- Freeradius-Users - lists.freeradius.org

16 bit attr decoding..
by Wesley Spadola 30 Aug '05

30 Aug '05

I am currently working with the CVS (1.1.0) HEAD version of FreeRADIUS. It is using the SQL module with the Lucent 16bit atributes turned on. To make sure we have the most attributes available, I have merged the Ascend dictionary (more specifically, the just the VALUEs), because the CVS dictionary.lucent had none. Just attributes. I have been using Lucent-Modem-Modulation (code 305) and Lucent-Modulation (code 20106) in the SQL statements to discern which one would be coming from our NAS (MAX TNT running TAOS v11), and it looks as though Lucent-Modem-Modulation is currently being sent. Now, while I was testing this last week I was receiving: Lucent-Modem = v90/v34/v92/etc instead of this week: Lucent-Modem-Modulation = 1/2/18/etc Is there a possible reason it used code 20106 last week and now code 305? Also, is there a reason I'm being given numerical values back instead of what they represent? Here is the current state of the relevant portion of our dictionary.lucent: ATTRIBUTE Lucent-Modem-Modulation 305 integer ... ... ATTRIBUTE Lucent-Modulation 20106 integer .. .. VALUE Lucent-Modulation v90 1 VALUE Lucent-Modulation v34 2 VALUE Lucent-Modulation v17 3 VALUE Lucent-Modulation v23 4 VALUE Lucent-Modulation v21 5 VALUE Lucent-Modulation k56flex 6 VALUE Lucent-Modulation v22bis 7 VALUE Lucent-Modulation v32 8 VALUE Lucent-Modulation bell212 9 VALUE Lucent-Modulation bell103 10 VALUE Lucent-Modulation v22 11 VALUE Lucent-Modulation vFC 12 VALUE Lucent-Modulation v33 13 VALUE Lucent-Modulation bell208 14 VALUE Lucent-Modulation v29 15 VALUE Lucent-Modulation v27 16 VALUE Lucent-Modulation none 17 VALUE Lucent-Modulation v92 18 VALUE Lucent-Modem-Modulation v90 1 VALUE Lucent-Modem-Modulation v34 2 VALUE Lucent-Modem-Modulation v17 3 VALUE Lucent-Modem-Modulation v23 4 VALUE Lucent-Modem-Modulation v21 5 VALUE Lucent-Modem-Modulation k56flex 6 VALUE Lucent-Modem-Modulation v22bis 7 VALUE Lucent-Modem-Modulation v32 8 VALUE Lucent-Modem-Modulation bell212 9 VALUE Lucent-Modem-Modulation bell103 10 VALUE Lucent-Modem-Modulation v22 11 VALUE Lucent-Modem-Modulation vFC 12 VALUE Lucent-Modem-Modulation v33 13 VALUE Lucent-Modem-Modulation bell208 14 VALUE Lucent-Modem-Modulation v29 15 VALUE Lucent-Modem-Modulation v27 16 VALUE Lucent-Modem-Modulation none 17 VALUE Lucent-Modem-Modulation v92 18 Thanks, Wes

2 3

Re: multiple threads
by Artur Hecker 30 Aug '05

30 Aug '05

hi Alan >> context: on a Fedora Core 3 system (linux 2.6.9) I configured n=5 but FR would not start but one instance. also in the "radiusd -X" there is no notice of thread-pool config being read. > > > > FC4 uses a newer Linux kernel, which *correctly* shows only one > process via "ps", even when that process has multiple threads. ok. you are right. i found the thread info in /proc/$PID/status. > And "-X" means "don't start threads". See the "man" page. ok, no i meant the daemon mode. sorry, my comment was a bit misleading. it's just that i would expect FR to show every configuration token it has read. and thread pool seems to be ignored in the debug. thanks Alan. ciao artur

2 3

assign an ip pool for a user
by dinhan 30 Aug '05

30 Aug '05

Hello all ! I've just setup a radius server and it's working very good. thanks...god I have a question : can I assign an IP Pool to a user ? .Of course, I can do that by ACS server , but I have a lot users , and I want to set some policy for users... thanks and best regard __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

automated response
by bakers 30 Aug '05

30 Aug '05

I will be on paternity leave starting August 22nd and returning once things around the house calm down to an acceptable level. If you have specific concerns that must be addressed immediately please contact "Gene deVore <gdevore(a)canbytel.com>" Thanks, Scott Baker

