- Freeradius-Users - lists.freeradius.org

Rewrite Rule
by Maile Halatuituia 02 Nov '18

02 Nov '18

Hi I have this Cisco-AVPair = "acct-input-octets-ipv6=xxx" on my radius acct-request packet coming from my Cisco BRAS. I want to rewrite it to something like this acct-input-octets-ipv6=xxx on my preacct section of my default server (/etc/freeradius/sites-available/default) config and update my request ..... I have this policy already if( &Cisco-AVPair[*]=~/\(acct-input-octets-ipv6\)=\(\d+)/ ) { update request { &acct-input-octets-ipv6 := "%{2}" } } But seems it doing nothing. Maybe my regex above is wrong or something but that's why I ask . Here is the portion of my freeradius -X I think it is relevant to this question. # Executing section preacct from file /etc/freeradius/sites-enabled/default (2) preacct { (2) policy acct_counters64.preacct { (2) update request { (2) WARNING: Can't find &Acct-Input-Gigawords. Using 0 as operand value (2) EXPAND %{expr:(&Acct-Input-Gigawords << 32) | &Acct-Input-Octets} (2) --> 52 (2) &Acct-Input-Octets64 = 52 (2) WARNING: Can't find &Acct-Output-Gigawords. Using 0 as operand value (2) EXPAND %{expr:(&Acct-Output-Gigawords << 32) | &Acct-Output-Octets} (2) --> 92 (2) &Acct-Output-Octets64 = 92 (2) } # update request = noop (2) } # policy acct_counters64.preacct = noop (2) [preprocess] = ok (2) if ( &User-Name !~ /\@/ ) { (2) if ( &User-Name !~ /\@/ ) -> FALSE (2) update request { (2) EXPAND %{expr: %l - %{%{Acct-Session-Time}:-0} - %{%{Acct-Delay-Time}:-0}} (2) --> 1541032848 (2) &FreeRADIUS-Acct-Session-Start-Time := Nov 1 2018 13:40:48 +13 (2) } # update request = noop (2) policy acct_unique { (2) update request { (2) Tmp-String-9 := "ai:" (2) } # update request = noop (2) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) { (2) EXPAND %{hex:&Class} (2) --> (2) EXPAND ^%{hex:&Tmp-String-9} (2) --> ^61693a (2) if (("%{hex:&Class}" =~ /^%{hex:&Tmp-String-9}/) && ("%{string:&Class}" =~ /^ai:([0-9a-f]{32})/i)) -> FALSE (2) else { (2) update request { (2) EXPAND %{md5:%{User-Name},%{Acct-Session-ID},%{%{NAS-IPv6-Address}:-%{NAS-IP-Address}},%{NAS-Identifier},%{NAS-Port-ID},%{NAS-Port}} (2) --> 8022139d00768a562a41866693fa1427 (2) &Acct-Unique-Session-Id := 8022139d00768a562a41866693fa1427 (2) } # update request = noop (2) } # else = noop (2) } # policy acct_unique = noop (2) if ( &Cisco-AVPair[*]=~/\(acct-input-octets-ipv6\)=\(\d+)/ ) { (2) if ( &Cisco-AVPair[*]=~/\(acct-input-octets-ipv6\)=\(\d+)/ ) -> FALSE (2) if ( &Cisco-AVPair[*]=~/\(acct-output-octets-ipv6\)=\(\d+)/ ) { (2) if ( &Cisco-AVPair[*]=~/\(acct-output-octets-ipv6\)=\(\d+)/ ) -> FALSE (2) } # preacct = ok Confidentiality Notice: This email (including any attachment) is intended for internal use only. Any unauthorized use, dissemination or copying of the content is prohibited. If you are not the intended recipient and have received this e-mail in error, please notify the sender by email and delete this email and any attachment.

3 16

Wiki Documentation Error
by Dan M 31 Oct '18

31 Oct '18

There is a bad link on the wiki. The Getting Started page (http://wiki.freeradius.org/guide/Getting%20Started) Has text If you need to install it yourself, the Wiki >installation< page contains detailed instructions for a number of platforms. The page linked by "installation" doesn't seem to exist because it comes up as http://wiki.freeradius.org/create/Installation 403 - Forbidden (I'm sure it's forbidden because the public can't create pages) Perhaps it can be repaired Dan M

3 2

Evaluate condition against LDAP with ulang
by Tom Yard 31 Oct '18

31 Oct '18

Hi people, I have implemented a Freeradius sever running OK that authenticate against LDAP. Firstly, I have a LDAP tree with users under groups, such as: CN=Network,OU=Employess,DC=company,DC=com and my evaluating condition wit ulang was: if (LDAP-Group == Network) And the authentication was OK. But now, the LDAP administrators has modify the LDAP tree and now the users are under the OU as below: OU=Employess,DC=company,DC=com How can I evaluate the condition "if the user is under OU=Employees" ??? Because if I use if (LDAP-Group == Employees), it doesn't authneticate. Thanks a lot, regards !!!

