- Freeradius-Users - lists.freeradius.org

Which Variable name for sql result
by Stavros Patiniotis 12 Dec '06

12 Dec '06

Hi When radgroupcheck does its query, what variable name does it store its results in? The default sql (ie authorize_group_check_query) should be returning the GroupName, but I cannot seem to access it. Also, in doc/rlm_sql point 3c refers to the 'read_groups' directive. I'm assuing a couple of things here. (a) That this is set in sql.conf (b) By default its set to yes. Thanks. Cheers, Stavros Patiniotis EscapeNet ~ 08 8292 5200

1 0

Re: Counter
by Sean 12 Dec '06

12 Dec '06

> Read /etc/raddb/dictionary Alan, that directory doesn't exist on either of my systems. One system is running 1.0.4 and the other is running 1.1.3. I've tried searching the dictionaries for Max-All-Session, because that attribute works as does Expiration. The dictionaries that I'm searching are in /local/share/freeradius. Thanks for giving me your time with this. Do you think that there is a basic flaw in my setup? Should I delete everything and start from scratch? Are Max-Daily-Session and Max-Monthly-Session valid attributes that I can use in the same way that I use Expiration and Max-All-Session? I doubt that it is a FreeRadius problem, and more likely that I'm mistaken in how I think it works. Regards, Sean

2 1

Re: SQL Counter (Enrique Acosta)
by Sean 12 Dec '06

12 Dec '06

> 1. Fwd: SQL Counter (Enrique Acosta) Thanks Enrique. I upgraded to 1.1.3 but the error is still there. Alan gave me a hint that the attribute is not in the dictionary, so I've spent all evening searching the dictionary files looking for SQL attributes with no luck. My searches of the list archives suggest that Max-Daily-Session and Max-Monthly-Session are valid attributes. I think that the code I added to radiusd.conf is okay. I've listed it below. $INCLUDE ${confdir}/sql.conf sqlcounter dailycounter { counter-name = Daily-Session-Time check-name = Max-Daily-Session sqlmod-inst = sql key = User-Name reset = daily query = "SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='%{%k}'" } So where am I going wrong? If it was a problem in my SQL queries I wouldn't expect the following reply that comes from radius. rlm_sql (sql): Reserving sql socket id: 0 rlm_sql: Failed to create the pair: Unknown attribute "Max-Daily-Session" rlm_sql (sql): Error getting data from database rlm_sql (sql): SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns fail for request 39 modcall: group authorize returns fail for request 39 Did you ever get it to work? The guy I'm doing this for is putting me under a lot of pressure to get it finished. Regards, Sean Bracken

2 1

Use MS RAS as RADIUS client, FreeRADIUS got no User-Password
by Cui Jeffrey 11 Dec '06

