- Freeradius-Users - lists.freeradius.org

Re: Accounting start/stop packets
by David Mitton 13 Jun '06

13 Jun '06

Typically No. The accounting start packet is generated by most NASes when the authentication is approved. Unless there is a static IP address assigned to the port, it will not wait for the DHCP cycle to complete (which could even fail!). Dave. ----- Original Message ----- From: "John Williams" To: freeradius-users(a)lists.freeradius.org Subject: Accounting start/stop packets Date: Tue, 13 Jun 2006 11:39:26 +0100 Currently the end users IP address is only sent in accounting stop packets. Is there a way to get the start packets to include the IP address also? Thanks John -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.3/362 - Release Date: 12/06/2006 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Radius Proxying and IP injection
by John Williams 13 Jun '06

13 Jun '06

Hi all We are proxying a realm for a customer that takes ADSL connections from us. Our ADSL connections terminate on a Cisco 7204 over an L2TP tunnel. The proxying seems to be working fine as all requests for the realm are sent to the customers radius server. And our log files show that the authentication was "OK". However the users that are authenticating are being dropped offline as soon as they authenticate. The account logs show the reason as being "User-Request" although the user hasn't requested a disconnect, in fact they aren't connected long enough to do so. The customer is also sending a framed IP address for each user that connects via the users radius users file entry. I'm wondering if this has something to do with the problem, although I can't really see why. The customer is issuing IP addresses from our own RIPE allocation that the Cisco knows about and we announce via BGP to upstreams. I'm trying to get some radius and cisco debugging for these users, but unfortunately everyone has buggered off home and most of the users are offices. So I guess I'm just wondering if there are any gotchas with radius proxying and injecting IP addresses that anyone may have come across. Or does anyone have any ideas what I should be looking for to help fix the problem? Thanks In Advance John

2 8

Re: error: Failed dependencies: libeap-1.1.2.so is needed by freeradius-1.1.2-0.i386
by bt4＠york.ac.uk 13 Jun '06

13 Jun '06

>> On Friday 09 June 2006 17:19, Alberto Cruz wrote: >> These is the output from the commands: >> [root at cdr i386]# rpm -qp --provides freeradius-1.1.2-0.i386.rpm >> config(freeradius) = 1.1.2-0 >> libradius-1.1.2.so >> libradius-1.1.2.so.debug >> radiusd >> rlm_sql_mysql-1.1.2.so >> rlm_sql_mysql-1.1.2.so.debug >> freeradius = 1.1.2-0 > > That is a very short list. There should be lots of rlm_ modules listed, > not just mysql. Look for any warnings/errors when you try to build the > RPM, or specifically the rlm_eap module. My guess is that you're being > hit by the same libtool problem I've run into when trying to build an RPM > on my CentOS 4 box. > > Kevin Bonner Could this be the problem :- if [ "xrlm_eap" != "x" ]; then \ /usr/src/redhat/BUILD/freeradius-1.1.2/libtool --mode=install /usr/src/redhat/BUILD/freeradius-1.1.2/install-sh -c -c \ rlm_eap.la /var/tmp/freeradius-root/usr/lib/rlm_eap.la || exit $?; \ rm -f /var/tmp/freeradius-root/usr/lib/rlm_eap-1.1.2.la; \ ln -s rlm_eap.la /var/tmp/freeradius-root/usr/lib/rlm_eap-1.1.2.la || exit $?; \ fi libtool: install: warning: relinking `rlm_eap.la' (cd /usr/src/redhat/BUILD/freeradius-1.1.2/src/modules/rlm_eap; /bin/sh /usr/src/redhat/BUILD/freeradius-1.1.2/libtool --mode=relink gcc -release 1.1.2 -module -export-dynamic -o rlm_eap.la -rpath /usr/lib rlm_eap.lo eap.lo mem.lo state.lo rlm_eap.c eap.c mem.c state.c /usr/src/redhat/BUILD/freeradius-1.1.2/src/lib/libradius.la libeap/libeap.la -lltdl -lnsl -lresolv -lpthread) gcc -shared rlm_eap.lo eap.lo mem.lo state.lo -L/usr/src/redhat/BUILD/freeradius-1.1.2/src/lib/.libs -L/usr/lib -lradius -leap -lltdl -lnsl -lresolv -lpthread -Wl,-soname -Wl,rlm_eap-1.1.2.so -o .libs/rlm_eap-1.1.2.so /usr/bin/ld: cannot find -leap collect2: ld returned 1 exit status libtool: install: error: relink `rlm_eap.la' with the above command before installing it libtool: install: warning: remember to run `libtool --finish /usr/lib' gmake[6]: Leaving directory `/usr/src/redhat/BUILD/freeradius-1.1.2/src/modules/rlm_eap' -- Ben Thompson

