- Freeradius-Users - lists.freeradius.org

Are possible multiple ntdomain realms??????
by wekz 09 Jun '06

09 Jun '06

And if they are, what efect has with_ntdomain_hack=yes. Does it affect to all?? Well, Hi you all I hope haven't been too direct ;) I'll getting more troubles as I do more complex configurations. I ask this because first I had to authenticate users by machine authentication. The users in this case sends User-Name like host/username and the only way I found for working this out was to use ntdomain realm with "/" as the delimiter and enable with_ntdomain_hack. The other options stripes the User-Name but then packets doesn't match EAP-Identity ( at least one of them ), that is why I used ntdomain, for being able to use with_ntdomain_hack. Now I've got pda-users that sends domain\username and if I don't use ntdomain & with_ntdomain_hack it fails. So, that's why I ask if multiple ntdomains are allowed and how. Any method or idea will be welcome. Thanks

2 2

need help from FR gurus.
by Abul Monsur Mannan 09 Jun '06

09 Jun '06

Dear FR lovers, Here is the packages I've got in RH Linux4 with freeradius-1.1.1. and mysql.I've a problem about the driver of mysql.Would you please give me some time to figure out where r the problems and what r the solutions ? [root@localhost ~]# rpm -qa|grep mysql mysqlclient10-3.23.58-4.RHEL4.1 mysql-4.1.7-4.RHEL4.1 mysql-devel-4.1.7-4.RHEL4.1 mysql-server-4.1.7-4.RHEL4.1 libdbi-dbd-mysql-0.6.5-10.RHEL4.1 mysql-bench-4.1.7-4.RHEL4.1 [root@localhost ~]# cd /usr/local/src/freeradius-1.1.1/src/modules/rlm_sql/drivers/rlm_sql_mysql [root@localhost rlm_sql_mysql]# ls config.cache config.h.in config.status configure.in Makefile.in config.h config.log configure Makefile sql_mysql.c [root@localhost lib]# cd /usr/local/src/freeradius-1.1.1/src/modules/rlm_sql [root@localhost rlm_sql]# ls conf.h configure Makefile rlm_sql.c rlm_sql.lo sql.lo config.log configure.in Makefile.in rlm_sql.h rlm_sql.o sql.o config.status drivers README rlm_sql.la sql.c stable [root@localhost rlm_sql]# cd /usr/local/src/freeradius-1.1.1/src/modules/lib [root@localhost lib]# ls notused-1.1.1.so rlm_eap_leap.so rlm_mschap.la notused.a rlm_eap_md5-1.1.1.so rlm_mschap.lai notused.la rlm_eap_md5.a rlm_mschap.so notused.lai rlm_eap_md5.la rlm_ns_mta_md5-1.1.1.so notused.so rlm_eap_md5.lai rlm_ns_mta_md5.a rlm_acct_unique-1.1.1.so rlm_eap_md5.so rlm_ns_mta_md5.la rlm_acct_unique.a rlm_eap_mschapv2-1.1.1.so rlm_ns_mta_md5.lai rlm_acct_unique.la rlm_eap_mschapv2.a rlm_ns_mta_md5.so rlm_acct_unique.lai rlm_eap_mschapv2.la rlm_otp-1.1.1.so rlm_acct_unique.so rlm_eap_mschapv2.lai rlm_otp.a rlm_always-1.1.1.so rlm_eap_mschapv2.so rlm_otp.la rlm_always.a rlm_eap_peap-1.1.1.so rlm_otp.lai rlm_always.la rlm_eap_peap.a rlm_otp.so rlm_always.lai rlm_eap_peap.la rlm_pam-1.1.1.so rlm_always.so rlm_eap_peap.lai rlm_pam.a rlm_attr_filter-1.1.1.so rlm_eap_peap.so rlm_pam.la rlm_attr_filter.a rlm_eap_sim-1.1.1.so rlm_pam.lai rlm_attr_filter.la rlm_eap_sim.a