- Freeradius-Users - lists.freeradius.org

Support for Cisco PIX
by Norman Zhang 15 Mar '07

15 Mar '07

Hi, Does FreeRADIUS support Level 15 authentication for Cisco PIX? Regards, Norman Zhang

2 1

FR supported attributes
by PD 15 Mar '07

15 Mar '07

Hi all, Where to find all of FR supported attributes ? I just try rlm_sqlcounter module with noresetconter script and Max-All-Session attribute and they are working fine. And I've plan to add another attribute called expiration (?) and need the correct syntax how to use it. Where to find my needs ? TIA PD

4 22

Still having problem with FR-1.1.5
by adreas polyxronopoulos 15 Mar '07

15 Mar '07

Hi Alan and list, I downloaded yesterday the freeradius-1.1.5 via cvs: cvs -d :pserver:anoncvs@cvs.freeradius.org:/source checkout -r branch_1_1 radiusd After downloading: cd /radiusd ./configure make make install Compilation produced no error. I checked in the /usr/local/etc/ and raddb dir have created after the installation. However radiusd -X produce the following output: root@apolyxronolamp@dyndns:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** double free or corruption (fasttop): 0x80104ee8 *** Aborted /* ************************************************************* */ Running the server with valgrind valgrind --tool=memcheck --leak-check=full radiusd -X I got the following output: /* ************************************************************* */ Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4872492: lrad_rand_seed (radius.c:2416) ==4258== by 0x486B068: my_dict_init (dict.c:1001) ==4258== by 0x486BEB4: dict_init (dict.c:1247) ==4258== by 0xBCFC: read_radius_conf_file (mainconfig.c:1262) ==4258== by 0xBDEF: read_mainconfig (mainconfig.c:1295) ==4258== by 0x10E24: main (radiusd.c:941) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4872492: lrad_rand_seed (radius.c:2416) ==4258== by 0x486B068: my_dict_init (dict.c:1001) ==4258== by 0x486B161: my_dict_init (dict.c:1041) ==4258== by 0x486BEB4: dict_init (dict.c:1247) ==4258== by 0xBCFC: read_radius_conf_file (mainconfig.c:1262) ==4258== by 0xBDEF: read_mainconfig (mainconfig.c:1295) ==4258== by 0x10E24: main (radiusd.c:941) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4872492: lrad_rand_seed (radius.c:2416) ==4258== by 0x486B068: my_dict_init (dict.c:1001) ==4258== by 0x486B161: my_dict_init (dict.c:1041) ==4258== by 0x486B161: my_dict_init (dict.c:1041) ==4258== by 0x486BEB4: dict_init (dict.c:1247) ==4258== by 0xBCFC: read_radius_conf_file (mainconfig.c:1262) ==4258== by 0xBDEF: read_mainconfig (mainconfig.c:1295) ==4258== by 0x10E24: main (radiusd.c:941) read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010BEE: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BBEF4C: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBF02D: __libc_dlopen_mode (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9947D: __nss_lookup_function (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9960E: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9AF86: __nss_hosts_lookup (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9DBE8: gethostbyname_r (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x486EA99: ip_getaddr (misc.c:121) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010BFD: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BBEF4C: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBF02D: __libc_dlopen_mode (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9947D: __nss_lookup_function (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9960E: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9AF86: __nss_hosts_lookup (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9DBE8: gethostbyname_r (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x486EA99: ip_getaddr (misc.c:121) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C0C: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BBEF4C: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBF02D: __libc_dlopen_mode (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9947D: __nss_lookup_function (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9960E: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9AF86: __nss_hosts_lookup (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9DBE8: gethostbyname_r (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x486EA99: ip_getaddr (misc.c:121) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C1B: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BBEF4C: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBF02D: __libc_dlopen_mode (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9947D: __nss_lookup_function (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9960E: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9AF86: __nss_hosts_lookup (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9DBE8: gethostbyname_r (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x486EA99: ip_getaddr (misc.c:121) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x400882D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCDE9: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BBEF4C: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBF02D: __libc_dlopen_mode (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9947D: __nss_lookup_function (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9960E: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9AF86: __nss_hosts_lookup (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9DBE8: gethostbyname_r (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x486EA99: ip_getaddr (misc.c:121) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4008852: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCDE9: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BBEF4C: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBF02D: __libc_dlopen_mode (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9947D: __nss_lookup_function (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9960E: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9AF86: __nss_hosts_lookup (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4B9DBE8: gethostbyname_r (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x486EA99: ip_getaddr (misc.c:121) read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib ==4258== ==4258== Invalid read of size 4 ==4258== at 0x4010C58: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494E1B0: try_dlopen (ltdl.c:2533) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== Address 