- Freeradius-Users - lists.freeradius.org

Password Authentication Failing
by Frank Everitt 28 Nov '07

28 Nov '07

I'm running Freeradius 1.1.6 on a Solaris 10 platform and have run across a strange problem. My password file contains over 80 thousands entries and it appears that freeradius won't find a user entry beyond line 76665. Is there a buffer that can be bumped up or have I just reached a limitation of using the UNIX style password file within radiusd? Any insight/help would be greatly appreciated. Thanks... Frank ------------------------------------------------------------ | | Frank Everitt | | Systems Administrator :|||: :|||: 7025 Kit Creek Rd. :|||||: :|||||: RTP, NC 27709 ..:|||||||:.....:|||||||:.... Ph :(919) 392-8885 FAX :(469) 574-5042 CISCO SYSTEMS Cell:(919) 624-6098 ------------------------------------------------------------

3 4

Convert from user@domain to domain\user
by Robert Graham 28 Nov '07

28 Nov '07

Hi all I am a newbie to freeradius and I have searched the internet and all the documentation I can find, however I cannot find a simple solution to the following problem. I want to have the freeradius server act as a proxy and receive radius requests in the form user@domain but then pass these requests to another server that needs to have the request in domain\user format. It would seem to be a simple format issue which you should be able to create an output template or something but I don't have a clue. Running freeradius v 1.188.2.4.2.12 Rob Graham

2 1

destination unreachable (port unreachable)
by inl2goal 27 Nov '07

27 Nov '07

Hello: FreeRadius was working perfectly with EAP/MD5 a few weeks ago here. But some providers came here to offer a NAC solution and messed with the network configuration. Authentication stopped working, and by using a sniffer we realised that packets get to the freeRADIUS server, to which it responds with a challenge but apparently that challenge never gets back to the switch and it sends a "destination unreachable (port unreachable)" message. Any ideas why that might happen? Thanks -- View this message in context: http://www.nabble.com/destination-unreachable-%28port-unreachable%29-tf4883… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 2

freeradius support eap-fast?
by Hangjun He 27 Nov '07

27 Nov '07

Hi, Eap-fast introduction from cisco said freeradius support eap-fast. Is it right? http://www.t11.org/ftp/t11/pub/fc/sp-2/07-595v0.pdf John --------------------------------- 雅虎邮箱，终生伙伴！

4 7

Re: freeradius-pre2 .. "unknown client" appears in log !
by Alan DeKok 27 Nov '07

27 Nov '07

Edvin Seferovic wrote: > Ive just installed freeradius-pre2 Please try the CVS head. It has large numbers of fixes over -pre2. > Would it be possible to have the name of the virtual server in the log too ? > Something like > Servername: Auth: Login OK: [00:01:6c:a0:93:57] (from client switch_1stock > port 23 cli 00-01-6c-a0-93-57) Not a bad idea. That should really be configurable in radiusd.conf. Alan DeKok.

1 0

freeradius-pre2 .. "unknown client" appears in log !
by Edvin Seferovic 27 Nov '07

27 Nov '07

Hi, Ive just installed freeradius-pre2 and configured it for MAC auth... when I define my clients in the virtual host file like server mac-auth { client IP { name... } ... } I get following in the log Login OK: [00:e0:7d:75:ca:31] (from client UNKNOWN-CLIENT port 14 cli 00-e0-7d-75-ca-31) ! After I enter the same client IP { ... } stuff into clients.conf I get the expected Login OK: [00:01:6c:a0:93:57] (from client switch_1stock port 23 cli 00-01-6c-a0-93-57) ! Is it supposed to be like this ( broken ?? ) ? Would it be possible to have the name of the virtual server in the log too ? Something like Servername: Auth: Login OK: [00:01:6c:a0:93:57] (from client switch_1stock port 23 cli 00-01-6c-a0-93-57) Thanks, E:S

1 0

Errors when installing FreeRADIUS 1.1.7
by jborquez＠alum.calarts.edu 27 Nov '07

27 Nov '07

I am a newbie at using FreeRADIUS. After I run ./configure, I run make and get the following errors: usr/home/jose/freeradius-1.1.7/src/modules/rlm_sql/rlm_sql.h:68: error: syntax error before "lt_dlhandle" rlm_sqlippool.c: In function `sqlippool_postauth': rlm_sqlippool.c:526: warning: unused variable `self' gmake[5]: *** [rlm_sqlippool.lo] Error 1 gmake[5]: Leaving directory `/usr/home/jose/freeradius-1.1.7/src/modules/rlm_sqlippool' gmake[4]: *** [common] Error 2 gmake[4]: Leaving directory `/usr/home/jose/freeradius-1.1.7/src/modules' gmake[3]: *** [all] Error 2 gmake[3]: Leaving directory `/usr/home/jose/freeradius-1.1.7/src/modules' gmake[2]: *** [common] Error 2 gmake[2]: Leaving directory `/usr/home/jose/freeradius-1.1.7/src' gmake[1]: *** [all] Error 2 gmake[1]: Leaving directory `/usr/home/jose/freeradius-1.1.7/src' gmake: *** [common] Error 2 *** Error code 2 Could someone please enlighten me as to what I could be missing here? Thank you in advance, Jose

