- Freeradius-Users - lists.freeradius.org

how to config b2bua and freeradius together?
by zhangshuai 25 Oct '05

25 Oct '05

Dear all, I intend to make use of b2bua-1.5.0 to do prepaid together with freeradius-1.0.4 and ser-0.8.14. I use this scenario to set up a call: ----- |UA2| ----- ^ | |6 | ----- 5 ------- 4 --------------- ----- 1 | |<-----------| |<--------| | |UA1|---->|SER| 2 |B2BUA| 3 |radius server| ----- | |----------->| |-------->| | ----- ------- --------------- Now I found that b2bua can talk to radius server directly, without using radius client. However, I received "access reject message" from radius server when I tried to initiate a call. Here is the debug message on radius server: rad_recv: Access-Request packet from host 218.97.252.38:1024, id=2, length=71 User-Name = "41001" User-Password = "." NAS-IP-Address = 218.97.252.38 NAS-Port = 1000 Called-Station-Id = "41004" Calling-Station-Id = "41001" Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 modcall[authorize]: module "digest" returns noop for request 0 rlm_realm: No '@' in User-Name = "41001", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 0 radius_xlat: '41001' rlm_sql (sql): sql_set_user escaped user --> '41001' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Usernam e = '41001' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): User 41001 not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Att ribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '41001' AND usergroup.GroupName = radgroupcheck.GroupName O RDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Att ribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '41001' AND usergroup.GroupName = radgroupreply.GroupName O RDER BY radgroupreply.id' rlm_sql (sql): User 41001 not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns ok for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 modcall[authenticate]: module "unix" returns notfound for request 0 modcall: group authenticate returns notfound for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 And this is part of my radcheck table on radius server: +----+-----------------------------+---------------+----+-------+ | id | UserName | Attribute | op | Value | +----+-----------------------------+---------------+----+-------+ | 1 | 41001(a)localhost.localdomain | User-Password | := | 1001 | | 2 | 41004(a)localhost.localdomain | User-Password | := | 1004 | +----+-----------------------------+---------------+----+-------+ Could anyone tell me how to config b2bua and radius to make them work fine? Thanks in advance. Shuai http://www.goldentek.biz

2 1

RHEL v3 and rlm_eap linking problems
by Shane D 25 Oct '05

25 Oct '05

Freeradius 1.0.5 is being installed on a RHEL v3 AMD86_64 box. Freeradius is configured to install and operate within my directory space. Compilation went fine (under my username). But when I tried installing from my account, errors were seen from libtool for some of the modules (rlm_eap) and the server couldn't find some module files. I destroyed the installation directory tree and changed to root then reinstalled. Everything installed (and worked) fine. After comparing the two install logs, I found that when installed as root, the installer used the libtool from the freeradius package. But when installed from my account, the installer used the system libtool (and many issues occurred due to this). More odd is that the libtool command contained a full path specification - so it wasn't due to account PATH differences. Is this a known issue or is it expected for some reason? Shane

2 1

QQ group
by xuxu 25 Oct '05

25 Oct '05

freeradius-users 我创建了一个关于FreeRadius的 QQ 群，有兴趣的华人可以加入，我们一起来研究探讨，互相帮助提高群号码:17076311 不需要验证，任何人都可以加入! 　　　　　　　　　　 2005-10-25

