- Freeradius-Users - lists.freeradius.org

Discarding new rquests and CPU eats 99.9%
by Cihan DEMİR 10 Nov '06

10 Nov '06

Hi all, We're using 0.9.3 version on RedHat. I start radius in normal mode then it start to eat 99.9% of CPU and produce error messages : ..... Thu Nov 9 14:52:16 2006 : Error: Discarding new request from client turkcell:4166 - ID: 14 due to live request 26387 Thu Nov 9 14:52:16 2006 : Error: Discarding new request from client turkcell:4166 - ID: 55 due to live request 26386 ..... But, when i start in debug mode with -X parameter, it doesn't eat 99.9% of CPU and runs normally. Any comment? Thanks in advance. Cihan. -------------------------------------------------------------------------------- Omsan'in sundugu hizmetleri nasil degerlendiriyorsunuz? Görüsleriniz bizim için degerli. Aldiginiz hizmetin beklentilerinizi ve ihtiyaçlarinizi ne ölçüde karsiladigi konusunda benimle irtibata geçebilir veya pazarlama(a)omsan.com.tr, musteridestek(a)omsan.com.tr veya innovate(a)omsan.com.tr adreslerine e-mail gönderebilirsiniz. How do you evaluate the services of Omsan? Your opinions are valuable for us. You can contact me or send an e-mail to , pazarlama(a)omsan.com.tr, musteridestek(a)omsan.com.tr or innovate(a)omsan.com.tr to inform us about the extent to which the services provided fulfill your expectations and needs. -------------------------------------------------------------------------------- Bu e-posta mesaji kisiye özel olup, gizli bilgiler içeriyor olabilir. Eger bu e-posta mesaji size yanlislikla ulasmissa, içerigini hiç bir sekilde kullanmayiniz ve ekli dosyalari açmayiniz. Bu durumda lütfen e-posta mesajini kullaniciya hemen geri gönderiniz ve tüm kopyalarini mesaj kutunuzdan siliniz. Bu e-posta mesaji, hiç bir sekilde, herhangi bir amaç için çogaltilamaz, yayinlanamaz ve para karsiligi satilamaz. Bu e-posta mesaji virüslere karsi anti-virüs sistemleri tarafindan taranmistir. Ancak yollayici, bu e-posta mesajinin - virüs koruma sistemleri ile kontrol ediliyor olsa bile - virüs içermedigini garanti etmez ve meydana gelebilecek zararlardan dogacak hiçbir sorumlulugu kabul etmez. This message is intended solely for the use of the individual or entity to whom it is addressed, and may contain confidential information. If you are not the intended recipient of this message or you receive this mail in error, you should refrain from making any use of the contents and from opening any attachment. In that case, please notify the sender immediately and return the message to the sender, then, delete and destroy all copies. This e-mail message, can not be copied, published or sold for any reason. This e-mail message has been swept by anti-virus systems for the presence of computer viruses. In doing so, however, sender cannot warrant that virus or other forms of data corruption may not be present and do not take any responsibility in any occurrence.

3 2

sync hungroups, clients files, users across multiple servers
by Charles Tompkins 10 Nov '06

10 Nov '06

Greets! What is a good way or considered best practice for folks to sync changes to critical files in use by radius like huntgroups and clients.conf and users across multiple RADIUS servers. I am not using MySQL backend, but rather relaying requests for auth off to PAM which checks against a samba/NT-Domain, thus the user account existing locally on the server. With several servers it becomes a PIA and can lead to misconfiguration errors due to human data entry when you have to enter everything into each server. Does anyone want to share a script they have written to do this? Thanks! -Charles ------------ Master timed out! Holding election... I am declaring myself the master! CONFIDENTIAL NOTICE: This email including any attachments, contains confidential information belonging to the sender. It may also be privileged or otherwise protected by work product immunity or other legal rules. This information is intended only for the use of the individual or entity named above. If you are not the intended recipient, you are hereby notified that any disclosure, copying, distribution or the taking of any action in reliance on the contents of this emailed information is strictly prohibited. If you have received this email in error, please immediately notify us by reply email of the error and then delete this email immediately.

