- Freeradius-Users - lists.freeradius.org

checkrad problem solved & get solution
by satish patel 15 Mar '07

15 Mar '07

Dear guys I have solve the problem of checkrad for simultenous login i have face many problem first time but finaly i got solution and i have modifiy my script for my nas i have freeradius-1.1.0 with MSSQL2000 with cisco 3700 NAS i want to share my solution with all freeradius guys those are faceing this problem I am useing checkrad with SNMP and i have change some thing in my script. checkrad script take input from radius when user try for login like suse:/ # checkrad Usage: checkrad nas_type nas_ip nas_port login session_id suse:/ # checkrad get input nas_type from client.conf nas_type and nas_ip then user name and port take from login time whn user try for login ... but i dont user port and id_session caz my cisco nas MIB not support port and session thats why i am useing only login name first check manualy through this method #checkrad -d cisco 71.5.250.199 43 satish 0004F09 return 0 ( Login OK ) this script just run snmpwalk command and fetch user all user name and gerp specific name which is store in login name veriable in per script ( checkrad ) and compare against of snmpwalk out put if user match then give u error code 1 ( dobule 1 Login ) this is the login of script ***** Just change in this line of perl script and test your login Note :- i am useing cisco nas type so the perl excute cisco_snmp subrutine so please find this code in cisco_snmp subrutine this is testing perpose after testing replave $login = satish; with this line my $login = $ARGV[3]; ________________my change in checkrad.pl________________ $login = satish; if($login eq $ARGV[3]) { return 1; }else{ $out=snmpwalk($ARGV[1],$pass,"1.3.6.1.4.1.9.10.24.1.3.2.1.2.3.45"); if($out=~/\"$ARGV[3]\"/){ return 1; }else{ return 0; you can see the login here $login store satish veriable then this script check $ARGV[3] veriable this veriable we can get on login time whn will try to satish login then snmpwalk run this command with MIB now point is you have to find MIB for online users u can find mib through the software or something else i have also find MIB and put it there with snmpwalk command then second if($out=~/\"$ARGV[3]\"/){ this will check user if it get in snmpwalk out put then u got doble login error if not match the u got single login means no one login this time with user name satish ...... and put Simultenouse-use := 1 attributes in user file my entry is satish Auth-Type := Local, User-Password == "testing", Simultaneous-Use := 1 Service-Type = Framed-user, Framed-Protocal = PPP, Fall-Through = Yes Contact : - me if you have any problem regarding Simultenouse login problem . $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

(no subject)
by markcapelle＠pcmc.com 15 Mar '07

15 Mar '07

I have a situation where I have a wireless controller that services multiple wireless networks (vlans). When the controller contacts the RADIUS server with an authentication request, it does so with the IP address of the controller as the client address. The problem is I have a guest network that has lower security than my other wireless networks. The guest network has it’s own user/password database stored in the controller, but the way authentication occurs is that it checks RADIUS for the user first and assumes it will fail, then will use the internal database. The issue with this is that if one of my users jumps on the guest network, they are authenticated which is not what I want to happen. Looking at the logs, I noticed that all the guest network users have the IP address of the client in the “cli” field. My guest network is a totally different VLAN and IP subnet. Is there a way to key off of the “cli” field and then make it so that all requests from clients with a specific subnet in this field are not authenticated? This would stop my internal users from connecting, but allow the correct users (those in the internal DB) to still get connected. Thanks. CONFIDENTIALITY NOTICE: This e-mail may contain trade secrets or privileged, undisclosed or otherwise confidential information. If you have received this e-mail in error, you are hereby notified that any review, copying or distribution of this message in whole or in part is strictly prohibited. Please inform the sender immediately and destroy the original transmittal. Thank you for your cooperation.

