- Freeradius-Users - lists.freeradius.org

RE: rlm_sqlippool - try sql if not try sql1
by RobertB 25 May '06

25 May '06

>>>RobertB wrote: >>> >>> At present it is not possible to do something like: try sql, if not >>> available try sql1. >> >>Did you try to put the module in a "redundant" or a "group" >>stanza? http://freeradius.org/radiusd/doc/configurable_failover Actually I'm using it with accounting packets, but it doesn't work with rlm_sqlippool, as radiusd.conf is expecting ip pool name. The sql-instance-name is set in sqlippool.sqls. Having two sql-instances would mean two sqlippools.conf files and a different pool in each which wouldn't really work, unless I'm missing something. Cheers, RobertB

1 0

RE: FreeRadius daily build fails on FreeBSD?
by Remy de Ruysscher 25 May '06

25 May '06

Thanks for the quick reply. It works using net-snmp instead of ucd-snmp. > -----Original Message----- > From: > freeradius-users-bounces+remy=unix-asp.com(a)lists.freeradius.or > g > [mailto:freeradius-users-bounces+remy=unix-asp.com@lists.freer > adius.org] On Behalf Of Alan DeKok > Sent: donderdag 25 mei 2006 20:27 > To: FreeRadius users mailing list > Subject: Re: FreeRadius daily build fails on FreeBSD? > > "Remy de Ruysscher" <remy(a)unix-asp.com> wrote: > > On FreeBSD I get these errors after ./configure and make: > > > > radius_snmp.c:176: warning: (near initialization for > > `radiusauth_variables[4]') > > radius_snmp.c:177: warning: initialization makes pointer > from integer > > without a cast > > radius_snmp.c:177: warning: excess elements in struct initializer > > The only way that happens is if UCD-SNMP or NET-SNMP have > updated their data structures to be incompatible with earlier > versions. > > So... what SNMP are you using, and what version? What is > the definition of the "variables" structure in the SNMP you're using? > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

