- Freeradius-Users - lists.freeradius.org

Local groups in FreeRadius ?
by Ami Schieber 28 Aug '06

28 Aug '06

Hi, I've seen several Q&A about local groups of users but they all refer to system groups (i.e. - /etc/group configuration). I'd like to have a Group definition that will include attributes that are common to all users that belong in this group. For example : Group Finance, Pool-Name := finance_pool, Reply-Message = "Hello Finance User, %u" Group Engineering, Pool-Name := eng_pool, Reply-Message = "Hello Eng %u" Is it possible to achieve in freeradius , how ? Thanks, Ami

3 12

Regarding memory leaks
by Ravi S M 28 Aug '06

28 Aug '06

Hi I am integrating my rlm_otp module with freeradius code . if I run radiusd server with the purify it is giving leaks As MLK :95 bytes Finished radiusd ( 278 errors, 95 leaked bytes) Purify instrumented /home/ravis/kshitij/freeradius-1.1.2/src/main/.libs/radiusd (pid 8830 at Fri Aug 25 12:54:30 2006) Command-line: radiusd UMR: Uninitialized memory read (18 times) UMR: Uninitialized memory read (19 times) UMR: Uninitialized memory read (6 times) UMR: Uninitialized memory read (79 times) UMR: Uninitialized memory read (96 times) UMR: Uninitialized memory read (3 times) UMR: Uninitialized memory read (2 times) UMR: Uninitialized memory read ABR: Array bounds read (7 times) ABR: Array bounds read (7 times) ABR: Array bounds read (7 times) ABR: Array bounds read (3 times) ABR: Array bounds read (3 times) ABR: Array bounds read (3 times) UMR: Uninitialized memory read (8 times) UMR: Uninitialized memory read (3 times) UMR: Uninitialized memory read (3 times) PAR: Bad function parameter (7 times) ABR: Array bounds read ABR: Array bounds read ABR: Array bounds read Current file descriptors in use: 7 Memory leaked: 95 bytes (0.0142%); potentially leaked: 0 bytes (0%) MLK: 95 bytes leaked in 7 blocks This memory was allocated from: malloc [rtlib.o] lt_emalloc [ltdl.c:863] lt_emalloc (size) size_t size; { => lt_ptr mem = lt_dlmalloc (size); if (size && !mem) LT_DLMUTEX_SETERROR (LT_DLSTRERROR (NO_MEMORY)); return mem; canonicalize_path [ltdl.c:2044] assert (path && *path); assert (pcanonical); => canonical = LT_EMALLOC (char, 1+ LT_STRLEN (path)); if (!canonical) return 1; try_dlopen [ltdl.c:2562] lt_dlopenext [ltdl.c:2959] linkto_module [modules.c:207] Block of 19 bytes at 0x32ed90 Block of 15 bytes at 0x231728 Block of 14 bytes at 0x22c9e0 Block of 12 bytes (3 times); last block at 0x2122b8 Block of 11 bytes at 0x32e480 Purify Heap Analysis (combining suppressed and unsuppressed blocks) Thread Summary : 1 thread(s) in existence Program exited with status code 0. So please provide some usefull inputs to solve this problem Thanks & regards Ravi ============================================================================================================================ Tech Mahindra, formerly Mahindra-British Telecom. Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

Account lockout enforcement and min lengh reqs
by Ellis, Scott 1 (N-Comptel Inc.) 28 Aug '06

28 Aug '06

Hello everyone, I am running freeradius v1.0.1 in a Redhat linux environment. Does there exist a mechanism to enforce account lockout after 3 tries and strong passwords? The environment is Cisco routers and switches. If there exists some kind of post-auth script, that would be nice. Thanks, Scott

