- Freeradius-Users - lists.freeradius.org

Re: only work with 5 users or clients
by Tom Miller 04 Oct '06

04 Oct '06

Thank you so much for respond to my issues. I think you are right. I am missing something on the Cisco 7204 but I don't now what it is. I have captured debug log files from both radius and Cisco. Please let me know if you want me to post them. *****Here is what I have for our cisco 7204.******** aaa new-model aaa authentication login default local aaa authentication login console enable aaa authentication login telnet line aaa authentication ppp default group radius local aaa authorization network default group radius local aaa accounting delay-start aaa accounting nested aaa accounting exec default start-stop group radius aaa accounting network default start-stop group radius enable secret 5 $1$xxxxxxxxxxxxxxxxxxxxxx/ vpdn enable vpdn aaa override-server 172.17.17.17 ! radius-server host 172.17.17.17 auth-port 1645 acct-port 1646 **** Here is one of our users profile (users file) **** campbell Auth-Type := Local, User-Password == "1etelrx23" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = x.x.172.7, Framed-IP-Netmask = 255.255.255.128, Framed-MTU = 1492 # DEFAULT Service-Type == Framed-User Framed-IP-Address = 255.255.255.254, Framed-MTU = 1492, Service-Type = Framed-User, Framed-Protocol = PPP, MS-Primary-DNS-Server = x.x.230.195, MS-Secondary-DNS-Server = x.x.230.196, Session-Timeout = 86400 What am I missing? Thanks, Tom ---- Original message ---- >Date: Mon, 02 Oct 2006 09:18:59 +1000 >From: James Wakefield <jamesw(a)deakin.edu.au> >Subject: Re: only work with 5 users or clients >To: tom(a)hostwebase.com, FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> > >Tom Miller wrote: >> I have a 7204 (12.0(22)S1) terminating DSL L2TP VPDN and >> freeradius ( 1.0.4) >> >> I am having problem when number of users (clients) >> increase from 6 and up. >> >> It worked fine when I have only 5 users (clients) using >> the system. >> >> >> I found the max_requests was set at 1024 in radiusd.conf and >> have inscrease the number up to 50 clients (50x256=12800) >> >> max_requests = 12800 >> >> >> >> However, It doesn't seem to have any effect. What am I doing >> wrong. >> >> >> One things I noticed. The two users that can not connect >> will sent incomplete information >> to the radius server from NAS (7204) such as: >> >> >> Waking up in 6 seconds... >> rad_recv: Access-Request packet from host 192.168.17.1:1645, >> id=200, length=95 >> NAS-IP-Address = 192.168.17.1 >> NAS-Port = 3 >> NAS-Port-Type = ISDN >> User-Name = "knguyen(a)abc.net" >> CHAP-Password = 7482c25ab08ffsddfddc0625fcb4007e >> Service-Type = Framed-User >> Framed-Protocol = PPP >> >> auth: user supplied CHAP-Password matches local User- Password >> Sending Access-Accept of id 200 to 192.168.17.1:1645 >> Service-Type = Framed-User >> Framed-Protocol = PPP >> Framed-IP-Address = 209.101.222.12 >> Framed-IP-Netmask = 255.255.255.128 >> Framed-MTU = 1492 >> Finished request 16 >> Going to the next request >> >> >> >> >> *********** This is a log when it connected. It included >> the Tunnel server and client end point ********* >> >> >> >> rad_recv: Accounting-Request packet from host >> 192.168.17.1:1646, id=199, length=232 >> NAS-IP-Address = 192.168.17.1 >> NAS-Port = 6 >> NAS-Port-Type = ISDN >> User-Name = "knguyen(a)abc.net" >> Acct-Status-Type = Stop >> Acct-Authentic = RADIUS >> Service-Type = Framed-User >> Acct-Session-Id = "00000CD8" >> Framed-Protocol = PPP >> Tunnel-Server-Endpoint:0 = "10.10.6.5" >> Tunnel-Client-Endpoint:0 = "10.10.6.6" >> Tunnel-Type:0 = L2TP >> Tunnel-Client-Auth-Id:0 = "12345678" >> Tunnel-Server-Auth-Id:0 = "sfldse26rr.wi.AADS" >> Acct-Tunnel-Connection = "13441125" >> Framed-IP-Address = 209.101.222.12 >> Acct-Terminate-Cause = Admin-Reset >> Acct-Input-Octets = 281672 >> Acct-Output-Octets = 266074 >> Acct-Input-Packets = 4390 >> Acct-Output-Packets = 4154 >> Acct-Session-Time = 1967 >> Acct-Delay-Time = 0 >> Processing the preacct section of radiusd.conf >> > >This is an accounting stop record, as opposed to the access accept >record you display above and below. It isn't necessarily indicative of >what freeradius sent to the NAS, or anything else that happened when the >client connected. > >> --- Walking the entire request list --- >> Waking up in 6 seconds... >> rad_recv: Access-Request packet from host 172.17.17.1:1645, >> id=200, length=95 >> NAS-IP-Address = 172.17.17.1 >> NAS-Port = 3 >> NAS-Port-Type = ISDN >> User-Name = "knguyen(a)eintegration.net" >> CHAP-Password = 0xcc3aeb78c7482c25ab08dc0625fcb4007e >> Service-Type = Framed-User >> Framed-Protocol = PPP >> >> auth: user supplied CHAP-Password matches local User- Password >> Sending Access-Accept of id 200 to 172.17.17.1:1645 >> Service-Type = Framed-User >> Framed-Protocol = PPP >> Framed-IP-Address = 38.101.172.12 >> Framed-IP-Netmask = 255.255.255.128 >> Framed-MTU = 1492 >> Finished request 16 >> Going to the next request >> >> >> What am I missing here? > >How are you authenticating and authorizing your users? users file, some >sort of database or directory? Could you send some relevant excerpts >from those sources, eg: some users file stanzas if you're using the >users file, objects from your LDAP directory in LDIF if you're using LDAP? > >My hunch is that freeradius isn't configured to send the necessary >attributes and your NAS is defaulting those attributes, but can't do >that for more than 5 concurrent users. Unless you're observing >considerable delay between the receipt of access-request and the sending >of access-accept (ie: more than a couple of seconds), or freeradius is >sending different attributes with the access-accept for the same user >when things seem to be going wrong to when they're going right, I think >you're missing some attributes or your NAS is misconfigured or both. > > >Cheers, >-- >James Wakefield, >Unix Administrator, Information Technology Services Division >Deakin University, Geelong, Victoria 3217 Australia. > >Phone: 03 5227 8690 International: +61 3 5227 8690 >Fax: 03 5227 8866 International: +61 3 5227 8866 >E-mail: james.wakefield(a)deakin.edu.au >Website: http://www.deakin.edu.au

