- Freeradius-Users - lists.freeradius.org

Feeding an LDAP replyItem to an MS-CHAPv2 ntlm_auth request
by Haas Florian 18 Jan '07

18 Jan '07

Since this is my first post to this list, hello everyone. I do apologize if this question has been asked before; unfortunately I've been unable to find this information in the list archives. I have a working setup with Windows XP clients, MSAD, FreeRADIUS 1.1.0 running on SLES 10, and Enterasys switches. Authentication via PEAP and MS-CHAPv2. Everything works perfectly fine when a Windows user logs on; ldap module looks up the user, mschap authenticates, client is dropped into the right VLAN... beautiful. However, what I am also trying to achieve is to force the client into a specific VLAN when no user is logged on (this corresponds to the "Authenticate as computer when computer information is available" option in the "Authentication" tab of the Windows connection properties dialog). The tricky part is that XP's supplicant, which supplies the username as "DOMAIN\\Username" while a user is logged on, supplies a username in the form of "host/computername.my.domain" otherwise -- this corresponds to the servicePrincipalName attribute on the machine's object in MSAD. This is of course a format that ntlm_auth can't deal with. So, my approach is this: 1. When authorizing, look up the LDAP DN using a filter that checks both sAMAccountName and servicePrincipalName: radiusd.conf: modules { # [...] ldap { # [...] filter = "(|(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})(servicePrincipalName=%{S tripped-User-Name:-%{User-Name}}))" # [...] } } } 2. While authorizing, retrieve the value of the sAMAccountName from LDAP. For this purpose, I have the following entry in the LDAP Attribute map: replyItem MSAD-SAM-Account-Name sAMAccountName 3. When authenticating, feed mschap's ntlm_auth the MSAD-SAM-Account-Name if it is available: modules { # [...] mschap { # [...] ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{MSAD-SAM-Account-Name:-%{Stripped-User-Name:-%{User-Name:-None}}} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}" # [...] } } } >From the debug logs, it appears such that the computer's LDAP object is looked up successfully (using the servicePrincipalName host/testpc.demo.com) and that the MSAD-SAM-Account-Name replyItem is set correctly (to "TESTPC$"). However, ntlm_auth is invoked with the username None instead, so it appears that the LDAP replyItems are not made available to the mschap authentication module. rlm_ldap: performing search in dc=demo,dc=com, with filter (|(sAMAccountName=host/testpc.demo.com)(userPrincipalName=host/testpc.demo.com)( servicePrincipalName=host/testpc.demo.com)) rlm_ldap: looking for check items in directory... rlm_ldap: looking for reply items in directory... rlm_ldap: Adding sAMAccountName as MSAD-SAM-Account-Name, value TESTPC$ & op=11 rlm_ldap: user host/testpc.demo.com authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 5 modcall: leaving group authorize (returns updated) for request 5 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: Request found, released from the list rlm_eap: EAP/mschapv2 rlm_eap: processing type mschapv2 Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 5 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for host/testpc.demo.com with NT-Password radius_xlat: Running registered xlat function of module mschap for string 'Challenge' mschap2: e8 radius_xlat: Running registered xlat function of module mschap for string 'NT-Response' radius_xlat: '/usr/bin/ntlm_auth --request-nt-key --username=None --challenge=30585713439262e1 --nt-response=bbef10b2df1d9a084db75e86b02df137e7166eb6ce3e4d30' Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=None --challenge=30585713439262e1 --nt-response=bbef10b2df1d9a084db75e86b02df137e7166eb6ce3e4d30 Exec-Program output: Logon failure (0xc000006d) Exec-Program-Wait: plaintext: Logon failure (0xc000006d) ... and then subsequently, the whole request of course fails. I'm almost certain that I am missing something very obvious. Would someone be kind enough to enlighten me? Thanks very much. Florian -- Mag.(FH) Florian G. Haas | Systemingenieur Kapsch BusinessCom AG | Wienerbergstraße 53 | A-1120 Wien www.kapschbusiness.com | www.kapsch.net Firmenbuch HG Wien FN 178368g | Firmensitz Wien The information contained in this e-mail message is privileged and confidential and is for the exclusive use of the addressee. The person who receives this message and who is not the addressee, one of his employees or an agent entitled to hand it over to the addressee, is informed that he may not use, disclose or reproduce the contents thereof.

