- Freeradius-Users - lists.freeradius.org

Re: Help !! Cisco h323 Billing
by Peter Nixon 24 Sep '06

24 Sep '06

On Sat 23 Sep 2006 22:26, you wrote: > Dear Peter Nixon, > Following the instructions you provided in > Freeradius/Billing, I encounter the following error message, I've try to > create the function, but the function can't > be created, could you help me ? Thx !! > > Best Regards > Roy. > > --------------------------------------------------------------------------- >-------------------------------------------------------------------- lm_sql > (pgsql-voip): sql_set_user escaped user --> '1009' > radius_xlat: 'INSERT into StopVOIP ??(RadiusServerName, UserName, > NASIPAddress, AcctTime, ??AcctSessionTime, AcctInputOctets, > AcctOutputOctets, CalledStationId, CallingStationId, ??AcctDelayTime, > H323RemoteAddress, H323VoiceQuality, CiscoNASPort, h323callorigin, callid, > ??h323connecttime, h323disconnectcause, h323disconnecttime, h323gwid, > h323setuptime) ??values('myservername', '1009', '211.76.228.84', now(), > '1', ??'0', '0', '9001', '1009', ??'0', NULLIF('211.76.228.31', '')::inet, > NULLIF('0','')::integer, NULLIF('', ''), ??'originate', > pick_id('20060924031453-0045-0000F6-1', ''), strip_dot('03:14:53.000 UTC > Sun Sep 24 2006'), '200', ??strip_dot('03:14:54.000 UTC Sun Sep 24 2006'), > ' 59.126.157.203', strip_dot('03:14:53.000 UTC Sun Sep 24 2006'))' > rlm_sql (pgsql-voip): Reserving sql socket id: 24 > rlm_sql_postgresql: Status: PGRES_FATAL_ERROR > rlm_sql_postgresql: affected rows = > rlm_sql_postgresql: Postgresql check_error: PGRES_FATAL_ERROR, returning > SQL_DOWN > rlm_sql (pgsql-voip): Attempting to connect rlm_sql_postgresql #24 > rlm_sql (pgsql-voip): Connected new DB handle, #24 > rlm_sql_postgresql: Status: PGRES_FATAL_ERROR > rlm_sql_postgresql: affected rows = > rlm_sql_postgresql: Postgresql check_error: PGRES_FATAL_ERROR, returning > SQL_DOWN > rlm_sql (pgsql-voip): failed after re-connect > rlm_sql (pgsql-voip): Couldn't update SQL accounting STOP record - ERROR: > function pick_id("unknown", "unknown") does not exist HINT: No function > matches the given name and argument types. You may need to add explicit > type casts. > rlm_sql (pgsql-voip): Released sql socket id: 24 > modcall[accounting]: module "pgsql-voip" returns fail for request 0 > modcall: leaving group accounting (returns fail) for request 0 > Finished request 0 > --------------------------------------------------------------------------- >------------------------------------------------------------------------ > -bash-3.1$ psql radius < /cisco_h323_db_sample_functions-postgres.sql > ERROR: syntax error at or near "/" at character 547 > LINE 14: * $datetime =~ s/^\\.*//; > ^ > ERROR: syntax error at or near "*" at character 1 > LINE 1: * return $datetime; > ^ > ERROR: syntax error at or near "*" at character 1 > LINE 1: * ' language 'plperl'; > ^ > ERROR: syntax error at or near "new_number" at character 1 > LINE 1: new_number VARCHAR; > ^ > ERROR: syntax error at or near "new_number" at character 15 > LINE 2: new_number := split_part(original_number,''#'',2); > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF new_number = '''' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE RETURN new_number; > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > WARNING: there is no transaction in progress > COMMIT > ERROR: syntax error at or near "' LANGUAGE '" at character 1 > LINE 1: ' LANGUAGE 'plpgsql'; > ^ > ERROR: syntax error at or near "new_number" at character 1 > LINE 1: new_number VARCHAR; > ^ > ERROR: syntax error at or near "clean_number" at character 1 > LINE 1: clean_number VARCHAR; > ^ > ERROR: syntax error at or near "new_number" at character 15 > LINE 2: new_number := split_part(original_number,''#'',2); > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF new_number = '''' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE clean_number := new_number; > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF substring(clean_number from 1 for 2) = ''00'' THEN > ^ > ERROR: syntax error at or near "ELSIF" at character 1 > LINE 1: ELSIF substring(clean_number from 1 for 1) = ''0'' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > WARNING: there is no transaction in progress > COMMIT > ERROR: syntax error at or near "' LANGUAGE '" at character 1 > LINE 1: ' LANGUAGE 'plpgsql'; > ^ > ERROR: syntax error at or near "new_number" at character 1 > LINE 1: new_number VARCHAR; > ^ > ERROR: syntax error at or near "clean_number" at character 1 > LINE 1: clean_number VARCHAR; > ^ > ERROR: syntax error at or near "new_number" at character 15 > LINE 2: new_number := split_part(original_number,''#'',2); > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF new_number = '''' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE clean_number := new_number; > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF substring(clean_number from 1 for 2) = ''00'' THEN > ^ > ERROR: syntax error at or near "ELSIF" at character 1 > LINE 1: ELSIF substring(clean_number from 1 for 1) = ''0'' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > WARNING: there is no transaction in progress > COMMIT > ERROR: syntax error at or near "' LANGUAGE '" at character 1 > LINE 1: ' LANGUAGE 'plpgsql'; > ^ > ERROR: syntax error at or near "new_number" at character 1 > LINE 1: new_number VARCHAR; > ^ > ERROR: syntax error at or near "clean_number" at character 1 > LINE 1: clean_number VARCHAR; > ^ > ERROR: syntax error at or near "new_number" at character 15 > LINE 2: new_number := split_part(original_number,''#'',2); > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF new_number = '''' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE clean_number := new_number; > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF substring(clean_number from 1 for 2) = ''00'' THEN > ^ > ERROR: syntax error at or near "ELSIF" at character 1 > LINE 1: ELSIF substring(clean_number from 1 for 1) = ''0'' THEN > ^ > ERROR: syntax error at or near "ELSE" at character 1 > LINE 1: ELSE > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF > ^ > ERROR: syntax error at or near "' LANGUAGE '" at character 1 > LINE 1: ' LANGUAGE 'plpgsql'; > ^ > ERROR: syntax error at or near "key2" at character 1 > LINE 1: key2 ALIAS FOR $2; > ^ > ERROR: syntax error at or near "key3" at character 1 > LINE 1: key3 ALIAS FOR $16; > ^ > ERROR: syntax error at or near "PERFORM" at character 15 > LINE 2: PERFORM radacctid FROM StopVoIP WHERE h323SetupTime ... > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF NOT FOUND THEN > ^ > ERROR: syntax error at or near "RETURN" at character 1 > LINE 1: RETURN true; > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > ERROR: syntax error at or near "RETURN" at character 1 > LINE 1: RETURN false; > ^ > WARNING: there is no transaction in progress > COMMIT > ERROR: syntax error at or near "' LANGUAGE '" at character 1 > LINE 1: ' LANGUAGE 'plpgsql'; > ^ > ERROR: syntax error at or near "IF" at character 1 > LINE 1: IF NOT FOUND THEN > ^ > ERROR: syntax error at or near "RETURN" at character 1 > LINE 1: RETURN true; > ^ > ERROR: syntax error at or near "IF" at character 5 > LINE 1: END IF; > ^ > ERROR: syntax error at or near "RETURN" at character 1 > LINE 1: RETURN false; > ^ > WARNING: there is no transaction in progress > COMMIT > ERROR: syntax error at or near "' LANGUAGE '" at character 1 > LINE 1: ' LANGUAGE 'plpgsql'; Hi Roy It appears that your postgresql installation does not have 'plpgsql' or 'plperl' language support installed. Install that and it should work. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