3 3

pap + mac auth authentication problem
by Frédéric Goudal 31 Oct '18

31 Oct '18

Hello, I’m in the following situation : - I have switches that share either wifi and wired connexions. - on wifi connexion I have an eap/peap authentication - what I want is that on wired connexion, if the user/password authentication fail, authentication is done on mac-adress with automatic vlan configuration. I have a working wifi configuration on a first server I have a working wired configuration on a second server Is there any way to mix both on a single server ? Server version is 3.0.17 The wifi configuration is : authorize { preprocess mschap suffix eap files ldap } authenticate { Auth-Type MS-CHAP { mschap } eap } The wired configuration is : authorize { filter_username rewrite.called_station_id_ipb rewrite.calling_station_id_ipb preprocess suffix update control { Auth-Type := Accept Tunnel-Private-Group-Id :=" %{ldap:ldap://ldap.xxx/ou=hosts,dc=xxx,dc=xxx?radiusTunnelPrivateGroupId?sub?(&(objectClass=radiusProfile)(macAddress=%{Calling-Station-ID}))}" } if (!"%{control:Tunnel-Private-Group-ID}") { reject } expiration logintime } authenticate { } post-auth { update { &reply: += &session-state: } -sql update reply { &Tunnel-Private-Group-Id := "%{control:Tunnel-Private-Group-Id}" &Tunnel-Medium-Type := "IEEE-802" &Tunnel-Type := "VLAN" } remove_reply_message_if_eap Post-Auth-Type REJECT { -sql attr_filter.access_reject } Post-Auth-Type Challenge { } }

4 12

Re: Installing freeRADIUS 3.0.17 on centos
by Raghu nathan 30 Oct '18

30 Oct '18

Hello Alan, Since I'm not modifying any code , I will be interested to install directly (without code). Is it possible to install 3.0.17 directly in centos 7 without compiling the source code as we do it on Ubuntu? Is it possible to change the repository to point the installation to 3.0.17 instead of 3.0.13 for centos 7 Regards, Raghu Date: Tue, 30 Oct 2018 06:42:11 -0400 From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Subject: Re: Installing freeRADIUS 3.0.17 on centos Message-ID: <EEDBC965-429C-4A0C-8F0A-1FA108B4F91A(a)deployingradius.com> Content-Type: text/plain; charset=us-ascii On Oct 30, 2018, at 6:19 AM, Raghu nathan <raghu.vdm(a)gmail.com> wrote: > > I tried installing freeradius using ubuntu 18.04 and we get 3.0.17 version, > when we tried using centos 7 we are ending up with 3.0.13. > > I tried using source code but end up with lot other issues. These issues can only be fixed if you DESCRIBE them. > Could you please suggest how should I install newer version using centos 7? The Wiki contain detailed instructions for building on RedHat. CentOS is largely the same, > Or what is the best OS (based on performance) to use freeRADIUS. It doesn't matter. Alan DeKok.

