- Freeradius-Users - lists.freeradius.org

Session Time
by Sean 12 Sep '05

12 Sep '05

Hi All, I want to allow the SQL counter to continue deducting time from users after they log out until they reach a certain amount of time left. I have tried several ways to do it for example the following in sql.conf. accounting_stop_query = "UPDATE ${acct_table2} SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' where Acct-Session-Time < 3600" I'm fairly sure that it's a question of creating the right sql command into radacc. I hope I have explained myself properly. Any advice will be much appreciated. Regards, Sean Bracken

1 0

freeradius and RSA SecurID
by mukherji rakesh 12 Sep '05

12 Sep '05

Hello, Can any one pl give the steps to configure redhat linux 8 and 9 client to integrate with RSA Securid server?I have done my RSA server with radius daemon and tested successfuly with ntradping tool.but I am not able to authenticate users from my linux client with RSA.I am using ssh application and after it asks for the username and password I am giving the passcode and the ssh ( through putty) application says" Server unexpectedly closed network connection and it quits.Though I am getting passcode accepted log message in my RSA server log. I am looking for ur help as i am trapped and under pressure on my client side. Thanks in advance. My yahoo chat id is india_n77(a)yahoo.com,if any one pl message me will be a great achivement for me. Looking for ur help. regards, Rakesh Mukherjee Send instant messages to your online friends http://in.messenger.yahoo.com

1 0

freeradius-mysql-clid
by Sam Njenga 12 Sep '05

12 Sep '05

Hi all I have downloaded the latest freeradius and compiled ok. I have tested it and it works fine. I would like to authenticate calls based on Caller-Id. What do I have to have in the tables. A small example will be highly appreciated. /Sam

2 2

mysql connections - segmentation fault
by Andreas M. 12 Sep '05

12 Sep '05

Hello, i´ve installed FR 1.0.4, now when i start the server, during the connection to a mysql database, after the first one there is a segmentation fault. It is working with just one connection , but i can´t find the reason for this. Maybe it has already been reported, i found similar in the internet, but no solution. I´m running FR on a Debian 3.01 machine. Thanks for all, Andreas M

2 5

RE: Huntgroup-Name
by Jonathan De Graeve 12 Sep '05

12 Sep '05

Putted this into the database: \"^(vpn|ras)$\" I also tried this: ^(vpn|ras)$ Any idea's? -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 Jonathan.de.graeve(a)imelda.be -----Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Nicolas Baradakis Verzonden: zondag 11 september 2005 18:07 Aan: FreeRadius users mailing list Onderwerp: Re: Huntgroup-Name Jonathan De Graeve wrote: > Is it possible to specify multiple huntgroup names in sql? Lets say > sqlgroup IT can connect to devices in the huntgroup vpn and ras > (something like Huntgroup-Name == vpn,ras in sql??) Huntgroup-Name =~ "^(vpn|ras)$" -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Problems when using Cisco-AVPairs[*]
by Admin 12 Sep '05

12 Sep '05

I need some help with Cisco AVPAirs, I am using freeradius + postgresql. When I have the following entries in my radreply table - database=# SELECT * from radreply where username='test' order by id; id | username | attribute | op | value ----+----------+--------------+----+------------------------------------ 72 | test | Cisco-AVPair | = | ip:inacl#1=deny tcp any any eq 25 73 | test | Cisco-AVPair | += | ip:inacl#1=permit ip any any 74 | test | Cisco-AVPair | += | ip:outacl#2=deny tcp any any eq 25 75 | test | Cisco-AVPair | += | ip:outacl#2=permit ip any any the access list works. However, when I modify the entries database=# SELECT * from radreply where username='test' order by id; id | username | attribute | op | value ----+----------+-----------------+----+------------------------------------ 76 | test | Cisco-AVPair[0] | = | ip:inacl#1=deny tcp any any eq 25 77 | test | Cisco-AVPair[1] | = | ip:inacl#1=permit ip any any 78 | test | Cisco-AVPair[2] | = | ip:outacl#2=deny tcp any any eq 25 79 | test | Cisco-AVPair[3] | = | ip:outacl#2=permit ip any any none of the Cisco-AVPairs are passed to the Cisco NAS ( I can see that in the /var/log/radacct/{NAS-IP}/reply-detail file ). A radiusd -v shows radiusd: FreeRADIUS Version 1.0.4, for host , built on Jul 31 2005 at 16:53:35 Thanks In advance. Nat

2 1

authorization
by Þórður Ívarsson 12 Sep '05

12 Sep '05

Hi.. If user is denied authorization should authentication accept the user instead? Þórður Ívarsson Skrín ehf

4 5

Huntgroup-Name
by Jonathan De Graeve 11 Sep '05

11 Sep '05

Is it possible to specify multiple huntgroup names in sql? Lets say sqlgroup IT can connect to devices in the huntgroup vpn and ras (something like Huntgroup-Name == vpn,ras in sql??) J.

2 1

Question on certs with FreeRadius/Openssl
by john＠jetcityorange.com 11 Sep '05

11 Sep '05

Hello, I’m not sure if this is the right forum for this but I thought I’d ask to see if anyone has ideas or input. Please forgive me if this isn’t the right forum. We have a Fedora Core 1 box running FreeRadius 1.0.4 and OpenSSL-0.9.7g. We would like to set up EAP/TLS. Everything runs fine, the root cert creates fine, so does the client cert but the server cert does not create. I get the following error: ERROR: adding extensions in section xpserver_ext 5212:error:2207C082:X509 V3 routines:DO_EXT_CONF:unknown extension name:v3_conf.c:123: 5212:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:92:name=extendedKeyUsager, value=1.3.6.1.5.5.7.3.1 No certificate matches private key 5214:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:140: unable to load certificate 5215:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: TRUSTED CERTIFICATE I have combed the FAQ, along with multiple sites and pulled down the EAPTLS-FreeRadius doc to no avail. I’ve verified my openssl.cnf and CA files carefully. The xpextensions file is located in the same directory as my openssl.cnf file. My question is what have I missed? Is there some FreeRadius or OpenSSL config that I’m missing? Thanks very much, John

1 0

seeing "Error: rlm_sql: Stop packet with zero session length"
by Ilia Chipitsine 11 Sep '05

11 Sep '05

Dear Sirs, we are running freeradius for VoIP accounting for Cisco AS5350 I see many-many records like Error: rlm_sql: Stop packet with zero session length. (user 'XXX', nas 'YYY') in radius.log I'm told that there's no error at Cisco, and that situation happens when callee doesn't accept call, that's why session length is equal to zero. Can status of that situation be reconsidered to "no error" ? I really don't want seeing the same message thousand times. Cheers, Ilia Chipitsine

1 0