2 1

help configureing a proxium Tsunami MP.11 5054-R and free radius
by Cameron Cowie 10 Nov '06

10 Nov '06

Hi: really simple question here... in my user file I have 0020A666B9E6 Auth-Type := local, User-Password :="qwerty1" in my clients.conf file I have client 172.16.20.18 { secret = qwerty1 shortname = base } my show system on the Tsunami is System Name :base System Mode :bridge Descriptor :Tsunami MP.11 5054-R v2.3.0(169) SN-06UT30570483 Location :<BLANKED OUT by ME> Contact Name :xxxxxx Contact Email :info@xxx.xx Contact Number :+xxx xx xxxx Up Time (DD:HH:MM:SS) :0:0:46:6 System OID :1.3.6.1.4.1.11898.2.4.9 Ethernet MAC Address :00:20:A6:66:B9:E6 Country :ZA System Flash Backup Interval :120 Device HW Type :Outdoor now when I reboot the modem I get the following error when I do a radius -XX Waking up in 31 seconds... Thread 1 got semaphore Thread 1 handling request 0, (1 handled so far) User-Name = "0020a6-66b9e6" User-Password = "qwerty1" NAS-IP-Address = 172.16.20.18 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "0020a6-66b9e6", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 modcall[authorize]: module "files" returns notfound for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [0020a6-66b9e6/qwerty1] (from client base port 0) Delaying request 0 for 1 seconds Finished request 0 Going to the next request Thread 1 waiting to be assigned a request rad_recv: Access-Request packet from host 172.16.20.18:6001, id=1, length=65 Sending Access-Reject of id 1 to 172.16.20.18 port 6001 --- Walking the entire request list --- Cleaning up request 0 ID 1 with timestamp 455489dd Nothing to do. Sleeping until we see a request. Now what am I doing wrong? Please any and all help is greatly appreciated Cameron

2 1

Reject reason
by Jørn Kostøl Gundersen 10 Nov '06

10 Nov '06

I am authenticating users based on Calling-Station-Id in addition to password. All accepts and rejects are logged to the postauth table in my database. But I cannot see why the user got rejected, if it was wrong Calling-Station-Id or wrong password. Any ideas? Cheers, Jørn

2 1

FreeRadius 1.1.3 and PHPMyPrepaid
by Michelle Manning 10 Nov '06

10 Nov '06

I was wondering if anyone has worked the two of these together happily? I've managed to get Radius configured and running (Thanks guys!). But I can't login with a phpmyprepaid user - If I create my own user (very simplistic) it works, with no worries, otherwise the user is rejected because of a value in the database. Here is an example of the database records. radcheck is the table. The create table statement is as follows: CREATE TABLE `radcheck` ( `id` int(11) unsigned NOT NULL auto_increment, `UserName` varchar(64) NOT NULL default '', `FirstName` varchar(40) NOT NULL default '', `LastName` varchar(40) NOT NULL default '', `CustID` varchar(5) NOT NULL default '', `Attribute` varchar(32) NOT NULL default '', `op` char(2) NOT NULL default '==', `Value` varchar(253) NOT NULL default '', `CrDate` timestamp NOT NULL default '0000-00-00 00:00:00', `creator` varchar(20) default 'NULL', `Location` smallint(4) default '0', `activated` smallint(4) NOT NULL default '0', `activeDate` timestamp NOT NULL default '0000-00-00 00:00:00', `status` smallint(4) NOT NULL default '0', `rate` smallint(4) NOT NULL default '1', `Type` varchar(50) NOT NULL default '', `BillingPlan` smallint(4) NOT NULL default '0', `TimeToFinish` smallint(1) NOT NULL default '0', PRIMARY KEY (`id`), KEY `UserName` (`UserName`(32)) ) ENGINE=MyISAM DEFAULT CHARSET=latin1 AUTO_INCREMENT=67 ; id 1 works - username michelle, id 2 fails and the reason given when running radiusd -X is that it doesn't recognize Max-All-Session. Have I missed something in the configuration that would set that up for me? Or am I whistling up a tree trying to get phpmyprepaid to work? I will admit that it wasn't pleasant getting oddities to work for me in phpmyprepaid, there were a lot of little things in the code that drove me bonkers.... I am also using DD-WRT on a Linksys, Chillispot, and FreeRadius1.1.3 on CentOS. INSERT INTO `radcheck` (`id`, `UserName`, `FirstName`, `LastName`, `CustID`, `Attribute`, `op`, `Value`, `CrDate`, `creator`, `Location`, `activated`, `activeDate`, `status`, `rate`, `Type`, `BillingPlan`, `TimeToFinish`) VALUES (*1, 'michelle', 'michelle', 'manning', '1', 'Password', ':=', 'michelle', '0000-00-00 00:00:00', 'NULL', 0, 0, '0000-00-00 00:00:00', 0, 1, '', 0, 0)*, (2, 'tansel6', '', 'tansel6', '', 'Password', ':=', 'tansel6', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (3, 'tansel6', '', 'tansel6', '', 'Simultaneous-Use', ':=', '1', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (4, 'tansel6', '', 'tansel6', '', '*Max-All-Session*', ':=', '1800', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (5, 'tansel6', '', 'tansel6', '', 'WISPr-Location-ID', ':=', '1', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0), (6, 'tansel6', '', 'tansel6', '', 'Expiration', ':=', '09 May 2007 00:00:00', '2006-11-09 16:01:52', 'admin', 1, 0, '0000-00-00 00:00:00', 0, 1, 'Hourly', 1, 0),