2 3

sqlcounter problem
by satish patel 18 Jan '07

18 Jan '07

Dear ALL I have configure freeradius-1.1.4 version with mysql and my NSA is cisco with VPDN configuration now i have create user "aaa" in mysql with this attributes Max-Daily-Session | := | 1800 my sql counter configuration is sqlcounter dailycounter { driver = "rlm_sqlcounter" counter-name = Daily-Session-Time check-name = Max-Daily-Session sqlmod-inst = sqlcca3 key = User-Name reset = daily query = "SELECT SUM(AcctSessionTime - GREATEST((%b - UNIX_TIMESTAMP(AcctStartTime)), 0)) FROM radacct WHERE UserName='%{%k}' AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > '%b'" now problem is when i login throgh AAA user my user disconnect after 3 min but when i login again through this user it was login again and disconnnect after 3 min why ??? i want to allow user to access only 3 min per day measn after 3 min completed use not allowd to login again what is the configuration for that ??? Urgent Satish Patel System administrator --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 2

freeradius and ssh
by Zion 18 Jan '07

18 Jan '07

Hi All I hope you can help I’m net in the freeradius world and I’m trying to use freeradius as an authentication server for ssh sessions i have the following setup: client --> server (useing pam) --> radius server Under /etc/pam.d I have sshd with the following: # auth required pam_stack.so service auth required pam_radius_auth.so #auth required pam_nologin.soetc #account required pam_stack.so service=system-auth account required pam_radius_auth.so password required pam_stack.so service=system-auth session required pam_stack.so service=system-auth session required pam_limits.so session optional pam_console.so …………. under /etc/raddb server <radius server ip> testing123 3 On the client I have the radius server config file Radius server config files: users see the attach Can you please send me an example files foe the radius server or which files need to be change and which params are importuned for my setup Thanks in advance please be advice that the only wat for me to login is to have an entry in the server which i want to skip Zion

2 1

disconnect user and clear session
by satish patel 18 Jan '07

18 Jan '07

Dear ALL I have usering freeradius version 1.1.4 with mysql it is working fine but i dont know how to kick off user during login time means i want to disconnect user from radius then how to do it and i also have one more problem of session i have disconnected user but whn i use radwho command i give me u r login why ??? how do i clear old session in radwho caz whn i try to reconnect it give me error your are already connected - access denied??? Satish Pate system administrator --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

RE: help
by John Wan 18 Jan '07

18 Jan '07

Hi Alan, Now everything works but the Active Directory authentication,Please see the following output from "$ Radiusd -X" when a wireless client uses "administrator" logon into the chillispot web logon page: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:32772, id=0, length=223 User-Name = "administrator" CHAP-Challenge = 0xa784482e8ac92fd573e87bbbad9ca58f CHAP-Password = 0x00f54cc04e288eec67feff0b13e9448bd2 NAS-IP-Address = 0.0.0.0 Service-Type = Login-User Framed-IP-Address = 192.168.182.5 Calling-Station-Id = "00-16-6F-79-91-F4" Called-Station-Id = "00-05-5D-9E-0F-94" NAS-Identifier = "nas01" Acct-Session-Id = "45aec9a900000000" NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Message-Authenticator = 0x97668bae73249b0dd4755ab03d364f34 WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "administrator", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched DEFAULT at 153 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type CHAP auth: type "CHAP" Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 0 rlm_chap: login attempt by "administrator" with CHAP password rlm_chap: Could not find clear text password for user administrator modcall[authenticate]: module "chap" returns invalid for request 0 modcall: group Auth-Type returns invalid for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... rad_recv: Access-Request packet from host 127.0.0.1:32772, id=0, length=223 Sending Access-Reject of id 0 to 127.0.0.1:32772 --- Walking the entire request list --- Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 0 with timestamp 45aecedc Nothing to do. Sleeping until we see a request. -----Original Message----- From: freeradius-users-bounces+j.wan=mbs.edu(a)lists.freeradius.org [mailto:freeradius-users-bounces+j.wan=mbs.edu@lists.freeradius.org] On Behalf Of John Wan Sent: Friday, 5 January 2007 11:26 AM To: FreeRadius users mailing list Subject: RE: help Hi Alan, Many thanks for your help. Now the kerberos service and the Samba service are running now, I have followed your instructions on your webpage, but I still have experenced the similar issue, please see the folloewing: [root@sun ~]# net join -U Administrator Administrator's password: [2007/01/05 10:10:15, 0] libads/kerberos.c:ads_kinit_password(146) kerberos_kinit_password Administrator(a)MBUS.LOCAL failed: Cannot find KDC for requested realm [2007/01/05 10:10:15, 0] utils/net_ads.c:ads_startup(186) ads_connect: Cannot find KDC for requested realm Joined domain MBUS. [root@sun ~]# wbinfo -a administrator%password plaintext password authentication failed Could not authenticate user administrator%password with plaintext password could not obtain winbind separator! could not obtain winbind domain name! challenge/response password authentication failed Could not authenticate user administrator with challenge/response Would you please give me some hints so I could try it again. All I need is to allow the freeradius server and Chillispot to hand over the authentication (for wireless client) to the Win2k3 Active Directory. To be able to achive that, I have to make sure the above two steps are working (at moment they are not working). Many thanks again in advance. Regards John -----Original Message----- From: freeradius-users-bounces+j.wan=mbs.edu(a)lists.freeradius.org [mailto:freeradius-users-bounces+j.wan=mbs.edu@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, 14 December 2006 12:20 PM To: FreeRadius users mailing list Subject: Re: help John Wan wrote: > Would you please give me some hints how to start the Kerberos server > and how to solve the issue of > "ads_connect: Invalid credentials". Unfortunately, I'm not a kerberos or Samba expert. I know just enough to follow the script. If it doesn't work, I suggest asking on the Samba / kerberos lists. i.e. the people who wrote the software are the ones most likely to be able to help you. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- ________________________________________________________________________ _______ Notice from Melbourne Business School Ltd The information contained in this e-mail is confidential, and is intended for the named person's use only. It may contain proprietary or legally privileged information. If you have received this email in error, please notify the sender and delete it immediately. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient Internet communications are not secure. You should scan this message and any attachments for viruses. Melbourne Business School does not accept any liability for loss or damage which may result from receipt of this message or any attachments. ________________________________________________________________________ ______ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- _______________________________________________________________________________ Notice from Melbourne Business School Ltd The information contained in this e-mail is confidential, and is intended for the named person's use only. It may contain proprietary or legally privileged information. If you have received this email in error, please notify the sender and delete it immediately. You must not, directly or indirectly, use, disclose, distribute, print, or copy any part of this message if you are not the intended recipient Internet communications are not secure. You should scan this message and any attachments for viruses. Melbourne Business School does not accept any liability for loss or damage which may result from receipt of this message or any attachments. ______________________________________________________________________________

