- Freeradius-Users - lists.freeradius.org

Re: How to configure multi nas
by Peter Nixon 18 Oct '06

18 Oct '06

On Wed 18 Oct 2006 12:19, Enkhbat.N wrote: > Hi All > > > > I have those problems. Please help to solve the problems > > > > 1. How to configure many NASes on one RADIUS? > 2. How to setting user's connection NAS. > > Example Special users are connected on Primary NAS and other users are > connected on Secondary NAS. Please read the documentation (http://wiki.freeradius.org/ is a good place to start). If you still can't figure it out youself then ask for help on the users list.. NOT this list. Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 0

FreeRADIUS user Survey
by Alan DeKok 18 Oct '06

18 Oct '06

In order to better understand the needs of people using FreeRADIUS, I've set up a survey with 12 questions. The goal is to understand who's using FreeRADIUS, how they're using it, and what the users needs are. The page is: http://gs-survey.com/s.asp?s=1651 Please take a few minutes to fill out the survey, and I'll be posting a summary of the responses here. I expect to have a few more surveys after this one, to be able to target future development. Thanks for your efforts in supporting FreeRADIUS. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

9 14

Re: problem with proxy configuration
by Prabhdeep Singh 18 Oct '06

18 Oct '06

Hi Alan, Thanks for the response. > It looks like you've configured the server to proxy to itself. Why? > I do understand your technical objection of doing what I am doing, but I have a valid application reson, which is that I support multiple realms on this particular radius server. For some realms, I want the UserName to strip the Realm name ("nostrip") and for some I don't.... Is there any other way to achieve the same than not using "striop" and "nostrip" flag in proxy.conf Thanks again for your comments. Prabh -- MyBlog: http://things-on-my-mind.blogspot.com/ Get your news at www.DailyHeadlines.NET

3 3

Module detach function behavior
by Nicolas Castel 18 Oct '06

18 Oct '06

Hi all, I'd like to know the behavior of the detach module function. That is what happens when some threads are running and using an instance of a module and that the server must be stopped or reloaded ? Does FreeRADIUS waits for threads to terminate their job before calling the module detach function or are they killed before they have terminated ? Thanks

2 1

RE: cisco-accounting do not work. what i miss?
by Paloma Munoz 18 Oct '06

18 Oct '06

I answer my own question: There are not problem. This was my accounting port.

1 0

How to create my own module in Freeradius !!!
by Vineet.Asati＠t-systems.com 18 Oct '06

18 Oct '06

Hi Techies, I am a new bie to freeradius fraternity. So grasping lot of things from this mailing list ;) I want to write my own module (which have a .c file prints out "Hello World" to a file). Would any of you please tell me on how can i do this. What all configurations are required? I am using Freeradius-1.1.3 server version. Regards Vineet

3 2

MySQL failover
by Brad McAllister 17 Oct '06

17 Oct '06

Sorry for all my questions lately. I think I have my setup almost complete. I am now stuck on the DB failover. I have read through the documents located here: http://wiki.freeradius.org/Fail-over but am still stuck. I have two mysql servers. If I shutdown mysql on sql1, it fails over to sql2 instantly. However, if i pull the ethernet plug on sql,1 freeradius appears to just be sitting and waiting to connect to sql1. This is what the console outputs: rlm_sql (sql1): Reserving sql socket id: 0 If I kill radius and start it up with sql1 disconnected it will failover instantly to sql2. Once I connect and then disconnect sql1 it starts hanging again. Has anyone else experienced this? Below are some snippets from my radius.conf: $INCLUDE ${confdir}/sql1.conf $INCLUDE ${confdir}/sql2.conf sql sql1 { } sql sql2 { } always handled { rcode = handled } authorize { suffix preprocess group { sql1 { fail = 1 notfound = 1 noop = 2 ok = return updated = 3 reject = return userlock = 4 invalid = 5 handled = 6 } sql2 { fail = 1 notfound = return noop = 2 ok = return updated = 3 reject = return userlock = 4 invalid = 5 handled = 6 } } -- Brad McAllister bmcallister(a)noc.dls.net

1 0

Re: Pam radius authentication
by danieldinu＠rdslink.ro 17 Oct '06

17 Oct '06

Hi! if you are reffering to this line: "account required pam_radius_auth.so debug" than here is the explanation: "The pam configuration can be: ... auth sufficient /lib/security/pam_radius_auth.so [options] ... account sufficient /lib/security/pam_radius_auth.so" (this is taken from http://www.freeradius.org/pam_radius_auth/USAGE) On the other hand, I don't care if I don't use this module for accounting. As a matter of fact, I tried in many configurations, even without using it for accounting. The main concern is to succed in authetincating the users!!! if anyone can help me accomplish that, I would be happy and I will not mind about accounting... > >Hi, > >> I don't understand why you are saying that "you are invoking pam_radius_auth in the wrong place and for the wrong reason"...please, be more specific and if you know the right configuration, enlight me! >> >> >> >#%PAM-1.0 >> >> >auth required pam_securetty.so >> >> >auth sufficient pam_radius_auth.so debug >> >> >auth required /lib/security/pam_unix_auth.so >> >> >account required pam_radius_auth.so debug > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > >explain > >alan >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

