- Freeradius-Users - lists.freeradius.org

RE: custom variable in config files
by Tariq Rashid 14 Sep '05

14 Sep '05

thanks - that works - i can confirm that for the list tariq -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Nicolas Baradakis Sent: 13 September 2005 18:08 To: FreeRadius users mailing list Subject: Re: custom variable in config files Tariq Rashid wrote: > but this doesn't ... > > # local test user for monitoring and diagnostics > test1@proxyradius.%{config:easynet_site} User-Password == "test1.proxyradius.%{config:easynet_site}" > Reply-Message = "hello from the proxyradius layer %{config:easynet_site}" > > any ideas? i'm using version 1.0.2 on debian 3.1 It doesn't work because the name of the entry isn't xlat'ed in src/main/files.c. Perhaps this syntax would work: DEFAULT User-Name = "test1@proxyradius.%{config:easynet_site}", User-Password == "test1.proxyradius.%{config:easynet_site}" Reply-Message = "hello from the proxyradius layer %{config:easynet_site}" -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

EAP/TTLS with Windows SecureW2 -> symbol lookup error: rlm_eap_ttls-1.0.4.so:
by Achim Friedland 14 Sep '05

14 Sep '05

Hello, I have a strange error with freeradius eap/ttls... I'm using CISCO AP1200 with a central WDS box. The main authentication is done by freeradius. Authentication for special users is by by another freeradius using the realm "zki"... Using Secure W2 for authentication fails when the outer identity is set to default (== anonymous). SecureW2 seem to send "anonymous@zki" instead of the plain "anonymous". freeradius 1.0.4 will crash when receiving "anonymous@zki" as outer identity, complaining about: "radiusd: symbol lookup error: /usr/local/lib/rlm_eap_ttls-1.0.4.so:" Setting the Outer Identity to "anonymous" by hand and everything seems to work fine... Using Mac OS X 10.4.x is also working fine... Is this a freeradius bug or is this an configuration mistake? thx... achim WindowsXP SecureW2 with Outer Identity default: "Use anonymous outer identity" --------------------------------------- rad_recv: Access-Request packet from host 141.24.X.153:1814, id=2, length=196 User-Name = "anonymous@zki" Framed-MTU = 1400 Called-Station-Id = "0012.d91d.8506" Calling-Station-Id = "0040.96a6.f325" Cisco-AVPair = "ssid=802.1X_A" Service-Type = Login-User Message-Authenticator = 0x5335216cd649ea7293d33d345ccaf001 EAP-Message = 0x0203001201616e6f6e796d6f7573407a6b69 NAS-Port-Type = Wireless-802.11 Cisco-NAS-Port = "11152" NAS-Port = 11152 State = 0xf32cdefb67a6c958841160d79940483d NAS-IP-Address = 141.24.Y.197 NAS-Identifier = "wds" Proxy-State = 0x3130 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_realm: Looking up realm "zki" for User-Name = "anonymous@zki" rlm_realm: Found realm "zki" rlm_realm: Adding Stripped-User-Name = "anonymous" rlm_realm: Proxying request from user anonymous to realm zki rlm_realm: Adding Realm = "zki" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 3 length 18 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 modcall[authorize]: module "files" returns notfound for request 0 radius_xlat: 'anonymous' rlm_sql (sql): sql_set_user escaped user --> 'anonymous' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'anonymous' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql (sql): User anonymous not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'anonymous' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'anonymous' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): User anonymous not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type md5 rlm_eap_md5: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: group authenticate returns handled for request 0 Sending Access-Challenge of id 2 to 141.24.X.153:1814 EAP-Message = 0x01040016041077a0fb8bd58d97d0b17ac1df9de98f47 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x36f0b37fa9b38cb7bbb80bdf4fe46ed3 Proxy-State = 0x3130 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 141.24.X.153:1814, id=3, length=184 User-Name = "anonymous@zki" Framed-MTU = 1400 Called-Station-Id = "0012.d91d.8506" Calling-Station-Id = "0040.96a6.f325" Cisco-AVPair = "ssid=802.1X_A" Service-Type = Login-User Message-Authenticator = 0xcadb1594ff0bdba3568742d74f111ea9 EAP-Message = 0x020400060315 NAS-Port-Type = Wireless-802.11 Cisco-NAS-Port = "11152" NAS-Port = 11152 State = 0x36f0b37fa9b38cb7bbb80bdf4fe46ed3 NAS-IP-Address = 141.24.Y.197 NAS-Identifier = "wds" Proxy-State = 0x3131 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 rlm_realm: Looking up realm "zki" for User-Name = "anonymous@zki" rlm_realm: Found realm "zki" rlm_realm: Adding Stripped-User-Name = "anonymous" rlm_realm: Proxying request from user anonymous to realm zki rlm_realm: Adding Realm = "zki" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: EAP packet type response id 4 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 modcall[authorize]: module "files" returns notfound for request 1 radius_xlat: 'anonymous' rlm_sql (sql): sql_set_user escaped user --> 'anonymous' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'anonymous' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): User anonymous not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'anonymous' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'anonymous' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): User anonymous not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns notfound for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/ttls rlm_eap: processing type tls rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 1 modcall: group authenticate returns handled for request 1 Sending Access-Challenge of id 3 to 141.24.X.153:1814 EAP-Message = 0x010500061520 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x2b311532eebabb9eb8503c79a2d4fa9a Proxy-State = 0x3131 Finished request 1 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 141.24.X.153:1814, id=4, length=238 