- Freeradius-Users - lists.freeradius.org

Re: multiple peap authentication source?
by tbsky＠annsky.us 25 Jul '05

25 Jul '05

hi: after some trying, the workable keyword is "MS-CHAP-Use-NTLM-Auth := 0". i found that in the list archive. maybe someone will read this thread someday, so put the corrections here. thanks for ur help!! Best regards, tbsky > tbsky(a)annsky.us wrote: >> if freeradius can use both "ntlm_auth" and "users" file to authticate users, then everything is streight-forward. > > For guests, put the following in the "users" file: > > name User-Password := "password", Use-NTLM-Auth := No > > And set up ntlm_auth for employees. It will work. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

3 2

Defining whole networks for huntgroups matching!
by Erling Paulsen 25 Jul '05

25 Jul '05

Hello. I'm using huntgroups to group our NAS-boxes, and I'm wondering if it is possible to designate whole networks ala. A.B.C.D/24 - instead of listing all boxes with multiple NAS-IP-Address statements? We have an awful lot of dot1x NAS'es (Cisco Switches), and they're all members of a segmented internal infrastructure net. It would save me a lot of work to define a whole net to huntgrups instad of single IP-addresses. - Erling -- ----------------|sig|--- Erling.Paulsen(a)cc.uit.no Nettseksjonen, ITavd UiT

3 3

Error getting data from database
by Nirmal 25 Jul '05

25 Jul '05

Hi, i have installed freeradius 1.0.4 on linux 7.3 with postgresql.... i m getting following error !! what could be the reason ? ================================================================================ rad_recv: Access-Request packet from host 127.0.0.1:24001, id=138, length=114 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "nirmal" CHAP-Challenge = 0x495c6bb35556d77a941033c89ed87af63e097e202bc7 CHAP-Password = 0x01f5435e9f2d79af0f9b5b3b31486d3392 Calling-Station-Id = "00:80:AD:83:1D:90" NAS-IP-Address = 192.168.0.61 NAS-Port = 4 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 radius_xlat: 'nirmal' rlm_sql (sql): sql_set_user escaped user --> 'nirmal' radius_xlat: 'SELECT Id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'nirmal' ??ORDER BY Id' rlm_sql (sql): Reserving sql socket id: 4 rlm_sql_postgresql: query: SELECT Id, UserName, Attribute, Value, Op ??FROM radcheck ??WHERE Username = 'nirmal' ??ORDER BY Id rlm_sql_postgresql: Status: PGRES_TUPLES_OK rlm_sql_postgresql: affected rows = rlm_sql: Failed to create the pair: Unknown attribute "User-Password " rlm_sql (sql): Error getting data from database rlm_sql (sql): SQL query error; rejecting user rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns fail for request 0 modcall: group authorize returns fail for request 0 There was no response configured: rejecting request 0 Server rejecting request 0. Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 138 to 127.0.0.1:24001 Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 138 with timestamp 42e08a78 Nothing to do. Sleeping until we see a request. ================================================================================ Please help me out. Thanks in advance Nirmal __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 5

Accounting to certain users only
by alexander＠infomed.sld.cu 24 Jul '05

24 Jul '05

Hi I´m using freeradius with mysql. I´m want to permit that certain users connect without the server add registers on the radact table. How can I do accounting only for some user? Exist any Atributte for do that? Regards. ------------------------------------------------- Este mensaje fue enviado usando el servicio de correo en web de Infomed http://webmail.sld.cu

