- Freeradius-Users - lists.freeradius.org

why radacctid is the primary key of radacct table instead of acctuniqueid ?
by Santiago Balaguer García 31 Aug '06

31 Aug '06

After solving the problem of duplicate registers in radacct, see https://list.xs4all.nl/pipermail/freeradius-users/2006-August/056246.html I have this doubt: why radacctid is the primary key of radacct table instead of acctuniqueid ? This is a way to avoid this problem and the DBMS equally works. Santiago _________________________________________________________________ Acepta el reto MSN Premium: Protección para tus hijos en internet. Descárgalo y pruébalo 2 meses gratis. http://join.msn.com?XAPID=1697&DI=1055&HL=Footer_mailsenviados_proteccionin…

2 1

certificate issue
by Kartthik 31 Aug '06

31 Aug '06

2 1

Difference between Auth-type=System and Auth type=Local
by ys.hsia 31 Aug '06

31 Aug '06

HI: I amm a beginner of Radius and use NTRadPing to test . I am confiused with what is the difference between setting of user in user_conf of Auth-type:=System and Auth-type:=Local. If I set a user with Auth-Type := Local in user_conf, Radiusd it will reply with Access-Accept. If I set a user with Auth-Type := System in user_conf , Radius will reply with Access-reject. Why ? any \one can help ? Best regards, Hsia

2 1

EAP-TLS multi clients
by Lazzarini Matteo 31 Aug '06

31 Aug '06

Hi, I do not succeed to authenticate others client in mine system. I have used three scripts to generate certs root, server and client (with xpextension). They exist of the certs for multi clients to use for eap-tls? Somebody it has of the councils on like making? thanks Matteo

3 7

How to configure free radius to make it listen to different udp ports?
by Shankar Ganesh C 31 Aug '06

31 Aug '06

Hi, How can i make freeradius listen to different UDP ports? Thanks and regards Shankar ganesh

3 2

ippool auth-type error
by Sascha Djuric 31 Aug '06

31 Aug '06

SORRY NOW WITH PROPER SUBJECT :D hello all im new to radius, but i got freeradius configured with mysql. radtest is working fine for my test user. now i configured an ippool, which get successfully loaded on startup. again radtest works fine, only new thing is the following trace: rlm_ippool: enter postauth rlm_ippool: Could not find Pool-Name attribute. the enter postauth trace was added by me. now i added the Pool-Name to radcheck for my user. after that what happens is: >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> rad_recv: Access-Request packet from host 127.0.0.1:34065, id=125, length=55 User-Name = "SVD" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 modcall[authorize]: module "mschap" returns noop for request 4 rlm_realm: No '@' in User-Name = "SVD", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 4 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 4 radius_xlat: 'SVD' rlm_sql (sql): sql_set_user escaped user --> 'SVD' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'SVD' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'SVD' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'SVD' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'SVD' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): No matching entry in the database for request from user [SVD] modcall[authorize]: module "sql" returns notfound for request 4 modcall: leaving group authorize (returns ok) for request 4 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [SVD/secret] (from client localhost port 0) <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<, funny thing is, i dont even see the ippool trace again. i can post more details, but maybe this is a common error. thx in advance for your help

1 0

(no subject)
by Sascha Djuric 31 Aug '06

31 Aug '06

hello all im new to radius, but i got freeradius configured with mysql. radtest is working fine for my test user. now i configured an ippool, which get successfully loaded on startup. again radtest works fine, only new thing is the following trace: rlm_ippool: enter postauth rlm_ippool: Could not find Pool-Name attribute. the enter postauth trace was added by me. now i added the Pool-Name to radcheck for my user. after that what happens is: >>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>> rad_recv: Access-Request packet from host 127.0.0.1:34065, id=125, length=55 User-Name = "SVD" User-Password = "secret" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 4 modcall[authorize]: module "preprocess" returns ok for request 4 modcall[authorize]: module "chap" returns noop for request 4 modcall[authorize]: module "mschap" returns noop for request 4 rlm_realm: No '@' in User-Name = "SVD", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 4 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 4 radius_xlat: 'SVD' rlm_sql (sql): sql_set_user escaped user --> 'SVD' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'SVD' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'SVD' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'SVD' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'SVD' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): No matching entry in the database for request from user [SVD] modcall[authorize]: module "sql" returns notfound for request 4 modcall: leaving group authorize (returns ok) for request 4 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [SVD/secret] (from client localhost port 0) <<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<, funny thing is, i dont even see the ippool trace again. i can post more details, but maybe this is a common error. thx in advance for your help