3 2

Fwd: Expiration Attribute
by Kliwer 30 Oct '18

30 Oct '18

Hi. I am trying to disable some user accounts at X date. I found that I could do that with Expiration module. I enabled this module, added "expiration" to instantiate, authorize and post-auth sections, yet I get [expiration] = noop in freeradius -X. (0) Received Access-Request Id 158 from 127.0.0.1:60707 to 127.0.0.1:1812 length 75 (0) User-Name = "mlody" (0) User-Password = "mlody" (0) NAS-IP-Address = 10.50.2.217 (0) NAS-Port = 1812 (0) Message-Authenticator = 0x1dd6032013e085077807e62c694917f1 (0) # Executing section authorize from file /etc/freeradius/3.0/sites-enabled/default (0) authorize { (0) [chap] = noop (0) [mschap] = noop (0) sql: EXPAND %{User-Name} (0) sql: --> mlody (0) sql: SQL-User-Name set to 'mlody' rlm_sql (sql): Reserved connection (1) (0) sql: EXPAND SELECT id, login AS UserName, 'Cleartext-Password' AS attribute, password AS value, ':=' AS op FROM nodes WHERE login = '%{User-Name}' ORDER BY id (0) sql: --> SELECT id, login AS UserName, 'Cleartext-Password' AS attribute, password AS value, ':=' AS op FROM nodes WHERE login = 'mlody' ORDER BY id (0) sql: Executing select query: SELECT id, login AS UserName, 'Cleartext-Password' AS attribute, password AS value, ':=' AS op FROM nodes WHERE login = 'mlody' ORDER BY id (0) sql: User found in radcheck table (0) sql: Conditional check items matched, merging assignment check items (0) sql: Cleartext-Password := "mlody" (0) sql: EXPAND SELECT id, login AS UserName, 'Framed-IP-Address' AS attribute, inet_ntoa(ipaddr) AS value, ':=' AS op FROM nodes WHERE login = '%{User-Name}' UNION SELECT nodes.id, login AS UserName, 'Mikrotik-Rate-Limit' AS Attribute, '100k/100k 100k/100k 100k/100k 1/1 8 100k/100k' AS value, ':=' AS op FROM nodes WHERE login = '%{User-Name}' UNION SELECT nodes.id, login AS UserName, 'Expiration' AS Attribute, '29 Oct 2018 20:40:00 CET' AS value, ':=' AS op FROM nodes WHERE login = '%{User-Name}' ORDER BY id (0) sql: --> SELECT id, login AS UserName, 'Framed-IP-Address' AS attribute, inet_ntoa(ipaddr) AS value, ':=' AS op FROM nodes WHERE login = 'mlody' UNION SELECT nodes.id, login AS UserName, 'Mikrotik-Rate-Limit' AS Attribute, '100k/100k 100k/100k 100k/100k 1/1 8 100k/100k' AS value, ':=' AS op FROM nodes WHERE login = 'mlody' UNION SELECT nodes.id, login AS UserName, 'Expiration' AS Attribute, '29 Oct 2018 20:40:00 CET' AS value, ':=' AS op FROM nodes WHERE login = 'mlody' ORDER BY id (0) sql: Executing select query: SELECT id, login AS UserName, 'Framed-IP-Address' AS attribute, inet_ntoa(ipaddr) AS value, ':=' AS op FROM nodes WHERE login = 'mlody' UNION SELECT nodes.id, login AS UserName, 'Mikrotik-Rate-Limit' AS Attribute, '100k/100k 100k/100k 100k/100k 1/1 8 100k/100k' AS value, ':=' AS op FROM nodes WHERE login = 'mlody' UNION SELECT nodes.id, login AS UserName, 'Expiration' AS Attribute, '29 Oct 2018 20:40:00 CET' AS value, ':=' AS op FROM nodes WHERE login = 'mlody' ORDER BY id (0) sql: User found in radreply table, merging reply items (0) sql: Expiration := "Oct 29 2018 20:40:00 CET" (0) sql: Framed-IP-Address := 192.168.121.225 (0) sql: Mikrotik-Rate-Limit := "100k/100k 100k/100k 100k/100k 1/1 8 100k/100k" rlm_sql (sql): Released connection (1) rlm_sql (sql): Need 4 more connections to reach 10 spares rlm_sql (sql): Opening additional connection (6), 1 of 26 pending slots used rlm_sql_mysql: Starting connect to MySQL server rlm_sql_mysql: Connected to database 'radius' on Localhost via UNIX socket, server version 10.3.10-MariaDB-1:10.3.10+maria~stretch-log, protocol version 10 (0) [sql] = ok (0) [pap] = updated (0) [expiration] = noop (0) } # authorize = updated (0) Found Auth-Type = PAP (0) # Executing group from file /etc/freeradius/3.0/sites-enabled/default (0) Auth-Type PAP { (0) pap: Login attempt with password (0) pap: Comparing with "known good" Cleartext-Password (0) pap: User authenticated successfully (0) [pap] = ok (0) } # Auth-Type PAP = ok (0) # Executing section post-auth from file /etc/freeradius/3.0/sites-enabled/default (0) post-auth { (0) update { (0) No attributes updated (0) } # update = noop (0) sql: EXPAND .query (0) sql: --> .query (0) sql: Using query template 'query' rlm_sql (sql): Reserved connection (2) (0) sql: EXPAND %{User-Name} (0) sql: --> mlody (0) sql: SQL-User-Name set to 'mlody' (0) sql: EXPAND INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( '%{SQL-User-Name}', '%{%{User-Password}:-%{Chap-Password}}', '%{reply:Packet-Type}', '%S') (0) sql: --> INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'mlody', 'mlody', 'Access-Accept', '2018-10-29 21:06:14') (0) sql: Executing query: INSERT INTO radpostauth (username, pass, reply, authdate) VALUES ( 'mlody', 'mlody', 'Access-Accept', '2018-10-29 21:06:14') (0) sql: SQL query returned: success (0) sql: 1 record(s) updated rlm_sql (sql): Released connection (2) (0) [sql] = ok (0) [expiration] = noop (0) } # post-auth = ok (0) Login OK: [mlody/mlody] (from client localhost port 1812) (0) Sent Access-Accept Id 158 from 127.0.0.1:1812 to 127.0.0.1:60707 length 0 (0) Framed-IP-Address = 192.168.121.225 (0) Mikrotik-Rate-Limit = "100k/100k 100k/100k 100k/100k 1/1 8 100k/100k" (0) Finished request Waking up in 4.9 seconds. (0) Cleaning up request packet ID 158 with timestamp +2 Is there any working example of setting up Expiration module?

