- Freeradius-Users - lists.freeradius.org

edir + cert problem
by garry crothers 18 Jul '05

18 Jul '05

freeradius 1.0.4 compiled with -edir support on Solaris 9. After configuring and running freeradius, I issue a query from the command line radtest VALID-USER VALID-USER-PASSOWRD localhost 389 testing123 I seem to be getting an error rlm_ldap: could not set LDAP_OPT_X_TLS_CACERTFILE option to /opt/sfw/etc/raddb/certs/barney.b64 I have checked that I have correctly exported the certificate from the novell server in question....and tried setting the premissions to 777 I have done a search of the online docs but cant find anything appropriate, anyone got any ideas... Here is the debug message from radiusd -X -f bash-2.05# clear You have new mail in /var/mail/root bash-2.05# radiusd -X -f Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded System unix: cache = no unix: passwd = "(null)" unix: shadow = "(null)" unix: group = "(null)" unix: radwtmp = "/usr/local/var/log/radius/radwtmp" unix: usegroup = no unix: cache_reload = 600 Module: Instantiated unix (unix) Module: Loaded LDAP ldap: server = "nds02.XXX.COM" ldap: port = 389 ldap: net_timeout = 1 ldap: timeout = 4 ldap: timelimit = 3 ldap: identity = "cn=admin" ldap: tls_mode = no ldap: start_tls = yes ldap: tls_cacertfile = "/opt/sfw/etc/raddb/certs/barney.b64" ldap: tls_cacertdir = "(null)" ldap: tls_certfile = "(null)" ldap: tls_keyfile = "(null)" ldap: tls_randfile = "(null)" ldap: tls_require_cert = "demand" ldap: password = "" ldap: basedn = "o=XXX,ou=Staff " ldap: filter = "(uid=%{Stripped-User-Name:-%{User-Name}})" ldap: base_filter = "(objectclass=radiusprofile)" ldap: default_profile = "(null)" ldap: profile_attribute = "(null)" ldap: password_header = "(null)" ldap: password_attribute = "nspmPassword" ldap: access_attr = "uid" ldap: groupname_attribute = "cn" ldap: groupmembership_filter = "(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember=%{Ldap-UserDn})))" ldap: groupmembership_attribute = "(null)" ldap: dictionary_mapping = "/usr/local/etc/raddb/ldap.attrmap" ldap: ldap_debug = 0 ldap: ldap_connections_number = 5 ldap: compare_check_items = no ldap: access_attr_used_for_allow = yes ldap: do_xlat = yes ldap: edir_account_policy_check = yes rlm_ldap: Registering ldap_groupcmp for Ldap-Group rlm_ldap: Registering ldap_xlat with xlat_name ldap rlm_ldap: reading ldap<->radius mappings from file /usr/local/etc/raddb/ldap.attrmap rlm_ldap: LDAP radiusCheckItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusReplyItem mapped to RADIUS $GENERIC$ rlm_ldap: LDAP radiusAuthType mapped to RADIUS Auth-Type rlm_ldap: LDAP radiusSimultaneousUse mapped to RADIUS Simultaneous-Use rlm_ldap: LDAP radiusCalledStationId mapped to RADIUS Called-Station-Id rlm_ldap: LDAP radiusCallingStationId mapped to RADIUS Calling-Station-Id rlm_ldap: LDAP lmPassword mapped to RADIUS LM-Password rlm_ldap: LDAP ntPassword mapped to RADIUS NT-Password rlm_ldap: LDAP acctFlags mapped to RADIUS SMB-Account-CTRL-TEXT rlm_ldap: LDAP radiusExpiration mapped to RADIUS Expiration rlm_ldap: LDAP radiusServiceType mapped to RADIUS Service-Type rlm_ldap: LDAP radiusFramedProtocol mapped to RADIUS Framed-Protocol rlm_ldap: LDAP radiusFramedIPAddress mapped to RADIUS Framed-IP-Address rlm_ldap: LDAP radiusFramedIPNetmask mapped to RADIUS Framed-IP-Netmask rlm_ldap: LDAP radiusFramedRoute mapped to RADIUS Framed-Route rlm_ldap: LDAP radiusFramedRouting mapped to RADIUS Framed-Routing rlm_ldap: LDAP radiusFilterId mapped to RADIUS Filter-Id rlm_ldap: LDAP radiusFramedMTU mapped to RADIUS Framed-MTU rlm_ldap: LDAP radiusFramedCompression mapped to RADIUS Framed-Compression rlm_ldap: LDAP radiusLoginIPHost mapped to RADIUS Login-IP-Host rlm_ldap: LDAP radiusLoginService mapped to RADIUS Login-Service rlm_ldap: LDAP radiusLoginTCPPort mapped to RADIUS Login-TCP-Port rlm_ldap: LDAP radiusCallbackNumber mapped to RADIUS Callback-Number rlm_ldap: LDAP radiusCallbackId mapped to RADIUS Callback-Id rlm_ldap: LDAP radiusFramedIPXNetwork mapped to RADIUS Framed-IPX-Network rlm_ldap: LDAP radiusClass mapped to RADIUS Class rlm_ldap: LDAP radiusSessionTimeout mapped to RADIUS Session-Timeout rlm_ldap: LDAP radiusIdleTimeout mapped to RADIUS Idle-Timeout rlm_ldap: LDAP radiusTerminationAction mapped to RADIUS Termination-Action rlm_ldap: LDAP