- Freeradius-Users - lists.freeradius.org

multiple MAC in calling-station-id
by Collen Blijenberg 03 Oct '06

03 Oct '06

Just a question... we use 'Calling-Station-Id' for authenticate agains MAC address (and username and passwd) can i use multiple 'Calling-Station-Id' if some user account has, let's say 3 laptops.. ?? or is there an other way to link multiple mac addresses to a user account ? ------- users ------ "gebruiker" User-Password == "12345", Calling-Station-Id == "00166f980e78" "00166f97d99d" "testcase1" User-Password == "12345", Calling-Station-Id == "00166f980e78 , 00166f97d99d" "testcase2" User-Password == "12345", Calling-Station-Id == "00166f980e78", Calling-Station-Id == "00166f97d99d" ------------------- dunno somthing like this ?? Cheers Collen...

2 2

rlm_ippool problem: Failed to open file - Permission denied
by Jan Mulders 02 Oct '06

02 Oct '06

Hello, It's been far too long a day, and I think I'm overlooking something ridiculously simple. I get this error when starting freeradius: rlm_ippool: Failed to open file /etc/raddb/ippool.512k_high: Permission denied radiusd.conf[142]: 512k_high: Module instantiation failed. I've tried making a file called ippool.512k_high, same error. Tried chmod 777'ing it, different error: rlm_ippool: Failed to open file /etc/raddb/ippool.512k_high: Success radiusd.conf[142]: 512k_high: Module instantiation failed. Also tried chmod radiusd ippool.512k_high and chgrp. If someone could give me a helpful tip as to how to get this thing working again, I'd appreciate it a lot. Thanks all, Jan Mulders

1 0

SQL // Default user
by Eric Hiller 02 Oct '06

02 Oct '06

Hello, I am trying to make freeradius behave so that it checks the database for the user, if the user doesnt exist it draws uses the username of something else, such as default in the sql table. How can I do this? Thank you, Eric

1 0

Deny user based on MAC-address
by Torkel Mathisen 02 Oct '06

02 Oct '06

Hi, How can I deny a user from freeradius based on the MAC-address on the PC? I use users file only. Do I need MAC Authentication for that ? Regards, Torkel

3 2

Problem With Make
by Abel Monzon 02 Oct '06

02 Oct '06

Hi List... I still have problem at the time to Make: this is the last's line: server:~/freeradius-1.1.3# make ..... -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /root/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the loadable module *** libradius.so is not portable! *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/root/freeradius-1.1.3/src/lib/.libs -Wl,--rpath -Wl,/usr/local/lib /root/freeradius-1.1.3/src/lib/.libs/libradius.so -L/usr/local/lib /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a -L/usr/lib/perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/root/freeradius-1.1.3/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/freeradius-1.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/freeradius-1.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/freeradius-1.1.3' make: *** [all] Error 2 What is the problem exacttly? Any idea? Thanx, Abel

1 0

Problem With Make
by Abel Monzon 02 Oct '06

02 Oct '06

Hi List... I still have problem at the time to Make: this is the last's line: server:~/freeradius-1.1.3# make ..... -rpath /usr/local/lib rlm_perl.lo rlm_perl.c /root/freeradius-1.1.3/src/lib/libradius.la \ `perl -MExtUtils::Embed -e ldopts` -lnsl -lresolv -lpthread *** Warning: Linking the shared library rlm_perl.la against the loadable module *** libradius.so is not portable! *** Warning: Linking the shared library rlm_perl.la against the *** static library /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a is not portable! gcc -shared .libs/rlm_perl.o -Wl,--rpath -Wl,/root/freeradius-1.1.3/src/lib/.libs -Wl,--rpath -Wl,/usr/local/lib /root/freeradius-1.1.3/src/lib/.libs/libradius.so -L/usr/local/lib /usr/lib/perl/5.8/auto/DynaLoader/DynaLoader.a -L/usr/lib/perl/5.8/CORE -lperl -ldl -lm -lc -lcrypt -lnsl -lresolv -lpthread -Wl,-E -Wl,-soname -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so /usr/bin/ld: cannot find -lperl collect2: ld returned 1 exit status make[6]: *** [rlm_perl.la] Error 1 make[6]: Leaving directory `/root/freeradius-1.1.3/src/modules/rlm_perl' make[5]: *** [common] Error 2 make[5]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[4]: *** [all] Error 2 make[4]: Leaving directory `/root/freeradius-1.1.3/src/modules' make[3]: *** [common] Error 2 make[3]: Leaving directory `/root/freeradius-1.1.3/src' make[2]: *** [all] Error 2 make[2]: Leaving directory `/root/freeradius-1.1.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/root/freeradius-1.1.3' make: *** [all] Error 2 What is the problem exacttly? Any idea? Thanx, Abel