2 1

new query verification in sql.conf
by Jean Carlos Oliveira Guandalini 15 Mar '07

15 Mar '07

I use freeradius for authentication of pppoe wifi. I need to make new sql query in a table with a list of mac-address, if the CallingStationId will be equal to the some mac-adress of the table then will not have to be connected. A system of mac-adress blacklist. I tried to make adding one query in sql.conf but it does not function. I find that it would have to add a new function in rlm_sql.c, but am not habil C programmer. Somebody can help me? Sorry for my english Thanks Jean

3 3

Segmentatin fault when running radiusd -X
by Felix Brack 15 Mar '07

15 Mar '07

Hello, When running 'radiusd -X' (version 1.1.5) it ends with a segmentation fault. I did not make any changes to the default configuration files, just tried to execute the steps in section 2 of the 'INSTALL' file. Here is the output of 'radiusd -X': ----------------------------------- Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" Segmentation fault ----------------------------------- The relevant output of 'strace radiusd -X' is --------------------------------------------- write(1, "Module: Library search path is /"..., 46Module: Library search path is /usr/local/lib ) = 46 open("/usr/local/lib/rlm_exec.la", O_RDONLY) = 5 brk(0x8145000) = 0x8145000 fstat64(5, {st_mode=S_IFREG|0755, st_size=869, ...}) = 0 old_mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x40017000 read(5, "# rlm_exec.la - a libtool librar"..., 4096) = 869 read(5, "", 4096) = 0 close(5) = 0 munmap(0x40017000, 4096) = 0 open("/etc/ld.so.cache", O_RDONLY) = 5 fstat64(5, {st_mode=S_IFREG|0644, st_size=25316, ...}) = 0 old_mmap(NULL, 25316, PROT_READ, MAP_PRIVATE, 5, 0) = 0x402f8000 close(5) = 0 open("/lib/i686/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib/i686/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/lib/i686/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib/i686", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/lib/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/lib/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/lib", {st_mode=S_IFDIR|0755, st_size=1848, ...}) = 0 open("/usr/lib/i686/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib/i686/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/usr/lib/i686/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib/i686", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/usr/lib/mmx/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib/mmx", 0xbfffd9dc) = -1 ENOENT (No such file or directory) open("/usr/lib/rlm_exec.a", O_RDONLY) = -1 ENOENT (No such file or directory) stat64("/usr/lib", {st_mode=S_IFDIR|0755, st_size=11311, ...}) = 0 munmap(0x402f8000, 25316) = 0 open("/usr/local/lib/rlm_exec-1.1.5.so", O_RDONLY) = 5 read(5, "\177ELF\1\1\1\0\0\0\0\0\0\0\0\0\3\0\3\0\1\0\0\0 \n\0\000"..., 1024) = 1024 fstat64(5, {st_mode=S_IFREG|0755, st_size=46365, ...}) = 0 old_mmap(NULL, 10132, PROT_READ|PROT_EXEC, MAP_PRIVATE, 5, 0) = 0x40017000 mprotect(0x40019000, 1940, PROT_NONE) = 0 old_mmap(0x40019000, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED, 5, 0x1000) = 0x40019000 close(5) = 0 time(NULL) = 1173950765 write(1, "Module: Loaded exec \n", 21Module: Loaded exec ) = 21 time(NULL) = 1173950765 write(1, " exec: wait = yes\n", 18 exec: wait = yes ) = 18 time(NULL) = 1173950765 write(1, " exec: program = \"(null)\"\n", 26 exec: program = "(null)" ) = 26 time(NULL) = 1173950765 write(1, " exec: input_pairs = \"request\"\n", 31 exec: input_pairs = "request" ) = 31 --- SIGSEGV (Segmentation fault) --- +++ killed by SIGSEGV +++ ----------------------------------- 'ldd /usr/local/lib/rlm_exec-1.1.5.so' returns: ----------------------------------------------- libradius-1.1.5.so => /usr/local/lib/libradius-1.1.5.so (0x4000b000) libnsl.so.1 => /lib/libnsl.so.1 (0x40021000) libresolv.so.2 => /lib/libresolv.so.2 (0x40037000) libpthread.so.0 => /lib/libpthread.so.0 (0x40049000) libc.so.6 => /lib/libc.so.6 (0x4005f000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x40186000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x80000000) ----------------------------------- I am not too lazy to modify the configuration files but I thought it would be best to run with a default set; is this wrong? Should I first modify the configuration files and then try again? many thanks, Felix

