- Freeradius-Users - lists.freeradius.org

Is it possible to log connection details in MySQL?
by ZaiPower 01 Sep '06

01 Sep '06

Hello: I'd like to know if it is possible to save all the info under the log directory "radacct" (connections' details by client's IP) in MySQL instead of files in hard disk. Are all the variables accessible?. I mean, are they valid for an SQL sentence in 'postauth_query' variables %{Packet-Type}, %{User-Name}, %{User-Password}, %{NAS-IP-Address}, %{NAS-Port} and %{Client-IP-Address}? Am I missing any other info? After reading the answer (http://wiki.freeradius.org/index.php/FAQ#How_do_I_log_failed_login_attempts…) to the question "How do I log failed login attempts in a SQL database?" in the FreeRadius wiki it seems it is possible with adequate SQL sentences. I see three problems: - I don't see clearly how to separate successfully authentication of unsuccessfull. Maybe like this? How could I tell FreeRadius different queries depending on type of request? post-auth { # Login successful: get an address from the IP pool. ippool Post-Auth-Type ACCEPT { sql } Post-Auth-Type REJECT { # Login failed: log to SQL database. sql } } - Where I can find documentation about the different packet types and their data? - Is it possible to tell FreeRadius that I want to send more than one query to MySQL? I really want this functionality (keep the connection logs in MySQL, not in the filesystem). I make this question to know if I am in the right path or ideally if anybody has already make something like this. -- View this message in context: http://www.nabble.com/Is-it-possible-to-log-connection-details-in-MySQL--tf… Sent from the FreeRadius - User forum at Nabble.com.

2 1

openssl certificate, need help
by Collen Blijenberg 01 Sep '06

01 Sep '06

Could someone help me out pleas... we're trying to make our wpa-wlan work, but currently i'm stuck with the certificates part of tls. i'd tried running CA.all, but the script gives me error's. (freeradius 1.1.3) ----------------- + openssl pkcs12 -export -in demoCA/cacert.pem -inkey newreq.pem -out root.p12 -cacerts -passin pass:whatever -passout pass:whatever Error opening input file demoCA/cacert.pem demoCA/cacert.pem: No such file or directory + openssl pkcs12 -in root.p12 -out root.pem -passin pass:whatever -passout pass:whatever Error opening input file root.p12 root.p12: No such file or directory + openssl x509 -inform PEM -outform DER -in root.pem -out root.der Error opening Certificate root.pem 20898:error:02001002:system library:fopen:No such file or directory:bss_file.c:278:fopen('root.pem','r') 20898:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:280: unable to load certificate -------------------- in the script dir there is no demoCA en no cacert.pam?! also, the CA.all script has a rm -rf demoCA. so if i comment the 'rm' out, copied the default demoCA and cacert.pam from my working installation (version 1.0.2 that was shipped with fedora, and has certificates for localhost) and gues what, another error: ------------------------------- + openssl pkcs12 -export -in demoCA/cacert.pem -inkey newreq.pem -out root.p12 -cacerts -passin pass:whatever -passout pass:whatever No certificate matches private key + openssl pkcs12 -in root.p12 -out root.pem -passin pass:whatever -passout pass:whatever 21004:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:140: + openssl x509 -inform PEM -outform DER -in root.pem -out root.der unable to load certificate 21005:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:642:Expecting: TRUSTED CERTIFICATE + echo -e '' --------------------------------- dunno where to go now!? is there some help on how to make the certificate thing work for tls, and windowsxpsp2 clients ?? Thx Collen

1 0

URGENT! Dialupadmin "Could not connect to SQL database"
by Guilherme Franco 01 Sep '06

01 Sep '06

URGENT! Hi, I'm getting this error *Could not connect to SQL database. *in dialupadmin. (using OCI8 with ORACLE) * *Radiusd connects to Oracle without any problems, dialupadmin don't. Please help. Thank you.* *

3 7

SQL user in multiple groups
by Pavel D. Kuzin 01 Sep '06

01 Sep '06

Hello! Anybody uses user in multiple groups with SQL backend? -- Pavel D.Kuzin System Administrator Nodex ISP St. Petersburg, Russia pk(a)nodex.ru http://nodex.ru

1 0

Redirect question
by Mordor Networks 01 Sep '06

01 Sep '06

Hi all I have a question i used freeradisu with mysqlbackend for auth and accounting for dialup account , i want to know it is is possible when the user account is expired i want to allow the user to connect but to be redirected to a website telling him that the account is expired is it possible?

2 1

WebDAV HTTP Auth to RADIUS, possible?
by Michael Check 01 Sep '06

01 Sep '06

Is it possible to set up an Apache 1.3 server with WebDAV to authenticate to a freeRADIUS? Ideally, I would like to tell the Apache directives to look at freeRADIUS for authentication using the httpd.conf file. Has anyone ever done this or able to point me in a direction? Is it even possible? We're using freeRadius 1.1.0 on OSX.4, successfully authenticatiing off an Active Directory master. Thanks in advance, Michael Check

5 11

Freeradius and SNMP
by Michael Schwartzkopff 01 Sep '06

01 Sep '06

Hi, I have problems starting the SNMP part of FreeRADIUS. Setup: FR 1.0.4, SuSE 10.0 radiusd.conf: snmp = yes $INCLUDE ${confdir}/snmp.conf snmp.conf: smux_password = verysecret Also my net-snmp is configured according to the docs. When I start both demons snmpwalk does not give any answer in 1.3.6.1.4.1.3317. When I do a tcpdump on interface lo (or eth0) port 199 I see no packets beeing exchanged. It seems that FR does not even try to register the subagent. Any hints? Should there be packets on the interface at all? What am I doing wrong? Thanks for any help. -- Dr. Michael Schwartzkopff MultiNET Services GmbH Bretonischer Ring 7 85630 Grasbrunn Tel: (+49 89) 456 911 - 0 Fax: (+49 89) 456 911 - 21 mob: (+49 174) 343 28 75 PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B Skype: misch42

3 8

How to catch the Mc address of the user into radius databases,
by raviprakash sunkara 01 Sep '06

01 Sep '06

Hi Users, please for give in my english, Can anyone let me, How to catch the Mac Address of the user and their public ip , that need to insert in radius database , which we having the radamin adnd dialadmin fro radius adminstrator tools, please help me -- Thanks and Regards with cheers Sunkara Ravi Prakash (Voip Developer) Hyperion Technology www.hyperion-tech.com +91-9985077535

1 0

Re: Disconnect
by Sean 31 Aug '06

31 Aug '06

Thanks for the replies. I'd already worked out that I was barking up the wrong tree. I was asked by a client to create a PHP script to disconnect a user. I'll probably use a script to change Expiration or Max-Session and get him to get the NAS to check back to Radius every five minutes. It's a pity that you can't send a disconnect request directly to Radius for a particular user. Anyway, once again thanks for the advice. Regards, Sean

2 1

Disconnect
by Sean 31 Aug '06

31 Aug '06

Hi, Does anyone know how to get disconnect to work with radclient? I can get it to return status but when I try disconnect radiusd -X returns the following:- rad_recv: Disconnect-Request packet from host 127.0.0.1:57181, id=9, length=29 Unknown packet code 40 from client swarm:57181 - ID 9 : IGNORED Any help or hints would be much appreciated. Thanks, Sean

4 3