FreeRadius daily build fails on FreeBSD?
by Remy de Ruysscher 25 May '06

25 May '06

On FreeBSD I get these errors after ./configure and make: radius_snmp.c:176: warning: (near initialization for `radiusauth_variables[4]') radius_snmp.c:177: warning: initialization makes pointer from integer without a cast radius_snmp.c:177: warning: excess elements in struct initializer radius_snmp.c:177: warning: (near initialization for `radiusauth_variables[5]') radius_snmp.c:177: warning: excess elements in struct initializer radius_snmp.c:177: warning: (near initialization for `radiusauth_variables[5]') radius_snmp.c:177: warning: excess elements in struct initializer radius_snmp.c:177: warning: (near initialization for `radiusauth_variables[5]') radius_snmp.c:177: error: extra brace group at end of initializer radius_snmp.c:177: error: (near initialization for `radiusauth_variables[5]') radius_snmp.c:177: warning: excess elements in struct initializer radius_snmp.c:177: warning: (near initialization for `radiusauth_variables[5]') radius_snmp.c:178: warning: initialization makes pointer from integer without a cast radius_snmp.c:178: warning: excess elements in struct initializer radius_snmp.c:178: warning: (near initialization for `radiusauth_variables[6]') radius_snmp.c:178: warning: excess elements in struct initializer radius_snmp.c:178: warning: (near initialization for `radiusauth_variables[6]') radius_snmp.c:178: warning: excess elements in struct initializer radius_snmp.c:178: warning: (near initialization for `radiusauth_variables[6]') radius_snmp.c:178: error: extra brace group at end of initializer radius_snmp.c:178: error: (near initialization for `radiusauth_variables[6]') radius_snmp.c:178: warning: excess elements in struct initializer radius_snmp.c:178: warning: (near initialization for `radiusauth_variables[6]') radius_snmp.c:179: warning: initialization makes pointer from integer without a cast radius_snmp.c:179: warning: excess elements in struct initializer radius_snmp.c:179: warning: (near initialization for `radiusauth_variables[7]') radius_snmp.c:179: warning: excess elements in struct initializer radius_snmp.c:179: warning: (near initialization for `radiusauth_variables[7]') radius_snmp.c:179: warning: excess elements in struct initializer radius_snmp.c:179: warning: (near initialization for `radiusauth_variables[7]') radius_snmp.c:179: error: extra brace group at end of initializer radius_snmp.c:179: error: (near initialization for `radiusauth_variables[7]') radius_snmp.c:179: warning: excess elements in struct initializer radius_snmp.c:179: warning: (near initialization for `radiusauth_variables[7]') radius_snmp.c:180: warning: initialization makes pointer from integer without a cast radius_snmp.c:180: warning: excess elements in struct initializer radius_snmp.c:180: warning: (near initialization for `radiusauth_variables[8]') radius_snmp.c:180: warning: excess elements in struct initializer radius_snmp.c:180: warning: (near initialization for `radiusauth_variables[8]') radius_snmp.c:180: warning: excess elements in struct initializer radius_snmp.c:180: warning: (near initialization for `radiusauth_variables[8]') radius_snmp.c:180: error: extra brace group at end of initializer radius_snmp.c:180: error: (near initialization for `radiusauth_variables[8]') radius_snmp.c:180: warning: excess elements in struct initializer radius_snmp.c:180: warning: (near initialization for `radiusauth_variables[8]') radius_snmp.c:181: warning: initialization makes pointer from integer without a cast radius_snmp.c:181: warning: excess elements in struct initializer radius_snmp.c:181: warning: (near initialization for `radiusauth_variables[9]') radius_snmp.c:181: warning: excess elements in struct initializer radius_snmp.c:181: warning: (near initialization for `radiusauth_variables[9]') radius_snmp.c:181: warning: excess elements in struct initializer radius_snmp.c:181: warning: (near initialization for `radiusauth_variables[9]') radius_snmp.c:181: error: extra brace group at end of initializer radius_snmp.c:181: error: (near initialization for `radiusauth_variables[9]') radius_snmp.c:181: warning: excess elements in struct initializer radius_snmp.c:181: warning: (near initialization for `radiusauth_variables[9]') radius_snmp.c:182: warning: initialization makes pointer from integer without a cast radius_snmp.c:182: warning: excess elements in struct initializer radius_snmp.c:182: warning: (near initialization for `radiusauth_variables[10]') radius_snmp.c:182: warning: excess elements in struct initializer radius_snmp.c:182: warning: (near initialization for `radiusauth_variables[10]') radius_snmp.c:182: warning: excess elements in struct initializer radius_snmp.c:182: warning: (near initialization for `radiusauth_variables[10]') radius_snmp.c:182: error: extra brace group at end of initializer radius_snmp.c:182: error: (near initialization for `radiusauth_variables[10]') radius_snmp.c:182: warning: excess elements in struct initializer radius_snmp.c:182: warning: (near initialization for `radiusauth_variables[10]') radius_snmp.c:183: warning: initialization makes pointer from integer without a cast radius_snmp.c:183: warning: excess elements in struct initializer radius_snmp.c:183: warning: (near initialization for `radiusauth_variables[11]') radius_snmp.c:183: warning: excess elements in struct initializer radius_snmp.c:183: warning: (near initialization for `radiusauth_variables[11]') radius_snmp.c:183: warning: excess elements in struct initializer radius_snmp.c:183: warning: (near initialization for `radiusauth_variables[11]') radius_snmp.c:183: error: extra brace group at end of initializer radius_snmp.c:183: error: (near initialization for `radiusauth_variables[11]') radius_snmp.c:183: warning: excess elements in struct initializer radius_snmp.c:183: warning: (near initialization for `radiusauth_variables[11]') radius_snmp.c:184: warning: initialization makes pointer from integer without a cast radius_snmp.c:184: warning: excess elements in struct initializer radius_snmp.c:184: warning: (near initialization for `radiusauth_variables[12]') radius_snmp.c:184: warning: excess elements in struct initializer radius_snmp.c:184: warning: (near initialization for `radiusauth_variables[12]') radius_snmp.c:184: warning: excess elements in struct initializer radius_snmp.c:184: warning: (near initialization for `radiusauth_variables[12]') radius_snmp.c:184: error: extra brace group at end of initializer radius_snmp.c:184: error: (near initialization for `radiusauth_variables[12]') radius_snmp.c:184: warning: excess elements in struct initializer radius_snmp.c:184: warning: (near initialization for `radiusauth_variables[12]') radius_snmp.c:185: warning: initialization makes pointer from integer without a cast radius_snmp.c:185: warning: excess elements in struct initializer radius_snmp.c:185: warning: (near initialization for `radiusauth_variables[13]') radius_snmp.c:185: warning: excess elements in struct initializer radius_snmp.c:185: warning: (near initialization for `radiusauth_variables[13]') radius_snmp.c:185: warning: excess elements in struct initializer radius_snmp.c:185: warning: (near initialization for `radiusauth_variables[13]') radius_snmp.c:185: error: extra brace group at end of initializer radius_snmp.c:185: error: (near initialization for `radiusauth_variables[13]') radius_snmp.c:185: warning: excess elements in struct initializer radius_snmp.c:185: warning: (near initialization for `radiusauth_variables[13]') radius_snmp.c:186: warning: initialization makes pointer from integer without a cast radius_snmp.c:186: warning: excess elements in struct initializer radius_snmp.c:186: warning: (near initialization for `radiusauth_variables[14]') radius_snmp.c:186: warning: excess elements in struct initializer radius_snmp.c:186: warning: (near initialization for `radiusauth_variables[14]') radius_snmp.c:186: warning: excess elements in struct initializer radius_snmp.c:186: warning: (near initialization for `radiusauth_variables[14]') radius_snmp.c:186: error: extra brace group at end of initializer radius_snmp.c:186: error: (near initialization for `radiusauth_variables[14]') radius_snmp.c:186: warning: excess elements in struct initializer radius_snmp.c:186: warning: (near initialization for `radiusauth_variables[14]') radius_snmp.c:187: warning: initialization makes pointer from integer without a cast radius_snmp.c:187: warning: excess elements in struct initializer radius_snmp.c:187: warning: (near initialization for `radiusauth_variables[15]') radius_snmp.c:187: warning: excess elements in struct initializer radius_snmp.c:187: warning: (near initialization for `radiusauth_variables[15]') radius_snmp.c:187: warning: excess elements in struct initializer radius_snmp.c:187: warning: (near initialization for `radiusauth_variables[15]') radius_snmp.c:187: error: extra brace group at end of initializer radius_snmp.c:187: error: (near initialization for `radiusauth_variables[15]') radius_snmp.c:187: warning: excess elements in struct initializer radius_snmp.c:187: warning: (near initialization for `radiusauth_variables[15]') radius_snmp.c:188: warning: initialization makes pointer from integer without a cast radius_snmp.c:188: warning: excess elements in struct initializer radius_snmp.c:188: warning: (near initialization for `radiusauth_variables[16]') radius_snmp.c:188: warning: excess elements in struct initializer radius_snmp.c:188: warning: (near initialization for `radiusauth_variables[16]') radius_snmp.c:188: warning: excess elements in struct initializer radius_snmp.c:188: warning: (near initialization for `radiusauth_variables[16]') radius_snmp.c:188: error: extra brace group at end of initializer radius_snmp.c:188: error: (near initialization for `radiusauth_variables[16]') radius_snmp.c:188: warning: excess elements in struct initializer radius_snmp.c:188: warning: (near initialization for `radiusauth_variables[16]') radius_snmp.c:189: warning: initialization makes pointer from integer without a cast radius_snmp.c:189: warning: excess elements in struct initializer radius_snmp.c:189: warning: (near initialization for `radiusauth_variables[17]') radius_snmp.c:189: warning: excess elements in struct initializer radius_snmp.c:189: warning: (near initialization for `radiusauth_variables[17]') radius_snmp.c:189: warning: excess elements in struct initializer radius_snmp.c:189: warning: (near initialization for `radiusauth_variables[17]') radius_snmp.c:189: error: extra brace group at end of initializer radius_snmp.c:189: error: (near initialization for `radiusauth_variables[17]') radius_snmp.c:189: warning: excess elements in struct initializer radius_snmp.c:189: warning: (near initialization for `radiusauth_variables[17]') radius_snmp.c:190: warning: initialization makes pointer from integer without a cast radius_snmp.c:190: warning: excess elements in struct initializer radius_snmp.c:190: warning: (near initialization for `radiusauth_variables[18]') radius_snmp.c:190: warning: excess elements in struct initializer radius_snmp.c:190: warning: (near initialization for `radiusauth_variables[18]') radius_snmp.c:190: warning: excess elements in struct initializer radius_snmp.c:190: warning: (near initialization for `radiusauth_variables[18]') radius_snmp.c:190: error: extra brace group at end of initializer radius_snmp.c:190: error: (near initialization for `radiusauth_variables[18]') radius_snmp.c:190: warning: excess elements in struct initializer radius_snmp.c:190: warning: (near initialization for `radiusauth_variables[18]') radius_snmp.c:191: warning: initialization makes pointer from integer without a cast radius_snmp.c:191: warning: excess elements in struct initializer radius_snmp.c:191: warning: (near initialization for `radiusauth_variables[19]') radius_snmp.c:191: warning: excess elements in struct initializer radius_snmp.c:191: warning: (near initialization for `radiusauth_variables[19]') radius_snmp.c:191: warning: excess elements in struct initializer radius_snmp.c:191: warning: (near initialization for `radiusauth_variables[19]') radius_snmp.c:191: error: extra brace group at end of initializer radius_snmp.c:191: error: (near initialization for `radiusauth_variables[19]') radius_snmp.c:191: warning: excess elements in struct initializer radius_snmp.c:191: warning: (near initialization for `radiusauth_variables[19]') radius_snmp.c:192: warning: initialization makes pointer from integer without a cast radius_snmp.c:192: warning: excess elements in struct initializer radius_snmp.c:192: warning: (near initialization for `radiusauth_variables[20]') radius_snmp.c:192: warning: excess elements in struct initializer radius_snmp.c:192: warning: (near initialization for `radiusauth_variables[20]') radius_snmp.c:192: warning: excess elements in struct initializer radius_snmp.c:192: warning: (near initialization for `radiusauth_variables[20]') radius_snmp.c:192: error: extra brace group at end of initializer radius_snmp.c:192: error: (near initialization for `radiusauth_variables[20]') radius_snmp.c:192: warning: excess elements in struct initializer radius_snmp.c:192: warning: (near initialization for `radiusauth_variables[20]') radius_snmp.c:193: warning: initialization makes pointer from integer without a cast radius_snmp.c:193: warning: excess elements in struct initializer radius_snmp.c:193: warning: (near initialization for `radiusauth_variables[21]') radius_snmp.c:193: warning: excess elements in struct initializer radius_snmp.c:193: warning: (near initialization for `radiusauth_variables[21]') radius_snmp.c:193: warning: excess elements in struct initializer radius_snmp.c:193: warning: (near initialization for `radiusauth_variables[21]') radius_snmp.c:193: error: extra brace group at end of initializer radius_snmp.c:193: error: (near initialization for `radiusauth_variables[21]') radius_snmp.c:193: warning: excess elements in struct initializer radius_snmp.c:193: warning: (near initialization for `radiusauth_variables[21]') radius_snmp.c:194: warning: initialization makes pointer from integer without a cast radius_snmp.c:194: warning: excess elements in struct initializer radius_snmp.c:194: warning: (near initialization for `radiusauth_variables[22]') radius_snmp.c:194: warning: excess elements in struct initializer radius_snmp.c:194: warning: (near initialization for `radiusauth_variables[22]') radius_snmp.c:194: warning: excess elements in struct initializer radius_snmp.c:194: warning: (near initialization for `radiusauth_variables[22]') radius_snmp.c:194: error: extra brace group at end of initializer radius_snmp.c:194: error: (near initialization for `radiusauth_variables[22]') radius_snmp.c:194: warning: excess elements in struct initializer radius_snmp.c:194: warning: (near initialization for `radiusauth_variables[22]') radius_snmp.c:195: warning: initialization makes pointer from integer without a cast radius_snmp.c:195: warning: excess elements in struct initializer radius_snmp.c:195: warning: (near initialization for `radiusauth_variables[23]') radius_snmp.c:195: warning: excess elements in struct initializer radius_snmp.c:195: warning: (near initialization for `radiusauth_variables[23]') radius_snmp.c:195: warning: excess elements in struct initializer radius_snmp.c:195: warning: (near initialization for `radiusauth_variables[23]') radius_snmp.c:195: error: extra brace group at end of initializer radius_snmp.c:195: error: (near initialization for `radiusauth_variables[23]') radius_snmp.c:195: warning: excess elements in struct initializer radius_snmp.c:195: warning: (near initialization for `radiusauth_variables[23]') radius_snmp.c:196: warning: initialization makes pointer from integer without a cast radius_snmp.c:196: warning: excess elements in struct initializer radius_snmp.c:196: warning: (near initialization for `radiusauth_variables[24]') radius_snmp.c:196: warning: excess elements in struct initializer radius_snmp.c:196: warning: (near initialization for `radiusauth_variables[24]') radius_snmp.c:196: warning: excess elements in struct initializer radius_snmp.c:196: warning: (near initialization for `radiusauth_variables[24]') radius_snmp.c:196: error: extra brace group at end of initializer radius_snmp.c:196: error: (near initialization for `radiusauth_variables[24]') radius_snmp.c:196: warning: excess elements in struct initializer radius_snmp.c:196: warning: (near initialization for `radiusauth_variables[24]') radius_snmp.c:200: error: syntax error before "oid" radius_snmp.c:201: warning: function declaration isn't a prototype radius_snmp.c: In function `get_client': radius_snmp.c:205: error: `objid_len' undeclared (first use in this function) radius_snmp.c:205: error: (Each undeclared identifier is reported only once radius_snmp.c:205: error: for each function it appears in.) radius_snmp.c:205: error: `v' undeclared (first use in this function) radius_snmp.c:210: error: `exact' undeclared (first use in this function) radius_snmp.c:214: error: `objid' undeclared (first use in this function) radius_snmp.c:225: warning: return from incompatible pointer type radius_snmp.c: At top level: radius_snmp.c:238: error: syntax error before '*' token radius_snmp.c:243: error: syntax error before "switch" /usr/local/include/ucd-snmp/snmp_impl.h:118: warning: array 'sid' assumed to have one element radius_snmp.c:123: warning: 'radAccServ' declared `static' but never defined radius_snmp.c:129: warning: 'radAccEntry' declared `static' but never defined radius_snmp.c:135: warning: 'radAuthServ' declared `static' but never defined radius_snmp.c:141: warning: 'radAuthEntry' declared `static' but never defined radius_snmp.c:201: warning: 'get_client' defined but not used radius_snmp.c:29:1: unterminated #ifdef gmake[3]: *** [radius_snmp.lo] Error 1 gmake[3]: Leaving directory `/tmp/freeradius-snapshot-20060525/src/main' gmake[2]: *** [common] Error 2 gmake[2]: Leaving directory `/tmp/freeradius-snapshot-20060525/src' gmake[1]: *** [all] Error 2 gmake[1]: Leaving directory `/tmp/freeradius-snapshot-20060525/src' gmake: *** [common] Error 2 *** Error code 2 Stop in /tmp/freeradius-snapshot-20060525.