2 1

A few clarifications on EAP-TTLS
by luigi natalino 28 Aug '06

28 Aug '06

Hello, I'am using freeradius 1.1.2 with eap-ttls. I have read that I can use Eap-Ttls in trasparent way for the Client, that is without using Client side certificates and without installing other software since that eap-ttls support legacy authentication system (I'am using a wall garden and I'can't install nothing on the clients). So i've configured eap.conf (I've just decommented this few lines in default configuration) tls { private_key_password = whatever private_key_file = /etc/mycerts/cert-srv.pem certificate_file = /etc/mycerts/cert-srv.pem CA_file = /etc/mycerts/root.pem dh_file = /etc/mycerts/dh random_file = /etc/mycerts/random fragment_size = 1024 include_length = yes } ttls { default_eap_type = md5 copy_request_to_tunnel = no use_tunneled_reply = no } And this is the output of "radiusd -X" Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded LDAP ldap: server = "localhost" ldap: port = 389 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "cn=Manager,dc=valug,dc=it" ldap: tls_mode = no ldap: start_tls = no ldap: tls_cacertfile = "(null)" ldap: tls_cacertdir = "(null)" ldap: tls_certfile = "(null)" ldap: tls_keyfile = "(null)" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "allow" ldap: password = "mypass" ldap: basedn = "ou=homewifi,dc=valug,dc=it" ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "userPassword" ldap: access_attr = "userPassword" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" ldap: groupmembership_attribute = "radiusGroupName" ldap: dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes ldap: set_auth_type = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP userPassword mapped to RADIUS User-Password rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusNASIpAddress mapped to RADIUS NAS-IP-Address rlm_ldap: LDAP radiusGroupName mapped to RADIUS Ldap-Group rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP radiusReplyMessage mapped to RADIUS Reply-Message rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id conns: 0x8139948 Module: Instantiated ldap (ldap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/usr/local/etc/raddb/certs/cert-srv.pem" tls: certificate_file = "/usr/local/etc/raddb/certs/cert-srv.pem" tls: CA_file = "/usr/local/etc/raddb/certs/demoCA/cacert.pem" tls: private_key_password = "whatever" tls: dh_file = "/usr/local/etc/raddb/certs/dh" tls: random_file = "/usr/local/etc/raddb/certs/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" tls: cipher_list = "(null)" tls: check_cert_issuer = "(null)" rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls ttls: default_eap_type = "md5" ttls: copy_request_to_tunnel = no ttls: use_tunneled_reply = no rlm_eap: Loaded and initialized type ttls mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded checkval checkval: item-name = "Calling-Station-Id" checkval: check-name = "Calling-Station-Id" checkval: data-type = "string" checkval: notfound-reject = no rlm_checkval: Registered name Calling-Station-Id for attribute 31 Module: Instantiated checkval (checkval) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 127.0.0.1:1041, id=0, length=219 User-Name = "utente" CHAP-Challenge = 0xb8e461988db3fcb15283eae64c342d1b CHAP-Password = 0x0090a807a589b4864d7900bee913da1710 NAS-IP-Address = 127.0.0.1 Service-Type = Login-User Framed-IP-Address = 192.168.182.8 Calling-Station-Id = "XX-XX-XX-XX-XX-XX" Called-Station-Id = "YY-YY-YY-YY-YY-YY" NAS-Identifier = "localhost" Acct-Session-Id = "44f1bf3c00000001" NAS-Port-Type = Wireless-802.11 NAS-Port = 1 Message-Authenticator = 0x81223a8de1013cb55976c322793533a2 WISPr-Logoff-URL = "http://192.168.182.5:3990/logoff" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "utente", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 This is the error rlm_eap: No EAP-Message, not doing EAP what's wrong? I must install specific software on the clients (like Xsupplicant) or I can solve in other way (trasparent for the clients)? Many Thanks Luigi Natalino _________________________________________________________________ Don't just search. Find. Check out the new MSN Search! http://search.msn.click-url.com/go/onm00200636ave/direct/01/

3 3

how to send to a switch Port Priority ?
by George Comanescu 28 Aug '06

28 Aug '06

hello I have the following users file and I wold like to send to the switch on authentification PortPriority ... a auth-Type := Local, User-Password == "a" Service-Type = Administrative-User, Reply-Message = "Salut user:A!" b Auth-Type := EAP, User-Password == "b" Service-Type = Administrative-User, Reply-Message = "Hi :B!", ???? Port-Priority = Platinum, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = "256", Vendor-Specific = "562" ... -- Cu respect, George Comanescu

