- Freeradius-Users - lists.freeradius.org

Re: rlm_sql_mysql Problem with Freeradius on Centos 5
by Andy Hughes 07 Jun '07

07 Jun '07

Hi all, After much head scratching I worked it out. The problem was that SELinux was enabled and stopping radiusd from connecting to the socket. Thanks for your help. Andy > > Message: 2 > Date: Thu, 7 Jun 2007 10:12:38 +0300 > From: "liran tal" <liransgarage(a)gmail.com> > Subject: Re: rlm_sql_mysql Problem with Freeradius on Centos 5 > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: > <3ed55890706070012r1a1891b2xce125f51f45c2664(a)mail.gmail.com> > Content-Type: text/plain; charset="iso-8859-1" > > Could it be an authentication problem? Maybe you didn't spell the user to > connect to mysql correct? > I would also suggest that you enable extensive logging on the mysql side > to > see if there are any > requests. This is done usually in /etc/mysql/my.cnf > > > Liran. > > On 6/7/07, Andy Hughes <andy(a)conet.co.nz> wrote: >> >> Hi Freeradius Users, >> >> I am having an issue with the rlm_sql_mysql driver on Centos 5. >> >> When I run radius from the init.d/radiusd the server presents the >> following error in the radius logs. >> >> --snip-- >> >> Fri Jun 8 02:58:42 2007 : Info: rlm_sql (sql): Driver rlm_sql_mysql >> (module rlm_sql_mysql) loaded and linked >> Fri Jun 8 02:58:42 2007 : Info: rlm_sql (sql): Attempting to connect to >> radius@localhost:3306/radius >> Fri Jun 8 02:58:42 2007 : Info: rlm_sql_mysql: Starting connect to > MySQL >> server for #0 >> Fri Jun 8 02:58:42 2007 : Error: rlm_sql_mysql: Couldn't connect socket >> to MySQL server radius@localhost:radius >> Fri Jun 8 02:58:42 2007 : Error: rlm_sql_mysql: Mysql error 'Can't >> connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' >> (13)' >> Fri Jun 8 02:58:42 2007 : Error: rlm_sql (sql): Failed to connect DB >> handle #0 >> >> -- snip -- >> >> -- snip -- >> netstat -a >> >> unix 3 [ ] STREAM CONNECTED 120857 >> /var/lib/mysql/mysql.sock >> tcp 0 0 *:mysql *:* >> LISTEN >> >> -- snip -- >> >> I have tried running the server as root and I still receive the same >> error. >> >> However, >> >> When I run the server in extended debug mode (as root) the server starts >> fine and will serve authentication from the MySQL database quite > happily. >> >> --snip-- >> >> rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and >> linked >> rlm_sql (sql): Attempting to connect to radius@localhost:3306/radius >> rlm_sql (sql): starting 0 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 >> rlm_sql_mysql: Starting connect to MySQL server for #0 >> rlm_sql (sql): Connected new DB handle, #0 >> rlm_sql (sql): starting 1 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 >> rlm_sql_mysql: Starting connect to MySQL server for #1 >> rlm_sql (sql): Connected new DB handle, #1 >> rlm_sql (sql): starting 2 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 >> rlm_sql_mysql: Starting connect to MySQL server for #2 >> rlm_sql (sql): Connected new DB handle, #2 >> rlm_sql (sql): starting 3 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 >> rlm_sql_mysql: Starting connect to MySQL server for #3 >> rlm_sql (sql): Connected new DB handle, #3 >> rlm_sql (sql): starting 4 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 >> rlm_sql_mysql: Starting connect to MySQL server for #4 >> rlm_sql (sql): Connected new DB handle, #4 >> Module: Instantiated sql (sql) >> >> --snip-- >> >> I have also tried various variations of commands in sql.conf to > configure >> the sql port. Can anyone tell me what the appropriate configuration > command >> is? >> >> Can anyone shine any light on what might be the problem here? >> >> Regards, >> >> Andy Hughes >> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> >

