- Freeradius-Users - lists.freeradius.org

Re: eap.conf configuration
by Stephen Walsh 02 Feb '06

02 Feb '06

>Please, could you be more accurate When you create the private key file(pem file), you are asked to provide a passphrase that can be used to decode the File. The Passphrase is a key to allow you to confirm the validity of the private key file (pem file). Stephen Walsh s.walsh(a)signadou.acu.edu.au Client Support Officer (Technology) Australian Catholic University (Limited) PO Box 256, Dickson ACT 2602 Phone: +61 2 6209 1133 Fax: +61 2 6209 1179 Mobile: +61 419 496796 +++++++++++++++++++++++++++++++++++++++++++++++++ CRICOS Registration: 00004G, 00112C, 00873F, 00885B ABN 15 050 192 660 +++++++++++++++++++++++++++++++++++++++++++++++++

1 0

Unable to connect TCP/IP error 733
by Galloway, David Mr KRS 02 Feb '06

02 Feb '06

Hi All.... Here's an issue I'm getting, and I seem to not be able to find any answers elsewhere on the internet. We're testing currently and our client is dialing into our NAS, the NAS sends the auth. request to the RADIUS, RADIUS authenticates and returns a good request.... BUT!!!!! On the client side the connection is quickly dropped when it moves to "Registering Your Computer on The Network" and returns the error message of -Checking network protocol connections... TCP/IP CP reported error 733. A connection to the remote computer could not be completed. You might need to adjust the protocols on this computer.- The protocol on the Client is set to PPP. When I checked out various modem sites they kept referring to problems negotiating mult-link for single link connections... That option is off by default on Windows XP (which is the client). So I'm quite stuck, not sure exactly which way to go and what changed to make on the RADIUS side to resolve this connection issue. Client- Windows XP Pro NAS- Cisco AS5400 Radius Server - RHEL4 freeRADIUS version 1.0.1 Here's the debug dump. Don't know if it'll do any good, but... Hey, anything is worth a try. Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "/etc/passwd" unix: shadow = "/etc/shadow" unix: group = "/etc/group" unix: radwtmp = "/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/etc/raddb/huntgroups" preprocess: hints = "/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/etc/raddb/users" files: acctusersfile = "/etc/raddb/acct_users" files: preproxy_usersfile = "/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. rad_recv: Access-Request packet from host 172.16.2.5:1645, id=115, length=100 Framed-Protocol = PPP User-Name = "test" User-Password = "test" NAS-Port-Type = Async Connect-Info = "54667/24000 V90/V44/LAPM" NAS-Port = 538 Service-Type = Framed-User NAS-IP-Address = 172.16.2.5 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched test at 80 modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied User-Password matches local User-Password Sending Access-Accept of id 115 to 172.16.2.5:1645 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = 172.16.2.150 Framed-IP-Netmask = 255.255.255.0 Framed-Routing = Broadcast-Listen Framed-Filter-Id = "std.ppp" Framed-MTU = 1500 Framed-Compression = Van-Jacobson-TCP-IP Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 115 with timestamp 43e171f9 Nothing to do. Sleeping until we see a request. Regards, David Galloway Public Networks Administration KRS IT Network Operations Help Desk (805) 355-2444 Direct (805) 355-4512 +12Hrs GMT

1 0

FramedIPAddress not showing in MySQL
by Fred Casavant 02 Feb '06

02 Feb '06

The FramedIPAddress <sql.php?lang=en-utf-8&server=1&collation_connection=utf8_general_ci&db=radius&table=radacct&pos=0&session_max_rows=30&disp_direction=horizontal&repeat_cells=100&dontlimitchars=0&sql_query=SELECT+%2AFROM+%60radacct%60++ORDER+BY+%60FramedIPAddress%60+ASC> are showing up in my accounting file (the detail-date file) but it's not showing up in the radacct table in mysql. At first I thought it was an issue with the NASes but the IPs are always showing up in the flat file (after an Accounting Stop action) so I doubt the NASes are the problem. And I didn't touch the default sql.conf file at all and the mysql radius schema was created with the db_mysql.sql that come with the freeradius tarball. So I wonder what could be the problem here. Could it be because I'm logging the accounting stuff in two places (flat detail file and mysql) at the same time? My setup is freeradius 1.1.0 with MySQL 4.1.16 on a FC4 distro.

