- Freeradius-Users - lists.freeradius.org

Multiple instances
by Mike Chamberlain 25 Oct '05

25 Oct '05

Hello there. This is probably a stupid question, but how do I run multiple instances of radiusd on the same machine, listening on different ports? I have two configuration directories: /usr/local/etc/raddb /usr/local/etc/raddb2 which specify ports 1812 and 1813 respectively, so I thought I'd be able to issue the following commands: radiusd -d /usr/local/etc/raddb radiusd -d /usr/local/etc/raddb2 This doesn't seem to work however, as the second command seems to have no effect, ie. I see the first radiusd process running but never the second. Can anyone help please? Thanks, Mike

3 3

Issue an Access Challenge to retry password
by Stefan A. 25 Oct '05

25 Oct '05

I thought something like the following should work: At the end of the user file: DEFAULT Auth-Type := Challenge, State != "first retry" Reply-Message = "Please retry your Password:", State = "first retry" DEFAULT Auth-Type := Reject Reply-Message = "Sorry, no access." Unfortunately it did not :-( Rg. Stefan > -----Original Message----- > From: Stefan A. [mailto:lists@saitc.de] > Sent: Tuesday, October 25, 2005 10:59 AM > To: 'FreeRadius users mailing list' > Subject: Issue an Access Challenge to retry password > > > > Gurus, > > I want to give the user a second chance to type his password > correctly by using a radius challenge. > I'm not sure how to do this and did not find anything about > this in the documentation nor in my stored email of this list. > > What should happen: > > The user tries to authenticate using his User-Name and Password. > The user makes a typo in the password. > The RADIUS Server will send an RADIUS Challenge, having a > Reply-Message 'Good Morning. Please retry your Password!' > The user retries... This time using the right password > The User will be granted access. > > How would I configure this in the user file? > > Any help or advice to a related part of the documentation > will be appreciated. > > Thank you. > Stefan >

1 0

Limiting Authentication Request on wrong password
by Fabio 25 Oct '05

25 Oct '05

Hi, is there an option to limit the number of Authentication Request of a user, if she uses a wrong password for x times? Thanks, Fabio

2 1

(no subject)
by Fabio 25 Oct '05

25 Oct '05

Hi, is there an option to limit the number of Authentication Request of a user, if she uses a wrong password for x times? Thanks, Fabio

1 0

AW: SUSPENSION OF ACCOUNT
by Marc.Werner＠t-systems.com 25 Oct '05

25 Oct '05

Hi, Perhaps you can write a shellscript which edits /etc/raddb/users ...it's just an idea. Cheers Marc -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Im Auftrag von maruna Gesendet: Dienstag, 25. Oktober 2005 10:48 An: 'FreeRadius users mailing list' Betreff: SUSPENSION OF ACCOUNT Thank you all, I use FreeRadius v 1.0.5 with postgresql 7.3.4 on redhat Linux ES3 and its been working well. However, I want to create accounts where these accounts will be suspended after let say a month and this suspension continue until the account is renewed manually. Can someone give me idea of how this could be achieved? Thank you, goksie

1 0

Fw: Billing and provisioning
by Madhvi Gokool 25 Oct '05

25 Oct '05

Hi As an addendum to below:- Say the user has 500s of connection time left and he replenishes his account (36000 s)- is there another way apart from manually , that we can alter the Max-Monthly-Session ? - it should become 36500 s. We are assuming that the counter was not reset. M ----- Original Message ----- From: "Madhvi Gokool" <madhvin(a)yahoo.com> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Sent: Tuesday, October 25, 2005 9:30 AM Subject: Billing and provisioning > Hello > Here is a the scenario we want to implement :- > > 1. User pays for 10hrs of internet access. We set the Max-Monthly-Serssion > to 36000. > We want to verify the number of seconds used and left for each user on a > daily basis. The results should be mailed to the ISP admin and a mail > sent to each user concerning his usage. When his balance is say 500s, he > is requested to recharge his account. > We are using Freeradius as AAA server. We are not using any databases. > Can anybody recommend a script or open source package that can do the > above? We need to urgently implement the above. > > Regards > M > > - List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html

