- Freeradius-Users - lists.freeradius.org

Any Good Documentation for newbies
by Manuj 23 Dec '05

23 Dec '05

Hello As I am new to this free radius, could you please suggest me a good documentation(free) available on the net. Version I am using is Free RADIUS 1.0.5. Regards Manuj

2 1

Radius SIP billing
by Lenir 23 Dec '05

23 Dec '05

Hey guys, I'm running FR1.0.5 with unixODBC (Sybase) backend and I'm trying to bill calls generated from Sip Express Router (SER). The problem that I have is the following scenario: When UserA calls UserB: SER generates a star-record where the Calling-Station-Id is UserA and the Called-Station-Id is UserB, this is the desired and always the correct behavior. When UserA hangs up on UserB: SER generates a stop-record where the Calling-Station-Id is UserA and the Called-Station-Id is UserB, this is the desired and correct behavior. But if UserB hangs up on UserA: SER generates a stop-record where the Calling-Station-Id is UserB and the Called-Station-Id is UserA, this is the undesired and incorrect behavior. To me the Calling-Station-Id and the Called-Station-Id should be the same for both start and stop records, am I right by thinking that? According to the developers of SER/OpenSER, this is the correct behavior, whoever sends the hangup signal (BYE or CANCEL) is considered the Calling-Station-Id, and they are unwilling to modify or create a patch to "fix" this. So for my purposes, i need the Calling-Station-Id and the Called-Station-Id to be the same on both the star and stop records, since the start record is always correct, what do I need to do to have FR "fix" the stop record when it receives it to show the same Calling-Station-Id and the Called-Station-Id as the Start Record? Thanks in advance, Lenir

2 1

rlm_sql_mysql.so where do I locate this file and its associated files for Redhat ES4 to run Radius and MySQL
by Frank Reiss 22 Dec '05

22 Dec '05

Hi, I am trying to build a radius server using MySQL and am getting a message about missing rlm_sql_mysql.so. I could use some help in locating the required modules. Thanks Frank Reiss

3 2

Bind radius authentication with mac address? so radius will check username, password and mac address from radius database
by Yudi Wijaya 22 Dec '05

22 Dec '05

Hello FreeRadius, as subject.. I don't find any clue of this.. even with google :( I already set up this in sql.conf authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM ${authcheck_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 and (mac='%{Calling-Station-Id}' or isnull(mac) or mac='') ORDER BY id" postauth_query = "UPDATE ${authcheck_table} set mac='%{Calling-Station-Id}' WHERE Username = '%{SQL-User-Name}' and (mac='' or isnull(mac))" then add this to radreply table in radius database: UserName Attribute op value hendy Calling-Station-Id = 00:0D:87:C7:13:81 i use MikroTik and PPPoE then i try reconnect from different mac address with username: hendy but still connected :( -- Best regards, Yudi mailto:yudiw@centrin.net.id

2 1

Auth/Autz Windows Guest
by Stefan Adams 22 Dec '05

22 Dec '05

Hypothetically: I notice that when you choose "authenticate as guest when computer and user information are not available" in the Windows XP wZc utility, that it passes a User-Name of "". Let's say I wanted to just automatically authorize and authenticate the user "". How could this be done? To try and answer this hypothetical situation, I tried it myself in my test lab but my eap/ldap settings kept jumping in and denying the request. Thanks to all!! Stefan

1 0

Bind radius authentication with mac address?
by Yudi Wijaya 22 Dec '05

22 Dec '05

Hello freeradius-users, so radius will check username, password and mac address from radius database as subject.. I can't find any idea of this.. :( I already set up this in sql.conf authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM ${authcheck_table} WHERE STRCMP(Username, '%{SQL-User-Name}') = 0 and (mac='%{Calling-Station-Id}' or isnull(mac) or mac='') ORDER BY id" postauth_query = "UPDATE ${authcheck_table} set mac='%{Calling-Station-Id}' WHERE Username = '%{SQL-User-Name}' and (mac='' or isnull(mac))" then add this to radreply table in radius database: UserName Attribute op value hendy Calling-Station-Id = 00:0D:87:C7:13:81 i use MikroTik and PPPoE then i try reconnect from different mac address with username: hendy but still connected :( -- Best regards, Yudi

