_rewrite that removes host/ and adds the dollar sign. rlm_ldap finds correctly the entry, but EAP complains about the user name change: "*rlm_eap: Identity does not match User-Name, setting from EAP Identity.** rlm_eap: Failed in handler" *Is there an existing solution to our problem ?* * Thanks in advance for any response. PS: a join the log where you can see what happends, the radiusd.conf and an example computer account (in ldif format) Ce message et toutes les pièces jointes sont établis à l'attention exclusive de leurs destinataires et sont confidentiels. Si vous recevez ce message par erreur, merci de le détruire et d'en avertir immédiatement l'expéditeur. L'internet ne permettant pas d'assurer l'intégrité de ce message, le contenu de ce message ne représente en aucun cas un engagement de la part de Adeo Services. prefix = /usr exec_prefix = /usr sysconfdir = /etc localstatedir = /var sbindir = /usr/sbin logdir = ${localstatedir}/log/radius raddbdir = ${sysconfdir}/raddb radacctdir = ${logdir}/radacct confdir = ${raddbdir} run_dir = ${localstatedir}/run/radiusd log_file = ${logdir}/radius.log libdir = /usr/lib pidfile = ${run_dir}/radiusd.pid user = radiusd group = radiusd max_request_time = 60 delete_blocked_requests = no cleanup_delay = 5 max_requests = 8192 bind_address = * port = 1812 hostname_lookups = no allow_core_dumps = no regular_expressions = yes extended_expressions = yes log_stripped_names = no log_auth = yes log_auth_badpass = yes log_auth_goodpass = yes usercollide = no lower_user = before lower_pass = no nospace_user = no nospace_pass = no checkrad = ${sbindir}/checkrad security { max_attributes = 200 reject_delay = 1 status_server = no } proxy_requests = yes $INCLUDE ${confdir}/proxy.conf $INCLUDE ${confdir}/clients.conf snmp = no $INCLUDE ${confdir}/snmp.conf thread pool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 0 } modules { eap { default_eap_type = peap timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/ap.pem certificate_file = ${raddbdir}/certs/ap.pem CA_file = ${raddbdir}/certs/root.pem dh_file = ${raddbdir}/certs/dh random_file = ${raddbdir}/certs/random fragment_size = 1024 include_length = yes check_crl = no } peap { default_eap_type = mschapv2 } mschapv2 { } } mschap { } ldap { server = "localhost" identity = "cn=Manager,dc=mag125,dc=fr,dc=corp,dc=mycompany,dc=com" password = password basedn = "dc=mag125,dc=fr,dc=corp,dc=mycompany,dc=com" filter = "(uid=%{Stripped-User-Name})" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 edir_account_policy_check=no timeout = 4 timelimit = 3 net_timeout = 1 access_attr_used_for_allow = no } realm suffix { format = suffix delimiter = "@" ignore_default = no ignore_null = no } realm realmpercent { format = suffix delimiter = "%" ignore_default = no ignore_null = no } realm ntdomain { format = prefix delimiter = "\\" ignore_default = no ignore_null = no } attr_rewrite copy.user-name { attribute = Stripped-User-Name new_attribute = yes searchfor = "" searchin = packet replacewith = "%{User-Name}" } attr_rewrite add-dollar-sign { attribute = Stripped-User-Name searchfor = "^host/(.*)" searchin = packet new_attribute = no replacewith = "%{1}$" } attr_rewrite strip-realm-name { attribute = Stripped-User-Name new_attribute = no searchin = packet searchfor = "^(.