- Freeradius-Users - lists.freeradius.org

RE: Error building version 1.1.1
by Sandworm 23 Mar '06

23 Mar '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Nicolas Baradakis wrote: >But the next line shows that installation is done in the parent >directory /var/tmp/freeradius-root/usr. That is what I am seeing. Files are being created in the parent directory (see below), but the symlink is being attempted from lib directory which does not exist. [rdev@e15 usr]# pwd /var/tmp/freeradius-root/usr [rdev@e15 usr]# ls bin libradius-1.1.1.so libradius.a libradius.la libradius.so sbin share -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkQglL8ACgkQmw4BJyaatJ2O/ACgrSMol1U1pxGJKWfe18MYcHW1MaoA n0w8lr3c+EyDX4R7DLhLYcTaQ8v0 =2Zi1 -----END PGP SIGNATURE-----

6 8

Re: Error building version 1.1.1
by Frank Büttner 23 Mar '06

23 Mar '06

That is not possible, because I use rpmbuild. I it only possible to patch the sources. But what have changed?? 1.1.0 will work without any problems!!! Nicolas Baradakis schrieb: > Frank Büttner wrote: > >> Ok now compiling works, but at make install I get another error: >> ln -s libradius.la /var/tmp/freeradius-1.1.1-Frank-buildroot/usr/lib/libradius-1.1.1.la >> ln: creating symbolic link `/var/tmp/freeradius-1.1.1-Frank-buildroot/usr/lib/libradius-1.1.1.la' to `libradius.la': No such file or directory > > Now it's the same error as posted yesterday by someone else. I don't > know exactly how to fix the bug because I've no problem to build a > Debian package. > > Could you please try if the following patch fixes the problem? > > Index: src/lib/Makefile > =================================================================== > RCS file: /source/radiusd/src/lib/Makefile,v > retrieving revision 1.20.4.3 > diff -u -r1.20.4.3 Makefile > --- src/lib/Makefile 10 Feb 2006 19:47:04 -0000 1.20.4.3 > +++ src/lib/Makefile 21 Mar 2006 17:19:21 -0000 > @@ -48,6 +48,6 @@ > rm -rf .libs > > install: all > - $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir) > + $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir)/$(TARGET).la > rm -f $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la; > ln -s $(TARGET).la $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la > Index: src/modules/rlm_eap/libeap/Makefile > =================================================================== > RCS file: /source/radiusd/src/modules/rlm_eap/libeap/Makefile,v > retrieving revision 1.1.4.2 > diff -u -r1.1.4.2 Makefile > --- src/modules/rlm_eap/libeap/Makefile 10 Feb 2006 19:47:09 -0000 1.1.4.2 > +++ src/modules/rlm_eap/libeap/Makefile 21 Mar 2006 17:19:21 -0000 > @@ -38,6 +38,6 @@ > rm -rf .libs > > install: all > - $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir) > + $(LIBTOOL) --mode=install $(INSTALL) -c $(TARGET).la $(R)$(libdir)/$(TARGET).la > rm -f $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la; > ln -s $(TARGET).la $(R)$(libdir)/$(TARGET)-$(RADIUSD_VERSION).la > >

3 2

Freeradius ip allocation.
by Ashwin Gobind 23 Mar '06

23 Mar '06

Is it possible to use freeradius to dynamically allocate ip adrreses from predefined pools. I want to assign an ip address from a specific set of pools, which pool to use is to be determined by the NAS Identifier & the Called-Station-Id of the AccessRequest. Also to throw another complication in, these ip's should be consistent over 3 radius servers that are load balanced. Thanks �This e-mail is sent on the Terms and Conditions that can be accessed by Clicking on this link http://www.vodacom.co.za/legal/email.jsp "

3 2

Error message when using Simultaneous-use with EAP
by JVUVANT Yahoo 23 Mar '06

23 Mar '06

Hi all I'm trying to use Simultaneous-Use to limit sessions connexions, but I havre following message: ... [/usr/local/etc/raddb/users]:217 WARNING! Check item "Simultaneous-Use" ?found in reply item list for user "jvuvant". ?This attribute MUST go on the first line with the other check items ... Someone can help me ? Here is users configuration file for this account: Jvuvant Auth-Type := EAP, User-Password =="ayati" Simultaneous-Use=1 Other question How to use freeradius with Mysql ? Thanks Jacques ___________________________________________________________________________ Nouveau : téléphonez moins cher avec Yahoo! Messenger ! Découvez les tarifs exceptionnels pour appeler la France et l'international. Téléchargez sur http://fr.messenger.yahoo.com

