- Freeradius-Users - lists.freeradius.org

RE: cannot create core dump file?
by pepsi cola 27 Dec '05

27 Dec '05

Hi, thanks for the reply. i've checked the radius.conf, allow_core_dumps = yes. i am not sure abt the file name of the core dump file (nv seen it before), but seems there's no new created file in root directory either. any suggestion? KW >----- Original Message ----- From: "Joe Maimon" <jmaimon(a)ttec.com> >To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> >Sent: Tuesday, December 27, 2005 10:52 AM >Subject: Re: cannot create core dump file? > > >> >> >> >>and where can i get the core dump file? any advise? thanks in advance. >> >>regards, >>Pang KW >> >> >>check the root directory, check radiusd.conf to see that core dumps are >>enabled >>- List info/subscribe/unsubscribe? See >>http://www.freeradius.org/list/users.html >> >

1 0

cannot create core dump file?
by pepsi cola 27 Dec '05

27 Dec '05

Hi all, i attemp to create core dump file since i encountered segmentation fault error. i ran the daemon using './radiusd -XXX' under /usr/local/radius/sbin as my current directory.but afterwards there's no core dump file generated. how and where can i get the core dump file? any advise? thanks in advance. regards, Pang KW

3 3

unknown certificate??
by Armin Krämer 26 Dec '05

26 Dec '05

Hi, i installed the aktual version of freeradius on a debian system and generated a CA und server/client certificates with TinyCA2. I want to authenticate the clients using EAP/TLS. But now i get this output of freeradius and freeradius freezes at this point. Can someone tell me why this happens? Sending Access-Challenge of id 22 to 192.168.1.252:1326 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User EAP-Message = 0x0117040a0dc0000011da95300f0603551d130101ff040530030101ff301106096086480186 f842010104040302010630090603551d1204023000302b06096086480186f842010d041e161c 54696e7943412047656e65726174656420436572746966696361746530210603551d11041a30 18811643412d52616469757340616b2d7365727665722e6465300b0603551d0f040403020106 300d06092a864886f70d010105050003820201002cb7d2ab56adb9d5a348a6bc0391ecbd8f53 215ca3ad83c74730cba78bcb0f36800f71f9c9e672b5ad761fddb06f72075715ad686dd6e31c 496c015847927af98a5820860004122fd22eba64dbffe46d8def EAP-Message = 0x4dfd2195d70b313f472b31e0dec0d39f08e95d9c6ee43b060954e7cda70492fb473698daca 42a3a76e07601ecc9d746ea3eac2daa4da050dd21d1c8daebf845abc3daa199a3fb35c5fc6c8 76d312b8c90775a6de01092e337da7ccb155f9e67713b1e3a8c171b3663256e60f25e009c9aa 454db5299ed3de9ac280eca445f57ab53be98287d63540631085c9a166904842e44d4ff63e69 1c86590ff95319bf1370f7f5f1f8eaa331403588e2bda2bb2d6750e3a769fe878e9723ab0f89 03deab637a6d83fe77f79f89af7dbb7578d511033d01b0f5455b016503582ca56fcc79142ff1 551abab18e9f76a71e148838d7036db5de29a4f6bc4598daffd1 EAP-Message = 0x199ad4d07da7e11c82f03f6895c1b3941139eadf341ce19d3edbfd1bac3719b5f7eb22c5ba 729d58c553ce72adb9af2e92edc34381b42c83c755bafa8442f28d5c574c8a9827938605f397 110186c84e34d13bbd8fc322f58808f7f556518d19f93c42678f12acf01f3f1ab70834b2baa1 cc461bdc970e0f942ea57f1b3913e55cca966066c00c504d12e8d22a81d0daee14c4e08165a8 71d33373b49037fe596fc987f47dfbea4343b2cad19053e50d95160301028d0c0002890040be 4f362c2e1dd2744e7c980ee5d9a708e9075935767ee7fecb9a91b67b0e1611eb5acc1d7d3224 8195513d17734004d37cc721d59ed25d08a48a2164361419e300 EAP-Message = 0x010500400a294a0f089a763d7338d32e2f8c633b1e186a316091c678c314a1afb16ceb2b57 090b5a068d36c54ff061e5ab76b4a969c88a0f7590aefef1b56512aebf5c2e02006572fd3a81 faa03031a8dee67d18ee0625b873e37ede370854c4a7ee122ad3206d97e0ef365299eac3baa8 d8bf6af223058628d5660da500e81a906cc044ef2f3ec59a7373f447e46e5ad84aaa0d373a19 88f0cf6b647bcfb913d6607fc88e0287f201fc3ddc563921460daf1ed27988e407e65c2ea2b2 5173a95d2db5bda931ae2b9e8a5605d82e1331e3a091ee29029aa8218efb3c883da22208b556 120a3e85a96206a29a8951e050439b350e932836667981dbd617 EAP-Message = 0x6d69bed85ccfa622102bcfe18acfe16c40c119ba45dc Message-Authenticator = 0x00000000000000000000000000000000 State = 0xd18c60556f39fcd47f7a825bbd1b5a27 Finished request 5 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.252:1327, id=23, length=130 User-Name = "Kraemer.Armin" NAS-IP-Address = 192.168.1.252 NAS-Identifier = "acess_point_siemens" NAS-Port = 29 Service-Type = Framed-User Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 State = 0xd18c60556f39fcd47f7a825bbd1b5a27 EAP-Message = 0x021700060d00 Message-Authenticator = 0xe4c3119fa2de7a9cc9e9a4ec080c3826 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 6 modcall[authorize]: module "preprocess" returns ok for request 6 modcall[authorize]: module "chap" returns noop for request 6 modcall[authorize]: module "mschap" returns noop for request 6 rlm_realm: No '@' in User-Name = "Kraemer.Armin", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 6 rlm_eap: EAP packet type response id 23 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 6 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 modcall[authorize]: module "files" returns ok for request 6 modcall: group authorize returns updated for request 6 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 6 modcall: group authenticate returns handled for request 6 Sending Access-Challenge of id 23 to 192.168.1.252:1327 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User EAP-Message = 0x011801e40d80000011dae39d887a37fabeb64fa534c3ada7c58edf92a99adfde716787b84f ef17d5007ad72883d0fd743a1926baf7d95d062d8c5e337ede1f27d1101c6ab6b6a5d3991ba8 