1 0

From users file to SQL
by David Majorel 07 Jun '07

07 Jun '07

Hi, I need to convert my users/group file to rlm_sql, but after reading the wiki, I can't figure out how to reproduce the flow. I want to authorize all connections, except if the user exists and the password is wrong. If the users doesn't exist or is disabled, I set an unrouteable address to the user. The point is to prevent DSL routers to keep on trying to connect when they are misconfigured, or customer is suspended. I use rlm_sql and rlm_sqlippool with a MySQL backend. The users file I try to convert looks like this : ------ # Default profile for everyone DEFAULT Pool-Name = "default" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Netmask = 255.255.255.254, Framed-MTU = 1492, Framed-Compression = Van-Jacobson-TCP-IP, Qos-Policy-Metering = DL128, Qos-Policy-Policing = UL64, Fall-Through = Yes # Set group attributes DEFAULT Group-Name == "SUSPENDED", Auth-Type := Accept, \ Pool-Name := "disabled" DEFAULT Group-Name == "DSL500", Pool-Name := "dsl500" Qos-Policy-Metering := DL512, Qos-Policy-Policing := UL128, Fall-Through = Yes [... more groups ...] # Set user attributes testuser ClearText-Password := 'test' Framed-IP-Address := [...], Framed-Route := [...], Framed-IP-Netmask := [...], [... more users ...] DEFAULT Auth-Type := Accept ------ According to the wiki, rlm_sql process users first, then groups. With this order, a user could have his IP/routes set even if he is disabled (because he is not rejected). As I have about 10000 users, using big users/group files is not really an option :-) Maybe I did something wrong, any help would be appreciated. Thanks, -- David Majorel Offratel/Lagoon ISP

5 8

check-config option
by Giovanni Lovato 07 Jun '07

07 Jun '07

On http://wiki.freeradius.org/index.php/FAQ, question 6.10 I read: <quote> With FreeRADIUS you can simply use: radiusd -C to check the configuration. [...] </quote> But when I try to do that: <code> # radiusd -C radiusd: invalid option -- C Usage: radiusd [-a acct_dir] [-d db_dir] [-l log_dir] [-i address] [-p port] [-AcfnsSvXxyz] </code> I'm using FreeRADIUS 1.1.6. G.L. -- www.aldu.net/~heruan giovanni.lovato(a)aldu.net

3 3

Markus Wintruff istaußer Haus.
by markus.wintruff＠linde.com 07 Jun '07

07 Jun '07

Ich werde ab 07.06.2007 nicht im Büro sein. Ich kehre zurück am 10.06.2007. Bitte wenden sie sich an Michael Cochu michael.cochu(a)linde.com +49-40-7339-1432. I am not in the office. Please contact Michael Cochu michael.cochu(a)linde.com +49-40-7339-1432.

1 0

Re: Freeradius-Users Digest, Vol 26, Issue 18
by Nitin Naveen 07 Jun '07

07 Jun '07

Hi Peter, I did bother to look at rlm_sql. However my need is a bit different. I do not want to fetch values from a DB and added them as values to certain radisu attributes. I want to fetch, do some operation on the feteched value and then add the result of the operation to the radius attributes. Any ideas or suggested steps would be helpful. Regards Nitin Date: Thu, 7 Jun 2007 11:12:47 +0300 From: Peter Nixon <listuser(a)peternixon.net> Subject: Re: How to connect to backend DB To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <200706071112.48377.listuser(a)peternixon.net> Content-Type: text/plain; charset="iso-8859-9" On Thu 07 Jun 2007, Nitin Naveen wrote: > Hi, > > I am writing a new RLM called rlm_prop_protocol. It basically adds some > attributes. The value for > these attributes are pulled from a backend database (MYSQL). I wanted to > know whether there > is a provision in freeradius or some standard method that may be used to > connect and fetch > data from the MYSQL database. As of now I have added MYSQL specific code > in my module. Did you bother to look at the FreeRADIUS code before you started writing?? The modules rlm_sql and rlm_sql_mysql would seem to be pretty self explanatory :-) It is quite likely that you can do what you need without writing a new module... Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc *****************************************************DISCLAIMER***************************************************** This message and/or attachment(s) contained here are confidential, proprietary to HUGHES SYSTIQUE and its customers. Contents may be privileged or otherwise protected by law. The information is solely intended for the entity it is addressed to. If you are not the intended recipient of this message, it is strictly prohibited to read, forward, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately and delete the message. ********************************************************************************************************************

1 0

rlm_sql_mysql Problem with Freeradius on Centos 5
by Andy Hughes 07 Jun '07

07 Jun '07

Hi Freeradius Users, I am having an issue with the rlm_sql_mysql driver on Centos 5. When I run radius from the init.d/radiusd the server presents the following error in the radius logs. --snip-- Fri Jun 8 02:58:42 2007 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Fri Jun 8 02:58:42 2007 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:3306/radius Fri Jun 8 02:58:42 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Fri Jun 8 02:58:42 2007 : Error: rlm_sql_mysql: Couldn't connect socket to MySQL server radius@localhost:radius Fri Jun 8 02:58:42 2007 : Error: rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through socket '/var/lib/mysql/mysql.sock' (13)' Fri Jun 8 02:58:42 2007 : Error: rlm_sql (sql): Failed to connect DB handle #0 -- snip -- -- snip -- netstat -a unix 3 [ ] STREAM CONNECTED 120857 /var/lib/mysql/mysql.sock tcp 0 0 *:mysql *:* LISTEN -- snip -- I have tried running the server as root and I still receive the same error. However, When I run the server in extended debug mode (as root) the server starts fine and will serve authentication from the MySQL database quite happily. --snip-- rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to radius@localhost:3306/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) --snip-- I have also tried various variations of commands in sql.conf to configure the sql port. Can anyone tell me what the appropriate configuration command is? Can anyone shine any light on what might be the problem here? Regards, Andy Hughes

