- Freeradius-Users - lists.freeradius.org

AW: framed ip in raddacct
by Rheindorf Jan 11 Aug '06

11 Aug '06

Hello Jan (Talking to myself :D ) Solved this issue. Tried to force UPDATE-Packets with Acct-Interim-Interval, but my cisco NAS seemed to ignore this. I dont know why. This Attribute should be supported since IOS 12.1. I could force the Cisco NAS to send UPDATE PAckets with the following command. tunnel(config)#aaa accounting update periodic 5 now the Cisco NAS sends Accounting Updates every 5 Minutes and after the first UPDATE the framed IP is in the radacct Table and shown in the Online USers Page of DialUpAdmin. I am happy. Thanks Jan :D -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+jan.rheindorf=spoe.at(a)lists.freeradius.org [mailto:freeradius-users-bounces+jan.rheindorf=spoe.at@lists.freeradius.org] Im Auftrag von Rheindorf Jan Gesendet: Mittwoch, 02. August 2006 12:22 An: freeradius-users(a)lists.freeradius.org Betreff: framed ip in raddacct Hello freeradius users I am using freeradius 1.0.4 with pgsql and dialupadmin(version 1.70.2). Everything works great, but there is only one thing i want to know. In dialupadmin there is this online users page, where i can see which users are currently online. I see the username, name and duration, but Ip-address and caller-ID is empty. Caller-Id is emtpy, because it isnt sended , the cisco server who is acting as the LNS is not able to send the Caller Id. Thats allright. The Ip-adress is from the main_pool of the radius server, but it is not put in the first INSERT-query when the user logs in. So i cant see it in dialup_admin, because the query for online-users is only looking for sessions without an accstoptime. If i logout(sending an acc-stop) radius puts the right ip-address of the client in the radacct-table. Is there a way to put the Ip-adress in the first INSERT or another way to see it in the online-users page, because it would be very userful to see the ip-adress of the online users. thanks for help greez from vienna jan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Does Freeradius support IAPP (802.11f)??
by zhu yunwu 11 Aug '06

11 Aug '06

Hi everyone: Now I am using the Freeradius. Could you tell me whether IAPP ( 802.11f) is really suppported in Freeradius? if not,could you please kindly advise that what kind of radius server support IAPP and how to configure it? Highly appreicated your prompt reply and thanks very much for your help. Yours Sincerely, WoodLand

2 3

How modify users file?
by 나종현 11 Aug '06

11 Aug '06

1 0

Mysql procedure and freeradius
by Alesha 11 Aug '06

11 Aug '06

Hi All. I have the trouble with mysql & freeradius.I begin to write own authorization using mysql procedures.In sql.conf i have this --- authorize_check_query = "CALL DB.auth_check('%{SQL-User-Name}');" -- And in DB have procedure auth_check with this code: --- CREATE TEMPORARY TABLE DB.make_auth (id int,username VARCHAR(40),attribute VARCHAR(30),op VARCHAR(3),value VARCHAR(40)) ENGINE MEMORY; ....certain checks... INSERT INTO DB.make_auth (id,username,attribute,op,value) VALUES (dbUID,username,"User-Password",":=",dbPassword); SELECT id,username,attribute,op,value FROM DB.make_auth; -- So..this procedure when i call her from CLI return table like this +------+----------+---------------+------+--------+ | id | username | attribute | op | value | +------+----------+---------------+------+--------+ | 1 | username | User-Password | := | password | +------+----------+---------------+------+--------+ Look good..but when I'm trying to use radtest and radius -X i'm getting this: ---- radius_xlat: 'username' rlm_sql (sqlauth): sql_set_user escaped user --> 'username' radius_xlat: 'CALL DB.auth_check('username');' rlm_sql (sqlauth): Reserving sql socket id: 28 rlm_sql_mysql: query: CALL DB.auth_check('username'); rlm_sql_mysql: MYSQL check_error: 1312 received rlm_sql_getvpdata: database query error rlm_sql (sqlauth): SQL query error; rejecting user rlm_sql (sqlauth): Released sql socket id: 28 --- What's wrong??? P.S.Sorry for my english)))

3 6

Autoreply: AW: AW: AW: FreeRadius - Setting IP addresses
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