1 0

dialup_admin+ldap+sql
by jerrrry＠voila.fr 10 Nov '06

10 Nov '06

Hi, I saw that dialup_admin can use ldap or SQL to manage users. I'd like to know if i can, using dialup-admin: 1- authenticate users with ldap and add in the radius server answer per user attributes that are stored in my sql DB. 2- authenticate users with ldap and add in the radius server answer attributes depending on the nas hintgroups and ldap-group. i already did this with freeradius users configuration file and now i'd like to add new users or default users using only a GUI: see my users file: Robert Auth-Type = LDAP service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=1" DEFAULT Ldap-Group == "ou=admin,ou=groupe,dc=company,dc=com", Huntgroup-Name == "alphen" service-Type = NAS-Prompt-User, cisco-avpair = "shell:priv-lvl=15" thank you for your help Thomas

1 0

networkaddresses in huntgroupfile
by Hans Bornemann 10 Nov '06

10 Nov '06

Hi, is there a way to define networks in the huntgroupfile, something like name == 10.0.0.1/24 Hans -- Hans Bornemann Universitaet Dortmund - Hochschulrechenzentrum Tel. ++49 231 755 2132 Fax. ++49 231 755 2731

1 0

rlm_sql multiple instances handling of
by Graeme Hinchliffe 10 Nov '06

10 Nov '06

Hi, I have a problem where I need a lot of threads to catch accounting data, a lot of threads means a lot of DB handles. Alas this means more than 256 db handles which is the limit for rlm_sql. My thoughts therefore was to instantiate multiple rlm_sql modules to increase the number of db handles availible. However I am wondering on how to now use this. This system is purely for accounting. If I say put in the accounting stanza: sql1 sql2 sqln Will the accounting packet be sent to all sql instanses in turn, or just the 1st one that succeeds ? and then not any further ? Will a "no free db handles" error from sql1 lead to sql2 being attempted ? Thanks in advance ----- Graeme Hinchliffe (BSc) Core Systems Designer Zen Internet (http://www.zen.co.uk/) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005

1 0

Queries apear in Dialup_admin page
by CASTANHEIRA, Nuno Osvaldo 10 Nov '06

10 Nov '06

Hi, i have a strange problem in my freeradius with dialup_admin interface. When i choose the fields, statistics, user statistics, online users, radius clients .....etc, the queries apear in Dialup_Admin page............... very strange. Can anyone tell me what i´m i doing wrong. Sorry for my english. Thanks. Nuno Castanheira REFERTELECOM E-mail: nocastanheira(a)refertelecom.pt

3 4

howto get/send the fullname of an user
by Ariel VIVES 09 Nov '06

09 Nov '06

Hello the list, I'm starting with freeradius. Authentication works fine ! But the informations I get is only the username (le login name in /etc/passwd). How do I get the Fullname ? Or others informations (like mail, home directory, ...) Is it possible ? is it a configuration of the server or a request from the client ? thanks for your help -- Ariel

4 9