rlm_pam.so rlm_attr_filter.lai rlm_eap_sim.la rlm_pap-1.1.1.so rlm_attr_filter.so rlm_eap_sim.lai rlm_pap.a rlm_attr_rewrite-1.1.1.so rlm_eap_sim.so rlm_pap.la rlm_attr_rewrite.a rlm_eap.so rlm_pap.lai rlm_attr_rewrite.la rlm_eap_tls-1.1.1.so rlm_pap.so rlm_attr_rewrite.lai rlm_eap_tls.a rlm_passwd-1.1.1.so rlm_attr_rewrite.so rlm_eap_tls.la rlm_passwd.a rlm_chap-1.1.1.so rlm_eap_tls.lai rlm_passwd.la rlm_chap.a rlm_eap_tls.so rlm_passwd.lai rlm_chap.la rlm_eap_ttls-1.1.1.so rlm_passwd.so rlm_chap.lai rlm_eap_ttls.a rlm_perl-1.1.1.so rlm_chap.so rlm_eap_ttls.la rlm_perl.a rlm_checkval-1.1.1.so rlm_eap_ttls.lai rlm_perl.la rlm_checkval.a rlm_eap_ttls.so rlm_perl.lai rlm_checkval.la rlm_exec-1.1.1.so rlm_perl.so rlm_checkval.lai rlm_exec.a rlm_preprocess-1.1.1.so rlm_checkval.so rlm_exec.la rlm_preprocess.a rlm_counter-1.1.1.so rlm_exec.lai rlm_preprocess.la rlm_counter.a rlm_exec.so rlm_preprocess.lai rlm_counter.la rlm_expr-1.1.1.so rlm_preprocess.so rlm_counter.lai rlm_expr.a rlm_radutmp-1.1.1.so rlm_counter.so rlm_expr.la rlm_radutmp.a rlm_dbm-1.1.1.so rlm_expr.lai rlm_radutmp.la rlm_dbm.a rlm_expr.so rlm_radutmp.lai rlm_dbm_cat rlm_fastusers-1.1.1.so rlm_radutmp.so rlm_dbm.la rlm_fastusers.a rlm_realm-1.1.1.so rlm_dbm.lai rlm_fastusers.la rlm_realm.a rlm_dbm_parser rlm_fastusers.lai rlm_realm.la rlm_dbm.so rlm_fastusers.so rlm_realm.lai rlm_detail-1.1.1.so rlm_files-1.1.1.so rlm_realm.so rlm_detail.a rlm_files.a rlm_sql-1.1.1.so rlm_detail.la rlm_files.la rlm_sql.a rlm_detail.lai rlm_files.lai rlm_sqlcounter-1.1.1.so rlm_detail.so rlm_files.so rlm_sqlcounter.a rlm_digest-1.1.1.so rlm_ippool-1.1.1.so rlm_sqlcounter.la rlm_digest.a rlm_ippool.a rlm_sqlcounter.lai rlm_digest.la rlm_ippool.la rlm_sqlcounter.so rlm_digest.lai rlm_ippool.lai rlm_sql.la rlm_digest.so rlm_ippool.so rlm_sql.lai rlm_eap-1.1.1.so rlm_ippool_tool rlm_sql_log-1.1.1.so rlm_eap.a rlm_krb5-1.1.1.so rlm_sql_log.a rlm_eap_gtc-1.1.1.so rlm_krb5.a rlm_sql_log.la rlm_eap_gtc.a rlm_krb5.la rlm_sql_log.lai rlm_eap_gtc.la rlm_krb5.lai rlm_sql_log.so rlm_eap_gtc.lai rlm_krb5.so rlm_sql.so rlm_eap_gtc.so rlm_ldap-1.1.1.so rlm_unix-1.1.1.so rlm_eap.la rlm_ldap.a rlm_unix.a rlm_eap.lai rlm_ldap.la rlm_unix.la rlm_eap_leap-1.1.1.so rlm_ldap.lai rlm_unix.lai rlm_eap_leap.a rlm_ldap.so rlm_unix.so rlm_eap_leap.la rlm_mschap-1.1.1.so smbencrypt rlm_eap_leap.lai rlm_mschap.a [root@localhost lib]# cd /usr/local/src/freeradius-1.1.1/doc/examples [root@localhost examples]# ls iplanet.ldif Makefile mysql.sql oracle.sql iplanet.schema mssql.sql openldap.schema postgresql.sql After running the command in terminal window Radius-X I got the error message like below--- * * * rlm_sql (sql): "/usr/local/src/freeradius-1.1.1/src/modules/rlm_sql/drivers/rlm_sql_mysql" is NOT an SQL driver! radiusd.conf[14]: sql: Module instantiation failed. radiusd.conf[1798] Unknown module "sql". radiusd.conf[1727] Failed to parse authorize section. Is there any GURU to help me out of this problem. Thank you.