1 0

help with undocumented attributes
by Andrew Long 02 Oct '06

02 Oct '06

Hello freeradius-users, I am working with an inherited system (freeradius 0.9.0 on RH). The system is running but as a new user/admin I am having trouble getting info on the actual setup. I do 'rpm -qv freeradius' and it returns freeradius is not installed, yet it IS. /usr/local/etc/raddb is populated, as is /usr/local/share/freeradius. How can I get info on the running version? Also, I am having trouble finding info on attributes that do not seem to be documented which limit some of our user's sessions. Examples are 'Max-Acct-Age', 'Max-Daily-Session', and 'Check-Login-Day'. I need to get a better understanding of how this session management is done. Good documentation on the web seems hard to come by. Any help most appreciated. -- Regards, Andrew Long

4 5

prevent roaming configuration question
by isidoros 02 Oct '06

02 Oct '06

Hello everybody, I have a configuration question. How would I have to set up the following configuration NAS1 with users X,Y,Z NAS2 with users A,B,C one central radius server Goal: users X,Y,Z should only be authenticated on NAS1 and not on NAS2 or any other nas users A,B,C should only be authenticated on NAS2 and not on NAS1 or any other nas etc My best guess would be tho tweak the auth_query in the sql.conf any idea's thanks

2 7

RE: rlm_perl behaviour
by Garber, Neal 02 Oct '06

02 Oct '06

> This is fixed in CVS HEAD. Great. By the way, thanks for sharing rlm_perl with the community. It is fantastic and it has helped me immensely.

1 0

rlm_perl behaviour
by Garber, Neal 02 Oct '06

02 Oct '06

When I call a perl module via rlm_perl and don't undef %RAD_CHECK and %RAD_REPLY before exiting, rlm_perl duplicates some attributes contained within the hashes. For instance: At entry to rlm_perl instance: $RAD_CHECK{'Ldap-Group'} is an ARRAY: (GroupA, GroupB) After exiting the script, "Added pair Ldap-Group..." messages appear in debug output. If I call another perl script to dump the %RAD_CHECK hash, it shows: $RAD_CHECK{'Ldap-Group' } is an ARRAY: (GroupA, GroupB, GroupA, GroupB) If I "undef %RAD_CHECK" before exiting from the first perl module, the values are not duplicated. I did some analysis of the sequence of events and I believe this is what's happening: - rlm_ldap creates the Ldap-Group attributes on the check list with operator T_OP_CMP_EQ during authorize (Ldap-Group is a checkItem in my ldap.attrmap) - upon return from the perl script, rlm_perl calls pairmove to move the attributes from the RAD_CHECK, RAD_REPLY and RAD_PROXY_REPLY hashes back to the respective pairlist. - pairmove adds attributes to the destination list for operator T_OP_CMP_EQ (takes default case) which creates duplicates Is this expected behaviour of rlm_perl? If so, can it be put on the "to do" list for rlm_perl documentation updates (or is it there already and I missed it)? Also, this seems to imply that it's not possible to change or remove, at least, some types of check or reply attributes from within rlm_perl? Also, the wiki for rlm_perl states that it passes configuration pairs in %RAD_CONFIG. I don't believe this is true (the hash is empty and I checked the source for 1.1.2, 1.1.3 and the latest snapshot and it doesn't create that hash). Is this a feature that is "in the works" or is the wiki incorrect? I can supply debug output, radiusd.conf and scripts if necessary.. Thanks.

2 1