2 1

Re: could not determine local IP address
by Italo Morellato 25 May '06

25 May '06

Hi Alan and many thanks for the fast reply.. this is the report of radiusd -x command... _________________________________________________________________ rad_recv: Access-Request packet from host 10.10.0.30:1144, id=37, length=130 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 1116 NAS-Port-Type = Ethernet User-Name = "test" Calling-Station-Id = "00:15:D6:02:03:54" Called-Station-Id = "PPPoE" NAS-Port-Id = "wlan2" User-Password = "pqyqalxb" NAS-Identifier = "nas1" NAS-IP-Address = 10.10.0.30 rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): Released sql socket id: 4 rlm_sql (sql): Processing sql_postauth rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 Sending Access-Accept of id 37 to 10.10.0.30 port 1144 Framed-Routing = Broadcast-Listen Framed-Pool = "pppoe-pool1" Framed-IP-Netmask = 255.255.255.0 rad_recv: Accounting-Request packet from host 10.10.0.30:1144, id=38, length=146 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 1116 NAS-Port-Type = Ethernet User-Name = "test" Calling-Station-Id = "00:15:D6:02:03:54" Called-Station-Id = "PPPoE" NAS-Port-Id = "wlan2" Acct-Session-Id = "81100016" Framed-IP-Address = 10.0.0.220 Acct-Authentic = RADIUS Acct-Status-Type = Start NAS-Identifier = "nas1" NAS-IP-Address = 10.10.0.30 Acct-Delay-Time = 0 rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 Sending Accounting-Response of id 38 to 10.10.0.30 port 1144 rad_recv: Accounting-Request packet from host 10.10.0.30:1144, id=39, length=194 Service-Type = Framed-User Framed-Protocol = PPP NAS-Port = 1116 NAS-Port-Type = Ethernet User-Name = "testt" Calling-Station-Id = "00:15:D6:02:03:54" Called-Station-Id = "PPPoE" NAS-Port-Id = "wlan2" Acct-Session-Id = "81100016" Framed-IP-Address = 10.0.0.220 Acct-Authentic = RADIUS Acct-Session-Time = 0 Acct-Input-Octets = 72 Acct-Input-Gigawords = 0 Acct-Input-Packets = 6 Acct-Output-Octets = 54 Acct-Output-Gigawords = 0 Acct-Output-Packets = 6 Acct-Status-Type = Stop Acct-Terminate-Cause = NAS-Error NAS-Identifier = "nas1" NAS-IP-Address = 10.10.0.30 Acct-Delay-Time = 0 rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 Sending Accounting-Response of id 39 to 10.10.0.30 port 1144 _______________________________________________________ at this point, in the Mikrotik log I see --> terminating... - could not determine local IP address Thanks in advance... ----- Original Message ----- From: Alan DeKok To: FreeRadius users mailing list Sent: Wednesday, May 24, 2006 6:31 PM Subject: Re: could not determine local IP address "Italo Morellato" <italo(a)witel.it> wrote: > my freeradius work fine with HotSpot but when I check ppp I've one > error. > Freeradius 1.1.1 > Log is paste below... No, it's a PPP log. It looks like your PPP is broken. Ask on a PPP list how to fix it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

