- Freeradius-Users - lists.freeradius.org

SSL certificate problems
by Walter Gould 01 Nov '07

01 Nov '07

List, I am following the document "FreeRADIUS Active Directory Integration HOWTO" from the freeradius Wiki. I am having problems with creating SSL certificates. When I follow the instructions at the bottom of this doc and run the CA.all script, I see the following errors: + openssl pkcs12 -export -in demoCA/cacert.pem -inkey newreq.pem -out root.p12 -cacerts -passin pass:removed -passout pass:removed Error opening input file demoCA/cacert.pem demoCA/cacert.pem: No such file or directory + openssl pkcs12 -in root.p12 -out root.pem -passin pass:removed -passout pass:removed Error opening input file root.p12 root.p12: No such file or directory + openssl x509 -inform PEM -outform DER -in root.pem -out root.der Error opening Certificate root.pem 3925:error:02001002:system library:fopen:No such file or directory:bss_file.c:352:fopen('root.pem','r') 3925:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354: unable to load certificate I saw a mailing list posting that said to move the CA.all script and the xpextensions file to the /etc/raddb/certs directory and run it from there, however after doing that I still receive the same errors. Anybody have any ideas on this? After googling awhile, it seems like this might be an openssl syntax error w/in the script. Also, I am using FreeRADIUS 1.1.3 (CentOS rpm install). Thanks, Walter

2 6

*** glibc detected *** radiusd: double free or corruption
by yangcuilin 01 Nov '07

01 Nov '07

Hi, all Following is error message when install freeradius1.1.3. Who can give me some advice or solutions? Appreciate very much. read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x09b27648 *** ======= Backtrace: ========= /lib/libc.so.6[0x3c1f7d] /lib/libc.so.6(cfree+0x90)[0x3c55d0] /usr/local/lib/libltdl.so.3[0x2e451b] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x2e4eae] radiusd(find_module_instance+0x317)[0x349c67] radiusd(setup_modules+0x1e8)[0x34a108]

3 3

FreeRadius and Clean Access Manager
by Dorota Kupis 01 Nov '07

01 Nov '07

Hello, Has anybody set up FreeRadius with Network Admission Control. I have a trouble to set up FreeRadius as an authentication server in Clean Access Manager. It works perfectly with ACS. Thanks for a help Dorota

4 6

FreeRadius and Clean Access Manager
by Dorota Kupis 31 Oct '07

31 Oct '07

Hello, Has anybody set up FreeRadius with Network Admission Control. I have a trouble to set up FreeRadius as an authentication server in Clean Access Manager. It works perfectly with ACS. Thanks for a help Dorota

1 0

Signing a certificate
by Zolotov, Eyal 31 Oct '07

31 Oct '07

Hi, I'm trying to sign a certificate using OpenSSL. I got cacert.pem and a password from a 3rd patry. 1. Is it sufficient to sign certificates? 2. Shouldn't I have the cakey.pem as well? 2. Where should I put those files? Thanks, Eyal Zolotov. --------------------------------------------------------------------- Envara, Ltd. This e-mail and any attachments may contain confidential material for the sole use of the intended recipient(s). Any review or distribution by others is strictly prohibited. If you are not the intended recipient, please contact the sender and delete all copies.

1 0

access-deny reply log to mysql
by asd 31 Oct '07

31 Oct '07

I would like to log to radpostauth table inside the mysql server not only the Access-Accept replies but the Access-deny replies too. How to? thanks for helping Arjuna

1 0

R: Sqlippool & debian - sql_get_socket unresolved symbol
by Francesco Cristofori 31 Oct '07

31 Oct '07

Update: assigned bug number #448699 . http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=448699 Greetings, Francesco.

1 0

R: Sqlippool & debian - sql_get_socket unresolved symbol
by Francesco Cristofori 31 Oct '07

31 Oct '07

> Try editing the Makefiles so that rlm_sqlippool links to rlm_sql. > Maybe that will solve the problem. I tried to do this, but I'm not a good coder so I filed a bug against the debian package. > Alan DeKok. Thanks, Francesco.

1 0

Re: Turn of user acc - MySQL
by Marinko Tarlac 31 Oct '07

31 Oct '07

Subject: Re: Turn of user acc - MySQL > > Deleting user from the database - bad idea. You do want him back? I have users inside another table (name, address, id etc..) and only those who need access I transfer to radcheck table. So if I remove them from radcheck, I can easily turn them back. > > Auth-Type Reject is a check item so it would go into rad(group)check > table. It's better to create a group for suspended users and swithch > user to it than to add the attribute to each user. > > Think about using sqlcounters and/or Epiration attribute. Good ideas so I will think about it... Best regards > > Ivan Kalik > Kalik Informatika ISP > > > Dana 30/10/2007, "Marinko Tarlac" <mangia81(a)gmail.com> pi?e: > > >Hello > > > >I made small web based application and it uses MySql database. I can > >add user accounts, create packages, add access points etc and now I > >need to create script for user control. > > > >Question is next. Is it better to remove the username from radcheck > >table or it is better option to add access-reject atribute for > >specific user in radreply table. Is there any better solution. Also > >I'm thinking to create small perl script which I can call during auth > >process. > > > >I'm not sure did you understand me :) > >- > >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > > > > > > ------------------------------ > > Message: 7 > Date: Wed, 31 Oct 2007 11:53:23 +1000 (EST) > From: David Hobley <david.hobley(a)mionegroup.com> > Subject: Re: Configure authentication via LDAP Group membership issue > [sec=unclassified] > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <3661210.62301193795603796.JavaMail.root(a)mail.onegrp.com> > Content-Type: text/plain; charset="utf-8" > > Frank, > > Thank you - greatly appreciated. This made me realise that my thinking was foggy when I had defined group memberships. All working now. > > Cheers, > David > ----- Original Message ----- > From: "Frank MR Ranner" <Frank.Ranner(a)defence.gov.au> > To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> > Sent: Wednesday, 31 October 2007 10:20:36 AM (GMT+1000) Australia/Brisbane > Subject: RE: Configure authentication via LDAP Group membership issue [sec=unclassified] > > ... > _______________________________ > > The memberUid attribute in a posixgroup is supposed to hold the uid, not > the uidNumber. That would make your groupmembership_filter = > "(memberUid=%{User-Name})" or more robustly, > groupmembership_filter = > "(&(memberUid=%{Stripped-User-Name:-%{User-Name}})(objectClass=posixGrou > p))" > > Regards, > Frank Ranner > > >

1 0

no DB handles
by Lucas Aimaretto 31 Oct '07

31 Oct '07

Hi all, I've seen many of these messages in the radius.log ... Wed Jun 15 15:10:23 2005 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 What does it mean ? How to solve this ? Best regards, Lucas -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.7.3/15 - Release Date: 14/06/2005

11 23