- Freeradius-Users - lists.freeradius.org

Questions about Freeradius counter
by guest01 27 Mar '07

27 Mar '07

Hi guys! I have two minor problems with the radius counter. I am using the radius counter for counting the "sessiontimeout", which works quite good. counter sessiontimeout { filename = ${logdir}/db.sessiontimeout key = User-Name count-attribute = Acct-Session-Time reset = never counter-name = Daily-Session-Time check-name = Session-Timeout cache-size = 5000 } If the user reaches the saved allowed max session time, the connection gets disconnected and the user is not allowed to connect again until the time value has been reseted. Works great ... I also want to achieve the same behavior for another counter, the Acct-Input-Octets, but it doesn't really work. I can define a maximum value for "Input Octets" and if the user exceeds this value, he cannot connect again. Unfortunately, the connection doesn't get disconnected after the user reached his limit, do I have to configure something additional? It works for the Sessiontimeout, why doesn't it work for the Input-Octets? Any ideas? Is it possible? counter maxinput { filename = ${logdir}/db.maxinput key = User-Name count-attribute = Acct-Input-Octets reset = never counter-name = Input-Octets check-name = ChilliSpot-Max-Input-Octets cache-size = 5000 } The second problem is, that I have Acct-Input-Octets AND Acct-Output-Octets in my radius dialog and I want to use ONE counter, which should contain the sum of Acct-Input-Octets+Acct-Output-Octets, I already tried to use count-attribute = (Acct-Input-Octets+Acct-Output-Octets), but it didn't work ... Any suggestions for that problem? Any ideas? I appreciate every kind of help! Thanks guys! best regards Peter Gastinger

2 2

Double entries in Radacct - FreeRadius + MT
by Matthew Neumark 27 Mar '07

27 Mar '07

Hello, I have a MikroTik router that is passing accounting data to the freeradius database. I look in radacct and every entry is has duplicates with the exact same information. Does anyone know if this is the MikroTik causing this or freeradius? How do I fix this? Thanks, Matt Neumark

3 2

accounts disappears!
by Marwan Sultan 26 Mar '07

26 Mar '07

hello Freeradius, well, Its a strange problem, However i'm on FreeBSD 6.1R, Freeradius, Chillispot, mysql and i use myprepaid php for account interface. This system is up and running since september 2006, last week, we start to see a strange problem some account are disappearing from the system!! few customers are complaining that they cannot login anymore, when we check.. we donot find an account for this user anymore...it happend for like 4 or 5 accounts now!! Any resnable reason for this?? Marwan Sultan System Administrator _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

4 4

bandwidth and volume limit
by Mathieu Lemaitre 26 Mar '07

26 Mar '07

HI all, I'm running freeradius 1.0.2 on a debian stable. For new clients, I need to implement 2 functions: * a bandwidth limit on a per-user basis. I mean, I need to be able to set, for a user, a value for his upstream and downstream bw, which is sent by the radius as a reply attribute. Are they predefined attributes to do this? * a volume limit: I'd like to be able to set a maximum amount of data monthly downloadable for each user. I tried with rlm_slqcounter, changing the sql request to check AcctInputOctet instead of SessionTime, but the problem is that radius always reply an attribute called MaxSessionTime (or sthg like that), containing the remaining data volume for the user... is there as way to change the name of the attribute answered by freeradius?? Many thaks, Mathieu

6 5

Problem with compile
by Rob Wright 26 Mar '07

26 Mar '07

Greetings, I'm trying to setup Freeradius 1.1.5 and I'm having a problem during 'make'. I'm using Debian Etch, with Perl 5.8.8. I get the archive opened up and configure with the following: ./configure --bindir=/usr/bin --sbindir=/usr/sbin --sysconfdir=/etc --prefix=/usr --with-radacctdir=/var/log/radacct --with-raddbdir=/etc/raddb The configure runs fine, no problems. I run 'make' and it errors out with the following output included below my signature. I'm sure I'm missing something, but I've been staring at it all day and can't come up with anything. Suggestions? Thanks, Rob Wright poncacity.net suserob(a)poncacity.net /home/rwright/Downloads/freeradius-1.1.5/libtool --mode=link gcc -release 1.1.5 \ -module -export-dynamic -o rlm_perl.la \ -rpath /usr/lib rlm_perl.lo rlm_perl.c /home/rwright/Downloads/freeradius-1.1.5/src/lib/lib radius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/home/rwright/Downloads/freeradius-1.1.5/src/lib/.li bs /home/rwright/Downloads/freeradius-1.1.5/src/lib/.libs/libradius.so -L/usr/local/lib -L/usr/lib/ perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl -1.1.5.so -o .libs/rlm_perl-1.1.5.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/home/rwright/Downloads/freeradius-1.1.5' make: *** [all] Error 2

