- Freeradius-Users - lists.freeradius.org

RE: Cisco, DNIS and ISDN Problems
by Wilhelm Lehmann 04 Aug '05

04 Aug '05

Hi, I don't specify a NAS-Port-Type value, and on the Lucent (Livingston) then it doesn't matter if the user is Async or ISDN, it works. I tried a default of NAS-Port-Type = Async|ISDN and on the Livingston it still works, ie a user can still connect Async or ISDN but not on the cisco NAS. On the Cisco he can only connect Async. The only difference in ANY of my setups between the Lucent and the Cisco is client 196.45.xx.xx { secret = xxxx shortname = e1-whk-1-gw nastype = livingston } client 196.44.xx.xx { secret = xxxxx shortname = Windhoek-as1 nastype = cisco } But strangely when I switch back to Livingston radius with the same configs as freeradius ISDN and Async works again for the same user on Cisco and Lucent. Wilhelm -----Original Message----- From: jc [mailto:jc@isnet.net] Sent: 04 August 2005 01:06 PM To: Wilhelm Lehmann Subject: Re: Cisco, DNIS and ISDN Problems greetings from the bottom of africa :) On Thu, 4 Aug 2005, Wilhelm Lehmann wrote: > Suddenly we found the ISDN users can't authenticate. how do you define your isdn users in freeradius ? the cisco devices would require a port type together with a port limit if you doing 128K isdn ... j.

1 0

Re: Simple flat file passwords
by Martin.Ward＠uk.neceur.com 04 Aug '05

04 Aug '05

The answer to a simple problem is, naturally, simple, and my thanks go to Alan for pointing out the obvious. The short version is: Configure the passwd module in the modules section thus: modules { ... <any other stuff you want configured> ... passwd text_file { filename = /var/text_file format = "*User-Name:User-Password" } } and configure the authorize section like so: authorize { ... <other authorize stuff, life preprocessing> ... text_file } Now, when I run radtest I get the results I expect: rad_recv: Access-Request packet from host 127.0.0.1:32768, id=164, length=64 User-Name = "mward" User-Password = "feeble" NAS-IP-Address = 255.255.255.255 NAS-Port = 10 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/auth-detail-20050804' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-20050804 modcall[authorize]: module "auth_log" returns ok for request 1 rlm_passwd: Added User-Password: 'feeble' to config_items modcall[authorize]: module "text_file" returns ok for request 1 modcall: group authorize returns ok for request 1 auth: type Local auth: user supplied User-Password matches local User-Password Sending Access-Accept of id 164 to 127.0.0.1:32768 Finished request 1 Brilliant! |\/|artin -- Senior Network Administrator, NEC (Europe) Ltd. Acton extension: 3379 NEC*Net: 800-44-21-3379 Direct: +44 20 8752 3379 Fax: +44 20 8752 3389 Mobile: +44 7721 869 356

1 0

Dialup-Admin & mysql Problems help plz!
by Nicholas Briere 04 Aug '05

04 Aug '05

hello i just installed Freeradius and Freeradius DialupAdmin (with mysql support) i changed the admin.conf so its using the correct db username/password. When i click on quite a few links Like Create New Group i get this atop of the New Group Page DEBUG(SQL,MYSQL DRIVER): Query: SELECT DISTINCT groupname FROM usergroup; DEBUG(SQL,MYSQL DRIVER): Query Result: then below under the word ' prefrences for new group ' DEBUG(SQL,MYSQL DRIVER): Query: SELECT attribute,value ,op FROM radgroupcheck WHERE groupname = ''; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: DEBUG(SQL,MYSQL DRIVER): Query: SELECT attribute,value ,op FROM radgroupreply WHERE groupname = ''; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: DEBUG(SQL,MYSQL DRIVER): Query: SELECT username FROM usergroup WHERE groupname = '' ORDER BY username; DEBUG(SQL,MYSQL DRIVER): Query Result: Num rows:: 0 DEBUG(SQL,MYSQL DRIVER): Query Result: Under " create a new User " i get DEBUG(SQL,MYSQL DRIVER): Query: SELECT DISTINCT groupname FROM usergroup; DEBUG(SQL,MYSQL DRIVER): Query Result: im using Debian (sarge) / apache 1.3 / php4 / mysql 4.0.24-10 Any help on this would be great as im Quite new the 'radius' enviroment and these sql errors have caused alot of headaches for me :)

3 3

How to bind user with different PPPoE service
by Nirmal 04 Aug '05

04 Aug '05

Hi i m running freeradius 0-9.0 with mysql on a PPPoE server. i m runinng two different PPPoE service. can i bind a user to perticular PPPoE service using radius ? With Regards Thanks in Advance Nirmal --------------------------------- Start your day with Yahoo! - make it your home page

1 0

=* operator really work in 1.0.2 ?
by Ruslan A Dautkhanov 04 Aug '05

04 Aug '05

Hello ! I use "=*" operator in User-Password attribute for special account, that accept any passwords. User-Password =* anypassword In pre-1.0.0 CVS it works fine. After upgrading to 1.0.2 it is really don't work. Is it bug or some configuration changes must be applied? Is any known work-arounds exists? Thanks a lot. -- Ruslan A Dautkhanov

1 0

RE: How to connect freeradius and SER!
by Jose Divino de Lima 04 Aug '05

04 Aug '05

Hello.. It's possible. We've a SER that authenticate in a freeRadius. Please, fell free to send me an email (jdlima(a)prolan.com.br) and I can help you. Lima -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org on behalf of Alan DeKok Sent: Wed 3/8/2005 23:24 To: zhu lizhong; FreeRadius users mailing list Cc: Subject: Re: How to connect freeradius and SER!

