- Freeradius-Users - lists.freeradius.org

Certificates problem - FreeRADIUS 1.1.6, Chillispot 1.0
by ＠eon 23 Aug '07

23 Aug '07

I have setup a hotspot for my hotel using Freeradius and chillispot. It works for all clients normally, except for two cases I've seen (so far). Two different users with laptops running Windows XP could connect to the access point, could ping the server's ip address, but when they tried to open a web page, their browser (internet explorer and firefox alike) did not prompt to accept the server's certificate and of course could not see any web page. I've tried looking around at the windows' settings for certificates and security to no avail.I know that the 2nd and more recent case, the cliend had windows xp SP1 on his laptop. Could that be the case? Thanks in advance for any answers to this.

1 0

Unlang regular expression string expansion.
by Arran Cudbard-Bell 23 Aug '07

23 Aug '07

Hi, HP access point with mac authentication. Sends mac as User-Name in lower case, Sends mac as Calling-Station-ID in upper case. Check to see if mac based authentication is being attempted is if User-Name == Calling-Station-ID. As the case differs the two don't match. if(%{User-Name} =~ /%{Calling-Station-ID}/i){ Doesn't expand %{Calling-Station-ID} , but thats expected. if(%{User-Name} =~ "/%{Calling-Station-ID}/i"){ Gives error. Leaves no way to do case insensitive equality checks between strings with unlang... Any chance of expanding regex strings before passing them to the regex parser ? Or == becomes non-strict equality and === becomes strict equality. Thanks, Arran

3 3

Yeahh!!! Openser + Freeradius + CDRTool + MySQL + Freeradius-CDRTool python module almost working
by Marc LEURENT 23 Aug '07