0x4E0D770 is 8 bytes inside a block of size 11 alloc'd ==4258== at 0x481B422: malloc (vg_replace_malloc.c:149) ==4258== by 0x494C53C: lt_emalloc (ltdl.c:1019) ==4258== by 0x494DAF4: trim (ltdl.c:3023) ==4258== by 0x494E257: try_dlopen (ltdl.c:3271) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0xD168: find_module_instance (modules.c:207) ==4258== by 0xD959: setup_modules (modules.c:879) ==4258== by 0x10E65: main (radiusd.c:965) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010BEE: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010BFD: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C0C: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Invalid free() / delete / delete[] ==4258== at 0x481BFCF: free (vg_replace_malloc.c:235) ==4258== by 0x494DCAF: try_dlopen (ltdl.c:3429) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0xD168: find_module_instance (modules.c:207) ==4258== by 0xD959: setup_modules (modules.c:879) ==4258== by 0x10E65: main (radiusd.c:965) ==4258== Address 0x4E0CFD0 is 0 bytes inside a block of size 12 free'd ==4258== at 0x481BFCF: free (vg_replace_malloc.c:235) ==4258== by 0x494DC8C: try_dlopen (ltdl.c:3428) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0xD168: find_module_instance (modules.c:207) ==4258== by 0xD959: setup_modules (modules.c:879) ==4258== by 0x10E65: main (radiusd.c:965) Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" pap: auto_header = yes Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) ==4258== ==4258== Invalid read of size 4 ==4258== at 0x4010C87: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494E1B0: try_dlopen (ltdl.c:2533) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== Address 0x4E12E0C is 12 bytes inside a block of size 13 alloc'd ==4258== at 0x481B422: malloc (vg_replace_malloc.c:149) ==4258== by 0x494C53C: lt_emalloc (ltdl.c:1019) ==4258== by 0x494DAF4: trim (ltdl.c:3023) ==4258== by 0x494E257: try_dlopen (ltdl.c:3271) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0xD168: find_module_instance (modules.c:207) ==4258== by 0xEB6A: do_compile_modsingle (modcall.c:1005) ==4258== by 0xF056: do_compile_modgroup (modcall.c:1160) ==4258== by 0xD67C: load_subcomponent_section (modules.c:483) ==4258== by 0xDBDA: setup_modules (modules.c:569) ==4258== by 0x10E65: main (radiusd.c:965) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no ==4258== ==4258== Invalid free() / delete / delete[] ==4258== at 0x481BFCF: free (vg_replace_malloc.c:235) ==4258== by 0x494DCAF: try_dlopen (ltdl.c:3429) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0x4F1F0DE: eaptype_load (eap.c:85) ==4258== by 0x4F1E6F8: eap_instantiate (rlm_eap.c:145) ==4258== by 0xD262: find_module_instance (modules.c:358) ==4258== by 0xEB6A: do_compile_modsingle (modcall.c:1005) ==4258== by 0xDA50: setup_modules (modules.c:580) ==4258== by 0x10E65: main (radiusd.c:965) ==4258== Address 0x4E16B60 is 0 bytes inside a block of size 15 free'd ==4258== at 0x481BFCF: free (vg_replace_malloc.c:235) ==4258== by 0x494DC8C: try_dlopen (ltdl.c:3428) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0x4F1F0DE: eaptype_load (eap.c:85) ==4258== by 0x4F1E6F8: eap_instantiate (rlm_eap.c:145) ==4258== by 0xD262: find_module_instance (modules.c:358) ==4258== by 0xEB6A: do_compile_modsingle (modcall.c:1005) ==4258== by 0xDA50: setup_modules (modules.c:580) ==4258== by 0x10E65: main (radiusd.c:965) rlm_eap: Loaded and initialized type md5 ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C2D: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C3C: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C4B: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc ==4258== ==4258== Invalid read of size 4 ==4258== at 0x4010BE3: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494E1B0: try_dlopen (ltdl.c:2533) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== Address 0x4E1A8F8 is 16 bytes inside a block of size 19 alloc'd ==4258== at 0x481B422: malloc (vg_replace_malloc.c:149) ==4258== by 0x494C53C: lt_emalloc (ltdl.c:1019) ==4258== by 0x494DAF4: trim (ltdl.c:3023) ==4258== by 0x494E257: try_dlopen (ltdl.c:3271) ==4258== by 0x494E825: lt_dlopenext (ltdl.c:3504) ==4258== by 0x4F1F0DE: eaptype_load (eap.c:85) ==4258== by 0x4F1E6F8: eap_instantiate (rlm_eap.c:145) ==4258== by 0xD262: find_module_instance (modules.c:358) ==4258== by 0xEB6A: do_compile_modsingle (modcall.c:1005) ==4258== by 0xDA50: setup_modules (modules.c:580) ==4258== by 0x10E65: main (radiusd.c:965) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C64: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C6F: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) ==4258== ==4258== Conditional jump or move depends on uninitialised value(s) ==4258== at 0x4010C7A: (within /lib/ld-2.3.6.so) ==4258== by 0x400624D: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBCC75: (within /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BBD937: _dl_open (in /lib/tls/i686/cmov/libc-2.3.6.so) ==4258== by 0x4BEECB7: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x400B105: (within /lib/ld-2.3.6.so) ==4258== by 0x4BEF2BA: (within /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x4BEED10: dlopen (in /lib/tls/i686/cmov/libdl-2.3.6.so) ==4258== by 0x494C61B: sys_dl_open (ltdl.c:1110) ==4258== by 0x494CD95: tryall_dlopen (ltdl.c:2445) ==4258== by 0x494CF1D: tryall_dlopen_module (ltdl.c:2512) mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no preprocess: with_alvarion_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. ==4258== ==4258== ERROR SUMMARY: 191 errors from 23 contexts (suppressed: 33 from 1) ==4258== malloc/free: in use at exit: 729,943 bytes in 27,262 blocks. ==4258== malloc/free: 27,869 allocs, 624 frees, 857,103 bytes allocated. ==4258== For counts of detected errors, rerun with: -v ==4258== searching for pointers to 27,262 not-freed blocks. ==4258== checked 1,280,508 bytes. ==4258== ==4258== LEAK SUMMARY: ==4258== definitely lost: 0 bytes in 0 blocks. ==4258== possibly lost: 0 bytes in 0 blocks. ==4258== still reachable: 729,943 bytes in 27,262 blocks. ==4258== suppressed: 0 bytes in 0 blocks. ==4258== Reachable blocks (those to which a pointer was found) are not shown. ==4258== To see them, rerun with: --show-reachable=yes ___________________________________________________________ Try the all-new Yahoo! Mail. "The New Version is radically easier to use" The Wall Street Journal http://uk.docs.yahoo.com/nowyoucan.html

