- Freeradius-Users - lists.freeradius.org

user/group and permissions CentOS 4.4
by Andrew Long 12 Jan '07

12 Jan '07

In process of building 1.4 on CentOS 4.4. When started (as root) in debug mode, all goes well. When using default user/group nobody I get > Info: Starting - reading configuration files ... > radiusd: Couldn't open /usr/local/var/log/radius/radius.log for logging: Permission denied > (rlm_exec: Wait=yes but no output defined. Did you mean output=none?) > radiusd: Couldn't open /usr/local/var/log/radius/radius.log for logging: Permission denied > (Failed creating PID file /usr/local/var/run/radiusd/radiusd.pid: Permission denied) Can someone give me a little guidance with the permissions and user/group setup for Cent. --Andrew Long

2 1

IPPool with MySQL
by Umar Draz 12 Jan '07

12 Jan '07

Dear Members!! Is it possible to use ip pool with freeradius + mysql? main_pool works well with unix shadow files but i don't know how i can do with mysql. Any ideas? Regards, Umar Draz _________________________________________________________________ Dave vs. Carl: The Insignificant Championship Series. Who will win? http://clk.atdmt.com/MSN/go/msnnkwsp0070000001msn/direct/01/?href=http://da…

1 0

FreeRadius-package on ubuntu6.10
by adreas Polyxronopoulos 12 Jan '07

12 Jan '07

I have noticed a problem when downloading freeradius package for ubuntu6.10. After downloading freeradius package and configuring freeradius for peap-eap/mschapv2 and running freeradius -X i got the following ouput: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/freeradius/proxy.conf Config: including file: /etc/freeradius/clients.conf Config: including file: /etc/freeradius/snmp.conf Config: including file: /etc/freeradius/eap.conf Config: including file: /etc/freeradius/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/freeradius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/freeradius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/freeradius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/freeradius/freeradius.pid" main: bind_address = 10.0.0.15 IP address [10.0.0.15] main: user = "freerad" main: group = "freerad" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib/freeradius Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded MS-CHAP mschap: use_mppe = no mschap: require_encryption = yes mschap: require_strong = yes mschap: with_ntdomain_hack = yes mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded eap eap: default_eap_type = "peap" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory radiusd.conf[10]: eap: Module instantiation failed. radiusd.conf[1939] Unknown module "eap". radiusd.conf[1886] Failed to parse authenticate section. In the same machine i have downloaded the source of freeradius-1.1.3 and compiled it. I have done the same configuration in radiusd.conf , clients.conf , user , eap.conf as in the freeradius-package and everything works fine .Why from the freeradius-package this configuration does not work? Adreas Polyxronopoulos ___________________________________________________________ What kind of emailer are you? Find out today - get a free analysis of your email personality. Take the quiz at the Yahoo! Mail Championship. http://uk.rd.yahoo.com/evt=44106/*http://mail.yahoo.net/uk

2 1

Re: Freeradius-1.1.3 + Mysql ?
by adreas Polyxronopoulos 12 Jan '07

12 Jan '07

Hi list, I have found the mysql-server package but i haven't found the mysql-dev package could you tell me which one specific because there are many thanks Adreas Polyxronopoulos ----- Original Message ---- From: "A.L.M.Buxey(a)lboro.ac.uk" <A.L.M.Buxey(a)lboro.ac.uk> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, 11 January, 2007 7:23:53 PM Subject: Re: Freeradius-1.1.3 + Mysql ? Hi, > Hi list, > > I have compiled freeradius-1.1.3 with out any configure option. I don't have mySql server on my pc (ubuntu 6.10) . If i would like to store accounting information in mySql , what i have to do? When i download mySql server package do i have to configure freeradius again or just configure radiusd.conf ? if you built from source you will need to build from source again - this is because when you ran ./configure, the automake script checks your compilation environment to see what libraries and headers you have - thus what feature-sets can be enabled. you will need to install the mysql-devel package to compile in support and install the mysql-server package to have the mysql server and utils to USE mysql alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________ What kind of emailer are you? Find out today - get a free analysis of your email personality. Take the quiz at the Yahoo! Mail Championship. http://uk.rd.yahoo.com/evt=44106/*http://mail.yahoo.net/uk

