- Freeradius-Users - lists.freeradius.org

SQL statement expansion with alternate internal expansions ...
by Arran Cudbard-Bell 18 Jun '07

18 Jun '07

update request { Supplicant-Flags = "%{sql_clients:SELECT EXPORT_SET(master.supplicant_flags,'1','0','',10) FROM `master` WHERE master.hw_address = '%{Calling-Station-Id:-null}' LIMIT 0,1}" } is parsed as SELECT EXPORT_SET(master.supplicant_flags,'1','0','',10) FROM `master` WHERE master.hw_address = '%{Calling-Station-Id:-null}' LIMIT 0,1} expanded to SELECT EXPORT_SET(master.supplicant_flags,'1','0','',10) FROM `master` WHERE master.hw_address = 'null' LIMIT 0,1} when should be SELECT EXPORT_SET(master.supplicant_flags,'1','0','',10) FROM `master` WHERE master.hw_address = '%{Calling-Station-Id:-null}' LIMIT 0,1} expanded to SELECT EXPORT_SET(master.supplicant_flags,'1','0','',10) FROM `master` WHERE master.hw_address = 'null' LIMIT 0,1 Tailing } breaks sql queries. Thing that breaks it is the alternate value declaration for Calling-Station-Id. works fine with update request { Supplicant-Flags = "%{sql_clients:SELECT EXPORT_SET(master.supplicant_flags,'1','0','',10) FROM `master` WHERE master.hw_address = '%{Calling-Station-Id}' LIMIT 0,1}" } This has been a bug for as long as I can remember using the server :) so since 1.1.4 --- Arran Cudbard-Bell (A.Cudbard-Bell(a)sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900

