- Freeradius-Users - lists.freeradius.org

freeRadius CVS make install problem
by Metz, Frederic 21 Jul '05

21 Jul '05

Hi, sorry for that but I have a simple question about the make install. It throws an error in linking or s.th. like that, see below. I am not familiar with building shared object files so could you please help me. Frederic -- Making install in rlm_eap_peap... make[11]: Entering directory `/home/fmetz/freeradius/src/modules/rlm_eap/types/rlm_eap_peap' if [ "xrlm_eap_peap" != "x" ]; then \ /home/fmetz/freeradius/libtool --mode=install /home/fmetz/freeradius/install-sh -c -c \ rlm_eap_peap.la /usr/local/lib/rlm_eap_peap.la || exit ;\ rm -f /usr/local/lib/rlm_eap_peap-1.1.0-pre0.la || exit %?; \ ln -s rlm_eap_peap.la /usr/local/lib/rlm_eap_peap-1.1.0-pre0.la || exit ;\ fi libtool: install: warning: relinking `rlm_eap_peap.la' (cd /home/fmetz/freeradius/src/modules/rlm_eap/types/rlm_eap_peap; /bin/sh /home/fmetz/freeradius/libtool --mode=relink gcc -release 1.1.0-pre0 -module -export-dynamic -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings -Wstrict-prototypes -Wmissing-prototypes -Wmissing-declarations -Wnested-externs -W -Wredundant-decls -Wundef -I../../../../include -I../.. -I../rlm_eap_tls -DOPENSSL_NO_KRB5 -I./../../libeap -o rlm_eap_peap.la -rpath /usr/local/lib rlm_eap_peap.lo peap.lo ../../../../lib/libradius.la ../rlm_eap_tls/rlm_eap_tls.la -L./../../libeap -leap -lcrypto -lssl -lcrypto -lnsl -lresolv -lpthread -lcrypto ) *** Warning: Linking the shared library rlm_eap_peap.la against the loadable module *** rlm_eap_tls.so is not portable! *** Warning: Linking the shared library rlm_eap_peap.la against the loadable module *** libeap.so is not portable! mv: cannot stat `rlm_eap_peap-1.1.0-pre0.so': No such file or directory libtool: install: error: relink `rlm_eap_peap.la' with the above command before installing it

2 1

Life Connect time
by Abdul Lateef 21 Jul '05

21 Jul '05

Hi guys. I have a small question about Life Connect time in START packets. Is there any possibility to get the connect time when the second party pickup the phone. I am doing my VoIP Call Shop application using freeradius i made one counter in my CallShop application when we got the connect time from terminator i means when the second party pikuped the phone the counter should be started. But in START packets i cannot see any life connect time. is it posible with some advance configuration in freeradius? Thank You Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 Tel: +974 - 4883068 ICQ: 276994704 YM!: abdul_zu Fax: +974 - 4883063 Doha Qatar http://www.hatif.com __________________________________ Yahoo! Mail Stay connected, organized, and protected. Take the tour: http://tour.mail.yahoo.com/mailtour.html

2 1

Re: No communication between FreeRadius and Chilli
by sean 21 Jul '05

21 Jul '05

On Wed, 2005-07-20 at 21:29 +0200, freeradius-users- request(a)lists.freeradius.org wrote: > sean <sean(a)topup.ie> wrote: > > The problem is > > that Chilli can't communicate with my Radius server. Ethereal tells > me > > that the destination is unreachable when replying to the Chilli box. > > It looks like the port isn't open. > > > No. Time Source Destination > Protocol Info > > 540 142.622909 192.168.1.6 82.141.232.132 > RADIUS Access Request(1) (id=0, l=195) > > Ok... > > > The Radius server and the Chilli AP get their IP's from DHCP on a > Caymen > > DSL modem with static IP. The Modem is 82.141.232.132. The Radius > server > > is 192.168.1.2 > > What's the problem? The Ethereal output you showed above disagrees > with your statement about the IP address of the RADIUS server. > > You have the Chilli AP configured to send RADIUS packets to the DSL > modem. The Ethereal output is telling you this. > > Alan DeKok. I have UDP and TCP Pinholes open in the modem for ports 1812, 1813 and 1814 pointing to 192.168.1.2 This should be directing trafic to 82.141.232.132:1812 etc to 192.168.1.2:1812. That is what I had to do for Apache, Jabber and other services. Does Radius use any other ports and should I have any ports opened to 192.168.1.6 Thanks for your help. Regards Sean

