- Freeradius-Users - lists.freeradius.org

RE: Maximum size Input-Octets/Output-Octets
by Jonathan De Graeve 26 Sep '05

26 Sep '05

> What "radacct" are you talking about? The Acct-Input-Octets stops >at 2G because the RFC dictates that it's a 32-bit integer. That's why >the Acct-Input-Gigawords attribute was defined. It goes past 2G. I'm talking about the detail file from freeradius. This is what I found in RFC2869 5.1. Acct-Input-Gigawords Description This attribute indicates how many times the Acct-Input-Octets counter has wrapped around 2^32 over the course of this service being provided, and can only be present in Accounting-Request records where the Acct-Status-Type is set to Stop or Interim- Update. So I assumed that the wrapping went @ 4GB instead of 2GB >From RFC2866: Value The Value field is four octets. Also: integer 32 bit unsigned value, most significant octet first. So its 32bit. (4GB right??) I will use 2147483647 for now. But I can't find the definition which says that it should be 2GB so I need to be sure. J.

2 1

Freeradius and Postgresql configuration
by msah＠otitelecom.bj 26 Sep '05

26 Sep '05

Good morning!!!!! I have successfully configured freeradius server with using postgresql database to storage users which i want to authenticate. when i put it in debug mode to test he works well. But when I run it as deamon the server radius don't see the postgresql server. In the radius's log file i look this: Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded and linked Info: rlm_sql (sql): Attempting to connect to radiusadmin@localhost:/radiusdb Error: rlm_sql_postgresql: Couldn't connect socket to PostgreSQL server radiusadmin@localhost:radiusdb Error: rlm_sql_postgresql: Postgresql error 'could not connect to server: Permission denied ?Is the server running on host "localhost" and accepting ?TCP/IP connections on port 5432? ' Error: rlm_sql (sql): Failed to connect DB handle #0 Info: Ready to process requests. Please help me.

2 1

How to deal with this ...
by Ezequiel O. Block 26 Sep '05

26 Sep '05

Hi Guys, Using Freeradius for authorization, accounting and ip pools management. By mistake i turned off my NAS, and when this NAS came back online then freeradius began rejecting my users as if they were still connected, should my NAS send some kind of "Accounting restart let's start again" packet to Freeradius in order to let him know that those users are no longer connected? am i right? if not how can i deal with this kind of problems? apart from not being so stupid again to turn off a nas by mistake .... Thanks in advance, Ezequiel.

2 3

fixed - patch included: custom variable in config files
by Tariq Rashid 26 Sep '05

26 Sep '05

hi - below is a patch for a small change to conffile.c which enabled me to expand variables in $INCLUDED files, which are defined in the main radiusd.conf or earlier included files. *************** static CONF_SECTION *cf_section_read(con *** 669,675 **** DEBUG2( "Config: including file: %s", value ); ! if ((is = conf_read(cf, *lineno, value, parent)) == NULL) { cf_section_free(&cs); return NULL; } --- 669,675 ---- DEBUG2( "Config: including file: %s", value ); ! if ((is = conf_read(cf, *lineno, value, cs)) == NULL) { cf_section_free(&cs); return NULL; } should i send it to the -dev list? it seems to work over here - someone else should have a look as let me know if its the wrong thing to do! to summarise - the problem is this. included files cause a new top-level "main" structure to be created - which is later added to the real "main" list of variables (conf items). this is fine. when trying to expand a variable, if it is not in the current structure (conf section), then the existing code does try to go up a level and look in "main" - except its the "local temporary" main, and not the real top-level main - so it doesn't find the variable expansion. the above patch should fix this by ensuring that the newly alloced conf section is linked to the real top-level "main" conf section. in its absence, the "parent" being passed to conf_read() seems always to be null ... tariq -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Tariq Rashid Sent: 22 September 2005 12:13 To: FreeRadius users mailing list Subject: RE: custom variable in config files i'm having a go at cracking this problem. i've discovered that any variable declared in radiusd.conf (var = abc) cannot be expanded when used in $INCLUDED files ( ${var} ) ... i'm seeing that during the search for the $var in the linked list of variables ... the list (known as main) used for the included files is not the same one as the one used for variables created in radiusd.conf. that is: * if i delcare aaa, bbb, ccc in radiusd.conf * and i declare xxx, yyy, zzz in proxy.conf * then trying to search for ${ccc} in proxy.conf actually traverses xxx, yyy, zzz and NOT aaa, bb, ccc so far i think i am seeing the item pairs being added to the wrong list and not appended to the proper list? can a more experienced developer have a look to confirm? i'm doing this using a combination of radlog() and ddd. also - why the need for "lineno" in the config item data structures? surely this is a bad idea - and prone to error when inlcuding files? what's the lineno for included files? tariq -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Alan DeKok Sent: 15 September 2005 18:56 To: FreeRadius users mailing list Subject: Re: custom variable in config files "Tariq Rashid" <tariq.rashid(a)uk.easynet.net> wrote: > thanks for the suggestion and clarification. trying what you suggested gives me ... > > Config: including file: /opt/freeradius102/etc/raddb/proxy.conf > config: No such entry network_address for string ${network_address}.126:1812 > Errors reading radiusd.conf Ah... I ran into that the other day. Expanding configuration variables in $INCLUDE'd files may not work, and I'm not sure why. It's a bug. Alan deKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