2 1

monitoring freeradius with nagios
by Mike 18 Jan '07

18 Jan '07

All, When trying to use the "radauth" tool from nagios to monitor freeradius, I get the following in the freeradius log: Error: WARNING: Malformed RADIUS packet from host ... too long (length 18432 > maximum 4096) radtest seems to be ok. has anyone else experienced this or knows what is wrong?

4 3

SPLAT question
by Enright Patrick - penrig 18 Jan '07

18 Jan '07

Hello, This pertains to Feeradius 1.1.0. I am having trouble setting up freeradius and Checkpoint's Secureplatform Pro (SPLAT) firewall (which is a stripped down Linux) so that administrators logging into the firewalls will be authenticated by the freeradius server. According to the SPLAT pro user guide I should be able to set up a group on the firewall and I should not have to define all the individual users on the firewall. Once the user enters the username and password that info will be passed to the freeradius server along with the group (which is already defined on the firewall). When I start the freeradius server with the -AX switches I really don't see it reading the following that I set up in the radiusd.conf file: passwd etc_group { filename = /etc/freeradius/group format = "=Group-Name:::*,User-Name" hashsize = 50 ignorenislike = yes allowmultiplekeys = yes delimiter = ":" } I'm not sure if this is how you tell it to look in the group file and not sure why I do not see this in the messages when I start freeradius....??? Is anybody else doing this and if so can you provide some guidance? Thanks so much. Regards, Patrick Enright Information Security Architecture Team patrick.enright(a)acxiom.com <mailto:patrick.enright@acxiom.com> ************************************************************************* The information contained in this communication is confidential, is intended only for the use of the recipient named above, and may be legally privileged. If the reader of this message is not the intended recipient, you are hereby notified that any dissemination, distribution or copying of this communication is strictly prohibited. If you have received this communication in error, please resend this communication to the sender and delete the original message or any copy of it from your computer system. Thank you. *************************************************************************