3 2

NAS table fields
by Cliff Hayes 09 Jun '06

09 Jun '06

Hello, I looked through all the documentation I could find and surfed google but could not find details on what needs to go in the NAS fields. For example, in the clients.conf file, the only required fields are SECRET and SHORTNAME. In the NAS table, SHORTNAME is optional (can be NULL), and NASNAME cannot be NULL. So, do I copy what I had in the clients.conf SHORTNAME into the NAS table NASNAME? If so, what is SHORTNAME FOR? Also, what is COMMUNITY for? Which fields are used by FreeRadius and which ones are just for reference? Cliff

2 1

Re: Freeradius-Users Digest, Vol 14, Issue 42
by Gilbert Lo 09 Jun '06

09 Jun '06

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School

1 0

FW: Logging
by Cliff Hayes 09 Jun '06

09 Jun '06

I also tried starting radius with -y option (per readme http://www.freeradius.org/radiusd/doc/README) and still there is nothing written to the logs for a good login. -----Original Message----- From: freeradius-users-bounces+chayes=afo.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+chayes=afo.net@lists.freeradius.org]On Behalf Of Cliff Hayes Sent: Friday, June 09, 2006 11:02 AM To: FreeRadius users mailing list Subject: RE: Logging Kevin, Tried that. Unfortunately, it acts like starting radiusd with the -x option, which scrolls all output to the screen. I use Fedora 5 with radiusd configured as a service, so when I do "service radiusd start", it starts scrolling to the screen. There will not usually be a terminal window dedicated to this box. Also, attempting to stop the scrolling (CTL-C) also terminates the radiusd process. What I really need is for the data to go to the log file. log_auth_goodpass = yes does not appear to work for me for some reason. Cliff -----Original Message----- From: freeradius-users-bounces+chayes=afo.net(a)lists.freeradius.org [mailto:freeradius-users-bounces+chayes=afo.net@lists.freeradius.org]On Behalf Of Kevin Bonner Sent: Friday, June 09, 2006 10:38 AM To: FreeRadius users mailing list Subject: Re: Logging On Friday 09 June 2006 10:57, Cliff Hayes wrote: > Chris, > > All of those 3 options you mentioned were already set. What else could be > wrong? > > Cliff Add this to radiusd.conf: debug_level = 2 (or 3) Debug level 2 gives you the same output as -xx, level 3 gives even more output (and timestamps!). Kevin Bonner - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

RE: error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2
by Sandworm 09 Jun '06

