- Freeradius-Users - lists.freeradius.org

Re: LDAP and mySQL
by Roger Thomas 28 Jul '06

28 Jul '06

Quoting Nicolas Baradakis <nbk(a)sitadelle.com>: > > This is common to use OpenLDAP for auth and MySQL for acct. > > http://freeradius.org/radiusd/doc/ldap_howto.txt In that howto on the 2nd para of OVERVIEW: "The radius servers will be accepting Radius auth packets and Radius acct packets. The accounting packets will be stored locally on each radius server and then forwarded to the Accounting radius server, using radrelay. The Accounting radius server will store all the radius information in some sort of database such as MySQL, Postgres, or Oracle." Question: My setup is rather simple. Just one server at the moment that houses the LDAP, RADIUS and mySQL server. Would it be possible to make mySQL accept the acct packets by default and thus making no use of radrelay altogether? -- Roger --------------------------------------------------- Sign Up for free Email at http://ureg.home.net.my/ ---------------------------------------------------

5 5

(no subject)
by Elie Hani 28 Jul '06

28 Jul '06

Hi; I have this error in the log file: rlm_sql: packet has no account status type. [user '', nas x.x.x.x] Error: rlm_unix: no Accounting-Status-Type attribute in request. Error: rlm_radutmp: No Accounting-Status-Type record. I am using postgreSql Database. Any idea? Thanks Elie Hani

3 3

rlm_dbm with empty check and reply items
by Gabriel L. Somlo 28 Jul '06

28 Jul '06

Alan & all, I want to use rlm_dbm for authorization with no check or reply items. A user is authorized if he is listed in the dbm database, and not authorized if not present: modules { ... dbm { usersfile = ${confdir}/users.dbm } ... } ... authorize { ... dbm { notfound = reject } } So, what I need is a dbm file which has "empty" content associated with each username key. "Empty" actually means a "\n\n" string (first '\n' for no check items, second one for no reply items). I can create such a database by calling dbm routines from my own C code, and it works fine with the radiusd.conf excerpt above. HOWEVER, I would like to use the rlm_dbm_parser binary included with the freeradius package. The trouble is, this code checks for the length of each content record before inserting into the dbm file, and refuses to do so unless the record is more than 3 characters long (rlm_dbm_parser.c, line 158, inside function 'static int storecontent' as per freeradius-snapshot-20060728): static int storecontent (const char * username) { datum d,k; int res; if ( pdb == NULL || concntr < 3 ) return 1; /* ^^^^^^^^^^^^^^ */ DOUT2("store:\n%s\ncontent:\n%s",username,content); d.dptr = content; ... Is there a known good reason why this code wants length >=3, or why it prevents check items and reply items from being empty at the same time ? If yes, inquiring minds want to know :) If not, please apply the attached patch, which modifies the check from < 3 to < 2, allowing "empty" keys to be stored in the dbm. Thanks much, Gabriel

1 0

sql_set_user escaped user " HELP"
by ravi reddy 28 Jul '06

28 Jul '06

Hi Users I have been using FreeRadius-1.1.2 with Mysql database For accounting purpose only with combination of Sip-Express-Router So, here what's my problem is some accounting details are very fair but some are getting very rough data :- that means when call starts it logs like 4 to 5 records with starting time and when call stops it again logs in 5 to 6 records with acct stop time . For this reason "just for one call it is almost writing up to 10 Records and my database Engine is becoming very slow" So , how can I set the FreeRadius server so that it logs for one call only one record?. Below are some points i noticed "jack" calls "Billy" here radius server is setting records as sql_set_user escaped user---> jack when account starts and writing to database when acct stops sql_set_user escaped user-----> jack " here in this style i am getting only one record for one call" sql_set_user escaped user------>Billy " if its like this when act stops iam almost gettings 10 records for one call" SO, HOW I CAN SET THE SQL.CONF SO THAT , THE FREERADIUS SERVER BY DEFAULT IT HAS TO TAKE ONLY CALLED PERSON AS "sql_set_user escaped user " Please Help me Guys. Thank You. Regards, Ravi.