2 2

Re: new query verification in sql.conf
by Jean Carlos Oliveira Guandalini 14 Mar '07

14 Mar '07

I did not explain correctly. I have a table in database with mac-adress registered, when the user connect, radius makes a verification in this table(on database) comparing mac-address of the user with mac-address registered in the database, if the mac-adress of user contain in the table(on database), user not be able to connect. Sorry for my english. I use translator! lol Thanks Jean > ------------------------------------------------------------------------ > > Subject: > > From: > <tnt(a)kalik.co.yu> > Date: > Wed, 14 Mar 2007 15:09:49 +0100 > To: > "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> > > To: > "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> > > > use huntgroups: > > ohnoyouwont Calling-Station-ID == whatever > SQL-Group == suspended > > where suspended is a group with Auth-Type reject. > > Ivan Kalik > Kalik Informatika ISP > > > Dana 14/3/2007, "Jean Carlos Oliveira Guandalini" > <jeanguandalini(a)visaonet.com.br> piše: > > >> I use freeradius for authentication of pppoe wifi. >> >> I need to make new sql query in a table with a list of mac-address, if >> the CallingStationId will be equal to the some mac-adress of the table >> then will not have to be connected. >> A system of mac-adress blacklist. >> I tried to make adding one query in sql.conf but it does not function. >> >> I find that it would have to add a new function in rlm_sql.c, but am not >> habil C programmer. >> >> Somebody can help me? >> >> Sorry for my english >> >> Thanks >> >> Jean >> - >> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html >> >> >> > > > > > ------------------------------------------------------------------------