09 Jun '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > > I already tried your suggestion but I'm getting the same > error. Is there > anything else that I should to do? > > Regards > > Alberto Cruz > I had pointed this out a couple of months ago. The way I had fixed it then was to add the line Nicolas had suggested, as repeated below, to freeradius.conf: > Perhaps adding this command in freeradius.spec could fix the problem: > sed -i "s@doc/freeradius@doc/freeradius-%{version}@" doc/Makefile doc/examples/Makefile doc/rfc/Makefile But perhaps, as Nicolas had suggested, this could be replaced by a - - -docdir option. > However, I think it'd be more elegant to add an option --docdir to > configure and update the makefiles to use that. I'm afraid this part is beyond my capabilities... But even after that, to get all the files (this only copies four or so files in), I had also needed the %files part of the spec file to be: %files %defattr(-,root,root) %doc doc/Acct-Type doc/Autz-Type doc/CYGWIN doc/ChangeLog doc/DIFFS doc/MACOSX %doc doc/OS2 doc/Post-Auth-Type doc/RADIUS-LDAP-eDirectory doc/RADIUS-SQL.schema %doc doc/README doc/Session-Type doc/Simultaneous-Use doc/aaa.txt doc/ascend %doc doc/bay doc/bugs doc/cisco doc/coding-methods.txt doc/configurable_failover %doc doc/duplicate-users doc/ldap_howto.txt doc/load-balance.txt doc/misc-nas %doc doc/module_interface doc/mssql doc/performance-testing doc/processing_users_file %doc doc/proxy doc/radrelay doc/release-method.txt doc/rfc/ %doc doc/rlm* doc/supervise-radiusd.txt %doc doc/tuning_guide doc/variables.txt todo/ COPYRIGHT INSTALL This fixes it. Would it be possible to get this into the next release? -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkSI4GkACgkQmw4BJyaatJ0xnACgiWQQrJ+pB7AH/eOAASdUwZTEsTEA nAqTweXSujToCVcBBbufrylD9Ryp =liwO -----END PGP SIGNATURE-----

3 3

rlm_sql is not updating the record...
by raviprakash sunkara 09 Jun '06

09 Jun '06

Hi .... I'm working openser + mysql + Freeradius.... when i'm making a call for accounting, first it say " Acct-Status-Type = Failed " and then its " Acct-Status-Type = start " After that when the User hang up the call , it didn't update the Acct Stop time and inserting the t2 records ... And also what means this...... rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'stop packet with zero session length. [user '666(a)192.168.2.55', nas '192.168.2.55']' rlm_sql (sql) in sql_accounting: stop packet with zero session length. [user '666(a)192.168.2.55', nas '192.168.2.55'] rlm_sql (sql): Released sql socket id: 2 This query is not updating ---> " 'UPDATE radacct SET AcctStopTime = '2006-06-09 19:57:27', AcctSessionTime = '', AcctInputOctets = '', AcctOutputOctets = '', AcctTerminateCause = '', AcctStopDelay = '0', ConnectInfo_stop = '' WHERE AcctSessionId = ' 76788233-9611-4A96-9FAA-E829F175C69C(a)192.168.2.20' AND NASIPAddress = ' 192.168.2.55'' " why ? and this query is inserting -----> " INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values(' 76788233-9611-4A96-9FAA-E829F175C69C(a)192.168.2.20', '63170499b83f412d', ' 666(a)192.168.2.55', '', '192.168.2.55', '5060', '', DATE_SUB('2006-06-09 19:57:27', INTERVAL (0 + 0) SECOND), '2006-06-09 19:57:27', '', '', '', '', '', '', 'sip:555@192.168.2.55', 'sip:666@192.168.2.55', '', 'Sip-Session', '', '', '0', '0')' " Acct-Session-time is zero showing ? why ? Can U see the below one .... I need to change . please guys help me , this very important to complete the task .... please . rad_recv: Accounting-Request packet from host 192.168.2.55:33879, id=219, length=233 Acct-Status-Type = Stop Service-Type = Sip-Session Sip-Response-Code = 200 Sip-Method = BYE User-Name = "666(a)192.168.2.55" Calling-Station-Id = "sip:666@192.168.2.55" Called-Station-Id = "sip:555@192.168.2.55" Sip-Translated-Request-URI = "sip:555@192.168.2.21:5060" Acct-Session-Id = "76788233-9611-4A96-9FAA-E829F175C69C(a)192.168.2.20 " Sip-To-Tag = "2044753626" Sip-From-Tag = "4110988557" Sip-Cseq = "57538" NAS-Port = 5060 Acct-Delay-Time = 0 NAS-IP-Address = 192.168.2.55 Processing the preacct section of radiusd.conf modcall: entering group preacct for request 2 modcall[preacct]: module "preprocess" returns noop for request 2 rlm_acct_unique: Hashing 'NAS-Port = 5060,Client-IP-Address = 192.168.2.55,NAS-IP-Address = 192.168.2.55,Acct-Session-Id = " 76788233-9611-4A96-9FAA-E829F175C69C(a)192.168.2.20",User-Name = " 666(a)192.168.2.55"' rlm_acct_unique: Acct-Unique-Session-ID = "63170499b83f412d". modcall[preacct]: module "acct_unique" returns ok for request 2 rlm_realm: Looking up realm "192.168.2.55" for User-Name = " 666(a)192.168.2.55" rlm_realm: No such realm "192.168.2.55" modcall[preacct]: module "suffix" returns noop for request 2 modcall[preacct]: module "files" returns noop for request 2 modcall: leaving group preacct (returns ok) for request 2 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 2 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.2.55/detail-20060609' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/192.168.2.55/detail-20060609 modcall[accounting]: module "detail" returns ok for request 2 radius_xlat: '/usr/local/var/log/radius/radutmp' radius_xlat: '666(a)192.168.2.55' modcall[accounting]: module "radutmp" returns ok for request 2 radius_xlat: '666(a)192.168.2.55' rlm_sql (sql): sql_set_user escaped user --> '666(a)192.168.2.55' radius_xlat: 'UPDATE radacct SET AcctStopTime = '2006-06-09 19:57:27', AcctSessionTime = '', AcctInputOctets = '', AcctOutputOctets = '', AcctTerminateCause = '', AcctStopDelay = '0', ConnectInfo_stop = '' WHERE AcctSessionId = '76788233-9611-4A96-9FAA-E829F175C69C(a)192.168.2.20' AND NASIPAddress = '192.168.2.55'' rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'stop packet with zero session length. [user '666(a)192.168.2.55', nas '192.168.2.55']' rlm_sql (sql) in sql_accounting: stop packet with zero session length. [user '666(a)192.168.2.55', nas '192.168.2.55'] rlm_sql (sql): Released sql socket id: 2 radius_xlat: 'INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values(' 76788233-9611-4A96-9FAA-E829F175C69C(a)192.168.2.20', '63170499b83f412d', ' 666(a)192.168.2.55', '', '192.168.2.55', '5060', '', DATE_SUB('2006-06-09 19:57:27', INTERVAL (0 + 0) SECOND), '2006-06-09 19:57:27', '', '', '', '', '', '', 'sip:555@192.168.2.55', 'sip:666@192.168.2.55', '', 'Sip-Session', '', '', '0', '0')' rlm_sql (sql): Released sql socket id: 2 modcall[accounting]: module "sql" returns noop for request 2 modcall: leaving group accounting (returns ok) for request 2 Sending Accounting-Response of id 219 to 192.168.2.55 port 33879 -- Thanks and Regards with cheers Sunkara Ravi Prakash (Voip Developer) Hyperion Technology www.hyperion-tech.com <b>

