- Freeradius-Users - lists.freeradius.org

crash of freeradius 1.0.2
by Schweizer Laurent 06 Jun '05

06 Jun '05

Hello, i use freeradius with the jradius module and i have many crashes. Loaded symbols for /usr/local/lib/rlm_eap_mschapv2-1.0.2.so #0 0x40242ef1 in kill () from /lib/libc.so.6 (gdb) bt #0 0x40242ef1 in kill () from /lib/libc.so.6 #1 0x40081bb1 in pthread_kill () from /lib/libpthread.so.0 #2 0x40081f2b in raise () from /lib/libpthread.so.0 #3 0x40242b24 in raise () from /lib/libc.so.6 #4 0x402443fd in abort () from /lib/libc.so.6 #5 0x0804f5d2 in rad_assert_fail (file=0x806105f "request_list.c", line=470) at util.c:331 #6 0x08059c4f in rl_delete (request=0x815c3b8) at request_list.c:491 #7 0x0805a502 in refresh_request (request=0x815c3b8, data=0xbfffec40) at request_list.c:1048 #8 0x0805aaff in rl_clean_list (now=0) at request_list.c:1398 #9 0x0804d141 in main (argc=1, argv=0x0) at radiusd.c:1492 #0 0x40242ef1 in kill () from /lib/libc.so.6 (gdb) bt #0 0x40242ef1 in kill () from /lib/libc.so.6 #1 0x40081bb1 in pthread_kill () from /lib/libpthread.so.0 #2 0x40081f2b in raise () from /lib/libpthread.so.0 #3 0x40242b24 in raise () from /lib/libc.so.6 #4 0x402443fd in abort () from /lib/libc.so.6 #5 0x0804f5d2 in rad_assert_fail (file=0x806105f "request_list.c", line=1000) at util.c:331 #6 0x0805a489 in refresh_request (request=0x815b8a0, data=0xbfffec40) at request_list.c:1000 #7 0x0805a33e in rl_walk (walker=0x805a460 <refresh_request>, data=0xbfffec40) at request_list.c:895 #8 0x0805a96c in rl_clean_list (now=0) at request_list.c:1425 #9 0x0804d141 in main (argc=1, argv=0x0) at radiusd.c:1492 #0 0x40242ef1 in kill () from /lib/libc.so.6 (gdb) bt #0 0x40242ef1 in kill () from /lib/libc.so.6 #1 0x40081bb1 in pthread_kill () from /lib/libpthread.so.0 #2 0x40081f2b in raise () from /lib/libpthread.so.0 #3 0x40242b24 in raise () from /lib/libc.so.6 #4 0x402443fd in abort () from /lib/libc.so.6 #5 0x0804f5d2 in rad_assert_fail (file=0x806105f "request_list.c", line=1000) at util.c:331 #6 0x0805a489 in refresh_request (request=0x815a678, data=0xbfffec40) at request_list.c:1000 #7 0x0805a33e in rl_walk (walker=0x805a460 <refresh_request>, data=0xbfffec40) at request_list.c:895 #8 0x0805a96c in rl_clean_list (now=0) at request_list.c:1425 #9 0x0804d141 in main (argc=1, argv=0x0) at radiusd.c:1492 #0 0x40242ef1 in kill () from /lib/libc.so.6 #1 0x40081bb1 in pthread_kill () from /lib/libpthread.so.0 #2 0x40081f2b in raise () from /lib/libpthread.so.0 #3 0x40242b24 in raise () from /lib/libc.so.6 #4 0x402443fd in abort () from /lib/libc.so.6 #5 0x0804f5d2 in rad_assert_fail (file=0x806105f "request_list.c", line=1000) at util.c:331 #6 0x0805a489 in refresh_request (request=0x815b570, data=0xbfffec40) at request_list.c:1000 #7 0x0805a33e in rl_walk (walker=0x805a460 <refresh_request>, data=0xbfffec40) at request_list.c:895 #8 0x0805a96c in rl_clean_list (now=0) at request_list.c:1425 #9 0x0804d141 in main (argc=1, argv=0x0) at radiusd.c:1492 (gdb) #5 0x0804f5d2 in rad_assert_fail (file=0x806105f "request_list.c", line=470) at util.c:331 #6 0x08059c4f in rl_delete (request=0x815c3b8) at request_list.c:491 #7 0x0805a502 in refresh_request (request=0x815c3b8, data=0xbfffec40) at request_list.c:1048 #8 0x0805aaff in rl_clean_list (now=0) at request_list.c:1398 #9 0x0804d141 in main (argc=1, argv=0x0) at radiusd.c:1492