2 1

RE: Report Generator
by Andre van der Walt 28 Aug '06

28 Aug '06

Hi Sean, Please may I get a copy of this. Thanks, Andre van der Walt > -----Original Message----- > From: > freeradius-users-bounces+andre.vdwalt=is.co.za(a)lists.freeradiu > s.org > [mailto:freeradius-users-bounces+andre.vdwalt=is.co.za@lists.f > reeradius.org] On Behalf Of Sean > Sent: 23 August 2006 09:58 PM > To: freeradius-users(a)lists.freeradius.org > Subject: Report Generator > > Hi, > > Ive written a report generator in PHP and HTML that will allow your > clients to generate usage reports from the FreeRadius log files. When > the user logs in he/she is asked for their IP address and the > Month that > they want to display. If anyone wants a copy let me know. If there is > enough interest I'll make it available for public download. > > Regards, > > Sean Bracken > > http://swarmhotspots.com > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > Please note: This email and its content are subject to the disclaimer as displayed at the following link http://www.is.co.za/disc.asp. Should you not have Web access, send a mail to disclaimers(a)is.co.za and a copy will be emailed to you.

1 0

CHAP, LDAP and MS AD
by duckeo 28 Aug '06

28 Aug '06

I just wanted to confirm what I have researched and found to be 'not feasible'. Using CHAP authentication with Microsoft Active Directory is not possible without modifying the Active Directory to store a plain-text version of the password. MS-CHAP is an option but must be supported on the client end, using ntlm_auth. I ask as I am trying to persue the path of getting the end client to use PAP, but wanted to get my facts straight first. Thanks

2 1

RE: New to FreeRADIUS and looking for answers...
by Geoff Dornan 27 Aug '06

27 Aug '06

Agreed in most aspects, but how I find it easier to learn, and by learn I mean been able to understand why it works, is by trial and error, anyone can cut and paste a few lines in a file and get it working but really how much would you have you have advanced your knowledge on a specific project (freeradius for e.g) without having to go through all the trial and errors of debugging, making a few changes, debugging some more and eventually getting it right, that is an awesome feeling when it works, and it will work, eventually. Having documentation is great place to start or go back to as a reference. But to me you can't bet a few cups of coffee and some serious time chucked in to get the desired results. I think chaps like Alan are making invaluable contributions to all out there using it, there are a lot of people on the list and I see that mainly 8-10 people only ever take the time to answer people joining and asking questions (this is not specifically a Free radius list issue), may be wrong but that it was I have seen on the replies to posts. I know I am guilty of that, we read, we archive and we watch other people reply and tell ourselves "yup that was what I would have said" Why not step up and say it next time, Geoff -----Original Message----- From: freeradius-users-bounces+geoff=cmcnetworks.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+geoff=cmcnetworks.net@lists.freeradius. org] On Behalf Of Scott Holland Sent: Sunday, August 27, 2006 10:57 AM To: freeradius-users(a)lists.freeradius.org Subject: Re: New to FreeRADIUS and looking for answers... I'm not going to get into what the project lacks as this is old news. At least Alan is working on documentation to support people like us. :) Having said that, I find it amazing as to the lack of overal support for the project on the Internet. Working examples seem to be hard to come by? All of the work I do is Microsoft Server based (no suprise)! I am new to Linux in almost every sense of the word yet I'm well aware of how powerfull it can be... The downfall of Linux on the whole, and I'm not talking about any one project and or distro, is the total lack of real support. When I say real support, I mean good, solid documentation to help new users from the ground up. If you think back to the days of DOS. You could find countless books on the subject. In Australia, you will find this very hard... The solution appears to be, the Internet which I can only assume is because of the "public" nature of Linux... Finding that sweet source of help on Linux however, on the magic Internet is harder than you would think - This is proven in FreeRADIUS a project which has been around for some time... We all know its fantastic, and we all know Linux is sensational even if we newbies can't use it... What upsets me is those users who clearly have their head around it who don't help guys like us! I'm not having a go at anyone on this project, I'm talking in general so please understand... :) I am very keen to move away from Microsoft based solutions and this was going to be my first project... The perfect box to handle the AAA requirements of my wireless network, and to act as proxy to filter the web............ How bloody hard this is... Regards, Scott >From: "affora deeb" <engineerafraa(a)gmail.com> >Reply-To: FreeRadius users mailing list ><freeradius-users(a)lists.freeradius.org> >To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> >Subject: Re: New to FreeRADIUS and looking for answers... >Date: Sun, 27 Aug 2006 08:40:37 +0200 > >hi Scott >i have the same problem u talked about >i need someone to help me in configuring free radius on linux server step >by >step >so please if any one can do this favour i'll be so thankfull >afraa > > >On 8/26/06, Scott Holland <hollstar2047(a)hotmail.com> wrote: >> >>Hi Guys, >> >>I'd like to begin by saying I'm new, 100% in fact to both Linux and >>FreeRADIUS. Having said that, I am in a position where by I feel I need to >>use both to overcome certain problems I am having at work. Allow me to >>offer >>a very brief overview as I don't want to waste anyones time: >> >>We have a building with 10+ WAP. They are connected to an ADSL2 service >>which is being abused by staff. I now have a HP DL340 1U Server, ready to >>be >>set up as a FreeRADIUS box but, have no clue as to how. >> >>In short, I need to better monitor what users are doing and restrict the >>level of access they have such as what websites they can visit and so on. >>In >>part, I feel FreeRADIUS can help. >> >>Having said all this, I'm at a loss like so many people it would seem with >>the FreeRADIUS concept. It appears powerfull on the surface however I seem >>to be unable to find any good material on the subject. Most of it, is old >>and dated. >> >>Yes, the documentation is good, but I see nothing that really guides you, >>step by step, in learning this complex program.... >> >>While I'd love someone to spend the time to help, I don't expect it! What >>I >>would like, is someone to help me by pointing me in the right direction! I >>have been looking at the book RADIUS, which is currently very hard to get >>here in Australia. So hard, I'd have to get it from the US and wait around >>eight weeks as the publisher is yet to reprint a book first written back >>in >>2002... >> >>I hope you can understand where I am coming from and I look forward to any >>help people can offer. >> >>Regards, >> >>Scott >> >> >>- >>List info/subscribe/unsubscribe? See >>http://www.freeradius.org/list/users.html >> >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