1 0

FreeRADIUS crashes after EAP/PEAP authentication
by Nick Larsen 31 Aug '06

31 Aug '06

Hi I sent an email to the list with the subject "EAP PEAP, unable to load certificate", but as the subject has changed slightly, I've decided to create a new thread. Has anyone had any issues at all when setting up PEAP? My FreeRADIUS installation, which is used for ADSL/Dial Up AAA (and if I can get it working Wireless AAA), crashes as a wireless client tries to authenticate, but is fine for DSL/Dial Up. I'm running FreeRADIUS 1.1.1 (OpenSSL 0.9.7e-p1 25 Oct 2004). Running on: FreeBSD radius02.01.net.nz 6.0-RELEASE FreeBSD 6.0-RELEASE #0: Wed Nov 2 22:33:15 UTC 2005 root@s-dallas.cse.buffalo.edu:/usr/obj/usr/src/sys/GENERIC sparc64 FreeRADIUS confuration line: ./configure --sysconfdir=/etc --localstatedir=/var --disable-ltdl-install --with-ltdl-include=/usr/local/include --with-ltdl-lib=/usr/local/lib --with-large-files --with-rlm_sql_unixodbc --without-rlm_krb5 --without-rlm_sql_postgresql --without-rlm_ldap --enable-strict-dependencies --disable-shared --with-openssl-includes=/usr/local/include/openssl --with-openssl-libraries=/usr/local/lib Here is the radiusd -XA output when a wireless user tries to authenticate: Ready to process requests. rad_recv: Access-Request packet from host 10.10.1.199:1812, id=5, length=73 User-Name = "nick" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x02010009016e69636b NAS-IP-Address = 10.10.1.199 Message-Authenticator = 0x44a4bae6e408185535e54b666e440793 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "nick", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 9 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 radius_xlat: 'nick' rlm_sql (sql): sql_set_user escaped user --> 'nick' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'nick' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName, radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'nick' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'nick' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName, radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'nick' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group authenticate (returns handled) for request 0 Sending Access-Challenge of id 5 to 10.10.1.199 port 1812 Framed-IP-Address := 10.10.1.197 Service-Type := Framed-User Framed-Protocol := PPP Acct-Interim-Interval := 600 Framed-IP-Netmask := 255.255.255.0 EAP-Message = 0x010200061920 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x441787b224b2cade909f815da10d28a2 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 10.10.1.199:1812, id=6, length=156 User-Name = "nick" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0202004a198000000040160301003b010000370301d47428dbffab776a5aa27dd1f3ae43b58ba88be83f19c437a92b5e416c87ecf600001000040005000a000900640062000300060100 State = 0x441787b224b2cade909f815da10d28a2 NAS-IP-Address = 10.10.1.199 Message-Authenticator = 0xd35a0b343af33d868016f1faa2c401ca Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "nick", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: EAP packet type response id 2 length 74 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 radius_xlat: 'nick' rlm_sql (sql): sql_set_user escaped user --> 'nick' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'nick' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName, radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'nick' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'nick' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName, radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'nick' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 (other): before/accept initialization TLS_accept: before/accept initialization Segmentation fault: 11 (core dumped) root@radius02 [/etc/raddb]# Any help at all would be much appreciated, as I have spent hours (and days even) on researching the causes and have found nothing. I know FreeRADIUS is quite capable of doing PEAP, so it must somehow be my configuration. Let me know if there's any info I've left out. -- Regards, Nick Larsen Wellington NEW ZEALAND

3 5

Freeradius crashed on me
by Lisa Casey 30 Aug '06

30 Aug '06

Hi, I have a FreeBSD 5.3 box running freeradius. This box also runs sendmail and does e-mail for a small amount (~50) users. For the past two days I have been trying to rebuild sendmail on this box so it would support SMTP Auth. I have not got that working, but that would be truly off-topic for this list. I'm only mentioning this because it MAY have played a role in what happened with Freeradius. As part of trying to get SMTP Auth working, I installed Cyrus-SASL v2. Again, I have no idea if this has any bearing on what happened with radius or not. I'm working on sendmail, haven't messed with radius at all, radius has been working fine, then I get a call from a customer about 2:00 - he can't get connected. So I took a look at the radius.log and saw this: Wed Aug 30 14:01:37 2006 : Error: radiusd.conf[1299] Failed to link to module 'rlm_counter': Shared object "lib gdbm.so.3" not found, required by "rlm_counter-1.0.1.so" So I paniced. At this point radius wasn't working and none of our customers can get connected. I started trying to "fix" things on an emergency basis. I edited /usr/local/etc/raddb/radiusd.conf and commevnted out my rlm_counter monthly stuff. Then I attempted to restart the radius server. I next got this in radius.log: Wed Aug 30 14:19:28 2006 : Error: ERROR: Cannot find a configuration entry for module "exec". So I edited radiusd.conf again and commented out exec in the Instantiate section. I restarted radius and got this in radius.log: Wed Aug 30 15:07:12 2006 : Error: ERROR: Cannot find a configuration entry for module "expr". So I edited radiusd.conf again and commented out expr in the Instantiate section. I restarted radius and got this in radius.log: I restarted radius and got this in radius.log: Wed Aug 30 15:08:31 2006 : Error: /usr/local/etc/raddb/users[1]: Unexpected trailing comma in check item list f or entry DEFAULT Wed Aug 30 15:08:31 2006 : Error: Errors reading /usr/local/etc/raddb/users Wed Aug 30 15:08:31 2006 : Error: radiusd.conf[1020]: files: Module instantiation failed. So I edited my users file and removed the DEFAULT entry I had at the top for monthly time limits. I then restarted radius and now it works. My question is: What the hell happened? I honestly don't know. I haven't been working on radius or changed anything. What I was doing was installing Cyrus SASL and attempting to rebuild Sendmail. The only thing I can figure is that while I was messing around with SASL and sendmail I did something with shared libraries? I don't have a clue if this is what happened, but if it is I don't know where to go look to see what's wrong with libraries (if anything). Help, please? Anyone? Thanks, Lisa Casey

2 1

(no subject)
by Kartthik 30 Aug '06

30 Aug '06

2 1