*[\\/]+)" replacewith = "" max_matches = 1 } preprocess { huntgroups = ${confdir}/huntgroups hints = ${confdir}/hints } detail { detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d detailperm = 0600 } detail auth_log { detailfile = ${radacctdir}/%{Client-IP-Address}/auth-detail-%Y%m%d detailperm = 0600 } detail reply_log { detailfile = ${radacctdir}/%{Client-IP-Address}/reply-detail-%Y%m%d detailperm = 0600 } detail pre_proxy_log { detailfile = ${radacctdir}/%{Client-IP-Address}/pre-proxy-detail-%Y%m%d detailperm = 0600 } acct_unique { key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" } radutmp { filename = ${logdir}/radutmp username = %{User-Name} case_sensitive = yes check_with_nas = yes perm = 0600 callerid = "yes" } radutmp sradutmp { filename = ${logdir}/sradutmp perm = 0644 callerid = "no" } attr_filter { attrsfile = ${confdir}/attrs } always fail { rcode = fail } always reject { rcode = reject } always ok { rcode = ok simulcount = 0 mpp = no } expr { } exec echo { wait = yes program = "/bin/echo Username:%{User-Name}" input_pairs = request output_pairs = reply } ippool main_pool { range-start = 192.168.1.1 range-stop = 192.168.3.254 netmask = 255.255.255.0 cache-size = 800 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = no maximum-timeout = 0 } } instantiate { expr } authorize { copy.user-name add-dollar-sign auth_log suffix ntdomain ldap eap } authenticate { copy.user-name add-dollar-sign Auth-Type LDAP { ldap } Auth-Type MS-CHAP { mschap } eap } preacct { preprocess acct_unique suffix ntdomain } accounting { detail radutmp } session { radutmp } post-auth { reply_log } pre-proxy { pre_proxy_log } post-proxy { eap }

2 4

RE: The first RFC from FreeRADIUS is available
by Eric Stewart 18 Dec '07

18 Dec '07

Alan, this is a big deal. Congratulations! I've been using FreeRADIUS on my modest little network to do simple authentication and EAP-TLS with my wireless for just over a year now and have been well pleased with both the $$$ I'm saving over commercial products which are probably inferior anyway. Now I know that I am using *THE* standards compliant version of RADIUS! ;-) /Eric Said Alan: <begin quote> FreeRADIUS is not only the #1 RADIUS server in the world, it's now also leading the technical side of defining RADIUS. This document has been in progress for over 3 years, and I know I'm happy that it has finally been released. Everyone implementing RADIUS from now on *must* read this document. It is *strongly* suggested that they implement things the FreeRADIUS way. :) Alan DeKok. <snippage> <end quote>

1 0

ERROR:avp:add_avp: no more shm mem
by Marc LEURENT 18 Dec '07

18 Dec '07

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Good Morning Dan and Good Morning everybody, I've got Freeradius 1.1.7 + (python module enable + rlm_digest patches) OpenSER 1.2.2 + (Radius ACC enable) CDRTool 5.3.2 and I don't understand these outputs... OpenSER is crashing after receiving Authorization from Freeradius... Any idea?? Freeradius sent AVP to OpenSER: SIP-AVP = "callMaxDur:2957" SIP-AVP = "credit:10.0000" SIP-AVP = "authentic#1" And openser is trying to parse it but the there is a problem... 