1 0

Authentication against Active Directory page
by Alan DeKok 23 Sep '06

23 Sep '06

http://deployingradius.com/documents/configuration/active_directory.html It describes a minimal set of steps to take to get authentication working against Active Directory. It works in my limited tests, but if anyone runs into problems, please email me, and I'll update the page. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog

3 4

Radtest error!
by Abel Monzon 23 Sep '06

23 Sep '06

Hello, I have problem at the time to test my freeradius with radtest.... in my clients.conf I have this config. Client 127.0.0.1 { shortname = 127.0.0.1 User-Name = abel User-Password = omega secret = amigo } But,when I try radtest, the answer is: server:/# radtest abel omega localhost 0 amigo Sending Access-Request of id 94 to 127.0.0.1:1812 User-Name = "abel" User-Password = "omega" NAS-IP-Address = server NAS-Port = 0 Re-sending Access-Request of id 94 to 127.0.0.1:1812 User-Name = "abel" User-Password = "\000\021\207\002\302\366\317]\007\014\000\014M\317\356m" NAS-IP-Address = server NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=94, length=20 Now I ask to me....What is hapend exacttly? Thank's

3 2

group based authentication
by srg krn 23 Sep '06

23 Sep '06

Hello: We want to design an AAA system with the following requisites: COMPONENTS THAT WE HAVE: A) NAS(es) B) freeradius frontend C) authenticators WHAT WE CAN DO IS: 1. The NAS send a radius "access-request" to the radius frontend. In the packet there is a username (in username@group) syntax and a password. 2. The frontend MUST decide the authentication method and the authenticator machine based ONLY in the group (string AFTER the @). 3. The frontend sends user and password (note that NOT user@group) to the authenticator machine (maybe another radius, ldap, mysql, ...). 4. Then authenticator machine answer's to the frontend only with "OK" or "NOT OK". 5. If "OK" from step(4), then the freeradius answer's the NAS with "access granted" and some attributes extracted from the "group" (ip pool, netmask, default gw, ... _AND_ THE GROUP THAT IS AFTER THE @). NOTE THAT: - The unique function of the authenticators is saying "OK" if the username and passwd are correct or "NOT OK" if not. - NO USERS are defined in the radius frontend (only GROUPS with their respective attributes). Is there any "intelligent" way of acomplishing this design with freeradius? Thanks in advance and best regards

2 5

clean stale sessions with radzap?
by YvesDM 23 Sep '06

23 Sep '06

I use FR + mysql I try to clean some stale sessions from NAS's with dynamic ip's. I 'm logged in on the server and use radzap this way: radius1:~# radzap Usage: radzap [options] server[:port] secret So i try: radius1:~# radzap -u john localhost:1812 mysecret But this doesn't seem to be the right way? tnx yves

1 0

RE: Authentication against Active Directory page
by Jonathan De Graeve 23 Sep '06

23 Sep '06

Indeed, in my own tests I had to setup a kerberos realm and recompile the standard debian packages with the extra --with-ads rule. Does somebody know when machine authentication is supported in samba and if there is a patch for the 3.0.14 (debian stable) version? Kind Regards, J. -- Jonathan De Graeve Network/System Engineer Imelda vzw Informatica Dienst 015/50.52.98 Jonathan.de.graeve(a)imelda.be > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens King, > Michael > Verzonden: zaterdag 23 september 2006 4:47 > Aan: FreeRadius users mailing list > Onderwerp: RE: Authentication against Active Directory page > > Alan, > > What domain were you testing against? 2000 or 2003? (I ask, because I > was under the impression that KRB5 had to be setup as well) > > -----Original Message----- > From: freeradius-users-bounces+mking=bridgew.edu(a)lists.freeradius.org > [mailto:freeradius-users-bounces+mking=bridgew.edu@lists.freeradius.org] > On Behalf Of Alan DeKok > Sent: Friday, September 22, 2006 3:26 PM > To: FreeRadius users mailing list > Subject: Authentication against Active Directory page > > http://deployingradius.com/documents/configuration/active_directory.html > > It describes a minimal set of steps to take to get authentication > working against Active Directory. It works in my limited tests, but if > anyone runs into problems, please email me, and I'll update the page. > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

