- Freeradius-Users - lists.freeradius.org

Authentication problem
by Hamid Salim 04 Aug '05

04 Aug '05

On Wed, 3 Aug 2005, Hamid Salim wrote: > radutmp: check_with_nas = yes > radutmp: perm = 384 > radutmp: callerid = yes > Module: Instantiated radutmp (radutmp) > Listening on authentication *:1812 > Listening on accounting *:1813 > Listening on proxy *:1814 > Ready to process requests. > Dusty's response: You need to figure out why your NAS is not sending radius packets to the radius server. Check your network connections, your firewall rules, etc.. My question: i am not using NAS (as i understand) also i am not using Radius accounting. I am trying to use FreeRadius solely for authentication. what is check_with_nas = yes used for? do i need to change this??? thanks. Hamid.

2 1

RE: accounting - respose from freeradius, and forward
by Tariq Rashid 04 Aug '05

04 Aug '05

i'm happy to work with anyone with the programming talent to do this. tariq -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Alan DeKok Sent: 04 August 2005 16:34 To: FreeRadius users mailing list Subject: Re: accounting - respose from freeradius, and forward Tariq Rashid <tariq.rashid(a)uk.easynet.net> wrote: > i'll have another look to see if it is possible using mechanisms within the > radiusd.conf (perhaps calling 2 modules, one to reply, one to forward). There could be a "replicate" module, which would send packets to multiple destinations. I'd prefer not to have it in the server core. For that matter, proxying could very much be a module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

RE: accounting - respose from freeradius, and forward
by Tariq Rashid 04 Aug '05

04 Aug '05

thanks for the suggestion. i've had a look at this and it doesn't seem like an elegant solution to me. i'll have another look to see if it is possible using mechanisms within the radiusd.conf (perhaps calling 2 modules, one to reply, one to forward). t -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Nicolas Baradakis Sent: 03 August 2005 15:47 To: FreeRadius users mailing list Subject: Re: accounting - respose from freeradius, and forward Tariq Rashid wrote: > we'd like freeradius to reply to accounting requests (start, stop, interim) > with acknowledgements, but also to forward the accounting request to a > backend radius server but to ignore the response from this prozy behaviour. > > this means that the querying NAS equipment doesn't spend time and resources > waiting for a backend reply to an accounting request. however, the backend > radius (possibly belionging to a 3rd party organisation) will need to see > the accounting packets - we just ignore/drop their repsonse. You could use radrelay. See the radrelay(8) manpage in 1.0.x version or radrelay.conf(5) manpage in CVS version. -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Coa and Disconnect Message
by gennaro amelio 04 Aug '05

04 Aug '05

So Alan, FreeRadius can' t send Disconnect Message? Then i think that the better solution is use rlm_sqlcounter and an external apllication that control the session time and send Disconnect message. You are agree with me? Thanks

2 1

Regarding checkrad
by Nurul Faizal M.Shukeri 04 Aug '05

04 Aug '05

Hi all... I'm trying to use checkrad to check for double login. I have read doc/Simultaneous-Use. The problem is when I'm trying to use checkrad, this is the output :- sony# checkrad cisco 10.201.1.3 37 ultrabalad 3706 Timeout: No Response from 10.201.1.3. Timeout: No Response from 10.201.1.3 My ap is cisco 340 and I already enable snmp feature. I don't know what the problem is. Plz help me.

2 6

Dialupadmin docs
by Simon Jones 04 Aug '05

04 Aug '05

Hi, Can anyone point me in the direction of the docs for dialupadmin, just installed Free RADIUS 1.0.4, total newbie so any info would be great. Thanks . Simon Jones SAQ Internet VoIP: 4822813 www.saq.co.uk simon(a)saq.co.uk -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.338 / Virus Database: 267.9.9/62 - Release Date: 02/08/2005