2(30175) DEBUG:auth_radius:generate_avps: getting SIP AVPs from avpair 225 2(30175) DEBUG:auth_radius:extract_avp: string is <ur:2957> 2(30175) DEBUG:auth_radius:extract_avp: AVP name is <ur> 2(30175) DEBUG:auth_radius:extract_avp: AVP val is <2957> 2(30175) ERROR:avp:add_avp: no more shm mem 2(30175) ERROR:auth_radius:generate_avps: Unable to create a new AVP 10(30190) ERROR: receive_fd: EOF on 6 Thanks ### Small Freeradius output ### A2 = INVITE:sip:0677832974@sip.wifirst.net H(A1) = b82eaab7b4eaab2db812d3a2695f0e22 H(A2) = 83134a8c6b9ea1a20de012abf16e87f5 KD = b82eaab7b4eaab2db812d3a2695f0e22:47679476280e04ea50ded04b24f7d3f75068eea7:83134a8c6b9ea1a20de012abf16e87f5 EXPECTED 40ed14d07aa16035e67c21886a802379 RECEIVED 40ed14d07aa16035e67c21886a802379 modcall[authenticate]: module "digest" returns ok for request 71 modcall: leaving group authenticate (returns ok) for request 71 Login OK: [mleurent(a)sip.wifirst.net/<no User-Password attribute>] (from client private port 5060) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 71 rlm_sql (sql): Processing sql_postauth radius_xlat: 'mleurent(a)sip.wifirst.net' rlm_sql (sql): sql_set_user escaped user --> 'mleurent(a)sip.wifirst.net' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'mleurent(a)sip.wifirst.net', 'Chap-Password', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'mleurent(a)sip.wifirst.net', 'Chap-Password', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 modcall[post-auth]: module "sql" returns ok for request 71 modcall: leaving group post-auth (returns ok) for request 71 Sending Access-Accept of id 180 to 172.24.0.8 port 47861 SIP-AVP = "callMaxDur:2957" SIP-AVP = "credit:10.0000" SIP-AVP = "authentic#1" Finished request 71 Going to the next request - --- Walking the entire request list --- Waking up in 6 seconds... ### Full OpenSER output ### 2(30175) SIP Request: 2(30175) method: <INVITE> 2(30175) uri: <sip:0677832974@sip.wifirst.net> 2(30175) version: <SIP/2.0> 2(30175) parse_headers: flags=2 2(30175) get_hdr_field: cseq <CSeq>: <2> <INVITE> 2(30175) Found param type 232, <branch> = <z9hG4bK3c2eaf3d-baab-dc11-90b2-ed571fe4ba74>; state=6 2(30175) Found param type 235, <rport> = <n/a>; state=17 2(30175) end of header reached, state=5 2(30175) parse_headers: Via found, flags=2 2(30175) parse_headers: this is the first via 2(30175) After parse_msg... 2(30175) preparing to run routing scripts... 2(30175) parse_headers: flags=100 2(30175) DEBUG:parse_to:end of header reached, state=10 2(30175) DBUG:parse_to: display={}, ruri={sip:0677832974@sip.wifirst.net} 2(30175) DEBUG: get_hdr_field: <To> [34]; uri=[sip:0677832974@sip.wifirst.net] 2(30175) DEBUG: to body [<sip:0677832974@sip.wifirst.net> ] 2(30175) DEBUG: get_hdr_body : content_length=235 2(30175) DEBUG:maxfwd:is_maxfwd_present: value = 70 2(30175) DBG:maxfwd:process_maxfwd_header: value 70 decreased to 50 2(30175) !!!! STARTING ROUTE 2: TEST NAT 2(30175) !!!!!!!!! YAHH NAT DETECTED - FIXING CONTACT!!!!!!!!!!!!! 