1 0

More than one sql Query in Accounting
by bertram 01 Feb '06

01 Feb '06

Hello, i want to run more than one SQL Query when a User logoff. the first Query is the accounting_stop_query to insert Accounting infos. the second Query is for recalculating the remaining traffic for the User (for ChilliSpot-Max-Total-Octets). When i insert one new section in the sql.conf like the sql {...} and add it in the accounting section of the radiusd.conf the radiusd coldnt start and print out a memory access error Message. can everybody help me to solve this Problem Bertram sorry for my bad english

1 0

client's shortname cast the real IP
by Min Qiu 01 Feb '06

01 Feb '06

Hi, I have: client 10.1.2.0/24 { secret = secretkey shortname = 10.1.2.x } The problem is the log has only 10.1.2.x, not the real NAS IP. However, taking the shortname out will generate error when the radiusd runs. What I can do to have the server log the real NAS ip. Of cause, I don't want to do client 10.1.2.1 ... client 10.1.2.2 ... ... client 10.1.2.254 ... I have FC4 and freeradius 1.0.4 installed Thanks, Min

1 0

Re: FreeRADIUS on FreeBSD 6.0-RELEASE
by Rob Parker 01 Feb '06

01 Feb '06

D'oh - ignore me. Just spotted that it's currently in the FreeBSD PR queue waiting to be commited since it was submitted yesterday! Thanks all, Rob. -----Original Message----- From: Rob Parker Sent: 01 February 2006 17:31 To: 'freeradius-users(a)lists.freeradius.org' Subject: FreeRADIUS on FreeBSD 6.0-RELEASE Hi, I've just come up with a small patch to otp_state.c to allow clean compilation on FreeBSD 6.0. I notice there is no port maintainer, so I'm not entirely sure where I should send it! If someone has a cleaner/tidier way of doing this, let me know... I've included the patch below for review. I am also considering submitting it to ports(a)freebsd.org and possibly taking over maintaing the FreeBSD port of FreeRADIUS unless anyone knows who currently controls it? diff -u otp_state.c.backup otp_state.c --- otp_state.c.backup Wed Feb 1 18:32:52 2006 +++ otp_state.c Wed Feb 1 18:32:45 2006 @@ -35,7 +35,7 @@ #include <fcntl.h> #include <unistd.h> #include <sys/socket.h> -#if defined(__linux__) || defined(__APPLE__) +#if defined(__linux__) || defined(__APPLE__) || defined(__FreeBSD__) #include <sys/un.h> #endif Regards, Rob.

1 0

FreeRADIUS on FreeBSD 6.0-RELEASE
by Rob Parker 01 Feb '06

01 Feb '06

Hi, I've just come up with a small patch to otp_state.c to allow clean compilation on FreeBSD 6.0. I notice there is no port maintainer, so I'm not entirely sure where I should send it! If someone has a cleaner/tidier way of doing this, let me know... I've included the patch below for review. I am also considering submitting it to ports(a)freebsd.org and possibly taking over maintaing the FreeBSD port of FreeRADIUS unless anyone knows who currently controls it? diff -u otp_state.c.backup otp_state.c --- otp_state.c.backup Wed Feb 1 18:32:52 2006 +++ otp_state.c Wed Feb 1 18:32:45 2006 @@ -35,7 +35,7 @@ #include <fcntl.h> #include <unistd.h> #include <sys/socket.h> -#if defined(__linux__) || defined(__APPLE__) +#if defined(__linux__) || defined(__APPLE__) || defined(__FreeBSD__) #include <sys/un.h> #endif Regards, Rob.