1 0

WPA problem
by Giuseppina Venezia 03 Oct '06

03 Oct '06

Hello all, I've chillispot + freeradius (with openldap), with chillispot in proxy mode. I use WPA Enterprise and when I try to connect a client using WPA the client can't connect but apparently freeradius give no error. (without WPA all work perfectly). I attach you full log of freeradius and chillispot, if you can give me some help i'll be grate. Hope you can help me. My freeradius log: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:1027, id=0, length=125 User-Name = "prof1" EAP-Message = 0x0200000a0170726f6631 Message-Authenticator = 0x862370a8c24c3cc15e9b7f7687d06281 Calling-Station-Id = "00-17-F2-44-11-C2" Called-Station-Id = "00-50-BF-E3-E8-2A" NAS-Port-Type = Wireless-802.11 NAS-Port = 2 NAS-IP-Address = 0.0.0.0 NAS-Identifier = "localhost" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "prof1", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 0 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry DEFAULT at line 154 rlm_ldap: Entering ldap_groupcmp() radius_xlat: 'ou=mydepartment,dc=mydomain,dc=it' radius_xlat: '(uid=prof1)' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to localhost:389, authentication 0 rlm_ldap: bind as cn=Manager,dc=mydomain,dc=it/PASSWORD to localhost:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: performing search in ou=mydepartment,dc=mydomain,dc=it, with filter (uid=prof1) rlm_ldap: ldap_release_conn: Release Id: 0 radius_xlat: '(|(&(objectClass=GroupOfNames)(member=cn\3dMaurizio Costanzo\2cou\3dfaculty\2cou\3ddspsa\2cou\3dmydepartment\2cdc\3dmydomain\2cdc\3dit))(&(objectClass=GroupOfUniqueNames)(uniquemember=cn\3dMaurizio Costanzo\2cou\3dfaculty\2cou\3ddspsa\2cou\3dmydepartment\2cdc\3dmydomain\2cdc\3dit)))' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=mydepartment,dc=mydomain,dc=it, with filter (&(cn=professor)(|(&(objectClass=GroupOfNames)(member=cn\3dMaurizio Costanzo\2cou\3dfaculty\2cou\3ddspsa\2cou\3dmydepartment\2cdc\3dmydomain\2cdc\3dit))(&(objectClass=GroupOfUniqueNames)(uniquemember=cn\3dMaurizio Costanzo\2cou\3dfaculty\2cou\3ddspsa\2cou\3dmydepartment\2cdc\3dmydomain\2cdc\3dit)))) rlm_ldap: object not found or got ambiguous search result rlm_ldap: ldap_release_conn: Release Id: 0 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in cn=Maurizio Costanzo,ou=faculty,ou=dspsa,ou=mydepartment,dc=mydomain,dc=it, with filter (objectclass=*) rlm_ldap::ldap_groupcmp: User found in group professor rlm_ldap: ldap_release_conn: Release Id: 0 users: Matched entry DEFAULT at line 176 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for prof1 radius_xlat: '(uid=prof1)' radius_xlat: 'ou=mydepartment,dc=mydomain,dc=it' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: performing search in ou=mydepartment,dc=mydomain,dc=it, with filter (uid=prof1) rlm_ldap: checking if remote access for prof1 is allowed by userPassword rlm_ldap: Added password a in check items rlm_ldap: looking for check items in directory... rlm_ldap: Adding radiusGroupName as Ldap-Group, value professor & op=21 rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value 00-05-5D-25-12-5B & op=21 rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value 00-02-C7-8F-A0-16 & op=21 rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value 00-0B-6B-4A-22-E8 & op=21 rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id, value 00-17-F2-44-11-C2 & op=21 rlm_ldap: Adding userPassword as User-Password, value a & op=21 rlm_ldap: looking for reply items in directory... rlm_ldap: user prof1 authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns ok for request 0 rlm_checkval: Item Name: Calling-Station-Id, Value: 00-17-F2-44-11-C2 rlm_checkval: Value Name: Calling-Station-Id, Value: 00-05-5D-25-12-5B rlm_checkval: Value Name: Calling-Station-Id, Value: 00-02-C7-8F-A0-16 rlm_checkval: Value Name: Calling-Station-Id, Value: 00-0B-6B-4A-22-E8 rlm_checkval: Value Name: Calling-Station-Id, Value: 00-17-F2-44-11-C2 modcall[authorize]: module "checkval" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group authenticate (returns handled) for request 0 Sending Access-Challenge of id 0 to 127.0.0.1 port 1027 Service-Type == Framed-User EAP-Message = 0x010100061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xb4d93d9a9cf87543d81689d41e41f3f4 Finished request 0 ==================================== My chilli log: chilli.c: 3027: 0 (Success) ChilliSpot version 1.0 started. tun.c: 653: 0 (Success) TX queue length set to 100chilli.c: 3162: 0 (Success) Waiting for client request... chilli.c: 2424: 0 (Success) New DHCP request from MAC=00-11-95-C2-93-0Achilli.c: 2430: 0 (Success) New DHCP connection established chilli.c: 2354: 0 (Success) DHCP requested IP address chilli.c: 2394: 0 (Success) Client MAC=00-11-95-C2-93-0A assigned IP 192.168.182.10chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! chilli.c: 1457: 0 (Success) Radius access request received! chilli.c: 1484: 0 (Success) Calling Station ID is: chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 7chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Fchilli.c: 1485: 0 (Success) 2chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Cchilli.c: 