- Freeradius-Users - lists.freeradius.org

Re: Vendor specific attributes, tags
by Metz, Frederic 07 Jun '05

07 Jun '05

Hi, so Alan, one more question: what is non-standard ?? maybe there was a misunderstanding. I have a usual vendor specific attribute, but in the beginning of the "String" field there is a tag of 1 byte. Isn't it right that you can put anything in the "string" field in case of vendor specific attributes, thats the argument of the vendor, which also delivers the Radius-Server :-) but we want to use freeRadius. Another argument of the vendor is that our Radius-Server (freeRadius) isn't able to understand vendor-specific attributes with tagged fields. I am quite a bit confused now. So this attribute is conform to the RFC?, but the credentials are in proprietary format, right ?? Thanks a lot. Frederic -----Ursprungliche Nachricht----- Von: freeradius-users-admin(a)lists.freeradius.org [mailto:freeradius-users-admin@lists.freeradius.org]Im Auftrag von Alan DeKok Gesendet: Freitag, 13. Mai 2005 18:30 An: freeradius-users(a)lists.freeradius.org Betreff: Re: Vendor specific attributes, tags "Metz, Frederic" <Frederic.Metz(a)t-com.net> wrote: > I have a Vendor specific Radius attribute which is tagged with one byte > in the beginning of the value field in the attribute. That's pretty non-standard. > So when I have a vendor specific tagged attribute which comes > i.e. twice in a Radius-Packet, I want to bring the data of the > attribute with tag 1 into field 1 and with tag 2 into field 2 in mysql. > But Sql.conf has only one variable (%{Attribute}) for that. I didn't > find any spec which allows vendor specific tagging. Can someone help me I've never heard of this before, which is why there's no support for it in the server. i.e. You're the first person to ask for this. My suggestion is code modifications to convert the VSA into a more standard format. There's really no simple way to do it without writing C code. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

make install error in Solaris 8, freeradius-1.0.3
by lei chen 07 Jun '05

07 Jun '05

After make, when running "make install",the flowing error. freeradius-1.0.3,Solaris 8, binutils-2.11.2 How to do with it? ---------------------------------------------------------------------- make[6]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3/src/modules/rl m_checkval' make[5]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3/src/modules' make[4]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3/src/modules' Making install in main... make[4]: Entering directory `/export/home/cl/inst/freeradius-1.0.3/src/main' /export/home/cl/inst/freeradius-1.0.3/libtool --mode=install /export/home/cl/ins t/freeradius-1.0.3/install-sh -c -m 755 -s radiusd /export/home/cl/fr/sbin /export/home/cl/inst/freeradius-1.0.3/install-sh -c -m 755 -s .libs/radiusd /exp ort/home/cl/fr/sbin/radiusd BFD: /export/home/cl/fr/sbin/stSAaqfc: warning: allocated section `.interp' not in segment /export/home/cl/inst/freeradius-1.0.3/install-sh -c -m 755 -s radwho /export/ home/cl/fr/bin strip: /export/home/cl/fr/bin/#inst.1071#: File format not recognized make[4]: *** [install] Error 1 make[4]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3/src/main' make[3]: *** [common] Error 2 make[3]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3/src' make[2]: *** [install] Error 2 make[2]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3/src' make[1]: *** [common] Error 2 make[1]: Leaving directory `/export/home/cl/inst/freeradius-1.0.3' make: *** [install] Error 2 ___________________________________________________________ 雅虎免费G邮箱－中国第一绝无垃圾邮件骚扰超大邮箱 http://cn.mail.yahoo.com/?id=77071

7 10

Question regarding SSH connection resets when auth via pam radius
by Josh Blender 07 Jun '05

07 Jun '05

Hi, any help with this issue would be greatly appreciated: I have pam_radius_auth configured on redhat enterprise (just for "sshd" and "login"), and the authentication is working properly. Unfortunately, when I log in via SSH, after some time (fairly brief), the connection simply terminates. I get no errors, and I have perused the pertinent logs, and I see absolutely NO indication that there is a problem. I did a sniffer trace, and it is the server side of the SSH connection that actually terminates it. The TCP connection is terminated gracefully with a TCP FIN sent by the server. I can't decode the SSH data further to determine if there is an error in the SSH protocol. It seems that the connection reset happens after a certain amount of data is passed, rather than an amount of time. I find it hard to believe that the RADIUS authentication would have any effect on encyrption key exchanges or anything like that, but I do not have this problem when I log in with an account that is NOT configured in RADIUS (also I remove the line in /etc/pam.d/login) At this point, I have no idea where to move forward with my troubleshooting efforts. Any ideas?