1 0

how to check ldap attrib and take action on accounting start
by Tariq Rashid 09 Jun '06

09 Jun '06

One of our systems uses a fairly basic freeradius system (based on freeradius 1.0.2). A simple LDAP databse is used to check that a password matches the supplied username. What is the recommended way to achieve the following: * upon receipt of accounting start check LDAP to see if an attribute has been set (possibly something like "seenLive"). * if it is set then then take no special action, continue as normal * if it hasn't been set then do the following: - set the attribute so that no special action is taken in future - send a message to a specified server (possibly XML over tcp). this i suspect will be done by calling an executable? or should the python/C modules be used for this? your experience or advice appreciated. tariq

1 0

Re: Freeradius-Users Digest, Vol 14, Issue 39
by Gilbert Lo 09 Jun '06

09 Jun '06

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School

1 0

error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2
by Alberto Cruz 09 Jun '06

09 Jun '06

Hi I got the following error when I'm trying to build the RPM at RedHat Enterprise 4.0: error: Installed (but unpackaged) files(s) found: /usr/share/doc/freeradius/Acct-Type /usr/share/doc/freeradius/Autz-Type /usr/share/doc/freeradius/CYGWIN /usr/share/doc/freeradius/ChangeLog .... .... etc /usr/share/doc/freeradius/variables.txt I have been searching for a similar post at the archive and I found some related to Release 1.1.1 but I have not clear what to do to fix this behavior. Could anybody help me? Regards Alberto Cruz

2 2