23 Aug '07

Thanks Dan!! I have successfully compiled freeradius 1.1.6 with the rlm_python compiled statically! So the freeradius-cdrtool module works!! My problem is that is cannot find the destination whereas it's in the Canonical-URI, so that with To=None, it cannot calculate the max session time But in the radacct database, there is the Canonical-URI A Parsing problem? Stange, I don't know where to search for it Aug 23 16:57:23 sd-7501 CDRTool[20011]: MaxSessionTime From=101(a)sd-7501.dedibox.fr To=None Duration=7200 Lock=1 Aug 23 16:57:23 sd-7501 CDRTool[20011]: Load last minute: 5 calls @ 0.04 cps, memory: 10.13 MB Aug 23 16:57:23 sd-7501 CDRTool[20011]: Call to none, no limit imposed Aug 23 16:57:23 sd-7501 CDRTool[20011]: GetBalance From=101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Customer : 101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Balance : 1000.0000 Aug 23 16:57:23 sd-7501 CDRTool[20011]: MaxSessionTime From=101(a)sd-7501.dedibox.fr To=None Duration=7200 Lock=1 Aug 23 16:57:23 sd-7501 CDRTool[20011]: Call to none, no limit imposed Aug 23 16:57:23 sd-7501 CDRTool[20011]: GetBalance From=101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Customer : 101(a)sd-7501.dedibox.fr Aug 23 16:57:23 sd-7501 CDRTool[20011]: Balance : 1000.0000 Aug 23 16:57:24 sd-7501 CDRTool[20011]: MaxSessionTime From=101(a)sd-7501.dedibox.fr To=None Duration=7200 Lock=1 Aug 23 16:57:24 sd-7501 CDRTool[20011]: Call to none, no limit imposed Aug 23 16:57:24 sd-7501 CDRTool[20011]: GetBalance From=101(a)sd-7501.dedibox.fr Aug 23 16:57:24 sd-7501 CDRTool[20011]: Customer : 101(a)sd-7501.dedibox.fr Aug 23 16:57:24 sd-7501 CDRTool[20011]: Balance : 1000.0000 Aug 23 16:57:45 sd-7501 CDRTool[20011]: DebitBalance From=None To=sip:0033677832974@sd-7501.dedibox.fr:5060;user=phone Duration=0 Aug 23 16:57:45 sd-7501 CDRTool[20011]: Warning: Account none is not prepaid rad_recv: Accounting-Request packet from host 127.0.0.1:59701, id=79, length=318 Acct-Status-Type = Failed Service-Type = Sip-Session Sip-Response-Code = 487 Sip-Method = INVITE Event-Timestamp = "Aug 23 2007 16:51:33 CEST" Sip-From-Tag = "c0a80101-29f6f83" Sip-To-Tag = "c0a80101-29f6daa" Acct-Session-Id = "2f12a585-c0a80101-0-1f(a)192.168.95.79" Sip-Src-IP = "81.57.0.22" Sip-Src-Port = "62854" Canonical-URI = "sip:0033677832974@sd-7501.dedibox.fr:5060;user=phone" Billing-Party = "sip:101@sd-7501.dedibox.fr:5060;user=phone" SIP-Proxy-IP = "88.191.45.91" User-Agent = "THOMSON ST2030 hw0 fw1.56 00-0E-50-4E-AF-C4" NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 127.0.0.1 Processing the preacct section of radiusd.conf Dan-Cristian Bogos a écrit : > Marc, > > try this (as I have written in freeradius list) - should work fine if > u follow the exact steps. I am compiling it statically since this was > the building policy recommended by developers: > > 1. Grab the sources and unpack them (1.1.7 version) > 2. After unpacking, run from within the source folder: > ./configure --with-static-modules=python > make > 3. Your make will stop here: "libtool: link: cannot find the library > `../modules/rlm_python/rlm_python.la' or unhandled argument > `../modules/rlm_python/rlm_python.la'" > 4. Go into ./src/modules/rlm_python > 5. run ./configure + make + make install > 6. Go back to root of sources and run again make + make install. > > Hope that will do, > DanB > > > > > On 8/23/07, Marc LEURENT <lftsy(a)free.fr> wrote: >> I'm receiving freeradius-users(a)lists.freeradius.org >> Did you sent it there? >> >> I have posted some message there and some developpers said that rlm_python shouldn't be compiled statically... And that I should use the experimental >> module option. So I don't know what to do in order to get your module working >> >> PS: I have tested it in console with python directly, Congratulations!! It works perfectly >> >> >> >> Dan-Cristian Bogos a écrit : >>> SOLVED, check the freeradius list, I have posted there the solution. >>> >>> DanB >>> >>> On 8/23/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>> I have copied the missing radpaths.h from 1.1.7 source, but there is still an error! (libradius.la) >>>> Why