1 0

Installing freeradius 1.0.3
by Software Development Group 07 Jun '05

07 Jun '05

Hello, I am trying to install freeradius 1.0.3 in a machine running Linux ubuntu hoary OS. My questions are: 1. Will the following procedure work? tar xzf ~/freeradius-1.0.3.tar.gz cd freeradius-1.0.3 fakeroot dpkg-buildpackage -b sudo dpkg -i ../freeradius_1.0.3-0_i386.deb 2. Do I have to make any changes due to the fact that (i) I am using ubuntu (Debian) or that (ii) I will be using MySQL modules? Thanks, Max

1 0

Trouble installing 1.0.3
by Nicolas Ross 07 Jun '05

07 Jun '05

When I install 1.0.3, I get at the end : /var/dev/freeradius-1.0.3/install-sh -c -m 755 -s radwho /usr/local/bin strip: /usr/local/bin/#inst.22560#: File format not recognized gmake[4]: *** [install] Error 1 (...) My configure line is simply ./configure. I am on RH Linux 7.3, plain kernel 2.4.24. But all the rest seems ok. Is this critical ? Nicolas

2 2

Re: Re: Ip pool doesn't works properly
by Simone Giovanardi 07 Jun '05

07 Jun '05

> Hi, > > How can I configure FreeRADIUS to assign IP address dinamically with Ip > Pool when there is a successful authentication from Cisco 7200 access > server with FreeRADIUS 1.0.0? > > Like this it works sending out only 2 ip address...always the same... Is your Cisco sending a unique nasport/nasip for each client? Ip pool uses the nasip/nasport to identify the user. YES FROM LOGS SHOWED BELOW, IT SENDS OUT THE SAME TWO ADDRESS AND DOESN'T KEEP ANYONE ENTRY IN YOUR DATABASE .IPPOOL (VIEWED WITH rlm_ippool_tool -a ...) run radiusd -X and have several users establish a connection. Post the output here if you can't decifer it. rad_recv: Access-Request packet from host 83.216.176.254:21661, id=219, length=95 Framed-Protocol = PPP User-Name = "font0001@" CHAP-Password = 0x01af73ef6670b0a4a65130cb133a902c2f NAS-Port-Type = Virtual NAS-Port = 0 Service-Type = Framed-User NAS-IP-Address = 83.216.176.254 rad_lowerpair: User-Name now 'font0001@' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 13 modcall[authorize]: module "preprocess" returns ok for request 13 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /freera d100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607 modcall[authorize]: module "auth_log" returns ok for request 13 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 13 modcall[authorize]: module "mschap" returns noop for request 13 rlm_realm: No '/' in User-Name = "font0001@", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 13 rlm_realm: Looking up realm "@" for User-Name = "font0001@" rlm_realm: No such realm "@" modcall[authorize]: module "suffix" returns noop for request 13 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 13 modcall[authorize]: module "files" returns notfound for request 13 radius_xlat: 'font0001@' rlm_sql (sql): sql_set_user escaped user --> 'font0001@' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'font0001(a)whdsl.satco m.it' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Valu e,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'font0001@' AN D usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'font0001(a)whdsl.satco m.it' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Valu e,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'font0001@' AN D usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns ok for request 13 modcall: group authorize returns ok for request 13 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied CHAP-Password matches local User-Password Login OK: [font0001@/<CHAP-Password>] (from client Telecom-BRAS1-3 port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 13 modcall[post-auth]: module "main_pool" returns noop for request 13 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Found a stale entry for ip/port: 83.216.178.213/0 rlm_ippool: num: 0 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Allocating ip to nas/port: 83.216.176.254/0 rlm_ippool: num: 1 rlm_ippool: Allocated ip 83.216.178.190 to client on nas 83.216.176.254,port 0 modcall[post-auth]: module "whsitt_pool" returns ok for request 13 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /freer ad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607 modcall[post-auth]: module "reply_log" returns ok for request 13 rlm_sql (sql): Processing sql_postauth radius_xlat: 'font0001@' rlm_sql (sql): sql_set_user escaped user --> 'font0001@' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'font0001(a)whdsl.satcom.i t', 'Chap-Password', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'font0001@', 'Chap-Password', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 3 rlm_sql (sql): Released sql socket id: 3 modcall[post-auth]: module "sql" returns ok for request 13 modcall: group post-auth returns ok for request 13 Sending Access-Accept of id 219 to 83.216.176.254:21661 Framed-IP-Netmask = 255.255.255.255 Service-Type = Framed-User Framed-Protocol = PPP Ascend-Client-Primary-DNS = 62.94.0.1 Ascend-Client-Secondary-DNS = 83.216.172.1 Framed-IP-Address = 83.216.178.190 Finished request 13 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 13 ID 219 with timestamp 42a5701c Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 83.216.176.254:21661, id=220, length=95 Framed-Protocol = PPP User-Name = "font0001@" CHAP-Password = 0x01852ebbe42598a17861fa2b06de488ff7 NAS-Port-Type = Virtual NAS-Port = 0 Service-Type = Framed-User