radiusLoginLATService mapped to RADIUS Login-LAT-Service rlm_ldap: LDAP radiusLoginLATNode mapped to RADIUS Login-LAT-Node rlm_ldap: LDAP radiusLoginLATGroup mapped to RADIUS Login-LAT-Group rlm_ldap: LDAP radiusFramedAppleTalkLink mapped to RADIUS Framed-AppleTalk-Link rlm_ldap: LDAP radiusFramedAppleTalkNetwork mapped to RADIUS Framed-AppleTalk-Network rlm_ldap: LDAP radiusFramedAppleTalkZone mapped to RADIUS Framed-AppleTalk-Zone rlm_ldap: LDAP radiusPortLimit mapped to RADIUS Port-Limit rlm_ldap: LDAP radiusLoginLATPort mapped to RADIUS Login-LAT-Port rlm_ldap: LDAP userPassword mapped to RADIUS User-Password rlm_ldap: LDAP sambaLMPassword mapped to RADIUS LM-Password rlm_ldap: LDAP sambaNTPassword mapped to RADIUS NT-Password rlm_ldap: LDAP radiusTunnelType mapped to RADIUS Tunnel-Type rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id conns: 104210 Module: Instantiated ldap (ldap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded files files: usersfile = "/usr/local/etc/raddb/users" files: acctusersfile = "/usr/local/etc/raddb/acct_users" files: preproxy_usersfile = "/usr/local/etc/raddb/preproxy_users" files: compat = "yes" Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Module: Loaded detail detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d" detail: detailperm = 384 detail: dirperm = 493 detail: locking = no Module: Instantiated detail (detail) Module: Loaded radutmp radutmp: filename = "/usr/local/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Listening on authentication *:1812 Listening on accounting *:1813 Listening on proxy *:1814 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 User-Name = "VALID-USER" User-Password = "VALID-USERS-PASSWORD" NAS-IP-Address = 255.255.255.255 NAS-Port = 389 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "gcrother", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 8 modcall[authorize]: module "files" returns ok for request 0 rlm_ldap: - authorize rlm_ldap: performing user authorization for gcrother radius_xlat: '(uid=VALID-USER)' radius_xlat: 'o=XXX,ou=Staff ' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to nds02.XXX.com:389, authentication 0 rlm_ldap: setting TLS CACert File to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: could not set LDAP_OPT_X_TLS_CACERTFILE option to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: setting TLS Require Cert to demand rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Success rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 0 modcall: group authorize returns fail for request 0 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 Discarding duplicate request from client localhost:34968 - ID: 195 --- Walking the entire request list --- Waking up in 2 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 195 with timestamp 42db7619 Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 User-Name = "VALID-USER" User-Password = "VALID-USER-PASSWORD" NAS-IP-Address = 255.255.255.255 NAS-Port = 389 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "gcrother", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 1 users: Matched entry DEFAULT at line 8 modcall[authorize]: module "files" returns ok for request 1 rlm_ldap: - authorize rlm_ldap: performing user authorization for gcrother radius_xlat: '(uid=VALID-USER)' radius_xlat: 'o=XXX,ou=Staff ' rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap: ldap_get_conn: Got Id: 0 rlm_ldap: attempting LDAP reconnection rlm_ldap: (re)connect to nds02.XXX.COM:389, authentication 0 rlm_ldap: setting TLS CACert File to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: could not set LDAP_OPT_X_TLS_CACERTFILE option to /opt/sfw/etc/raddb/certs/barney.b64 rlm_ldap: setting TLS Require Cert to demand rlm_ldap: starting TLS rlm_ldap: ldap_start_tls_s() rlm_ldap: could not start TLS Success rlm_ldap: (re)connection attempt failed rlm_ldap: search failed rlm_ldap: ldap_release_conn: Release Id: 0 modcall[authorize]: module "ldap" returns fail for request 1 modcall: group authorize returns fail for request 1 Finished request 1 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:34968, id=195, length=60 Discarding duplicate request from client localhost:34968 - ID: 195 --- Walking the entire request list --- Waking up in 3 seconds... ^C tia Garry Crothers -- Regards Garry Crothers

