- Freeradius-Users - lists.freeradius.org

Error: Assertion failed in request_list.c, line 1119
by masetio 29 Jan '06

29 Jan '06

I used FS freeradius-snapshot-20060119 in Debian Sarge, if FS running on daemon mode have error like : Wed Jan 25 00:51:34 2006 : Info: Ready to process requests. Wed Jan 25 02:05:16 2006 : Error: Assertion failed in request_list.c, line 1119 'n crash but if running in Debug mode (radiusd -X) work fine... plz i need help to solve that problem tnkz -- ~_|[]~

2 3

Windows PPTP and Cisco VPN Concentrator
by Stuart Berman 28 Jan '06

28 Jan '06

Looks like you need to assign an IP address range in the Cisco VPN concentrator "configuration" -> "system" -> "address management" -> "pools" section. (That assumes you are configured to assign IP addresses from address pools. You can also proxy DHCP, etc.)

1 0

Re: Re: rlm_sql_mysql search path Bug ?
by Jérémy Cluzel 28 Jan '06

28 Jan '06

>>Hello, >> >>I'm under FreeBSD 6.0 - Freeradius 1.0.5 >>I did an install from the port (/usr/ports/net/freeradius) with >>rlm_sql_mysql enabled. >>I set radiusd_enable="YES" in "rc.conf" >>But when I reboot, radius doesn't start and I got this in my >>"/var/log/radius.log": >> >>Sat Jan 28 00:39:55 2006 : Error: rlm_sql (sql): Could not link driver >>rlm_sql_mysql: Shared object "libmysqlclient.so.14" not found, required >>by "rlm_sql_mysql-1.0.5.so" >>Sat Jan 28 00:39:55 2006 : Error: rlm_sql (sql): Make sure it (and all >>its dependent libraries!) are in the search path of your system's ld. >>Sat Jan 28 00:39:55 2006 : Error: radiusd.conf[14]: sql: Module >>instantiation failed. >> >>Very curiously, if I did a "/usr/local/etc/rc.d/radiusd.sh start" then, >>everything goes fine... may I miss something to do ? >> >>Regards, >> >>Jeremy >>- >>List info/subscribe/unsubscribe? See >>http://www.freeradius.org/list/users.html >> >> >> >As I can see the problem is that you dont have shared-mysql and >client-libraries installed, try to install them and then run the radius. > > >------------------------------ > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > >End of Freeradius-Users Digest, Vol 9, Issue 112 >************************************************ > > -> http://www.freeradius.org/faq/#4.14 Sorry Alan :-) Thanks for all. Jeremy Cluzel

1 0

Authenticating CHAP-Password to Pam (Kerberos 5 to AD)
by Patrick Bartkus 28 Jan '06

28 Jan '06

Please tell me someone has fixed this problem. I'm trying to authenticate an Ascend MAX dial-up server back to Windows Active Directory. I am using a local unix group for authorization. I have Pam set up on my system and it uses Kerberos 5 to authenticate to AD just fine. But I'm getting: auth: type "PAM" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_pam: Attribute "User-Password" is required for authentication. Cannot use "CHAP-Password". modcall[authenticate]: module "pam" returns invalid for request 0 I did some checking and found this posting from 2003 basically saying it can't be done: http://www.mail-archive.com/freeradius-users@lists.cistron.nl/msg19439.html I do have other options other than the Windows Domain authentication, but I was not wanting to pursue them unless I had to. Has this been solved or am I SOL? Patrick

3 10

rlm_sql_mysql search path Bug ?
by Jérémy Cluzel 28 Jan '06

28 Jan '06

Hello, I'm under FreeBSD 6.0 - Freeradius 1.0.5 I did an install from the port (/usr/ports/net/freeradius) with rlm_sql_mysql enabled. I set radiusd_enable="YES" in "rc.conf" But when I reboot, radius doesn't start and I got this in my "/var/log/radius.log": Sat Jan 28 00:39:55 2006 : Error: rlm_sql (sql): Could not link driver rlm_sql_mysql: Shared object "libmysqlclient.so.14" not found, required by "rlm_sql_mysql-1.0.5.so" Sat Jan 28 00:39:55 2006 : Error: rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. Sat Jan 28 00:39:55 2006 : Error: radiusd.conf[14]: sql: Module instantiation failed. Very curiously, if I did a "/usr/local/etc/rc.d/radiusd.sh start" then, everything goes fine... may I miss something to do ? Regards, Jeremy

2 1

error if running daemon
by masetio 27 Jan '06

27 Jan '06

I used freeradius-snapshot-20060119 in Debian Sarge implemen sqlcounter module if running with daemon Freeradius crash with log : Thu Jan 26 09:32:46 2006 : Info: Ready to process requests. Thu Jan 26 10:02:58 2006 : Error: Assertion failed in request_list.c, line 1119 but if running with debug mode doesn't have any error. plz i need sugest tengkyu.... ~_|[]~ ------- .:Learning by Doing:.