1 0

counter with Session Octet Limit
by Seferovic Edvin 25 Oct '05

25 Oct '05

Hello, I am using freeRadius 1.0.2, and I would like to limit weekly bandwidth for my VPN ( pptp ) users. So Ive changed the example counter part in my radiusd.conf counter weekly_traffic { filename = ${raddbdir}/db.weekly key = User-Name count-attribute = Acct-Input-Octets reset = weekly counter-name = Weekly-Traffic check-name = Max-Weekly-Traffic allowed-servicetype = Framed-User } The counter works for it self - It checks the Max-Weekly-Traffic attribute in my ldap tree for a specific user, calculates the rest, but then it tries to add Session-Timeout attribute to Access-Accept packet. This is not working / attribute is not being added, and besides - it is the wrong attribute. Is it possible for the counter module to add the value, which is usualy added as Session-Timeout, as Session-Octets-Limit? Regards, Edvin Seferovic

3 2

recommended restart-wrapper for freeradius
by Tariq Rashid 25 Oct '05

25 Oct '05

hi - we're having the freeradius 1.0.2 daemon dying occasionally for mysterious reasons - we're still investuigating the cause. however - when it dies the radiusd.pid file is not removed. this causes problems for most restart-wrappers ... running in the foreground in an infinite loop is also not ideal as this means the daemon doesn't run in threaded mode. can anyone recommend a good way to monitor/restart the daemon. tariq

3 2

Re: Re: how to config b2bua and freeradius together?
by zhangshuai 25 Oct '05

25 Oct '05

Dear Alan DeKok, Thanks for your reply. Could you please tell me how to run radius client with b2bua? Here is my b2bua config file: <B2BUA_Configuration> <SIP> <Local> <Port>5065</Port> <Transport>UDP</Transport> </Local> <Proxy_Server> <Address>218.97.252.34</Address> <Port>5060</Port> </Proxy_Server> <Registration> <Register>no</Register> <Address>218.97.252.41</Address> <Port>5060</Port> <Expires>600</Expires> </Registration> </SIP> <RADIUS> <Local> <Authentication_Port>1812</Authentication_Port> <Accounting_Port>1813</Accounting_Port> </Local> <Billing_Server> <Address>218.97.252.41</Address> <Authentication_Port>1812</Authentication_Port> <Accounting_Port>1813</Accounting_Port> <Password>testing123</Password> </Billing_Server> </RADIUS> <PrePaid> <Billing> <Option>mandatory</Option> <Refresh_Time>60</Refresh_Time> <Extract_User_Id_From>Proxy-Authorization</Extract_User_Id_From> <User_Id_Decode_Scheme>Basic</User_Id_Decode_Scheme> </Billing> <Use_SIP_INFO>no</Use_SIP_INFO> <Use_HTTP>no</Use_HTTP> </PrePaid> <Redundancy /> </B2BUA_Configuration> 218.97.252.34 is my ser proxy and 218.97.252.41 is radius server. I run b2bua like this: #cd \usr\local\vocal\bin #./b2bua -d -v LOG_DEBUG_STACK -c b2bua-cfg.xml Then b2bua could send the request to radius server. >"zhangshuai" <zhangshuai(a)goldentek.biz> wrote: >> Now I found that b2bua can talk to radius server directly, without >> using radius client. > > Uh, no. The only way to talk to a RADIUS server is via RADIUS. > >> rad_check_password: Found Auth-Type System >> auth: type "System" >> Processing the authenticate section of radiusd.conf >> modcall: entering group authenticate for request 0 >> modcall[authenticate]: module "unix" returns notfound for request 0 > > So... the user isn't in /etc/passwd. > >> And this is part of my radcheck table on radius server: >> >> +----+-----------------------------+---------------+----+-------+ >> | id | UserName | Attribute | op | Value | >> +----+-----------------------------+---------------+----+-------+ >> | 1 | 41001(a)localhost.localdomain | User-Password | := | 1001 | >> | 2 | 41004(a)localhost.localdomain | User-Password | := | 1004 | >> +----+-----------------------------+---------------+----+-------+ >> >> Could anyone tell me how to config b2bua and radius to make them work fine? > > Don't set Auth-Type. > > Alan DeKok. >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > = = = = = = = = = = = = = = = = = = = =

2 1

Billing and provisioning
by Madhvi Gokool 25 Oct '05

25 Oct '05

Hello Here is a the scenario we want to implement :- 1. User pays for 10hrs of internet access. We set the Max-Monthly-Serssion to 36000. We want to verify the number of seconds used and left for each user on a daily basis. The results should be mailed to the ISP admin and a mail sent to each user concerning his usage. When his balance is say 500s, he is requested to recharge his account. We are using Freeradius as AAA server. We are not using any databases. Can anybody recommend a script or open source package that can do the above? We need to urgently implement the above. Regards M

1 0