d127adf3c6464e91b48821d5e43e64a7901c76ce3e9a5da9e18cce9d73b2c7d6d4ddd72cffdc 348c2097f2fbbd393583873fc6a1b22addaa53d7839ded2b0f4a096b0d29280d894975dcdfc0 dd7bcf294fb1d4f11b7c7c1163ff7b72e9bd3b8a00327c13f7058160a7ea61ef7d1158f488f0 2e28882082469c1597b703c6c0627f70decff409e9ca4d113c11e9ee491600e317f08ca7ea67 a91a5f391c2bac855875743599ed715db1c1f638d4f36396ee08 EAP-Message = 0xf4107a7c5872a3ee6beeff50d48659237c3cae753cbf7a237fcbdd0ccf70d3b6dc357e8912 0931f0103a4f30b653acba303e12772b5b52c98354c22ffab4e50916030100a20d00009a0403 0401020093009130818e310b3009060355040613024445310e300c0603550408130542615775 65310d300b060355040713044b65686c31173015060355040a140e46616d6c69655f4b726165 6d6572310b3009060355040b13024954311330110603550403140a4541502d544c535f434131 25302306092a864886f70d010901161643412d52616469757340616b2d7365727665722e6465 0e000000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x54581dba1086732b25cb0cb40ef1191d Finished request 6 Going to the next request --- Walking the entire request list --- Waking up in 5 seconds... rad_recv: Access-Request packet from host 192.168.1.252:1328, id=24, length=141 User-Name = "Kraemer.Armin" NAS-IP-Address = 192.168.1.252 NAS-Identifier = "acess_point_siemens" NAS-Port = 29 Service-Type = Framed-User Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 State = 0x54581dba1086732b25cb0cb40ef1191d EAP-Message = 0x021800110d80000000071503010002022e Message-Authenticator = 0xb63955ca477f1467fdb23903d11cfcda Processing the authorize section of radiusd.conf modcall: entering group authorize for request 7 modcall[authorize]: module "preprocess" returns ok for request 7 modcall[authorize]: module "chap" returns noop for request 7 modcall[authorize]: module "mschap" returns noop for request 7 rlm_realm: No '@' in User-Name = "Kraemer.Armin", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 7 rlm_eap: EAP packet type response id 24 length 17 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 7 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 modcall[authorize]: module "files" returns ok for request 7 modcall: group authorize returns updated for request 7 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 7 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Length Included eaptls_verify returned 11 rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal certificate_unknown TLS Alert read:fatal:certificate unknown TLS_accept:failed in SSLv3 read client certificate A 30107:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1052:SSL alert number 46 30107:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:s3_pkt.c:837: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. In SSL Handshake Phase In SSL Accept mode rlm_eap_tls: BIO_read failed in a system call (-1), TLS session fails. eaptls_process returned 13 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns reject for request 7 modcall: group authenticate returns reject for request 7 auth: Failed to validate the user. Delaying request 7 for 1 seconds Finished request 7 Going to the next request Waking up in 5 seconds... rad_recv: Access-Request packet from host 192.168.1.252:1328, id=24, length=141 Sending Access-Reject of id 24 to 192.168.1.252:1328 EAP-Message = 0x04180004 Message-Authenticator = 0x00000000000000000000000000000000 --- Walking the entire request list --- Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 18 with timestamp 43afecd0 Cleaning up request 2 ID 19 with timestamp 43afecd0 Cleaning up request 3 ID 20 with timestamp 43afecd0 Cleaning up request 4 ID 21 with timestamp 43afecd0 Cleaning up request 5 ID 22 with timestamp 43afecd0 Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 6 ID 23 with timestamp 43afecd1 Cleaning up request 7 ID 24 with timestamp 43afecd1 Nothing to do. Sleeping until we see a request. Message-Authenticator = 0x00000000000000000000000000000000 State = 0x9831ff3ccc7728edaf1d4355ba4d86a3 Finished request 4 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 192.168.1.252:1326, id=22, length=130 User-Name = "Kraemer.Armin" NAS-IP-Address = 192.168.1.252 NAS-Identifier = "acess_point_siemens" NAS-Port = 29 Service-Type = Framed-User Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 State = 0x9831ff3ccc7728edaf1d4355ba4d86a3 EAP-Message = 0x021600060d00 Message-Authenticator = 0xa2a46a1306f46b8c0c6fcce6b647e566 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 5 modcall[authorize]: module "preprocess" returns ok for request 5 modcall[authorize]: module "chap" returns noop for request 5 modcall[authorize]: module "mschap" returns noop for request 5 rlm_realm: No '@' in User-Name = "Kraemer.Armin", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 5 rlm_eap: EAP packet type response id 22 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 5 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 modcall[authorize]: module "files" returns ok for request 5 modcall: group authorize returns updated for request 5 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 5 rlm_eap: Request found, released from the list rlm_eap: EAP/tls rlm_eap: processing type tls rlm_eap_tls: Authenticate rlm_eap_tls: processing TLS rlm_eap_tls: Received EAP-TLS ACK message rlm_eap_tls: ack handshake fragment handler eaptls_verify returned 1 eaptls_process returned 13 modcall[authenticate]: module "eap" returns handled for request 5 modcall: group authenticate returns handled for request 5