3 2

Proposal for LNS load-balancing with Freeradius
by Mathieu Dessus 14 Mar '07

14 Mar '07

Hello, I was working on a solution for having round-robin LNS repartition with Freeradius. Since I must replace several parameters and they must match against each other (the Tunnel-Server-Auth-Id name must match the Tunnel-Server-Endpoint IP), I had trouble with using an external script returning random values. So, my solutions consists in modifying the SQL groupreply request (in sql.conf). Instead of: authorize_group_reply_query = "SELECT ${groupreply_table}.id,${groupreply_table}.GroupName,${groupreply_table}.Attribute,${groupreply_table}.Value, ${groupreply_table}.op FROM ${groupreply_table},${usergroup_table} WHERE ${usergroup_table}.Username = '%{SQL-User-Name}' AND ${usergroup_table}.GroupName = ${groupreply_table}.GroupName ORDER BY ${groupreply_table}.id" I put: authorize_group_reply_query = "SELECT ${groupreply_table}.id,${groupreply_table}.GroupName,${groupreply_table}.Attribute,substring_index(substring_index(${groupreply_table}.Value, ';', myrand.val),';',-1),${groupreply_table}.op FROM ${groupreply_table},${usergroup_table},(select floor(1+rand()*2) as val) as myrand WHERE ${usergroup_table}.Username = '%{SQL-User-Name}' AND ${usergroup_table}.GroupName = ${groupreply_table}.GroupName ORDER BY ${groupreply_table}.id" where the number in "rand()*2" must match the number of LNS. The database value format must be either in the usual from (the value itself) when only one value must be replied, either "firstvalue;secondvalue..." separed by semicolon (in this case, it will return randomly one of the values, and the same random number will be used for all this request). I saw only two drawbacks: you must restart Freeradius if you modify the number of LNS and the separator character must no be used anywhere else. Does anybody have some comments on this method, or a better method to do the same thing ? Sincerely, Mathieu Dessus.

1 0

Freeradius 1.1.5 on RH 7.3 crashes
by Dario Palmisano 14 Mar '07

14 Mar '07

Dear All, I successfully used freeradius-1.0.5 on our RedHat 7.3 system for a couple years to authenticate wireless and VPN clients. I decided to upgrade to the version 1.1.5 to enable the wireless connection on a few Windows Vista clients. I downloaded the source freeradius-1.1.5.tar.gz and customized the provided freeradius.spec. Essentially in the configure I added: --with-openssl-includes=/usr/local/ssl/include \ --with-openssl-libraries=/usr/local/ssl/lib \ (as openssl-0.9.7i is installed in /usr/local/ssl/lib) and removed: --with-system-libtool \) and succefully produced the rpm for my system. I installed it and it worked even for 6, 7 hours (enabling the wireless clients to work, included the Vista clients) but then invariably it crashed. Apparently, (from the various logs attached) it always crashed after the configuration reload, but it is not evident if immedialtely after the reload or some time later. The crash can some time be initiated by sending kill -HUP at the radiusd process. Trying to minimze the frequency of the crashed I set: max_request_time = 10 but without any change in the behaviour. Any suggestion on how to solve the problem would be appreciated. Best regards Dario P.S.: Attached is a partial log (otherwise was too big), only username and password are masked). I can provide longer logs on request. -- ______________________________________________________________ Dario Palmisano ICGEB Computer System & Network Administrator Tel: +39 040 3757330 Fax: +39 040 226555 E-Mail: Dario.Palmisano(a)icgeb.org International Centre for Genetic Engineering and Biotechnology Area Science Park, Padriciano 99, I-34012 Trieste, ITALY ______________________________________________________________

3 4

clients.conf shortname
by Geoffroy Arnoud 14 Mar '07

14 Mar '07

Hi All, I have a quick question on the shortname attribute for clients: must it be unique among all clients? Thanks in advance for your answers Geoff. ___________________________________________________________________________ Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.answers.yahoo.com