4 3

New to FreeRADIUS and looking for answers...
by Scott Holland 27 Aug '06

27 Aug '06

Hi Guys, I'd like to begin by saying I'm new, 100% in fact to both Linux and FreeRADIUS. Having said that, I am in a position where by I feel I need to use both to overcome certain problems I am having at work. Allow me to offer a very brief overview as I don't want to waste anyones time: We have a building with 10+ WAP. They are connected to an ADSL2 service which is being abused by staff. I now have a HP DL340 1U Server, ready to be set up as a FreeRADIUS box but, have no clue as to how. In short, I need to better monitor what users are doing and restrict the level of access they have such as what websites they can visit and so on. In part, I feel FreeRADIUS can help. Having said all this, I'm at a loss like so many people it would seem with the FreeRADIUS concept. It appears powerfull on the surface however I seem to be unable to find any good material on the subject. Most of it, is old and dated. Yes, the documentation is good, but I see nothing that really guides you, step by step, in learning this complex program.... While I'd love someone to spend the time to help, I don't expect it! What I would like, is someone to help me by pointing me in the right direction! I have been looking at the book RADIUS, which is currently very hard to get here in Australia. So hard, I'd have to get it from the US and wait around eight weeks as the publisher is yet to reprint a book first written back in 2002... I hope you can understand where I am coming from and I look forward to any help people can offer. Regards, Scott

4 9

Need Help Mysql
by Albis Nunez 27 Aug '06

27 Aug '06

Hi, please see error below. I need help to get this issue fix, please somebody can help. thanks in advance. rlm_sql (sql): Could not link driver rlm_sql_mysql: rlm_sql_mysql.so: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. radiusd.conf[1824] Unknown module "sql". radiusd.conf[1753] Failed to parse authorize section. Regards. --------------------------------- All-new Yahoo! Mail - Fire up a more powerful email and get things done faster.

1 0