1 0

How to connect freeradius and SER!
by zhu lizhong 04 Aug '05

04 Aug '05

Hello, guys: I try ot connect Freeradius and SER. when i include the dictionary.ser in dictionary, the ser tells me that it can nor open the dictionary.ser. anyone knows how to fix it? thanks in advance! zhu

2 1

Authentication problem-FreeRadius Output
by Hamid Salim 03 Aug '05

03 Aug '05

[root@radiusd sbin]# /opt/radiusd/sbin/runradiusd -X + LD_LIBRARY_PATH=/opt/openssl/lib + LD_PRELOAD=/opt/openssl/lib/libcrypto.so + export LD_LIBRARY_PATH + export LD_PRELOAD + /opt/radiusd/sbin/radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /opt/radiusd/etc/raddb/proxy.conf Config: including file: /opt/radiusd/etc/raddb/clients.conf Config: including file: /opt/radiusd/etc/raddb/snmp.conf Config: including file: /opt/radiusd/etc/raddb/eap.conf Config: including file: /opt/radiusd/etc/raddb/sql.conf main: prefix = "/opt/radiusd" main: localstatedir = "/opt/radiusd/var" main: logdir = "/opt/radiusd/var/log/radius" main: libdir = "/opt/radiusd/lib" main: radacctdir = "/opt/radiusd/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/opt/radiusd/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/opt/radiusd/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/opt/radiusd/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /opt/radiusd/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded eap eap: default_eap_type = "tls" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "(null)" tls: pem_file_type = yes tls: private_key_file = "/opt/radiusd/etc/1x/radiusd.ece.neu.edu.pem" tls: certificate_file = "/opt/radiusd/etc/1x/radiusd.ece.neu.edu.pem" tls: CA_file = "/opt/radiusd/etc/1x/root.pem" tls: private_key_password = "serverpwd" tls: dh_file = "/opt/radiusd/etc/1x/dh" tls: random_file = "/opt/radiusd/etc/1x/random" tls: fragment_size = 1024 tls: include_length = yes tls: check_crl = no tls: check_cert_cn = "(null)" rlm_eap: Loaded and initialized type tls mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/opt/radiusd/etc/raddb/huntgroups" preprocess: hints = "/opt/radiusd/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/opt/radiusd/etc/raddb/users" files: acctusersfile = "/opt/radiusd/etc/raddb/acct_users" files: preproxy_usersfile = "/opt/radiusd/etc/raddb/preproxy_users" files: compat = "no" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Addr" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/opt/radiusd/var/log/radius/radacct/%{Client-IP-Address}" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/opt/radiusd/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded radutmp radutmp: filename = "/opt/radiusd/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. Hamid Salim wrote: >Hi all, >i was wondering if anyone has successfully implemented the following >setup and/or had any issues. this is my second post. your help will be >greatly appreciated. > > >I have a setup as follows: > >Fedora core 3 >FreeRadius 1.0.4 >openssl .098 >Dell TrueMobile 1170 Access Pointv2.3.3 >802.11b/g cards for AP and supplicant >Windows XP SP2 > >FreeRadius is not authenticating, there are no messages on the screen >or the logfile. The AP does not see the FreeRadius server! > >I think this is a configuration issue outside of FreeRadius. > >Has anyone had similar problem. > >Any help will be greatly appreciated as i have hit a wall here and i am >on a deadline! > >thanks >Hamid.

2 1

Simple flat file passwords?
by Martin.Ward＠uk.neceur.com 03 Aug '05

03 Aug '05

I am trying to use the passwd module to configure a simple flat file with two fields, a user name and a password. I believe I have the module configured right: passwd text_file { filename = /var/text_file format = "*User-Name:*User-Password" authtype = PAP } The contents of this file are: mward:feeble However I can't figure out which authtype to use. If I use PAP (above) I get the following errors: rlm_pap: login attempt by "mward" with password feeble rlm_pap: No password (or empty password) to check against for for user mward If I use CHAP or MSCHAP I get errors like: rlm_chap: Attribute "CHAP-Password" is required for authentication. Cannot use "User-Password". and if I change the format=line to suit, my passwd module fails with: modcall[authorize]: module "text_file" returns notfound for request 0 Can anyone point out the undoubtedly siple thing I am missing? Thanks. |\/|artin -- Senior Network Administrator, NEC (Europe) Ltd. Acton extension: 3379 NEC*Net: 800-44-21-3379 Direct: +44 20 8752 3379 Fax: +44 20 8752 3389 Mobile: +44 7721 869 356

2 2

Limiting the number of connections
by Jose Divino de Lima 03 Aug '05

03 Aug '05

Hi people, I need your help. We´ve a solution that use SER athenticating, athotizing and accounting in a freeRadius+mySQL. I´ve a challenge now to limit thu number of simultaneous connections (i.e: we can permit only ten connections at the same time). Does anybody has any idea to implement this in freeRadius+mySQL ? I imagine that i need to change the sql queries in sql.conf, but i´m not sure.. Any ideas ? Tks, Lima

2 1