1485: 0 (Success) 2chilli.c: 1486: 0 (Success) chilli.c: 1523: 0 (Success) Username is: chilli.c: 1524: 0 (Success) pchilli.c: 1524: 0 (Success) rchilli.c: 1524: 0 (Success) ochilli.c: 1524: 0 (Success) fchilli.c: 1524: 0 (Success) 1chilli.c: 1524: 0 (Success) chilli.c: 1525: 0 (Success) chilli.c: 2424: 0 (Success) New DHCP request from MAC=00-17-F2-44-11-C2chilli.c: 2430: 0 (Success) New DHCP connection established chilli.c: 1854: 0 (Success) Received access request confirmation from radius server chilli.c: 1884: 0 (Success) Received access challenge from radius server chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! radius.c: 1608: 0 (Success) Received unknown radius packet 11!chilli.c: 3267: 0 (Success) radius_proxy_ind() failed!chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! chilli.c: 1457: 0 (Success) Radius access request received! chilli.c: 1484: 0 (Success) Calling Station ID is: chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 7chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Fchilli.c: 1485: 0 (Success) 2chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Cchilli.c: 1485: 0 (Success) 2chilli.c: 1486: 0 (Success) chilli.c: 1523: 0 (Success) Username is: chilli.c: 1524: 0 (Success) pchilli.c: 1524: 0 (Success) rchilli.c: 1524: 0 (Success) ochilli.c: 1524: 0 (Success) fchilli.c: 1524: 0 (Success) 1chilli.c: 1524: 0 (Success) chilli.c: 1525: 0 (Success) chilli.c: 1854: 0 (Success) Received access request confirmation from radius server chilli.c: 1884: 0 (Success) Received access challenge from radius server chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! radius.c: 1608: 0 (Success) Received unknown radius packet 11!chilli.c: 3267: 0 (Success) radius_proxy_ind() failed!chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! chilli.c: 1457: 0 (Success) Radius access request received! chilli.c: 1484: 0 (Success) Calling Station ID is: chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 7chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Fchilli.c: 1485: 0 (Success) 2chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Cchilli.c: 1485: 0 (Success) 2chilli.c: 1486: 0 (Success) chilli.c: 1523: 0 (Success) Username is: chilli.c: 1524: 0 (Success) pchilli.c: 1524: 0 (Success) rchilli.c: 1524: 0 (Success) ochilli.c: 1524: 0 (Success) fchilli.c: 1524: 0 (Success) 1chilli.c: 1524: 0 (Success) chilli.c: 1525: 0 (Success) chilli.c: 1854: 0 (Success) Received access request confirmation from radius server chilli.c: 1884: 0 (Success) Received access challenge from radius server chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! radius.c: 1608: 0 (Success) Received unknown radius packet 11!chilli.c: 3267: 0 (Success) radius_proxy_ind() failed!chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! chilli.c: 1457: 0 (Success) Radius access request received! chilli.c: 1484: 0 (Success) Calling Station ID is: chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 7chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Fchilli.c: 1485: 0 (Success) 2chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Cchilli.c: 1485: 0 (Success) 2chilli.c: 1486: 0 (Success) chilli.c: 1523: 0 (Success) Username is: chilli.c: 1524: 0 (Success) pchilli.c: 1524: 0 (Success) rchilli.c: 1524: 0 (Success) ochilli.c: 1524: 0 (Success) fchilli.c: 1524: 0 (Success) 1chilli.c: 1524: 0 (Success) chilli.c: 1525: 0 (Success) chilli.c: 1854: 0 (Success) Received access request confirmation from radius server chilli.c: 1884: 0 (Success) Received access challenge from radius server chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! radius.c: 1608: 0 (Success) Received unknown radius packet 11!chilli.c: 3267: 0 (Success) radius_proxy_ind() failed!chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! chilli.c: 1457: 0 (Success) Radius access request received! chilli.c: 1484: 0 (Success) Calling Station ID is: chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 7chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Fchilli.c: 1485: 0 (Success) 2chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) 4chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) Cchilli.c: 1485: 0 (Success) 2chilli.c: 1486: 0 (Success) chilli.c: 1523: 0 (Success) Username is: chilli.c: 1524: 0 (Success) pchilli.c: 1524: 0 (Success) rchilli.c: 1524: 0 (Success) ochilli.c: 1524: 0 (Success) fchilli.c: 1524: 0 (Success) 1chilli.c: 1524: 0 (Success) chilli.c: 1525: 0 (Success) chilli.c: 1854: 0 (Success) Received access request confirmation from radius server chilli.c: 1884: 0 (Success) Received access challenge from radius server chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! radius.c: 1608: 0 (Success) Received unknown radius packet 11!chilli.c: 3267: 0 (Success) radius_proxy_ind() failed!chilli.c: 2544: 0 (Success) cb_dhcp_data_ind. Packet received. DHCP authstate: 5 chilli.c: 2547: 0 (Success) Received packet with spoofed source!!! chilli.c: 1457: 0 (Success) Radius access request received! chilli.c: 1484: 0 (Success) Calling Station ID is: chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) 0chilli.c: 1485: 0 (Success) -chilli.c: 1485: 0 (Success) 1chilli.c: 1485: 0 (Succes