1 0

Re : FreeRadius+Dialup_admin+Mysql
by Eshun Benjamin 15 Mar '07

15 Mar '07

check your settings in .../conf/admin.conf # # can be one of mysql,pg where: # mysq: MySQL database (port 3306) # pg: PostgreSQL database (port 5432) # sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: dialup_admin sql_password: XXXXXX sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : Grant Arix <arix2dx2(a)yahoo.fr> À : freeradius-users(a)lists.freeradius.org Envoyé le : Jeudi, 15 Mars 2007, 9h22mn 43s Objet : FreeRadius+Dialup_admin+Mysql HI, I just want to settup my freeradius to work with Mysql, i have already install everything and configure to, but when i tried to conected to the web-based graphic dialup_admin page i see the message: "Could not connect to SQL database". Now i dont know what wrong.. If somebody can help me fix this issue i will be good for me ? Grant Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

1 0

Querying FreeRadius client c library
by Khurram Bhatti 15 Mar '07

15 Mar '07

Hi, I'm new to FreeRadius-/Users, Dev lists, Please any guide me where I can direct all my emails regarding FreeRadius client c library. -KB

1 0

caoshijun wants to share sites with you...
by cao.shijun＠gmail.com 15 Mar '07

15 Mar '07

caoshijun (cao.shijun(a)gmail.com) has invited you to StumbleUpon! You can see my other favorites here: http://caoshijun.stumbleupon.com Thanks, caoshijun --- StumbleUpon lets you discover great sites with a single click. Give it a try at: http://www.stumbleupon.com/join.php?friend=2437398&emailcode=h2xzrr12uabgh1…

1 0

caoshijun wants to share sites with you...
by cao.shijun＠gmail.com 15 Mar '07

15 Mar '07

caoshijun (cao.shijun(a)gmail.com) has invited you to StumbleUpon! You can see my other favorites here: http://caoshijun.stumbleupon.com Thanks, caoshijun --- StumbleUpon lets you discover great sites with a single click. Give it a try at: http://www.stumbleupon.com/join.php?friend=2437398&emailcode=h2xzrr12uabgh1…

1 0

FreeRadius+Dialup_admin+Mysql
by Grant Arix 15 Mar '07

15 Mar '07

HI, I just want to settup my freeradius to work with Mysql, i have already install everything and configure to, but when i tried to conected to the web-based graphic dialup_admin page i see the message: "Could not connect to SQL database". Now i dont know what wrong.. If somebody can help me fix this issue i will be good for me ? Grant --------------------------------- Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses.

1 0

Re : freeradius-1.1.5 : *** glibc detected *** double free or corruption
by Eshun Benjamin 15 Mar '07

15 Mar '07

freeradius-1.1.5 : *** glibc detected *** double free or corruption compile new perl and recompile 1.1.5 without the option experimental modules ================================================== Benjamin K. Eshun ----- Message d'origine ---- De : adreas polyxronopoulos <apolyxrono(a)yahoo.co.uk> À : freeradius <freeradius-users(a)lists.freeradius.org> Envoyé le : Lundi, 12 Mars 2007, 10h46mn 28s Objet : freeradius-1.1.5 : *** glibc detected *** double free or corruption Hi list , I have compiled freeradius-1.1.5 on ubuntu 6.06 LAMP. When i am running freeradius in debuging mode i got the following output: root@apolyxronolamp@dyndns:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** double free or corruption (fasttop): 0x80104ee8 *** Aborted I have seen this output in other emails in the list but they did'nt get a reply. Can anyone help me ? ___________________________________________________________ Yahoo! Messenger - with free PC-PC calling and photo sharing. http://uk.messenger.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

1 0