- Freeradius-Users - lists.freeradius.org

compiling 1.1.6 on solaris problem
by Norbert Wegener 17 Apr '07

17 Apr '07

Setting up 1.1.6 on a Sun with `uname -a` giving SunOS sunfire 5.10 Generic_118822-26 sun4u sparc SUNW,Ultra-30 configure does not show errors, only warnings. Unfortunately make dies with: .... creating rlm_dbm.la (cd .libs && rm -f rlm_dbm.la && ln -s ../rlm_dbm.la rlm_dbm.la) /root/freeradius-1.1.6/libtool --mode=compile gcc -g -O2 -I/root/freeradius-1.1.6/src/include -DHAVE_NDBM_H -c rlm_dbm_parser.c gcc -g -O2 -I/root/freeradius-1.1.6/src/include -DHAVE_NDBM_H -c rlm_dbm_parser.c -fPIC -DPIC -o .libs/rlm_dbm_parser.o In file included from /root/freeradius-1.1.6/src/include/radiusd.h:31, from rlm_dbm_parser.c:52: /usr/include/netinet/in.h:302: warning: `INADDR_ANY' redefined /root/freeradius-1.1.6/src/include/missing.h:73: warning: this is the location of the previous definition /usr/include/netinet/in.h:303: warning: `INADDR_LOOPBACK' redefined /root/freeradius-1.1.6/src/include/missing.h:77: warning: this is the location of the previous definition rlm_dbm_parser.c: In function `storecontent': rlm_dbm_parser.c:165: warning: assignment discards qualifiers from pointer target type gcc -g -O2 -I/root/freeradius-1.1.6/src/include -DHAVE_NDBM_H -c rlm_dbm_parser.c -o rlm_dbm_parser.o >/dev/null 2>&1 /root/freeradius-1.1.6/libtool --mode=link gcc \ -o rlm_dbm_parser rlm_dbm_parser.lo ../../lib/libradius.la -lnsl -lresolv -lsocket -lposix4 -lpthread gcc -o .libs/rlm_dbm_parser .libs/rlm_dbm_parser.o ../../lib/.libs/libradius.so -lcrypt -lnsl -lresolv -lsocket -lposix4 -lpthread -Wl,--rpath -Wl,/usr/local/lib ../../lib/.libs/libradius.so: undefined reference to `crypt(a)SUNW_1.1' collect2: ld returned 1 exit status gmake[6]: *** [rlm_dbm_parser] Error 1 gmake[6]: Leaving directory `/root/freeradius-1.1.6/src/modules/rlm_dbm' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/root/freeradius-1.1.6/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/root/freeradius-1.1.6/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/root/freeradius-1.1.6/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/root/freeradius-1.1.6/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/root/freeradius-1.1.6' make: *** [all] Error 2 sh-3.00# exit autoconf --version autoconf (GNU Autoconf) 2.61 root@sunfire:/root/freeradius-1.1.6# automake --version automake (GNU automake) 1.8 The complete output of configure / make can be found at: http://www.wegener-net.de/fr/ Any idea? Norbert Wegener

3 2

FW: Login for any user
by Galuschka Christoph 17 Apr '07

17 Apr '07

Hello, well I guess I can't do that with MySQL-Queries. Anybody got an idea on how the entry in the users-file has to look like. thanks and regards Chris -----Ursprüngliche Nachricht----- Von: Galuschka Christoph Gesendet: Dienstag, 17. April 2007 14:04 An: 'freeradius-users(a)lists.freeradius.org' Betreff: Login for any user Hello, I would like to create a login user on my database backend which allows everybody - regardless of username - to login as long as the password is correct. Is there a way to create such a user? thanks and regards Christoph --------------------------------------------------- Ing. Christoph Galuschka TIWAG-Tiroler Wasserkraft AG ITT LAN/WAN - VPN-/Firewallsysteme Eduard-Wallnöfer-Platz 2 6010 Innsbruck T: +43 (0)50607 21832 F: +43 (0)50607 41832 www.tiroler-wasserkraft.at Ti.econet: Hotline: +43 (0)50607 21405 eMail: econet(a)tiwag.at www.tieconet.at ---------------------------------------------------