RE: Securew2
by Tom Rixom 17 Oct '06

17 Oct '06

Hi All, We had a mess up with our DNS provider, moved it to our own hosted DNS. :) > the DNS has been messed up severely. though the WHOIS still is correct. > See above. > the software has been sold to a new owner.... Vista needs a good > supplicant. > Nope, but thanks for the compliment... I think.. ;) > bought out by a competitor and removed from the market. though this > would be interesting regarding its licence.... > Nope... > new version coming soon and they pulled old version prematurely In the pipeline. Regards, Tom Rixom > -----Oorspronkelijk bericht----- > Van: freeradius-users-bounces+tom.rixom=alfa- > ariss.com(a)lists.freeradius.org [mailto:freeradius-users- > bounces+tom.rixom=alfa-ariss.com(a)lists.freeradius.org] Namens > A.L.M.Buxey(a)lboro.ac.uk > Verzonden: donderdag 12 oktober 2006 17:21 > Aan: FreeRadius users mailing list > Onderwerp: Re: Securew2 > > Hi, > > Hi to all, > > anybody know what's happening to securew2 site? > > It is down from a few of week ago. > > > > Does it disappeared? > > some of us have noticed and wondered the same thing. I've resorted to > currently hosting the file for local downloads and will continue to > do so until I know whats up. (there are many other sites where is can > be publically downloaded!) > > speculation: > > the DNS has been messed up severely. though the WHOIS still is correct. > > the software has been sold to a new owner.... Vista needs a good > supplicant. > > bought out by a competitor and removed from the market. though this > would be interesting regarding its licence.... > > new version coming soon and they pulled old version prematurely > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html

1 0

Re: Pam radius authentication
by danieldinu＠rdslink.ro 17 Oct '06

17 Oct '06

First of all, thank you for your reply. Until now, you are the only one. Now, let's take it step by step: This is a part of INSTALL: ********************************************************************** Redhat Linux > 5.0 ********************************************************************** make. Copy 'pam_radius_auth.so' to /lib/security/pam_radius_auth.so In the per-application configuration (/etc/pam.d/application) add: auth sufficient /lib/security/pam_radius_auth.so AFTER auth required /lib/security/pam_securetty.so and BEFORE auth required /lib/security/pam_unix_auth.so i.e. auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_radius_auth.so auth required /lib/security/pam_unix_auth.so My linux is RedHat 9, so this part pertains to my machine : "Redhat Linux > 5.0" "make. Copy 'pam_radius_auth.so' to /lib/security/pam_radius_auth.so" - already did... "In the per-application configuration (/etc/pam.d/application) add:" - I want to use pam radius to authenticate ssh logins, so "(/etc/pam.d/application)" becomes "/etc/pam.d/sshd" "auth required pam_securetty.so auth sufficient pam_radius_auth.so debug auth required /lib/security/pam_unix_auth.so" -this part from INSTALL is identical to my /etc/pam.d/sshd...all of this modules deal with authentication ("auth"). pam_securetty verifies if root can login through tty by reading /etc/securetty. "required" means that this step is mandatory and that after this verification, the next authentication method will take place. this is where pam_radius_auth comes. the messages are exchanged as explained in my my previuos e-mail. "sufficient" means that if this authentication succeeds, the following authentication methods will not be checked...in other terms: "auth required /lib/security/pam_unix_auth.so" will be passed. I don't understand why you are saying that "you are invoking pam_radius_auth in the wrong place and for the wrong reason"...please, be more specific and if you know the right configuration, enlight me! Again, any help would be appreciated! > >Hi, > >> anyone??? pls!!! no suggestions at all ? :( > >I'd read the INSTALL doc that coems as part of the pam_radius >tool. > >> > - cat /etc/pam.d/sshd >> >#%PAM-1.0 >> >auth required pam_securetty.so >> >auth sufficient pam_radius_auth.so debug >> >auth required /lib/security/pam_unix_auth.so >> >account required pam_radius_auth.so debug >> >password required pam_stack.so service=system-auth >> >session required pam_stack.so service=system-auth >> >session required pam_limits.so >> >session optional pam_console.so > >no. your invoking pam_radius_auth in the wrong place and for the wrong reason. >again the INSTALL is your friend. > > >your radius configuration appears to be correct > >alan >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1