is ir so important de compile de python module statically?? >>>> >>>> Can we compile the experimental modules?? >>>> >>>> rlm_python.c: At top level: >>>> rlm_python.c:244: warning: function declaration isn't a prototype >>>> rlm_python.c: In function 'python_load_function': >>>> rlm_python.c:456: warning: passing argument 2 of 'PyObject_GetAttrString' discards qualifiers from pointer target type >>>> gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings >>>> -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef >>>> -I/home/mleurent/freeradius/official/freeradius-1.1.6/src/include -I/usr/include/python2.4 -c rlm_python.c -o rlm_python.o >/dev/null 2>&1 >>>> /home/mleurent/freeradius/official/freeradius-1.1.6/libtool --mode=link gcc -release 1.1.6 \ >>>> -module -static -o rlm_python.la \ >>>> -rpath /usr/local/lib rlm_python.lo rlm_python.c /home/mleurent/freeradius/official/freeradius-1.1.6/src/lib/libradius.la \ >>>> -L/usr/lib/python2.4/config -lpthread -ldl -lutil -lpython2.4 -lm -lnsl -lresolv -lpthread >>>> libtool: link: cannot find the library `/home/mleurent/freeradius/official/freeradius-1.1.6/src/lib/libradius.la' or unhandled argument >>>> `/home/mleurent/freeradius/official/freeradius-1.1.6/src/lib/libradius.la' >>>> make: *** [rlm_python.la] Error 1 >>>> zsh: exit 2 make >>>> >>>> >>>> Dan-Cristian Bogos a écrit : >>>>> Ok, try a trick then, >>>>> >>>>> 1. in root folder type: >>>>> >>>>> ./configure --with-static-modules=python >>>>> >>>>> 2. go in ./src/modules/rlm_python/ and try after the installation >>>>> procedure: ./configure + make + make install >>>>> 3. Go back to root folder and try again the installation procedure >>>>> (./configure --with-static-modules=python + make + make install). >>>>> >>>>> Let me know how it goes. >>>>> >>>>> DanB >>>>> >>>>> On 8/23/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>> I cannot do it! >>>>>> Sniff again >>>>>> >>>>>> SCREEN):root@sd-7501:[/home/../freeradius-1.1.6]# cd src/modules/rlm_python >>>>>> (SCREEN):root@sd-7501:[~mleurent/../rlm_python]# ./configure >>>>>> checking for gcc... gcc >>>>>> checking for C compiler default output file name... a.out >>>>>> checking whether the C compiler works... yes >>>>>> checking whether we are cross compiling... no >>>>>> checking for suffix of executables... >>>>>> checking for suffix of object files... o >>>>>> checking whether we are using the GNU C compiler... yes >>>>>> checking whether gcc accepts -g... yes >>>>>> checking for gcc option to accept ANSI C... none needed >>>>>> checking how to run the C preprocessor... gcc -E >>>>>> checking for python2.3... no >>>>>> checking for python2.2... no >>>>>> checking for python2.1... no >>>>>> checking for python1.5... no >>>>>> checking for python... python >>>>>> checking for Python.h... yes >>>>>> checking for Py_Initialize in -lpython2.4... yes >>>>>> configure: creating ./config.status >>>>>> config.status: creating Makefile >>>>>> >>>>>> (SCREEN):root@sd-7501:[~mleurent/../rlm_python]# make >>>>>> ../rules.mak:24: ../../../Make.inc: No such file or directory >>>>>> make: *** No rule to make target `../../../Make.inc'. Stop. >>>>>> zsh: exit 2 make >>>>>> >>>>>> >>>>>> Dan-Cristian Bogos a écrit : >>>>>>> Hi Marc, >>>>>>> >>>>>>> it looks like there has been some changes with freeradius 1.7 since >>>>>>> this one does not install for me either. It says :" ibtool: link: >>>>>>> cannot find the library >>>>>>> `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la' or >>>>>>> unhandled argument >>>>>>> `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la'". On >>>>>>> a manual search I could see that this library is not longer included >>>>>>> with the sources. I will try asking the guys from freeradius about the >>>>>>> changes necessary to work. >>>>>>> In the mean time, if u want to give it a try, here is how I have >>>>>>> installed from freeradius 1.6: >>>>>>> 1. Download the sources: "wget >>>>>>> ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.6.tar.gz" >>>>>>> 2. Extract and get into the source folder. >>>>>>> 3. Go to ./src/modules/rlm_python/ >>>>>>> 4. Install the sources statically: (./configure + make + make install). >>>>>>> 5. Go back to root folder for the sources >>>>>>> 6. ./configure --with-static-modules=python >>>>>>> 7. make + make install. >>>>>>> >>>>>>> Hope that would do for you. >>>>>>> >>>>>>> Cheers, >>>>>>> DanB >>>>>>> >>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>> I have another error with freeradius 1.1.7 from source, I don't know why it cannot find the module... >>>>>>>> I'll check tomorrow >>>>>>>> Yhanks for your help Dan, have a pleasant evening >>>>>>>> >>>>>>>> rlm_sql_mysql: Starting connect to MySQL server for #3 >>>>>>>> rlm_sql (sql): Connected new DB handle, #3 >>>>>>>> rlm_sql (sql): starting 4 >>>>>>>> rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 >>>>>>>> rlm_sql_mysql: Starting connect to MySQL server for #4 >>>>>>>> rlm_sql (sql): Connected new DB handle, #4 >>>>>>>> Module: Instantiated sql (sql) >>>>>>>> python_init done >>>>>>>> Module: Loaded python >>>>>>>> python: mod_instantiate = "freeradius-cdrtool" >>>>>>>> python: func_instantiate = "instantiate" >>>>>>>> python: mod_authorize = "freeradius-cdrtool" >>>>>>>> python: func_authorize = "authorize" >>>>>>>> python: mod_authenticate = "(null)" >>>>>>>> python: func_authenticate = "(null)" >>>>>>>> python: mod_preacct = "(null)" >>>>>>>> python: func_preacct = "(null)" >>>>>>>> python: mod_accounting = "freeradius-cdrtool" >>>>>>>> python: func_accounting = "accounting" >>>>>>>> python: mod_checksimul = "(null)" >>>>>>>> python: func_checksimul = "(null)" >>>>>>>> python: mod_detach = "freeradius-cdrtool" >>>>>>>> python: func_detach = "detach" >>>>>>>> rlm_python:python_load_function: module 'freeradius-cdrtool' is not found >>>>>>>> rlm_python:EXCEPT:exceptions.ImportError: /usr/lib/python2.4/lib-dynload/_socket.so: undefined symbol: _Py_TrueStruct >>>>>>>> rlm_python:python_load_function: failed to import python function 'freeradius-cdrtool.instantiate' >>>>>>>> radiusd.conf[541]: python: Module instantiation failed. >>>>>>>> radiusd.conf[1900] Unknown module "python". >>>>>>>> radiusd.conf[1803] Failed to parse authorize section. >>>>>>>> zsh: exit 1 radiusd -X >>>>>>>> >>>>>>>> >>>>>>>> >>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>> You are getting this error because the interpreter does not accept "-" >>>>>>>>> in the name. I didn't need to import it in the interpreter and there >>>>>>>>> will be no use since radiusd package is available only within >>>>>>>>> freeradius process. >>>>>>>>> >>>>>>>>> Thxs, >>>>>>>>> DanB >>>>>>>>> >>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>> Do you have this error? >>>>>>>>>> When I try to load your module in mython, I have this error because of the dash.. >>>>>>>>>> >>>>>>>>>> >>>>>>>>>> root@sd-7501:[/home/../freeradius-cdrtool-1.0]# python >>>>>>>>>> Python 2.4.4 (#2, Apr 5 2007, 20:11:18) >>>>>>>>>> [GCC 4.1.2 20061115 (prerelease) (Debian 4.1.1-21)] on linux2 >>>>>>>>>> Type "help", "copyright", "credits" or "license" for more information. >>>>>>>>>>>>> import freeradius-cdrtool >>>>>>>>>> File "<stdin>", line 1 >>>>>>>>>> import freeradius-cdrtool >>>>>>>>>> ^ >>>>>>>>>> SyntaxError: invalid syntax >>>>>>>>>>>>> import setup >>>>>>>>>> usage: [global_opts] cmd1 [cmd1_opts] [cmd2 [cmd2_opts] ...] >>>>>>>>>> or: --help [cmd1 cmd2 ...] >>>>>>>>>> or: --help-commands >>>>>>>>>> or: cmd --help >>>>>>>>>> >>>>>>>>>> error: no commands supplied >>>>>>>>>> zsh: exit 1 python >>>>>>>>>> >>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>> Marc, >>>>>>>>>>> >>>>>>>>>>> This is still an error from python, not my module. I think it has >>>>>>>>>>> something to do with linking inside between C and python. What were >>>>>>>>>>> the steps in your freeradius installation? >>>>>>>>>>> >>>>>>>>>>> DanB >>>>>>>>>>> >>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>> I have compiled the experimental modules, now the python module is working but I have an error with yours... >>>>>>>>>>>> I have changed the rlm_digest.c and fixed the sql module to work with procedure >>>>>>>>>>>> >>>>>>>>>>>> rlm_sql (sql): Connected new DB handle, #4 >>>>>>>>>>>> Module: Instantiated sql (sql) >>>>>>>>>>>> python_init