4 4

AW: FW: Login for any user
by Galuschka Christoph 17 Apr '07

17 Apr '07

I've managed to reach my goal with the following entry in the users-file: >> DEFAULT Auth-Type := Local, User-Password == "something" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-Compression = Van-Jabobsen-TCP-IP, Cisco-AVPair = 'ip:addr-pool=somepool' >> regards Christoph --------------------------------------------------- Ing. Christoph Galuschka TIWAG-Tiroler Wasserkraft AG ITT LAN/WAN - VPN-/Firewallsysteme Eduard-Wallnöfer-Platz 2 6010 Innsbruck T: +43 (0)50607 21832 F: +43 (0)50607 41832 www.tiroler-wasserkraft.at Ti.econet: Hotline: +43 (0)50607 21405 eMail: econet(a)tiwag.at www.tieconet.at --------------------------------------------------- -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+christoph.galuschka=tiwag.at(a)lists.freeradius.o rg [mailto:freeradius-users-bounces+christoph.galuschka=tiwag.at@lists.free radius.org]Im Auftrag von inverse Gesendet: Dienstag, 17. April 2007 15:49 An: FreeRadius users mailing list Betreff: Re: FW: Login for any user > Anybody got an idea on how the entry in the users-file has to look like something like DEFAULT Auth-Type := Eap, User-Password == "blah" with deafult eap type set to md5. I've yet to try it tho, may you report back if it works? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

some issues in sqlippool, branch_1_1
by Alexander V. Klepikov 17 Apr '07

17 Apr '07

Hello! 1. During setup of rlm_sqlippool module, I found some compatibility issues with PostgreSQL server. I remind that rlm_sqlippool uses transactions. In that case all of queries and commands including "BEGIN", "COMMIT" and "ROLLBACK" in PostgreSQL must ends with ";" or query will fail. I have this issue (is it an issue?) on PostgreSQL 7.3.15 but it should be true for 8.x versions too. I think it should be documented. 2. In sqlippool.conf %{reply:Pool-Name} is used, but in documentation said that Pool-Name is check attribute. In my tests reply:Pool-Name was empty string, so I replaced it with Pool-Name. 3. In doc/examples/postgresql.sql in radippool table definition some fields are defined as NOT NULL (and vice versa), which should not be - it causes problems when one add IP-addresses to radippool. 4. In src/include/modpriv.h , src/modules/rlm_eap/rlm_eap.h , src/modules/rlm_sql/rlm_sql.h I replaced #include "ltdl.h" with #include "../../libltdl/ltdl.h" to compile FreeRadius. My OS is FreeBSD 6.2-RELEASE, GNU Make 3.81 Patch for items 2 and 3 attached. With best regards, Alexander V. Klepikov. E-mail: klepikov_a(a)up.ua

2 1

AW: FW: Login for any user
by Galuschka Christoph 17 Apr '07

17 Apr '07

Hello, well so far it seems to works partly as I get the following error: >> auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_eap: EAP-Message not found rlm_eap: Malformed EAP Message >> Currently working on that. regards Christoph --------------------------------------------------- Ing. Christoph Galuschka TIWAG-Tiroler Wasserkraft AG ITT LAN/WAN - VPN-/Firewallsysteme Eduard-Wallnöfer-Platz 2 6010 Innsbruck T: +43 (0)50607 21832 F: +43 (0)50607 41832 www.tiroler-wasserkraft.at Ti.econet: Hotline: +43 (0)50607 21405 eMail: econet(a)tiwag.at www.tieconet.at --------------------------------------------------- -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+christoph.galuschka=tiwag.at(a)lists.freeradius.o rg [mailto:freeradius-users-bounces+christoph.galuschka=tiwag.at@lists.free radius.org]Im Auftrag von inverse Gesendet: Dienstag, 17. April 2007 15:49 An: FreeRadius users mailing list Betreff: Re: FW: Login for any user > Anybody got an idea on how the entry in the users-file has to look like something like DEFAULT Auth-Type := Eap, User-Password == "blah" with deafult eap type set to md5. I've yet to try it tho, may you report back if it works? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

unsubscribe
by Tseveendorj Ochirlantuu 17 Apr '07

17 Apr '07

1 0

Login for any user
by Galuschka Christoph 17 Apr '07

17 Apr '07

Hello, I would like to create a login user on my database backend which allows everybody - regardless of username - to login as long as the password is correct. Is there a way to create such a user? thanks and regards Christoph --------------------------------------------------- Ing. Christoph Galuschka TIWAG-Tiroler Wasserkraft AG ITT LAN/WAN - VPN-/Firewallsysteme Eduard-Wallnöfer-Platz 2 6010 Innsbruck T: +43 (0)50607 21832 F: +43 (0)50607 41832 www.tiroler-wasserkraft.at Ti.econet: Hotline: +43 (0)50607 21405 eMail: econet(a)tiwag.at www.tieconet.at ---------------------------------------------------

