- Freeradius-Users - lists.freeradius.org

assigning different ippools according to huntgroups
by Ami Schieber 19 Sep '06

19 Sep '06

Hi, I have 3 NAS and want to assign Framed-IP-Address from 3 different IP pools according to the NAS the user logs in from. Config below looks fine to me and I can see that the huntgroup is indeed matched but there seems to be a problem with the postauth definition. Please advise, Ami My config has : huntgroups: t1 NAS-IP-Address == 172.16.2.1 t2 NAS-IP-Address == 172.16.3.1 d1 NAS-IP-Address == 172.16.4.1 users: DEFAULT Huntgroup-Name == "t1" Pool-Name := Pool-t1, Fall-Through = No DEFAULT Huntgroup-Name == "t2" Pool-Name := Pool-t2, Fall-Through = No DEFAULT Huntgroup-Name == "d1" Pool-Name := Pool-d1, Fall-Through = No Radiusd.conf: ippool Pool-t1 { range-start = 172.16.2.30 range-stop = 172.16.2.50 netmask = 255.255.255.0 cache-size = 20 session-db = ${raddbdir}/t1db.ippool ip-index = ${raddbdir}/t1db.ipindex } ippool Pool-t2 { range-start = 172.16.3.30 range-stop = 172.16.3.50 netmask = 255.255.255.0 cache-size = 20 session-db = ${raddbdir}/t2db.ippool ip-index = ${raddbdir}/t2db.ipindex } ippool Pool-d1 { range-start = 172.16.4.30 range-stop = 172.16.4.50 netmask = 255.255.255.0 cache-size = 20 session-db = ${raddbdir}/d1db.ippool ip-index = ${raddbdir}/d1db.ipindex } accounting { radutmp # Return an address to the IP Pool when we see a stop record. Pool-t1 Pool-t2 Pool-d1 } post-auth { # Get an address from the IP Pool Pool-t1 Pool-t2 Pool-d1 } log: rad_recv: Access-Request packet from host 172.16.3.1:32802, id=122, length=55 User-Name = "Ami" User-Password = "ami123" NAS-Port = 11 NAS-IP-Address = 172.16.3.1 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "Ami", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry Ami at line 26 users: Matched entry DEFAULT at line 41 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns ok) for request 0 auth: type Local auth: user supplied User-Password matches local User-Password Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "Pool-t1" returns noop for request 0 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "Pool-t2" returns noop for request 0 rlm_ippool: Could not find Pool-Name attribute. modcall[post-auth]: module "Pool-d1" returns noop for request 0 modcall: leaving group post-auth (returns noop) for request 0 Sending Access-Accept of id 122 to 172.16.3.1 port 32802 Finished request 0 radiusd.conf:

2 2

Wireless authentication via LDAP
by Tho Nguyen 19 Sep '06

19 Sep '06

Hello everyone, does any of you get freeradius working with LDAP and AP 1200? Please let me know. I have a hard time to get this system working. If you don't mind, please forward your configuration to me. Thanks, Tho

2 1

Freeradius 1.0.5 WPA/PEAP/LDAP stops answering
by Josep Martí Colomina 19 Sep '06

19 Sep '06

Freeradius 1.0.5 WPA/PEAP/LDAP stops answering, if it has problems of communications with the servant|server LDAP, even to be collapsed. To solve these problems, I have added a couple of daily reinitiation in the crontab. Can anybody suggest any better solution?. -- josep.colominaATgmail.com

1 0

Oracle conf Attached: sqlippool not working
by Guilherme Franco 19 Sep '06

19 Sep '06

Hi Mr. Peter, Like you told me before, you did some cleanups in the sqlippool.conf. Well, I've tried to install todays freeradius CVS, and it installed without the sqlippool module, don't know why. So, I've compiled it manually from freeradius-snapshot-20060918/src/modules/rlm_sqlippool/ OK, but when I run radiusd -X, I got this in the end, regardless of my configuration in sqlippool.conf and radiusd.conf: Module: Loaded SQL IP Pool sqlippool: sql-instance-name = "sql" sqlippool: lease-duration = 86400 sqlippool: pool-name = "" sqlippool: allocate-begin = "BEGIN" sqlippool: allocate-clear = "" sqlippool: allocate-find = "" sqlippool: allocate-update = "" sqlippool: allocate-commit = "COMMIT" sqlippool: allocate-rollback = "ROLLBACK" sqlippool: start-begin = "BEGIN" sqlippool: start-update = "" sqlippool: start-commit = "COMMIT" sqlippool: start-rollback = "ROLLBACK" sqlippool: alive-begin = "BEGIN" sqlippool: alive-update = "" sqlippool: alive-commit = "COMMIT" sqlippool: alive-rollback = "ROLLBACK" sqlippool: stop-begin = "BEGIN" sqlippool: stop-clear = "" sqlippool: stop-commit = "COMMIT" sqlippool: stop-rollback = "ROLLBACK" sqlippool: on-begin = "BEGIN" sqlippool: on-clear = "" sqlippool: on-commit = "COMMIT" sqlippool: on-rollback = "ROLLBACK" sqlippool: off-begin = "BEGIN" sqlippool: off-clear = "" sqlippool: off-commit = "COMMIT" sqlippool: off-rollback = "ROLLBACK" rlm_sqlippool: the 'allocate-clear' statement must be set. My radiusd.conf sqlippool testpool { $INCLUDE ${confdir}/sqlippool.conf sql-server == "x.x.x.x" sql-login == "foo" sql-password == "foo" sql-db == "foo" range-start == 1.1.1.1 range-stop == 1.1.1.100 netmask == 255.255.255.0 lease-duration == 86400 } My DB: CREATE TABLE radippool ( id INT PRIMARY KEY, pool_name VARCHAR(30) NOT NULL, framedipaddress VARCHAR(30) NOT NULL, nasipaddress VARCHAR(30) NOT NULL, nas_port INT NOT NULL, calling_station_id VARCHAR(30) NOT NULL, expiry_time timestamp(0) NOT NULL, username VARCHAR(100) ); with all the sequences, indexes and triggers included It's not even trying to access the Oracle server. What can it be? Thanks!

