- Freeradius-Users - lists.freeradius.org

Freeradius + oracle
by chabral - 29 Sep '05

29 Sep '05

Hi, Is it possible to install and run freeradius on an Oracle App Server?. The database server is another server located at another local network. Is it possible to achieve this configuration? Which are the requirements of freeradius for compiling with oracle support? Can I download the code and compile it in the app server? I'll really appreciate your advice. Best regards, -- chabral

1 0

How can i tell which version of freeradius i'm running?
by Linda Pagillo 29 Sep '05

29 Sep '05

Linda Pagillo Director of Technical Services N2 The Net, LLC lpagillo(a)n2thenet.com 931-372-9179

3 2

Re: SSL3_GET_CLIENT_KEY_EXCHANGE
by Juan Daniel Moreno 29 Sep '05

29 Sep '05

> > The protocol specification describes this. The implementation in > src/modules/rlm_eap/ contains diagrams of the packets it expects to > receive. > > Alan DeKok. > > Thank you Alan, but now I have a new problem. I have been reading the src/modules/rlm_eap/ to understand my problem but I don't find the issue. In TLS establishment, the public key in the server.cert is 128 bytes length. I generate a random string of 46 bytes and the protocol version (TLS 1.0 (0x03, 0x01)) and I use the SSL function RSA_public_encrypt() with server's public key to encrypt the PreMasterSecret. As a result I get a 128 length string. As I send this data to the server, I get a "tls rsa encrypted length is wrong: s3_srvr.c: 1450:" Can anybody please tell me where can be my problem? Here is my code for exemple. void Client_Key_Exchange (SSLData *ClientSSLData, unsigned short *length, char *HandshakeMessages, unsigned short *length_Hndshk, char *buff) { char *PreMasterSecret = (char*) _MEMORY_Allocate (58 , true); char *EncryptedPreMasterSecret = (char*) _MEMORY_Allocate (128, true); char *temp = (char*) _MEMORY_Allocate (58 , true); unsigned char *tmpCert = _MEMORY_Allocate (ClientSSLData->certificate_len + 128, true); _RANDOM_MakeCharString (temp, 46); PreMasterSecret [0] = 0x03; PreMasterSecret [1] = 0x01; for (register int i = 0; i<46; i++) { PreMasterSecret[i+2] = temp [i]; ClientSSLData->PreMasterSecret[i] = PreMasterSecret[i]; } for (i = 0; i < ClientSSLData->certificate_len; i++) tmpCert[i] =(unsigned char) ClientSSLData->certificate[i]; //----- OpenSSL Functions ----- RSA *server_public_key; X509 *cert = X509_new (); EVP_PKEY *evp = EVP_PKEY_new (); X509 *err = d2i_X509 (&cert, (unsigned char**) &tmpCert, (ClientSSLData->certificate_len) ); //----- d2i_509 Function retrives tmpCert pointer advanced the number of bytes read ----- tmpCert = tmpCert - (ClientSSLData->certificate_len); //----- We get the public key from the Server certificate ----- evp = X509_get_pubkey(cert); server_public_key = (RSA *) evp->pkey.ptr; int rsasize = RSA_size(server_public_key); //----- We get the PreMasterSecret encrypted ----- int Encrypted_len = RSA_public_encrypt(48, (BYTE*) PreMasterSecret, (unsigned char*)EncryptedPreMasterSecret, server_public_key, RSA_PKCS1_PADDING); ClientSSLData->bufferSSL[(*length)++] = 0x16; // Handshake Message ClientSSLData->bufferSSL[(*length)++] = 0x03; // Version ClientSSLData->bufferSSL[(*length)++] = 0x01; // Version ClientSSLData->bufferSSL[(*length)++] = (Encrypted_len + 6) / 256; // Length ClientSSLData->bufferSSL[(*length)++] = (Encrypted_len + 6) % 256; // Length ClientSSLData->bufferSSL[(*length)++] = 0x10; // Client key exchange ClientSSLData->bufferSSL[(*length)++] = 0x00; // Length ClientSSLData->bufferSSL[(*length)++] = (Encrypted_len ) / 256; // Length ClientSSLData->bufferSSL[(*length)++] = (Encrypted_len ) % 256; // Length //----- Public key exchange ----- for (i = 0; i < Encrypted_len; i++) { buff[i] = EncryptedPreMasterSecret[i]; HandshakeMessages[(*length_Hndshk)++] = EncryptedPreMasterSecret[i]; } free (PreMasterSecret); free (EncryptedPreMasterSecret); free (temp); free (tmpCert); } Thank you for your help. Juan Daniel MORENO

2 1

My server is up and running. Thanks to all who helped
by Linda Pagillo 29 Sep '05

29 Sep '05

Hi Guys: I finally got Freeradius upgraded to the most current version. Thanks to all who helped. Linda Pagillo Director of Technical Services N2 The Net, LLC lpagillo(a)n2thenet.com 931-372-9179