2 1

Installation of FreeRadius on Solaris 10
by Jas 23 Jul '05

23 Jul '05

Hi All, I would really appriciate, if you would kindly help me out. I'm trying to install FreeRadius-1.0.4(downloaded from freeradius.org) on Solaris OS 10 (SPARC) as below: /freeradius-1.0.4# ./configure /freeradius-1.0.4# make /freeradius-1.0.4# make install But I'm getting errors while installing it. /freeradius-1.0.4# ./configure ... ... checking for string.h... (cached) yes checking for strchr... (cached) yes checking for strrchr... (cached) yes checking for memcpy... (cached) yes checking for memmove... (cached) yes checking for strcmp... (cached) yes updating cache .././config.cache creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_attr_rewrite running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_counter running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for gdbm.h... no checking for gdbm_open in -lgdbm... no checking for gdbm_fdesc... (cached) no configure: warning: silently not building rlm_counter. configure: warning: FAILURE: rlm_counter requires: libgdbm. creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_dbm running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for ndbm.h... yes checking for dbm in default lib... yes creating ./config.status creating Makefile configuring in src/modules/rlm_eap running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_md5 running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for malloc.h... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_mschapv2 running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for malloc.h... (cached) yes creating ./config.status creating Makefile configuring in ./types/rlm_eap_peap running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_sim running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_tls running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./types/rlm_eap_ttls running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking how to run the C preprocessor... (cached) gcc -E checking for openssl/err.h... (cached) yes checking for openssl/engine.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_ippool running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for gdbm.h... no checking for gdbm_open in -lgdbm... no checking for gdbm_fdesc... (cached) no configure: warning: silently not building rlm_ippool. configure: warning: FAILURE: rlm_ippool requires: libgdbm. creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_krb5 running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for krb5.h... no checking for krb5_encrypt_data in -lk5crypto... no checking for DH_new in -lcrypto... yes checking for set_com_err_hook in -lcom_err... no configure: warning: the comm_err library isn't found! checking for krb5_init_context in -lkrb5... no configure: warning: silently not building rlm_krb5. configure: warning: FAILURE: rlm_krb5 requires: krb5. creating ./config.status creating Makefile configuring in src/modules/rlm_ldap running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for inet_aton in -lresolv... (cached) yes checking for lber.h... yes checking for ldap.h... yes checking for sasl_encode in -lsasl... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes checking for ber_init in -llber... no configure: warning: silently not building rlm_ldap. configure: warning: FAILURE: rlm_ldap requires: liblber. creating ./config.status creating Makefile configuring in src/modules/rlm_pam running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for dlopen in -ldl... (cached) yes checking for pam_start in -lpam... (cached) yes checking for security/pam_appl.h... (cached) yes checking for pam/pam_appl.h... (cached) no creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_radutmp running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for sys/mman.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_sql running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes creating ./config.status creating ./Makefile creating ./drivers/Makefile configuring in ./drivers/rlm_sql_iodbc running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for isql.h... no configure: warning: iodbc headers not found. Use --with-iodbc-include-dir=<path>. configure: warning: sql submodule 'iodbc' disabled creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_mysql running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for mysql_config... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in ./drivers/rlm_sql_postgresql running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking for libpq-fe.h... no checking for PQconnectdb in -lpq... no configure: warning: silently not building rlm_sql_postgresql. configure: warning: FAILURE: rlm_sql_postgresql requires: libpq-fe.h libpq. creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_oracle running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for oci.h... no configure: warning: oracle headers not found. Use --with-oracle-home-dir=<path>. configure: warning: sql submodule 'oracle' disabled creating ./config.status creating Makefile configuring in ./drivers/rlm_sql_unixodbc running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../../../.././config.cache --srcdir=. loading cache ../../../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for sql.h... no configure: warning: unixODBC headers not found. Use --with-unixodbc-include-dir=<path>. configure: warning: sql submodule 'unixodbc' disabled creating ./config.status creating Makefile configuring in src/modules/rlm_unix running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for system password file... /etc/passwd checking for system shadow password file... /etc/shadow checking for crypt... (cached) yes checking for crypt.h... (cached) yes checking for shadow.h... (cached) yes checking for getspnam... (cached) yes checking for getusershell... (cached) yes checking for getspnam in -lshadow... (cached) no checking for fgetpwent... (cached) yes checking for fgetspent... (cached) yes checking for fgetgrent... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged configuring in src/modules/rlm_x99_token running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking how to run the C preprocessor... (cached) gcc -E checking for inttypes.h... (cached) yes creating ./config.status creating Makefile configuring in src/modules/rlm_checkval running /bin/sh ./configure --enable-ltdl-install --enable-ltdl-install --cache-file=../../.././config.cache --srcdir=. loading cache ../../.././config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) works... yes checking whether the C compiler (gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for regex.h... (cached) yes creating ./config.status creating Makefile creating config.h config.h is unchanged **************************** # make gmake[1]: Entering directory `/freerad' Making all in libltdl... gmake[2]: Entering directory `/freerad/libltdl' /bin/sh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -c ltdl.c mkdir .libs gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -c ltdl.c -fPIC -DPIC -o .libs/ltdl.lo ltdl.c: In function `lt_dlopenext': ltdl.c:2926: warning: unused variable `file_found' gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -c ltdl.c -o ltdl.o >/dev/null 2>&1 mv -f .libs/ltdl.lo ltdl.lo /bin/sh ./libtool --mode=link gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -o libltdl.la -rpath /usr/local/lib -no-undefined -version-info 4:0:1 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl rm -fr .libs/libltdl.la .libs/libltdl.* .libs/libltdl.* /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -lc ld: fatal: library -lcrypto: not found ld: fatal: library -lssl: not found ld: fatal: File processing errors. No output written to .libs/libltdl.so.3.1.0 gmake[2]: *** [libltdl.la] Error 1 gmake[2]: Leaving directory `/freerad/libltdl' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/freerad' *** Error code 2 The following command caused the error: /usr/sfw/bin/gmake WHAT_TO_MAKE=all common make: Fatal error: Command failed for target `all' ************************* # make install /freerad/install-sh -c -d -m 755 /usr/local/sbin /freerad/install-sh -c -d -m 755 /usr/local/bin /freerad/install-sh -c -d -m 755 /usr/local/etc/raddb /freerad/install-sh -c -d -m 755 /usr/local/man /freerad/install-sh -c -d -m 755 /usr/local/var/run/radiusd /freerad/install-sh -c -d -m 700 /usr/local/var/log/radius /freerad/install-sh -c -d -m 700 /usr/local/var/log/radius/radacct /freerad/install-sh -c -d -m 700 /usr/local/share /freerad/install-sh -c -d -m 755 /usr/local/share/freeradius for i in 1 5 8; do \ /freerad/install-sh -c -d -m 755 /usr/local/man/man$i; \ for p in man/man$i/*.$i; do \ /freerad/install-sh -c -m 644 $p /usr/local/man/man$i; \ done \ done gmake[1]: Entering directory `/freerad' Making install in libltdl... gmake[2]: Entering directory `/freerad/libltdl' /bin/sh ./libtool --mode=link gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -o libltdl.la -rpath /usr/local/lib -no-undefined -version-info 4:0:1 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl rm -fr .libs/libltdl.la .libs/libltdl.* .libs/libltdl.* /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -lc ld: fatal: library -lcrypto: not found ld: fatal: library -lssl: not found ld: fatal: File processing errors. No output written to .libs/libltdl.so.3.1.0 gmake[2]: *** [libltdl.la] Error 1 gmake[2]: Leaving directory `/freerad/libltdl' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/freerad' *** Error code 2 The following command caused the error: /usr/sfw/bin/gmake WHAT_TO_MAKE=install common make: Fatal error: Command failed for target `install' # Thanks, Jas __________________________________ Yahoo! Mail Mobile Take Yahoo! Mail with you! Check email on your mobile phone. http://mobile.yahoo.com/learn/mail