RE: PEAP + AD
by Chris Liles 25 May '06

25 May '06

> AD doesn't supply passwords through LDAP. That's why the server >ships with support for ntlm_auth. That is right, I forgot that even if you are on a ssl/tls ldap connection as an administrator, you can't pull the password back from AD. What "hooks" are you talking about? The extensions for unix services? -- Chris Liles -----Original Message----- From: freeradius-users-bounces+chris.liles=air2web.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Thursday, May 25, 2006 11:36 AM To: FreeRadius users mailing list Subject: Re: PEAP + AD "Chris Liles" <Chris.Liles(a)air2web.com> wrote: > But I have also read about some guy successfully using OpenLDAP with > PEAP because he stored the LM and NT password hashes in the ldap > schema along with the clear text password. With AD I suppose you > could extend the schema to store these as well, but you'd have to > manually update them when a password changes. Yes. There are hooks in AD to do just that, but the software implementing the hooks has to be installed on every domain controller. > In my attempts to use ldap with active directory for PEAP it > wouldn't work, so I went samba. It works fine. Radiusd -X and the > mailing list are your best friends. :) AD doesn't supply passwords through LDAP. That's why the server ships with support for ntlm_auth. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

RE: Yet Another AD Question
by Chris Liles 25 May '06

25 May '06

Look at the mschap section of the FR config file, everything is there, you just need to uncomment it. -- Chris Liles -----Original Message----- From: freeradius-users-bounces+chris.liles=air2web.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] On Behalf Of Josh Sent: Thursday, May 25, 2006 11:45 AM To: FreeRadius users mailing list Subject: Re: Yet Another AD Question OK. So I think I'm going to go the Samba route. I've got Samba running on the same host as freeradius. I've tested Samba/AD integration by creating a couple shared folders on the Samba server and using Windows AD accounts to mount/map them from windows machines - it works. Now, I need to get freeradius to send auth requests to samba. I guess there are a few ways to do this, one of which would be LDAP again (now I'm trying to avoid LDAP). I'm not concerned with security (clear text passwords, etc.) between samba and freeradius since they are on the same box. Any good pointers to some documentation on freeradius/samba integration without ldap? What method should I be using other than ldap? __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Yet Another AD Question
by Josh 25 May '06