2 1

Re: Accounting is not working. Please help.
by alex 26 Mar '07

26 Mar '07

I think everything is ok. rad_recv: Access-Request packet from host 192.168.1.1:6001, id=91, length=124 User-Name = "00:13:02:a7:57:9f" User-Password = "testing123" NAS-IP-Address = 192.168.1.1 Called-Station-Id = "00-20-a6-6b-72-aa:PIM DOCK A" Calling-Station-Id = "00-13-02-a7-57-9f" NAS-Port = 9 NAS-Port-Type = Wireless-802.11 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 14 modcall[authorize]: module "preprocess" returns ok for request 14 modcall[authorize]: module "chap" returns noop for request 14 modcall[authorize]: module "mschap" returns noop for request 14 rlm_realm: No '@' in User-Name = "00:13:02:a7:57:9f", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 14 radius_xlat: '00:13:02:a7:57:9f' rlm_sql (sql): sql_set_user escaped user --> '00:13:02:a7:57:9f' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '00:13:02:a7:57:9f' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 0 rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = '00:13:02:a7:57:9f' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '00:13:02:a7:57:9f' ORDER BY id' rlm_sql_mysql: query: SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = '00:13:02:a7:57:9f' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '00:13:02:a7:57:9f' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns ok for request 14 modcall: leaving group authorize (returns ok) for request 14 auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [00:13:02:a7:57:9f/testing123] (from client other port 9 cli 00-13-02-a7-57-9f) Sending Access-Accept of id 91 to 192.168.1.1 port 6001 Finished request 14 Going to the next request > -------Original Message------- > From: Kevin Bonner <keb(a)pa.net> > Subject: Re: Accounting is not working. Please help. > Sent: 27 Mar '07 02:08 > > On Monday 26 March 2007 16:30:35 alex wrote: > > Hey guys, i just follow this guide. > > http://www.frontios.com/freeradius.html > > and everything looks ok, the users are already working and login without > > problem. But the accounting is not working, the mysql tables are empty, i > > checked when i user access and everything looks ok, and the radacct still > > empty. > > > > In my radiusd.conf i have > > accounting { > > detail > > radutmp > > sql > > } > > Other guy is checking in the AP, but i wanna be sure i have the correct > > values in the server. > > > > Any comment is appreciated. > > Alex > > Did you run in debug mode (-X)? If so, did the output show anything strange > when processing an accounting packet? Is the NAS configured to send > accounting records to the radius server? > > -Kevin > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Accounting is not working. Please help.
by alex 26 Mar '07

26 Mar '07

Hey guys, i just follow this guide. http://www.frontios.com/freeradius.html and everything looks ok, the users are already working and login without problem. But the accounting is not working, the mysql tables are empty, i checked when i user access and everything looks ok, and the radacct still empty. In my radiusd.conf i have accounting { detail radutmp sql } Other guy is checking in the AP, but i wanna be sure i have the correct values in the server. Any comment is appreciated. Alex

2 1

Redundant SQL servers accounting problem, FreeRadius 1.1.4
by Alexander V. Klepikov 26 Mar '07