User-Name = "anonymous@zki" Framed-MTU = 1400 Called-Station-Id = "0012.d91d.8506" Calling-Station-Id = "0040.96a6.f325" Cisco-AVPair = "ssid=802.1X_A" Service-Type = Login-User Message-Authenticator = 0xdfbeb7f6c68f0044d69f70e8c7789c49 EAP-Message = 0x0205003c158000000032160301002d01000029030168032500510bcf65fcee8021c8e22ed0192f5f8033a7007c36fdf4e5904e86 NAS-Port-Type = Wireless-802.11 Cisco-NAS-Port = "11152" NAS-Port = 11152 State = 0x2b311532eebabb9eb8503c79a2d4fa9a NAS-IP-Address = 141.24.Y.197 NAS-Identifier = "wds" Proxy-State = 0x3132 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 rlm_realm: Looking up realm "zki" for User-Name = "anonymous@zki" rlm_realm: Found realm "zki" rlm_realm: Adding Stripped-User-Name = "anonymous" rlm_realm: Proxying request from user anonymous to realm zki rlm_realm: Adding Realm = "zki" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: EAP packet type response id 5 length 60 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 modcall[authorize]: module "files" returns notfound for request 2 radius_xlat: 'anonymous' rlm_sql (sql): sql_set_user escaped user --> 'anonymous' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'anonymous' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): User anonymous not found in radcheck radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'anonymous' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'anonymous' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): User anonymous not found in radgroupcheck rlm_sql (sql): User not found radiusd-windosen-bug Ctrl-K H for help rlm_sql (sql): Released sql socket id: 2 modcall[authorize]: module "sql" returns notfound for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP/ttls rlm_eap: processing type ttls rlm_eap_ttls: Authenticate radiusd: symbol lookup error: /usr/local/lib/rlm_eap_ttls-1.0.4.so: undefined symbol: eaptls_process WindowsXP SecureW2 with Outer Identity: "Specify outer Identity: 'anonymous'" --------------------------------------- rad_recv: Access-Request packet from host 141.24.X.153:1814, id=14, length=65 User-Name = "rznotebook@zki" User-Password = "notenbuch" NAS-IP-Address = 127.0.0.1 Proxy-State = 0x313534 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_realm: Looking up realm "zki" for User-Name = "rznotebook@zki" rlm_realm: Found realm "zki" rlm_realm: Adding Stripped-User-Name = "rznotebook" rlm_realm: Proxying request from user rznotebook to realm zki rlm_realm: Adding Realm = "zki" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 modcall[authorize]: module "files" returns notfound for request 0 radius_xlat: 'rznotebook' rlm_sql (sql): sql_set_user escaped user --> 'rznotebook' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'rznotebook' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'rznotebook' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'rznotebook' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'rznotebook' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: group authorize returns ok for request 0 auth: type Local auth: user supplied User-Password matches local User-Password radiusd-windosen-bug Ctrl-K H for help Login OK: [rznotebook@zki] (from client telly-rz port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_sql (sql): Processing sql_postauth radius_xlat: 'rznotebook' rlm_sql (sql): sql_set_user escaped user --> 'rznotebook' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'rznotebook@zki', 'notenbuch', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'rznotebook@zki', 'notenbuch', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 modcall[post-auth]: module "sql" returns ok for request 0 modcall: group post-auth returns ok for request 0 Sending Access-Accept of id 14 to 141.24.X.153:1814 Proxy-State = 0x313534 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 14 with timestamp 4326761a Nothing to do. Sleeping until we see a request. Mac OS X 10.4 ------------- rad_recv: Access-Request packet from host 141.24.X.153:1814, id=15, length=67 User-Name = "fempowerbook@zki" User-Password = "fpb" NAS-IP-Address = 127.0.0.1 Proxy-State = 0x313931 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 rlm_realm: Looking up realm "zki" for User-Name = "fempowerbook@zki" rlm_realm: Found realm "zki" rlm_realm: Adding Stripped-User-Name = "fempowerbook" rlm_realm: Proxying request from user fempowerbook to realm zki rlm_realm: Adding Realm = "zki" rlm_realm: Authentication realm is LOCAL. modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 modcall[authorize]: module "files" returns notfound for request 0 radius_xlat: 'fempowerbook' rlm_sql (sql): sql_set_user escaped user --> 'fempowerbook' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'fempowerbook' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'fempowerbook' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'fempowerbook' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'fempowerbook' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 0 modcall: group authorize returns ok for request 0 auth: type Local auth: user supplied User-Password matches local User-Password radiusd-windosen-bug Ctrl-K H for help Login OK: [fempowerbook@zki] (from client telly-rz port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 0 rlm_sql (sql): Processing sql_postauth radius_xlat: 'fempowerbook' rlm_sql (sql): sql_set_user escaped user --> 'fempowerbook' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'fempowerbook@zki', 'fpb', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'fempowerbook@zki', 'fpb', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 modcall[post-auth]: module "sql" returns ok for request 0 modcall: group post-auth returns ok for request 0 Sending Access-Accept of id 15 to 141.24.X.153:1814 Proxy-State = 0x313931 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 15 with timestamp 43267cb9 Nothing to do. Sleeping until we see a request.