11 Dec '06

Hello everyone, I am newbie to FreeRADIUS. Using Windows RAS (VPN server) as RADIUS client, but from output, I can see that there is no User-Password field in request from RAS at all, I am using rlm_jradius inside freeradius to forward username/password to my own authentication program. Only found one post about this issue, someone suggested to put mschap in conf file, but I am sure it's there already. Do I need to change anything on RAS side? I am using freeradius 1.1.2. Anybody can help me out? Thank you in advance Jeffrey rad_recv: Access-Request packet from host 192.168.2.151:1382, id=8, length=289 Acct-Session-Id = "108" NAS-IP-Address = 192.168.2.151 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 129 MS-RAS-Vendor = 311 MS-RAS-Version = "MSRASV5.20" NAS-Port-Type = Virtual Tunnel-Type:0 = PPTP Tunnel-Medium-Type:0 = IP Calling-Station-Id = "10.11.14.105" Tunnel-Client-Endpoint:0 = "10.11.14.105" Microsoft-Attr-35 = 0x4d5352415356352e3030 Microsoft-Attr-34 = 0x4d535241532d312d4a454646324b User-Name = "dvmh00000055(a)DVVPN.COM" MS-CHAP-Challenge = 0xe6e76c750472fb5879986d8b8e75df6e MS-CHAP2-Response = 0x0000f21eb6c0b591297af094964bb6e9417c0000000000000000f990636a5a5237f4c3456225c9c475b07004e32cb758fdf2 Message-Authenticator = 0x25fa1bd20b0a0f3fa273ae4fc66eb8d5 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap' modcall[authorize]: module "mschap" returns ok for request 0 rlm_realm: Looking up realm "DVVPN.COM" for User-Name = "dvmh00000055(a)DVVPN.COM" rlm_realm: No such realm "DVVPN.COM" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 users: Matched entry DEFAULT at line 183 modcall[authorize]: module "files" returns ok for request 0 rlm_jradius: packing attribute Acct-Session-Id (type: 44; len: 3) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) rlm_jradius: packing attribute MS-RAS-Vendor (type: 20381705; len: 4) rlm_jradius: packing attribute MS-RAS-Version (type: 20381714; len: 10) rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4) rlm_jradius: packing attribute Tunnel-Type (type: 64; len: 4) rlm_jradius: packing attribute Tunnel-Medium-Type (type: 65; len: 4) rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 12) rlm_jradius: packing attribute Tunnel-Client-Endpoint (type: 66; len: 12) rlm_jradius: packing attribute Microsoft-Attr-35 (type: 20381731; len: 10) rlm_jradius: packing attribute Microsoft-Attr-34 (type: 20381730; len: 14) rlm_jradius: packing attribute User-Name (type: 1; len: 22) rlm_jradius: packing attribute MS-CHAP-Challenge (type: 20381707; len: 16) rlm_jradius: packing attribute MS-CHAP2-Response (type: 20381721; len: 50) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) rlm_jradius: packing packet with code: 1 (attr length: 429) rlm_jradius: packing attribute Framed-IP-Address (type: 8; len: 4) rlm_jradius: packing attribute Framed-MTU (type: 12; len: 4) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) rlm_jradius: packing attribute Framed-Compression (type: 13; len: 4) rlm_jradius: packing packet with code: 0 (attr length: 80) rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) rlm_jradius: sending 586 bytes to jradius server rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=429 rlm_jradius: reading attribute: type=44; len=3 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 rlm_jradius: reading attribute: type=5; len=4 rlm_jradius: reading attribute: type=20381705; len=4 rlm_jradius: reading attribute: type=20381714; len=10 rlm_jradius: reading attribute: type=61; len=4 rlm_jradius: reading attribute: type=64; len=4 rlm_jradius: reading attribute: type=65; len=4 rlm_jradius: reading attribute: type=31; len=12 rlm_jradius: reading attribute: type=66; len=12 rlm_jradius: reading attribute: type=20381731; len=10 rlm_jradius: received attribute we do not recognize (type: 20381731) rlm_jradius: reading attribute: type=20381730; len=14 rlm_jradius: received attribute we do not recognize (type: 20381730) rlm_jradius: reading attribute: type=1; len=22 rlm_jradius: reading attribute: type=20381707; len=16 rlm_jradius: reading attribute: type=20381721; len=50 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading attribute: type=1052; len=4 rlm_jradius: reading packet: code=0 len=80 rlm_jradius: reading attribute: type=8; len=4 rlm_jradius: reading attribute: type=12; len=4 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 rlm_jradius: reading attribute: type=13; len=4 rlm_jradius: reading request: config_item: len=48 rlm_jradius: reading attribute: type=1000; len=4 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 modcall[authorize]: module "jradius" returns updated for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type auth: type "MS-CHAP" Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 0 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for dvmh00000055(a)DVVPN.COM with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modcall[authenticate]: module "mschap" returns reject for request 0 modcall: leaving group MS-CHAP (returns reject) for request 0 auth: Failed to validate the user. Login incorrect: [dvmh00000055(a)DVVPN.COM/<no User-Password attribute>] (from client jeff2003 port 129 cli 10.11.14.105) Found Post-Auth-Type Processing the post-auth section of radiusd.conf modcall: entering group REJECT for request 0 rlm_jradius: packing attribute Acct-Session-Id (type: 44; len: 3) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) rlm_jradius: packing attribute NAS-Port (type: 5; len: 4) rlm_jradius: packing attribute MS-RAS-Vendor (type: 20381705; len: 4) rlm_jradius: packing attribute MS-RAS-Version (type: 20381714; len: 10) rlm_jradius: packing attribute NAS-Port-Type (type: 61; len: 4) rlm_jradius: packing attribute Tunnel-Type (type: 64; len: 4) rlm_jradius: packing attribute Tunnel-Medium-Type (type: 65; len: 4) rlm_jradius: packing attribute Calling-Station-Id (type: 31; len: 12) rlm_jradius: packing attribute Tunnel-Client-Endpoint (type: 66; len: 12) rlm_jradius: packing attribute User-Name (type: 1; len: 22) rlm_jradius: packing attribute MS-CHAP-Challenge (type: 20381707; len: 16) rlm_jradius: packing attribute MS-CHAP2-Response (type: 20381721; len: 50) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) rlm_jradius: packing packet with code: 1 (attr length: 381) rlm_jradius: packing attribute Framed-IP-Address (type: 8; len: 4) rlm_jradius: packing attribute Framed-MTU (type: 12; len: 4) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) rlm_jradius: packing attribute Framed-Compression (type: 13; len: 4) rlm_jradius: packing attribute MS-CHAP-Error (type: 20381698; len: 10) rlm_jradius: packing packet with code: 3 (attr length: 102) rlm_jradius: packing attribute Auth-Type (type: 1000; len: 4) rlm_jradius: packing attribute Service-Type (type: 6; len: 4) rlm_jradius: packing attribute Framed-Protocol (type: 7; len: 4) rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4) rlm_jradius: sending 576 bytes to jradius server rlm_jradius: return code 7; receiving 2 packets rlm_jradius: reading packet: code=1 len=381 rlm_jradius: reading attribute: type=44; len=3 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 rlm_jradius: reading attribute: type=5; len=4 rlm_jradius: reading attribute: type=20381705; len=4 rlm_jradius: reading attribute: type=20381714; len=10 rlm_jradius: reading attribute: type=61; len=4 rlm_jradius: reading attribute: type=64; len=4 rlm_jradius: reading attribute: type=65; len=4 rlm_jradius: reading attribute: type=31; len=12 rlm_jradius: reading attribute: type=66; len=12 rlm_jradius: reading attribute: type=1; len=22 rlm_jradius: reading attribute: type=20381707; len=16 rlm_jradius: reading attribute: type=20381721; len=50 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading attribute: type=1052; len=4 rlm_jradius: reading packet: code=3 len=102 rlm_jradius: reading attribute: type=8; len=4 rlm_jradius: reading attribute: type=12; len=4 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 rlm_jradius: reading attribute: type=13; len=4 rlm_jradius: reading attribute: type=20381698; len=10 rlm_jradius: reading request: config_item: len=64 rlm_jradius: reading attribute: type=1000; len=4 rlm_jradius: reading attribute: type=6; len=4 rlm_jradius: reading attribute: type=7; len=4 rlm_jradius: reading attribute: type=1014; len=4 modcall[post-auth]: module "jradius" returns noop for request 0 modcall: leaving group REJECT (returns noop) for request 0 Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 8 to 192.168.2.151 port 1382 Waking up in 3 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 8 with timestamp 457dbde0 Nothing to do. Sleeping until we see a request _________________________________________________________________ 享用世界上最大的电子邮件系统― MSN Hotmail。 http://www.hotmail.com

