- Freeradius-Users - lists.freeradius.org

pam-radius module installation help
by mukherji rakesh 16 Aug '05

16 Aug '05

Dear all, can any one please provide me the guide / steps to install pam_radius module to integrate with RSA Securid technology? I am installing this to implement with my RSA/ACE server but could not do.My linux 9 client can not authenmticate with my RSA server where I have enabled radius server. I am looking for your help. Regards, Rakesh Mukherjee Send instant messages to your online friends http://in.messenger.yahoo.com

1 0

SIGHUP bug to radiusd
by Craig Hancock 15 Aug '05

15 Aug '05

Hello all I am not sure if this is the appropriate list or I should be posting this to devel, but I think there is a bug in freeradius. Last week I discovered when running the command /etc/init.d/radiusd reload the radiusd process stoped accepting request, but still ran and nothing is reported in the logs as to an error or a problem. The init script reload option from what I can tell does a SIGHUP of the running radiusd process. After running strace on the process id I attempted to test my radius server by stopping and starting the process and then doing a reload randomly. That seemed to work ok so next test was to stop the process and run it again, but then attempt to authenticate to it a few times. Each authentication request was successful so while the process was running I attempted to run the init script with the reload command and what outputted to my screen was 'Segementation Fault errors'. I haven't had the oppurtunity to dig down and look at what its Seg Faulting on, but wanted to see if anyone else has experienced this problem. My testing was done on the prebuilt rpm package that is supplied by redhat version 1.0.1-2.RHEL4 as well as the stable version of freeradius version 1.0.4. Our radius server in question provides AAA service for VPN, and wireless users. Please let me know if I need to provide any further information. If this is not the appropriate list I apologize -- ****************************************************** Craig T. Hancock Systems Engineer, Infrastructure Services Office of Information Technology University of Notre Dame ******************************************************

2 1

rlm_smb & mschap
by Craig Hancock 15 Aug '05

15 Aug '05

Can rlm_smb be used to authenticate PEAP 8021X sessions? If so in your configuration file do you have to comment out the mschap section of radiusd.conf file? Also in the eap.conf file do you have to change the section peap section for default_eap_type = mschap to smb? Thanks -- ****************************************************** Craig T. Hancock Systems Engineer, Infrastructure Services Office of Information Technology University of Notre Dame ******************************************************

2 1

Radius Client for PPP on Fedora 4
by Ravi Verma 15 Aug '05

15 Aug '05

Dear Friends: I have an Openswan+L2TP installation on Fedora 4 which allows Windows XP/2000 clients to connect by way of L2TP/IPSEC. I want to setup Radius authintication for the Windows clients and I have setup a Free radius server. I need help with setting up L2TP to connect to the Freeradius server. I cannot find the shared library radius.so which I can call from the ppp options file. Is there a How-To document for configuring Radius client for ppp on Fedora 4? I appreciate your help. Kind regards. Ravi Verma Chief Executive Officer Telecommand Software and Services 2210 Plaza Drive, Ste 150 Rocklin, CA 95765 Phone: 9167053261, 866-220-RAVI (Toll-free) Fax: 9169142008 www.telecommand.com

1 0

Configuration item "User-Password" is required for authentication problem
by Tomáš Komárek 15 Aug '05

15 Aug '05

Hello, I have got a problem considering the authentization. This is the output of the FreeRADIUS: Ready to process requests. rad_recv: Access-Request packet from host 81.0.240.10:32811, id=38, length=190 NAS-Identifier = "komoush.com" Digest-Attributes = 0x030a5245474953544552 Digest-Attributes = 0x06054d4435 Digest-Attributes = 0x022a66396461343039396363373137396236623839303762663136373939623361646430356531653962 Digest-Attributes = 0x0a0674657374 User-Name = "test(a)komoush.com" Digest-Attributes = 0x04117369703a38312e302e3234302e3130 Digest-Response = "7e973dfa60fb8540814e44587ac5de1d" Digest-Attributes = 0x010d6b6f6d6f7573682e636f6d rlm_digest: Converting Digest-Attributes to something sane... Digest-Method = "REGISTER" Digest-Algorithm = "MD5" Digest-Nonce = "f9da4099cc7179b6b8907bf16799b3add05e1e9b" Digest-User-Name = "test" Digest-URI = "sip:81.0.240.10" Digest-Realm = "komoush.com" rlm_digest: Adding Auth-Type = DIGEST rlm_digest: Configuration item "User-Password" is required for authentication. rad_recv: Access-Request packet from host 81.0.240.10:32811, id=38, length=190 Sending Access-Reject of id 38 to 81.0.240.10:32811 The problem is probably in the line: rlm_digest: Configuration item "User-Password" is required for authentication. Can anybody help me how to overcome this problem??? Thanks a lot in advance. Tomas