26 Mar '07

Hello! I set up redundant SQL PostgeSQL servers configuration: modules{ ... sql sql2 { server = "gw-core.up.ua" num_sql_socks = 3 ... } sql sql1 { server = "sql.up.ua" num_sql_socks = 3 ... } } authorize { ... redundant { sql2 sql1 } } ... accounting { ... redundant { sql2 sql1 } } If sql2 is up when I run FreeRadius, everything works fine. If sql2 is down when I start FreeRadius, everything works fine too and when sql2 comes up, Freeradius starts to use it. But when sql2 was up and then comes down (and FreeRadius is running), FreeRadius exits when it processes accounting query with message in syslog kernel: pid 4516 (radiusd), uid 1002: exited on signal 6 I started it in debug mode: #/usr/local/sbin/radiusd -X ... Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 ... modcall: entering group redundant for request 0 radius_xlat: 'klepikov_av' rlm_sql (sql2): sql_set_user escaped user --> 'klepikov_av' radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'klepikov_av' ??ORDER BY id' rlm_sql (sql2): Reserving sql socket id: 2 rlm_sql_postgresql: Status: PGRES_FATAL_ERROR rlm_sql_postgresql: affected rows = rlm_sql_postgresql: Postgresql check_error: PGRES_FATAL_ERROR, returning SQL_DOW N rlm_sql (sql2): Attempting to connect rlm_sql_postgresql #2 rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radius@gw-core. up.ua:radius_db rlm_sql_postgresql: Postgresql error 'could not connect to server: Connection re fused ?Is the server running on host gw-core.up.ua and accepting ?TCP/IP connect ions on port 5432? ' rlm_sql (sql2): Failed to connect DB handle #2 rlm_sql (sql2): reconnect failed, database down? rlm_sql_getvpdata: database query error rlm_sql (sql2): SQL query error; rejecting user rlm_sql (sql2): Released sql socket id: 2 modcall[authorize]: module "sql2" returns fail for request 0 rlm_sql (sql1): sql_set_user escaped user --> 'klepikov_av' radius_xlat: 'SELECT id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'klepikov_av' ??ORDER BY id' rlm_sql (sql1): Reserving sql socket id: 1 rlm_sql_postgresql: Status: PGRES_TUPLES_OK ... rlm_sql (sql1): Released sql socket id: 1 modcall[authorize]: module "sql1" returns ok for request 0 modcall: leaving group redundant (returns ok) for request 0 modcall: leaving group authorize (returns ok) for request 0 ... Processing the accounting section of radiusd.conf modcall: entering group accounting for request 1 ... modcall: entering group redundant for request 1 radius_xlat: 'klepikov_av' rlm_sql (sql2): sql_set_user escaped user --> 'klepikov_av' radius_xlat: 'INSERT into radacct ??(AcctSessionId, AcctUniqueId, UserName, Rea lm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctAuthentic, ??Connec tInfo_start, CalledStationId, CallingStationId, ServiceType, FramedProtocol, Fra medIPAddress, AcctStartDelay) ??values('45FA990A460300', 'e55d351c2f2bdb96', 'kl epikov_av', 'up.ua', '10.0.0.1', ??'1', 'Async', ('2007-03-16 15:18:02'::timesta mp - '0'::interval), 'RADIUS', '', ??'', '10.1.1.3', 'Framed-User', 'PPP', ??NUL LIF('10.0.1.15', '')::inet, '0')' rlm_sql (sql2): Reserving sql socket id: 0 rlm_sql_postgresql: Status: PGRES_FATAL_ERROR rlm_sql_postgresql: affected rows = rlm_sql_postgresql: Postgresql check_error: PGRES_FATAL_ERROR, returning SQL_DOW N rlm_sql (sql2): Attempting to connect rlm_sql_postgresql #0 rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radius@gw-core. up.ua:radius_db rlm_sql_postgresql: Postgresql error 'could not connect to server: Connection re fused ?Is the server running on host gw-core.up.ua and accepting ?TCP/IP connect ions on port 5432? ' rlm_sql (sql2): Failed to connect DB handle #0 rlm_sql (sql2): reconnect failed, database down? rlm_sql (sql2): Couldn't insert SQL accounting START record - (null) radius_xlat: 'UPDATE radacct ??SET AcctStartTime = ('2007-03-16 15:18:02'::time stamp - '0'::interval), AcctStartDelay = '0', ??ConnectInfo_start = '' WHERE Acc tSessionId = '45FA990A460300' AND UserName = 'klepikov_av' ??AND NASIPAddress = '10.0.0.1' AND AcctStopTime IS NULL' rlm_sql_postgresql: PostgreSQL Query failed Error: no connection to the server radiusd in free(): error: chunk is already free Abort It looks like accounting module cannot properly make a connection to SQL server, but authorize module can. I found that with num_sql_socks <= 2 FreeRadius works perfect, I made several tests stopping and starting my SQL servers, everything works as it is described in manuals. It seemes to me that problem is somewhere in rlm_sql module, but I am not a programmer, so I can't just find it and write a patch. I use FreeBSD 6.2, FreeRadius 1.1.4, PostgreSQL 7.3.15 (to be exact, PGCluster 1.0.11), the same problem was with PostgreSQL 8.2.3 (to be exact, PGCluster 1.7.0rc5) To reproduce this problem, set up FreeRadius as mentioned above, start databases, start FreeRadius and then stop first database listed in redundant group. With best regards, Alexander V. Klepikov. E-mail: klepikov_a(a)up.ua PS Sorry for my bad english