rlm_perl access-reject noobie question !!!
by ricklim＠telus.net 25 Sep '05

25 Sep '05

Hi there, I have been trying to understand the rlm_perl example script "example.pl". I have is setup that it returns RLM_MODULE_OK for anything, yet the nas client (NTRadPing) always sees Access-Reject. My understanding of how freeradius works is limited. Could someone point me in the right direction on how to get a rlm_perl script to send a Access-Accept message back to the client or cause an Acess-Accept message to be sent back to the client. I am a complete NOOBIE with radius, so please keep that in mind with your responses. Thanks.

2 1

Unknown Auth-Type "eap" in authenticate section.
by Wulf Kaiser 25 Sep '05

25 Sep '05

Hi, After doing the configure stuff on a Solaris 9 machine ./configure \ --prefix=/usr/local/freeradius-1.0.5 \ --sysconfdir=/usr/local/freeradius-1.0.5/conf \ --localstatedir=/usr/local/freeradius-1.0.5/var \ --sharedstatedir=/usr/local/freeradius-1.0.5/com \ --bindir=/usr/local/freeradius-1.0.5/bin \ --sbindir=/usr/local/freeradius-1.0.5/sbin \ --libdir=/usr/local/freeradius-1.0.5/lib \ --libexecdir=/usr/local/freeradius-1.0.5/libexec \ --includedir=/usr/local/freeradius-1.0.5/include \ --mandir=/usr/local/freeradius-1.0.5/man \ --datadir=/usr/local/freeradius-1.0.5/share \ --with-raddbdir=/usr/local/freeradius-1.0.5/etc \ --with-rlm_ldap-lib-dir=/usr/local/openldap2/lib \ --with-rlm_ldap-include-dir=/usr/local/openldap2/include \ --with-openssl-includes=/usr/local/ssl/include \ --with-openssl-libraries=/usr/local/ssl/lib \ --without-rlm_sql_mysql \ --without-rlm_sql_oracle \ --without-rlm_sql_unixodbc \ --without-rlm_sql_iodbc \ --without-rlm_sql_postgresql \ --without-rlm_x99_token \ --without-rlm_krb5 \ --with-gnu-ld I tried ./radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) radiusd.conf[64] Failed to link to module 'rlm_ldap': ld.so.1: ./radiusd: fatal: libldap_r-2.2.so.7: open failed: No such file or directory root@ldap1<8> bash bash-2.05# export LD_LIBRARY_PATH=/usr/local/openssl/lib:/usr/local/openldap/lib bash-2.05# ./radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded LDAP rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /usr/local/freeradius-1.0.5/etc/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP sambalmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambantPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port conns: 56318 Module: Instantiated ldap (ldap) Module: Loaded eap rlm_eap: Loaded and initialized type tls rlm_eap: Loaded and initialized type ttls rlm_eap: Loaded and initialized type peap rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) radiusd.conf[124] Unknown Auth-Type "eap" in authenticate section. What does radiusd.conf[124] Unknown Auth-Type "eap" in authenticate section. mean? Wulf Kaiser IT Services Web Development | Database Administration Webmaster www.mpimf-heidelberg.mpg.de Zentrale Hard- und Softwarebeschaffung Max-Planck-Institut für medizinische Forschung Jahnstrasse 29 69120 Heidelberg Fon +49 6221 486560 Fax +49 6221 486561 Mobil +49 172 6235901