1 0

Assertion failed in listen.c, line 621
by Guilherme Franco 11 Dec '06

11 Dec '06

Hello, Freeradius-snapshot-20061203 crashes, when running just "radiusd" with proxy ("radiusd -X" doesn't crash): It logs the following "Error: Assertion failed in listen.c, line 621", which is "rad_assert(request->proxy_listener == listener);" Thanks.

2 9

Re: Counter
by Sean 11 Dec '06

11 Dec '06

> > I can't understand why Max-Daily-Session is an unknown attribute > when > > it's declared in the radiusd.conf and radius loads with no errors. > > Because attributes are defined in the dictionaries. > > Arguably, the sqlcounter module should look up that attribute, and > either complain if it doesn't exist, or else create it. That doesn't > happen right now. > Okay, thanks Alan. Should I edit a dictionary file and if so which one? Regards, Sean

2 1

HELP WITH FREERADIUS AND DHCP3
by Tomas Eduardo Lotina Ramos 11 Dec '06

11 Dec '06

2 1

Fwd: SQL Counter
by Enrique Acosta 11 Dec '06

11 Dec '06

I have the same error message. Somebody adviced me that I have to download the latest release of freeradius . ---------- Forwarded Message ---------- Subject: SQL Counter Date: Monday 11 December 2006 02:04 pm From: Sean <sean(a)swarmhotspots.com> To: freeradius-users(a)lists.freeradius.org Hi, Sorry if this is a repeat. I'm not sure if an email I sent yesterday got through. Clearly I'm missing something simple here. I'm trying to create accounts that will renew on a daily or monthly basis. I've put this code into my radiusd.conf file to test daily renewals. $INCLUDE ${confdir}/sql.conf sqlcounter dailycounter { counter-name = Daily-Session-Time check-name = Max-Daily-Session sqlmod-inst = sql key = User-Name reset = daily query = "SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='%{%k}'" } I've created this account in the MySQL radcheck table. ropgis12 User-Password := gisnopum ropgis12 Simultaneous-Use:= 1 ropgis12 Max-Daily-Session := 1800 radiusd -X gives the following result. rlm_sql (sql): Reserving sql socket id: 0 rlm_sql: Failed to create the pair: Unknown attribute "Max-Daily-Session" rlm_sql (sql): Error getting data from database rlm_sql (sql): SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns fail for request 39 modcall: group authorize returns fail for request 39 I can't understand why Max-Daily-Session is an unknown attribute when it's declared in the radiusd.conf and radius loads with no errors. As usual any help would be appreciated. Sean Bracken - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------------------------------- -- Enrique Acosta Administrador de Red en Nodo Infosur Cfgos, Cuba Est modus in rebus Linux user # 391079 http://counter.li.org