2 3

Programmer/Admin Needed
by Kyle Leissner 26 Dec '05

26 Dec '05

I own a small dialup ISP (around 500 users at the current time) but we are expanding rapidly (at least 100 users per month signup) with no advertising since we started 4 months ago. We use Freeside as our main billing system and freeradius as our radius server. Currently we only have one programmer/admin that runs our whole operation. He does good work, but lives in New Zealand, and is very hard to get a hold of. We are looking for a freelance admin/programmer that has experience with Freeside and Freeradius features. We are looking to do the following: -setup accelerated dialup service with Freeside and radius groups -install the address book for our webmail program -upload and update the knowledge base -create an automated user signup/setup program -setup echecking features -make the signup page load faster and make it not so buggy -make/implement the customer login interface for them to cancel their account, update their password, update their information, and setup additional email accounts -setup newsgroups -setup user hosting service We are on a very tight budget as we have just broke even with our operation. Please respond off list if you are interested in doing freelance work on our system. Thank you, Kyle Leissner

2 1

Set user status to active / non-active ?
by Yudi Wijaya 26 Dec '05

26 Dec '05

Hello freeradius-users, how to set user status to active / non-active? I use PPPoE (MikroTik PC RouterOS) already connect with FreeRadius + MySQL, i want to manage user's that haven't pay the bill.. so i will need to set it to non-active, then if the users already pay the bill, i will set it back to active. i mean.. i need to know what i need to set in freeradius database or conf? -- Best regards, Yudi mailto:yudiw@centrin.net.id

1 0

Error in Radius.log
by LeRoy DeVries 26 Dec '05

26 Dec '05

I'm getting the following error in the radius log and don't know how to handle it. I assume it's handled somewhere within the radius.conf file but I can't find anything about it. Sun Dec 25 09:28:07 2005 : Error: rlm_sql: Failed to create the pair: Unknown attribute "Max-All-Session" Sun Dec 25 09:28:07 2005 : Error: rlm_sql (sql): Error getting data from database Sun Dec 25 09:28:07 2005 : Error: rlm_sql (sql): SQL query error; rejecting user I'm a newbie to all this and am stumbling along :) -- LeRoy & Dorothy Location: http://map.datastormusers.com/user2.cfm?user=1591 My Web Page: http://www.rvfulltimer.com