1 0

ldap credential caching
by sumi thra 13 Jun '06

13 Jun '06

Hi All, Any body knows how to enable ldap credential caching in freeradius-1.1.1? Does this version of freeradius support this feature? If so, what config change needs to be done? Please do reply me. Thanks, Sumi

1 0

Accounting start/stop packets
by John Williams 13 Jun '06

13 Jun '06

Currently the end users IP address is only sent in accounting stop packets. Is there a way to get the start packets to include the IP address also? Thanks John -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.3/362 - Release Date: 12/06/2006

1 0

Accounting problem
by Antonio Matera 13 Jun '06

13 Jun '06

Hi, I tried to configure my freeradius with EAP-PEAP auth with accounting. My aim is to have unique account, in other words only one user can access with the same user and password. I read that there are two method for accounting the first is using the radutmp file and the second is using the sql accounting. I configured my radius.conf file in this way: preacct { preprocess acct_uninque suffix } accounting { acct_unique detail unix radutmp } seassion { radutmp sql (??) } In my sql.conf file I had uncomment the simul_count_query. In this way I suppose that I have enabled both account types. When I try to connect 2 laptop with the same user and password, both are authenticated and if I see the radacct table or I write in console radwho I can find the accounting of the same user two times. What is wrong in my configuration? It is possible to do accounting without the sql database? Does Anyone know a guide for configure accountig? Thanks a lot. Bye Antonio

2 2

radiusd crashing on FreeBSD 6.0
by Paul Khavkine 12 Jun '06

12 Jun '06

Hi Guys. I have radiusd 1.1.2 from the latest FreeBSD port crashing strangly during a stress test. I'm not sure where exactly it occurs because no core dump is produced. Even when ran inside gdb, i can't get any backtrace info at all: srv03# gdb /usr/local/sbin/radiusd GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd"... (gdb) run -f Starting program: /usr/local/sbin/radiusd -f warning: Unable to get location for thread creation breakpoint: generic error [New LWP 100255] Mon Jun 12 16:39:46 2006 : Info: Starting - reading configuration files ... [New Thread 0x8077000 (LWP 100255)] Program terminated with signal SIGABRT, Aborted. The program no longer exists. (gdb) bt No stack. (gdb) My system is FreeBSD 6.0-RELEASE-p2. Core dumps are turned on in radiusd.conf, the system core file limit is set to unlimited and i'm running the server as root. It does crash when run with -x with a free() error: in free(): error: chunk is already free Program terminated with signal SIGABRT, Aborted. The program no longer exists. (gdb) bt No stack. (gdb) It does NOT crash when ran with -X Does anyone have an idea how i can debug it further ? Thanx Paul

1 0

Logging
by Cliff Hayes 12 Jun '06

12 Jun '06

Hello all, Making good progress learning Freeradius. With your help, my new server is running and authenticating now. However, we are used to being able to see logs of all activity (tail -f logfile). With Freeradius, nothing is being written to the logs unless there is a problem. How can I get the logs to show the same stuff that scrolls when Freeradius is in debug mode? That's the level of detail we're used to seeing in the logs. Thanks, Cliff

3 9

RE: Cisco 1130AG w/Radius
by Patrick Daley 12 Jun '06

12 Jun '06

Thank you so much, it helped. Thank you, Patrick Daley AgniTEK 979-260-8324 x304 pdaley(a)agnitek.com www.agnitek.com -----Original Message----- From: freeradius-users-bounces+pdaley=agnitek.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+pdaley=agnitek.com@lists.freeradius.org ] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk Sent: Monday, June 12, 2006 12:56 PM To: FreeRadius users mailing list Subject: Re: Cisco 1130AG w/Radius Hi, > I am having a little trouble getting freeRADIUS to work on my Cisco > 1130AG's. If someone has experience using these with their radius > server, please respond with all the steps you have taken to have it > work, e.g., where and what you put in IOS and on what pages. I for the > life of me can not get it to work. I have tried for weeks. I appreciate > ANY feedback and welcome all suggestions. The cisco documentation is very clear on how to configure for RADIUS on an 1130AG. http://cisco.com/en/US/products/hw/wireless/ps430/products_configuration _guide_chapter09186a0080606d3b.html I dont use the webGUI or management tools either, the command line is a fast and accurate way of configuring the devices. If you use the 1130AG in LWAPP mode, then you'll need to be looking at your WCS device settings for configuring RADIUS alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Cisco 1130AG w/Radius
by Patrick Daley 12 Jun '06

12 Jun '06

I am having a little trouble getting freeRADIUS to work on my Cisco 1130AG's. If someone has experience using these with their radius server, please respond with all the steps you have taken to have it work, e.g., where and what you put in IOS and on what pages. I for the life of me can not get it to work. I have tried for weeks. I appreciate ANY feedback and welcome all suggestions.

3 2