- Freeradius-Users - lists.freeradius.org

How to make FR reset the logs
by Mordor Networks 05 Apr '06

05 Apr '06

hi Is it possible to make FR remove all monthly accounting logs from the database "mysql"?

3 2

RE: Compiling freeradius 1.1.1 in FreeBSD 6.0 with mysql support
by Mark Hennessy 05 Apr '06

05 Apr '06

I'm sorry, I did indeed use the following commandline: ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/mysql --with-mysql-include-dir=/usr/local/mysql/include/mysql --prefix=/usr/local/adm/freeradius-1.1.1 and got the same results below. -- Mark Hennessy > -----Original Message----- > From: > freeradius-users-bounces+mhennessy=cloud9.net(a)lists.freeradius > .org > [mailto:freeradius-users-bounces+mhennessy=cloud9.net@lists.fr > eeradius.org] On Behalf Of Mark Hennessy > Sent: Wednesday, April 05, 2006 12:50 PM > To: freeradius-users(a)lists.freeradius.org > Subject: Compiling freeradius 1.1.1 in FreeBSD 6.0 with mysql support > > I'm trying to build freeradius 1.1.1 on a FreeBSD 6.0 system > with MySQL > 4.1.15 > > I'm using the following configure commandline: > ./configure --with-mysql-lib=/usr/local/mysql/lib/mysql > --with-mysql-include=/usr/local/mysql/include/mysql > --prefix=/usr/local/adm/freeradius-1.1.1 > > I'd include the full output, but I figure that I should only > do that if > asked. > Here's the problematic section: > > configuring in ./drivers/rlm_sql_mysql > running /bin/sh ./configure > --with-mysql-lib-dir=/usr/local/mysql/lib/mysql > --with-mysql-include-dir=/usr/local/mysql/include/mysql > --prefix=/usr/local/adm/freeradius-1.1.1 --enable-ltdl-install > --enable-ltdl-install > --cache-file=../../../../.././config.cache --srcdir=. > loading cache ../../../../.././config.cache > checking for gcc... (cached) gcc > checking whether the C compiler (gcc -g -O2 -D_REENTRANT > -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes > checking whether the C compiler (gcc -g -O2 -D_REENTRANT > -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -DNDEBUG ) is a > cross-compiler... no > checking whether we are using GNU C... (cached) yes > checking whether gcc accepts -g... (cached) yes > checking for mysql_config... (cached) yes > checking for pthread_create in -lpthread... (cached) yes > checking for mysql_init in -lmysqlclient_r (using mysql_config)... no > checking for mysql_init in -lmysqlclient_r... no > configure: warning: mysql libraries not found. Use > --with-mysql-lib-dir=<path>. > checking for mysql.h (using mysql_config)... yes > configure: warning: sql submodule 'mysql' disabled > updating cache ../../../../.././config.cache > creating ./config.status > creating Makefile > creating config.h > config.h is unchanged > > It's not seeing mysql libraries, but they do indeed exist: > # ls -al /usr/local/mysql/lib/mysql > total 1974 > drwxr-xr-x 2 root wheel 512 Apr 5 10:39 . > drwxr-xr-x 3 root wheel 512 Apr 5 10:39 .. > -rw-r--r-- 1 root wheel 14446 Apr 5 10:39 libdbug.a > -rw-r--r-- 1 root wheel 41928 Apr 5 10:39 libheap.a > -rw-r--r-- 1 root wheel 13640 Apr 5 10:39 libmerge.a > -rw-r--r-- 1 root wheel 331488 Apr 5 10:39 libmyisam.a > -rw-r--r-- 1 root wheel 24934 Apr 5 10:39 libmyisammrg.a > -rw-r--r-- 1 root wheel 472466 Apr 5 10:39 libmysqlclient.a > -rwxr-xr-x 1 root wheel 871 Apr 5 10:39 libmysqlclient.la > lrwxr-xr-x 1 root wheel 20 Apr 5 10:39 libmysqlclient.so -> > libmysqlclient.so.14 > -rwxr-xr-x 1 root wheel 387482 Apr 5 10:39 libmysqlclient.so.14 > -rw-r--r-- 1 root wheel 237570 Apr 5 10:39 libmystrings.a > -rw-r--r-- 1 root wheel 253852 Apr 5 10:39 libmysys.a > -rw-r--r-- 1 root wheel 105640 Apr 5 10:39 libnisam.a > -rw-r--r-- 1 root wheel 5472 Apr 5 10:39 libvio.a > > # ls -al /usr/local/mysql/include/mysql > total 288 > drwxr-xr-x 2 root wheel 1024 Apr 5 10:39 . > drwxr-xr-x 3 root wheel 512 Apr 5 10:39 .. > -rw-r--r-- 1 root wheel 3428 Apr 5 10:39 errmsg.h > -rw-r--r-- 1 root wheel 6778 Apr 5 10:39 keycache.h > -rw-r--r-- 1 root wheel 17899 Apr 5 10:39 m_ctype.h > -rw-r--r-- 1 root wheel 8085 Apr 5 10:39 m_string.h > -rw-r--r-- 1 root wheel 1859 Apr 5 10:39 my_alloc.h > -rw-r--r-- 1 root wheel 28650 Apr 5 10:39 my_config.h > -rw-r--r-- 1 root wheel 3463 Apr 5 10:39 my_dbug.h > -rw-r--r-- 1 root wheel 3509 Apr 5 10:39 my_dir.h > -rw-r--r-- 1 root wheel 3000 Apr 5 10:39 my_getopt.h > -rw-r--r-- 1 root wheel 39298 Apr 5 10:39 my_global.h > -rw-r--r-- 1 root wheel 1515 Apr 5 10:39 my_list.h > -rw-r--r-- 1 root wheel 3588 Apr 5 10:39 my_net.h > -rw-r--r-- 1 root wheel 1245 Apr 5 10:39 my_no_pthread.h > -rw-r--r-- 1 root wheel 24387 Apr 5 10:39 my_pthread.h > -rw-r--r-- 1 root wheel 1784 Apr 5 10:39 my_semaphore.h > -rw-r--r-- 1 root wheel 32346 Apr 5 10:39 my_sys.h > -rw-r--r-- 1 root wheel 2007 Apr 5 10:39 my_xml.h > -rw-r--r-- 1 root wheel 27615 Apr 5 10:39 mysql.h > -rw-r--r-- 1 root wheel 15028 Apr 5 10:39 mysql_com.h > -rw-r--r-- 1 root wheel 1241 Apr 5 10:39 mysql_embed.h > -rw-r--r-- 1 root wheel 2184 Apr 5 10:39 mysql_time.h > -rw-r--r-- 1 root wheel 781 Apr 5 10:39 mysql_version.h > -rw-r--r-- 1 root wheel 11315 Apr 5 10:39 mysqld_error.h > -rw-r--r-- 1 root wheel 5841 Apr 5 10:39 raid.h > -rw-r--r-- 1 root wheel 6499 Apr 5 10:39 readline.h > -rw-r--r-- 1 root wheel 1751 Apr 5 10:39 sql_common.h > -rw-r--r-- 1 root wheel 6401 Apr 5 10:39 sql_state.h > -rw-r--r-- 1 root wheel 1055 Apr 5 10:39 sslopt-case.h > -rw-r--r-- 1 root wheel 1883 Apr 5 10:39 sslopt-longopts.h > -rw-r--r-- 1 root wheel 970 Apr 5 10:39 sslopt-vars.h > -rw-r--r-- 1 root wheel 1265 Apr 5 10:39 typelib.h > > I'm thoroughly perplexed. What should I try next? > > -- > Mark Hennessy > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > >

1 0

frontend for freeradius???
by Pelusa Vali 05 Apr '06

05 Apr '06

hi list, i have a question, are there any freeradius frontend to administer users, but which don't assume i have ldap or mysql?? my users are only in users file, i reviewed dialup_admin and php radius accounting tool, but both assume i have mysql or ldap, i just want some program with graphical interface to add users and passwords in freeradius, and if possible monitor them. are there something like that?? thanks. _______________________________________________________________ In what sea are the Gulf of Bothnia and the Gulf of Finland both located? postmaster.co.uk http://www.postmaster.co.uk/cgi-bin/meme/quiz.pl?id=171

