- Freeradius-Users - lists.freeradius.org

Freeradius v3.0.16 - CONSISTENCY CHECK FAILED
by andrea.mucci＠acrmnet.it 06 Mar '19

06 Mar '19

Hi all, we would like to ask your help to understand the ERROR below: CONSISTENCY CHECK FAILED src/lib/pair.c[268]: VALUE_PAIR "SQL-User-Name" char buffer not \0 terminated SOFT ASSERT FAILED src/lib/pair.c[2348]: 0 CAUGHT SIGNAL: Aborted Backtrace of last 19 frames: /usr/lib64/freeradius/libfreeradius-radius.so(fr_fault+0xa7)[0x7f80a609a5a7] /usr/lib64/freeradius/libfreeradius-radius.so(+0xd86b)[0x7f80a609a86b] /usr/lib64/freeradius/libfreeradius-radius.so(fr_pair_add+0x7b3)[0x7f80a60a6 7b3] /usr/lib64/freeradius/rlm_sql.so(sql_set_user+0xc2)[0x7f80a081dd32] /usr/lib64/freeradius/rlm_sql.so(+0x57bc)[0x7f80a08207bc] /usr/sbin/radiusd[0x4272ff] /usr/sbin/radiusd[0x427e29] /usr/sbin/radiusd[0x426bde] /usr/sbin/radiusd[0x427e29] /usr/sbin/radiusd[0x426bde] /usr/sbin/radiusd[0x427e29] /usr/sbin/radiusd[0x426bde] /usr/sbin/radiusd(modcall+0x56)[0x427ee6] /usr/sbin/radiusd(indexed_modcall+0xad)[0x42269d] /usr/sbin/radiusd(rad_authenticate+0x3f6)[0x4111f6] /usr/sbin/radiusd[0x437b07] /usr/sbin/radiusd[0x42f973] /usr/lib64/libpthread.so.0(+0x7e25)[0x7f80a48eae25] /usr/lib64/libc.so.6(clone+0x6d)[0x7f80a419b34d] No panic action set Best Regards Andrea

2 1

Group ID of user
by Boudjoudad Abdelkader 05 Mar '19

05 Mar '19

Hello, I'm new with freeradius, we have a ldap and freeradius server connected, the authentication via ldap works fine, how can i return the group ID of user with the Accept-Accept ? Thanks,

2 1

SqlCounter Error
by One Zero Art 05 Mar '19

05 Mar '19

Hi I am newbie in freeradius. Thank you for support. :) I have enabled sqlcounter in mods-enabled directory. When I debug freeradius -X Its giving this error including configuration file /etc/freeradius/3.0/mods-enabled/sqlcounter /etc/freeradius/3.0/mods-enabled/sqlcounter[43]: Reference "${modules.sql.dialect}" not found /etc/freeradius/3.0/mods-enabled/sqlcounter[52]: Reference "${modconfdir}/sql/counter/${dialect}/${.:instance}.conf" points to a variable which has not been expanded. Errors reading or parsing /etc/freeradius/3.0/radiusd.conf I have already tried method from this post. Found on mail list. If I changed in radiusd.conf then its saying duplicate sql module. https://github.com/FreeRADIUS/freeradius-server/commit/bb842ece01025e40906f… Tried few method from mail list but none of them worked. What I am trying to do is change Mikrotik-Rate-Limit based on time by CoA. Thank you

2 3

Freeradius Accounting and Syslog server
by harshiva matcha 04 Mar '19

04 Mar '19

Hello Everyone! I am using Freeradius for Accounting and I was successful in configuring it. However, to process the logs and displaying them for further use, I would like to send them to syslog server. For me, it is easier to send to syslog if the logs are printed on STDOUT. Is there a way to print the Accounting logs on STDOUT or different way to send to syslog server? I have tried editing /etc/freeradius/modules/detail file to add follows- *detailfile = stdout* But this does not seem to be working. Please let me know, thank you

3 3

Re: FR 3.0.13, reply of attributes missing
by Jürgen Northe 04 Mar '19

04 Mar '19

>> I managed it to define and assign the wanted LDAP attributes in the reply messages by defining them in the LDAP module. >> I am quite finished now but have one question left: >> All types of my VLAN settings are kept in profiles. >> In the settings of a device is a "radiusProfileDN" attribute pointing to the profile like >> cn=PRINTER,ou=VLAN,ou=profiles,ou=radius,dc=compend,dc=com where i.e. radiusTunnelPrivateGroupID and others are defined. >> Right now, the server is not going to resolve the radiusProfileDN. >Why? I have absolutely no idea and this is the reason of my posting. >> Do I have to define here also a matching pair of radius and LDAP attribute which is in module ldap group section treated with filter definitions?\ >I don't think so. The Wiki has full documentation on how the LDAP module works. That may help. I have read the the wiki and "user profile attribut" is what I want but I can't transfer it to my scenario because the choose of the DN of a profile entry containing radius attributes is not depending of a result of a service type. It is a simple extension of the entry without any dependencies. Thanks and best regards Juergen

