- Freeradius-Users - lists.freeradius.org

authorization
by Þórður Ívarsson 12 Sep '05

12 Sep '05

Hi.. If user is denied authorization should authentication accept the user instead? Þórður Ívarsson Skrín ehf

4 5

Huntgroup-Name
by Jonathan De Graeve 11 Sep '05

11 Sep '05

Is it possible to specify multiple huntgroup names in sql? Lets say sqlgroup IT can connect to devices in the huntgroup vpn and ras (something like Huntgroup-Name == vpn,ras in sql??) J.

2 1

Question on certs with FreeRadius/Openssl
by john＠jetcityorange.com 11 Sep '05

11 Sep '05

Hello, I’m not sure if this is the right forum for this but I thought I’d ask to see if anyone has ideas or input. Please forgive me if this isn’t the right forum. We have a Fedora Core 1 box running FreeRadius 1.0.4 and OpenSSL-0.9.7g. We would like to set up EAP/TLS. Everything runs fine, the root cert creates fine, so does the client cert but the server cert does not create. I get the following error: ERROR: adding extensions in section xpserver_ext 5212:error:2207C082:X509 V3 routines:DO_EXT_CONF:unknown extension name:v3_conf.c:123: 5212:error:2206B080:X509 V3 routines:X509V3_EXT_conf:error in extension:v3_conf.c:92:name=extendedKeyUsager, value=1.3.6.1.5.5.7.3.1 No certificate matches private key 5214:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:140: unable to load certificate 5215:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: TRUSTED CERTIFICATE I have combed the FAQ, along with multiple sites and pulled down the EAPTLS-FreeRadius doc to no avail. I’ve verified my openssl.cnf and CA files carefully. The xpextensions file is located in the same directory as my openssl.cnf file. My question is what have I missed? Is there some FreeRadius or OpenSSL config that I’m missing? Thanks very much, John

1 0

seeing "Error: rlm_sql: Stop packet with zero session length"
by Ilia Chipitsine 11 Sep '05

11 Sep '05

Dear Sirs, we are running freeradius for VoIP accounting for Cisco AS5350 I see many-many records like Error: rlm_sql: Stop packet with zero session length. (user 'XXX', nas 'YYY') in radius.log I'm told that there's no error at Cisco, and that situation happens when callee doesn't accept call, that's why session length is equal to zero. Can status of that situation be reconsidered to "no error" ? I really don't want seeing the same message thousand times. Cheers, Ilia Chipitsine

1 0

pppoe+radius
by Wassim abbas 11 Sep '05

11 Sep '05

Hello I want to use freeradius with pppoe-server both runing on the same machine but i cant get radius working i loaded the radius.so in the pppoe-option file but it says raidus is not responding and timed out so please if any one have done it before and can send me the config file, im using the user files without mysql thanks -- Slackware Inside

2 1

RE: mysql connections - segmentation fault
by Jonathan De Graeve 11 Sep '05

11 Sep '05

Have freeradius running on Debian 3.0 and Debian 3.1 without any problems. J. -----Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Andreas M. Verzonden: zondag 11 september 2005 10:54 Aan: freeradius-users(a)lists.freeradius.org Onderwerp: mysql connections - segmentation fault Hello, i´ve installed FR 1.0.4, now when i start the server, during the connection to a mysql database, after the first one there is a segmentation fault. It is working with just one connection , but i can´t find the reason for this. Maybe it has already been reported, i found similar in the internet, but no solution. I´m running FR on a Debian 3.01 machine. Thanks for all, Andreas M - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

How to add sub-attributes in a dictionary file?
by Toyoda 09 Sep '05

09 Sep '05

---------- Forwarded message ---------- Hello, Could you let me know how to add a sub-attributes in a dictionary file? For example, there is an attribute DIGEST_ATTRIBUTE = 207 and its sub-attribute SIP_URI = 4. How can I define this sub-attribute to the dictionary file? I'd appreciate your help. J Toyoda

2 1

rlm_perl / rlm_python
by ricklim＠telus.net 09 Sep '05

09 Sep '05

Hi there, Could someone tell me what versions of freeradius have rlm_perl? I have a fedora box with freeradius 1.0.1 installed, I have downloaded the 1.0.4 version and it has references to rlm_perl in it. Do I have to install the 1.0.4 version to get rlm_perl? A very subjective question here... what is better to use rlm_perl or rlm_python? I would have to learn python, but if the general concensus is to go with python I'll do it. TIA

2 2

RE: rlm_perl / rlm_python
by Jonathan De Graeve 09 Sep '05

09 Sep '05

I think there's a bug in the latest perl versions. When you are running Debian 3.1 (perl 5.8.4) and want experimental package you may want to link libperl.so into freeradius, if you don't you get an error when you start the freeradius server with rlm_perl enabled Like: /usr/sbin/freeradius: relocation error: /usr/lib/perl/5.8/auto/IO/IO.so: undefined symbol: Perl_Tstack_sp_ptr (failed! run '/usr/sbin/freeradius -x' to find out why.) I solved this with recompile configure option: --with-rlm-perl-lib-dir=/usr/lib/libperl.so.5.8.4 You also can do LD_PRELOAD=/usr/lib/libperl.so freeradius but I would suggest the first option... J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 Jonathan.de.graeve(a)imelda.be -----Oorspronkelijk bericht----- Van: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Namens Thor Spruyt Verzonden: vrijdag 9 september 2005 23:19 Aan: FreeRadius users mailing list Onderwerp: Re: rlm_perl / rlm_python ricklim(a)telus.net wrote: > Hi there, > Could someone tell me what versions of freeradius have rlm_perl? All latest version have it. But it's unstable and therefore you have to compile from source using --with-experimental-modules > Do I have to install the 1.0.4 version to get rlm_perl? No, but latest version is best :) > A very subjective question here... what is better to use rlm_perl or > rlm_python? I think that rlm_perl is likely to be supported better than rlm_python. > I would have to learn python, but if the general concensus is to go > with python I'll do it. Go for rlm_perl -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: thor.spruyt(a)telenet.be W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

how to add a sub-attributes in a dictionary
by Toyoda 09 Sep '05

09 Sep '05

Hello, I would like to know how to add a sub-attributes in a dictionary file? For example, there is an attribute DIGEST_ATTRIBUTE = 207 and its sub-attribute SIP_URI = 4. How can I define this sub-attribute to the dictionary file? I'd appreciate your help. J Toyoda

1 0