2(30175) parse_headers: flags=80 2(30175) DEBUG: add_param: tag=2eb08b3d-baab-dc11-90b2-ed571fe4ba74 2(30175) DEBUG:parse_to:end of header reached, state=29 2(30175) DBUG:parse_to: display={"Marc LEURENT"}, ruri={sip:mleurent@sip.wifirst.net} 2(30175) parse_headers: flags=200 2(30175) found end of header 2(30175) find_first_route: No Route headers found 2(30175) loose_route: There is no Route HF 2(30175) grep_sock_info - checking if host==us: 15==12 && [sip.wifirst.net] == [213.91.4.219] 2(30175) grep_sock_info - checking if port 5060 matches port 5060 2(30175) JUSTE BEFORE SETTING FLAGS FOR RADIUS 2(30175) DEBUG: has_totag: no totag 2(30175) I AM SETTING THE FLAGS FOR RADIUS 2(30175) SETTING FLAGS 1 FOR RADIUS 2(30175) SETTING FLAGS 2 FOR RADIUS 2(30175) grep_sock_info - checking if host==us: 15==12 && [sip.wifirst.net] == [213.91.4.219] 2(30175) grep_sock_info - checking if port 5060 matches port 5060 2(30175) grep_sock_info - checking if host==us: 15==12 && [sip.wifirst.net] == [213.91.4.219] 2(30175) grep_sock_info - checking if port 5060 matches port 5060 2(30175) check_nonce(): comparing [47679476280e04ea50ded04b24f7d3f75068eea7] and [47679476280e04ea50ded04b24f7d3f75068eea7] 2(30175) DEBUG:auth_radius:radius_authorize_sterman: Success 2(30175) DEBUG:auth_radius:generate_avps: getting SIP AVPs from avpair 225 2(30175) DEBUG:auth_radius:extract_avp: string is <ur:2957> 2(30175) DEBUG:auth_radius:extract_avp: AVP name is <ur> 2(30175) DEBUG:auth_radius:extract_avp: AVP val is <2957> 2(30175) ERROR:avp:add_avp: no more shm mem 2(30175) ERROR:auth_radius:generate_avps: Unable to create a new AVP 10(30190) ERROR: receive_fd: EOF on 6 10(30190) DBG: handle_ser_child: dead child 2, pid 30175 (shutting down?) 10(30190) DBG: io_watch_del (0x5b5c20, 6, -1, 0x0) fd_no=13 called 0(30173) child process 30175 exited by a signal 11 0(30173) core was generated 0(30173) INFO: terminating due to SIGCHLD 4(30177) INFO: signal 15 received 4(30177) Memory status (pkg): 4(30177) fm_status (0x5f6d80): 4(30177) heap size= 1048576 4(30177) used= 77952, used+overhead=122432, free=926144 4(30177) max used (+overhead)= 129560 4(30177) dumping free list: 4(30177) hash = 1 fragments no.: 4, unused: 0 bucket size: 8 - 8 (first 8) 4(30177) hash = 2 fragments no.: 6, unused: 0 bucket size: 16 - 16 (first 16) 4(30177) hash = 3 fragments no.: 4, unused: 0 bucket size: 24 - 24 (first 24) 4(30177) hash = 4 fragments no.: 1, unused: 0 bucket size: 32 - 32 (first 32) 4(30177) hash = 5 fragments no.: 1, unused: 0 bucket size: 40 - 40 (first 40) 4(30177) hash = 6 fragments no.: 4, unused: 0 bucket size: 48 - 48 (first 48) 4(30177) hash = 7 fragments no.: 25, unused: 0 bucket size: 56 - 56 (first 56) 4(30177) hash = 8 fragments no.: 6, unused: 0 bucket size: 64 - 64 (first 64) 4(30177) hash = 9 fragments no.: 14, unused: 0 bucket size: 72 - 72 (first 72) 4(30177) hash = 10 fragments no.: 2, unused: 0 bucket size: 80 - 80 (first 80) 4(30177) hash = 11 fragments no.: 1, unused: 0 bucket size: 88 - 88 (first 88) 4(30177) hash = 15 fragments no.: 1, unused: 0 bucket size: 120 - 120 (first 120) 4(30177) hash = 28 fragments no.: 1, unused: 0 bucket size: 224 - 224 (first 224) 4(30177) hash = 29 fragments no.: 1, unused: 0 bucket size: 232 - 232 (first 232) 4(30177) hash = 52 fragments no.: 2, unused: 0 bucket size: 416 - 416 (first 416) 4(30177) hash = 62 fragments no.: 1, unused: 0 bucket size: 496 - 496 (first 496) 4(30177) hash = 64 fragments no.: 1, unused: 0 bucket size: 512 - 512 (first 512) 4(30177) hash = 65 fragments no.: 1, unused: 0 bucket size: 520 - 520 (first 520) 4(30177) hash = 146 fragments no.: 1, unused: 0 bucket size: 