2 1

debug for sqlippool
by Guilherme Franco 22 Sep '06

22 Sep '06

Hello! I've created a new sqlippool.conf customized for Oracle. The queries in there returns no error but I get this: modcall: entering group post-auth for request 0 Value Of the Pool-Name is [FOO] and its [3] Chars rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'BEGIN' BEGIN rlm_sql_oracle: execute query failed in sql_query: ORA-06550: line 1, column 5: PLS-00103: Encountered the symbol "end-of-file" when expecting one of the following: begin case declare exit for goto if loop mod null pragma raise return select update while with <an identifier> <a double-quoted delimited-identifier> <a bind variable> << close current delete fetch lock insert open rollback savepoint set sql execute commit forall merge pipe rlm_sql_oracle: OCI_SERVER_NORMAL sqlippool_command: database query error radius_xlat: 'UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', expiry_time = current_timestamp - interval '1' second(1) WHERE pool_key = '845414518'' UPDATE radippool SET nasipaddress = '', pool_key = 0, callingstationid = '', expiry_time = current_timestamp - interval '1' second(1) WHERE pool_key = '845414518' radius_xlat: 'SELECT framedipaddress FROM radippool WHERE pool_name = 'SPW' AND expiry_time < current_timestamp AND ROWNUM = 1 ORDER BY (select username from radippool where username <> ''), (select callingstationid from radippool where callingstationid <> '#BRAS-01#this is a description#100#118'), expiry_time FOR UPDATE' SELECT framedipaddress FROM radippool WHERE pool_name = 'SPW' AND expiry_time < current_timestamp AND ROWNUM = 1 ORDER BY (select username from radippool where username <> ''), (select callingstationid from radippool where callingstationid <> '#BRAS-01#this is a description#100#118'), expiry_time FOR UPDATE So, radiusd -X just stops there (it does not quit), without any more messages (resulting in a time out for the BRAS). I know that the only place a BEGIN instance exists is in rlm_sqlippool.c. Even with sql_trace = yes, I can't see from where this error (ORA-06550: line 1, column 5: ) is coming from. As a result I don't know what is in line 1, column 5 to fix it. Any tips? After all this help you guys deserve to drink some beer here in Brazil :) Thanks a lot!

1 0

radius configuration error ?
by Federico Wenner 22 Sep '06

22 Sep '06

Hi friends, I am awfully worried about my radius configuration getting the following error. Could anybody help me with this real mess ? I can not find any hint in the freeradius.org/faq files. Version FreeRadius 1.0.5 MySQL 4.1.12 ERROR: rlm_sql (sql): No matching entry in the database for request from user [monkey] rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejectin g the user auth: Failed to validate the user. Thanks and regards Federico.

1 0

No matching entry in the database
by Federico Wenner 22 Sep '06

22 Sep '06

Hi friends, I am awfully worried about my radius configuration getting the following error. Could anybody help me with this real mess ? ERROR: rlm_sql (sql): No matching entry in the database for request from user [monkey] rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejectin g the user auth: Failed to validate the user. Thanks and regards Federico.

2 1

FW: Conditionally adding reply pair
by Garber, Neal 22 Sep '06

22 Sep '06

> You should be able to do this through the users file: >... > Just change the check and reply items where necessary. > If you don't expect to use the NetSensory huntgroup after > these lines, you may want to add the following after all > users file entries related to the NetSensory huntrgroup. Looking at the code for the files module, it appears that it is comparing check pairs against the request. Since the LDAP-Group is in the list of check pairs as opposed to the list of request pairs, I don't think this will work. In other words, I believe your example will look in the request pairs for attribute LDAP-Group and it won't be found. Can someone confirm or deny my analysis?

6 5