- Freeradius-Users - lists.freeradius.org

issue with attribute 97 from rfc3162 in users file
by Christian Hahn 31 Aug '06

31 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, the dictionary.rfc3162 on a fresh compiled freeradius 1.1.3 on CentOS 4.3 x86_64 shows support for attribute 97 - ----8<---- ATTRIBUTE Framed-IPv6-Prefix 97 ipv6prefix - ---->8---- but if I start the server it failes with the following reason: - ----8<---- /usr/local/etc/raddb/users[227]: Parse error (reply) for entry hextest: unknown attribute type 8 Errors reading /usr/local/etc/raddb/users - ---->8---- the entry for hextest in the users file looks like this (ip address replaced) and line #227 is the "Framed-IPv6-Prefix" line: - ----8<---- hextest Auth-Type := Local, User-Password == "secret" Service-Type = Framed-User, NAS-IP-Address = xx.xx.xx.xx, Framed-IPv6-Prefix = 2001:db8:aaaa:bbbb::/64, Tunnel-Client-Endpoint = 2001:db8:cccc::/128, Tunnel-Server-Endpoint = 2001:db8:cccc::1/128 - ---->8---- If I comment out the "Framed-IPv6-Prefix" line the server starts up. Has anybody seen this error before? I don't know why the server thinks this is attribute 8. Have I missed something and the entry for attribute 97 should look different? Any hint would greatly appreciated. best regard, Christian Hahn -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE9C2G6kMW7HW8620RAntmAJ9vRzaBDqNV5FIT/esloKn8Q149BQCgk/42 6xpe7FSxEW6aEggMzmLcRtU= =Zpnx -----END PGP SIGNATURE-----

3 5

sqlcounter
by Fabiano Martins 31 Aug '06

31 Aug '06

Hi All!! I would like to know if someone knows some DOC about sqlcounter implementation. I've benn searching with no sucess about this... It's frustrating... there is no documents about. I'm trying to put it to run on my freeradius server... If someone knows how to give me some hint, it will be welcome! Regards, Fabiano

5 4

Problem using radiusMaxBandwidthDown attribute
by luigi natalino 31 Aug '06

31 Aug '06

Hello I need to use the radiusMaxBandwidthDown and radiusMaxBandwidthUp in ldap but RADIUS-LDAPv3.schema doesn't contain those attribute. Could someone tell me where I can take a complete RADIUS-LDAPv3.schema containing these attributes or could someone tell me the scheme about these two attributes so that I can add them in RADIUS-LDAPv3.schema? What I must add in ldap.attrmap? Many thanks to all Best Regards, Luigi _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

1 0

acctsessionid is void
by Santiago Balaguer García 31 Aug '06

31 Aug '06

Following with my questions, I propose the next question: Is it acceptable that a NAS always sends as a acctsession attribute a null or void value ? Santiago _________________________________________________________________ Moda para esta temporada. Ponte al día de todas las tendencias. http://www.msn.es/Mujer/moda/default.asp

1 0

Simultaneous-Use implementation in rlm_python
by Flamur Rogova 31 Aug '06

31 Aug '06

Hi, I have noticed that more recent rlm_python versions have function bindings for implementing Simultaneous-Use checking in python module. Something like this ... python_init done Module: Loaded python python: mod_instantiate = "pppoe" python: func_instantiate = "instantiate" python: mod_authorize = "pppoe" python: func_authorize = "authorize" python: mod_authenticate = "pppoe" python: func_authenticate = "authenticate" python: mod_preacct = "pppoe" python: func_preacct = "preacct" python: mod_accounting = "pppoe" python: func_accounting = "accounting" python: mod_checksimul = "pppoe" python: func_checksimul = "checksimul" python: mod_detach = "pppoe" python: func_detach = "detach" Module: Instantiated python (PPPoE) ... What should func_checksimul return to signify that user is already logged on / not loged on ? Is it safe to use this feature in production ? Regards, Flamur Rogova