done >>>>>>>>>>>> Module: Loaded python >>>>>>>>>>>> python: mod_instantiate = "freeradius-cdrtool" >>>>>>>>>>>> python: func_instantiate = "instantiate" >>>>>>>>>>>> python: mod_authorize = "freeradius-cdrtool" >>>>>>>>>>>> python: func_authorize = "authorize" >>>>>>>>>>>> python: mod_authenticate = "(null)" >>>>>>>>>>>> python: func_authenticate = "(null)" >>>>>>>>>>>> python: mod_preacct = "(null)" >>>>>>>>>>>> python: func_preacct = "(null)" >>>>>>>>>>>> python: mod_accounting = "freeradius-cdrtool" >>>>>>>>>>>> python: func_accounting = "accounting" >>>>>>>>>>>> python: mod_checksimul = "(null)" >>>>>>>>>>>> python: func_checksimul = "(null)" >>>>>>>>>>>> python: mod_detach = "freeradius-cdrtool" >>>>>>>>>>>> python: func_detach = "detach" >>>>>>>>>>>> exceptions.ImportError: /usr/lib/python2.4/lib-dynload/_socket.so: undefined symbol: _Py_TrueStruct >>>>>>>>>>>> Failed to import python module "freeradius-cdrtool" >>>>>>>>>>>> radiusd.conf[544]: python: Module instantiation failed. >>>>>>>>>>>> radiusd.conf[1884] Unknown module "python". >>>>>>>>>>>> radiusd.conf[1792] Failed to parse authorize section. >>>>>>>>>>>> zsh: exit 1 freeradius -X >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> >>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>> You can get it from here: >>>>>>>>>>>>> http://frad-cdrtool.sourceforge.net/rlm_digest.c >>>>>>>>>>>>> >>>>>>>>>>>>> DanB >>>>>>>>>>>>> >>>>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>> I haven't found this patch on http://sourceforge.net/projects/frad-cdrtool... >>>>>>>>>>>>>> Where did you found it? >>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>> >>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>> Marc, >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> I don't have this problem. >>>>>>>>>>>>>>> I have compiled freeradius with rlm_python from sources. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> For problems with freeradius, I think the best would be to grab some >>>>>>>>>>>>>>> support directly from their mailing list, since they are pretty >>>>>>>>>>>>>>> helpful. Don't forget about patching also rlm_digest in order to >>>>>>>>>>>>>>> sanitize the params coming from OpenSER in the authorization phase and >>>>>>>>>>>>>>> not the authentication one. They promised for future releases to >>>>>>>>>>>>>>> include this patch inside the distribution. >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>> DanB >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> >>>>>>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>>>> I have corrected it: mea culpa >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> But now I have a real trouble: >>>>>>>>>>>>>>>> When I start freeradius, it said that it can't find rlm_python.so, but this is normal because we added --with-static-modules=python >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Did you have thos problem? >>>>>>>>>>>>>>>> Do you know how to correct it? >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> rlm_sql (sql): Connected new DB handle, #4 >>>>>>>>>>>>>>>> Module: Instantiated sql (sql) >>>>>>>>>>>>>>>> radiusd.conf[544] Failed to link to module 'rlm_python': rlm_python.so: cannot open shared object file: No such file or directory >>>>>>>>>>>>>>>> radiusd.conf[1884] Unknown module "python". >>>>>>>>>>>>>>>> radiusd.conf[1792] Failed to parse authorize section. >>>>>>>>>>>>>>>> zsh: exit 1 freeradius -X >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>>>> Hi Marc, >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> it looks like you are getting some problems related to stored >>>>>>>>>>>>>>>>> procedure in your mysql database. Did u install also the radius patch >>>>>>>>>>>>>>>>> recommended by AG-Projects in order to work properly with stored >>>>>>>>>>>>>>>>> procedures? On the sql side I cannot help you too much since I am >>>>>>>>>>>>>>>>> using still the normal sql queries without stored procedures. >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> DanB >>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>> On 8/22/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>>>>>> I have followed your