NAS-IP-Address = 83.216.176.254 rad_lowerpair: User-Name now 'font0001@' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 15 modcall[authorize]: module "preprocess" returns ok for request 15 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /freera d100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607 modcall[authorize]: module "auth_log" returns ok for request 15 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 15 modcall[authorize]: module "mschap" returns noop for request 15 rlm_realm: No '/' in User-Name = "font0001@", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 15 rlm_realm: Looking up realm "@" for User-Name = "font0001@" rlm_realm: No such realm "@" modcall[authorize]: module "suffix" returns noop for request 15 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 15 modcall[authorize]: module "files" returns notfound for request 15 radius_xlat: 'font0001@' rlm_sql (sql): sql_set_user escaped user --> 'font0001@' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'font0001(a)whdsl.satco m.it' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 1 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Valu e,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'font0001@' AN D usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'font0001(a)whdsl.satco m.it' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Valu e,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'font0001@' AN D usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 15 modcall: group authorize returns ok for request 15 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied CHAP-Password matches local User-Password Login OK: [font0001@/<CHAP-Password>] (from client Telecom-BRAS1-3 port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 15 modcall[post-auth]: module "main_pool" returns noop for request 15 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Found a stale entry for ip/port: 83.216.178.190/0 rlm_ippool: num: 0 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Allocating ip to nas/port: 83.216.176.254/0 rlm_ippool: num: 1 rlm_ippool: Allocated ip 83.216.178.213 to client on nas 83.216.176.254,port 0 modcall[post-auth]: module "whsitt_pool" returns ok for request 15 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /freer ad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607 modcall[post-auth]: module "reply_log" returns ok for request 15 rlm_sql (sql): Processing sql_postauth radius_xlat: 'font0001@' rlm_sql (sql): sql_set_user escaped user --> 'font0001@' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'font0001(a)whdsl.satcom.i t', 'Chap-Password', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'font0001@', 'Chap-Password', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 0 rlm_sql (sql): Released sql socket id: 0 modcall[post-auth]: module "sql" returns ok for request 15 modcall: group post-auth returns ok for request 15 Sending Access-Accept of id 220 to 83.216.176.254:21661 Framed-IP-Netmask = 255.255.255.255 Service-Type = Framed-User Framed-Protocol = PPP Ascend-Client-Primary-DNS = 62.94.0.1 Ascend-Client-Secondary-DNS = 83.216.172.1 Framed-IP-Address = 83.216.178.213 Finished request 15 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 15 ID 220 with timestamp 42a5706e Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 83.216.176.254:21661, id=226, length=80 Framed-Protocol = PPP User-Name = "satc0002@" CHAP-Password = 0x0193da4f830e1c9dfa12364d6122880c8f NAS-Port-Type = Virtual NAS-Port = 0 Service-Type = Framed-User NAS-IP-Address = 83.216.176.254 rad_lowerpair: User-Name now 'satc0002@' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 24 modcall[authorize]: module "preprocess" returns ok for request 24 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /freera d100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607 modcall[authorize]: module "auth_log" returns ok for request 24 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 24 modcall[authorize]: module "mschap" returns noop for request 24 rlm_realm: No '/' in User-Name = "satc0002@", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 24 rlm_realm: Looking up realm "" for User-Name = "satc0002@" rlm_realm: No such realm "" modcall[authorize]: module "suffix" returns noop for request 24 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 24 modcall[authorize]: module "files" returns notfound for request 24 radius_xlat: 'satc0002@' rlm_sql (sql): sql_set_user escaped user --> 'satc0002@' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'satc0002@' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 1 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Valu e,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'satc0002@' AND usergroup.Gro upName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'satc0002@' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Valu e,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'satc0002@' AND usergroup.Gro upName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 1 modcall[authorize]: module "sql" returns ok for request 24 modcall: group authorize returns ok for request 24 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied CHAP-Password matches local User-Password Login OK: [satc0002@/<CHAP-Password>] (from client Telecom-BRAS1-3 port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 24 modcall[post-auth]: module "main_pool" returns noop for request 24 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Found a stale entry for ip/port: 83.216.178.213/0 rlm_ippool: num: 0 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Allocating ip to nas/port: 83.216.176.254/0 rlm_ippool: num: 1 rlm_ippool: Allocated ip 83.216.178.190 to client on nas 83.216.176.254,port 0 modcall[post-auth]: module "whsitt_pool" returns ok for request 24 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /freer ad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607 modcall[post-auth]: module "reply_log" returns ok for request 24 rlm_sql (sql): Processing sql_postauth radius_xlat: 'satc0002@' rlm_sql (sql): sql_set_user escaped user --> 'satc0002@' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'satc0002@', 'Chap-Passw ord', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'satc0002@', 'Chap-Password', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 0 rlm_sql (sql): Released sql socket id: 0 modcall[post-auth]: module "sql" returns ok for request 24 modcall: group post-auth returns ok for request 24 Sending Access-Accept of id 226 to 83.216.176.254:21661 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Netmask = 255.255.255.255 Ascend-Client-Primary-DNS = 62.94.0.1 Ascend-Client-Secondary-DNS = 83.216.172.1 Framed-IP-Address = 83.216.178.190 Finished request 24 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 24 ID 226 with timestamp 42a5710d Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet from host 83.216.176.254:21661, id=228, length=80 Framed-Protocol = PPP User-Name = "satc0002@" CHAP-Password = 0x01645acb50fb384b93e96e5f96ab0056a8 NAS-Port-Type = Virtual NAS-Port = 0 Service-Type = Framed-User NAS-IP-Address = 83.216.176.254 rad_lowerpair: User-Name now 'satc0002@' Processing the authorize section of radiusd.conf modcall: entering group authorize for request 27 modcall[authorize]: module "preprocess" returns ok for request 27 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /freera d100/var/log/radius/radacct/83.216.176.254/auth-detail-20050607 modcall[authorize]: module "auth_log" returns ok for request 27 rlm_chap: Setting 'Auth-Type := CHAP' modcall[authorize]: module "chap" returns ok for request 27 modcall[authorize]: module "mschap" returns noop for request 27 rlm_realm: No '/' in User-Name = "satc0002@", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "IPASS" returns noop for request 27 rlm_realm: Looking up realm "" for User-Name = "satc0002@" rlm_realm: No such realm "" modcall[authorize]: module "suffix" returns noop for request 27 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 27 modcall[authorize]: module "files" returns notfound for request 27 radius_xlat: 'satc0002@' rlm_sql (sql): sql_set_user escaped user --> 'satc0002@' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = 'satc0002@' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 2 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Valu e,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'satc0002@' AND usergroup.Gro upName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = 'satc0002@' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Valu e,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'satc0002@' AND usergroup.Gro upName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 2 modcall[authorize]: module "sql" returns ok for request 27 modcall: group authorize returns ok for request 27 rad_check_password: Found Auth-Type Local auth: type Local auth: user supplied CHAP-Password matches local User-Password Login OK: [satc0002@/<CHAP-Password>] (from client Telecom-BRAS1-3 port 0) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 27 modcall[post-auth]: module "main_pool" returns noop for request 27 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Found a stale entry for ip/port: 83.216.178.190/0 rlm_ippool: num: 0 rlm_ippool: Searching for an entry for nas/port: 83.216.176.254/0 rlm_ippool: Allocating ip to nas/port: 83.216.176.254/0 rlm_ippool: num: 1 rlm_ippool: Allocated ip 83.216.178.213 to client on nas 83.216.176.254,port 0 modcall[post-auth]: module "whsitt_pool" returns ok for request 27 radius_xlat: '/freerad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607' rlm_detail: /freerad100/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m%d expands to /freer ad100/var/log/radius/radacct/83.216.176.254/reply-detail-20050607 modcall[post-auth]: module "reply_log" returns ok for request 27 rlm_sql (sql): Processing sql_postauth radius_xlat: 'satc0002@' rlm_sql (sql): sql_set_user escaped user --> 'satc0002@' radius_xlat: 'INSERT into radpostauth (id, user, pass, reply, date) values ('', 'satc0002@', 'Chap-Passw ord', 'Access-Accept', NOW())' rlm_sql (sql) in sql_postauth: query is INSERT into radpostauth (id, user, pass, reply, date) values ('', 'satc0002@', 'Chap-Password', 'Access-Accept', NOW()) rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 modcall[post-auth]: module "sql" returns ok for request 27 modcall: group post-auth returns ok for request 27 Sending Access-Accept of id 228 to 83.216.176.254:21661 Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Netmask = 255.255.255.255 Ascend-Client-Primary-DNS = 62.94.0.1 Ascend-Client-Secondary-DNS = 83.216.172.1 Framed-IP-Address = 83.216.178.213 Finished request 27 Going to the next request THAT's ALL Thanks a lot