2 1

user not found in freeradius "users" file
by Bertrand Poulet 23 Mar '06

23 Mar '06

hello all , i've got a vpn server which make authentication to a freeradius server. the user "someone" is authenticated (file users of freeradius) when tested locally via radtest, but not when the request comes from nas box in first case , the user is found in file users of freeradius at line 227 , and in the second case the same user isn't found in file. instead, the user is searched in system (/etc/passwd). why the user isn't found in file users of freeradius ? thanks . root@gringo raddb]# radtest someone thepass localhost 0 secret Sending Access-Request of id 161 to 127.0.0.1 port 1812 User-Name = "someone" User-Password = "thepass" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Request packet from host 127.0.0.1:35045, id=161, length=59 User-Name = "someone" User-Password = "thepass" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 rlm_realm: No '@' in User-Name = "someone", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 users: Matched entry DEFAULT at line 152 users: Matched entry someone at line 227 modcall[authorize]: module "files" returns ok for request 1 modcall[authorize]: module "mschap" returns noop for request 1 modcall: leaving group authorize (returns ok) for request 1 rad_check_password: Found *Auth-Type Local* auth: type Local auth: user supplied User-Password matches local User-Password Login OK: [someone/thepass] (from client localhost port 0) Sending Access-Accept of id 161 to 127.0.0.1 port 35045 ====================================================== root@gringo raddb]# rad_recv: Access-Request packet from host 192.168.10.1:1025, id=181, length=156 User-Name = "someone" User-Password = "thepass" NAS-Port = 546 Service-Type = Framed-User Framed-Protocol = PPP Called-Station-Id = "191.254.137._" Calling-Station-Id = "66.147.66.24_" Tunnel-Client-Endpoint:0 = "66.147.66.24_" NAS-IP-Address = 192.168.10.1 NAS-Port-Type = Virtual Cisco-AVPair = "ip:source-ip=66.147.66.24_" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' Invalid operator for item Suffix: reverting to '==' modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 2 rlm_realm: No '@' in User-Name = "someone", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 users: Matched entry DEFAULT at line 183 modcall[authorize]: module "files" returns ok for request 2 modcall[authorize]: module "mschap" returns noop for request 2 modcall: leaving group authorize (returns ok) for request 2 rad_check_password: Found *Auth-Type System* auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 modcall[authenticate]: module "unix" returns notfound for request 2 modcall: leaving group authenticate (returns notfound) for request 2 auth: *Failed *to validate the user.

3 3

Tagged Vlans
by radhika putty 23 Mar '06

23 Mar '06

Hi All, Does Free Radius support tagging of VLAN's --------------------------------- Yahoo! Messenger with Voice. Make PC-to-Phone Calls to the US (and 30+ countries) for 2¢/min or less.

2 1

Ignoring request from unknown client *.*.*.* 2244
by yao guoxian 23 Mar '06

23 Mar '06

I have configured FreeRadius to use Mysql.It seemed Mysql works well when I input "Radiusd -X". However when I use NtRadPing to test,I always get the following error: rad_recv: Access-Request packet from host 202.117.15.164:2244, id=0, length=43 Ignoring request from unknown client 202.117.15.164:2244 --- Walking the entire request list --- I insert items into the table 'nas' int the 'radius' database like : +----+----------------+-----------+-------+-------+------------+-----------+---------------+ | id | nasname | shortname | type | ports | secret | community | description | +----+----------------+-----------+-------+-------+------------+-----------+---------------+ | 1 | 202.117.15.164 | liv1 | other | NULL | testing123 | NULL | RADIUS Client | +----+----------------+-----------+-------+-------+------------+-----------+---------------+ But it doesn't work.