1 0

Short Deployment Platform Questionaire
by Peter Nixon 31 Aug '06

31 Aug '06

Hi Guys In order to bring our documentation up to date, can everyone please take a few seconds to report to me (either privately or to the list) what deployment platform(s) you are running FreeRADIUS on. In particular I am looking for non Linux/x86 information. The more information you can give me the better, but everything helps. I would like to know answers to the following questions (In order of importance) * What Operating System and Version are you running FreeRADIUS on? * What architecture are you running on (x86, x86_64, Sparc, IA64, PPC etc)? * What version of FreeRADIUS do you have in production? * Approximately how many AAA users do you have? * Did you install a vendor package, downloaded package, selfbuilt package or source install? * If you built FreeRADIUS yourself, please list any special installation/compilation steps you needed to take to make it work on your platform. Thanks in Advance from the FreeRADIUS Development Team -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc

2 1

Generic info rqrd...
by rgopalan＠techmahindra.com 31 Aug '06

31 Aug '06

Hi All, I need some general info on Free Radius. 1)Does it support 64-bit compilers? 2)Does it has support for both Solaris and HP-Unix. 3)Is it Multi Threaded safe. Thanks in advance, Ram. ============================================================================================================================ Tech Mahindra, formerly Mahindra-British Telecom. Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

3 2

vendor attribute in radius-accept message
by liadalex＠libero.it 31 Aug '06

31 Aug '06

Hi. How to configure freeradius to send vendor specif attribute in a radius-accept message based on eap-tls? ___________________________________________________________________ Mutui a tassi scontati da 30 banche. Richiedi online e risparmia. Servizio gratuito. http://click.libero.it/mutuionline

1 0

2.0.0-pre0 from CVS: Invalid version in module
by Christian Hahn 31 Aug '06

31 Aug '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi, I don't know if this is better asked on the developers list, but before I bother these guys I will try it here. I've just compiled the CVS version from 20060830 with prefix=/root/bin/freeradius-cvs. When starting radiusd it complains that the compiled modules have the wrong version: - ----8<---- radiusd: entering modules setup Module: Library search path is /root/bin/freeradius-cvs/lib radiusd.conf[1634] Invalid version in module 'rlm_exec' Errors setting up modules - ---->8---- This happens not only for the rlm_exec module, if I comment this out it gives an error for rlm_expr ... a.s.o. I have: radiusd: FreeRADIUS Version 2.0.0-pre0, for host x86_64-unknown-linux-gnu, built on Aug 30 2006 at 12:58:10 And all the modules in lib are freshly build and installed with the server. I have also checked the radiusd.conf for wrong lib paths. Any ideas what happend here? thanks, Christian Hahn -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iD8DBQFE9Yje6kMW7HW8620RAnmdAKC71GKjxryrD12RczaZInhDNysI3gCfeFWW ExBmtSIHLtV4xvd/0npiLFI= =e4Dt -----END PGP SIGNATURE-----

3 3

no Client-IP-Address in packet
by Mitaine Yoann 31 Aug '06

31 Aug '06

Dear everybody, I've installed the radius 's CVS version of 08-23-06. I've this architecture : client < ====> AP <====> Radius A <====> Radius B 802.1X proxying The client does not have adress of IP, it recover his IP address by the DHCP server installed in radius server A, after being authenticated. I'm doing an EAP/TTLS authentication. When I proxied the request from to server A to the server B, there wasn't Client-IP-Address in the packet. I thought radius server A would have put its own ip address for Client-IP-Address attribute before sending the packet to server B. So, I would like to know if it's a normal situation and in this case, how I could insert the Client-IP-Address attribute in the packet. Thanks in advance. Your sincerly. --------------------------------- Découvrez un nouveau moyen de poser toutes vos questions quelque soit le sujet ! Yahoo! Questions/Réponses pour partager vos connaissances, vos opinions et vos expériences. Cliquez ici.

4 8