3 16

Re : Redundant SQL servers accounting problem, FreeRadius 1.1.4
by Eshun Benjamin 26 Mar '07

26 Mar '07

$ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source login CVS password: anoncvs $ cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Alexander V. Klepikov <klepikov_a(a)up.ua> À : FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Envoyé le : Lundi, 26 Mars 2007, 14h40mn 11s Objet : Re: Redundant SQL servers accounting problem, FreeRadius 1.1.4 Hello, Alan! You wrote on Mon, 26 Mar 2007 10:50:17 +0100: AD> I' ve committed a fix to "-r branch_1_1". Please test it, to see AD> if AD> it works. To get it I typed cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd Am I right? I got troubles with running it: =========Beginning of the citation============== Ready to process requests. rad_recv: Access-Request packet from host 10.0.0.1:54081, id=187, length=150 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "klepikov_av" MS-CHAP-Challenge = 0x1d764e6c7150aff0fe12e7b36e4b2820 MS-CHAP2-Response = 0x870014fadc301b947b74c9a4ff099e1b2cbc00000000000000 0023c02712972225b77413cb9a4c00fbac6634cfcacf857aec Calling-Station-Id = "10.1.1.3" NAS-Identifier = "up.ua" NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 [Switching to Thread 0x806f000 (LWP 100086)] Breakpoint 1, modcall (component=1, c=0x813b640, request=0x816f900) at modcall.c:236 236 myresult = sp->modinst->entry->module->methods[component]( (gdb) step Program received signal SIGSEGV, Segmentation fault. 0x28349e28 in rad_mangle () from /usr/local/lib/rlm_preprocess-1.1.4.so (gdb) bt #0 0x28349e28 in rad_mangle () from /usr/local/lib/rlm_preprocess-1.1.4.so #1 0x2834a22d in preprocess_authorize () from /usr/local/lib/rlm_preprocess-1.1.4.so #2 0x08054be6 in modcall (component=1, c=0x813b640, request=0x816f900) at modcall.c:236 #3 0x080551f0 in call_one (component=-559038737, p=0x813b640, request=0x816f900, priority=0xbfbfccfc, result=0xbfbfcd00) at modcall.c:269 #4 0x08054e7e in modcall (component=1, c=0x813b680, request=0x816f900) at modcall.c:324 #5 0x0805405c in indexed_modcall (comp=1, idx=135723264, request=0x816f900) at modules.c:469 #6 0x0804d0c8 in rad_authenticate (request=0x816f900) at auth.c:602 #7 0x08056b71 in rad_respond (request=0x816f900, fun=0x804cfd8 <rad_authenticate>) at radiusd.c:1669 #8 0x08058299 in main (argc=2, argv=0xbfbfec94) at radiusd.c:1434 =========The end of the citation================ With best regards, Alexander V. Klepikov. E-mail: klepikov_a(a)up.ua - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 1

radexample.c
by Ibrar Ahmed 26 Mar '07

26 Mar '07

Hi, Any body tells me how I can get working radexample with freeradius. I am getting this packat one server User-Name = "test" User-Password = "20\@\203\#\??\203!" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 But When I am running radtest with same server configuration I get this packet User-Name = "test" User-Password = "PASSWORD" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 and i am get authenticated. --ibrar ____________________________________________________________________________________ Finding fabulous fares is fun. Let Yahoo! FareChase search your favorite travel sites to find flight and hotel bargains. http://farechase.yahoo.com/promo-generic-14795097

3 11