3 2

Segmentation fault on conflicting packet
by Milan Holub 18 Jun '07

18 Jun '07

Hi Alan, I'm using cvs build based on cvs head on May 29 2007. I'm running it under conditions close to production(40 auth requests/hour, 700 accounting requests/hour). Most of the time it's doing well but I've observed already multiple times following behaviour: 2007-05-31 06:18:14.884403500 Thread 1 handling request 11920, (2384 handled so far) 2007-05-31 06:18:14.884406500 Processing the preacct section of radiusd.conf 2007-05-31 06:18:14.884408500 +- entering group preacct 2007-05-31 06:18:14.884410500 ++[preprocess] returns ok 2007-05-31 06:18:14.884412500 radius_xlat: '<CLIENT_IP>' 2007-05-31 06:18:14.884414500 rlm_attr_rewrite: Added attribute Client-IP-Address with value '<CLIENT_IP>' 2007-05-31 06:18:14.884417500 ++[add_clientip] returns ok 2007-05-31 06:18:14.884534500 rlm_acct_unique: Hashing 'NAS-Port = 5292,Client-IP-Address = <CLIENT_IP>,NAS-IP-Address = <NAS_IP>,Acct-Session-Id = "192458",User-Name = "<USERNAME>"' 2007-05-31 06:18:14.884540500 rlm_acct_unique: Acct-Unique-Session-ID = "4c66e6ddb85d6ed4". 2007-05-31 06:18:14.884543500 ++[acct_unique] returns ok 2007-05-31 06:18:14.884544500 rlm_realm: No '/' in User-Name = "<USERNAME>", looking up realm NULL 2007-05-31 06:18:14.884547500 rlm_realm: No such realm "NULL" 2007-05-31 06:18:14.884562500 ++[IPASS] returns noop 2007-05-31 06:18:14.884564500 rlm_realm: No '@' in User-Name = "<USERNAME>", looking up realm NULL 2007-05-31 06:18:14.884567500 rlm_realm: No such realm "NULL" 2007-05-31 06:18:14.884568500 ++[suffix] returns noop 2007-05-31 06:18:14.884570500 radius_xlat: '<CLIENT_IP>' 2007-05-31 06:18:14.884572500 acct_users: Matched entry DEFAULT at line 39 2007-05-31 06:18:14.884574500 ++[files] returns ok 2007-05-31 06:18:14.884575500 Using perl at 0x81691e0 2007-05-31 06:18:14.884590500 rlm_perl: rlm_perl: preacct 2007-05-31 06:18:14.884592500 rlm_perl: Request attributes: 2007-05-31 06:18:14.884594500 rlm_perl: RAD_REQUEST: WISPr-Location-Name = 21001:BE-HO Bern Holingen KVA 2007-05-31 06:18:14.884619500 rlm_perl: RAD_REQUEST: Calling-Station-Id = 0000000000000000 2007-05-31 06:18:14.884622500 rlm_perl: RAD_REQUEST: NAS-Port = 5292 2007-05-31 06:18:14.884624500 rlm_perl: RAD_REQUEST: Acct-Delay-Time = 0 2007-05-31 06:18:14.884626500 rlm_perl: RAD_REQUEST: WISPr-Location-ID = 68 2007-05-31 06:18:14.884628500 rlm_perl: RAD_REQUEST: Acct-Session-Id = 192458 2007-05-31 06:18:14.884630500 rlm_perl: RAD_REQUEST: NAS-Identifier = <NAS_IP>:5292 2007-05-31 06:18:14.884645500 rlm_perl: RAD_REQUEST: Class = TN_S1M 2007-05-31 06:18:14.884647500 rlm_perl: RAD_REQUEST: Acct-Unique-Session-Id = 4c66e6ddb85d6ed4 2007-05-31 06:18:14.884650500 rlm_perl: RAD_REQUEST: Called-Station-Id = 00:19:D2:3D:5A:EA 2007-05-31 06:18:14.884652500 rlm_perl: RAD_REQUEST: Acct-Authentic = RADIUS 2007-05-31 06:18:14.884654500 rlm_perl: RAD_REQUEST: Framed-IP-Address = 10.2.159.24 2007-05-31 06:18:14.884657500 rlm_perl: RAD_REQUEST: NAS-Port-Type = Wireless-802.11 2007-05-31 06:18:14.884672500 rlm_perl: RAD_REQUEST: User-Name = <USERNAME> 2007-05-31 06:18:14.884674500 rlm_perl: RAD_REQUEST: Client-IP-Address = <CLIENT_IP> 2007-05-31 06:18:14.884676500 rlm_perl: RAD_REQUEST: NAS-IP-Address = <NAS_IP> 2007-05-31 06:18:14.884678500 rlm_perl: RAD_REQUEST: Acct-Status-Type = Start 2007-05-31 06:18:14.884680500 rlm_perl: Reply attributes: 2007-05-31 06:18:14.884682500 rlm_perl: Check attributes: 2007-05-31 06:18:14.884684500 rlm_perl: RAD_CHECK Proxy-To-Realm = LOCAL 2007-05-31 06:18:14.884699500 rlm_perl: Added pair WISPr-Location-Name = 21001:BE-HO Bern Holingen KVA 2007-05-31 06:18:14.884720500 rlm_perl: Added pair Calling-Station-Id = 0000000000000000 2007-05-31 06:18:14.884723500 rlm_perl: Added pair NAS-Port = 5292 2007-05-31 06:18:14.884725500 rlm_perl: Added pair Acct-Delay-Time = 0 2007-05-31 06:18:14.884727500 rlm_perl: Added pair WISPr-Location-ID = 68 2007-05-31 06:18:14.884729500 rlm_perl: Added pair Acct-Session-Id = 192458 2007-05-31 06:18:14.884731500 rlm_perl: Added pair NAS-Identifier = <NAS_IP>:5292 2007-05-31 06:18:14.884746500 rlm_perl: Added pair Class = TN_S1M 2007-05-31 06:18:14.884748500 rlm_perl: Added pair Acct-Unique-Session-Id = 4c66e6ddb85d6ed4 2007-05-31 06:18:14.884750500 rlm_perl: Added pair Called-Station-Id = 00:19:D2:3D:5A:EA 2007-05-31 06:18:14.884753500 rlm_perl: Added pair Acct-Authentic = RADIUS 2007-05-31 06:18:14.884755500 rlm_perl: Added pair Framed-IP-Address = 10.2.159.24 2007-05-31 06:18:14.884757500 rlm_perl: Added pair NAS-Port-Type = Wireless-802.11 2007-05-31 06:18:14.884772500 rlm_perl: Added pair User-Name = <USERNAME> 2007-05-31 06:18:14.884774500 rlm_perl: Added pair Client-IP-Address = <CLIENT_IP> 2007-05-31 06:18:14.884776500 rlm_perl: Added pair NAS-IP-Address = <NAS_IP> 2007-05-31 06:18:14.884778500 rlm_perl: Added pair Acct-Status-Type = Start 2007-05-31 06:18:14.884780500 rlm_perl: Added pair Proxy-To-Realm = LOCAL 2007-05-31 06:18:14.884782500 ++[perl] returns ok 2007-05-31 06:18:14.884784500 +- group preacct returns ok 2007-05-31 06:18:14.884835500 Processing the accounting section of radiusd.conf 2007-05-31 06:18:14.884837500 +- entering group accounting 2007-05-31 06:18:14.884839500 radius_xlat: '/var/log/freeradius/radacct/<CLIENT_IP>/detail-20070531' 2007-05-31 06:18:14.884860500 rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/freeradi us/radacct/<CLIENT_IP>/detail-20070531 2007-05-31 06:18:14.884865500 radius_xlat: 'Thu May 31 06:18:14 2007' 2007-05-31 06:18:14.884935500 Threads: total/active/spare threads = 5/1/4 2007-05-31 06:18:14.885099500 Received conflicting packet from client <SHORTNAME> port 33499 - ID: 0 due to unfinished request 11920.Giving up on old request. 2007-05-31 06:18:14.885168500 Failed to insert request 11921 in the list of live requests: discarding 2007-05-31 06:18:14.913060500 ++[detail] returns ok 2007-05-31 06:18:14.913068500 rad_accounting: Cancelling proxy to realm LOCAL, as it is a LOCAL realm. 2007-05-31 06:18:14.913071500 Request 11920 was cancelled. 2007-05-31 06:18:14.913073500 Going to the next request 2007-05-31 06:18:14.913074500 Thread 1 waiting to be assigned a request >>SEQMENTATION FAULT... If you check the timeline we've received conclicting packet after 0.000696 sec. Which I think was a duplicate packet due to some network problem. Packet 11920 was in the middle of processing(finished writing into detail file, but not yet written to database). Segmentation fault occured when another request was received. I was not able to simulate by sending duplicate packets via radclient. I think the sensitive part is receiving duplicate packet during the processing of original packet. Any ideas? Milan Holub holub (at) thenet (dot) ch -------------------------------------- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch --------------------------------------