1 0

Postgresql+freeradius configuration
by msah＠otitelecom.bj 29 Sep '05

29 Sep '05

Good morning!!!!! I have successfully configured freeradius server with using postgresql database to storage users which i want to authenticate. when i put it in debug mode to test he works well. But when I run it as deamon the server radius don't see the postgresql server. In the radius's log file i look this: Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked Info: rlm_sql (sql): Attempting to connect to radiusadmin@localhost:/radiusdb Error: rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radiusadmin@localhost:radiusdb Error: rlm_sql_postgresql: Postgresql error 'could not connect to server: Permission denied ?Is the server running on host "localhost" and accepting ?TCP/IP connections on port 5432? ' Error: rlm_sql (sql): Failed to connect DB handle #0 Info: Ready to process requests. I use fedora core4 as Operating System and freeradius 1.0.4-1, postgresql 8.0.3-1. In the postgresql's file pg_hba.conf i make this configuration: #TYPE DATABASE USER CIDR-ADDRESS METHOD #IPv4 local connections: host radiusdb radiusadmin 127.0.0.1/32 trust I don't why this dysfonctionnement Please help me and thanks for your assistance.

1 0

(no subject)
by msah＠otitelecom.bj 29 Sep '05

29 Sep '05

Good morning!!!!! I have successfully configured freeradius server with using postgresql database to storage users which i want to authenticate. when i put it in debug mode to test he works well. But when I run it as deamon the server radius don't see the postgresql server. In the radius's log file i look this: Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked Info: rlm_sql (sql): Attempting to connect to radiusadmin@localhost:/radiusdb Error: rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radiusadmin@localhost:radiusdb Error: rlm_sql_postgresql: Postgresql error 'could not connect to server: Permission denied ?Is the server running on host "localhost" and accepting ?TCP/IP connections on port 5432? ' Error: rlm_sql (sql): Failed to connect DB handle #0 Info: Ready to process requests. I use fedora core4 as Operating System and freeradius 1.0.4-1, postgresql 8.0.3-1. In the postgresql's file pg_hba.conf i make this configuration: #TYPE DATABASE USER CIDR-ADDRESS METHOD #IPv4 local connections: host radiusdb radiusadmin 127.0.0.1/32 trust I don't why this dysfonctionnement Please help me and thanks for your assistance.

1 0

LDAP and groups
by Jean-Francois Gobin 29 Sep '05

29 Sep '05

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hello there, I have a small problem. And I read the documentation. And I can't find what's wrong. I have a corporate LDAP with users and group. Each group is a "groupOfUniqueNames", with "uniquemember". In the user defintion, no group definition is set. I need to authenticate members of a certain groups, and not of another ... Every doc I read mention that you have to create an attribute "per user" ... Any other way ? Regards, Jean-Francois Gobin - ---------- Jean-Francois Gobin - Administrateur gobinjf.be http://www.gobinjf.be mailto:gobin@gobinjf.be -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.2 (FreeBSD) Comment: Made with pgp4pine 1.76 iD8DBQFDO6+pkkg3QInH2uURAkoTAJ9CiiYoljx0B2zP/tInkSG4TwiwIgCbBWft g16kNx6wUzO1va189DJmHRA= =kTQn -----END PGP SIGNATURE-----

3 2

RE: Proxy of Accounting Requests
by Jonathan De Graeve 29 Sep '05

29 Sep '05

Can you also do this in SQL? J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 jonathan.de.graeve(a)imelda.be --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite --------- -----Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Nicolas Baradakis Verzonden: donderdag 29 september 2005 13:55 Aan: FreeRadius users mailing list Onderwerp: Re: Proxy of Accounting Requests Ashwin Gobind wrote: > I want to proxy accounting requests originating from certain hosts to > another server, how can I do this. You could add something like this in file "acct_users": DEFAULT Client-IP-Address == 10.0.0.1, Proxy-To-Realm := realm1 DEFAULT Client-IP-Address == 10.0.0.2, Proxy-To-Realm := realm2 -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Proxy of Accounting Requests
by Ashwin Gobind 29 Sep '05

29 Sep '05

Good day. I am using freeradius 1.05 I want to proxy accounting requests originating from certain hosts to another server, how can I do this. Also I am using Jradius to handle accounting request. But this certain request I don't want JRadius to handle, but freeradius just to proxy it. Here is an example of the request Thanks Acct-Session-Id = C42EA2A31F96530 Framed-Protocol = GPRS-PDP-Context Called-Station-Id = vlive Calling-Station-Id = 27829800529 Framed-IP-Address = 10.19.128.6 3GPP-IMSI = 655019800002252 3GPP-Charging-ID = 33121584 3GPP-PDP-Type = 0 3GPP-GGSN-Address = 196.46.162.163 3GPP-IMSI-MCC-MNC = 65501 3GPP-GGSN-MCC-MNC = 65501 3GPP-NSAPI = 5 3GPP-Selection-Mode = 0 3GPP-Charging-Gateway-Address = 10.25.0.10 3GPP-GPRS-Negotiated-QoS-profile = 99-23931F9396979774FB0808 3GPP-SGSN-Address = 196.6.254.49 User-Name = 27829800529 Cisco-AVPair = connect-progress=Call Up Acct-Authentic = RADIUS Acct-Status-Type = Start NAS-Port-Type = Virtual Cisco-NAS-Port = GGSN NAS-Port = 60000 Class = [Binary Data] Service-Type = Framed-User NAS-IP-Address = 10.31.1.122 NAS-Identifier = GMC-GGSN0-12-2 Acct-Delay-Time = 0 Client-IP-Address = 10.113.60.6 Acct-Unique-Session-Id = b30a3d4d494c8a87 �This e-mail is sent on the Terms and Conditions that can be accessed by Clicking on this link http://www.vodacom.net/legal/email.aspx "

