- Freeradius-Users - lists.freeradius.org

RFC 4590 Compliant?
by Kevin J 28 Mar '07

28 Mar '07

Hi, I just noticed a email thread http://arcknowledge.com/gmane.comp.freeradius.devel/2006-11/msg00040.html Any update on it? Can we say FreeRadius is RFC 4590 compliant? Kevin ____________________________________________________________________________________ Don't get soaked. Take a quick peek at the forecast with the Yahoo! Search weather shortcut. http://tools.search.yahoo.com/shortcuts/#loc_weather

2 1

Failed to link to module "rlm_name" : file not found
by lishuai zhao 28 Mar '07

28 Mar '07

Hi, everyone: I added a new module named rlm_name to FreeRADIUS and produced makefile as rlm_example, also I add rlm_name to src/modules/stable. When I do ./configure; make; make install, all the process are sucessful. If I do not use module rlm_name, the radius sever can run normally. But when I add rlm_name in the modules {} of radiusd.conf and run ./radiusd -X, it says Failed to link to module "rlm_name" : file not found. All the .la .lo and .a files generated can be found in /usr/local/lib. I have been searching mailing list for a long time, but every method is useless to me. Any one can help me? Thank you very much!

2 2

Using Radius for SIP accounting
by Murray Hooper 27 Mar '07

27 Mar '07

Is there a way to get telephony disconnect cause ie "User busy" in radius accounting? I am using a Cantata IMG1010 and looking for a more telephony based result that "service unavailable". Any suggestions? Thanks murray

3 2

dialupadmin url hash problem
by Holger Goßmann 27 Mar '07

27 Mar '07

Hi, i have freeradius/mysql/dialup_admin running with one problem i cannot solve. I've already searched the web and the archives and cannot find the answer. The interface is running fine except for users containing a hash "#" in the name, for example user1#domain. All other users which do not contain this character are working fine. I can search the database using the find.php3 script to get the list of all users, but if i try to edit one using the link provided by the search page, the interface returns "user name [user1] does not exists" because of the hash in the url. I think it is interpreted as location hash. Example: https://127.0.0.1/radius/user_admin.php3?login=user1#domain The request in the access log of the webserver is just https://127.0.0.1/radius/user_admin.php3?login=user1 thats why dialup_admin cannot find the user. If i enter the username into the edit user field it is working. The same problem exists when trying to use the "administer selected user" button in the show group menu. Anyone already had this problem or any ideas how to solve it? Versions: freeradius 1.0.2-4sarge3 freeradius-dialup_admin (tried from 1.1.3-3 up to 1.62) mysql 4.0.24-10sarge2 regards, Holger

2 1

Re: LDAP + CHAP problem
by Sam Schultz 27 Mar '07

27 Mar '07

> I have implement freeradius with LDAP + cisco VPDN my problem > is my authentication working with PAP but when i try for authentication > from CHAP it is not working error is password not clear text so i have > read many document about it and ppl talking about store passwd in > clear text but also i have ass passwd in clear text still it is not > working As I understand it, (open)ldap doesn't ever divulge the password in hash form or otherwise to freeradius. That is, the authorization & authentication is done by the ldap server, which returns valid or invalid for the credentials freeradius proxied. There may be a way to make this work, but I wouldn't know how. MSCHAP, or MSCHAPv2 can be made to work via samba's winbind daemon, if you have access to an active directory domain. -- Click for free info on online doctorate degrees and make $250k/ year http://tagline.hushmail.com/fc/CAaCXv1ZYZ31cCIxIwDH31ZLLgc9RVOq/

1 0

Proxy Radius
by Luis Galan 27 Mar '07

27 Mar '07

Hello! I need to configure freeradius as a proxy server only for users that ends in "@domain1.com". This users must be authenticated by its home server (external proxy) but users must received an ip address from my pool. (We give internet service to customer from another country with its dialup username , some kind of roaming service) For the rest of users it should authenticate itself. Then I have configured the following: proxy.conf: # Realm for domain1.com realm domain1.com { type = radius authhost = radius.domain1.com:1812 accthost = radius.domain1.com:1813 secret = mysecret nostrip } radius.conf: proxy_requests = yes $INCLUDE ${confdir}/proxy.conf modules{ . . . files { usersfile = ${confdir}/users } realm suffix { format = suffix delimiter = "@" ignore_default = no ignore_null = yes } . . . } authorize { . . . suffix . . files . . } preacct { . . suffix . . files } pre-proxy { files } Users: DEFAULT Suffix="domain1.com", Pool-Name := "mypoolDialup" Service-Type = Framed-User, Framed-Protocol = PPP, Service-Type = Framed-User, Framed-Routing = Broadcast-Listen, Framed-Compression = Van-Jacobson-TCP-IP, Fall-Through = Yes Is it correct?

1 0

RE: How to send the accounting messages
by Josh Howlett 27 Mar '07

27 Mar '07

> Also can you please tell me how to send different accounting messages. Consult your NAS documentation. josh.

1 0

How to send the accounting messages
by Senthil Nathan 27 Mar '07

27 Mar '07

Hi All, I have installed the freeradius server 1.1.14 and freeradius client. I could start the server daemon, radiusd. And from the client how do I send the accounting requests. Also can you please tell me how to send different accounting messages. Thanks Senthil

1 0

Re : RE : Re: freeradius problem : need help
by Eshun Benjamin 27 Mar '07

27 Mar '07

if radiusd -X works then check whether your pid was created successfully when you run radiusd; if some folders leading to it are missing create them. ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : elmalhi abdelghani <eabdelghani(a)yahoo.fr> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Lundi, 26 Mars 2007, 15h16mn 17s Objet : RE : Re: freeradius problem : need help hi , always no way ? any tips! thanks Goke Aruna <goksie(a)gmail.com> a écrit : satish patel wrote: > check radwatch is runing or not is runing then kill radwatch it is for > watching radiusd deamon for monitoring radius process > > */elmalhi abdelghani /* wrote: > > what means plaese this : > > There appears to be another RADIUS server running on the > authentication port 1812 > > and if I typ for example the command:' ps a ' i don't found radiusd ? > > regards. > > ------------------------------------------------------------------------ > DÃ©couvrez une nouvelle faÃ§on d'obtenir des rÃ©ponses Ã toutes vos > questions ! Profitez des connaissances, des opinions et des > expÃ©riences des internautes sur Yahoo! Questions/RÃ©ponses > .- > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > > > $ cat ~/satish/url.txt > > System administrator ( Data Center ) > > please visit this site > > http://linux.tulipit.com > > ------------------------------------------------------------------------ > Hereâ€™s a new way to find what you're looking for - Yahoo! Answers > > ------------------------------------------------------------------------ > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html mvts is using the port 1812, you can check previous post by abdul_zu on similar subject. Goksie - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Abdelghani ELMALHI Devesestr. 1 45897 Gelsenkirchen Deutschland Tel. 00 49 176 65 84 38 50 Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

3 3

freeradius for pam 1.3.15
by Rachmel, Nir (Nir) 27 Mar '07

27 Mar '07

Hi all! I am using the Radius-Pam module, on an embbeded ppc (windriver linux) system, and I have a question. I have noticed, that when configuring my box with a DNS server, then once a user attempts login, a call is attempted at the radius server and some kind of query is sent to the DNS server. Looking into the code revealed that there is a call to gethostbyname(), intended to resolve the ip of myself according to my hostname - or at least that is what I could figure out from the available code. Why is it done, and how bad would it be if I changed that call to something simpler that won't demand a connection to the DNS server? Thanks in advance, Nir Rachmel.

2 1