1 0

snapshop build woes on freebsd 5.4-release
by Roy 25 Oct '05

25 Oct '05

hi list, trying to build latest snapshot on freebsd yeilds an error. see snip below. <snip> Making all in lib... gmake[3]: Entering directory `/home/roy/freeradius- snapshot-20051024/src/lib' /home/roy/freeradius-snapshot-20051024/libtool --mode=compile gcc -g - O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall - D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align - Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing- declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS -c dict.c gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 - Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing- declarations -Wnested-externs -W -Wredundant-decls -Wundef -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS -c dict.c -fPIC -DPIC - o .libs/dict.o In file included from ../include/libradius.h:37, from dict.c:42: /usr/include/sys/socket.h:243: error: redefinition of `struct sockaddr_storage' gmake[3]: *** [dict.lo] Error 1 gmake[3]: Leaving directory `/home/roy/freeradius- snapshot-20051024/src/lib' gmake[2]: *** [common] Error 2 gmake[2]: Leaving directory `/home/roy/freeradius-snapshot-20051024/src' gmake[1]: *** [all] Error 2 gmake[1]: Leaving directory `/home/roy/freeradius-snapshot-20051024/src' gmake: *** [common] Error 2 *** Error code 2 </snip> my system: FreeBSD 5.4-RELEASE i386 GENERIC autoconf-2.59_2 gmake-3.80_2 anyone seeing the same? or had a fix? br, roy

1 0

post-auth and perl module
by Emil Wilmanski 24 Oct '05

24 Oct '05

Hello, I'm using freeradius 1.0.2 where I have implemented some methods using perl module. I have implemented: post_auth, start_accounting, stop_accounting. The post_auth method I use to set some additional parameters for user fe.: ChilliSpot-Max-Total-Octets, Session-Timeout, WISPr-Bandwidth-Max-Up, WISPr-Bandwidth-Max-Down. I want to upgrade freeradius to 1.0.5 but when I start radius server it say that prel module is not allowed in post-auth. So how to set some additional prameters to response to client? Why you remove perl function from post-auth? EW

1 0

Vendor Specific Attributes
by Daniel Corbe 24 Oct '05

24 Oct '05

Hello, How do you get FreeRADIUS to stop ingoring VSAs? I have a box that's sending them and FreeRADIUS is simply ignoring them in rad_recv rad_recv: Accounting-Request packet from host 10.10.0.90:1068, id=0, length=58 NAS-Identifier = "acme-sd" Acct-Status-Type = Accounting-On NAS-IP-Address = 10.10.0.90 NAS-Port = 0 Acct-Session-Id = "sd1#28249" I know there are more attributes being sent than that because I can see them in the RADIUS packet. Any help/advice is appriciated. Thanks. -Daniel

2 1

Realm users authentication failure
by Luca Corti 24 Oct '05

24 Oct '05

Hello, I've setup a simple freeradius server to authenticate two local realms, one stripped (no @realm suffix, let's call it myrealm) and the other with @suffix (let's call it otherrealm.com) I use the rlm_sql module to auth against a MySQL backend. I'm using radtest to do inital server testing and everything seems to work so far for users in myrealm, but I get auth-reject for any user(a)otherrealm.com. In the logs of the radius server I see just: Tue Oct 18 23:47:15 2005 : Info: rlm_sql (sql): No matching entry in the database for request from user [user(a)otherrealm.com] This is the relevant configuration. --- proxy.conf --- realm myrelam { type = radius authhost = LOCAL accthost = LOCAL } realm otherrealm.com { type = radius authhost = LOCAL accthost = LOCAL nostrip } --- radiusd.conf --- ... realm suffix { format = suffix delimiter = "@" ignore_default = yes ignore_null = yes } authorize { chap mschap suffix sql } preacct { acct_unique suffix } accounting { sql } session { sql } ... Any idea? thanks in advance -- Luca Corti PGP Key ID 1F38C091

3 7

freeradius compile for solaris express x86
by Tariq Rashid 24 Oct '05

24 Oct '05

hi - i'm having trouble compiling freeradius-1.0.5 for solaris express x86 (nv b23). i can make progress with the configure options ... --with-openssl-includes=/usr/sfw/include/openssl --with-openssl-libraries=/usr/sfw/lib then i have to disable the sql module (remove from src/modules/stable, reconfigure). then i have to manually add "-lmd5" to the LIBS in Make.inc. now i have a .. radclient.c: In function `main': radclient.c:788: error: `RADIUS_DICTIONARY' undeclared (first use in this function) radclient.c:788: error: (Each undeclared identifier is reported only once radclient.c:788: error: for each function it appears in.) which seems like a lot of work ... am i going about this the wrong way - is there an easier way? uname -a gives: SunOS solaris10 5.11 snv_23 i86pc i386 i86pc which may help someone. as far as sql is concerned the libraries are there ... /usr/sfw/lib/libmysqlclient.so /usr/sfw/lib/libmysqlclient.so.12 /usr/sfw/lib/libmysqlclient.so.12.0.0 /usr/sfw/lib/libmysqlclient_r.so /usr/sfw/lib/libmysqlclient_r.so.12 /usr/sfw/lib/libmysqlclient_r.so.12.0.0 tariq