1 0

Re: Simultaneous-Use doesn't work.
by Ernie Dunbar 11 Dec '06

11 Dec '06

> Hello Ernie, > > Just wondering if you are using clients.conf at all? Yup. The way you can tell is by running `freeradius -X`, like I did. You'll see a line like this: Config: including file: /etc/freeradius/clients.conf > I need to migrate > an older freeradius 0.9x to 1.2 and notice that the newer sql setup > uses an "nas" table that was not in the older setup. We used > clients.conf for the nas's and I'm trying to figure out how/if > clients.conf gets migrated to the nas table. Did you find any > pertinent docs? Nope. The best documentation I can find is the FreeRADIUS faq on the FreeRADIUS home page. And it's out of date in this matter. > > Friday, December 1, 2006, 2:46:04 PM, you wrote: > >> I'm using FreeRADIUS 1.0.2 and its associated mysql plugin on a Debian >> 3.1 >> system. I've managed to get the server working to where our customers >> are >> authenticating out of the mysql database just fine and the accounting >> records are being stored in mysql properly too. > >> But the Simultaneous-Use configuration directive doesn't do a thing. It >> doesn't even check against radwtmp (even though the radwho command works >> fine) when someone logs on. The FAQ at >> http://www.freeradius.org/faq/#4.7.2 doesn't help any either, in no >> small >> part because it's outdated and neither raddb/naslist nor radcheck.pl >> exist >> in the new version. I don't see anything about Simultaneous-Use being >> parsed when I run 'freeradius -X' however, so that might be a clue. > >> Here's the appropriate configuration on our server: > >> clients.conf: > >> client XXX.XXX.XXX.XXX { >> secret = XXXXXX >> nastype = cisco >> login = XXXXXX >> password = XXXXXX >> shortname = dialup >> } > >> users: > >> DEFAULT Framed-Protocol == PPP, Simultaneous-Use := 1 >> Framed-Protocol = PPP, >> Service-Type = Framed-User, >> Framed-Compression = Van-Jacobson-TCP-IP > >> And finally, the output of freeradius -X: > >> ns2:/etc/freeradius# /usr/sbin/freeradius -X >> Starting - reading configuration files ... >> reread_config: reading radiusd.conf >> Config: including file: /etc/freeradius/proxy.conf >> Config: including file: /etc/freeradius/clients.conf >> Config: including file: /etc/freeradius/snmp.conf >> Config: including file: /etc/freeradius/eap.conf >> Config: including file: /etc/freeradius/sql.conf >> main: prefix = "/usr" >> main: localstatedir = "/var" >> main: logdir = "/var/log/freeradius" >> main: libdir = "/usr/lib/freeradius" >> main: radacctdir = "/var/log/freeradius/radacct" >> main: hostname_lookups = no >> main: max_request_time = 30 >> main: cleanup_delay = 5 >> main: max_requests = 256 >> main: delete_blocked_requests = 0 >> main: port = 1812 >> main: allow_core_dumps = no >> main: log_stripped_names = yes >> main: log_file = "/var/log/freeradius/radius.log" >> main: log_auth = yes >> main: log_auth_badpass = yes >> main: log_auth_goodpass = yes >> main: pidfile = "/var/run/freeradius/freeradius.pid" >> main: user = "freerad" >> main: group = "freerad" >> main: usercollide = no >> main: lower_user = "no" >> main: lower_pass = "no" >> main: nospace_user = "after" >> main: nospace_pass = "after" >> main: checkrad = "/usr/sbin/checkrad" >> main: proxy_requests = off >> security: max_attributes = 200 >> security: reject_delay = 1 >> security: status_server = no >> main: debug_level = 0 >> read_config_files: reading dictionary >> read_config_files: reading naslist >> read_config_files: reading clients >> read_config_files: reading realms >> radiusd: entering modules setup >> Module: Library search path is /usr/lib/freeradius >> Module: Loaded exec >> exec: wait = yes >> exec: program = "(null)" >> exec: input_pairs = "request" >> exec: output_pairs = "(null)" >> exec: packet_type = "(null)" >> rlm_exec: Wait=yes but no output defined. Did you mean output=none? >> Module: Instantiated exec (exec) >> Module: Loaded expr >> Module: Instantiated expr (expr) >> Module: Loaded PAP >> pap: encryption_scheme = "crypt" >> Module: Instantiated pap (pap) >> Module: Loaded MS-CHAP >> mschap: use_mppe = yes >> mschap: require_encryption = no >> mschap: require_strong = no >> mschap: with_ntdomain_hack = no >> mschap: passwd = "(null)" >> mschap: authtype = "MS-CHAP" >> mschap: ntlm_auth = "(null)" >> Module: Instantiated mschap (mschap) >> Module: Loaded System >> unix: cache = no >> unix: passwd = "(null)" >> unix: shadow = "/etc/shadow" >> unix: group = "(null)" >> unix: radwtmp = "/var/log/freeradius/radwtmp" >> unix: usegroup = no >> unix: cache_reload = 600 >> Module: Instantiated unix (unix) >> Module: Loaded preprocess >> preprocess: huntgroups = "/etc/freeradius/huntgroups" >> preprocess: hints = "/etc/freeradius/hints" >> preprocess: with_ascend_hack = no >> preprocess: ascend_channels_per_line = 23 >> preprocess: with_ntdomain_hack = no >> preprocess: with_specialix_jetstream_hack = no >> preprocess: with_cisco_vsa_hack = no >> Module: Instantiated preprocess (preprocess) >> Module: Loaded files >> files: usersfile = "/etc/freeradius/users" >> files: acctusersfile = "/etc/freeradius/acct_users" >> files: preproxy_usersfile = "/etc/freeradius/preproxy_users" >> files: compat = "no" >> Module: Instantiated files (files) >> Module: Loaded SQL >> sql: driver = "rlm_sql_mysql" >> sql: server = "localhost" >> sql: port = "" >> sql: login = "dialupacct" >> sql: password = "d8271@#1" >> sql: radius_db = "dialupacct" >> sql: acct_table = "radacct" >> sql: acct_table2 = "radacct" >> sql: authcheck_table = "radcheck" >> sql: authreply_table = "radreply" >> sql: groupcheck_table = "radgroupcheck" >> sql: groupreply_table = "radgroupreply" >> sql: usergroup_table = "usergroup" >> sql: nas_table = "nas" >> sql: dict_table = "dictionary" >> sql: sqltrace = yes >> sql: sqltracefile = "/var/log/freeradius/sqltrace.sql" >> sql: readclients = no >> sql: deletestalesessions = yes >> sql: num_sql_socks = 5 >> sql: sql_user_name = "%{User-Name}" >> sql: default_user_profile = "" >> sql: query_on_not_found = no >> sql: authorize_check_query = "SELECT >> id,UserName,Attribute,Value,op FROM >> radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" >> sql: authorize_reply_query = "SELECT >> id,UserName,Attribute,Value,op FROM >> radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" >> sql: authorize_group_check_query = "SELECT >> radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op >> FROM radgroupcheck,usergroup WHERE usergroup.Username = >> '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName >> ORDER BY radgroupcheck.id" >> sql: authorize_group_reply_query = "SELECT >> radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op >> FROM radgroupreply,usergroup WHERE usergroup.Username = >> '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName >> ORDER BY radgroupreply.id" >> sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', >> AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), >> AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = >> '%{Acct-Delay-Time}' WHERE AcctSessionTime=0 AND AcctStopTime=0 AND >> NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" >> sql: accounting_update_query = "UPDATE radacct ? SET FramedIPAddress = >> '%{Framed-IP-Address}', ? AcctSessionTime = '%{Acct-Session-Time}', ? >> AcctInputOctets = '%{Acct-Input-Octets}', ? AcctOutputOctets = >> '%{Acct-Output-Octets}' ? WHERE AcctSessionId = '%{Acct-Session-Id}' ? >> AND UserName = '%{SQL-User-Name}' ? AND NASIPAddress= >> '%{NAS-IP-Address}'" >> sql: accounting_update_query_alt = "INSERT into radacct (AcctSessionId, >> AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, >> AcctStartTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, >> AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, >> ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay) >> values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', >> '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', >> '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + >> %{Acct-Delay-Time:-0}) SECOND), '%{Acct-Session-Time}', >> '%{Acct-Authentic}', '', '%{Acct-Input-Octets}', >> '%{Acct-Output-Octets}', >> '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Service-Type}', >> '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')" >> sql: accounting_start_query = "INSERT into radacct (AcctSessionId, >> AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, >> AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, >> ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, >> CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, >> FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) >> values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', >> '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', >> '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', >> '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', >> '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', >> '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" >> sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = >> '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = >> '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND >> UserName >> = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}'" >> sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', >> AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = >> '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', >> AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = >> '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE >> AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' >> AND NASIPAddress = '%{NAS-IP-Address}'" >> sql: accounting_stop_query_alt = "INSERT into radacct (AcctSessionId, >> AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, >> AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, >> ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, >> CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, >> FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) >> values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', >> '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', >> '%{NAS-Port-Type}', DATE_SUB('%S', INTERVAL (%{Acct-Session-Time:-0} + >> %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', >> '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', >> '%{Acct-Output-Octets}', '%{Called-Station-Id}', >> '%{Calling-Station-Id}', >> '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', >> '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" >> sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE >> UserName='%{SQL-User-Name}'" >> sql: connect_failure_retry_delay = 60 >> sql: simul_count_query = "SELECT COUNT(*) FROM radacct WHERE >> UserName='%{SQL-User-Name}' AND AcctStopTime = 0" >> sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, >> NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, >> FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND >> AcctStopTime = 0" >> sql: postauth_table = "radpostauth" >> sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, >> date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', >> '%{reply:Packet-Type}', NOW())" >> sql: safe-characters = >> "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" >> rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and >> linked >> rlm_sql (sql): Attempting to connect to dialupacct@localhost:/dialupacct >> rlm_sql (sql): starting 0 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 >> rlm_sql_mysql: Starting connect to MySQL server for #0 >> rlm_sql (sql): Connected new DB handle, #0 >> rlm_sql (sql): starting 1 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 >> rlm_sql_mysql: Starting connect to MySQL server for #1 >> rlm_sql (sql): Connected new DB handle, #1 >> rlm_sql (sql): starting 2 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 >> rlm_sql_mysql: Starting connect to MySQL server for #2 >> rlm_sql (sql): Connected new DB handle, #2 >> rlm_sql (sql): starting 3 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 >> rlm_sql_mysql: Starting connect to MySQL server for #3 >> rlm_sql (sql): Connected new DB handle, #3 >> rlm_sql (sql): starting 4 >> rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 >> rlm_sql_mysql: Starting connect to MySQL server for #4 >> rlm_sql (sql): Connected new DB handle, #4 >> Module: Instantiated sql (sql) >> Module: Loaded realm >> realm: format = "suffix" >> realm: delimiter = "@" >> realm: ignore_default = no >> realm: ignore_null = no >> Module: Instantiated realm (suffix) >> Module: Loaded detail >> detail: detailfile = >> "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d" >> detail: detailperm = 384 >> detail: dirperm = 493 >> detail: locking = no >> Module: Instantiated detail (detail) >> Module: Loaded radutmp >> radutmp: filename = "/var/log/freeradius/radutmp" >> radutmp: username = "%{User-Name}" >> radutmp: case_sensitive = yes >> radutmp: check_with_nas = yes >> radutmp: perm = 384 >> radutmp: callerid = yes >> Module: Instantiated radutmp (radutmp) >> Module: Loaded eap >> eap: default_eap_type = "md5" >> eap: timer_expire = 60 >> eap: ignore_unknown_eap_types = no >> eap: cisco_accounting_username_bug = no >> rlm_eap: Loaded and initialized type md5 >> rlm_eap: Loaded and initialized type leap >> gtc: challenge = "Password: " >> gtc: auth_type = "PAP" >> rlm_eap: Loaded and initialized type gtc >> mschapv2: with_ntdomain_hack = no >> rlm_eap: Loaded and initialized type mschapv2 >> Module: Instantiated eap (eap) >> Listening on authentication *:1812 >> Listening on accounting *:1813 >> Ready to process requests. > >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html > >

2 1

SQL Counter
by Sean 11 Dec '06

11 Dec '06

Hi, Sorry if this is a repeat. I'm not sure if an email I sent yesterday got through. Clearly I'm missing something simple here. I'm trying to create accounts that will renew on a daily or monthly basis. I've put this code into my radiusd.conf file to test daily renewals. $INCLUDE ${confdir}/sql.conf sqlcounter dailycounter { counter-name = Daily-Session-Time check-name = Max-Daily-Session sqlmod-inst = sql key = User-Name reset = daily query = "SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='%{%k}'" } I've created this account in the MySQL radcheck table. ropgis12 User-Password := gisnopum ropgis12 Simultaneous-Use:= 1 ropgis12 Max-Daily-Session := 1800 radiusd -X gives the following result. rlm_sql (sql): Reserving sql socket id: 0 rlm_sql: Failed to create the pair: Unknown attribute "Max-Daily-Session" rlm_sql (sql): Error getting data from database rlm_sql (sql): SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 0 modcall[authorize]: module "sql" returns fail for request 39 modcall: group authorize returns fail for request 39 I can't understand why Max-Daily-Session is an unknown attribute when it's declared in the radiusd.conf and radius loads with no errors. As usual any help would be appreciated. Sean Bracken

1 0