AW: AW: AW: FreeRadius - Setting IP addresses
by Rheindorf Jan 11 Aug '06

11 Aug '06

I created them by myself. Dont know if they are created by radiusd. :D greez Jan ************************************** Jan Rheindorf Netzwerktechnik -------------------------------------- Informationstechnologiezentrum der SPÖ Windmühlgasse 26 1060 Wien Tel.: +43 1 534 27 456 Email.: Jan.Rheindorf(a)spoe.at ************************************** -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces+jan.rheindorf=spoe.at(a)lists.freeradius.org [mailto:freeradius-users-bounces+jan.rheindorf=spoe.at@lists.freeradius.org] Im Auftrag von Mike Gesendet: Donnerstag, 10. August 2006 14:11 An: FreeRadius users mailing list Betreff: Re: AW: AW: FreeRadius - Setting IP addresses Ok those files do not exist. My guess is because this is a brand new installation and those files will not be created until I start actually taking in dial-up connections? Rheindorf Jan wrote: > This means that you have to delete the db.ippool and db.ipindex files, > because they think you are using the "old"(before changing) Ip-Range. > Just delete them and touch them again.(dont forget to give the right > permissions) > > If you want to specify static adresses, do it in the Users-file > directly. > The entries in the users file would be > > Framed-IP-Address = 192.168.92.65, > Framed-IP-Netmask = 255.255.255.255, > > greez Jan > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Autoreply: check attribute for several values
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

check attribute for several values
by Ruslan N. Marchenko 11 Aug '06

11 Aug '06

Hi all. Sorry for my poor english, mybe my explanations are not clear. I want to find out, if i can add to radcheck table several values for attribute, in order to validate it in sequence? radius=> SELECT radgroupcheck.GroupName, radgroupcheck.Attribute, radgroupcheck.Value,radgroupcheck.Op FROM radgroupcheck, usergroup WHERE usergroup.Username = '3813978' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id; groupname | attribute | value | op -------------+--------------+------------+---- VoIP Phones | Service-Type | Login-User | == VoIP | Service-Type | Call-Check | == (2 rows) radius=> SELECT attribute,value ,op FROM radcheck WHERE Username='3813978'; attribute | value | op -------------------+-------------+---- Framed-IP-Address | 192.168.5.5 | == User-Password | 3813978 | := (2 rows) debug output: rad_recv: Access-Request packet from host 127.0.0.1:4799, id=146, length=246 User-Name = "3813978" NAS-IP-Address = 192.168.7.229 NAS-Identifier = "GnuGk" NAS-Port-Type = Virtual Service-Type = Call-Check Framed-IP-Address = 192.168.5.5 Calling-Station-Id = "1751don(a)olymp.local" Called-Station-Id = "3813978" h323-conf-id = "h323-conf-id=8975D519 283611DB 80658D6C 7728828E" h323-call-origin = "h323-call-origin=answer" h323-call-type = "h323-call-type=VoIP" h323-gw-id = "h323-gw-id=GnuGk" User-Password = "3813978" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 205 modcall[authorize]: module "preprocess" returns ok for request 205 modcall[authorize]: module "chap" returns noop for request 205 radius_xlat: '3813978' rlm_sql (sql): sql_set_user escaped user --> '3813978' ... skip ... rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): No matching entry in the database for request from user [3813978] modcall[authorize]: module "sql" returns notfound for request 205 modcall: leaving group authorize (returns ok) for request 205 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Delaying request 205 for 1 seconds Finished request 205 -- Olimp, System Administrator IT Dept. 8 062 381-34-28 ---- Looking forward to reading yours. MRN-RIPE RUFF-EUNIC RUFF-6BONE Ruslan N. Marchenko

1 0

Autoreply: Re: Authenticate users from multiple realms on the same NAS
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0

Autoreply: Re: Does Freeradius support IAPP (802.11f)??
by gparlato＠tnet.it 11 Aug '06

11 Aug '06

Attualmente non sono in sede. Per richieste urgenti contattare lo 800 919299 o inviare una mail a info(a)tnet.it oppure a padova(a)tnet.it. Cordiali Saluti Giuseppe Parlato Area Network mailto:gparlato@tnet.it

1 0