3 2

RE: Freeradius PEAP and Wireless
by Josh Howlett 18 Jun '07

18 Jun '07

> rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is > required first. You need to uncomment the tls section in eap.conf, even if yoo're not intending to use EAP-TLS. josh.

1 0

Re: AW: AW: encrypted password
by Felipe Ceglia - PY1NB 18 Jun '07

18 Jun '07

Hi, Running 1.1.6 now. Crypt-Local works ok now. I would like to know if it is possible to have both User-Password and Crypt-Local Auth-Types for sql users. Now I need to disable the current System (/etc/passwd) users to Crypt-Local, and also have users with cleartext passwords. Thank you, Felipe Ceglia Rascher, Markus wrote: > If u use the db for user authentication, then db, here is my db-content: > > select * from radcheck; > +----+----------+---------------+----+---------------+ > | id | UserName | Attribute | op | Value | > +----+----------+---------------+----+---------------+ > | 1 | testuser | Crypt-Password| := | oV9XYXNTx4awE | > +----+----------+---------------+----+---------------+ > > > select * from radgroupcheck; > +----+-----------+-----------+----+---------------+ > | id | GroupName | Attribute | op | Value | > +----+-----------+-----------+----+---------------+ > | 1 | testgroup | Auth-Type | := | Crypt-Local | > +----+-----------+-----------+----+---------------+ > 1 row in set (0.01 sec) > > > If it works with cleartext pwd's and the auth-type Local then it will work with Crypt-Local and the crypted pwd in the radcheck table > > For encrypting the pwd use the encrypt("pwd") function in sql > > Do you have any further questions? > > > regards > Markus > > > > -----Ursprüngliche Nachricht----- > Von: Felipe Ceglia [mailto:felipeceglia@gmail.com] Im Auftrag von Felipe Ceglia - PY1NB > Gesendet: Mittwoch, 13. Juni 2007 13:54 > An: Rascher, Markus > Betreff: Re: AW: encrypted password > > Hi Markus, > > Where should I try it? users file, or as an attribute on the db? > > Thank you, > > Felipe > > Rascher, Markus wrote: >> Did you try Crypt-Local auth-Type? >> >> -----Ursprüngliche Nachricht----- >> Von: freeradius-users-bounces+markus.mr.rascher=siemens.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+markus.mr.rascher=siemens.com@lists.freeradius.org] Im Auftrag von Felipe Ceglia - PY1NB >> Gesendet: Mittwoch, 13. Juni 2007 00:26 >> An: FreeRadius users mailing list >> Betreff: Re: encrypted password >> >> Hi Arran, >> >> Thank you for your reply. >> >> I tried Crypt-Password := "9D8wtP7DGqgCg", but then the debug says: >> >> (...) >> modcall[authorize]: module "sql" returns ok for request 2 >> modcall: group authorize returns ok for request 2 >> rad_check_password: Found Auth-Type Local >> auth: type Local >> auth: user supplied User-Password does NOT match local User-Password >> auth: Failed to validate the user. >> Login incorrect: [anavc/2572ava] (from client localhost port 0) >> Delaying request 2 for 2 seconds >> >> When I try with a clear text password user, it says: >> >> (...) >> modcall[authorize]: module "sql" returns ok for request 3 >> modcall: group authorize returns ok for request 3 >> rad_check_password: Found Auth-Type Local >> auth: type Local >> auth: user supplied User-Password matches local User-Password >> (...) >> >> >> Thank you, >> >> Felipe >> >> >> >> Arran Cudbard-Bell wrote: >>> Felipe Ceglia - PY1NB wrote: >>>> Hi again, >>>> >>>> I need to migrate my users from plain old unix passwd file to sql. >>>> >>>> How do I have the user information in the radcheck table? >>>> >>>> Encrypted-Password == 9D8wtP7DGqgCg ? >>>> >>>> My passwd file looks like: >>>> anavc:9D8wtP7DGqgCg:1002:300:#Ana:/home/dummy:/usr/bin/passwd >>>> >>>> This password seems not to be MD5. >>>> >>>> Any guesses? >>>> >>>> Thank you again, >>>> >>>> Felipe >>>> >>>> - >>>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >>>> >>> That would be unix crypt. >>> >>> The attribute in radcheck is >>> >>> Crypt-Password := "9D8wtP7DGqgCg" >>> - >>> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >>> >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> >

2 1

download latest version: link broken?
by Andrew Long 18 Jun '07

18 Jun '07

ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.5.tar.gz I am getting an error that the dir or file does not exist... Am I right that 2.0 is not available and/or not considered stable yet? Regards, Andrew

5 8

rlm_ldap: multiple user profile attributes combined with multiple user attributes
by Florian Reinholz 17 Jun '07