2 4

Design question
by Torkel Mathisen 03 Oct '06

03 Oct '06

Hi We have a very simple freeradius setup today. We use freeradius 1.0.5 with PEAP/MS-CHAPv2 and users file. My boss has asked be about making this configuration a bit more flexible and easier to admin. He also wants some new "features". The keywords are hotspot, web-frontend and possibly billing and "smartcards". Basically what he wants is for external consultant to be able to bring their laptops and just connect to a hotspot webserver and from there on authorize on to the WiFi. He also wants the possibility of billing. I want to know what kind of design you guys would recommend here. I'm thinking freeradius (1.1.3 now) with a mysql db and some web-frontend for adding users (what?). Then Chillipot on a new server for hotspot access. How does that sound? Will Chillipot be able to authorize users based on PEAP/MS-CHAPv2 ? How would you be able to do billing with this setup? And lastly is the situation with "smartcards". My boss was thinking about some cards or something that the consultant can pick up in the reception that will give them access to the WiFi for a certain amount of time. At the end of the day they have to deliver it again. There is also a possibility of doing billing from that. Will this kind of configuration require some commercial software or is freeradius able to do that? The last thing is not THAT important, but I want to know if anyone has a setup like this. I hope someone got some recommentations. Regards, Torkel

2 1

how to make freeradius support RFC 3576 ?
by zengkh 03 Oct '06

03 Oct '06

----- Original Message ----- From: zengkh To: freeradius-users(a)lists.freeradius.org Sent: Tuesday, October 03, 2006 3:44 PM Subject: how to make freeradius support RFC 3576 ? i have a question about how to make freeradius support RFC 3576 - Dynamic Authorization Extensions to Remote Authentication Dial In User Service , thanks. BS: I can not write code to implement.

3 2

multiple MAC in calling-station-id
by Collen Blijenberg 03 Oct '06

03 Oct '06

Just a question... we use 'Calling-Station-Id' for authenticate agains MAC address (and username and passwd) can i use multiple 'Calling-Station-Id' if some user account has, let's say 3 laptops.. ?? or is there an other way to link multiple mac addresses to a user account ? ------- users ------ "gebruiker" User-Password == "12345", Calling-Station-Id == "00166f980e78" "00166f97d99d" "testcase1" User-Password == "12345", Calling-Station-Id == "00166f980e78 , 00166f97d99d" "testcase2" User-Password == "12345", Calling-Station-Id == "00166f980e78", Calling-Station-Id == "00166f97d99d" ------------------- dunno somthing like this ?? Cheers Collen...

2 2

rlm_ippool problem: Failed to open file - Permission denied
by Jan Mulders 02 Oct '06

02 Oct '06

Hello, It's been far too long a day, and I think I'm overlooking something ridiculously simple. I get this error when starting freeradius: rlm_ippool: Failed to open file /etc/raddb/ippool.512k_high: Permission denied radiusd.conf[142]: 512k_high: Module instantiation failed. I've tried making a file called ippool.512k_high, same error. Tried chmod 777'ing it, different error: rlm_ippool: Failed to open file /etc/raddb/ippool.512k_high: Success radiusd.conf[142]: 512k_high: Module instantiation failed. Also tried chmod radiusd ippool.512k_high and chgrp. If someone could give me a helpful tip as to how to get this thing working again, I'd appreciate it a lot. Thanks all, Jan Mulders

1 0

SQL // Default user
by Eric Hiller 02 Oct '06

02 Oct '06

Hello, I am trying to make freeradius behave so that it checks the database for the user, if the user doesnt exist it draws uses the username of something else, such as default in the sql table. How can I do this? Thank you, Eric

1 0

Deny user based on MAC-address
by Torkel Mathisen 02 Oct '06

02 Oct '06

Hi, How can I deny a user from freeradius based on the MAC-address on the PC? I use users file only. Do I need MAC Authentication for that ? Regards, Torkel

3 2

Problem With Make
by Abel Monzon 02 Oct '06

02 Oct '06

Hi List... I still have problem at the time to Make: this is the last's line: server:~/freeradius-1.1.3# make ..... -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /root/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the loadable module *** libradius.so is not portable! *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/root/freeradius-1.1.3/src/lib/.libs -Wl,--rpath -Wl,/usr/local/lib /root/freeradius-1.1.3/src/lib/.libs/libradius.so -L/usr/local/lib /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a -L/usr/lib/perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/root/freeradius-1.1.3/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/freeradius-1.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/freeradius-1.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/freeradius-1.1.3' make: *** [all] Error 2 What is the problem exacttly? Any idea? Thanx, Abel

1 0

Problem With Make
by Abel Monzon 02 Oct '06

02 Oct '06

Hi List... I still have problem at the time to Make: this is the last's line: server:~/freeradius-1.1.3# make ..... -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /root/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the loadable module *** libradius.so is not portable! *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/root/freeradius-1.1.3/src/lib/.libs -Wl,--rpath -Wl,/usr/local/lib /root/freeradius-1.1.3/src/lib/.libs/libradius.so -L/usr/local/lib /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a -L/usr/lib/perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/root/freeradius-1.1.3/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/freeradius-1.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/freeradius-1.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/freeradius-1.1.3' make: *** [all] Error 2 What is the problem exacttly? Any idea? Thanx, Abel

1 0