3 2

Building from CVS
by King, Michael 18 Jan '07

18 Jan '07

I wanted to try the Pre2.0 release in the CVS to see if the TLS locking code fixed the problem I had with the SSL errors in PEAP. I downloaded the snapshot from ftp.freeradius.org freeradius-server-snapshot-20070116.tar.bz2 I'm building on Debian, so I wanted to package it (Especially since it not really released code yet) I unzipped it, and ran fakeroot dpkg-buildpackage -b -uc It failed with: checking how to run the C++ preprocessor... /lib/cpp configure: error: C++ preprocessor "/lib/cpp" fails sanity check See `config.log' for more details. make: *** [stamp-build] Error 1 netdev:/tmp/freeradius-server-snapshot-20070116# Config.log is as follows netdev:/tmp/freeradius-server-snapshot-20070116# more config.log This file contains any messages produced by compilers while running configure, to aid debugging if configure makes a mistake. It was created by configure, which was generated by GNU Autoconf 2.59. Invocation command line was $ ./configure --build i386-linux --config-cache --prefix=/usr --exec-prefix=/usr --mandir=/usr/share/man --sysconfdir=/etc --libdir=/usr/lib/freeradius --d atadir=/usr/share --localstatedir=/var --with-raddbdir=/etc/freeradius --with-logdir=/var/log/freeradius --with-system-libtool --disable-ltdl-install --with- large-files --with-udpfromto --with-edir --enable-strict-dependencies --enable-developer --without-rlm_otp --without-rlm_sql_postgresql --without-snmp ## --------- ## ## Platform. ## ## --------- ## hostname = netdev uname -m = i686 uname -r = 2.6.8-3-686 uname -s = Linux uname -v = #1 Tue Dec 5 21:26:38 UTC 2006 /usr/bin/uname -p = unknown /bin/uname -X = unknown /bin/arch = i686 /usr/bin/arch -k = unknown /usr/convex/getsysinfo = unknown hostinfo = unknown /bin/machine = unknown /usr/bin/oslevel = unknown /bin/universe = unknown PATH: /sbin PATH: /bin PATH: /usr/sbin PATH: /usr/bin PATH: /usr/bin/X11 PATH: /usr/local/sbin PATH: /usr/local/bin ## ----------- ## ## Core tests. ## ## ----------- ## configure:1423: loading cache config.cache configure:1566: checking for gcc configure:1582: found /usr/bin/gcc configure:1592: result: gcc configure:1836: checking for C compiler version configure:1839: gcc --version </dev/null >&5 gcc (GCC) 3.3.5 (Debian 1:3.3.5-13) Copyright (C) 2003 Free Software Foundation, Inc. This is free software; see the source for copying conditions. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. configure:1842: $? = 0 configure:1844: gcc -v </dev/null >&5 Reading specs from /usr/lib/gcc-lib/i486-linux/3.3.5/specs Configured with: ../src/configure -v --enable-languages=c,c++,java,f77,pascal,objc,ada,treelang --prefix=/usr --mandir=/usr/share/man --infodir=/usr/share/in fo --with-gxx-include-dir=/usr/include/c++/3.3 --enable-shared --enable-__cxa_atexit --with-system-zlib --enable-nls --without-included-gettext --enable-cloc ale=gnu --enable-debug --enable-java-gc=boehm --enable-java-awt=xlib --enable-objc-gc i486-linux Thread model: posix gcc version 3.3.5 (Debian 1:3.3.5-13) configure:1847: $? = 0 configure:1849: gcc -V </dev/null >&5 gcc: `-V' option must have argument configure:1852: $? = 1 configure:1875: checking for C compiler default output file name configure:1878: gcc -Wall -g -O2 conftest.c >&5 configure:1881: $? = 0 configure:1927: result: a.out configure:1932: checking whether the C compiler works configure:1938: ./a.out configure:1941: $? = 0 configure:1958: result: yes configure:1965: checking whether we are cross compiling configure:1967: result: no configure:1970: checking for suffix of executables configure:1972: gcc -o conftest -Wall -g -O2 conftest.c >&5 configure:1975: $? = 0 configure:2000: result: configure:2006: checking for suffix of object files configure:2027: gcc -c -Wall -g -O2 conftest.c >&5 configure:2030: $? = 0 configure:2052: result: o configure:2056: checking whether we are using the GNU C compiler configure:2080: gcc -c -Wall -g -O2 conftest.c >&5 configure:2086: $? = 0 configure:2089: test -z || test ! -s conftest.err configure:2092: $? = 0 configure:2095: test -s conftest.o configure:2098: $? = 0 configure:2111: result: yes configure:2117: checking whether gcc accepts -g configure:2138: gcc -c -g conftest.c >&5 configure:2144: $? = 0 configure:2147: test -z || test ! -s conftest.err configure:2150: $? = 0 configure:2153: test -s conftest.o configure:2156: $? = 0 configure:2167: result: yes configure:2184: checking for gcc option to accept ANSI C configure:2254: gcc -c -Wall -g -O2 conftest.c >&5 configure:2260: $? = 0 configure:2263: test -z || test ! -s conftest.err configure:2266: $? = 0 configure:2269: test -s conftest.o configure:2272: $? = 0 configure:2290: result: none needed configure:2308: gcc -c -Wall -g -O2 conftest.c >&5 conftest.c:2: error: syntax error before "me" configure:2314: $? = 1 configure: failed program was: | #ifndef __cplusplus | choke me | #endif configure:2496: checking for g++ configure:2525: result: no configure:2496: checking for c++ configure:2525: result: no configure:2496: checking for gpp configure:2525: result: no configure:2496: checking for aCC configure:2525: result: no configure:2496: checking for CC configure:2525: result: no configure:2496: checking for cxx configure:2525: result: no configure:2496: checking for cc++ configure:2525: result: no configure:2496: checking for cl configure:2525: result: no configure:2496: checking for FCC configure:2525: result: no configure:2496: checking for KCC configure:2525: result: no configure:2496: checking for RCC configure:2525: result: no configure:2496: checking for xlC_r configure:2525: result: no configure:2496: checking for xlC configure:2525: result: no configure:2538: checking for C++ compiler version configure:2541: g++ --version </dev/null >&5 ./configure: line 1: g++: command not found configure:2544: $? = 127 configure:2546: g++ -v </dev/null >&5 ./configure: line 1: g++: command not found configure:2549: $? = 127 configure:2551: g++ -V </dev/null >&5 ./configure: line 1: g++: command not found configure:2554: $? = 127 configure:2557: checking whether we are using the GNU C++ compiler configure:2581: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2587: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | | int | main () | { | #ifndef __GNUC__ | choke me | #endif | | ; | return 0; | } configure:2612: result: no configure:2618: checking whether g++ accepts -g configure:2639: g++ -c -g conftest.cc >&5 ./configure: line 1: g++: command not found configure:2645: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | | int | main () | { | | ; | return 0; | } configure:2668: result: no configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void std::exit (int) throw (); using std::exit; | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void std::exit (int); using std::exit; | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void exit (int) throw (); | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | extern "C" void exit (int); | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2710: g++ -c conftest.cc >&5 ./configure: line 1: g++: command not found configure:2716: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | /* end confdefs.h. */ | void exit (int); | #include <stdlib.h> | int | main () | { | exit (42); | ; | return 0; | } configure:2802: checking how to run the C preprocessor configure:2837: gcc -E conftest.c configure:2843: $? = 0 configure:2875: gcc -E conftest.c conftest.c:12:28: ac_nonexistent.h: No such file or directory configure:2881: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | /* end confdefs.h. */ | #include <ac_nonexistent.h> configure:2920: result: gcc -E configure:2944: gcc -E conftest.c configure:2950: $? = 0 configure:2982: gcc -E conftest.c conftest.c:12:28: ac_nonexistent.h: No such file or directory configure:2988: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | /* end confdefs.h. */ | #include <ac_nonexistent.h> configure:3032: checking for egrep configure:3042: result: grep -E configure:3048: checking for AIX configure:3070: result: no configure:3078: checking whether gcc needs -traditional configure:3120: result: no configure:3127: checking whether we are using SUNPro C configure:3138: gcc -E conftest.c configure:3141: $? = 0 configure:3148: result: no configure:3191: checking for ranlib configure:3207: found /usr/bin/ranlib configure:3218: result: ranlib configure:3238: checking for special C compiler options needed for large files configure:3335: result: no configure:3341: checking for _FILE_OFFSET_BITS value needed for large files configure:3372: gcc -c -Wall -g -O2 conftest.c >&5 conftest.c:18: warning: left shift count >= width of type conftest.c:18: warning: left shift count >= width of type conftest.c:20: error: size of array `off_t_is_large' is negative configure:3378: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | /* end confdefs.h. */ | #include <sys/types.h> | /* Check that off_t can represent 2**63 - 1 correctly. | We can't simply define LARGE_OFF_T to be 9223372036854775807, | since some C++ compilers masquerading as C compilers | incorrectly reject 9223372036854775807. */ | #define LARGE_OFF_T (((off_t) 1 << 62) - 1 + ((off_t) 1 << 62)) | int off_t_is_large[(LARGE_OFF_T % 2147483629 == 721 | && LARGE_OFF_T % 2147483647 == 1) | ? 