2 1

Problem in import sqlite3 library in freeradius python module
by Mehrzad Moghaddas 04 Mar '19

04 Mar '19

Hi I have tried to use sqlite3 library in freeradius 3.0.16 python module on ubuntu 18.04 . I have installed freeradius via standard repositories . but I got this error message : reading pairlist file /etc/freeradius/3.0/mods-config/files/pre-proxy # Instantiating module "linelog" from file /etc/freeradius/3.0/mods-enabled/linelog # Instantiating module "log_accounting" from file /etc/freeradius/3.0/mods-enabled/linelog # Instantiating module "python" from file /etc/freeradius/3.0/mods-enabled/python Python version: 2.7.15rc1 (default, Nov 12 2018, 14:31:15) [GCC 7.3.0] python_function_load - Module 'example' not found <type 'exceptions.ImportError'> (No module named sqlite3) python_function_load - Failed to import python function 'example.instantiate' /etc/freeradius/3.0/mods-enabled/python[9]: Instantiation failed for module "python" any other library its ok -like os socket and etc - ! just have problem with sqlite3 ! there is my config files : mods-avalaible > python : python { # Path to the python modules # # Note that due to limitations on Python, this configuration # item is GLOBAL TO THE SERVER. That is, you cannot have two # instances of the python module, each with a different path. # python_path="/etc/freeradius/3.0/mods-config/python:/usr/lib/python2.7/s$ module = example mods-config > python > example.py import radiusd import sqlite3 DATABASE='path/to/database.db' def get_acls(): con=sqlite3.connect(DATABASE) cur=con.execute("SELECT * FROM acl") acls=cur.fetchall() con.close() acl_list=[] for acl in acls : .... I test python 2.7 and 3 but no differences , I tried installed freeradius from source -freeradius 3.0.19- what should I do ?

5 13

What kind of LDAP account should I to have in order to bind LDAP server if I need to use group policy?
by Rong Wang 04 Mar '19

04 Mar '19

I am trying to setup FreeRadius server to use group policy based on LDAP attributes. Is there any special requirement for the account used to bind LDAP server? Any kind of permission needed? Thank you! Rong -- Rong Wang Senior Network Engineer Address | 500 El Camino Real, Santa Clara, CA 95053 Phone | (408)551-7107 Email | rzwang(a)scu.edu Website | https://www.scu.edu/is/it

2 2

FreeRadius 3.0.11 [bypassing MySQL failures]
by Ibrahim Nezar Al-Mahfooz 04 Mar '19

04 Mar '19

Hi, We have two FR servers used to authorize LTE users based on their location and device type. We used unlang to meet the requirements and it worked pretty well. Inside the unlang blocks we have have different blocks to accept or reject users based on various conditions. For logging and reporting purposes, we have put the module sql inside this block as shown below. This setup works perfectly but until the mysql is down, users won't be able to authorize due to the module sql unable to proceed with the insert statement. ## The below is one example of post-auth section of sites-enabled/default *if (&3GPP-Charging-Characteristics == "0800") {update reply {Framed-Pool := "gnet-pool"Reply-Message := "Authorized"}* *-sqlaccept}* In the above case, users will be authorized based on the condition and then logged into sql and accepted. Would you be kind and suggest a working method or simple solution to bypass the sql module in case of mysql DB failures to avoid sacrificing our customers connectivity to the network in case of such incident? Appreciate your suggestions and support. Thanks. --

2 1

About RadiusDesk
by Ariel García Reyes 04 Mar '19

04 Mar '19

Hello I have been using RadiusDesk for about more than 1 year and everything is fine, except that today the parameters of the first users that create in the radcheck table were deleted, such as the password, the type of plan, etc. Some way so that does not happen again! The users are permanent.... -- ________________________________________________ Lic. Ariel García Reyes.

2 1

NAS-Port / radwho
by Hans-Christian Esperer 03 Mar '19

03 Mar '19

Hi, I'm using freeradius 3.17 with unifi APs[1] to provide authentication and accounting. I'm currently using 3 APs. I've run into a problem: radwho will only ever display one user per AP at max. I've run radiusd -X and also looked into the source code that handles radutmp. It seems that the NAS-Port value needs to be unique per user. The APs, however, always supply a NAS-Port of 0. I've looked a bit into the hostapd that unifi is using, and it seems it is a (heavily) patched version, so no chance to get a standard hostapd running. I've tested with standard hostapd: This does use a unique NAS-Port value when sending accounting packets to the radius server, so all concurrently logged in users per AP are shown correctly by radwho. My question is: Is there any way to get radwho/radutmp accounting to work correctly even with the NAS-Port always set to 0? Thanks, HC [1] https://www.ubnt.com/unifi/unifi-ap/

2 3