2 1

EAP doest work with Cisco Catalyst 2950?
by Thai Duong 28 Jul '06

28 Jul '06

Hi all, I'm new to this list. I have spent hours searching Google but still cant not find the solution for my problem so I decide it's time for the first post. I follow instructions from http://www.linuxjournal.com/article/8017 with the following configuration (instead of WLAN, I'm going to secure my LAN so no access point here) : - Authentication server: Freeradius 1.1.2 + OpenSSL 0.9.8a. The server is my laptop running Ubuntu 6.06. The IP address is 192.168.22.180 - Authenticator: Cisco Catalyst 2950 whose IP is 192.168.22.23 - Suppliant: WinXP service pack 2 This setup never works as expected. WinXP kept complaining "Unable to join to the network". I could not figure out what was the problem. There were no clue in freeradiusd's logfile and ethereal's dumpfile. Or maybe I'm no expert on this subject to see the clue. Please help. You can grab all of my freeradius's configuration, logfile and ethernet's dumpfile from http://innology.com.vn/8021x.tar.gz. Please take a look at it. TIA, Thai Duong. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

5 15

Error: Discarding duplicate request
by Aleksandar Stojilkovic 28 Jul '06

28 Jul '06

Hello, My log is full of this kind of errors: Wed Jul 26 02:55:54 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 27 due to unfinished request 11$ Wed Jul 26 02:56:16 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 28 due to unfinished request 11$ Wed Jul 26 02:57:12 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 30 due to unfinished request 11$ Wed Jul 26 02:57:16 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 31 due to unfinished request 11$ Wed Jul 26 02:57:18 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 32 due to unfinished request 11$ Wed Jul 26 02:59:14 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 36 due to unfinished request 11$ Wed Jul 26 10:47:53 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 19 due to unfinished request 12$ Wed Jul 26 10:47:55 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 20 due to unfinished request 12$ Wed Jul 26 15:10:32 2006 : Error: Discarding duplicate request from client APTrkaliste:1026 - ID: 93 due to unfinished reques$ Wed Jul 26 19:35:58 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 203 due to unfinished request 1$ Wed Jul 26 20:31:30 2006 : Error: Discarding duplicate request from client APJankaVeselinovica:2051 - ID: 74 due to unfinishe$ Please for some help! Kind Regards, Aleksandar Stojilkovic

8 19

Assignment of range of IP to a specific VLAN
by radhika putty 28 Jul '06

28 Jul '06

Hi all Is there any way that the Radius server could instruct the Acess Point to assign a range of IP Adresses for a specific VLAN. Or this coniguration needs to be done in the Acess Point itself. I couldnt find any option to do this in the Acess Point. btw I use Proxim4000. Pls throw some light on this Thanks Radhika --------------------------------- See the all-new, redesigned Yahoo.com. Check it out.

2 1

PATCH: rlm_dbm_parser and empty check-items
by Gabriel L. Somlo 27 Jul '06

27 Jul '06

Hi, I'm trying to use rlm_dbm for authorization, and discovered that the rlm_dbm_parser program won't allow an entry to have an empty check-items list. You can't have, for instance: foo ; ; or foo ; You must have foo some_junk == here ; if foo is to be added to the resulting users.dbm database. To be more precise, you can't have empty check-items AND empty reply-items, which I think one should be allowed to have... :) The attached patch fixes that, and allows rlm_dbm_parser to process a source file with empty check- and reply-items. I created the patch against the latest cvs snapshot (jul. 27). Please apply, or let me know why you think it's a bad idea... :) Thanks, Gabriel

1 0

Error: Discarding duplicate request
by Aleksandar Stojilkovic 27 Jul '06

27 Jul '06

Hello, My log is full of this kind of errors: Wed Jul 26 02:55:54 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 27 due to unfinished request 11$ Wed Jul 26 02:56:16 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 28 due to unfinished request 11$ Wed Jul 26 02:57:12 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 30 due to unfinished request 11$ Wed Jul 26 02:57:16 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 31 due to unfinished request 11$ Wed Jul 26 02:57:18 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 32 due to unfinished request 11$ Wed Jul 26 02:59:14 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 36 due to unfinished request 11$ Wed Jul 26 10:47:53 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 19 due to unfinished request 12$ Wed Jul 26 10:47:55 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 20 due to unfinished request 12$ Wed Jul 26 15:10:32 2006 : Error: Discarding duplicate request from client APTrkaliste:1026 - ID: 93 due to unfinished reques$ Wed Jul 26 19:35:58 2006 : Error: Discarding duplicate request from client APMajur:2048 - ID: 203 due to unfinished request 1$ Wed Jul 26 20:31:30 2006 : Error: Discarding duplicate request from client APJankaVeselinovica:2051 - ID: 74 due to unfinishe$ Please for some help! Kind Regards, Aleksandar Stojilkovic

1 0

Timezone settings?
by Khoa Nguyen 27 Jul '06

27 Jul '06

Hi, I am using freeradius-0.9.3 with postgres 7.4.11. I have the following issue: The radius message from a client has Event-Timestamp displayed as local EDT time, but when Radiusd proccesses the message, the Event-Timestamp was converted to UTC time (as shown in the radacct detail log files). How can I disable this? I checked the timezone setting on the freeradius server machine, and it was set to EDT. Is there a config parameter that tells freeradius not to alter the Event-Timestamp? Thanks, Khoa

2 1