1 0

RE: Cisco, DNIS and ISDN Problems
by Wilhelm Lehmann 04 Aug '05

04 Aug '05

Hi, I don't specify a NAS-Port-Type value, and on the Lucent (Livingston) then it doesn't matter if the user is Async or ISDN, it works. I tried a default of NAS-Port-Type = Async|ISDN and on the Livingston it still works, ie a user can still connect Async or ISDN but not on the cisco NAS. On the Cisco he can only connect Async. The only difference in ANY of my setups between the Lucent and the Cisco is client 196.45.xx.xx { secret = xxxx shortname = e1-whk-1-gw nastype = livingston } client 196.44.xx.xx { secret = xxxxx shortname = Windhoek-as1 nastype = cisco } But strangely when I switch back to Livingston radius with the same configs as freeradius ISDN and Async works again for the same user on Cisco and Lucent. Wilhelm -----Original Message----- From: jc [mailto:jc@isnet.net] Sent: 04 August 2005 01:06 PM To: Wilhelm Lehmann Subject: Re: Cisco, DNIS and ISDN Problems greetings from the bottom of africa :) On Thu, 4 Aug 2005, Wilhelm Lehmann wrote: > Suddenly we found the ISDN users can't authenticate. how do you define your isdn users in freeradius ? the cisco devices would require a port type together with a port limit if you doing 128K isdn ... j.

1 0

Re: Simple flat file passwords
by Martin.Ward＠uk.neceur.com 04 Aug '05

04 Aug '05

The answer to a simple problem is, naturally, simple, and my thanks go to Alan for pointing out the obvious. The short version is: Configure the passwd module in the modules section thus: modules { ... <any other stuff you want configured> ... passwd text_file { filename = /var/text_file format = "*User-Name:User-Password" } } and configure the authorize section like so: authorize { ... <other authorize stuff, life preprocessing> ... text_file } Now, when I run radtest I get the results I expect: rad_recv: Access-Request packet from host 127.0.0.1:32768, id=164, length=64 User-Name = "mward" User-Password = "feeble" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/auth-detail-20050804' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-20050804 modcall[authorize]: module "auth_log" returns ok for request 1 rlm_passwd: Added User-Password: 'feeble' to config_items modcall[authorize]: module "text_file" returns ok for request 1 modcall: group authorize returns ok for request 1 auth: type Local auth: user supplied User-Password matches local User-Password Sending Access-Accept of id 164 to 127.0.0.1:32768 Finished request 1 Brilliant! |\/|artin -- Senior Network Administrator, NEC (Europe) Ltd. Acton extension: 3379 NEC*Net: 800-44-21-3379 Direct: +44 20 8752 3379 Fax: +44 20 8752 3389 Mobile: +44 7721 869 356

1 0

Dialup-Admin & mysql Problems help plz!
by Nicholas Briere 04 Aug '05

04 Aug '05

hello i just installed Freeradius and Freeradius DialupAdmin (with mysql support) i changed the admin.conf so its using the correct db username/password. When i click on quite a few links Like Create New Group i get this atop of the New Group Page DEBUG(SQL,MYSQL DRIVER): Query: SELECT DISTINCT groupname FROM usergroup; DEBUG(SQL,MYSQL DRIVER): Query Result: then below under the word ' prefrences for new group ' DEBUG(SQL,MYSQL DRIVER): Query: SELECT attribute,value ,op FROM radgroupcheck WHERE groupname = ''; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: DEBUG(SQL,MYSQL DRIVER): Query: SELECT attribute,value ,op FROM radgroupreply WHERE groupname = ''; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: DEBUG(SQL,MYSQL DRIVER): Query: SELECT username FROM usergroup WHERE groupname = '' ORDER BY username; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: Under " create a new User " i get DEBUG(SQL,MYSQL DRIVER): Query: SELECT DISTINCT groupname FROM usergroup; DEBUG(SQL,MYSQL DRIVER): Query Result: im using Debian (sarge) / apache 1.3 / php4 / mysql 4.0.24-10 Any help on this would be great as im Quite new the 'radius' enviroment and these sql errors have caused alot of headaches for me :)

3 3

How to bind user with different PPPoE service
by Nirmal 04 Aug '05

04 Aug '05

Hi i m running freeradius 0-9.0 with mysql on a PPPoE server. i m runinng two different PPPoE service. can i bind a user to perticular PPPoE service using radius ? With Regards Thanks in Advance Nirmal --------------------------------- Start your day with Yahoo! - make it your home page

1 0