4 4

groupname_attribute VS groupmembership_attribute
by haizam 30 Aug '05

30 Aug '05

Dear all, What is the different between groupname_attribute & groupmembership_attribute ?? I'm using groupname_attribute & groupmembership_filter to search for particular group... and its work.. just wondering when to use groupmembership_attribute # groupname_attribute = cn groupname_attribute = ConnectionType # groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames (uniquemember=%{Ldap-UserDn})))" groupmembership_filter = "(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectclass=radiusprofile))" # groupmembership_attribute = radiusGroupName --haizam

1 0

multiple threads
by Artur Hecker 30 Aug '05

30 Aug '05

hi guys has anybody ever noticed any difficulties of FR to launch multiple initial threads? (thread_pool: start_servers n) context: on a Fedora Core 3 system (linux 2.6.9) I configured n=5 but FR would not start but one instance. also in the "radiusd -X" there is no notice of thread-pool config being read. does anybody have any ideas on that issue? how do I debug it? ("ldd radiusd" shows libpthread correctly linked into the binary). ciao artur

2 1

wlse leap patches
by Marc-Henri Boisis-delavaud 29 Aug '05

29 Aug '05

Hello Were Can I found patches for cisco wlse work ? Marc

4 4

(no subject)
by Matt morris 29 Aug '05

29 Aug '05

Hello List, Thanks for the reply, Thor. So how do I setup freeradius to use rlm_perl then? Some pointers will be greatly appreciated. Thank you. Original Message: =========== >Hello list, > >This has probably been asked a lot times before, but I just couldn't >get the attributes values from accounting request packets with my >perl script. I am trying to do some database queries when I received >stop accounting request packets, here are the relevant sections of my >radiusd.conf and script file: You're mixing up 2 modules: rlm_exec and rlm_perl You configured your radius to use rlm_exec, but you're using a sample script for rlm_perl, which is completely different! There's a sample for rlm_exec at http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/scripts/exec-program-wa it?rev=1.4&content-type=text/x-cvsweb-markup -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: thor.spruyt at telenet.be W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be _________________________________________________________________ Take charge with a pop-up guard built on patented Microsoft® SmartScreen Technology http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=ht… Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.

2 1

radius LDAP problem ?
by Frank Bonnet 29 Aug '05

29 Aug '05

Hello I use freeradius through chillispot and with a LDAP auth session. I am in trouble with freeradius during the login phase see below the trace of the log. Ready to process requests. rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, length=57 User-Name = "exam0" User-Password = "xxxxxxxx" --------> intentionnaly hidden NAS-IP-Address = 255.255.255.255 NAS-Port = 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for exam0 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: (re)connect to ldap.esiee.fr:389, authentication 0 rlm_ldap: bind as / to ldap.esiee.fr:389 rlm_ldap: waiting for bind result ... rlm_ldap: Bind was successful rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, length=57 Sending Access-Reject of id 218 to 147.215.1.111:32787 rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197 User-Name = "exam01" User-Password = "xxxxxxxx" NAS-IP-Address = 0.0.0.0 Service-Type = Login-User Framed-IP-Address = 192.168.182.3 Calling-Station-Id = "00-0E-35-4A-84-94" Called-Station-Id = "00-12-79-90-10-21" NAS-Identifier = "nas01" Acct-Session-Id = "431321c600000000" NAS-Port-Type = Wireless-802.11 NAS-Port = 0 Message-Authenticator = 0x9d756035da40f907731462aca245f22c WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff" rlm_ldap: - authorize rlm_ldap: performing user authorization for exam01 rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: no dialupAccess attribute - access denied by default rlm_ldap: ldap_release_conn: Release Id: 0 rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197 Sending Access-Reject of id 0 to 127.0.0.1:32791 Thanks for any help -- Cordialement/Regards Frank Bonnet

4 4

help regarding pam_radius agent installation with RSA SecurID Authentication
by mukherji rakesh 29 Aug '05

29 Aug '05

Dear All I am configuring radius_pam agent on redhat linux 9 to integrate it with RSA SecurID Authentication technology.I have enabled radius on my RSA server but while trying to login from my linux client I am not able to enter as it says that access denied.I got a log from the /var/log/messages from the Linux client system like the following... Aug 29 18:00:02 phoebe sshd: pam_radius_auth: RADIUS server 172.16.51.149 failed to respond. Aug 29 18:00:02 phoebe sshd: pam_radius_auth: All RADIUS servers failed to respond. Can anyone please help me out of the situation? I am waiting for your reply / solution. Regards, Rakesh Mukherjee India / Calcutta Send instant messages to your online friends http://in.messenger.yahoo.com

1 0