- Freeradius-Users - lists.freeradius.org

LDAP module locks
by Peter Manckok 09 Feb '06

09 Feb '06

Hy all, I was reading the messages in the forum looking for some information for a problem I have. And I found this post: On August 30, 2005 6:42:39 PM -0400 Alan DeKok <aland at ox.org> wrote: > Frank Cusack <fcusack at fcusack.com> wrote: >> > In ldap_get_conn(), conns[i].locked must >> > not be tested until after a lock is obtained. >> >> fixed in rlm_ldap.c#1.156 but I don't know how to propagate this change >> to 1.0.5 candidate. > > Looking at the code, I'm not even sure that the "locked" member is > appropriate for a threaded environment. It could probably be deleted. > > For non-threading mode, the LDAP module can't be using multiple > connections, because it can only be called once. For threading mode, > the mutexes protect the data structure. > > The "locked" member should be deleted, unless I'm missing something. I have a question: In the ldap_get_conn I see that you use a pthread_mutex_trylock. So if you try to get connection and all the connections are locked, the module fails. Why don´t you use the pthread_mutex_lock function instead in order to wait until the connection is unlocked? Thanks a lot Peter ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

2 1

Compiling without threads
by Peter Manckok 09 Feb '06

09 Feb '06

Hy all, I am going to compile FR without threads. And I would like to know: How will FR handle simultaneous requests? Does it create new processes using fork functions? Thanks a lot Peter ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

2 1

PEAP error with 1.1.0
by hazed＠xs4all.nl 09 Feb '06

09 Feb '06

Hi, I'm trying to get Freeradius 1.1.0 running on a Debian Sarge box. I compiled and built the deb packages from the tarball according to the FAQ instructions. After installing and configuring according to the 802.1X Port-Based Authentication HOWTO on tldp.org, the daemon refuses to start. Freeradius -x gives the following output: Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap_tls: Loading the certificate file as a chain rlm_eap: Loaded and initialized type tls rlm_eap: Failed to link EAP-Type/peap: rlm_eap_peap.so: cannot open shared object file: No such file or directory radiusd.conf[10]: eap: Module instantiation failed. radiusd.conf[1893] Unknown module "eap". radiusd.conf[1840] Failed to parse authenticate section. I hope someone can shed some light on this. Thanks in advance. Regards Matthew Smith

3 4

sqlcounter design for prepaid
by Rusma 09 Feb '06

09 Feb '06

dear all, I need your advice for my prepaid billing, i have several scenario : 1. prepaid for 4 hours and expire in 2 days after login. 2. prepaid for 8 hours and expire in 4 days after login. 3. prepaid for 24 hours and expire in 1 day. i have configured my freeradius and mysql using rlm_sqlcounter, i have tested with sample account from sqlcounter doc and its works. . i need to make or change default scripts for above schemes. can any body help me. best regards, rusma permana

1 1

PEAP with sql - plain Identity
by Norbert Grochal 09 Feb '06

09 Feb '06

In 'Ralink Wireless Utility' -> '802.1x Setting' I can choose 'PEAP' and foll 3 fields (with my example values): 1. Identyty = myidentyty 2. Login = mylogin 3. Password = mypass (I set protocol as EAP-MSCHAP v2) in freeradius users file I can write: mylogin Auth-Type = EAP, User-Password := "mypassword" So identity can by any word. I hope mylogin and mypassword is sent to radius encrypted, not as plain text. But when I clear the users file and use sql I have a recerd in radcheck table: id UserName Attribute op Value ... (other fields) 1 mylogin User-Password == mypassword ... (other values) and in "Ralink...' I MUST (?) set (Identity = Login = mylogin) and Password = mypassword to be authorized in freeradius. But isn't Identity sent as clear text ??? I want to set Identity as Client Name, not as his login, is it possible? SQL queries check User-Name attribute and *I don't know how* put it to rlm_eap_peap and it says: Tunneled data is valid. (...) Success. But I don't want to login be equals to identity... Norbert