1 : -1]; | int | main () | { | | ; | return 0; | } configure:3424: gcc -c -Wall -g -O2 conftest.c >&5 configure:3430: $? = 0 configure:3433: test -z || test ! -s conftest.err configure:3436: $? = 0 configure:3439: test -s conftest.o configure:3442: $? = 0 configure:3454: result: 64 configure:3464: checking for _LARGE_FILES value needed for large files configure:3495: gcc -c -Wall -g -O2 conftest.c >&5 configure:3501: $? = 0 configure:3504: test -z || test ! -s conftest.err configure:3507: $? = 0 configure:3510: test -s conftest.o configure:3513: $? = 0 configure:3577: result: no configure:3590: checking whether byte ordering is bigendian configure:3617: gcc -c -Wall -g -O2 conftest.c >&5 configure:3623: $? = 0 configure:3626: test -z || test ! -s conftest.err configure:3629: $? = 0 configure:3632: test -s conftest.o configure:3635: $? = 0 configure:3659: gcc -c -Wall -g -O2 conftest.c >&5 conftest.c: In function `main': conftest.c:20: error: `not' undeclared (first use in this function) conftest.c:20: error: (Each undeclared identifier is reported only once conftest.c:20: error: for each function it appears in.) conftest.c:20: error: syntax error before "big" configure:3665: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | /* end confdefs.h. */ | #include <sys/types.h> | #include <sys/param.h> | | int | main () | { | #if BYTE_ORDER != BIG_ENDIAN | not big endian | #endif | | ; | return 0; | } configure:3798: result: no configure:3820: checking for gmake configure:3847: result: no configure:3857: checking for make configure:3875: found /usr/bin/make configure:3888: result: /usr/bin/make configure:3946: checking for lt_dlinit in -lltdl configure:3976: gcc -o conftest -Wall -g -O2 conftest.c -lltdl >&5 configure:3982: $? = 0 configure:3985: test -z || test ! -s conftest.err configure:3988: $? = 0 configure:3991: test -s conftest configure:3994: $? = 0 configure:4007: result: yes configure:4140: checking build system type configure:4158: result: i386-pc-linux-gnu configure:4166: checking host system type configure:4180: result: i386-pc-linux-gnu configure:4188: checking for a sed that does not truncate output configure:4242: result: /bin/sed configure:4256: checking for ld used by gcc configure:4323: result: /usr/bin/ld configure:4332: checking if the linker (/usr/bin/ld) is GNU ld configure:4347: result: yes configure:4352: checking for /usr/bin/ld option to reload object files configure:4359: result: -r configure:4368: checking for BSD-compatible nm configure:4410: result: /usr/bin/nm -B configure:4414: checking whether ln -s works configure:4418: result: yes configure:4425: checking how to recognise dependent libraries configure:4599: result: pass_all configure:4806: checking for ANSI C header files configure:4831: gcc -c -Wall -g -O2 conftest.c >&5 configure:4837: $? = 0 configure:4840: test -z || test ! -s conftest.err configure:4843: $? = 0 configure:4846: test -s conftest.o configure:4849: $? = 0 configure:4935: gcc -o conftest -Wall -g -O2 conftest.c >&5 conftest.c: In function `main': conftest.c:30: warning: implicit declaration of function `exit' configure:4938: $? = 0 configure:4940: ./conftest configure:4943: $? = 0 configure:4958: result: yes configure:4982: checking for sys/types.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for sys/stat.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for stdlib.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for string.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for memory.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for strings.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for inttypes.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for stdint.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:4982: checking for unistd.h configure:4998: gcc -c -Wall -g -O2 conftest.c >&5 configure:5004: $? = 0 configure:5007: test -z || test ! -s conftest.err configure:5010: $? = 0 configure:5013: test -s conftest.o configure:5016: $? = 0 configure:5027: result: yes configure:5053: checking dlfcn.h usability configure:5065: gcc -c -Wall -g -O2 conftest.c >&5 configure:5071: $? = 0 configure:5074: test -z || test ! -s conftest.err configure:5077: $? = 0 configure:5080: test -s conftest.o configure:5083: $? = 0 configure:5093: result: yes configure:5097: checking dlfcn.h presence configure:5107: gcc -E conftest.c configure:5113: $? = 0 configure:5133: result: yes configure:5168: checking for dlfcn.h configure:5175: result: yes configure:5193: checking how to run the C++ preprocessor configure:5224: g++ -E conftest.cc ./configure: line 1: g++: command not found configure:5230: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5224: g++ -E conftest.cc ./configure: line 1: g++: command not found configure:5230: $? = 127 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5224: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5230: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5224: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5230: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5307: result: /lib/cpp configure:5331: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5337: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5331: /lib/cpp conftest.cc cpp: installation problem, cannot exec `cc1plus': No such file or directory configure:5337: $? = 1 configure: failed program was: | /* confdefs.h. */ | | #define