4 3

FreeRadius + jradius core dump
by Juan Priotti 23 Jul '05

23 Jul '05

Hi all, I'm using freeradius + jradius and I get a core dump when freeradius is started normally. if I start freeradius with the option -X everything works fine. I'm using FreeBSD 5.4, FreeRadius 1.0.4 + jradius. Anyone had this issue before? can somebody help me? Thank you in advance Juan Priotti this is the coredump I get root@server3# gdb /radiusd ./radiusd.core GNU gdb 6.1.1 [FreeBSD] Copyright 2004 Free Software Foundation, Inc. GDB is free software, covered by the GNU General Public License, and you are welcome to change it and/or distribute copies of it under certain conditions. Type "show copying" to see the conditions. There is absolutely no warranty for GDB. Type "show warranty" for details. This GDB was configured as "i386-marcel-freebsd"...(no debugging symbols found)... Core was generated by `radiusd'. Program terminated with signal 10, Bus error. Reading symbols from /lib/libcrypt.so.2...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypt.so.2 Reading symbols from /usr/lib/libpthread.so.1...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libpthread.so.1 Reading symbols from /lib/libcrypto.so.3...(no debugging symbols found)...done. Loaded symbols for /lib/libcrypto.so.3 Reading symbols from /usr/lib/libssl.so.3...(no debugging symbols found)...done. Loaded symbols for /usr/lib/libssl.so.3 Reading symbols from /usr/local/lib/libradius-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libradius-1.0.4.so Reading symbols from /usr/local/lib/libltdl.so.4...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/libltdl.so.4 Reading symbols from /lib/libc.so.5...(no debugging symbols found)...done. Loaded symbols for /lib/libc.so.5 Reading symbols from /usr/local/lib/rlm_exec-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_exec-1.0.4.so Reading symbols from /usr/local/lib/rlm_expr-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_expr-1.0.4.so Reading symbols from /usr/local/lib/rlm_jradius.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_jradius.so Reading symbols from /usr/local/lib/rlm_preprocess-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_preprocess-1.0.4.so Reading symbols from /usr/local/lib/rlm_realm-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_realm-1.0.4.so Reading symbols from /usr/local/lib/rlm_acct_unique-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_acct_unique-1.0.4.so Reading symbols from /usr/local/lib/rlm_files-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_files-1.0.4.so Reading symbols from /usr/local/lib/rlm_detail-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_detail-1.0.4.so Reading symbols from /usr/local/lib/rlm_radutmp-1.0.4.so...(no debugging symbols found)...done. Loaded symbols for /usr/local/lib/rlm_radutmp-1.0.4.so Reading symbols from /libexec/ld-elf.so.1...(no debugging symbols found)...done. Loaded symbols for /libexec/ld-elf.so.1 #0 0x280c231b in pthread_testcancel () from /usr/lib/libpthread.so.1 (gdb)