4 3

RE: radrelay taking too long
by Þórður Ívarsson 14 Sep '05

14 Sep '05

Tune postgresql to not commit data syncronized or the operating system or both. Remove any indexes on the table you are poppulating. Thordur > -----Original Message----- > From: Apu islam [mailto:apu_islam@yahoo.com] > Sent: 14. september 2005 05:57 > To: FreeRadius users mailing list > Subject: radrelay taking too long > > I have an accounting data file (1 GB) that I am pushing off > to a server running freeradius 1,0 w pgsql-voip. It has been > three days but the data is still not done populating the > tables. I see it progressing, but the speed is horrible. > > Anyone knows how I can make this fast ? > > -apu > > ------------------------------ > Do or Do Not, there is no try. > > > > __________________________________ > Yahoo! Mail - PC Magazine Editors' Choice 2005 http://mail.yahoo.com > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > >

1 0

Any plans on using libtool 1.5?
by Humberto Diogenes 14 Sep '05

14 Sep '05

I'm trying to compile Freeradius 1.0.5 in a Debian Sarge to add PostgreSQL support, but it requires libtool 1.4. I can't install 1.4 because it removes apache2. Trying to compile Freeradius with libtool 1.5.6 returns this: (...) /usr/bin/libtool --mode=link ld \ -module -static -Wall -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -D_LIBRADIUS -I../include -DHMAC_SHA1_DATA_PROBLEMS dict.o print.o radius.o valuepair.o token.o misc.o log.o filters.o missing.o md4.o md5.o sha1.o hmac.o hmacsha1.o snprintf.o isaac.o crypt.o udpfromto.o rbtree.o -o libradius.a libtool: link: unable to infer tagged configuration libtool: link: specify a tag with `--tag' make[5]: *** [libradius.a] Error 1 make[5]: Leaving directory `/usr/local/src/freeradius-1.0.5/src/lib' make[4]: *** [common] Error 2 make[4]: Leaving directory `/usr/local/src/freeradius-1.0.5/src' make[3]: *** [all] Error 2 make[3]: Leaving directory `/usr/local/src/freeradius-1.0.5/src' make[2]: *** [common] Error 2 make[2]: Leaving directory `/usr/local/src/freeradius-1.0.5' make[1]: *** [all] Error 2 make[1]: Leaving directory `/usr/local/src/freeradius-1.0.5' make: *** [build-simple] Error 2 -- Humberto Diógenes Diginet Brasil -- Esta mensagem foi verificada pelo sistema de anti-virus e acredita-se estar livre de perigo.