PACKAGE_NAME "" | #define PACKAGE_TARNAME "" | #define PACKAGE_VERSION "" | #define PACKAGE_STRING "" | #define PACKAGE_BUGREPORT "" | #ifdef __cplusplus | void exit (int); | #endif | #define _FILE_OFFSET_BITS 64 | #define STDC_HEADERS 1 | #define HAVE_SYS_TYPES_H 1 | #define HAVE_SYS_STAT_H 1 | #define HAVE_STDLIB_H 1 | #define HAVE_STRING_H 1 | #define HAVE_MEMORY_H 1 | #define HAVE_STRINGS_H 1 | #define HAVE_INTTYPES_H 1 | #define HAVE_STDINT_H 1 | #define HAVE_UNISTD_H 1 | #define HAVE_DLFCN_H 1 | /* end confdefs.h. */ | #ifdef __STDC__ | # include <limits.h> | #else | # include <assert.h> | #endif | Syntax error configure:5406: error: C++ preprocessor "/lib/cpp" fails sanity check See `config.log' for more details. ## ---------------- ## ## Cache variables. ## ## ---------------- ## ac_cv_build=i386-pc-linux-gnu ac_cv_build_alias=i386-linux ac_cv_c_bigendian=no ac_cv_c_compiler_gnu=yes ac_cv_cxx_compiler_gnu=no ac_cv_env_CC_set= ac_cv_env_CC_value= ac_cv_env_CFLAGS_set=set ac_cv_env_CFLAGS_value='-Wall -g -O2' ac_cv_env_CPPFLAGS_set= ac_cv_env_CPPFLAGS_value= ac_cv_env_CPP_set= ac_cv_env_CPP_value= ac_cv_env_CXXCPP_set= ac_cv_env_CXXCPP_value= ac_cv_env_CXXFLAGS_set= ac_cv_env_CXXFLAGS_value= ac_cv_env_CXX_set= ac_cv_env_CXX_value= ac_cv_env_F77_set= ac_cv_env_F77_value= ac_cv_env_FFLAGS_set= ac_cv_env_FFLAGS_value= ac_cv_env_LDFLAGS_set= ac_cv_env_LDFLAGS_value= ac_cv_env_build_alias_set=set ac_cv_env_build_alias_value=i386-linux ac_cv_env_host_alias_set= ac_cv_env_host_alias_value= ac_cv_env_target_alias_set= ac_cv_env_target_alias_value= ac_cv_exeext= ac_cv_header_dlfcn_h=yes ac_cv_header_inttypes_h=yes ac_cv_header_memory_h=yes ac_cv_header_stdc=yes ac_cv_header_stdint_h=yes ac_cv_header_stdlib_h=yes ac_cv_header_string_h=yes ac_cv_header_strings_h=yes ac_cv_header_sys_stat_h=yes ac_cv_header_sys_types_h=yes ac_cv_header_unistd_h=yes ac_cv_host=i386-pc-linux-gnu ac_cv_host_alias=i386-linux ac_cv_lib_ltdl_lt_dlinit=yes ac_cv_objext=o ac_cv_path_MAKE=/usr/bin/make ac_cv_prog_CPP='gcc -E' ac_cv_prog_CXXCPP=/lib/cpp ac_cv_prog_GMAKE=no ac_cv_prog_ac_ct_CC=gcc ac_cv_prog_ac_ct_RANLIB=ranlib ac_cv_prog_cc_g=yes ac_cv_prog_cc_stdc= ac_cv_prog_cxx_g=no ac_cv_prog_egrep='grep -E' ac_cv_prog_gcc_traditional=no ac_cv_prog_suncc=no ac_cv_sys_file_offset_bits=64 ac_cv_sys_large_files=no ac_cv_sys_largefile_CC=no lt_cv_deplibs_check_method=pass_all lt_cv_file_magic_cmd='$MAGIC_CMD' lt_cv_file_magic_test_file= lt_cv_ld_reload_flag=-r lt_cv_path_LD=/usr/bin/ld lt_cv_path_NM='/usr/bin/nm -B' lt_cv_path_SED=/bin/sed lt_cv_prog_gnu_ld=yes ## ----------------- ## ## Output variables. ## ## ----------------- ## ACLOCAL='' AR='' AUTOCONF='' AUTOHEADER='' CC='gcc' CFLAGS='-Wall -g -O2' CPP='gcc -E' CPPFLAGS='' CRYPTLIB='' CXX='g++' CXXCPP='/lib/cpp' CXXFLAGS='' DEFS='' DIRNAME='' ECHO='echo' ECHO_C='' ECHO_N='-n' ECHO_T='' EGREP='grep -E' EXEEXT='' F77='' FFLAGS='' GMAKE='no' GREP='' HOSTINFO='' INCLTDL='' INSTALLSTRIP='' LDFLAGS='' LIBLTDL='-lltdl' LIBLTDLPATH='' LIBOBJS='' LIBPREFIX='' LIBS='' LIBTOOL='' LN_S='ln -s' LOCATE='' LTLIBOBJS='' MAKE='/usr/bin/make' MODULES='' OBJEXT='o' OPENSSL_INCLUDE='' OPENSSL_LIBS='' PACKAGE_BUGREPORT='' PACKAGE_NAME='' PACKAGE_STRING='' PACKAGE_TARNAME='' PACKAGE_VERSION='' PATH_SEPARATOR=':' PCAP_LIBS='' PERL='' RADIUSD_MAJOR_VERSION='2' RADIUSD_MINOR_VERSION='0.0-pre0' RADIUSD_VERSION='2.0.0-pre0' RANLIB='ranlib' REGEX='' REGEX_EXTENDED='' RUSERS='' SHELL='/bin/sh' SNMPGET='' SNMPWALK='' SNMP_INCLUDE='' SNMP_LIBS='' STATIC_MODULES='' STRIP='' USE_SHARED_LIBS='' USE_STATIC_LIBS='' ac_ct_AR='' ac_ct_CC='gcc' ac_ct_CXX='g++' ac_ct_F77='' ac_ct_RANLIB='ranlib' ac_ct_STRIP='' bindir='${exec_prefix}/bin' build='i386-pc-linux-gnu' build_alias='i386-linux' build_cpu='i386' build_os='linux-gnu' build_vendor='pc' datadir='/usr/share' docdir='' exec_prefix='/usr' host='i386-pc-linux-gnu' host_alias='' host_cpu='i386' host_os='linux-gnu' host_vendor='pc' includedir='${prefix}/include' infodir='${prefix}/info' libdir='/usr/lib/freeradius' libexecdir='${exec_prefix}/libexec' localstatedir='/var' logdir='' mandir='/usr/share/man' oldincludedir='/usr/include' prefix='/usr' program_transform_name='s,x,x,' radacctdir='' raddbdir='' sbindir='${exec_prefix}/sbin' sharedstatedir='${prefix}/com' subdirs='' sysconfdir='/etc' target_alias='' ## ----------- ## ## confdefs.h. ## ## ----------- ## #define HAVE_DLFCN_H 1 #define HAVE_INTTYPES_H 1 #define HAVE_MEMORY_H 1 #define HAVE_STDINT_H 1 #define HAVE_STDLIB_H 1 #define HAVE_STRINGS_H 1 #define HAVE_STRING_H 1 #define HAVE_SYS_STAT_H 1 #define HAVE_SYS_TYPES_H 1 #define HAVE_UNISTD_H 1 #define PACKAGE_BUGREPORT "" #define PACKAGE_NAME "" #define PACKAGE_STRING "" #define PACKAGE_TARNAME "" #define PACKAGE_VERSION "" #define STDC_HEADERS 1 #define _FILE_OFFSET_BITS 64 #endif #ifdef __cplusplus void exit (int); configure: exit 1 netdev:/tmp/freeradius-server-snapshot-20070116#