1 0

SQUID---radius
by ego seek 19 Sep '06

19 Sep '06

Does anybody know how I can make squid (transparent web proxy) work with radius? thank you.

2 1

DOC
by Abel Monzon 19 Sep '06

19 Sep '06

Hello, some time is so hard to understand the mean of everything, but I can't find the mean and why is so important, example: The doc toll about how config NAS, Proxy, etc, but I can't understand what is that and why I must config that...Please... exist any reference? Thanks any way...

1 0

FEERADIUS and SUN Directory server groups
by "Petr \"Qaxi\" Klíma" 19 Sep '06

19 Sep '06

Hello I am using freeradius (1.0.1) with SUN directory server (5.2) Authentication (username:password) works well but I do not know how to use LDAP for group mapping (to Ldap-Group). The problem: in SUN DS there are groups defined in two ways (If you use SUN JES system) =================================================== "subscribe group" $ ldapsearch cn=gprs_subscr dn: cn=gprs_subscr,ou=Groups,dc=myorg cn: gprs_subscr objectClass: groupofurls objectClass: groupofuniquenames objectClass: top objectClass: iplanet-am-managed-assignable-group objectClass: iplanet-am-managed-group memberURL: ldap:///dc=myorg??sub?memberof=cn=gprs_subscr,ou=Groups,dc=myorg iplanet-am-group-subscribable: false =================================================== or "filteredgroup" =================================================== $ ldapsearch cn=gprs_filter dn: cn=gprs_filter,ou=Groups,dc=myorg cn: gprs_filter objectClass: groupofurls objectClass: groupofuniquenames objectClass: top objectClass: iplanet-am-managed-filtered-group objectClass: iplanet-am-managed-group memberURL: ldap:///dc=myorg??sub?(&(uid=k*)(o=mysuborg)) =================================================== How should I set groupmembership_filter or how should I use do_xlat (I probably misunderstand the feature) Thanks for any help -- Petr Klíma e-mail: qaxi(a)seznam.cz

2 3

No matching entry in the database
by Federico Wenner 18 Sep '06

18 Sep '06

Dear friends, I have a problem activating users in the freeRadius server (with PCLinuxOS, MySQL Database): Username monkey Passwd quikec Getting the following radius.log : ********************************** Mon Sep 18 16:35:56 2006 : Info: rlm_sql (sql): No matching entry in the database for request from user [monkey] Mon Sep 18 16:35:56 2006 : Auth: Login incorrect: [monkey/quikec] (from client PortMaster-1 port 47 cli 22252956) ********************************** I would appreciate very much your hints. Thanks and regards Federico.

1 0

Proxy.conf
by Cliff Hayes 18 Sep '06

18 Sep '06

Hello, --1-- I am running FreeRADIUS 1.1.2 with MySQL database support. When I comment out the include line for proxy.conf, my users can no longer authenticate. The logs show their entire username + realm instead of just the username. I figure it is because it can't strip the realm anymore because it doesn't know what the realm is. There are REALM sections in the proxy.conf, with type, authhost, and accthost statements. I have entries there for each of my realms. I have not found an equivalent to the REALMS section of proxy.conf in MySQL. Do I use the radgroupcheck table? If so, do I add the authost and accthost lines? --2-- Does auth-type=local have to be in both radgroupcheck and radgroupreply? Cliff

2 3

sqlippool not working
by Guilherme Franco 18 Sep '06

18 Sep '06

Hi Peter, Like you told me before, you did some cleanups in the sqlippool.conf. Well, I've tried to install todays freeradius CVS, and it installed without the sqlippool module, don't know why. So, I've compiled it manually from freeradius-snapshot-20060918/src/modules/rlm_sqlippool/ OK, but when I run radiusd -X, I got this in the end, regardless of my configuration in sqlippool.conf and radiusd.conf: Module: Loaded SQL IP Pool sqlippool: sql-instance-name = "sql" sqlippool: lease-duration = 86400 sqlippool: pool-name = "" sqlippool: allocate-begin = "BEGIN" sqlippool: allocate-clear = "" sqlippool: allocate-find = "" sqlippool: allocate-update = "" sqlippool: allocate-commit = "COMMIT" sqlippool: allocate-rollback = "ROLLBACK" sqlippool: start-begin = "BEGIN" sqlippool: start-update = "" sqlippool: start-commit = "COMMIT" sqlippool: start-rollback = "ROLLBACK" sqlippool: alive-begin = "BEGIN" sqlippool: alive-update = "" sqlippool: alive-commit = "COMMIT" sqlippool: alive-rollback = "ROLLBACK" sqlippool: stop-begin = "BEGIN" sqlippool: stop-clear = "" sqlippool: stop-commit = "COMMIT" sqlippool: stop-rollback = "ROLLBACK" sqlippool: on-begin = "BEGIN" sqlippool: on-clear = "" sqlippool: on-commit = "COMMIT" sqlippool: on-rollback = "ROLLBACK" sqlippool: off-begin = "BEGIN" sqlippool: off-clear = "" sqlippool: off-commit = "COMMIT" sqlippool: off-rollback = "ROLLBACK" rlm_sqlippool: the 'allocate-clear' statement must be set. It's not even trying to access the Oracle server. What can it be? Thanks!

1 0