2 1

RE: rlm_perl
by Abdul Lateef 29 Sep '05

29 Sep '05

hi friends, I am really sorry to post it again. Because still i did not find any reply to solve my problems. --- Abdul Lateef <abdul_zu(a)yahoo.com> wrote: > Hi, > > Thanks for your reply. i am going here to post the > debug logs. from the log it seems rlm_per is loaded > successfully but when i am trying to call authorize > and authenticate function from example.pl, the > functions are not calling well. > > Here is full configuration what i did to work with > perl module. > > radreply table: > ------------------- > 123456 Auth-Type := perl > ------------------- > > radiusd.conf > --------------------- > modules area: > > perl { > > module = /usr/local/etc/example.pl > func_accounting = accounting > func_authenticate = authenticate > func_authorize = authorize > func_preacct = preacct > func_checksimul = checksimul > func_xlat = xlat > } > > > > authorize { > > preprocess > chap > suffix > perl > } > > > authenticate { > > Auth-Type Perl { > perl > } > } > --------------------- > > example.pl > -------------------- > > sub authorize { > return RLM_MODULE_OK; > } > > > sub authenticate { > if ($RAD_REQUEST{'User-Name'} =~ /^baduser/i) { > $RAD_REPLY{'Reply-Message'} = "Denied access"; > return RLM_MODULE_REJECT; > } else { > $RAD_REPLY{'h323-credit-time'} = > \"h323-credit-time=200\"; > return RLM_MODULE_OK; > > } > } > > > -------------------- > > Here is the Log: > =========================== > Wed Sep 28 07:50:45 2005 : Info: Detach perl > 0x93af7a0 > Wed Sep 28 07:50:45 2005 : rlm_perl: > rlm_perl::Detaching. Reloading. Done. > Wed Sep 28 07:50:45 2005 : Info: detach at 0x93af7a0 > returned status 0 > Wed Sep 28 07:50:45 2005 : Info: Detach perl > 0x94b0ec8 > Wed Sep 28 07:50:45 2005 : rlm_perl: > rlm_perl::Detaching. Reloading. Done. > Wed Sep 28 07:50:45 2005 : Info: detach at 0x94b0ec8 > returned status 0 > Wed Sep 28 07:50:45 2005 : Info: Detach perl > 0x950b550 > Wed Sep 28 07:50:45 2005 : rlm_perl: > rlm_perl::Detaching. Reloading. Done. > Wed Sep 28 07:50:45 2005 : Info: detach at 0x950b550 > returned status 0 > Wed Sep 28 07:50:45 2005 : Info: Detach perl > 0x9565480 > Wed Sep 28 07:50:45 2005 : rlm_perl: > rlm_perl::Detaching. Reloading. Done. > Wed Sep 28 07:50:45 2005 : Info: detach at 0x9565480 > returned status 0 > Wed Sep 28 07:50:45 2005 : Info: Detach perl > 0x95bf180 > Wed Sep 28 07:50:45 2005 : rlm_perl: > rlm_perl::Detaching. Reloading. Done. > Wed Sep 28 07:50:45 2005 : Info: detach at 0x95bf180 > returned status 0 > Wed Sep 28 07:50:45 2005 : rlm_perl: > rlm_perl::Detaching. Reloading. Done. > Wed Sep 28 07:50:48 2005 : Info: rlm_sql (sql): > Driver > rlm_sql_mysql (module rlm_sql_mysql) loaded and > linked > Wed Sep 28 07:50:48 2005 : Info: rlm_sql (sql): > Attempting to connect to Radius@10.0.0.65:/radius > Wed Sep 28 07:50:48 2005 : Info: rlm_sql_mysql: > Starting connect to MySQL server for #0 > Wed Sep 28 07:50:48 2005 : Info: rlm_sql_mysql: > Starting connect to MySQL server for #1 > ================================================= > > > I AM REALLY SORRY FOR BIG THREAD. > > > -------- > Yours, > Abdul Lateef > Computer Programmer > HATIF COM > Mob: +974 - 5405022 > Tel: +974 - 4883068 > ICQ: 276994704 > YM!: abdul_zu > Fax: +974 - 4883063 > Doha Qatar > http://www.hatif.com > > > > __________________________________ > Yahoo! Mail - PC Magazine Editors' Choice 2005 > http://mail.yahoo.com > -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com

3 2