4 6

Failed to link to module 'rlm_eap': ... : No such file or directory
by Roberto S. G. 26 Dec '05

26 Dec '05

Hi, I'm having a similar problem with rlm_eap, and no google or list search have fixed it: I was using freeradius 1.0.2 in a Suse 9.2 machine, and in a system update, it tried to update to 1.0.5, which apparently was succesful, but it wasn't: Mon Dec 26 13:49:53 2005 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Mon Dec 26 13:49:53 2005 : Error: radiusd.conf[9] Failed to link to module 'rlm_eap': rlm_eap.so: cannot open shared object file: No such file or directory I can see that previous package had rlm_eap.so, and that the last one doesn't, and apparently has delete the previous one... What can I do? thanks. >Message: 1 >Date: Fri, 18 Nov 2005 16:16:00 +0100 (ora solare Europa occidentale) >From: "Nicola Iotti" <nicola.iotti(a)guglielmo.biz> >Subject: Failed to link to module 'rlm_eap' >To: <freeradius-users(a)lists.freeradius.org> >Message-ID: <437DF030.00000A.00464@IBM-9C0D807E060> >Content-Type: text/plain; charset="iso-8859-1" > >Hi, > I'm using Freeradius 1.0.5, I ran > >./configure -disable-shared > >but when I start radiusd -s -X .. it stops with this message > >... >radiusd.conf[9] Failed to link to module 'rlm_eap': unknown error > >I see in past mail that other people had this problem but I can't find >solution.. > >Ing. Nicola Iotti >Network Manager >mailto: nicola.iotti(a)guglielmo.biz > >Guglielmo S.r.l. >Sede legale: Via Martiri di Minozzo, 12 >Sede operativa: Via Sante Vincenzi , 2 / D >42100 Reggio Emilia >ITALIA >Tel.: +39-0522 - 40 63 67 >Fax: +39-0522 - 54 08 16 >Cell: +39-320 61 90 072 >internet website: http://www.guglielmo.biz >mailto:info@guglielmo.biz >

2 1

Re: Freeradius-Users Digest, Vol 8, Issue 108
by Sean 26 Dec '05

26 Dec '05

Hi, Sorry that my PHP script didn't work straight out of the box. Have you tried the CGI script? Failing that you will have to tell your users to enable popups for your site. Regards, Sean

1 0

state of art of freeradius
by Rafael Roldán 26 Dec '05

26 Dec '05

Hy all, I would like to know your opinion about the following issues: Which is the most common use of the freeradius server in your particular cases? Which version are you using? is it stable? What problems have you found using freeradius (during installation, configuration, use...)? My objective is writing a document trying to reflect the state of art of the freeradius server. Thanks a lot for you help Best regards from Madrid Rafa

2 1

radiusd -X and Raddb Configure
by Kai Geek 26 Dec '05

26 Dec '05

Hello, i am installing freeradius server and operating system slackware 10.2 #cd /etc/raddb #list acct_users clients.conf hints naslist preproxy_users snmp.conf x99passwd.sample attrs dictionary huntgroups naspasswd proxy.conf sql.conf certs/ eap.conf ldap.attrmap oraclesql.conf radiusd.conf users clients experimental.conf mssql.conf postgresql.conf realms x99.conf #radiusd -X Module: Instantiated unix (unix) radiusd.conf[1682] Unknown Auth-Type "System" in authenticate section. what problem? ------------------ ------------------ | Radius Server | | Dlink Switch | | IP : 10.0.0.200|--------------- | IP: 10.0.0.250 | ------------------ ------------------ | ssh accepting radius | ^ |__________________________| | ______________| | (ssh wish request) | | ------------------ | My Computer | | IP: 10.0.0.201 | ------------------ How do I topology ensure this? what Raddb server must I do ? Thank you +-+-+- BEGIN PGP SIGNATURE -+-+-+ Version: GnuPG v1.4.2 (GNU/Linux) ___ / __) Kai "Ozgur" Geek \__ \ PGP ID: B1B63B6E (___/lackware Network Engineer +-+-+-+ END PGP SIGNATURE +-+-+-+ -- _______________________________________________ Check out the latest SMS services @ http://www.linuxmail.org This allows you to send and receive SMS through your mailbox. Powered by Outblaze

2 1