2 2

Error: Discarding duplicate request
by Abdul Lateef 24 Sep '05

24 Sep '05

HI all, any one can explain me about this error. I am getting too much error in radius log. and some time the radius is going to hang, and that time the log is apearing "No DB handele". but when i restart the radius manually it start to working with the same error. i am using two perl file via exe-wait in accounting stop event and in radreply table. ============ Error: Discarding duplicate request from client XXX:1812 - ID: 139 due to unfinished request ============================== Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com

1 0

Usage of pam_radius_auth
by Nagaraj Venkatapuram 24 Sep '05

24 Sep '05

All, Has anybody had the experience using pam_radius_auth for authenticating services like http/https, ssh, telnet. I tried running the sample application but authentication failed. my configuration is like this. /etc/raddb/server # server[:port] shared_secret timeout (s) # 127.0.0.1 secret 1 192.168.1.100 testing123-2 3 /etc/pam.d/other/pam.conf auth sufficient /lib/security/pam_radius_auth.so debug account sufficient /lib/security/pam_radius_auth.so my radius server is free radius version 1.0.5 The request does not even get to radius server running on 192.168.1.100 port 1812. Am I missing anything in the configuration ? Please let me know. Thanks, N

1 0

No appropriate error message ("rlm_ldap: could not start TLS Connect error")
by Linus van Geuns 23 Sep '05

23 Sep '05

Hi! I've tried to establish a TLS-secured connection between freeradius-1.0.1-3 (Red Hat Enterprise Linux 4) and a openldap server. I tried every combination of tls_mode, start_tls and tls_require_cert, but I never got more than this error: (/etc/raddb/radiusd.conf) -------------------8<---------------------------------------- ldap { server = "MYLDAPSERVER.ira.uka.de" port = 389 identity = "uid=MYUSERNAME, ou=MYUNIT, dc=ira, dc=uka, dc=de" password = MYPASSWORD basedn = "ou=MYUNIT,dc=ira,dc=uka,dc=de" filter = "(uid=MYPREFIX-%u)" start_tls = yes tls_mode = no tls_cacertdir = /etc/raddb/cacerts/ tls_require_cert = demand dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 timeout = 4 timelimit = 3 net_timeout = 1 # No useful error msg w/o 0xffff ldap_debug = 0xffff } -------------------8<---------------------------------------- (/var/log/radius/radius.log) -------------------8<---------------------------------------- Error: rlm_ldap: could not start TLS Connect error Error: rlm_ldap: (re)connection attempt failed -------------------8<---------------------------------------- The problem was: (/usr/sbin/radiusd -X) -------------------8<---------------------------------------- TLS trace: SSL_connect:before/connect initialization TLS trace: SSL_connect:SSLv2/v3 write client hello A TLS trace: SSL_connect:SSLv3 read server hello A TLS certificate verification: depth: 1, err: 0, subject: /C=DE/ST=Baden/L=Karlsruhe/O=Universitaet Karlsruhe/OU=ATIS, Fakultaet fuer Informatik/CN=MYCACERTIFICATE/emailAddress=MYCA(a)MYSERVER.PRI, issuer: /C=DE/ST=Baden/L=Karlsruhe/O=Universitaet Karlsruhe/OU=ATIS, Fakultaet fuer Informatik/CN=MYCACERTIFICATE/emailAddress=MYCA(a)MYSERVER.PRI TLS certificate verification: depth: 0, err: 0, subject: /C=DE/ST=Germany/L=Karlsruhe/O=Universitaet Karlsruhe/OU=ATIS/CN=MYLDAPSERVER.ira.uni-karlsruhe.de/emailAddress=MYMAIL(a)MYSERVER.PRI, issuer: /C=DE/ST=Baden/L=Karlsruhe/O=Universitaet Karlsruhe/OU=ATIS, Fakultaet fuer Informatik/CN=MYCACERTIFICATE/emailAddress=MYMAIL(a)MYSERVER.PRI TLS trace: SSL_connect:SSLv3 read server certificate A TLS trace: SSL_connect:SSLv3 read server done A TLS trace: SSL_connect:SSLv3 write client key exchange A TLS trace: SSL_connect:SSLv3 write change cipher spec A TLS trace: SSL_connect:SSLv3 write finished A TLS trace: SSL_connect:SSLv3 flush data TLS trace: SSL_connect:SSLv3 read finished A TLS: hostname (MYLDAPSERVER.ira.uka.de) does not match common name in certificate (MYLDAPSERVER.ira.uni-karlsruhe.de). rlm_ldap: ldap_start_tls_s() ldap_err2string rlm_ldap: could not start TLS Connect error ldap_free_connection ldap_send_unbind ldap_free_connection: actually freed TLS trace: SSL3 alert write:warning:close notify rlm_ldap: (re)connection attempt failed rlm_ldap: search failed -------------------8<---------------------------------------- The importent one is: TLS: hostname (MYLDAPSERVER.ira.uka.de) does not match common name in certificate (MYLDAPSERVER.ira.uni-karlsruhe.de). MYLDAPSERVER.ira.uka.de is an alias for MYLDAPSERVER.ira.uni-karlsruhe.de (hostname used in the certificate). After I set server = MYLDAPSERVER.ira.uni-karlsruhe.de in my radiusd.conf the TLS connection worked without any problem. Maybe this mail will save someone the amount of time I had to waste, figuring it out.. :-/ _And_ maybe this mail inspires some of the developers to report the appropriate error message instead of "rlm_ldap: could not start TLS Connect error". Linus van Geuns. PS: Every certificate of an certificate authority in <tls_cacertdir> needs to be accessable by it's openssl-hash as filename. This can be achieved as follows: In <tls_cacertdir> run: CERT=CACERTFILENAME;ln ${CERT} `openssl x509 -noout -hash -in ${CERT} `.0 -s