2 1

FreeRadius around the world
by Juan Daniel Moreno 24 Oct '05

24 Oct '05

Hi everyone!! I have a question really important for my personal researches. Do you know how many or which entreprises work today with freeRadius? Are there any banks or security entreprises? Thank you for your answers. Juan Daniel MORENO

2 1

Access-Reject took a long time to return
by hannibal 24 Oct '05

24 Oct '05

hi. i use jradius as authorize module. when jradius sent Access-Reject to freeradius, i got the following logs: rad_recv: Access-Request packet from host 127.0.0.1:32876, id=1, length=62 --- Walking the entire request list --- Waking up in 31 seconds... ////////////////////////// why in 31 seconds, that will take a long time to send Access-Reject Thread 8 got semaphore Thread 8 handling request 67, (7 handled so far) User-Name = "test" User-Password = "test" Message-Authenticator = 0x5cc77d6981e1386f5260a10691c9ce74 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 67 modcall[authorize]: module "preprocess" returns ok for request 67 rlm_jradius: packing attribute User-Name (type: 1; len: 4) rlm_jradius: packing attribute User-Password (type: 2; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) rlm_jradius: packing packet with code: 1 (attr length: 92) rlm_jradius: packing packet with code: 0 (attr length: 0) rlm_jradius: sending 117 bytes to jradius server rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=92 rlm_jradius: reading attribute: type=1; len=4 rlm_jradius: reading attribute: type=2; len=4 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=1052; len=4 rlm_jradius: reading packet: code=0 len=0 rlm_jradius: reading request: config_item: len=0 modcall[authorize]: module "jradius" returns updated for request 67 modcall: group authorize returns updated for request 67 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Processing the post-auth section of radiusd.conf modcall: entering group Post-Auth-Type for request 67 rlm_jradius: packing attribute User-Name (type: 1; len: 4) rlm_jradius: packing attribute User-Password (type: 2; len: 4) rlm_jradius: packing attribute Message-Authenticator (type: 80; len: 16) rlm_jradius: packing attribute NAS-IP-Address (type: 4; len: 4) rlm_jradius: packing attribute Client-IP-Address (type: 1052; len: 4) rlm_jradius: packing packet with code: 1 (attr length: 92) rlm_jradius: packing packet with code: 3 (attr length: 0) rlm_jradius: packing attribute Post-Auth-Type (type: 1014; len: 4) rlm_jradius: sending 133 bytes to jradius server rlm_jradius: return code 8; receiving 2 packets rlm_jradius: reading packet: code=1 len=92 rlm_jradius: reading attribute: type=1; len=4 rlm_jradius: reading attribute: type=2; len=4 rlm_jradius: reading attribute: type=80; len=16 rlm_jradius: reading attribute: type=4; len=4 rlm_jradius: reading attribute: type=1052; len=4 rlm_jradius: reading packet: code=3 len=0 rlm_jradius: reading request: config_item: len=16 rlm_jradius: reading attribute: type=1014; len=4 modcall[post-auth]: module "jradius" returns updated for request 67 modcall: group Post-Auth-Type returns updated for request 67 Delaying request 67 for 1 seconds Finished request 67 Going to the next request Thread 8 waiting to be assigned a request --- Walking the entire request list --- Sending Access-Reject of id 1 to 127.0.0.1:32876 Cleaning up request 67 ID 1 with timestamp 435b0861 Nothing to do. Sleeping until we see a request. is there something to configure to reduce the waking up time span?? thank you.

2 1