advice, Freeradius is recompiled with rlm_python, >>>>>>>>>>>>>>>>>> byt know, rlm_sql seems to encountered troubles >>>>>>>>>>>>>>>>>> like : >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> rlm_sql (sql): Reserving sql socket id: 2 >>>>>>>>>>>>>>>>>> rlm_sql_mysql: MYSQL check_error: 1312 received >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Any idea of how to repair this? >>>>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> I have added this in my debian/rules file: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> modulelist=krb5 ldap sql_mysql sql_iodbc python >>>>>>>>>>>>>>>>>> ... >>>>>>>>>>>>>>>>>> ... >>>>>>>>>>>>>>>>>> ./configure \ >>>>>>>>>>>>>>>>>> $(confflags) \ >>>>>>>>>>>>>>>>>> --prefix=/usr \ >>>>>>>>>>>>>>>>>> ... \ >>>>>>>>>>>>>>>>>> --with-static-modules=python >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Here is my freeradius debug: >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/detail-20070822 >>>>>>>>>>>>>>>>>> modcall[accounting]: module "detail" returns ok for request 5 >>>>>>>>>>>>>>>>>> modcall[accounting]: module "unix" returns noop for request 5 >>>>>>>>>>>>>>>>>> radius_xlat: '/var/log/freeradius/radutmp' >>>>>>>>>>>>>>>>>> radius_xlat: '' >>>>>>>>>>>>>>>>>> modcall[accounting]: module "radutmp" returns ok for request 5 >>>>>>>>>>>>>>>>>> radius_xlat: '' >>>>>>>>>>>>>>>>>> radius_xlat: ' CALL insert_radacct_record( 'radius', '52f74a-c0a80101-0-4(a)192.168.95.79', >>>>>>>>>>>>>>>>>> '36afb36cd5c82c34', 'sip:101@sd-7501.dedibox.fr:5060=3Buser=3Dphone', >>>>>>>>>>>>>>>>>> 'sip:101@sd-7501.dedibox.fr:5060=3Buser=3Dphone', '88.191.45.91', '5060', '2007-08-22 13:59:25', >>>>>>>>>>>>>>>>>> '0', '0', '0', '0', '', '', '200', >>>>>>>>>>>>>>>>>> 'Sip-Session', '', '', '0', '0', '200', >>>>>>>>>>>>>>>>>> 'INVITE', '', 'c0a80101-5766ea7', 'c0a80101-4e8244', '', '', >>>>>>>>>>>>>>>>>> '', 'sip:0033677832974@sd-7501.dedibox.fr:5060=3Buser=3Dphone', '', '' )' >>>>>>>>>>>>>>>>>> rlm_sql (sql): Reserving sql socket id: 2 >>>>>>>>>>>>>>>>>> rlm_sql_mysql: MYSQL check_error: 1312 received >>>>>>>>>>>>>>>>>> rlm_sql (sql): Couldn't insert SQL accounting START record - PROCEDURE radius.insert_radacct_record can't return a result set in the given context >>>>>>>>>>>>>>>>>> radius_xlat: '' >>>>>>>>>>>>>>>>>> rlm_sql (sql): Released sql socket id: 2 >>>>>>>>>>>>>>>>>> modcall[accounting]: module "sql" returns ok for request 5 >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>>>>>> Marc, >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> I would suggest as first step reading about how prepaid works in >>>>>>>>>>>>>>>>>>> CDRTool. (see PREPAID.txt in doc folder). >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> I personally use freeradius-cdrtool connector >>>>>>>>>>>>>>>>>>> (sourceforge.net/projects/frad-cdrtool) which I have written in >>>>>>>>>>>>>>>>>>> python and which needs rlm_python compiled into freeradius server. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Have a look on all the info and let me know if u need any additional. >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> Cheers, >>>>>>>>>>>>>>>>>>> DanB >>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>> On 8/20/07, Marc LEURENT <lftsy(a)free.fr> wrote: >>>>>>>>>>>>>>>>>>>> No... >>>>>>>>>>>>>>>>>>>> Is it possible to do it with openser or is it compulsory to use asterisk? >>>>>>>>>>>>>>>>>>>> What do you use? >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Thanks >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>> Dan-Cristian Bogos a écrit : >>>>>>>>>>>>>>>>>>>>> Hi there Marc, >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> are you using any application which locks, unlocks the prepaid >>>>>>>>>>>>>>>>>>>>> accounts, and instructs CDRTool to update the user's balance? Are you >>>>>>>>>>>>>>>>>>>>> aware that CDRTool uses separate applications for prepaid and postpaid >>>>>>>>>>>>>>>>>>>>> accounts? >>>>>>>>>>>>>>>>>>>>> >>>>>>>>>>>>>>>>>>>>> DanB >>>>>>>>> _______________________________________________ >>>>>>>>> Users mailing list >>>>>>>>> Users(a)openser.org >>>>>>>>> http://openser.org/cgi-bin/mailman/listinfo/users