2 3

User passwords in 127.0.0.1/auth-detail file
by Walter Reynolds 09 Feb '06

09 Feb '06

I am currently running freeradius 1.0.4 I have the following line set log_auth_goodpass = no I am also using krb5 module under PAM. The problem I am having is while I do not get the User-Password in the <NAS>/auth-detail log, it does show up in the 127.0.0.1/auth-detail file. I have tried to search the archive and feel I must me mising something. Can someone please help me figure out what is going on? I want logs and details, just not the user passwords. Thanks. -- Walter Reynolds University of Michigan

2 1

freeradius-1.1.0 and make error
by Hubert Kupper 09 Feb '06

09 Feb '06

Hello, I try to compile freeradius-1.1.0 on suse 10.0 64bit. ./configure --with-edir comes without errors. When I try make the following error occours: "/usr/lib/libltdl.so: xould not read symbols: File in wrong format" Can anyone help? Regards Hubert

2 1

freeradius v 1.1.0 segmentation fault,,help....
by tommy garsia 09 Feb '06

09 Feb '06

Hi all, i've installed freeradius with experimental modules enabled under debian sarge... after i run the program by typing hotspot:# radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded SQL Counter Module: Instantiated sqlcounter (noresetcounter) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded SQL Segmentation fault (core dumped) then i check using gdb like this (gdb) run -x Starting program: /usr/local/sbin/radiusd -x [Thread debugging using libthread_db enabled] [New Thread 1075661280 (LWP 18090)] Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded SQL Counter Module: Instantiated sqlcounter (noresetcounter) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded SQL Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1075661280 (LWP 18090)] 0x400640df in lt_dlsym (handle=0x81171e8, symbol=0x8115738 "rlm_sql_mysql") at ltdl.c:3330 3330 lensym = LT_STRLEN (symbol) + LT_STRLEN (handle->loader->sym_prefix) what should i do with the module??is the anything wrong with my configuration?? or anything else?? the compilation may be?? best regards, tommy --------------------------------- Brings words and photos together (easily) with PhotoMail - it's free and works with Yahoo! Mail.

2 1

cannot connect to mysql
by Rusma 09 Feb '06

09 Feb '06

dear all, im a newbie, i have configured freeradius + mysql, but i can't connect user from radcheck table. please give me an advices, etc/rc.d/rc.radiusd restart Starting FreeRADIUS:Thu Feb 9 10:51:54 2006 : Info: Starting - reading configuration files ... radiusd [root@Customercare raddb]# tail -f /usr/local/var/log/radius/radius.log Thu Feb 9 10:51:54 2006 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Thu Feb 9 10:51:54 2006 : Info: rlm_sql (sql): Attempting to connect to hidden Thu Feb 9 10:51:54 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Thu Feb 9 10:51:54 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Thu Feb 9 10:51:54 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Thu Feb 9 10:51:54 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Thu Feb 9 10:51:54 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Thu Feb 9 10:51:54 2006 : Info: Ready to process requests. table radcheck 150;"test0001";"Max-All-Session";":=";"54000";"0000-00-00 00:00:00";"NULL";;0;"0000-00-00 00:00:00";0;1 152;"test0001";"User-Password";":=";"test88";"0000-00-00 00:00:00";"NULL";;0;"0000-00-00 00:00:00";0;1 [root@Customercare raddb]# radtest test0001 test88 127.0.0.1 1812 testing123 Sending Access-Request of id 30 to 127.0.0.1 port 1812 User-Name = "test0001" User-Password = "test88" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 Re-sending Access-Request of id 30 to 127.0.0.1 port 1812 User-Name = "test0001" User-Password = "test88" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=30, length=2 [root@Customercare raddb]# tail -f /usr/local/var/log/radius/radius.log Thu Feb 9 11:01:01 2006 : Auth: Login incorrect: [test0001/test88] (from client localhost port 1812) Thu Feb 9 11:07:01 2006 : Auth: Login incorrect: [test0001/test88] (from client localhost port 1812) any idea ..? best regards, rusma permana

2 2

A simple clients,Users and naslist
by Radius User 09 Feb '06

09 Feb '06

I am totally a newbie at the world of freeradius. Can any one give me a simple example clients,users and naslists file. so simply...... regards

2 1