2 2

IPTABLES - continued
by Shaun Rossi 23 Jul '05

23 Jul '05

After posting, I realized I should have elaborated more. I would like to have this FreeRadius box on the Internet so a few of my NAS devices can access it no matter where they are. I understand port 1812 and 1813 udp must be opened. I am looking for some example IPTABLES (fedora core) entries that would enable UDP access to FreeRadius. Thanks again, -Shaun

3 2

freeradius and MySQL 4.1.12-1
by d.wintgens＠sita.be 23 Jul '05

23 Jul '05

Hi, I have a Suse 9.2 server with the 64-bits 4.1.12-1 MySQL version (I need the MySQL 4.1 database for another applications). I want to have a radius server on this server. The freeradius-1.0.0-5.5.x86_64.rpm package is installed and the radius database is created and filled correctly. The radius configuration files are OK to ask sql before files. The database server/login/password/radius_db are set in the sql.conf file. When I make a test with radtest, I can see in the radius log : Wed Jul 20 16:25:37 2005 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Wed Jul 20 16:25:37 2005 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Wed Jul 20 16:25:37 2005 : Info: rlm_sql (sql): Attempting to connect to root@localhost:/radius Wed Jul 20 16:25:37 2005 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Wed Jul 20 16:25:37 2005 : Error: rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius Wed Jul 20 16:25:37 2005 : Error: rlm_sql_mysql: Mysql error 'Client does not support authentication protocol requested by server; consider upgrading MySQL client' Wed Jul 20 16:25:37 2005 : Error: rlm_sql (sql): Failed to connect DB handle #0 Wed Jul 20 16:25:37 2005 : Info: Ready to process requests. I think that's typically the error occured if a 4.0.x client try to connect a 4.1.x database with the 4.0 protocol. My question : How update the MySQL client version of freeradius to 4.1 protocol ? Thanks in advance, Didier Wintgens E-mail : d.wintgens(a)sita.be

3 2

multiple peap authentication source?
by tbsky＠annsky.us 23 Jul '05

23 Jul '05

hi: i try to setup wireless wpa + freeradius. i use eap-peap-mschapv2, and it was success. i can authenticate users via "users" file and i can authenticate users via winbind+windows 2000 ad server. the next step i want to do is mix both "users" and "windows 2000 ad" as authentication source, but i don't know how to do it. i try to create two "mschap" modules, "mschap-1" and "mschap-2". but i found that the "mschapv2" module internally look at the module named "mschap", so the two modules i create are useless. can i creat a redundant moudle name "mschap" which include two mschap modules? or is there better way doing this? thanks for help!!! Best Regards, tbsky

3 7

IPTABLES
by Shaun Rossi 23 Jul '05

23 Jul '05

Hello everyone, I'm new to FreeRadius, and I've been 'playing' with it for a few days. I am wondering what most people are using for the configuration of IPTABLES in etc/sysconfig/iptables using Fedora Core 3. I will likely post a few more items I am experiencing difficulty with separately shortly. Thank you for any help you can offer. -Shaun Rossi

1 0