1 0

Auth Against AD without CHAP/PEAP
by Tim_Crouch＠uttyler.edu 11 Jan '07

11 Jan '07

Is it possible to use freeradius to authenticate against Active Directory without using CHAP or PEAP? I have found directions to do this with supplicants using peap etc. but I don't want to use supplicants. I am currently using freeradius to auth against LDAP with out a problem (for my wireless network). I have made changes in radiusd.conf (basically replacing my LDAP entries with the corresponding AD entry) to try to auth agains AD, but it does not look as if it can read the password. Is anyone else doing this? And if so, how? Thanks! Tim Crouch Systems Administrator Campus Computing Services University of Texas at Tyler 903-566-7476

2 1

automated response
by Baker 11 Jan '07

11 Jan '07

I will be out on medical leave from January 12th through February 18th. If you have questions please direct them to Isaac Force.

1 0

Freeradius on Sun Fire platforms
by gigrim＠infinito.it 11 Jan '07

11 Jan '07

Could anyone advise whether Freeradius can be run on the below SUN Hardware/Software platform list. Many thanks in advance for the support you can provide, your help is much appreciated. Sun Fire V210 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire V240 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire V440 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire V890 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire X4100 Linux RedHat Sun Fire X4200 Linux RedHat Best Regards Giuseppe Grimaldi

4 3

RE: Restrict Password from detail file , accounting
by Ellis, Scott 1 (N-Comptel Inc.) 11 Jan '07

11 Jan '07

Thanks....I am running 1.0.1.... Scott ... -----Original Message----- From: freeradius-users-bounces+scott.1.ellis=lmco.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+scott.1.ellis=lmco.com@lists.freeradius .org] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk Sent: Thursday, January 11, 2007 1:17 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Do you know what version was the first to introduce this feature? 1.1.2 Feature improvements * Allow tagged VSA's for Juniper. Closes bugs #367 and #368. * Allow Ascend "abinary" format to be specified as octets, (e.g. Ascend-Data-Filter = 0x010203...) * Added "cipher_list" configuration to the EAP-TLS module. See "eap.conf" and "man 1 cipher" for details. * Added "check_cert_issuer" configuration to the EAP-TLS module. See "eap.conf" for details. (closes: #346) * Added "suppress" configuration entry to rlm_detail, to suppress certain attributes (e.g. User-Password). This closes bug #359. * More dictionary updates * Write SSL errors to log file, rather than stderr. This closes bug #347. * Allow a core dump on uid change on Linux (closes: #361) > Is there any other solution for the older versions? not that i can think of straight off-hand,. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

RE: Restrict Password from detail file , accounting
by Ellis, Scott 1 (N-Comptel Inc.) 11 Jan '07

11 Jan '07

Do you know what version was the first to introduce this feature? Is there any other solution for the older versions? Thanks, Scott -----Original Message----- From: freeradius-users-bounces+scott.1.ellis=lmco.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+scott.1.ellis=lmco.com@lists.freeradius .org] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk Sent: Wednesday, January 10, 2007 3:10 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Is there a way to eliminate the password from being written to the > accounting log files? Either not in clear text or altogether? which accounting logs? with the recent versions of FreeRADIUS you can add the following to the last part of each detail logging stanza suppress { User-Password } usage of obfuscation is also recommended for, eg MySQL logging. simply replace the User-Password INSERT with the value of 'password' alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Freeradius-1.1.3 + Mysql ?
by adreas Polyxronopoulos 11 Jan '07

11 Jan '07

Hi list, I have compiled freeradius-1.1.3 with out any configure option. I don't have mySql server on my pc (ubuntu 6.10) . If i would like to store accounting information in mySql , what i have to do? When i download mySql server package do i have to configure freeradius again or just configure radiusd.conf ? thanks... Adreas Polyxronopoulos ___________________________________________________________ New Yahoo! Mail is the ultimate force in competitive emailing. Find out more at the Yahoo! Mail Championships. Plus: play games and win prizes. http://uk.rd.yahoo.com/evt=44106/*http://mail.yahoo.net/uk

3 2