2 1

authenticating multiple modules?
by Tim Tyler 14 Mar '07

14 Mar '07

Freeradius experts, I want to use one freeradius server to authenticate against a system file for students and against ldap for faculty/staff. I can get the system file to work alone. I can get the ldap module to work alone. But I can't seem to find a way to get both of them to work together. If I set DEFAULT Auth-Type = System in the users file, it authenticates the system files. If I set it to ldap, it authenticates to ldap. If I put both in the users file, it authenticates ldap users only. How do I allow both unix and ldap modules to authenticate their respective users? Note: users are unique to each module. A user in unix does not exist in ldap and vice versa. Tim Tyler Network Engineer - Beloit College tyler(a)beloit.edu

3 9

Re: RE : EAP-TTLS outer identity & accounting
by Sam Schultz 14 Mar '07

14 Mar '07

On Wed, 14 Mar 2007 11:25:20 -0500 Thibault Le Meur <Thibault.LeMeur(a)supelec.fr> wrote: >> -----Message d'origine----- >> De : >> freeradius-users-bounces+thibault.lemeur=supelec.fr(a)lists.free >> radius.org >> [mailto:freeradius-users-bounces+thibault.lemeur=supelec.fr@li >> sts.freeradius.org] De la part de Sam Schultz >> Envoyé : mercredi 14 mars 2007 17:13 >> À : freeradius-users(a)lists.freeradius.org >> Objet : Re: EAP-TTLS outer identity & accounting >> >> >> >> >> On Tue, 13 Mar 2007 13:15:52 -0500 Alan DeKok >> <aland(a)deployingradius.com> wrote: >> >Sam Schultz wrote: >> >> >> >> This should be solvable by adding something like >> >> 'User-Name = %{User-Name}' to the DEFAULT entries in the >users >> >file, >> >> correct? >> > >> > Yes. >> >> One of my users file DEFAULT entries look like this: >> >> DEFAULT Realm == "test", Autz-Type := sql-test, User- >Name = >> "%u" >> >> However, FreeRADIUS tells me this: >> >> Error: Invalid operator for item User-Name: reverting to '==' >> >> I assume I'm not supposed to forcibly change User-Name, so what >> attribute would I set to return the correct username to the NAS? > >> I know there is a run-time variable %(reply:User-Name}, would I >> need to somehow update it with the correct value for User-Name >> instead? > >Yes, by simply adding the User-Name = XXX to the reply items (that >is to say >not on the first line). Try something like this: This didn't make much sense at first, but I think I understand it now. What you're saying is that the first line is only for check items, which is why I couldn't set User-Name there. The second line and beyond then are for, what? Reply items ONLY, or check & reply items? Is this documented anywhere? I just did a quick check through the freeradius doc directory, and only found a rlm_fastusers document which didn't have anything to say about format restrictions. > >DEFAULT Realm == "test", Autz-Type := sql-test > User-Name=`%{User-Name}` > >HTH, >Thibault > > > >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html -- Click for free info on online degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S7YfNF4AEzCH38YxSm8GfpqO2/

2 1

Re: EAP-TTLS outer identity & accounting
by Sam Schultz 14 Mar '07

14 Mar '07

On Tue, 13 Mar 2007 13:15:52 -0500 Alan DeKok <aland(a)deployingradius.com> wrote: >Sam Schultz wrote: >> >> This should be solvable by adding something like >> 'User-Name = %{User-Name}' to the DEFAULT entries in the users >file, >> correct? > > Yes. One of my users file DEFAULT entries look like this: DEFAULT Realm == "test", Autz-Type := sql-test, User-Name = "%u" However, FreeRADIUS tells me this: Error: Invalid operator for item User-Name: reverting to '==' I assume I'm not supposed to forcibly change User-Name, so what attribute would I set to return the correct username to the NAS? I know there is a run-time variable %(reply:User-Name}, would I need to somehow update it with the correct value for User-Name instead? This question seems to have been asked several times on the list before, but I have yet to find a definitive answer to it. > > Alan DeKok. >-- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html -- Click for free info on online degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1WBS8PxpFqA1erqcUaYXrLCjjS/

2 1