1 0

RE: Table radacct is empty
by Vincent MARGUERIE 23 Mar '06

23 Mar '06

Hi, Yes, SQL is ok to query in accounting section. Here is a part of my radiusd.conf : # The rlm_sql_log module appends the SQL queries in a log # file which is read later by the radsqlrelay program. # # This module only performs the dynamic expansion of the # variables found in the SQL statements. No operation is # executed on the database server. (this could be done # later by an external program) That means the module is # useful only with non-"SELECT" statements. # # See rlm_sql_log(5) manpage. # sql_log { path = ${radacctdir}/sql-relay acct_table = "radacct" postauth_table = "radpostauth" Start = "INSERT INTO ${acct_table} (AcctSessionId, UserName, \ NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, \ AcctSessionTime, AcctTerminateCause) VALUES \ ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', \ '%{Framed-IP-Address}', '%S', '0', '0', '');" Stop = "INSERT INTO ${acct_table} (AcctSessionId, UserName, \ NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, \ AcctSessionTime, AcctTerminateCause) VALUES \ ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', \ '%{Framed-IP-Address}', '0', '%S', '%{Acct-Session-Time}', \ '%{Acct-Terminate-Cause}');" Alive = "INSERT INTO ${acct_table} (AcctSessionId, UserName, \ NASIPAddress, FramedIPAddress, AcctStartTime, AcctStopTime, \ AcctSessionTime, AcctTerminateCause) VALUES \ ('%{Acct-Session-Id}', '%{User-Name}', '%{NAS-IP-Address}', \ '%{Framed-IP-Address}', '0', '0', '%{Acct-Session-Time}','');" Post-Auth = "INSERT INTO ${postauth_table} \ (user, pass, reply, date) VALUES \ ('%{User-Name}', '%{User-Password:-Chap-Password}', \ '%{reply:Packet-Type}', '%S');" } ...... ...... $INCLUDE ${confdir}/sql.conf ...... ...... authorize { sql ... ... accounting { sql sql_log .... .... session sql .... .... post-auth { sql sql_log .... .... Moreover, the information are written in a file (sql-relay) which (is I have understand correctly) is used by the radsqlrelay binary to put the information in database. The fact is that for the post-auth part, it works bacause i get all the information of the post authorisation in the "radpostauth" table. But in this sql-relay file, there's only information about post-auth...nothing about accounting !! The strange thing is that there's some informations about accounting in others file "auth-detail" and "reply-detail", but not in sql format. some lines of the files : "sql-relay" INSERT INTO radpostauth (user, pass, reply, date) VALUES ('joseph', 'Chap-Password', 'Access-Accept', '2006-03-21 15:28:48'); ----------------- "reply-detail" Packet-Type = Access-Accept Wed Mar 22 18:04:18 2006 Framed-Protocol = PPP Framed-IP-Address = 255.255.255.254 Framed-IP-Netmask = 255.255.255.0 Framed-MTU = 10000 Framed-Compression = Van-Jacobson-TCP-IP Service-Type = Login-User Session-Timeout = 1000 Idle-Timeout = 500 Port-Limit = 10 Reply-Message = "Bye Mr Joseph !" MS-MPPE-Recv-Key = 0x315cddbc0724d537fdb446a4fc50756d12cc3b005e452caeafe6e867a8a273da MS-MPPE-Send-Key = 0x99246dc1071a72f26b069f36cf13c4c865705471f3dbd0dfa1515615affd3004 EAP-Message = 0x03090004 Message-Authenticator = 0x00000000000000000000000000000000 User-Name = "joseph" ------------------ "auth-detail" Packet-Type = Access-Request Wed Mar 22 17:46:52 2006 User-Name = "joseph" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 NAS-Port = 0 NAS-Identifier = "default\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000\000" Calling-Station-Id = "00-12-f0-4f-19-26" EAP-Message = 0x0201000b016a6f73657068 NAS-IP-Address = 192.168.0.50 Message-Authenticator = 0x3796599b7cebc6895c6a57f7444cccfc Client-IP-Address = 192.168.0.50 ------------------- Best regards, Vincent ------------------------------ Message: 3 Date: Wed, 22 Mar 2006 09:17:08 -0500 From: "Alex M" <radiussupport(a)lrcommunications.net> Subject: RE: Table radacct is empty To: "'FreeRadius users mailing list'" <freeradius-users(a)lists.freeradius.org> Message-ID: <001c01c64dbb$4dc706f0$e102fe0a@Alexm> Content-Type: text/plain; charset="us-ascii" Did u authorize SQL in accounting section? -----Original Message----- From: freeradius-users-bounces+radiussupport=lrcommunications.net(a)lists.freeradius .org [mailto:freeradius-users-bounces+radiussupport=lrcommunications.net@lists.fr eeradius.org] On Behalf Of Vincent MARGUERIE Sent: Wednesday, March 22, 2006 4:14 AM To: freeradius Subject: Table radacct is empty Hi, I've installed freeradius 1.1.1 on a Debian Sarge distribution, and the connection works fine with my wireless windows XP client but I have a problem to get information into radacct table in my mysql database. Does anyone get solution for this ? Rq : I use a Dlink-DWL-2000AP+ as Acces Point Regards, Vincent - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Replicate Accounting Records
by Tye Lougheed 22 Mar '06