2 1

Radius CVS bug
by Dinko Korunic 21 Jul '05

21 Jul '05

I believe that rlm_sql.c in current CVS has got a small typo with mainconfig.client_trees. Trivial fix follows: Index: rlm_sql.c =================================================================== RCS file: /source/radiusd/src/modules/rlm_sql/rlm_sql.c,v retrieving revision 1.145 diff -u -r1.145 rlm_sql.c --- rlm_sql.c 18 Jul 2005 20:26:39 -0000 1.145 +++ rlm_sql.c 21 Jul 2005 14:44:58 -0000 @@ -381,7 +381,7 @@ DEBUG("rlm_sql (%s): Adding client %s (%s) to clients list", inst->config->xlat_name, c->longname,c->shortname); - if (!client_add(mainconfig.client_trees, c)) { + if (!client_add(mainconfig.clients, c)) { client_free(c); return -1; } Cheers, D. -- NAME:Dinko.kreator.Korunic NOTE:Standard.disclaimer.applies URL:kreator.esa.fer.hr IRC:kre ICQ:16965294 PGP:0xea160d0b

2 1

Proxying both EAP and non-EAP requests for the same realm to different servers.
by Erling Paulsen 21 Jul '05

21 Jul '05

Hello. I want to proxy requests to different servers, based on their authentication type - though they belong to the same realm. How do I make EAP request for a realm go to one server and non-EAP requests for the same realm go to another server? I apologize if this is trivial or allready answered! - Erling -- ----------------|sig|--- Erling.Paulsen(a)cc.uit.no Nettseksjonen, ITavd UiT

2 1

clash between group LDAP
by Rohaizam Abu Bakar 21 Jul '05

21 Jul '05

Dear all, I've LDAP tree structure as below, to seperate ADSL & DIALUP. But encounter one problem.. when userA = userB, LDAP will found userA's account although userB that actually login. This maybe due to DEFAULT sequence in users file. Any idea to solve this ? thanks.. ou=AAA | | ---------------------------------- | | ou=ADSL ou=DIALUP dn: uid=userA,ou=ADSL,ou=AAA ... dn: uid=userB,ou=DIALUP,ou=AAA.... serviceflag: ADSL serviceflag: DIALUP Users: ==== DEFAULT ldapadsl-Ldap-Group == "ADSL", Autz-Type := ADSL, Auth-Type := ADSL DEFAULT ldapdialup-Ldap-Group == "DIALUP", Autz-Type := DIALUP, Auth-Type := DIALUP radiusd.conf ======== ldap ldapadsl { basedn = "ou=ADSL,ou=AAA,ou=People,dc=jaring,dc=my" groupname_attribute = serviceflag } ldap ldapdialup { basedn = "ou=DIALUP,ou=AAA,ou=People,dc=jaring,dc=my" groupname_attribute = serviceflag authorize { Autz-Type ADSL { ldapadsl } Autz-Type DIALUP { ldapdialup } } authenticate { Auth-Type ADSL { ldapadsl } Auth-Type DIALUP { ldapdialup } }

2 1

RE: [FreeRADIUS and PPPd] How to limit the bandwidth?
by Sebastian Mauer 21 Jul '05