3 4

Two times authorization and/or both proxying and serving
by Mark Supersonik 05 Apr '06

05 Apr '06

Sorry I forgot the subject !!! Here it goes again! Hi friends! I speak from the tongue of an engineering student in a research group trying to implement a RADIUS proxy system. My doubt is: can a freeradius server do first an authorization of a request throught a DB (i.e MySQL) and proxy then if so or reject it (if all isn't in rule)? I mean, summarizing: Can a request be authenticated/authorized for two times? We want only to accept access if each one of the two servers process the authentication successfully. Thanks in advance for all the support you can give us, hope to hear from you Marc (Nets Research Group [Pompeu Fabra University]) _________________________________________________________________ Dale rienda suelta a tu tiempo libre. Mil ideas para exprimir tu ocio con MSN Entretenimiento. http://entretenimiento.msn.es/

2 6

trouble with web-cvs ?
by Andriy Gapon 05 Apr '06

05 Apr '06

I am getting 500 Internal Server Error when trying to access FreeRADIUS WebCVS. I am using this URL: http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/ -- Andriy Gapon

1 0

freeradius 1.1.1
by greinert＠rz.uni-leipzig.de 05 Apr '06

05 Apr '06

Hello, the FreeRadius Wiki say HP/UX is a supported platform :-) I try to compile freeradius 1.1.1 on HP-UX 11i with HP's cc but I have no success :-( My question: have anybody successful compiled freeradius 1.1.1 on HP-UX 11i with the HP compiler and can I use HP's TCB for user authentification with freeradius ???? I use configure with this options: ./configure --prefix=/opt/freeradius-1.1.1 --localstatedir=/var/freeradius \ --with-logdir=/pm/freeradius --with-threads=no --with-snmp=no \ --with-openssl-includes=/opt/openssl/include \ --with-openssl-libraries=/opt/openssl/lib 2>&1 | tee config.prot and see e.g. this errors: cc -Ae +O3 -s -DNDEBUG -I/cdwriteau/freeradius-1.1.1/src/include -c rlm_unix.c +Z -DPIC -o .libs/rlm_unix.lo cc: "compat.h", line 66: error 1000: Unexpected symbol: "shadow_pwd_t". cc: "compat.h", line 66: error 1584: Inconsistent type declaration: "fgetspent". cc: "compat.h", line 67: warning 604: Pointers are not assignment-compatible. gmake[6]: *** [rlm_unix.lo] Error 1 gmake[6]: Leaving directory `/cdwriteau/freeradius-1.1.1/src/modules/rlm_unix' gmake[5]: *** [common] Error 2 Greetings Wolfram Greinert -- ########################################### # Wolfram Greinert # # URZ der Uni Leipzig, Abteilung Netze # # 04109 Leipzig, Augustusplatz 10/11 # # Tel.: +(0341) 97-33325 # # email: greinert(a)rz.uni-leipzig.de # ###########################################

2 2

Multiple OUs in AD
by Peter Bushnell 05 Apr '06

05 Apr '06

Hello All, Have a working FreeRADIUS server up and running, this is used for authenticating student users on to a wireless network against a M$ 2003 server with Active Directory using LDAP. Problem is I only seem to be able to authenticate users against one OU, if I set the basedn simply to the domain the server just sits there and never returns an accept or reject. So how can I set my FR box to authenticate against all users in AD? Here is my LDAP cfg from radiusd.conf. ldap { server = "brassbullet.bnc.ox.ac.uk" identity = "cn=administrator,cn=users,dc=bnc,dc=ox,dc=ac,dc=uk" password = password basedn = "ou=students,dc=bnc,dc=ox,dc=ac,dc=uk" filter ="(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" start_tls = no ldap_connections_number = 5 password_attribute = userPassword timeout = 4 timelimit = 3 net_timeout = 1 compare_check_items = yes } Any help appreciated, Peter Bushnell IT Officer Brasenose College Email: <mailto:peter.bushnell@bnc.ox.ac.uk> peter.bushnell(a)bnc.ox.ac.uk Tel: +44 1865 277513