1 0

Dialupadmin
by Rupak 05 Jun '05

05 Jun '05

Hello all I want to install dialup admin for free radius 1.0.2.I am using free radius with mysql to authenticate my user's+accounting too.Now after installing dialup admin will it make any defect in my box. Thank You Rupak

1 0

How to secure PAM?
by David LePage 05 Jun '05

05 Jun '05

I know others have run into this scenario, and I'm curious how it has been resolved. I have users that may be in two different databases - either a remote database that utilizes RADIUS (pam_radius_auth.so), or a database that uses ldap (pam_ldap.so). On Linux, my pam.d/sshd looks like: auth sufficient /lib/security/pam_radius_auth.so auth required /lib/security/pam_ldap.so My problem is as follows... I have some users that should only authenticate to pam_ldap.so, and others that I want to enforce authentication at pam_radius_auth.so. How do I do it without allowing the users defined on the system, AND in ldap, to bypass the first module? What seems to make sense, is that the pam_radius_auth.so module has a flag to reject authentication IF the user exists on the local system, when the LDAP user accounts are stored remotely. It would have to check for the users existance, and not proceed to the next module. Setting this module to required doesnt work because some users only reside in LDAP and need to bounce down to the next module.. Any ideas? D __________________________________ Discover Yahoo! Have fun online with music videos, cool games, IM and more. Check it out! http://discover.yahoo.com/online.html

1 0

RE: FreeRADIUS 1.0.3 has been released
by Abdul Lateef 04 Jun '05

04 Jun '05

Thanx for new version of freeradius. It will be more easy if you can tell what are new features added in the new ver.? Thank You Abdul Lateef Kaplivastu Lumbini __________________________________ Discover Yahoo! Use Yahoo! to plan a weekend, have fun online and more. Check it out! http://discover.yahoo.com/

2 1

Re: ldap.attrmap problem
by pieter.hotting 04 Jun '05

04 Jun '05

> -----Oorspronkelijk bericht----- > Van: freeradius-users-bounces(a)lists.freeradius.org > [mailto:freeradius-users-bounces@lists.freeradius.org] > Namens Alan DeKok > Verzonden: donderdag 2 juni 2005 23:47 > Aan: FreeRadius users mailing list > Onderwerp: Re: ldap.attrmap problem > > "pieter.hotting" <pieter.hotting(a)hetnet.nl> wrote: >> When I look at a datascope to the interaction between FreeRadius and >> eDirectory I see correctly the response: >> >> rADIUSDialAccessGroup-->cn=E_VPN_Clients_1,ou=RmtAcc,ou=SERVICES,o=AN. >> However if I look at the output of radius I see: >> rlm_ldap: looking for reply items in directory... >> rlm_ldap: Adding rADIUSDialAccessGroup as CVPN-3k-Groups, >> value cn & op=11 >> >> This tells me that for some reason the response is stripped at the '=' >> sign. >> >> Can anyone point me in the right direction what I'm doing wrong? > The LDAP module looks in the contents of the returned data to > determine the operator. You can force it to use a particular operator > by adding an extra field to ldap.attrmap: > > replyItem CVPN-3k-Groups rADIUSDialAccessGroup += > > This only works in the CVS snapshot, though. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? > See http://www.freeradius.org/list/users.html Thanks for the response. I tested with the CVS snapshot and modified ldap.attrmap. However I could not get it to work. Freeradius kept sending just "cn" as a response to the VPN server instead of the full string which Freeradius received from the ldap-server. However you pointed me in the right direction. I made a "quick an dirty" change in rlm_ldap.c. I changed the procedure ldap_pairget. The parameter "value" is the stripped version of what ldap returned. The parameter vals[0] is containing the original string. I just replaced value by vals[0] and it is working. Below you can see the changes I applied. The original code is commented out by /* */: DEBUG("rlm_ldap: Adding LDAP attribute %s as RADIUS attribute %s %s %s", element->attr, element->radius_attr, /* lrad_int2str(tokens, token, "?"), value); */ lrad_int2str(tokens, token, "?"), vals[0]); /* if ((newpair = pairmake(element->radius_attr, value, token)) == NULL) */ if ((newpair = pairmake(element->radius_attr, vals[0], token)) == NULL) If there is a beter more elegant way to solve this problem, please let me know. Thanks, Pieter