1 0

Re: Freeradius Configure Help me
by Kai Geek 22 Dec '05

22 Dec '05

Hello, Errors reading dictionary: dict_init: /usr/share/freeradius/dictionary[14]: Couldn't open dictionary "/usr/share/freeradius/d ictionary": Too many open files Errors reading radiusd.conf ----- Original Message ----- From: "Philippe Sultan" <philippe.sultan(a)gmail.com> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Subject: Re: Freeradius Configure Help me Date: Thu, 22 Dec 2005 11:58:45 +0100 > > On 12/22/05, Kai Geek <kaigeek(a)linuxmail.org> wrote: > > Hello, > > i am install Slackware 10.2 on freeradius server. > > > In this order? > > > root@slackware:/etc/raddb# radiusd > > Thu Dec 22 12:07:48 2005 : Info: Starting - reading configuration files ... > > root@slackware:/etc/raddb# > > > You successfully launched the radiusd daemon. Try radiusd -X to keep > output to your terminal. > > Bye, > > Philippe > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html +-+-+- BEGIN PGP SIGNATURE -+-+-+ Version: GnuPG v1.4.2 (GNU/Linux) ___ / __) Kai "Ozgur" Geek \__ \ PGP ID: B1B63B6E (___/lackware Network Engineer +-+-+-+ END PGP SIGNATURE +-+-+-+ -- _______________________________________________ Check out the latest SMS services @ http://www.linuxmail.org This allows you to send and receive SMS through your mailbox. Powered by Outblaze

3 2

Windows WPA
by Stefan Adams 22 Dec '05

22 Dec '05

Does anyone know how it's possible to log into a windows domain (no local account) from a Windows XP computer using WPA when the user has never logged in before (making cached credentials impossible)? I work at a high school. We have several mobile carts with laptop computers that do NOT have local accounts for each student. Therefore, each student is required to logon to the windows domain using wireless. This works fine using WEP. However, using WPA, with the automatically supply windows username/password/domain checkbox selected, a user that has never logged into that machine before is not able to log on. The Windows computer complains that the domain controller is not available. This, of course, is true because there are no 'up' network interfaces. But wouldn't it be logical for Windows to first supply the entered credentials to the access point for authorization to the WPA WLAN and then supply those same credentials to the domain controller? Is that the way it works, is there some other way, or are people that have never logged on to these laptops before condemned to never logon at all given our new WPA infrastructure? Stefan

2 1

Freeradius Configure Help me
by Kai Geek 22 Dec '05

22 Dec '05

Hello, i am install Slackware 10.2 on freeradius server. root@slackware:/etc/raddb# radiusd Thu Dec 22 12:07:48 2005 : Info: Starting - reading configuration files ... root@slackware:/etc/raddb# what is this mistake ? >From where can i find Radius Install (Configuration) Guide ? Thank you... +-+-+- BEGIN PGP SIGNATURE -+-+-+ Version: GnuPG v1.4.2 (GNU/Linux) ___ / __) Kai "Ozgur" Geek \__ \ PGP ID: B1B63B6E (___/lackware Network Engineer +-+-+-+ END PGP SIGNATURE +-+-+-+ -- _______________________________________________ Check out the latest SMS services @ http://www.linuxmail.org This allows you to send and receive SMS through your mailbox. Powered by Outblaze

3 2

Problem writing config attributes from script
by Ignacio DelTroo 22 Dec '05

22 Dec '05

I'm trying to write an external script for authorization (rlm_exec) I want this script to pass some attributes (beyond clear text Password) in the config attributes, so that another post-auth external script can re-use this information without re-querying the database. It seems that my authorization script cannot write anything beyond Password. IT works fine when it justs output PAssword="XXXX". For instance, if it writes Post-Auth-Type= create_prepaid_account and Password = "XXX" to config attributes, the chap authentication modules does not get anything (log says clear text password not available) Relevant parts of radiusd.conf ========================================================= modules { ........ exec dump { wait = yes program = "/etc/raddb/scripts/dump %{User-Name}" input_pairs = config output_pairs = reply packet_type = Access-Request } exec authorize_prepaid_account { wait = yes program = "/etc/raddb/scripts/authorize %{User-Name}" output_pairs = config packet_type = Access-Request } exec create_prepaid_account { wait = yes program = "/etc/raddb/scripts/new %{User-Name}" input_pairs = config output_pairs = reply packet_type = Access-Request } } authorize { preprocess auth_log chap mschap authorize_prepaid_account files sql dump } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } unix } post-auth { reply_log create_prepaid_account } ========================================================= What am I doing wrong ? Thanks for your help. Yannick Deltroo

3 7