1168 - 1168 (first 1168) 4(30177) hash = 176 fragments no.: 1, unused: 0 bucket size: 1408 - 1408 (first 1408) 4(30177) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 917296) 4(30177) TOTAL: 79 free fragments = 926336 free bytes 4(30177) ----------------------------- 5(30178) INFO: signal 15 received 5(30178) Memory status (pkg): 5(30178) fm_status (0x5f6d80): 5(30178) heap size= 1048576 5(30178) used= 77776, used+overhead=121040, free=927536 5(30178) max used (+overhead)= 121504 5(30178) dumping free list: 5(30178) hash = 2 fragments no.: 1, unused: 0 bucket size: 16 - 16 (first 16) 5(30178) hash = 41 fragments no.: 1, unused: 0 bucket size: 328 - 328 (first 328) 5(30178) hash = 55 fragments no.: 1, unused: 0 bucket size: 440 - 440 (first 440) 5(30178) hash = 56 fragments no.: 1, unused: 0 bucket size: 448 - 448 (first 448) 5(30178) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 926496) 5(30178) TOTAL: 5 free fragments = 927728 free bytes 5(30178) ----------------------------- 1(30174) INFO: signal 15 received 1(30174) Memory status (pkg): 1(30174) fm_status (0x5f6d80): 1(30174) heap size= 1048576 3(30176) INFO: signal 15 received 3(30176) Memory status (pkg): 3(30176) fm_status (0x5f6d80): 3(30176) heap size= 1048576 3(30176) used= 77936, used+overhead=122400, free=926176 3(30176) max used (+overhead)= 129576 3(30176) dumping free list: 3(30176) hash = 1 fragments no.: 6, unused: 0 bucket size: 8 - 8 (first 8) 3(30176) hash = 2 fragments no.: 4, unused: 0 bucket size: 16 - 16 (first 16) 3(30176) hash = 3 fragments no.: 1, unused: 0 bucket size: 24 - 24 (first 24) 3(30176) hash = 4 fragments no.: 2, unused: 0 bucket size: 32 - 32 (first 32) 3(30176) hash = 6 fragments no.: 3, unused: 0 bucket size: 48 - 48 (first 48) 3(30176) hash = 7 fragments no.: 24, unused: 0 bucket size: 56 - 56 (first 56) 3(30176) hash = 8 fragments no.: 3, unused: 0 bucket size: 64 - 64 (first 64) 3(30176) hash = 9 fragments no.: 16, unused: 0 bucket size: 72 - 72 (first 72) 3(30176) hash = 10 fragments no.: 4, unused: 0 bucket size: 80 - 80 (first 80) 1(30174) used= 77992, used+overhead=122472, free=926104 1(30174) max used (+overhead)= 129696 1(30174) dumping free list: 1(30174) hash = 1 fragments no.: 6, unused: 0 bucket size: 8 - 8 (first 8) 1(30174) hash = 2 fragments no.: 5, unused: 0 bucket size: 16 - 16 (first 16) 1(30174) hash = 3 fragments no.: 3, unused: 0 bucket size: 24 - 24 (first 24) 1(30174) hash = 6 fragments no.: 6, unused: 0 bucket size: 48 - 48 (first 48) 1(30174) hash = 7 fragments no.: 29, unused: 0 bucket size: 56 - 56 (first 56) 1(30174) hash = 8 fragments no.: 3, unused: 0 bucket size: 64 - 64 (first 64) 1(30174) hash = 9 fragments no.: 16, unused: 0 bucket size: 72 - 72 (first 72) 1(30174) hash = 11 fragments no.: 2, unused: 0 bucket size: 88 - 88 (first 88) 1(30174) hash = 19 fragments no.: 1, unused: 0 bucket size: 152 - 152 (first 152) 1(30174) hash = 28 fragments no.: 1, unused: 0 bucket size: 224 - 224 (first 224) 1(30174) hash = 29 fragments no.: 1, unused: 0 bucket size: 232 - 232 (first 232) 1(30174) hash = 52 fragments no.: 2, unused: 0 bucket size: 416 - 416 (first 416) 1(30174) hash = 96 fragments no.: 1, unused: 0 bucket size: 768 - 768 (first 768) 1(30174) hash = 150 fragments no.: 1, unused: 0 