3 3

Capturing the inner authentication ID for Radius accounting
by CHui 27 Jan '06

27 Jan '06

I have been looking for a way to maintain accurate wireless access and usage information for security auditing purposes. The problem I have is that wireless network users may choose to provide an alternative identity by providing an outer identity in the supplicant software. Although the user still need a legitimate user id/password to pass the EAP TTLS authentication. So far I could not find a "standard" way to track the user identity via Radius accounting records. I do manage to configure the FreeRadius to send the inner authentication user ID to the Cisco Aironet Access point (IOS 12.3(7)JA) using the Radius attribute "Class" (ID 25). For example, in my users file, the following is configured for guest access: DEFAULT Hint == "guest" Auth-Type = sql, Class = "%{User-Name}", Session-Timeout = 3600, Fall-Through = No The actual user id used in the EAP-TTLS authentication is passed to the Cisco Aironet AP via the Class attribute. I have observed that both the Radius "start" and "stop" records sent by the Cisco Aironet AP contained the Class attribute with the actual user's ID. The reason I chose the Class attribute is that it is the only attribute honored by the Aironet AP in Access-Accept message and also included in the radius accounting send by the Aironet AP according to the Cisco IOS Software Config Guide for Aironet APs. Although it seems to work for me, I am not sure about the use of attribute Class for tracking user ID would interfere with other operation (like the one attribute Class was originally designed for)? Also, the attribute Class is of type Octet. Does anyone know of a way to convert it to text in SQL? I would like to convert it to text before writing it into the mySQL database, preferably by way of the accounting_xx_query in the sql.conf file. Thanks Cedric

2 1

Webserver System Hanging when trying to authenticate.
by Frank Reiss 27 Jan '06

27 Jan '06

Hi, I have seen this problems a few time. I setup a Fedora Core 4 - Freeradius server with apache and when I try to login to the webserver it hangs the webserver. Note in this case the web server and Freeradius are on the same server. But I have also seen it where the web server and freeradius are on two different systems and the web server hangs. I have gotten it to work in the past by stopping the firewall on the radius server and authenticating and then restarting the firewall. And everything works for some reason. Which really seems strange. I am running Fedora Core Linux for the web servers. And Redhat ES4 Linux for the radius servers. I am wondering if this is a known problem and what is the resolution to the problem. Frank Reiss Impeva Labs, Inc. Phone: 1-850-872-7099 COMPANY CONFIDENTIAL NOTICE This electronic mail transmission and any accompanying documents contain information belonging to the sender which may be company confidential and legally privileged. If you are not the intended recipient, any disclosure, copying, distribution or action taken in reliance on the message is strictly prohibited. If you have received this message in error, please delete it. Thank You

2 1

Error PROFIND request failed on'/' Error PROFIND of '/': 405 Method Not Allowed (http://192.168.1.75)
by Frank Reiss 27 Jan '06

27 Jan '06

Hi When I try to open up the repository using TortoiseSVN Checkout I receive the following error messages: Error PROFIND request failed on'/' Error PROFIND of '/': 405 Method Not Allowed (http://192.168.1.75) What is causing the Error Message? and how do I correct it? Thank you, Frank Reiss

1 0

simultaneous-use and stateless sessions in sql
by Seferovic Edvin 27 Jan '06

27 Jan '06

Hi, I have set up my new test environment with freeradius-1.1.0 ( with ldap and mysql ) and I just hit the wall as my VPN server ( poptop - MS PPTP ) crashed. I have a session left in my mysql db with "Acct-Stop = 0" which permits user to login again ( after the crash ) because simultaneous-use is set to 1. Are there any workarounds for this scenario? I've found deletestatlesssessions in sql.conf file, but I have no idea how does this work ( it is set to "yes" but no use ). Since my NAS is POPTOP server, type is set to "other" and checkrad cannot check ( or won't check ). At the end of the Simultaneous-Use doc it is mentioned that Idle-Timeout could be used, but this works for specific NASes and not for such VPN server that looses all info about users when crashed. Only way I figured out would be to check for open session before simultaneous-use-query. Since Ive configured my "NAS" to send accounting data every 2 minutes, it would be easy to say "delete all session data where traffic_data = 0 and time difference between now and session_start > 2 Minutes".. but where could I put such query. Does anyone have any suggestions on this topic? I know it is rather complex topic, but I would appreciate any opinions. TIA Regards, Edvin Seferovic PS: sorry for my HTML eMail today !

2 5