22 Mar '06

I am running FreeRadius version 0.9.3 and need to determine the method for replicating an accounting record and forwarding it to a secondary accounting server. I am also not clear on how to specify the secondary accounting server in order to accomplish this. I am only interested in receiving the start/stop packets no other updates are required. Thanks,

2 1

Error building version 1.1.1
by Sandworm 22 Mar '06

22 Mar '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi While attempting to build the RPMs for FreeRadius version 1.1.1, I get an error during the build of libradius. Extract of the output is shown below. Build being done with 'rpmbuild -ba /usr/src/redhat/SPECS/freeradius.spec', where the spec file is taken from the 'redhat' directory in the tarball. The build is being done on Redhat Enterprise Server 3 (ES) Update 6. Looks like the Makefile in the tarball's src/lib directory is removing the '/var/tmp/freeradius-root/usr/lib/' directory and the symbolic link creation then does not find it. Making install in lib... gmake[4]: Entering directory `/usr/src/redhat/BUILD/freeradius- 1.1.1/src/lib' /usr/bin/libtool --mode=install /usr/src/redhat/BUILD/freeradius- 1.1.1/install-sh -c -c libradius.la /var/tmp/freeradius- root/usr/lib /usr/src/redhat/BUILD/freeradius-1.1.1/install-sh -c -c .libs/libradius-1.1.1.so /var/tmp/freeradius-root/usr/libradius- 1.1.1.so (cd /var/tmp/freeradius-root/usr && rm -f libradius.so && ln -s libradius-1.1.1.so libradius.so) /usr/src/redhat/BUILD/freeradius-1.1.1/install-sh -c -c .libs/libradius.lai /var/tmp/freeradius-root/usr/libradius.la /usr/src/redhat/BUILD/freeradius-1.1.1/install-sh -c -c .libs/libradius.a /var/tmp/freeradius-root/usr/libradius.a ranlib /var/tmp/freeradius-root/usr/libradius.a chmod 644 /var/tmp/freeradius-root/usr/libradius.a libtool: install: warning: remember to run `libtool --finish /usr/lib' rm -f /var/tmp/freeradius-root/usr/lib/libradius-1.1.1.la; ln -s libradius.la /var/tmp/freeradius-root/usr/lib/libradius- 1.1.1.la ln: creating symbolic link `/var/tmp/freeradius- root/usr/lib/libradius-1.1.1.la' to `libradius.la': No such file or directory gmake[4]: *** [install] Error 1 gmake[4]: Leaving directory `/usr/src/redhat/BUILD/freeradius- 1.1.1/src/lib' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/usr/src/redhat/BUILD/freeradius- 1.1.1/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/usr/src/redhat/BUILD/freeradius- 1.1.1/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/usr/src/redhat/BUILD/freeradius- 1.1.1' make: *** [install] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.72933 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.72933 (%install) -----BEGIN PGP SIGNATURE----- Note: This signature can be verified at https://www.hushtools.com/verify Version: Hush 2.5 wkYEARECAAYFAkQfptQACgkQmw4BJyaatJ3CjQCgkE3PssxUgCxIgcQCyCOF/7akj1cA n3uM4/Yu6y5ko1XNO+2j9dfwvd3j =Kl6m -----END PGP SIGNATURE-----

4 7