- Freeradius-Users - lists.freeradius.org

getting Freeradius to recorde login failure, etc
by Jeremy ohara 17 May '06

17 May '06

hi there is there a way to get Freeradius 1.0.5 with Mysql to record login-failure, incorrect password or incorrect username into the mysql table? i can see its possbile. but when you login with wrong details it doesnt get to record the login failure, etc. and i dont knwo what code to use and how to make freeradius to record it Jeremy ---------------------------------------------------------------------------- This email has been scanned for Virus by MDaemon AntiVirus part of MDaemon. Updated daily to keep up-to-date with all new and old viruses. ----------------------------------------------------------------------------

6 14

Segmentation fault when launching freeradius 1.1.1 with sql authorization on debian 1:3.3.5-13
by Antoine Cavalié 17 May '06

17 May '06

Hi all, Many thanks to Nicolas Baradakis who solved my problem in a few minutes. Thank's Antoine

1 0

More coredumps, FreeBSD 5.4 / FR 1.1.1
by Chris Knipe 17 May '06

17 May '06

Hi, I did a simple upgrade from 1.1.0 to 1.1.1. All old modules was removed, new compile / install went without problems. I also updated my database from mysql 4 to 5.0 - also working without problems. Running with -X, I'm getting VERY little info here... sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Bus error root@netsphere:/usr/local/etc/raddb# radiusd -v radiusd: FreeRADIUS Version 1.1.1, for host , built on May 17 2006 at 15:33:24 Copyright (C) 2000-2006 The FreeRADIUS server project. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. root@netsphere:/usr/local/etc/raddb# The -X run reports nothing abnormal, except for the bus error. Under gdb: sql: postauth_table = "radpostauth" sql: postauth_query = "INSERT into radpostauth (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap-Password}', '%{reply:Packet-Type}', NOW())" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to radius@mysqldb01.blah.com:/RADIUS rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1 (LWP 100079)] 0x282f2677 in memset () from /lib/libc.so.5 (gdb) back #0 0x282f2677 in memset () from /lib/libc.so.5 #1 0x09afc4c0 in ?? () #2 0x286e5cb5 in sql_init_socket (sqlsocket=0x70657270, config=0x9d02600) at sql_mysql.c:71 #3 0x2858afcc in connect_single_socket (sqlsocket=0x9afc4c0, inst=0x9afc700) at sql.c:70 #4 0x2858b134 in sql_init_socketpool (inst=0x9afc700) at sql.c:131 #5 0x28589507 in rlm_sql_instantiate (conf=0x9d03bf8, instance=0x0) at rlm_sql.c:713 #6 0x08052b11 in find_module_instance () #7 0x08053f9e in modcallable_free () #8 0x0805317b in setup_modules () #9 0x08055996 in main () 1.1.0 runs fine, with exactly the same configuration... :-( Regards, Chris.

2 2

FreeRADIUS SNMP capacities
by Geoffroy Arnoud 17 May '06

17 May '06

Hello all, Would it be possible to have some information about FreeRADIUS SNMP capacities. Which version of snmp are supported? What can be done? Which types of trap can be sent to the manager? Which type of info can the manager ask? What are the other features? Is it stable? Any peice of information will be of great help. Best regards, Geoffroy

2 1

Autoreply: Freeradius-Users Digest, Vol 13, Issue 82
by greta＠wcl.american.edu 17 May '06

17 May '06

I will be out of the office with limited eMail access until May 30, 2006. If this is a HelpDesk related need, please contact the HelpDesk at comptech(a)wcl.american.edu or via telephone at x4021. Thanks. Greta

1 0

Freeradius and 2 ldap servers.
by Terry J Fike Jr 17 May '06

17 May '06

Okay, since this isn't easy to piece together from the docs. (and no one has posted this on the mailing list that i've seen, and i've gotten a few emails on this as well) here is how i got freeradius running good failover with 2 ldap servers. hopefully those who know the system better than me will let me/us (the list) know if i've done something wrong here. in the ldap section you'll have: ldap ldap1 { server = <ip> identity = <> ... } ldap ldap2 { <second server info> } then in the instantiate section put ldap1 ldap2 then in authorize you'll have: redundant { ldap1 ldap2 } and in authenticate you'll have: Auth-Type LDAP { redundant { ldap1 ldap2 } } that is what worked for me. now one thing to consider/think about. it appears whichever server is listed secondly (in instantiate, authorize, and authenticate, will be hit first) not sure why this is...and it may not be important -- Terry J Fike Jr System Administrator MTA Solutions 907-793-4100 tfike(a)mtasolutions.com

1 0

limit upload and download speed for each user
by teoh 17 May '06

17 May '06

does anyone knows how to limit upload/download speed for each user in "user" file ? --------------------------------- Sneak preview the all-new Yahoo.com. It's not radically different. Just radically better.

1 0

radius proxy
by Denis V. Gudtsov 17 May '06

17 May '06

Hello,All! I'm setting up a roaming scheme for wireless clients. All of my NASes terminating on freeradius proxy server. Then, relying on user realm the request sends to one radius server or another. The problem lies on NAS-ID attribute. First radius servers knows all about all of my NASes, but the second radius - mustn't. Is it posible to change NAS-ID attribute to static string (e.g. "MY NAS") when request is forwarding to a second radius server? --

2 1

Using ntlm and MS-CHAP authentication on the same server
by Bugneac Constantin 17 May '06

17 May '06

Hi to all, I would like know if it is possible to configure the Freeradius to do authentication based on ntlm for one group of users and MS-Chap for other on the same server. In my configuration I use one radius server for controling access to wireless network and dial-up network. The problem is that I do not want users from one group to get logging in sistem using credintials from other. Does anyone any ideas? Constantin Bugneac Network Designer & Administrator Department of Informational Development MD2012, Chisinau, Moldova Republic Of str.Puskin 42 tel. (+373 22) 504-455

2 1

RE: Radius core dumps (1.1.1 and 1.1.0)
by Remy de Ruysscher 17 May '06

17 May '06

Submitted a bug report #366. Thanks for your help. > -----Original Message----- > From: > freeradius-users-bounces+remy=unix-asp.com(a)lists.freeradius.or > g > [mailto:freeradius-users-bounces+remy=unix-asp.com@lists.freer > adius.org] On Behalf Of Alan DeKok > Sent: woensdag 17 mei 2006 16:33 > To: FreeRadius users mailing list > Subject: Re: Radius core dumps (1.1.1 and 1.1.0) > > "Remy de Ruysscher" <remy(a)unix-asp.com> wrote: > > Maybe it's FreeBSD (switched to 6.1 recently and upgraded both the > > world, kernel and recompiled all packages) > > I wouldn't be surprised. > > See doc/bugs for how to deal with core dumps. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0