2 1

SASL bind for LDAP
by Ekkehard Burkon 07 Jun '05

07 Jun '05

Hi, could not find anything in the docs. I need to bind to a LDAP server (Apple Open Directory) using a certain SASL mechanism. Is this possible with freeradius 1.0.3, if yes how? If no what else can I do? I just need it for authentication. Thought about pam_ldap. Any experiences? Thanks Ekkehard --

1 0

passwords
by Dean Mumby 07 Jun '05

07 Jun '05

Hi all , firstly I installed 1.0.1-1 for centos 3.4 and then downloaded the latest 1.0.3 tar ball and installed dialup_admin. I am able to add users but when I test a password it always says failed. Is there a setting that I have missed somewhere that controls whether the pasword are crypt or not ? I intend to have all auth and acc configured in mysql. Secondly when I tried to compile 1.0.3 I also get the error that has been reported. I guess there will be an update sometime soon. Thirdly I rebuilt the srpm for centos in order to get the mysql , postgresql specific rpms I noticed that a number of patches are applied to freeradius , are these neccessary ? while I was rebuilding the rpm using the 1.0.3 tarball I noticed that some of the patches would not apply so i simply removed them. The spec file that comes with freeradius does not aply these patches. Regards Dean

2 3

Re: Authenticate to eDirectory
by carnold5＠nc.rr.com 07 Jun '05

07 Jun '05

Hello! Well, now i am completely confused..I have tried to install openldap2 before on sles9/oes-linux and last time edirectory did not start and i had to reinstall from scratch. And again, when selecting the dependencies before installing freeradius i get this: *openldap2 2.2.6-37.36 conflict conflicts with: NDSserv conflicts with openldap2 *Conflict resolution: do not install openldap2 -or- *remove all 4 conflicting packages: delete novstlog delete ndsimon delete novlembox delete ndsserv *ignore conflict and risk system inconsistencies At least 2 of these are key novell components. So, i did not install openldap2 or freeradius. Can someone explain how to make these 2 components work together? Hi, The documentation in: http://www.novell.com/documentation/edir_radius/index.html gives a list of dependencies for the freeRADIUS rpm. If you install these rpms(through yast) you should be able to install the freeradius rpm at: http://forge.novell.com/modules/xfcontent/downloads.php/edirfreeradius The latest version of FreeRADIUS is 1.0.3. You can get the source from freeRADIUS site(http://www.freeradius.org/getting.html). -Sayantan

2 1

error at end of make install
by lei chen 07 Jun '05

07 Jun '05

Hi,where can I find the fix? Thanks. "Thor Spruyt" <thor.spruyt at telenet.be> wrote: > I just ran a quick test on Centos 3.4 for freeradius-1.0.3. > Successfully did "./configure" and "make", but then just at the end of "make > install" there's an error. > Ok. The fix is pretty simple, I'll have a fix on Monday. >Alan DeKOk. ___________________________________________________________ 雅虎免费G邮箱－中国最强免费防毒反垃圾超大邮箱 http://cn.mail.yahoo.com/?id=77072

3 2