17 Jun '07

hi, i'm currently trying to setup a scalable freeradius implemention based on rlm_ldap. everything works real fine except one thing: two major profiles are provided 1. l2tp settings for my local nas 2. l2tp settings for the nas of another carrier there are always minimum 2 vendor specific attributes for each profile. all users are mapped to their specific profile. some users have their own attributes which must extend the profile attributes. for example: profiles -- local radiusTunnelServerID = local Cisco-AVPair = +=lcp:interface-config=ip vrf forwarding LO Cisco-AVPair = +=lcp:interface-config=ip os netw broadcast -- remote radiusTunnelServerID = remote Cisco-AVPair = +=lcp:interface-config=ip vrf forwarding RE Cisco-AVPair = +=lcp:interface-config=ip rip trigger users -- user01 radiusProfileDN = cn=local,ou=profiles,ou=radius,dc=acme,dc=com Cisco-AVPair = +=lcp:interface-config=descr Local Cisco-AVPair = +=lcp:interface-config=service output qos_user01 -- user02 radiusProfileDN = cn=remote,ou=profiles,ou=radius,dc=acme,dc=com Cisco-AVPair = +=lcp:interface-config=descr Remote Cisco-AVPair = +=lcp:interface-config=service output qos_user02 the radiusd debug shows me the all attributes are processed and ok but only the user specific attributes are replied. the result is ok when i define profile attributes. but not when i combine user and profile attributes. thanks in advance for your help! best regards florian -- START radiusd DEBUG -- rad_recv: Access-Request packet from host 127.0.0.1:33570, id=21, length=92 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 1041 NAS-Port-Id = "Uniq-Sess-ID1041" NAS-Port-Type = Virtual NAS-IP-Address = 1.2.3.4 User-Name = "test" User-Password = "test" Sun Jun 17 13:32:46 2007 : Debug: Processing the authorize section of radiusd.conf Sun Jun 17 13:32:46 2007 : Debug: modcall: entering group authorize for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from preprocess (rlm_preprocess) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "preprocess" returns ok for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "chap" returns noop for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "mschap" returns noop for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling IPASS (rlm_realm) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_realm: No '/' in User-Name = "test", looking up realm NULL Sun Jun 17 13:32:46 2007 : Debug: rlm_realm: No such realm "NULL" Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from IPASS (rlm_realm) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "IPASS" returns noop for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_realm: No '@' in User-Name = "test", looking up realm NULL Sun Jun 17 13:32:46 2007 : Debug: rlm_realm: No such realm "NULL" Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "suffix" returns noop for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling ntdomain (rlm_realm) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_realm: No '\' in User-Name = "test", looking up realm NULL Sun Jun 17 13:32:46 2007 : Debug: rlm_realm: No such realm "NULL" Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from ntdomain (rlm_realm) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "ntdomain" returns noop for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_eap: No EAP-Message, not doing EAP Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from eap (rlm_eap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "eap" returns noop for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: calling ldap (rlm_ldap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: - authorize Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: performing user authorization for test Sun Jun 17 13:32:46 2007 : Debug: radius_xlat: '(|(&(objectClass=radiusUser)(uid=test))(&(objectClass=radiusUser)(cn=test)))' Sun Jun 17 13:32:46 2007 : Debug: radius_xlat: 'ou=radius,ou=services,dc=acme,dc=com' Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: ldap_get_conn: Checking Id: 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: ldap_get_conn: Got Id: 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: attempting LDAP reconnection Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: (re)connect to 127.0.0.1:389, authentication 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: bind as cn=read,ou=radius,ou=services,dc=acme,dc=com/radius to 127.0.0.1:389 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: waiting for bind result ... Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Bind was successful Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: performing search in ou=radius,ou=services,dc=acme,dc=com, with filter (|(&(objectClass=radiusUser)(uid=test))(&(objectClass=radiusUser)(cn=test))) Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: checking if remote access for test is allowed by dialupAccess Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: performing search in cn=Default,ou=profiles,ou=radius,ou=services,dc=acme,dc=com, with filter (objectClass=radiusObject) Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusServiceType as Service-Type, value Framed & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: performing search in cn=test,cn=wonderland,ou=profiles,ou=radius,ou=services,dc=acme,dc=com, with filter (objectClass=radiusObject) Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding Cisco-AVpair as Cisco-AVPair, value lcp:interface-config=ip rip trigger & op=8 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusTunnelServerAuthId as Tunnel-Server-Auth-ID, value server01 & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusTunnelClientAuthId as Tunnel-Client-Auth-ID, value client01 & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusTunnelPassword as Tunnel-Password, value acme& op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusTunnelServerEndpoint as Tunnel-Server-Endpoint, value 5.6.7.8 & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusTunnelMediumType as Tunnel-Medium-Type, value 1 & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusTunnelType as Tunnel-Type, value L2TP & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusFramedProtocol as Framed-Protocol, value PPP & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding radiusServiceType as Service-Type, value Framed & op=11 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: extracted attribute Cisco-AVPair from generic item Cisco-AVPair += "lcp:interface-config=ip os netw broadcast" Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Added password test in check items Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: looking for check items in directory... Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: looking for reply items in directory... Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding Cisco-AVpair as Cisco-AVPair, value lcp:interface-config=descr User: test & op=8 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Adding Cisco-AVpair as Cisco-AVPair, value lcp:interface-config=service-policy output QoS_egress & op=8 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Setting Auth-Type = ldap Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: user test authorized to use remote access Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: ldap_release_conn: Release Id: 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authorize]: returned from ldap (rlm_ldap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authorize]: module "ldap" returns ok for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall: leaving group authorize (returns ok) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rad_check_password: Found Auth-Type ldap Sun Jun 17 13:32:46 2007 : Debug: auth: type "LDAP" Sun Jun 17 13:32:46 2007 : Debug: Processing the authenticate section of radiusd.conf Sun Jun 17 13:32:46 2007 : Debug: modcall: entering group LDAP for request 0 Sun Jun 17 13:32:46 2007 : Debug: modsingle[authenticate]: calling ldap (rlm_ldap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: - authenticate Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: login attempt by "test" with password "test" Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: user DN: cn=test,ou=cisco,ou=users,ou=radius,ou=services,dc=acme,dc=com Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: (re)connect to 127.0.0.1:389, authentication 1 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: bind as cn=test,ou=cisco,ou=users,ou=radius,ou=services,dc=acme,dc=com/test to 127.0.0.1:389 Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: waiting for bind result ... Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: Bind was successful Sun Jun 17 13:32:46 2007 : Debug: rlm_ldap: user test authenticated succesfully Sun Jun 17 13:32:46 2007 : Debug: modsingle[authenticate]: returned from ldap (rlm_ldap) for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall[authenticate]: module "ldap" returns ok for request 0 Sun Jun 17 13:32:46 2007 : Debug: modcall: leaving group LDAP (returns ok) for request 0 Sun Jun 17 13:32:46 2007 : Auth: Login OK: [test] (from client localhost port 1041) Sending Access-Accept of id 21 to 127.0.0.1 port 33570 Tunnel-Server-Auth-Id:0 = "server01" Tunnel-Client-Auth-Id:0 = "client01" Tunnel-Password:0 = "acme" Tunnel-Server-Endpoint:0 = "5.6.7.8" Tunnel-Medium-Type:0 = IPv4 Tunnel-Type:0 = L2TP Framed-Protocol = PPP Service-Type = Framed-User Cisco-AVPair += "lcp:interface-config=descr User: test" Cisco-AVPair += "lcp:interface-config=service-policy output QoS_egress" -- END radiusd DEBUG --