bucket size: 1200 - 1200 (first 1200) 1(30174) hash = 176 fragments no.: 1, unused: 0 bucket size: 1408 - 1408 (first 1408) 1(30174) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 917848) 1(30174) TOTAL: 79 free fragments = 926296 free bytes 1(30174) ----------------------------- 3(30176) hash = 13 fragments no.: 1, unused: 0 bucket size: 104 - 104 (first 104) 3(30176) hash = 14 fragments no.: 1, unused: 0 bucket size: 112 - 112 (first 112) 3(30176) hash = 15 fragments no.: 1, unused: 0 bucket size: 120 - 120 (first 120) 3(30176) hash = 28 fragments no.: 2, unused: 0 bucket size: 224 - 224 (first 224) 3(30176) hash = 29 fragments no.: 1, unused: 0 bucket size: 232 - 232 (first 232) 3(30176) hash = 52 fragments no.: 2, unused: 0 bucket size: 416 - 416 (first 416) 3(30176) hash = 58 fragments no.: 1, unused: 0 bucket size: 464 - 464 (first 464) 3(30176) hash = 59 fragments no.: 1, unused: 0 bucket size: 472 - 472 (first 472) 3(30176) hash = 102 fragments no.: 1, unused: 0 bucket size: 816 - 816 (first 816) 3(30176) hash = 122 fragments no.: 1, unused: 0 bucket size: 976 - 976 (first 976) 3(30176) hash = 128 fragments no.: 1, unused: 0 bucket size: 1024 - 1024 (first 1024) 3(30176) hash = 176 fragments no.: 1, unused: 0 bucket size: 1408 - 1408 (first 1408) 3(30176) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 916008) 3(30176) TOTAL: 78 free fragments = 926368 free bytes 3(30176) ----------------------------- 10(30190) INFO: signal 15 received 10(30190) Memory status (pkg): 10(30190) fm_status (0x5f6d80): 10(30190) heap size= 1048576 10(30190) used= 127600, used+overhead=170816, free=877760 10(30190) max used (+overhead)= 170816 10(30190) dumping free list: 10(30190) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 877952) 10(30190) TOTAL: 1 free fragments = 877952 free bytes 10(30190) ----------------------------- 9(30188) INFO: signal 15 received 9(30188) Memory status (pkg): 9(30188) fm_status (0x5f6d80): 9(30188) heap size= 1048576 9(30188) used= 135792, used+overhead=179024, free=869552 9(30188) max used (+overhead)= 179024 9(30188) dumping free list: 9(30188) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 869744) 9(30188) TOTAL: 1 free fragments = 869744 free bytes 9(30188) ----------------------------- 6(30181) INFO: signal 15 received 6(30181) Memory status (pkg): 6(30181) fm_status (0x5f6d80): 6(30181) heap size= 1048576 6(30181) used= 135792, used+overhead=179024, free=869552 6(30181) max used (+overhead)= 179024 6(30181) dumping free list: 6(30181) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 869744) 6(30181) TOTAL: 1 free fragments = 869744 free bytes 6(30181) 8(30185) INFO: signal 15 received 8(30185) Memory status (pkg): 8(30185) fm_status (0x5f6d80): 8(30185) heap size= 1048576 8(30185) used= 135792, used+overhead=179024, free=869552 8(30185) max used (+overhead)= 179024 8(30185) dumping free list: 8(30185) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 869744) 8(30185) TOTAL: 1 free fragments = 869744 free bytes 8(30185) ----------------------------- - ----------------------------- 7(30182) INFO: signal 15 received 7(30182) Memory status (pkg): 7(30182) fm_status (0x5f6d80): 7(30182) heap size= 1048576 7(30182) used= 135792, used+overhead=179024, free=869552 7(30182) max used (+overhead)= 179024 7(30182) dumping free list: 7(30182) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 869744) 7(30182) TOTAL: 1 free fragments = 869744 free bytes 7(30182) ----------------------------- 1(30174) INFO: signal 15 received 1(30174) Memory status (pkg): 1(30174) fm_status (0x5f6d80): 1(30174) heap size= 1048576 1(30174) used= 85664, used+overhead=128704, free=919872 1(30174) max used (+overhead)= 128704 1(30174) dumping free list: 1(30174) hash = 11 fragments no.: 1, unused: 0 bucket size: 88 - 88 (first 88) 1(30174) hash = 42 fragments no.: 1, unused: 0 bucket size: 336 - 336 (first 336) 1(30174) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 919640) 1(30174) TOTAL: 3 free fragments = 920064 free bytes 1(30174) ----------------------------- 0(30173) pool_remove: Connection still kept in the pool 0(30173) pool_remove: Connection still kept in the pool 0(30173) XLOG: destroy module ... 0(30173) pool_remove: Removing connection from the pool 0(30173) pool_remove: Connection still kept in the pool 0(30173) INFO:mi_fifo:mi_destroy: seems that fifo child is already dead! 0(30173) pool_remove: Removing connection from the pool 0(30173) DEBUG: tm_shutdown : start 0(30173) DEBUG: unlink_timer_lists : emptying DELETE list 0(30173) DEBUG: tm_shutdown : emptying hash table 0(30173) DEBUG: tm_shutdown : releasing timers 0(30173) DEBUG: tm_shutdown : removing semaphores 0(30173) DEBUG: tm_shutdown : destroying tmcb lists 0(30173) DEBUG: tm_shutdown : done 0(30173) Memory status (pkg): 0(30173) fm_status (0x5f6d80): 0(30173) heap size= 1048576 0(30173) used= 56464, used+overhead=99648, free=948928 0(30173) max used (+overhead)= 112768 0(30173) dumping free list: 0(30173) hash = 1 fragments no.: 7, unused: 0 bucket size: 8 - 8 (first 8) 0(30173) hash = 2 fragments no.: 3, unused: 0 bucket size: 16 - 16 (first 16) 0(30173) hash = 3 fragments no.: 7, unused: 0 bucket size: 24 - 24 (first 24) 0(30173) hash = 4 fragments no.: 33, unused: 0 bucket size: 32 - 32 (first 32) 0(30173) hash = 6 fragments no.: 9, unused: 0 bucket size: 48 - 48 (first 48) 0(30173) hash = 7 fragments no.: 5, unused: 0 bucket size: 56 - 56 (first 56) 0(30173) hash = 8 fragments no.: 1, unused: 0 bucket size: 64 - 64 (first 64) 0(30173) hash = 9 fragments no.: 2, unused: 0 bucket size: 72 - 72 (first 72) 0(30173) hash = 12 fragments no.: 9, unused: 0 bucket size: 96 - 96 (first 96) 0(30173) hash = 13 fragments no.: 1, unused: 0 bucket size: 104 - 104 (first 104) 0(30173) hash = 14 fragments no.: 3, unused: 0 bucket size: 112 - 112 (first 112) 0(30173) hash = 21 fragments no.: 2, unused: 0 bucket size: 168 - 168 (first 168) 0(30173) hash = 156 fragments no.: 2, unused: 0 bucket size: 1248 - 1248 (first 1248) 0(30173) hash = 842 fragments no.: 1, unused: 0 bucket size: 6736 - 6736 (first 6736) 0(30173) hash = 2054 fragments no.: 1, unused: 0 bucket size: 524288 - 1048576 (first 936000) 0(30173) TOTAL: 86 free fragments = 949120 free bytes 0(30173) ----------------------------- 0(30173) Memory status (shm): 0(30173) fm_status (0x2ab19f9d0000): 0(30173) heap size= 33554432 0(30173) used= 144, used+overhead=36720, free=33517712 0(30173) max used (+overhead)= 2746832 0(30173) dumping free list: 0(30173) hash = 1 fragments no.: 56, unused: 0 bucket