3 3

Does the Users file still support auth-type :=PAM in ver 1.1.4?
by Ellis, Scott 1 (N-Comptel Inc.) 18 Jan '07

18 Jan '07

1 0

A couple of questions PoPToP+FreeRadius+IAS
by Marxy 17 Jan '07

17 Jan '07

My configuration is: [poptop pptpd & pppd]----[freeradius]-----[Microsoft IAS]----[ADS] pptpd is 1.3.3 pppd is 2.4.4 freeradius is 1.1.3 Clients go from internet, make auth via MS IAS, but accounting does freeradius. All seems good. Clients go OK. Auth and accounting seems OK too. But, I have couple of questions 1. Accounting of Calling-station-id returns only first 4 characters of user's IP address. I noticed that if some user enters using his remote IP like 77.122.215.143 the record of his Calling-Station-Id would be Calling-Station-Id = "1.77" which are first 4 symbols of IP address in back order. What's goin' wrong? I suppose that calling-station-id should be whole IP address. 2. Radius does not understand some attributes from client. a) Jan 14 12:37:14 shata pppd[25046]: rc_avpair_gen: received unknown attribute 25 of length 30: 0x333B04270000013700010A00001701C735C490B2116B000000000000014C b) Jan 11 22:29:02 shata pppd[19185]: RADIUS: wrong service type 4 for user21 But I know that these are VALUE Service-Type Dialback-Framed-User 4 and ATTRIBUTE MS-CHAP2-Response 25 octets as they are written in the dictionary file. For the first case users can not login. Radius refuse them by wrong service type. In second case users login OK but I what to know why there is error anyway. What is wrong here? Thank for replies, --- Oleg. -- View this message in context: http://www.nabble.com/A-couple-of-questions-PoPToP%2BFreeRadius%2BIAS-tf299… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 7