2 1

FreeRADIUS 1.0.4 can't compile on Solaris 10
by Wei Chiang 15 Aug '05

15 Aug '05

Greetings everybody. There's this problem that has me completely stumped despite several late night attempts to solve it, so any help would be gratefully appreciated. ;-) I'm trying to compile FreeRADIUS 1.0.4 on a Solaris 10 machine. The initial "./configure" seems to have completed without too much fuss. The problem is that when I try "make all" the following error message is given after it tries to compile: ************************* snip **************************************** gmake[1]: Entering directory `/export/home/tmp/freeradius-1.0.4' Making all in libltdl... gmake[2]: Entering directory `/export/home/tmp/freeradius-1.0.4/libltdl' /bin/sh ./libtool --mode=link gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -o libltdl.la -rpath /usr/local/lib -no-undefined -version-info 4:0:1 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl rm -fr .libs/libltdl.la .libs/libltdl.* .libs/libltdl.* /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -lc ld: fatal: library -lcrypto: not found ld: fatal: library -lssl: not found ld: fatal: File processing errors. No output written to .libs/libltdl.so.3.1.0 gmake[2]: *** [libltdl.la] Error 1 gmake[2]: Leaving directory `/export/home/tmp/freeradius-1.0.4/libltdl' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/export/home/tmp/freeradius-1.0.4' *** Error code 2 The following command caused the error: /usr/sfw/bin/gmake WHAT_TO_MAKE=all common make: Fatal error: Command failed for target `all' ************************* snip **************************************** The really strange part is that "./configure" seems to actually find the libcrypto and libssl libraries: ************************* snip **************************************** checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes ************************* snip **************************************** I did the following command line tests and got the following results: #ld -lcrypto ld: fatal: library -lcrypto: not found ld: fatal: File processing errors. No output written to a.out #ld -lssl ld: fatal: library -lssl: not found ld: fatal: File processing errors. No output written to a.out I think the libraries are already in the correct path: #crle Configuration file [version 4]: /var/ld/ld.config Default Library Path (ELF): /lib:/usr/lib:/usr/local/lib:/usr/sfw/lib Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system default) Command line: crle -c /var/ld/ld.config -l /lib:/usr/lib:/usr/local/lib:/usr/sfw/lib Does anyone know how to solve this problem? Let me know if I've left out any information. Thanks again!

2 1

Free Radius Authentication
by S G�l�in Y�cel 15 Aug '05

15 Aug '05

Hi; I have an problem about authentication too...Please help... Here is the problemssss... rad_recv: Access-Request packet from host 10.10.8.180:1095, id=28, length=130 NAS-IP-Address = 10.10.8.180 NAS-Port-Type = Wireless-802.11 NAS-Port = 1 Framed-MTU = 1400 User-Name = "testuser" Calling-Station-Id = "00028abbbee9" Called-Station-Id = "00110a2a12c9" NAS-Identifier = "Enterprise AP" EAP-Message = 0x0201000d017465737475736572 Message-Authenticator = 0x0f53c7699a63b67d4dcc91de03f4cd15 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "testuser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: EAP packet type response id 1 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry testuser at line 94 modcall[authorize]: module "files" returns ok for request 1 modcall: group authorize returns updated for request 1 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 1 for 1 seconds Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 28 to 10.10.8.180:1095 --------------------------------- Start your day with Yahoo! - make it your home page

1 0

Free Radius + MySQL
by S G�l�in Y�cel 15 Aug '05

15 Aug '05

Hi; I have an problem about authentication.I work to use free radius with mysql but when I try to authenticate it becomes rlm_sql="zero lenght username not permitted"..... Have the problem in my configuration?Please help.... __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

debian install and modules
by N White 14 Aug '05

14 Aug '05

I would like to get rlm_sqlcounter working, but I have FreeRADIUS installed via "apt-get install freeradius freeradius-mysql" from the Debian sources. They do not apparently include the "experimental modules" in this package, and there is not another package for these modules. I tried compiling, and then copying the 'rlm_sqlcounter.*' files to where the other libraries are, and freeradius recognized sqlcounter(it started, and saw my entries in sqlcounter.conf and experimental.conf), but it would not work correctly with them. I compiled FreeRADIUS on a test server with the experimental modules option, and copied my configs from the debian server, and it works fine. Is there any way to get rlm_sqlcounter to work with the Debian package without having to recompile/install FreeRADIUS from source? -- --------------------------- | Nick White | | nwtech(a)tele-net.net | ---------------------------

1 0

more debug?
by N White 14 Aug '05

14 Aug '05

Is there any way to get the debug to tell me more. For example: freeradius -XX Tue Jul 26 12:46:55 2005 : Debug: rlm_sqlcounter: Entering module authorize code Tue Jul 26 12:46:55 2005 : Debug: rlm_sqlcounter: Could not find Key value pair Tue Jul 26 12:46:55 2005 : Debug: modsingle[authorize]: returned from noresetcounter (rlm_sqlcounter) for request 0 Tue Jul 26 12:46:55 2005 : Debug: modcall[authorize]: module "noresetcounter" returns noop for request 0 I'd like to see exactly what rlm_sqlcounter is doing(sql query, file checking, etc). I've been stuck on trying to get sqlcounter to work for over a week now, and more debug is never bad. Thanks. -- --------------------------- | Nick White | | nwtech(a)tele-net.net | ---------------------------

2 2