- Freeradius-Users - lists.freeradius.org

RE: Accounting Cisco VSA attributes
by Caines, Max 15 Mar '06

15 Mar '06

Hi I have now upgraded to 1.1.0, and yes, it now converts Cisco AV pairs to new attributes. Many thanks. I thought it was worth mentioning that I had a few problems building Freeradius, which I should have brought up before, because I have dim memories of getting the same ones with 0.9.3. It's making rlm_sql_mysql hat gave me problems, and they were of two sorts. First, "configure" reckoned that MySQL was not usable on my system and didn't create the module in the first place. Then, when I fixed that, the run-time linker failed when the module was first loaded. I was able to fix both these problems, but I thought it might be worth letting you know, because I compiled it on two systems and got the same problems. One is an ancient Sun Ultra 1 running Solaris 5.9, while the other is a SunFire V240s running 5.8, so other Solaris users may see them as well. The "configure" problem I fixed by modifying "src/modules/rlm_sql/drivers/rlm_sql_mysql/configure. This is the output from "diff": 978c978 < LIBS="-L$try -lmysqlclient_r $old_LIBS" --- > LIBS="-L$try -lmysqlclient_r $old_LIBS -lsocket -lm -lz -lnsl" Without that compiling and linking of "conftest.c" in "configure" fails, and it assumes that that's because your MySQL is absent or wrongly set up. The other problem is in "Makefile.in". Here's the "diff" output: 6c6 < RLM_SQL_LIBS = @sql_mysql_ldflags@ --- > RLM_SQL_LIBS = @sql_mysql_ldflags@ -lm -lz The need for "libz" is the result of using MySQL 5.0, which has a new "archive" storage type that uses compression routines from a separate library, so I guess you have this issue on any architecture. "libm" is required because somewhere in the MySQL library there's a call to "floor", and that's probably only an issue with Suns. I realise that this may all be down to something odd about our Solaris systems, and if so please ignore this, but I thought it might be useful. Max Caines > -----Original Message----- > From: > freeradius-users-bounces+max.caines=wlv.ac.uk(a)lists.freeradius.org > [mailto:freeradius-users-bounces+max.caines=wlv.ac.uk@lists.fr > eeradius.o > rg]On Behalf Of Alan DeKok > Sent: 09 March 2006 19:37 > To: FreeRadius users mailing list > Subject: Re: Accounting Cisco VSA attributes > > > "Caines, Max" <Max.Caines(a)wlv.ac.uk> wrote: > > I'm using FreeRadius (0.9.3) > > Oh dear, you *really* should upgrade. See > http://www.freeradius.org/security.html. > > As for the rest of your message, I recall issues with cisco_vsa_hack > in older versions of the server. Maybe a newer version works better. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

detail log
by José Berenguer 15 Mar '06

15 Mar '06

Hello, in the logs of the module auth_log you can suppress the log of the passord? Thanks!

1 0

Replying attribute value regarding a check-item or Hunt-group...
by Florian Prester 15 Mar '06

15 Mar '06

Hi, how can I achieve, that the radius-server is replying IP-address A, if comming from NAS A, and IP-address B, if comming from NAS B? Altough: IP A is stored in LDAP as IP-A and IP B is stored in LDAP as IP-B But unfortunately I do only have one Framed-IP-Address-attribute which should be mapped to either of above, depending of the NAS-IP. Any Ideas or further reading? Thank you! Regards Florian -- Dipl. Inf. Florian Prester Network Administration Regionales RechenZentrum Erlangen Universitaet Erlangen-Nuernberg Martensstr. 1 91052 Erlangen Germany Tel.: +499131 8527813

1 0

Howto reload raddb/users file?
by Chris Leavoy 15 Mar '06

15 Mar '06

How do I reload raddb/users file? Please embarrass me thoroughly by pointing out where this is documented. -- Chris

4 3

MAC/VLAN with HP Procurve
by Jim Potter 15 Mar '06

15 Mar '06

Hi all, Part 2 of my problems - has anyone got a radius server to hand out dynamic VLANs to an access point? I've got the following from various sites, but it doesn't seem to work (users file): 00-0e-35-31-5c-1b Auth-Type == Local,User-Password == "00-0e-35-31-5c-1b" Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 20, Tunnel-Type = VLAN - this is meant to make the laptop with the given VLAN join to the network on vlan 20, but there is no sign of this working... any clues? cheers Jim Potter -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

4 3

unsubscribe
by Joseph Francis Medina Gonzalez 14 Mar '06

14 Mar '06

1 0

Password Logging: Correction
by andre kip 14 Mar '06

14 Mar '06

hi! 1. how can I stop my freeradius server from logging entered passwords into the the accounting file? I would like to only have the following in my file this way: Packet-Type = Access-Request Wed Mar 1 15:05:04 2006 User-Name = "Me" ######no password logging!!### NAS-IP-Address = x.x.x.x NAS-Identifier = "ssh" NAS-Port = 424 NAS-Port-Type = Virtual Service-Type = Authenticate-Only Calling-Station-Id = : 2. Is there a way of stopping the server from outputing the user password on debug mode?? as in: rad_recv: Access-Request packet from host 10.0.10.11:1449, id=17, length=87 User-Name = "Me" ##NO User-Password##### NAS-IP-Address = x.x.x.x NAS-Identifier = "ssh" NAS-Port = 424 : 3. And finally is it possible to use enycrypted passwords in user file? e.g. Me Auth-Type := Crypt-Local, Crypt-Password == "098f6bcd4621d373cade4e832627b4f6" ......or something similar Thanks in Advance. Andy Trüffle ___________________________________________________________ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de

5 13

Problems with users file and DEFAULT authentication
by Jim Potter 14 Mar '06

14 Mar '06

1 0

radclient solaris 10
by dr 14 Mar '06

14 Mar '06

where can I find radclient for Solaris 10 (sparc) ?... thank you didier --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments.

1 0

About Monthly Time Limits
by Lisa Casey 13 Mar '06

13 Mar '06

Hi, We are an ISP. As many ISP's do these days, we outsource our dialup numbers to wholesalers such as Megapops, etc. but we maintain our own radius servers. The wholesaler proxies radius requests to us. The following is kind of hypothetical, but I need to know this in order to understand how all this works. I have monthly time limits set up in my Freeradius. When customers login, where exactly does the information come from that tells Freeradius "This customer is OK, he has not used up his time limit yet" or "Reject this customer, he has used up his limit for this month". Is this dependent on something in the radius config at the wholesalers end, or is this info taken from my db.monthly file? Another way of asking this question (in case I'm not making myself clear which is always a possibility) is: Does the wholesaler have to support monthly time limits or can I do it all from my end (whether or not the wholesaler supports such an attribute)? Any info about how this process works will probably help clear up my thinking. Thanks, Lisa Casey

4 4