2 1

SQL trace
by Mike Chamberlain 05 Apr '06

05 Apr '06

Hi there. We recently disabled SQL trace in the mssql.conf file because the sql trace filled up, exceeded the linux maximum file size and comepletely shagged our machine. This is fine, except that now we don't see the SQL statements in radius.log either. How do we diasble the seperate SQL trace file but leave the SQL statements in radius.conf? sqltrace = no sqltracefile = ${logdir}/sqltrace.sql We have the radius.log files rotating so exceeding max file size is no problem here. Cheers, Mike

1 0

Freeradius won't authorize off redundant sql
by Cris Boisvert 04 Apr '06

04 Apr '06

Freeradius running using redunant sql scenario. If first sql is not available it falls to secondary.. When FR Start is links correctly to both databases. When the primary stops.. It won't respond at all. Below is the radiusd -X output. Original request is with both primary and secondary sql servers available. Then I shut the primary off. and it just sits their.. Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/sql.conf Config: including file: /etc/raddb/sql2.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = yes main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = yes main: log_file = "/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = yes main: log_auth_goodpass = yes main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "/etc/shadow" unix: group = "(null)" unix: radwtmp = "/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "server1" sql: port = "" sql: login = "radius2" sql: password = "password" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = yes sql: sqltracefile = "/var/log/radius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = %{Acct-Delay-Time} WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime = 0" sql: accounting_update_query_alt = "" sql: accounting_start_query = "INSERT into radacct (RadAcctId, AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('', '%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime = 0" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime = 0" sql: accounting_stop_query_alt = "INSERT into radacct (RadAcctId, AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('', '%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_table = "radpostauth" sql: postauth_query = "" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to radius2@server1:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 rlm_sql (sql): starting 1 rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql): Connected new DB handle, #1 rlm_sql (sql): starting 2 rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql): Connected new DB handle, #2 rlm_sql (sql): starting 3 rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql): Connected new DB handle, #3 rlm_sql (sql): starting 4 rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql): Connected new DB handle, #4 Module: Instantiated sql (sql) sql: driver = "rlm_sql_mysql" sql: server = "server2" sql: port = "" sql: login = "radius" sql: password = "password" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = yes sql: sqltracefile = "/var/log/radius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name = "%{User-Name}" sql: default_user_profile = "" sql: query_on_not_found = no sql: authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_reply_query = "SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id" sql: authorize_group_check_query = "SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id" sql: authorize_group_reply_query = "SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id" sql: accounting_onoff_query = "UPDATE radacct SET AcctStopTime='%S', AcctSessionTime=unix_timestamp('%S') - unix_timestamp(AcctStartTime), AcctTerminateCause='%{Acct-Terminate-Cause}', AcctStopDelay = %{Acct-Delay-Time} WHERE AcctSessionTime=0 AND AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTime <= '%S'" sql: accounting_update_query = "UPDATE radacct SET FramedIPAddress = '%{Framed-IP-Address}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStopTime = 0" sql: accounting_update_query_alt = "" sql: accounting_start_query = "INSERT into radacct (RadAcctId, AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('', '%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0')" sql: accounting_start_query_alt = "UPDATE radacct SET AcctStartTime = '%S', AcctStartDelay = '%{Acct-Delay-Time}', ConnectInfo_start = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime = 0" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime = 0" sql: accounting_stop_query_alt = "INSERT into radacct (RadAcctId, AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('', '%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', DATE_SUB('%S',INTERVAL (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) SECOND), '%S', '%{Acct-Session-Time}', '%{Acct-Authentic}', '', '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Acct-Terminate-Cause}', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '0', '%{Acct-Delay-Time}')" sql: group_membership_query = "SELECT GroupName FROM usergroup WHERE UserName='%{SQL-User-Name}'" sql: connect_failure_retry_delay = 60 sql: simul_count_query = "" sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, UserName, NASIPAddress, NASPortId, FramedIPAddress, CallingStationId, FramedProtocol FROM radacct WHERE UserName='%{SQL-User-Name}' AND AcctStopTime = 0" sql: postauth_table = "radpostauth" sql: postauth_query = "" sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" rlm_sql (sql2): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql2): Attempting to connect to radius@server2:/radius rlm_sql (sql2): starting 0 rlm_sql (sql2): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql2): Connected new DB handle, #0 rlm_sql (sql2): starting 1 rlm_sql (sql2): Attempting to connect rlm_sql_mysql #1 rlm_sql_mysql: Starting connect to MySQL server for #1 rlm_sql (sql2): Connected new DB handle, #1 rlm_sql (sql2): starting 2 rlm_sql (sql2): Attempting to connect rlm_sql_mysql #2 rlm_sql_mysql: Starting connect to MySQL server for #2 rlm_sql (sql2): Connected new DB handle, #2 rlm_sql (sql2): starting 3 rlm_sql (sql2): Attempting to connect rlm_sql_mysql #3 rlm_sql_mysql: Starting connect to MySQL server for #3 rlm_sql (sql2): Connected new DB handle, #3 rlm_sql (sql2): starting 4 rlm_sql (sql2): Attempting to connect rlm_sql_mysql #4 rlm_sql_mysql: Starting connect to MySQL server for #4 rlm_sql (sql2): Connected new DB handle, #4 Module: Instantiated sql (sql2) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port-Id" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 216.236.246.5:63955, id=2, length=53 User-Name = "test(a)usai.net" User-Password = "test" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_realm: Looking up realm "usai.net" for User-Name = "test(a)usai.net" rlm_realm: No such realm "usai.net" modcall[authorize]: module "suffix" returns noop for request 0 modcall: entering group redundant for request 0 radius_xlat: 'test(a)usai.net' rlm_sql (sql): sql_set_user escaped user --> 'test(a)usai.net' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'test(a)usai.net' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'test(a)usai.net' ORDER BY id radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'test(a)usai.net' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' rlm_sql_mysql: query: SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'test(a)usai.net' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'test(a)usai.net' ORDER BY id' rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'test(a)usai.net' ORDER BY id radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'test(a)usai.net' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql_mysql: query: SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'test(a)usai.net' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: group redundant returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [test(a)usai.net/test] (from client gw2.mva.net port 0) Sending Access-Accept of id 2 to 216.236.246.5:63955 Slipstream-Auth = "true" X-Ascend-Data-Filter == "ip in forward tcp est" X-Ascend-Data-Filter == "ip in forward dstip 216.236.246.14/32 0" X-Ascend-Data-Filter == "ip in drop tcp dstport = 25" X-Ascend-Data-Filter == "ip in forward 0" Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 2 with timestamp 4432c866 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 216.236.246.5:62185, id=3, length=53 User-Name = "test(a)usai.net" User-Password = "test" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 rlm_realm: Looking up realm "usai.net" for User-Name = "test(a)usai.net" rlm_realm: No such realm "usai.net" modcall[authorize]: module "suffix" returns noop for request 1 modcall: entering group redundant for request 1 radius_xlat: 'test(a)usai.net' rlm_sql (sql): sql_set_user escaped user --> 'test(a)usai.net' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'test(a)usai.net' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql_mysql: query: SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'test(a)usai.net' ORDER BY id [root@radius2 ~]#

2 1

rlm_ldap authentication
by monish ar 04 Apr '06

04 Apr '06

hi ppl, i'm havin trouble authenticating radius with rlm_ldap module. Could anyone of u mail me the sample configuration files in case ur workin radius for LDAP authentication....think i'm goin wrong in my config settings but dunno where, i just need a working reference for the configuration if anyone of u wud be so grateful... thanks in advance ....

1 0