1 0

Add Pool-Name attribute to request
by Leo Eraly 23 Aug '07

23 Aug '07

Hi, Is it possible with freeradius (1.1.7) to do the following: Pseudo code: if NAS-IP-Address == 1.1.1.1 add Pool-Name: foo if NAS-IP-Address = 2.2.2.2 add Pool-Name: bar ... And in mysql I have my 2 ip_pools configured (foo and bar) from which the machines should get an appropriate ip. So I want to add an extra attribute (which is used for ip pooling) depending on the NAS from which the request originates. My config should be something like this: I assume this searchfor is not valid. attr_rewrite add_my_pool { attribute = Pool-Name searchin = packet searchfor = "NAS-IP-Address = 1.1.1.1" replacewith = "test_pool" new_attribute = yes max_matches = 1 } post-auth { add_my_pool sqlippool } Is this possible? Kind regards, Leo -- Leo Eraly <leo at unstable dot be>

2 1

Re: problem installing RLM-Python installation in 1.7 (Alan DeKok)
by UriCALL Support 23 Aug '07

23 Aug '07

Hi there Alan, and thank you for your reply. I got the install now successfully without further issues. Regarding the version, I hope you understood me, since I am not really an accountant ;-). Will be more careful with numbers in the future. Got another question now that I have your attention. A while back we discussed some changes which would help me and other users in rlm_digest (moving the part commented as "Loop through the Digest-Attributes, sanity checking them." from authenticate function into authorize one), without, at least from my limited point of view, influencing anything wrong. You agreed them and decided that will be implemented into 2.0. I have checked "freeradius-server-2.0.0-pre1" package but still not there. Do u still intend to make the change available, or not anymore? Ta, DanB

2 1

problem installing RLM-Python installation in 1.7
by UriCALL Support 23 Aug '07

23 Aug '07

Dear All, I grabbed today the sources for 1.7 distribution and wanted to compile the rlm_python also in, but, as opposite to 1.6 version, it looks like some libraries are not longer included, here are the errors: """ host1:/usr/local/src/freeradius/freeradius-1.1.7/src/modules/rlm_python# make /usr/local/src/freeradius/freeradius-1.1.7/libtool --mode=link gcc -release 1.1.7 \ -module -static -o rlm_python.la \ -rpath /usr/local/lib rlm_python.lo rlm_python.c /usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la \ -L/usr/lib/python2.4/config -lpthread -ldl -lutil -lpython2.4 -lm -lnsl -lresolv -lpthread libtool: link: cannot find the library `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la' or unhandled argument `/usr/local/src/freeradius/freeradius-1.1.7/src/lib/libradius.la' """ Can anybody provide any solution, except using libradius.la from 1.6 for 1.7 version, or is anything changed and I missed that? Thank you in advance, DanB

5 6

Realm question
by Jeff Crowe 23 Aug '07

23 Aug '07

Hi all, Sorry if this question has been answered (I did search the archives and google to no avail): I have subscribers that connect with 2 realms as the prefix. How do I strip both and just authenticate locally? IE: username: realm1/realm2/username or realm1/realm3/username. Realm1 will always be present followed by either realm2 or realm3 (no others). Thanks, Jeff

2 1

rlm_preprocess: Error reading /usr/local/etc/raddb/huntgroups
by David E. Meier 23 Aug '07

23 Aug '07

Hi Folks, I'am trying to get FreeRadius running on FreeBSD 6.2. I followed the tutorial from chillispot.org (http://www.chillispot.org/forum/viewtopic.php?t=1431) When I try to start FreeRadius I receive this error: # /usr/local/sbin/radiusd -X : Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no rlm_preprocess: Error reading /usr/local/etc/raddb/huntgroups radiusd.conf[1018]: preprocess: Module instantiation failed. radiusd.conf[1798] Unknown module "preprocess". radiusd.conf[1788] Failed to parse authorize section. # ls -al /usr/local/etc/raddb drw-r--r-- 3 root wheel 1024 Jun 4 15:14 . drwxr-xr-x 10 root wheel 512 Jun 4 12:02 .. : -rw-r--r-- 1 root wheel 1603 Jun 4 15:14 huntgroups So I think the file should be readable by anyone. The file contains comments only anyway. Searching Google does not point out helpful information - I also tried with an empty file with no luck. I also noticed when commenting out the huntgroups file in radiusd.conf has no effect and radiusd exits with the same error. Any thoughts on this? Thanks. David

2 1

RE: Database Population problem with mysql
by Josh Howlett 23 Aug '07

23 Aug '07

Not sure why this is failing; FWIW, according to the MySQL docs: "The DATETIME type is used when you need values that contain both date and time information. MySQL retrieves and displays DATETIME values in 'YYYY-MM-DD HH:MM:SS' format. The supported range is '1000-01-01 00:00:00' to '9999-12-31 23:59:59'. " josh. > -----Original Message----- > From: ram [mailto:talk2ram@gmail.com] > Sent: 21 August 2007 16:29 > To: FreeRadius users mailing list > Cc: Josh Howlett > Subject: Re: Database Population problem with mysql > > > > On 8/21/07, Josh Howlett <Josh.Howlett(a)ja.net> wrote: > > > (42000) at line 15: Invalid default value for 'AcctStartTime' > > Try using a valid value for this. > > > Hi > > what is the correct value for that record > > as per the document iam populating > > iam using mysql > > mysql Ver 14.12 Distrib 5.0.32, for pc-linux-gnu (i486) > using readline 5.2 > > on debian > > any suggestions > > ram > >