1 0

No Calling-Station-Id in Auth-Request
by open source 04 Jun '05

04 Jun '05

hey guys I have been trying to authenticate user based on mac-address. But the problem is my pppd is not sending the mac address of clients in it's Auth-Request. I'm using following softwares: (i) rp-ppoe (ii) pppd-2.4.1 (iii) ppp-2.4.1-vanilla-radclient-v2.1.patch (iv) freeradius-1.0.2 Can anyone tell me how to send the mac-address of the client in the Auth-Request as Calling-Station_Id or anyother attribute/value pair. Thanks in advance Open

2 1

No Calling-Station-Id in Auth-Request
by open source 04 Jun '05

04 Jun '05

hey guys I have been trying to authenticate user based on mac-address. But the problem is my pppd is not sending the mac address of clients in it's Auth-Request. I'm using following softwares: (i) rp-ppoe (ii) pppd-2.4.1 (iii) ppp-2.4.1-vanilla-radclient-v2.1.patch (iv) freeradius-1.0.2 Can anyone tell me how to send the mac-address of the client in the Auth-Request as Calling-Station_Id or anyother attribute/value pair. Thanks in advance Open

1 0

error at end of make install
by Thor Spruyt 04 Jun '05

04 Jun '05

Hi, I just ran a quick test on Centos 3.4 for freeradius-1.0.3. Successfully did "./configure" and "make", but then just at the end of "make install" there's an error. Making install in main... gmake[4]: Entering directory `/home/thor/freeradius-1.0.3/src/main' /home/thor/freeradius-1.0.3/libtool --mode=install /home/thor/freeradius-1.0.3/install-sh -c -m 755 -s radiusd /opt/freeradius-1.0.3/sbin /home/thor/freeradius-1.0.3/install-sh -c -m 755 -s .libs/radiusd /opt/freeradius-1.0.3/sbin/radiusd /home/thor/freeradius-1.0.3/install-sh -c -m 755 -s radwho /opt/freeradius-1.0.3/bin strip: /opt/freeradius-1.0.3/bin/#inst.3617#: File format not recognized gmake[4]: *** [install] Error 1 gmake[4]: Leaving directory `/home/thor/freeradius-1.0.3/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/home/thor/freeradius-1.0.3/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/home/thor/freeradius-1.0.3/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/home/thor/freeradius-1.0.3' make: *** [install] Error 2 -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: thor.spruyt(a)telenet.be W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be

2 1

FreeRADIUS 1.0.3 has been released
by Alan DeKok 03 Jun '05

03 Jun '05

We have released version 1.0.3 of FreeRADIUS. ftp://ftp.freeradius.org/pub/radius/freeradius-1.0.3.tar.gz ftp://ftp.freeradius.org/pub/radius/freeradius-1.0.3.tar.gz.sig Changelog: * Return EAP-Fail in Access-Reject, rather than an empty Access-Reject * Escape more strings in rlm_sql. See http://www.freeradius.org/security.html * Don't send Proxy-State from home server in TTLS. * Fixes for forking external programs, so the server doesn't suddenly stop processing requests, or stop forking programs. * radzap now works, but it's command-line options have changed completely, and it's a shell script. * radwho has updated command-line options, and no longer reads Unix "utmp" files. * Fix bug in calling checkrad script with NAS port > 9999999 * Fix long-standing bug when both crypt and pthreads are in use Alan DeKok.

1 0

Abt dialup Admin
by Rupak 03 Jun '05

03 Jun '05

Hello ALL I am interested in installing dialup admin.I am currently running freeradius-1.0.2 with mysql that ships with redhat9.and chillispot for wireless authentication.i wanted to know where can I find good configuration resources that would help me install dialup-admin. I checked the how to's under /dialupadmin/docs/*.But did'nt find it friendly.It was specifying to create a data base named "radius".But I have already created a database named "radius" when I installed radius with mysql support.Now I don't wanna proceed until I am confident. So please help me with some resources. Thanking You Rupak

1 0