1 0

PAM Radius Authentication
by daniel 17 Apr '07

17 Apr '07

Hi, I have been trying to set up the pam_radius_auth pam module to authenticate my users through my freeradius server. The radius server is working fine as I can get and Access-Accept packet with radtest and also my wireless hotspot authenticates fine through it. The problem I have is that pam seems to be having a problem loading the module. The auth.log shows the following: Apr 15 22:03:51 bill sshd[7861]: PAM unable to dlopen(/lib/security/pam_radius_auth.so) Apr 15 22:03:51 bill sshd[7861]: PAM [dlerror: /lib/security/pam_radius_auth.so: undefined symbol: __stack_chk_fail_local] Apr 15 22:03:51 bill sshd[7861]: PAM adding faulty module: /lib/security/pam_radius_auth.so I am running pam_radius_auth 1.3.16 and freeradius 1.1.6 on Ubuntu 6.10 The pam_radius_auth module seems to be quite old, does anyone know if it still works? Regards, Daniel Davis

3 8

Radius accounting
by markus.wintruff＠linde.com 17 Apr '07

17 Apr '07

Hy all, i use freeradius 1.1.3 here is my problem: i use radiusaccounting into a mysql database. I want to extract information out of the accounting packet and insert it into the sql database: My Acct-Session-Id looks like this. Acct-Session-Id = "domain\\user"Thu Mar 1 14:29:58 2007"NC" the last field, here NC is one of this NC|WSAM|JSAM So i put this to acct_users: DEFAULT Acct-Session-Id =~ "^.*(NC|JSAM|WSAM).*" My-ST == `%{1}` My-ST is defined in dictionary ATTRIBUTE My-ST 3004 string i see that rad_xlat gives the correct value to My-ST but i cant use it in the sql statement. Its empty. acct_users: Matched entry DEFAULT at line 23 radius_xlat: 'WSAM' How can i define new Attributes? And use them in sql.conf Thanks a lot

2 1

rlm_sql: Bug in stripping output of dynamic strings {sql:...}
by Milan Holub 17 Apr '07

17 Apr '07

Hi all, - latest CVS head - mysql Ver 14.7 Distrib 4.1.8, for pc-linux-gnu (i386) - FreeRADIUS Version 2.0.0-pre0, for host i386-pc-linux-gnu, built on Apr 13 2007 at 10:11:51 I'm using dynamic variables like {sql:<sql statement>} throughout my configuration to fetch data from the DB. For example acct_users: DEFAULT Acct-Status-Type == Start session_count := "%{sql:select count(*) from radacct where username='%{SQL-User-Name}'" or radgroupcheck table: +----+-----------+---------------+----+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | id | GroupName | Attribute | op | Value | +----+-----------+---------------+----+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ | 44 | config | session_count | := | `%{sql:select count(*) from radacct where username='%{SQL-User-Name}'}` | | 47 | config | product_code | := | `%{sql:<retun_some_string>}` | +----+-----------+---------------+----+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------+ or even in sqlcounter: sqlcounter noresetcounterflat { counter-name = Max-All-Session-Time-Flat check-name = Max-All-Session-Flat sqlmod-inst = sql key = User-Name reset = never query = "SELECT UNIX_TIMESTAMP()-UNIX_TIMESTAMP(AcctStartTime) FROM radacct WHERE username='%{%k}' ORDER BY radacctid limit 1" } Unfortunately I'm getting the output stripped by last character(byte): instead of getting 37 for session_count I get 3, instead of getting 1563 for noresetcounterflat I get 156, instead of getting "S3H" for product_code I get "S3". When the query returns 1 character I get empty output. >>> BEGIN DEBUG radius_xlat: Running registered xlat function of module sql for string 'select count(*) from radacct where username='%{SQL-User-Name}'' rlm_sql (sql): - sql_xlat radius_xlat: 'fkafvt' rlm_sql (sql): sql_set_user escaped user --> 'fkafvt' radius_xlat: 'select count(*) from radacct where username='fkafvt'' rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): - sql_xlat finished rlm_sql (sql): Released sql socket id: 2 radius_xlat: '3' >>>END DEBUG DB query clearly shows: mysql> select count(*) from radacct where username = 'fkafvt'; +----------+ | count(*) | +----------+ | 37 | +----------+ 1 row in set (0.00 sec) This behaviour is the same no matter in which part of config the dynamic string appears(radgroupcheck, acct_users, sqlcounter configuration). My workaround for this was to output some additional dummy character from within mysql by surrounding the queries by mysql concat function: %{sql:select concat((select count(*) from radacct where %username='%{SQL-User-Name}'),'\n')} ie: %{sql: select concat((<your query>), '\n')} I hope this could help someone until the code is fixed... Milan Holub holub (at) thenet (dot) ch -------------------------------------- TheNet-Internet Services AG, im Bernertechnopark, Morgenstr. 129 CH-3018, Bern, Switzerland 031 998 4333, Fax 031 998 4330 http://www.thenet.ch http://wlan.thenet.ch --------------------------------------

4 13