1 0

RE: ippool problem
by Jamal Taweel 17 Jul '05

17 Jul '05

I believe that he should use different file names of session-db, and ip-index for the two pools. May be he used the same file names for the two pools. Also he should delete them from ${raddbdir}/ before he start with creating the pools. -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of milver nisay Sent: Friday, July 15, 2005 10:44 AM To: 'FreeRadius users mailing list' Subject: RE: ippool problem What does radiusd –X tells you? Can you post more info from your accounting and post-auth section? _____ From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of abernabe(a)mutua-mad.es Sent: Friday, July 15, 2005 7:42 AM To: freeradius-users(a)lists.freeradius.org Subject: ippool problem Hello, I´m trying to configure a FreeRadius 1.0.4 in Red Hat 8.0. Everything works OK until I add the ippool in the "post-auth" and "accounting" section. When I start the server I get always the error "Segmentation Fault" after loading radutmp, just when it tries to load the ippool in the "accounting" section I have the following configuration in the ippool module: ippool 2 { range-start = 172.20.1.1 range-stop = 172.20.1.254 netmask = 255.255.255.0 cache-size = 254 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 0 } Do you know if I´m doing something wrong? Thanks ************************************************************************************* The contents of this email and any attachments are confidential. It is intended for the named recipient(s) only. If you have received this email in error please notify the system manager or the sender immediately and do not disclose the contents to any one or make copies. ************************************************************************************* PALTEL E-Safety System scanned this email and found NO viruses, vandals or malicious content. ************************************************************************************* Should you need any information or clarifications regarding this system, please do not hesitate to contact our team at the IP Dep. <esafety(a)paltel.net>. *************************************************************************************

1 0

DICTIONNARY PERMISSION - Please Help
by Aime 17 Jul '05

17 Jul '05

All, What can cause dictionry permissions even if /etc/freeradius/dictionnary has rwxrwxrwx as permissions setting I am getting the following: radclient: dict_init: Couldn't open dictionary "/etc/freeradius/dictionary": Permission denied The call of radclient is done from a cgi script . Apache running under user www-data, group www-data, and Freeradius running under user freerad/freerad Thanks. Thanks in advance. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 3