2 1

mod_auth_radius add_cookie segfault
by Brandon Ewing 26 Nov '07

26 Nov '07

Greetings, I am having some issues with mod_auth_radius causing httpd to segfault when "set_cookie" is called. The server in question is CentOS 4.5, with httpd-2.0.52-32.3 and apr-0.9.4-24.5.c4.2 RPMs installed. I downloaded mod_auth_radius from http://www.freeradius.org/mod_auth_radius/mod_auth_radius-2.0.c It compiled correctly via apxs after I added #include "apr_compat.h" I compiled with the following line: apxs -i -a -c mod_auth_radius-2.0.c I have the following in the .htaccess for the directory I wish to protect: <IfModule mod_auth_radius-2.0.c> AddRadiusAuth 10.10.17.15:1812 secret 5:3 AuthName "RADIUS Access" AuthType Basic Require valid-user AuthRadiusActive On </IfModule> If I access the page, I am presented with a basic authtype prompt -- however, after I enter a valid username and password, the httpd child segfaults: [Mon Nov 26 15:00:01 2007] [notice] child pid 21136 exit signal Segmentation fault (11) I know that the issue is in the set_cookie routine, because if I comment out the "set_cookie" call after a successful authentication and recompile, the segfault does not happen. However, this results in a RADIUS call for every single GET request, which is not desired. I am not proficient in C, so if anyone has any suggestions as to further troubleshooting/resolution for this issue, I would appreciate the input, off or on-list. -- Brandon Ewing (nicotine(a)warningg.com)

2 1

syaoran.sakura@gmail.com
by Syaoran Li 26 Nov '07

26 Nov '07

syaoran.sakura(a)gmail.com

1 0

Problem with CHAP
by Javier Fernando 26 Nov '07

26 Nov '07

I configure Freeradius , when the client try to connect with CHAP i have this error, and only connect with linux system users. When I connect locally with radtest i connect ok but when i connect remotely whit Windows Xp using CHAP don't connect. I run radius in debug mode with -X option. Part of clients.conf usuario1 Auth-Type := Local, Cleartext-Password := "testusuario1" usuario2 Auth-Type := Local, Password := "testusuario2" usuario3 Cleartext-Password := "testusuario3" Error of freeradius running with -X option: rad_recv: Access-Request packet from host 192.168.1.100:1645, id=106, length=126 Framed-Protocol = PPP User-Name = "chap" CHAP-Password = 0x019c1a0fb685942ed07fdb1e2d100e93f0 NAS-Port-Type = Virtual NAS-Port = 1586 Calling-Station-Id = "1141323200" Called-Station-Id = "8003450410" Connect-Info = "TLS-MISERVER-DIALUP" Service-Type = Framed-User NAS-IP-Address = 192.168.1.100 Processing the authorize section of radiusd.confmodcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "chap", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 users: Matched entry DEFAULT at line 173 users: Matched entry DEFAULT at line 185 modcall[authorize]: module "files" returns ok for request 2rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. modcall[authorize]: module "pap" returns noop for request 2modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found Auth-Type CHAPauth: type "CHAP" Processing the authenticate section of radiusd.confmodcall: entering group CHAP for request 2 rlm_chap: login attempt by "chap" with CHAP password rlm_chap: Could not find clear text password for user chap modcall[authenticate]: module "chap" returns invalid for request 2modcall: leaving group CHAP (returns invalid) for request 2auth: Failed to validate the user.Login incorrect (rlm_chap: Clear text password not available): [chap/<CHAP-Password>] (from client rasiplan2 port 1586 cli 1141323200)Delaying request 2 for 1 secondsFinished request 2Going to the next request--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Waking up in 1 seconds...--- Walking the entire request list ---Sending Access-Reject of id 106 to 192.168.1.1 port 1645Waking up in 4 seconds...--- Walking the entire request list ---Cleaning up request 2 ID 106 with timestamp 47472e23Nothing to do. Sleeping until we see a request. _________________________________________________________________ Tecnología, moda, motor, viajes,…suscríbete a nuestros boletines para estar a la última http://newsletters.msn.com/hm/maintenanceeses.asp?L=ES&C=ES&P=WCMaintenance…

2 10