4 7

2.0.0pre1 not starting when reading NAS from mysql
by Roberto Greiner 23 Aug '07

23 Aug '07

I'm having a problem with 2.0.0pre1. I'm using a clean install. All I changed were entries to enable mysql. The lines I uncommented where the sql entries in authorize, accounting and session, and I commented the files entry in authorize{}. I also commented the 'unix' line in authorize to avoid conflict with valid unix users. In sql.conf, besides user/pass config, I enabled the "readclients = yes" line. Finally, in sql/mysql-dialup.conf I uncommented simul_count_query. When I start the server with -X, it fails the connection with the mysql server. When I comment the line about the nas table in sql.conf, it loads properly. Also, if I uncomment it again and leave the nas table empty, freeradius loads properly. My box is a Debian Etch, with freeradius being installed following the instructions for debian on the wiki (building a .deb package and then installing the package) Any help is appreciated. Thanks, Roberto The entry I used as sample in the nas table (note: I tried 'localhost' instead of 127.0.0.1, with the same results): +----+-----------+-----------+-------+-------+--------+-----------+---------------+ | id | nasname | shortname | type | ports | secret | community | description | +----+-----------+-----------+-------+-------+--------+-----------+---------------+ | 20 | 127.0.0.1 | local | other | NULL | foobar | NULL | RADIUS Client | +----+-----------+-----------+-------+-------+--------+-----------+---------------+ The output from freeradius -X: Module: Linked to module rlm_sql Module: Instantiating sql sql { driver = "rlm_sql_mysql" server = "localhost" port = "" login = "xxxxxx" password = "xxxxxx" radius_db = "radius" sqltrace = no sqltracefile = "/var/log/freeradius/sqltrace.sql" readclients = yes deletestalesessions = yes num_sql_socks = 5 sql_user_name = "%{User-Name}" default_user_profile = "" nas_query = "SELECT id, nasname, shortname, type, secret FROM nas" authorize_check_query = "SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" authorize_reply_query = "SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" authorize_group_check_query = "SELECT id, GroupName, Attribute, Value, op FROM radgroupcheck WHERE GroupName = '%{Sql-Group}' ORDER BY id" authorize_group_reply_query = "SELECT id, GroupName, Attribute, Value, op FROM radgroupreply WHERE GroupName = '%{Sql-Group}' ORDER BY id" accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = %{Acct-Delay-Time:-0} WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" accounting_update_query = "UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}'" accounting_update_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" accounting_start_query = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time:-0}', '0')" accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time:-0}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time:-0}')" group_membership_query = "SELECT GroupName FROM radusergroup WHERE UserName = '%{SQL-User-Name}' ORDER BY priority" connect_failure_retry_delay = 60 simul_count_query = "SELECT COUNT(*) FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', '%S')" safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" } rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to dialup@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 rlm_sql (sql): Processing generate_sql_clients rlm_sql (sql) in generate_sql_clients: query is SELECT id, nasname, shortname, type, secret FROM nas rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Read entry nasname=127.0.0.1,shortname=local,secret=foobar rlm_sql (sql): Adding client 127.0.0.1 (local) to clients list rlm_sql (sql): generate_sql_clients() returned error rlm_sql (sql): Closing sqlsocket 4 rlm_sql (sql): Closing sqlsocket 3 rlm_sql (sql): Closing sqlsocket 2 rlm_sql (sql): Closing sqlsocket 1 rlm_sql (sql): Closing sqlsocket 0 radiusd.conf[10]: sql: Module instantiation failed. radiusd.conf[2018] Failed to find module "sql". radiusd.conf[1928] Failed to parse authorize section. Errors setting up modules -- ----------------------------------------------------- Marcos Roberto Greiner Os otimistas acham que estamos no melhor dos mundos Os pessimistas tem medo de que isto seja verdade Murphy -----------------------------------------------------

5 9