3 10

freeRadius with LDAP for MSCHAP & mac auth
by Seferovic Edvin 23 Sep '05

23 Sep '05

Hello everyone... Ive set up a freeradius server with LDAP backend for MSCHAP, but now I have to set up a mac based auth on the same server also with the same LDAP backend ( but the mac info is found in another subtree ). So I have made two ldap instances under modules including MSCHAP... modules { mschap { authtype = MS-CHAP use_mppe = yes require_encryption = yes require_strong = yes } ldap ldap_users { server = "81.yyy.xxx.xxx" basedn = "ou=People,dc=xxx,dc=xxx" filter = "(&(objectClass=posixAccount)(uid=%u))" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 10 timeout = 4 timelimit = 3 net_timeout = 1 } ldap ldap_mac { server = "81.xxx.xxx.xxx" basedn = "ou=Hosts,dc=xxx,dc=xxx" filter = "(&(objectClass=ipHost)(ipHostNumber=%u))" start_tls = no dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 10 timeout = 4 timelimit = 3 net_timeout = 1 } ... } // modules end instantiate { weekly_traffic // just a counter } authorize { mschap ldap_users ldap_mac weekly_traffic } authenticate { # MSCHAP authentication. Auth-Type MS-CHAP { mschap } Auth-Type LDAP { ldap_mac ldap_users } } So what I actually need is - when my vpn server sends Access-Request packets with MS-CHAP attributes, I would like mschap module to use the "ldap_users" part. And when an Access-Request packet with the mac address is recieved I would like to use ldap_mac ONLY ! here is a part of my log file... rad_recv: Access-Request packet from host 172.19.10.2:1024, id=22, length=193 Framed-MTU = 1480 NAS-IP-Address = 172.19.10.2 NAS-Identifier = "HP2626-Verwaltung" User-Name = "00:0a:e4:22:c5:9d" Service-Type = Administrative-User Framed-Protocol = PPP NAS-Port = 10 NAS-Port-Type = Ethernet NAS-Port-Id = "10" Called-Station-Id = "00-14-38-2e-2c-76" Calling-Station-Id = "00-0a-e4-22-c5-9d" Connect-Info = "CONNECT Ethernet 100Mbps Full duplex" CHAP-Password = 0x1525d56e4e21bbbc83d5e49fa3be8173a5 Debug: Processing the authorize section of radiusd.conf Debug: modcall: entering group authorize for request 0 Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 0 Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 0 Debug: modcall[authorize]: module "mschap" returns noop for request 0 Debug: modsingle[authorize]: calling ldap_users (rlm_ldap) for request 0 Debug: rlm_ldap: - authorize Debug: rlm_ldap: performing user authorization for 00:0a:e4:22:c5:9d Debug: radius_xlat: '(&(objectClass=posixAccount)(uid=00:0a:e4:22:c5:9d))' Debug: radius_xlat: 