- Freeradius-Users - lists.freeradius.org

One question
by Sinan Ulker 14 Sep '05

14 Sep '05

Hi all, How can I setup EAP support on freeradius? Regards,

2 1

SQL Documentation
by Sean 14 Sep '05

14 Sep '05

Hi All, Can anyone recommend a good source for documentation for FreeRadius. I'm trying to understand the processes that occur between Chillispot, FreeRadius and MySql. In particular I need to understand how the Counter works and how to use the counter in MySQL. Regards, Sean

2 1

radgroupreply table
by N White 14 Sep '05

14 Sep '05

Can anyone explain to me the purpose and usage of the 'prio' column in the radgroupreply table? Much Googling has returned nothing, accept other questions. -- --------------------------- | Nick White | | Network Administrator | | Tele-NET Internet | | http://www.tele-net.net | | nwtech(a)tele-net.net | ---------------------------

4 6

El tercero... a ver si entiende lo que quiero decir
by Paolo Rotela 14 Sep '05

14 Sep '05

Ing. Paolo Rotela Jefe Técnico Blue Telecom ----- Original Message ----- From: "Paolo Rotela" <paolo.rotela(a)bluetelecom.com> To: "Freeradius Users" <freeradius-users(a)lists.freeradius.org> Sent: Wednesday, September 14, 2005 10:20 AM Subject: Re: FreeRadius Proxying and Message-Authenticator >I wonder if it is correct to discard a packet based on the presence of an >attribute witch use is not defined by any standard. I've read the >"aboba-radext-fixes" and I see that FR is calculating Message-Authenticator >in Accounting packets this way. But there is no RFC about it... RFC2869 >describes how to handle incorrect or missing Message-Authenticator in >Access-* packets, it doesn't say that you must discard an Accounting packet >with invalid Message Authenticator, because as you say there is no standard >about how to calculate it. > > I suggest at least a configuration option that can help to avoid this > compatibility issue, giving the user the option of accepting or not > "incorrect" MAs in Accounting. > > I'll try to find out the algorithm used by Cisco... If I happen to be > successful, I'll post it. > > Thanks > > > Date: Tue, 13 Sep 2005 17:57:05 -0400 > From: "Alan DeKok" <aland(a)ox.org> > Subject: Re: FreeRadius Proxying and Message-Authenticator > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <20050913215705.0B8CA170D2(a)mail.nitros9.org> > > "Paolo Rotela" <paolo.rotela(a)bluetelecom.com> wrote: >> Hi. I've downloaded FR 1.0.5 whch is supposed to have a bugfix for >> Message-Authenticator handling in Accounting-* messages. > > The issue is that the suggested method of calculatin > Message-Authenticator MAY NOT be the same as what Cisco's using. > Because there's no standard, Cisco may be doing almost *anything*. > >> I'am missing something? > > If you can find out the algorithm used by Cisco, we may be able to > update FreeRADIUS to handle it. Until then, there isn't much we can > do. > > > Ing. Paolo Rotela > Jefe Técnico > Blue Telecom

1 0

Lengths
by Iandc Davies 14 Sep '05

14 Sep '05

All, In the standard header there is a code, Identifier, length and authenticator fields. For the length, is that the sum of all the vp->lengths + 20 for the standard header. My reason for this question is that I'm trying to rationalise an example I've got. I.e. how do you get 164 See below: Code =1 Identifier =1 Length =164 Authenticator = 56 7b e6 9a 8e 43 cf b6 fb a6 c0 f0 9a 92 6f 0e These are standard header, therefore 164 - 20 = 144 Attributes: NAS-IP-Address =d5 89 45 26 4 NAS-PORT-TYPE =5 (virtual) 1 User-Name ="12345678" 8 Disgest-Response ="2ae133421cda65d67dc50d13ba0eb9bc" 32 Digest-Attributes= Realm(1) = "deltathree" 10 Nonce(2) = "3bada1a0" 8 Method(3) = "INVITE" 6 URI(4) = "sip:96226491335@213.137.69.38" 29 Algorithm(5) = "md5" 3 User-Name(10) = "12345678" 8 Equals = 109 (35 not accounted for ?) Ian Davies {02476 564662} Internal (x740 4662) IMS-SIPAC Software Development Engineer

2 1

Re: PW_NAS_IP_ADDRESS ?
by Iandc Davies 14 Sep '05

14 Sep '05

> The IP addresses are usually stored in vp->lvalue. I note the easiest >way to assign values is to use the function pairparsevalue() in >src/lib/valuepair.c -- >Nicolas Baradakis Just looked at pairparsevalue(), and it seems that the string "213.137.69.38" is kept in vp->strvalue but it is also converted into a uint32_t d5 89 45 26 and stored in vp->lvalue. It that right ? Ian Davies {02476 564662} Internal (x740 4662) IMS-SIPAC Software Development Engineer

2 1

Radius Log Reporting Tool
by John Oxley 14 Sep '05

14 Sep '05

I apologise if this has been asked before. I have just come across radreport (from the FreeBSD ports) which is okay. What other tools are there for freeradius log monitoring and reporting? -John

3 2

/etc/shadow
by den 14 Sep '05

14 Sep '05

HI All. I`ve read this article: http://www.tldp.org/HOWTO/8021X-HOWTO, and several related. But I want freeRADIUS to look for passwords in /etc/shadow. Can somebody help me? v 1.0.2 Debian Sarge.

2 3

(no subject)
by Callis 14 Sep '05

14 Sep '05

Hi all, Excuse me if i sound boring but am trying to use freeradius(1.0.1-1) to collect terminating VOIP traffic from an AS5300. I keep getting this error in my radius.log ===== Wed Sep 14 13:53:20 2005 : Error: rlm_sql (pgsql-voip): Couldn't update SQL accounting STOP record - ERROR: duplicate key violates unique constraint "stoptelephonycombo" Wed Sep 14 13:53:20 2005 : Error: rlm_sql (pgsql-voip): failed after re-connect Wed Sep 14 13:53:20 2005 : Error: rlm_sql (pgsql-voip): Couldn't update SQL accounting STOP record - ERROR: duplicate key violates unique constraint "stoptelephonycombo" Wed Sep 14 13:53:21 2005 : Error: rlm_sql (pgsql-voip): failed after re-connect Wed Sep 14 13:53:21 2005 : Error: rlm_sql (pgsql-voip): Couldn't update SQL accounting STOP record - ERROR: duplicate key violates unique constraint "stoptelephonycombo" Wed Sep 14 13:53:21 2005 : Error: rlm_sql (pgsql-voip): failed after re-connect Wed Sep 14 13:53:21 2005 : Error: rlm_sql (pgsql-voip): Couldn't update SQL accounting STOP record - ERROR: duplicate key violates unique constraint "stoptelephonycombo" Wed Sep 14 13:53:21 2005 : Error: rlm_sql (pgsql-voip): failed after re-connect =========== It sometimes kills my freeradius daemon. Any help in the form of documentation or anything will be useful. Thank you.

1 0

PW_NAS_IP_ADDRESS ?
by Iandc Davies 14 Sep '05

14 Sep '05

All, Using an example ip address of 213.137.69.38, this converts to d5 89 45 26 (hex). Is it OK to split the above hex into 8 bits so that it can fit into the vp->strvalue format or is there another way ? i.e. strvalue[0] = d5 strvalue[1] = 89 strvalue[2] = 45 strvalue[3] = 26 Ian Davies {02476 564662} Internal (x740 4662) IMS-SIPAC Software Development Engineer

2 1