size: 8 - 8 (first 8) 0(30173) hash = 2 fragments no.: 12, unused: 0 bucket size: 16 - 16 (first 16) 0(30173) hash = 3 fragments no.: 9, unused: 0 bucket size: 24 - 24 (first 24) 0(30173) hash = 4 fragments no.: 10, unused: 0 bucket size: 32 - 32 (first 32) 0(30173) hash = 5 fragments no.: 3, unused: 0 bucket size: 40 - 40 (first 40) 0(30173) hash = 6 fragments no.: 4, unused: 0 bucket size: 48 - 48 (first 48) 0(30173) hash = 7 fragments no.: 47, unused: 0 bucket size: 56 - 56 (first 56) 0(30173) hash = 8 fragments no.: 3, unused: 0 bucket size: 64 - 64 (first 64) 0(30173) hash = 9 fragments no.: 6, unused: 0 bucket size: 72 - 72 (first 72) 0(30173) hash = 10 fragments no.: 2, unused: 0 bucket size: 80 - 80 (first 80) 0(30173) hash = 12 fragments no.: 1, unused: 0 bucket size: 96 - 96 (first 96) 0(30173) hash = 15 fragments no.: 1, unused: 0 bucket size: 120 - 120 (first 120) 0(30173) hash = 17 fragments no.: 1, unused: 0 bucket size: 136 - 136 (first 136) 0(30173) hash = 21 fragments no.: 5, unused: 0 bucket size: 168 - 168 (first 168) 0(30173) hash = 22 fragments no.: 1, unused: 0 bucket size: 176 - 176 (first 176) 0(30173) hash = 35 fragments no.: 1, unused: 0 bucket size: 280 - 280 (first 280) 0(30173) hash = 76 fragments no.: 1, unused: 0 bucket size: 608 - 608 (first 608) 0(30173) hash = 104 fragments no.: 1, unused: 0 bucket size: 832 - 832 (first 832) 0(30173) hash = 110 fragments no.: 1, unused: 0 bucket size: 880 - 880 (first 880) 0(30173) hash = 112 fragments no.: 1, unused: 0 bucket size: 896 - 896 (first 896) 0(30173) hash = 128 fragments no.: 2, unused: 0 bucket size: 1024 - 1024 (first 1024) 0(30173) hash = 150 fragments no.: 1, unused: 0 bucket size: 1200 - 1200 (first 1200) 0(30173) hash = 193 fragments no.: 1, unused: 0 bucket size: 1544 - 1544 (first 1544) 0(30173) hash = 224 fragments no.: 1, unused: 0 bucket size: 1792 - 1792 (first 1792) 0(30173) hash = 258 fragments no.: 2, unused: 0 bucket size: 2064 - 2064 (first 2064) 0(30173) hash = 727 fragments no.: 1, unused: 0 bucket size: 5816 - 5816 (first 5816) 0(30173) hash = 831 fragments no.: 1, unused: 0 bucket size: 6648 - 6648 (first 6648) 0(30173) hash = 1024 fragments no.: 2, unused: 0 bucket size: 8192 - 8192 (first 8192) 0(30173) hash = 2049 fragments no.: 2, unused: 0 bucket size: 16384 - 32768 (first 20480) 0(30173) hash = 2056 fragments no.: 1, unused: 0 bucket size: 2097152 - 4194304 (first 2621440) 0(30173) hash = 2059 fragments no.: 1, unused: 0 bucket size: 16777216 - 33554432 (first 30805984) 0(30173) TOTAL: 181 free fragments = 33517712 free bytes 0(30173) ----------------------------- 0(30173) shm_mem_destroy 0(30173) destroying the shared memory lock 0(30173) terminating due to SIGCHLD -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.7 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFHZ5doN4+o+2LtdFwRAknyAKCXJHhyHZlAooGoyONmFphFcZE3BgCfbJOO aN4wxnGPjLgxqVvx5YTgGac= =pkmq -----END PGP SIGNATURE-----

1 0

Configuring RADIUS for EAP-PEAP-MSCHAPv2, EAP-GTC and EAP-TLS
by Gaurav Bandekar 18 Dec '07

18 Dec '07

Hi, I need to configure RADIUS for EAP-PEAP-MSCHAPv2, EAP-GTC and EAP-TLS. How can I produce the certificate for them. How do I specify what certificate to use for EAP-PEAP-MSCHAPv2 and EAP-GTC. Thanks & Regards Gaurav

3 6