'ou=People,dc=kolp,dc=at' Debug: rlm_ldap: ldap_get_conn: Checking Id: 0 Debug: rlm_ldap: ldap_get_conn: Got Id: 0 Debug: rlm_ldap: attempting LDAP reconnection Debug: rlm_ldap: (re)connect to 81.189.101.10:389, authentication 0 Debug: rlm_ldap: bind as / to 81.189.101.10:389 Debug: rlm_ldap: waiting for bind result ... Debug: rlm_ldap: Bind was successful Debug: rlm_ldap: performing search in ou=People,dc=kolp,dc=at, with filter (&(objectClass=posixAccount)(uid=00:0a:e4:22:c5:9d)) Debug: rlm_ldap: object not found or got ambiguous search result Debug: rlm_ldap: search failed Debug: rlm_ldap: ldap_release_conn: Release Id: 0 Debug: modsingle[authorize]: returned from ldap_users (rlm_ldap) for request 0 Debug: modcall[authorize]: module "ldap_users" returns notfound for request 0 Debug: modsingle[authorize]: calling ldap_mac (rlm_ldap) for request 0 Debug: rlm_ldap: - authorize Debug: rlm_ldap: performing user authorization for 00:0a:e4:22:c5:9d Debug: radius_xlat: '(&(objectClass=ipHost)(ipHostNumber=00:0a:e4:22:c5:9d))' Debug: radius_xlat: 'ou=Hosts,dc=kolp,dc=at' Debug: rlm_ldap: ldap_get_conn: Checking Id: 0 Debug: rlm_ldap: ldap_get_conn: Got Id: 0 Debug: rlm_ldap: attempting LDAP reconnection Debug: rlm_ldap: (re)connect to 81.189.101.10:389, authentication 0 Debug: rlm_ldap: bind as / to 81.189.101.10:389 Debug: rlm_ldap: waiting for bind result ... Debug: rlm_ldap: Bind was successful Debug: rlm_ldap: performing search in ou=Hosts,dc=kolp,dc=at, with filter (&(objectClass=ipHost)(ipHostNumber=00:0a:e4:22:c5:9d)) Debug: rlm_ldap: looking for check items in directory... Debug: rlm_ldap: looking for reply items in directory... Debug: rlm_ldap: Adding description as vid, value 20 & op=11 Debug: rlm_ldap: user 00:0a:e4:22:c5:9d authorized to use remote access Debug: rlm_ldap: ldap_release_conn: Release Id: 0 Debug: modsingle[authorize]: returned from ldap_mac (rlm_ldap) for request 0 Debug: modcall[authorize]: module "ldap_mac" returns ok for request 0 Debug: modsingle[authorize]: calling weekly_traffic (rlm_counter) for request 0 Debug: rlm_counter: Entering module authorize code Debug: rlm_counter: Could not find Check item value pair Debug: modsingle[authorize]: returned from weekly_traffic (rlm_counter) for request 0 Debug: modcall[authorize]: module "weekly_traffic" returns noop for request 0 Debug: modcall: group authorize returns ok for request 0 Debug: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Sorry for the long mail :( Thank you in advance ! Regards, Edvin Seferovic

1 0