1 0

eap.conf configuration
by dark0s dark0s 01 Feb '06

01 Feb '06

What is the difference between the following variables: 1) private_key_password 2) private_key_file Thanks ___________________________________ Yahoo! Mail: gratis 1GB per i messaggi e allegati da 10MB http://mail.yahoo.it

2 2

ms-chap authentication with client tool?
by DilipSimha.N.M 01 Feb '06

01 Feb '06

hi, is there any simple tool(other than jradius) which can be used as radius client and which can be used to test mschap authentication?? if so, please give the packet contents for radius client and the users file check-items. --DilipSimha

5 6

Re:Re:Re Error in make freeradius_1.1.0(Correct)
by Velikanov 01 Feb '06

01 Feb '06

Good day, Nicolas Baradakis I edit Makefile in src/modules/rlm_dbm as you advise and got such result EXCUSE for my previous post The CORRECT result of #make is ... gmake[6]: Entering directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr /inc lude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_ H -c rlm_dbm.c -o rlm_dbm.o rlm_dbm.c: In function `sm_parse_user': rlm_dbm.c:176: warning: assignment discards qualifiers from pointer target type rlm_dbm.c:210: warning: passing arg 2 of `paircmp' discards qualifiers from poin ter target type /u01/data/freeradius-1.1.0/libtool --mode=link ld \ -module -static -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO _KRB 5 -I/usr/include/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAV E_GD BM_NDBM_H rlm_dbm.o -o rlm_dbm.a mkdir .libs ar cru rlm_dbm.a rlm_dbm.o ranlib rlm_dbm.a /u01/data/freeradius-1.1.0/libtool --mode=compile gcc -g -O2 -D_REENTRANT -D_PO SIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr/include/openssl -Wall -D_GNU_ SOUR CE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_H -c rlm_dbm_parser.c rm -f .libs/rlm_dbm_parser.lo gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr/ incl ude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_H -c r lm_dbm_parser.c -fPIC -DPIC -o .libs/rlm_dbm_parser.lo rlm_dbm_parser.c: In function `storecontent': rlm_dbm_parser.c:165: warning: assignment discards qualifiers from pointer targe t type gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -I/usr/ incl ude/openssl -Wall -D_GNU_SOURCE -DNDEBUG -I../../include -DHAVE_GDBM_NDBM_H -c r lm_dbm_parser.c -o rlm_dbm_parser.o >/dev/null 2>&1 mv -f .libs/rlm_dbm_parser.lo rlm_dbm_parser.lo /u01/data/freeradius-1.1.0/libtool --mode=link gcc rlm_dbm_parser.lo ../../lib/l ibradius.la -L/usr/lib -lssl -L/usr/lib -lcrypto -lnsl -lresolv -lpthread -lgd bm -o rlm_dbm_parser gcc rlm_dbm_parser.o -o .libs/rlm_dbm_parser ../../lib/.libs/libradius.so -L/us r/lib -lssl -lcrypto -lnsl -lresolv -lpthread usr/lib/libgdbm.so -Wl,--rpath - Wl,/usr/local/lib ../../lib/.libs/libradius.so: undefined reference to `MD5Final' ../../lib/.libs/libradius.so: undefined reference to `crypt' ../../lib/.libs/libradius.so: undefined reference to `MD5Init' ../../lib/.libs/libradius.so: undefined reference to `MD5Update' collect2: ld returned 1 exit status gmake[6]: *** [rlm_dbm_parser] Error 1 gmake[6]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules/rlm_dbm' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[4]: *** [all] Error 2 gmake[4]: Leaving directory `/u01/data/freeradius-1.1.0/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[2]: *** [all] Error 2 gmake[2]: Leaving directory `/u01/data/freeradius-1.1.0/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/u01/data/freeradius-1.1.0' make: *** [all] Error 2

2 1