- Freeradius-Users - lists.freeradius.org

RE: snmp and freeradius restart
by Tariq Rashid 23 Jun '05

23 Jun '05

correction - there's no need to restart snmpd - to summarise the problem again: * -HUP to freeradius causes problem to SMUX/snmpd * stop then start (kill) work fine since a fresh connection is re-established. i suspect that the connection is that a new connection is not estanlished after a -HUP signal. tariq -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]On Behalf Of Tariq Rashid Sent: 23 June 2005 14:38 To: 'FreeRadius users mailing list' Subject: snmp and freeradius restart hi - we're successfully using snmp to monitor the freeradius statistics. however - when freeradius is restarted with HUP signal, the snmp connection doesn't work. i'm not too familair with snmp/smuc but i'm guessing freeradius is not reconnecting to snmpd? to solve this we have to restart snmpd before freeradius. is this a known issue? t - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

stressing freeradius
by Lucas Aimaretto 23 Jun '05

23 Jun '05

Hi all, I'm willing to know how does my radius behave under high load requirements. Any body knows which application to use ? I'd like to control the "stressing" in such I way I can decide the amount of request I'm sending to the radius server. For example: - 1st minute: 200 requests - 2dn minute: 250 requests In that way I can find out how many requests my radius can answer per minute. Best regards, Lucas -- No virus found in this outgoing message. Checked by AVG Anti-Virus. Version: 7.0.323 / Virus Database: 267.7.11/26 - Release Date: 22/06/2005

2 1

snmp and freeradius restart
by Tariq Rashid 23 Jun '05

23 Jun '05

hi - we're successfully using snmp to monitor the freeradius statistics. however - when freeradius is restarted with HUP signal, the snmp connection doesn't work. i'm not too familair with snmp/smuc but i'm guessing freeradius is not reconnecting to snmpd? to solve this we have to restart snmpd before freeradius. is this a known issue? t

2 1

Wildcard Login
by Hassan Wahid 23 Jun '05

23 Jun '05

Hello I was wondering if there was a way to allow wildcards for logins. For example, *(a)company.com? Rather than adding thousands of users in the users file. This is only for a test environment. I have looked through the users file and older archives but not come accross a way to do this. Any help would be greatly appreciated. Thanks

4 4

mysqld.sock path problem
by rashad 23 Jun '05

23 Jun '05

>/var/run/mysqld/mysqld.sock is the usual location of that socket. Every >program that wants to connect to mysqld through socket will per default >use that one. I dunno why you set mysql to place the socket to /tmp/mysqld.sock. It's not my choice. Latest MySQL binary distribution ver. 4.1.12 uses /tmp/mysqld.sock as a default in all configuration files. Also in my old freeradius 1.0.2 installation also uses /tmp/mysqld.sock >What u could try is to set a symlink pointing to /tmp/mysqld.sock at /var/run/mysqld/mysqld.sock as workaround. I solved problem changing sock pid file path in /etc/my.cnf. I think the same must be configurable in freeradius.

2 1

CA.all Error
by Michael Langer 23 Jun '05

23 Jun '05

Hi, i use the script Ca.all for creating certificates. The first certificate going well, because this is the first one the TXT_DB file is created. But after the second one is created i get : failed to update database. Soneone know why? System: Debian/Sarge , Freeradius 1.0.4, CA.all script Error: Certificate is to be certified until Jun 23 13:00:38 2006 GMT (365 days) Sign the certificate? [y/n]:y failed to update database TXT_DB error number 2 + openssl pkcs12 -export -in newcert.pem -inkey newreq.pem -out cert-srv.p12 -clcerts -passin pass:xxx -passout pass:xxx No certificate matches private key + openssl pkcs12 -in cert-srv.p12 -out cert-srv.pem -passin pass:xxx -passout pass:xxx 24913:error:0D07207B:asn1 encoding routines:ASN1_get_object:header too long:asn1_lib.c:140: + openssl x509 -inform PEM -outform DER -in cert-srv.pem -out cert-srv.der unable to load certificate 24914:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:637:Expecting: TRUSTED CERTIFICATE + echo -e '\n\t\t##################\n' Thx Michael

1 0

mysql submodule problem
by rashad 23 Jun '05

23 Jun '05

problem was here: > checking for mysql/mysql.h... yes > checking for mysql_init in -lmysqlclient... no > configure: warning: mysql libraries not found. When freeradius installation process can't find mysqlclient he thinks that libraries are missing (these are different things). Installing libmysqlclient10 package solved the problem

1 0

mysqld.sock path problem
by rashad 23 Jun '05

23 Jun '05

freeradius can't connect to mysqld due to incorrect mysqld.sock path. rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through socket '/var/run/mysqld/mysqld.sock' (2)' rlm_sql (sql): Failed to connect DB handle #0 Actual path is /tmp/mysqld.sock. Can I change path to mysqld.sock in freeradius?

3 2

User-Name missing
by vicky 23 Jun '05

23 Jun '05

Hi all! I execute an external script as soon as I get an Access- or an Accounting-Request. The scripts collects (from the environment variables) all the attributes received and writes them to a Database. I encountered a problem recently. The attribute User-Name is missing (its value equals NULL) for the Accounting-Requests but it is there in the Access-Requests. I find this strange that the User-Name attribute is sent with certain package types and not with others. My server is a freeRADIUS 1.0.3. Thanks for any contributions to solving this problem! -- Vicky

2 2

A question about Response-Packet-Type Attribute
by Oleg Kravtsov 23 Jun '05

23 Jun '05

Hi everybody, I use FreeRADIUS 1.0.2 and I'm experiensing a problem with $subj attribute usage. I would like to tune RADIUS Server so that it sends particular set of RADIUS attributes depending on the outgoing packet type (Challenge or Accept). For that task I've been using Response-Packet-Type attribute in "users" configuration file. My "users" configuration file looks as: "test_user" User-Password == "test pass", Response-Packet-Type == Access-Challenge Proxy-State = "Challenge" "test_user" User-Password == "test pass", Response-Packet-Type == Access-Accept Proxy-State = "Accept" But this does not work, I see that "Response-Packet-Type" attribute equals to "0" at the checking phase. I induce that because the following rune works in my envirounment: test_user User-Password == "test pass", Response-Packet-Type == 0 Proxy-State = "With response 0" Note that here "Proxy-State" attribute used just for testing purposes. Then I decided to change "users" configuration file as follows: "test_user" User-Password == "test pass" Fall-Through = Yes "test_user" Response-Packet-Type == Access-Challenge Proxy-State = "Challenge" "test_user" Response-Packet-Type == Access-Accept Proxy-State = "Accept" But still I did not get desired behaviour. Looking at configuration files I found that there is "post-auth" section in radiusd.conf configuration file, but I'm not sure that it suits for me. Please, could you tell me what should I do to solve my problem. Thank you, Oleg.

2 5