Re: Chillispot FreeRadius
by sean 17 Jul '05

17 Jul '05

On Fri, 2005-07-15 at 20:58 +0200, freeradius-users- request(a)lists.freeradius.org wrote: > > I have setup pinholes for both tcp and udp on ports 1812, 1813 and > 1814. > > They all point to the Radius server on 192.168.1.2. The Chillispot > on > > 192.168.1.6 can direct traffic to the CGI login but sends nothing to > > Radius. What I'm trying to understand is the sequence of events. > When > > the hospotlogin.cgi script gets a request from a Chillispot user > from > > the AP, does the cgi script initiate the Radius request? > > No, it's the chillispot server - not the cgi. Server is in case you > run chilli on the wlan-router the wlan-router, in case you ran chilli > on an linux-box the linux-server. I don't understand, Chilli is running on a WRT54G AP under DD-WRT and directing users to the login. What sends the Radius requests Chilli or the CGI script? This is what Chilli sends to the hotspotlogin.cgi script https://82.141.232.132/cgi-bin/hotspotlogin.cgi/? res=notyet&uamip=192.168.182.1&uamport=3990&challenge=1b23fb5583173741fcfcb91b7b4e5e7a&userurl=&nasid=nas01&mac=00-C0-49-5C-40-48 Radius gets no requests at all. The script just times out while waiting to login. 192.168.182.1 is the DSL modem which has been told to send traffic arriving on ports 1812, 1813, and 1814 to the Radius server. I have also opened port 3990 on the DSL modem to the Radius server. ie. DSL modem static ip 82.141.232.132. all traffic to 192.168.182.1 (82.141.232.132:1812) goes to 192.168.1.2:1812

3 2

segmentation fault
by avudz 16 Jul '05

16 Jul '05

Hello, i just installed freeradius-1.0.4 on MDK 10.1, each time i run the radius always appear "Segmentation fault", in instalation and configuration didn't display any error message. the weird again is radius running well with rpm format. any idea ? here is end of error radiusd -X sql: safe-characters = "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789.-_: /" Segmentation fault [root@radius freeradius-1.0.4]# ldd /usr/local/radius/sbin/radiusd linux-gate.so.1 => (0xffffe000) libcrypt.so.1 => /lib/libcrypt.so.1 (0x40023000) libradius-1.0.4.so => /usr/local/radius-bali/lib/libradius-1.0.4.so (0x40050000) libltdl.so.3 => /usr/local/lib/libltdl.so.3 (0x40064000) libdl.so.2 => /lib/libdl.so.2 (0x4006b000) libnsl.so.1 => /lib/libnsl.so.1 (0x4006e000) libresolv.so.2 => /lib/libresolv.so.2 (0x40081000) libpthread.so.0 => /lib/tls/libpthread.so.0 (0x40092000) libcrypto.so.0.9.7 => /usr/lib/libcrypto.so.0.9.7 (0x400a3000) libssl.so.0.9.7 => /usr/lib/libssl.so.0.9.7 (0x401a3000) libc.so.6 => /lib/tls/libc.so.6 (0x401d4000) /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0x40000000) [root@radius freeradius-1.0.4]# uname -a Linux radius 2.6.8.1-10mdk #1 Wed Sep 8 17:00:52 CEST 2004 i686 Intel(R) Pentium(R) 4 CPU 2.40GHz unknown GNU/Linux [root@radius freeradius-1.0.4]# gcc -v Reading specs from /usr/lib/gcc/i586-mandrake-linux-gnu/3.4.1/specs Configured with: ../configure --prefix=/usr --libdir=/usr/lib --with-slibdir=/lib --mandir=/usr/share/man --infodir=/usr/share/info --enable-shared --enable-threads=posix --disable-checking --enable-long-long --enable-__cxa_atexit --enable-clocale=gnu --disable-libunwind-exceptions --enable-languages=c,c++,ada,f77,objc,java --host=i586-mandrake-linux-gnu --with-system-zlib Thread model: posix gcc version 3.4.1 (Mandrakelinux 10.1 3.4.1-4mdk) -- Best regards, ./avd mailto:mahfudz@cyber-isp.net