3 2

How to connect to backend DB
by Nitin Naveen 07 Jun '07

07 Jun '07

Hi, I am writing a new RLM called rlm_prop_protocol. It basically adds some attributes. The value for these attributes are pulled from a backend database (MYSQL). I wanted to know whether there is a provision in freeradius or some standard method that may be used to connect and fetch data from the MYSQL database. As of now I have added MYSQL specific code in my module. Regards Nitin *****************************************************DISCLAIMER***************************************************** This message and/or attachment(s) contained here are confidential, proprietary to HUGHES SYSTIQUE and its customers. Contents may be privileged or otherwise protected by law. The information is solely intended for the entity it is addressed to. If you are not the intended recipient of this message, it is strictly prohibited to read, forward, print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error, please notify the sender immediately and delete the message. ********************************************************************************************************************

2 1

Re: EAP-TLS problem
by shantanu choudhary 06 Jun '07

06 Jun '07

hi all thanks for support, i have created certificates using openssl and scripts provided on link http://www.alphacore.net/contrib/nantes-wireless/eap-tls-HOWTO.html i have created root.der(this is self signed certificate) file and clt.pem and using them with wpa_supplicant. even when my server starts it shows default eap type = md5 while i have given it to be TLS in my eap.conf file...... apart from it problem is when i start my server and client server is showing output :- rad_recv: Access-Request packet from host 192.168.2.183:1026, id=2, length=177 Ignoring request from unknown client 192.168.2.183:1026 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.2.183:1026, id=3, length=177 Ignoring request from unknown client 192.168.2.183:1026 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.2.183:1026, id=3, length=177 Ignoring request from unknown client 192.168.2.183:1026 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.2.183:1027, id=0, length=177 Ignoring request from unknown client 192.168.2.183:1027 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 192.168.2.183:1027, id=0, length=177 Ignoring request from unknown client 192.168.2.183:1027 --- Walking the entire request list --- Looking for people who are YOUR TYPE? Find them at in.groups.yahoo.com

3 2

Error with EAP-PEAP
by Vincenzo Agosti 06 Jun '07

06 Jun '07

Hi, i would to configure my server radius for 802.1x authentication. But when i modify my eap.conf file and then start radius i have this error message: rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory What's happen? How can i remove these error? This is my eap.conf file... eap { default_eap_type = peap timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no md5 { } leap { } gtc { auth_type = PAP } tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem #certificate_file = ${raddbdir}/certs/cert-srv.pem CA_file = ${raddbdir}/certs/demoCA/cacert.pem dh_file = ${raddbdir}/certs/dh random_file = ${raddbdir}/certs/random fragment_size = 1024 include_length = yes } #ttls { # default_eap_type = md5 # copy_request_to_tunnel = no # use_tunneled_reply = no #} peap { default_eap_type = mschapv2 # copy_request_to_tunnel = no # use_tunneled_reply = no # proxy_tunneled_request_as_eap = yes } mschapv2 { } } Thanks -- Vincenzo Agosti Universita' degli Studi di Salerno Ufficio Sistemi Tecnologici Coordinamento Servizi Informatici via Ponte don Melillo 84084 Fisciano (SA) - Italia Tel. +39 089 96 6101 - 9776 Fax +39 089 96 6368 - 9806 Cell. +39 335 427674 ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program.

2 3

still can't find db_mysql.sql
by Carl aniams 06 Jun '07

06 Jun '07

hi, Am using freeradius 1.1.6 on a fedora core 4 with mysql server installed and up i've created radius database but can't create tables because i can't find the db_mysql.sql file neither in /doc/examples/ nor in *src/modules/rlm_sql/drivers/rlm_sql_mysql/ * i went through archives yet nothing please help -- -_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_-_ ANIAMBOSSOU Carl NIAMS TECHNOLOGIES tel: +229 90 04 08 58 +229 97 48 01 33 COTONOU REPUBLIC OF BENIN WEST AFRICA

3 2