21 Jul '05

freeradius-users-bounces(a)lists.freeradius.org wrote: > Dnia czwartek, 21 lipca 2005 13:36, Sebastian Mauer napisał: >> Hello there, >> >> I'm currently setting up FreeRADIUS as authentication/authorization >> backend for a PPPoE Server running with the ppp Daemon. I've managed >> to get the ppp Daemon to work with my working FreeRADIUS 1.0.3 Server >> but now have to solve another problem. Is it possible to limit the >> bandwidth the ppp channel allocated via an attribute in FreeRADIUS? >> >> Or has someone another Idea how to manage a bandwidth cap? > > What kind of OS this PPPoE server is running? The Server is running on Linux (Debian 3.1 Sarge/stable) > > If it is Linux/*BSD you can execute commands on session initialization > ( /etc/ppp/if-up or something like that ). Just put some tc/altq/ipfw > commands there... > > btw: Search for "WARTA project" on google ;) Hello there, thanks for the Info I will gather Information about WARTA and iproute2. But another problem should be that I have to control the bandwidth limits individually for each user logging into the pppoe-server. Sincerely, Sebastian Mauer

2 1

Fwd: Re: [FreeRADIUS and PPPd] How to limit the bandwidth?
by Charles Price 21 Jul '05

21 Jul '05

---------- Forwarded Message ---------- Subject: Re: [FreeRADIUS and PPPd] How to limit the bandwidth? Date: Thursday 21 Jul 2005 14:02 From: Charles Price <charlie.price(a)w3z.co.uk> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> > I'm currently setting up FreeRADIUS as authentication/authorization backend > for a PPPoE Server running with the ppp Daemon. I've managed to get the ppp > Daemon to work with my working FreeRADIUS 1.0.3 Server but now have to > solve another problem. Is it possible to limit the bandwidth the ppp > channel allocated via an attribute in FreeRADIUS? I use two Vendor Specific Atrributes (Bw-Up and Bw-Down - you need to edit the dictionary files on both RADIUS server and PPPoE Concentrator) so that RADIUS can manage bandwidth resources. Once this is set up you can use the radattr plugin for pppd, which writes all the received RADIUS attributes to /var/run/radattr.pppX - you can read this from /etc/ppp/ip-up and use the data with tc to create bandwidth limited PPP tunnels. I found that routing all traffic through an IMQ ( http://www.linuximq.org ) rather than on a ppp interface speeds things up a lot. HTH Charlie Price -------------------------------------------------------

1 0

[FreeRADIUS and PPPd] How to limit the bandwidth?
by Sebastian Mauer 21 Jul '05

21 Jul '05

Hello there, I'm currently setting up FreeRADIUS as authentication/authorization backend for a PPPoE Server running with the ppp Daemon. I've managed to get the ppp Daemon to work with my working FreeRADIUS 1.0.3 Server but now have to solve another problem. Is it possible to limit the bandwidth the ppp channel allocated via an attribute in FreeRADIUS? Or has someone another Idea how to manage a bandwidth cap? Sincerely, Sebastian Mauer

2 1

AW: Multiple Appearing of the same Attribute & variables
by Metz, Frederic 21 Jul '05

21 Jul '05

Hi, thank you Alan. While compiling the actual CVS (and also CVS nightly snapshot) there was a compile error in rlm_sql.c with the funcion call if (!client_add(mainconfig.client_trees, c)) { client_free(c); return -1; } You can see that client_add(..) expects RADCLIENT_LIST* as the first parameter, so this should look like this I think, right ? : if (!client_add(mainconfig.clients, c)) { client_free(c); return -1; } Frederic-Philippe Metz -----Ursprüngliche Nachricht----- Von: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] Im Auftrag von Alan DeKok Gesendet: Mittwoch, 20. Juli 2005 18:27 An: FreeRadius users mailing list Betreff: Re: Multiple Appearing of the same Attribute & variables "Metz, Frederic" <Frederic.Metz(a)t-com.net> wrote: > I have a Radius Packet with one Vendor Specific Attribute coming > twice in that packet. Since I am writing the information into Mysql > database, I wanted to know how to address the first and the second ? > I saw that %{Attribute[index]} should work, but it doesn't. The > entry (seen in Debug mode) is empty. I am using Radius 1.0.4. What's > wrong with my conf ? The problem is not your configuration. The problem is that the syntax you quoted is valid only in the current CVS snapshot, not in 1.0.4. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0