2 4

Re: DICTIONNARY PERMISSION - Please Help
by Stefan.Neis＠t-online.de 16 Jul '05

16 Jul '05

Hi, > What can cause dictionry permissions even if > /etc/freeradius/dictionnary has rwxrwxrwx as > permissions setting > > I am getting the following: > > radclient: dict_init: Couldn't open dictionary > "/etc/freeradius/dictionary": Permission denied Check the permissions of /etc and /etc/freeradius. If you can't read or "execute" one of those directories that'll give that same error message. HTH, Stefan

1 0

Logging question
by Michel Bélanger 15 Jul '05

15 Jul '05

1 0

Re: FreeRadius Chillispot
by sean 15 Jul '05

15 Jul '05

On Fri, 2005-07-15 at 18:10 +0200, freeradius-users- request(a)lists.freeradius.org wrote: > > DSL Modem has pinholes set up directing traffic coming to the static > ip > > out to the same ports on 192.168.1.2 IE 82.141.232.132:1812 sent to > > 192.168.1.2:1812 > > This works fine for Kannel, Apache etc. > > Are the pinholes set up for TCP or UDP? I have setup pinholes for both tcp and udp on ports 1812, 1813 and 1814. They all point to the Radius server on 192.168.1.2. The Chillispot on 192.168.1.6 can direct traffic to the CGI login but sends nothing to Radius. What I'm trying to understand is the sequence of events. When the hospotlogin.cgi script gets a request from a Chillispot user from the AP, does the cgi script initiate the Radius request? If this is the case then the script is not sending a request to Radius. I really hope that this is where the problem is. The alternative is that Chilli is sending users to hotspologin on one port and sending something else on another port. This would explain why hotspot clients can get to the login page but Radius sees no requests. Once again thanks for your help. Regards Sean P.S Sorry that I forgot to change the subject line in the original post.

3 2

Re: Freeradius-Users Digest, Vol 3, Issue 15
by sean 15 Jul '05

15 Jul '05

Hi, I can now get Chillispot to reach the CGI login on my server. The application loads and runs, but times out while trying to process the login. FreeRadius isn't getting any requests from Chilli but does process local requests from radtest. This is the way my network is structured. DSL modem with static ip 82.141.232.132 running firewall and DHCP File server IP 192.168.1.2 from DHCP Running Apache, Kannel, Jabber, MySQL, PHP and FreeRadius DSL Modem has pinholes set up directing traffic coming to the static ip out to the same ports on 192.168.1.2 IE 82.141.232.132:1812 sent to 192.168.1.2:1812 This works fine for Kannel, Apache etc. Radius listens on 1812, 1813 and 1814 Chilli is running on WRT54G with DD-WRT on port 192.168.1.6 from DHCP with internal address 192.169.10.1 DHCP is switched off in DD-WRT and Chilli is assigning IP to wireless clients and directing them to the CGI login script on the file server. This loads fine but times out after entering user and password. Radius can't see any requests coming from Chilli, but processes requests from radtest on the fileserver. I suspect that the DSL modem firewall needs to have some other ports opened but I can't add any software to it so I can't run Ethereal. I hope I've explained clearly. Thanks for any advice you can give. Regards Sean http://topup.ie

3 2

AVPair question
by Andrey 15 Jul '05

15 Jul '05

Hey List, Quick question about AVPair. I have a Colubris Access Point which wants me to use the Colubris-AVPair attribute. The attribute is defined in a dictionary file, which is included in the main dictionary. This is what it looks like: # Colubris dictionary - dictionary.colubris # # Enable by putting the line "$INCLUDE dictionary.colubris" into # the main dictionary file. # # VENDOR Colubris 8744 # # Vendor-specific attributes # ATTRIBUTE Colubris-AVPair 0 string Colubris ATTRIBUTE Colubris-Intercept 1 integer Colubris When I try to authenticate, I get "unknown-vendor 8744, size 30 = '' " for my attributes dump. What am I missing? Is there a separate file for defining vendors? Any help appreciated. - Andrey

2 1