1 1

FreeRadius Proxying and Message-Authenticator
by Paolo Rotela 13 Sep '05

13 Sep '05

Hi. I've downloaded FR 1.0.5 whch is supposed to have a bugfix for Message-Authenticator handling in Accounting-* messages. I've tested with radclient, and I'm still having trouble with this attribute. I've posted about it. After that, I upgraded my FreeRADIUS production server with the new 1.0.5, to see if proxying request it can handle ok the attribute, but I'm still having the same results. The scenario is like this: I'm receiving Accounting packets from a Cisco AS5300 with a FR server (now it's 1.0.5). From those, I'm forwarding some realms to certain customers. There is only one, wich is using Cisco Secure ACS, in wich this is happening. AS5300 sends the Accounting-request packet, FR receives and forwards it (in the detail file I don't see any Message-Authenticator attribute set), ACS receives it and replies with an Accounting-response with a Message-authenticator attribute set. FR receives it and discards it with error: Error: Received packet from <IP address hidden> with invalid Message-Authenticator! (Shared secret is incorrect.) I'am missing something? Any help will be very appreciated. Eng. Paolo Rotela CTO Blue Telecom

2 1

BAY Dictionary Attribute Adding
by Jonathan De Graeve 13 Sep '05

13 Sep '05

--- dictionary.bay.orig 2005-09-13 10:58:13.000000000 +0200 +++ dictionary.bay 2005-09-13 10:59:04.000000000 +0200 @@ -81,6 +81,9 @@ ATTRIBUTE Annex-User-Level 100 integer Bay-Networks ATTRIBUTE Annex-Audit-Level 101 integer Bay-Networks +# Contivity Specific Attributes +ATTRIBUTE CES-Group 102 string + # Annex Tunnel Authen Type Values This attribute is necessary for the new Contivity software Please add this to the new freeradius server. J. --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite ---------

2 1

freeradius and freetds
by Duane Cox 13 Sep '05

13 Sep '05

Hello List Does someone have a compile script for setting up freetds? I have compiled/installed freetds 0.63 and recompiled freeradius. But not sure what I am doing wrong. Thanks

2 2

RE: radwtmp
by Jonathan De Graeve 13 Sep '05

13 Sep '05

You need to enable large-file support J. ---Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Rich Verzonden: dinsdag 13 september 2005 20:23 Aan: freeradius-users(a)lists.freeradius.org Onderwerp: radwtmp I just had a FreeRadius server 'crash' because 'radwtmp' filled up to 2GB... I have 'googled' and 'faq'd' but haven't found an answer to: do I need it? can I logrotate it? can I just config it away in radius.conf? I am taking over admin after our setup guy left... still learning. Thanks, Rich - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

radwtmp
by Rich 13 Sep '05

13 Sep '05

I just had a FreeRadius server 'crash' because 'radwtmp' filled up to 2GB... I have 'googled' and 'faq'd' but haven't found an answer to: do I need it? can I logrotate it? can I just config it away in radius.conf? I am taking over admin after our setup guy left... still learning. Thanks, Rich

2 1

RE: custom variable in config files
by Tariq Rashid 13 Sep '05

13 Sep '05

ok - i've worked out how to do this wityh {config:var_name} where var_name can be declared in radiusd.conf or an included file. the %{config:var_name} can be used in a users file easily - in the reply attibutes, in the password condition test too .. but not in the user name... so this works ... # local test user for monitoring and diagnostics test1@proxyradius} User-Password == "test1.proxyradius.%{config:easynet_site}" Reply-Message = "hello from the proxyradius layer %{config:easynet_site}" but this doesn't ... # local test user for monitoring and diagnostics test1@proxyradius.%{config:easynet_site} User-Password == "test1.proxyradius.%{config:easynet_site}" Reply-Message = "hello from the proxyradius layer %{config:easynet_site}" any ideas? i'm using version 1.0.2 on debian 3.1 tariq rashid -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Tariq Rashid Sent: 13 September 2005 16:10 To: FreeRadius users mailing list Subject: custom variable in config files hi - is it possible for me to declare a variable in one inlcuded config file, which is then visible in all the config files? in order to keep the config file as simple as possible, i want to take out the site/server dependent portion into a variable. so at each different site/server i would have an included file with a variable "location=london" or "location=paris" and then this is visible in all other config files eg users: test@${location} .... etc clients.conf shortname = abc.def.${location} is this possible? tariq - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1