1 0

Freeeradius 1.16 and Radrelay Not updating
by Jeff 16 Jun '07

16 Jun '07

I have Freeradius installed on two opensuse 10.2 servers Running Freeradius 1.16 I am running radrelay on the two too keep the detail files in sync (New Setup) The combined detail work file is created on the two servers and each appear to write to it ok. But they aren't syncing with one another heres my radrelay start commands --- Primary radrelay -a /var/log/radius/radacct/ -d /etc/raddb -n Secondary-Radius detail-combined --- Secondary radrelay -a /var/log/radius/radacct/ -d /etc/raddb -n Primary-Radius detail-combined --- In the clients.conf on each server is an entry with secret pointing to the server in question.

1 0

Re: Need example mod_python
by UriCALL Support 15 Jun '07

15 Jun '07

Hey Allan, thxs for the answer. It looks bit less foggy for me now. Have a good one, DanB

1 0

Need example mod_python
by UriCALL Support 15 Jun '07

15 Jun '07

Hello, as I have mentioned before in one of my e-mails, is there anyone who can provide me a practical example of the python module? Thank you in advance, DanB

2 1

Run 2 FreeRadius simultanously
by Jaume 15 Jun '07

15 Jun '07

Hello! My machine is running FreeRADIUS Version 1.1.3, for host i686-redhat-linux-gnu under Fedora Core 6 and my question is... Can my machine run 2 FreeRadius at the same time? Each FreeRadius in a diferent IP but simultanously in the same CPU and O.S.? Somebody tell me thats possible if each radius is reading from a diferent PATH... Thanks for any documentacion, link or kind of help. Jaume, trying to start eduRoam in Peru!

4 6