25 May '06

I've crawled the web for info and tried numerous things to get FreeRadius authenticating users with a 2003 Active Directory. I'm currently running FreeRadius (with MySQL) on RHEL4 using the RPMs included with RHEL4: freeradius-1.0.1-3.RHEL4 freeradius-mysql-1.0.1-3.RHEL4 Running radiusd in debug mode (-X) shows a successful bind to the AD server. I then can see rlm_ldap performing a search and then eventually fails: -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= <snip> rlm_ldap: Bind was successful rlm_ldap: performing search in cn=Users,dc=org,dc=my,dc=domain,dc=com, with filter cn=administrator ldap_search put_filter: "cn=administrator" put_filter: default put_simple_filter: "cn=administrator" ldap_send_initial_request ldap_send_server_request ldap_result msgid 2 ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL wait4msg (timeout 4 sec, 0 usec), msgid 2 wait4msg continue, msgid 2, all 1 ** Connections: * host: org.my.domain.com port: 389 (default) refcnt: 2 status: Connected last used: Wed May 24 12:14:51 2006 ** Outstanding Requests: * msgid 2, origid 2, status InProgress outstanding referrals 0, parent count 0 ** Response Queue: Empty ldap_chkResponseList for msgid=2, all=1 ldap_chkResponseList returns NULL ldap_int_select read1msg: msgid 2, all 1 ldap_read: message type search-result msgid 2, original id 2 ldap_chase_referrals read1msg: V2 referral chased, mark request completed, id = 2 new result: res_errno: 1, res_error: <00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece>, res_matched: <> read1msg: 0 new referrals read1msg: mark request completed, id = 2 request 2 done res_errno: 1, res_error: <00000000: LdapErr: DSID-0C090627, comment: In order to perform this operation a successful bind must be completed on the connection., data 0, vece>, res_matched: <> ldap_free_request (origid 2, msgid 2) ldap_free_connection ldap_free_connection: refcnt 1 ldap_parse_result ldap_err2string rlm_ldap: ldap_search() failed: Operations error ldap_msgfree rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authenticate]: module "ldap" returns fail for request 0 modcall: group authenticate returns fail for request 0 auth: Failed to validate the user. -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= I'm not sure if I'm using the wrong ldap search or what. Here's my ldap section of radiusd.conf: server = "org.my.domain.com" ldap_debug = 0xFFFF basedn = "cn=Users,dc=org,dc=my,dc=domain,dc=com" filter = "cn=%u" start_tls = no access_attr = "dialupAccess" dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 timeout = 4 timelimit = 3 net_timeout = 1 Although I'd like to avoid it, but, would it be easier to install SAMBA on the RHES4 box and connect SAMBA to AD and then connect FreeRadius to SAMBA? I've also come across possible issues with certain versions of openldap and 2003 AD? As soon as this part is working I'll be authenticating wireless users (using Cisco APs) as well. But I think that should run fairly smooth as soon as FreeRadius and AD are talking the same language. I hope there are some Radius/AD gurus out there? Many thanks in advance... __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

4 6

RE: PEAP + AD
by Chris Liles 25 May '06

25 May '06

If you read the FAQ is says that you can't do CHAP with LDAP. [speculation] But I have also read about some guy successfully using OpenLDAP with PEAP because he stored the LM and NT password hashes in the ldap schema along with the clear text password. With AD I suppose you could extend the schema to store these as well, but you'd have to manually update them when a password changes. [/end speculation] In my attempts to use ldap with active directory for PEAP it wouldn't work, so I went samba. It works fine. Radiusd -X and the mailing list are your best friends. :) -- Chris Liles -----Original Message----- From: freeradius-users-bounces+chris.liles=air2web.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+chris.liles=air2web.com@lists.freeradius.org] On Behalf Of Kartthik Raghunathan Sent: Thursday, May 25, 2006 12:17 AM To: freeradius-users(a)lists.freeradius.org Subject: PEAP + AD Am trying to authenticate my windows supplicant (ie. XP with sp2) with peap against the windows 2000 AD. But in the error log i could see "Accept-Reject" error message. So i need a clarification here, is't necessary to get samba on with active directory to do PEAP + AD authentication. sorry for silly q? here ! -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as… - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

nas table
by Santiago Balaguer García 25 May '06

25 May '06

Hi people, I use freeradius 1.0.5 and am getting my nas information from nas table since several months ago. How ever, I realize I have to put DNS in this table because I have DDNS entries. Where must I put the DDNS in this table?? In ipddr I can not because is inet type and a primary key. What can I do?? _________________________________________________________________ ¿Estás pensando en cambiar de coche? Todas los modelos de serie y extras en MSN Motor. http://motor.msn.es/researchcentre/

2 1

PEAP + AD
by Kartthik Raghunathan 25 May '06

25 May '06

Am trying to authenticate my windows supplicant (ie. XP with sp2) with peap against the windows 2000 AD. But in the error log i could see "Accept-Reject" error message. So i need a clarification here, is't necessary to get samba on with active directory to do PEAP + AD authentication. sorry for silly q? here ! -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

2 1