2 2

Installing freeRADIUS 3.0.17 on centos
by Raghu nathan 30 Oct '18

30 Oct '18

*Hello Team,* I tried installing freeradius using ubuntu 18.04 and we get 3.0.17 version, when we tried using centos 7 we are ending up with 3.0.13. I tried using source code but end up with lot other issues. Could you please suggest how should I install newer version using centos 7? Or what is the best OS (based on performance) to use freeRADIUS. Regards, Raghu.

2 1

Release of the IP after the Acct-Stop (ippool)
by Lars Hillebrand 29 Oct '18

29 Oct '18

Hello everyone, I have a question regarding the release of IP addresses with the module ippool. We are about to replace our old Feeradius 2.2.8 with a new 3.0.16 installation. This worked very well, but there is still a problem with the release of the IP pools after the Acct-Stop. The corresponding "Acct-Status-Type = Stop" packets arrive correctly at the radius, but the evaluation is exited after the first "ippool area" within which no IP is found. (unabridged debug log in appendix —> debug_1) (6079) Mon Oct 29 14:40:20 2018: Debug: User-Name = "user1" (6079) Mon Oct 29 14:40:20 2018: Debug: NAS-Port = 202153984 (6079) Mon Oct 29 14:40:20 2018: Debug: Service-Type = Framed-User (6079) Mon Oct 29 14:40:20 2018: Debug: Framed-Protocol = PPP (6079) Mon Oct 29 14:40:20 2018: Debug: Framed-IP-Address = 10.99.157.108 (6079) Mon Oct 29 14:40:20 2018: Debug: Called-Station-Id = "193.25.18.219" (6079) Mon Oct 29 14:40:20 2018: Debug: Calling-Station-Id = "109.90.177.240" (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Status-Type = Stop (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Delay-Time = 0 (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Input-Octets = 5152 (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Output-Octets = 11550 (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Session-Id = "6DC02E18" (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Authentic = RADIUS (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Session-Time = 19 (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Input-Packets = 79 (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Output-Packets = 15 (6079) Mon Oct 29 14:40:20 2018: Debug: Acct-Terminate-Cause = User-Request (6079) Mon Oct 29 14:40:20 2018: Debug: NAS-Port-Type = Virtual ... (6079) Mon Oct 29 14:40:20 2018: Debug: accounting { (6079) Mon Oct 29 14:40:20 2018: Debug: detail: EXPAND /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d (6079) Mon Oct 29 14:40:20 2018: Debug: detail: --> /var/log/freeradius/radacct/193.25.18.219/detail-20181029 (6079) Mon Oct 29 14:40:20 2018: Debug: detail: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/193.25.18.219/detail-20181029 (6079) Mon Oct 29 14:40:20 2018: Debug: detail: EXPAND %t (6079) Mon Oct 29 14:40:20 2018: Debug: detail: --> Mon Oct 29 14:40:20 2018 (6079) Mon Oct 29 14:40:20 2018: Debug: [detail] = ok (6079) Mon Oct 29 14:40:20 2018: Debug: [unix] = ok (6079) Mon Oct 29 14:40:20 2018: Debug: FB1-B: EXPAND %{NAS-IP-Address} %{NAS-Port} (6079) Mon Oct 29 14:40:20 2018: Debug: FB1-B: --> 193.25.18.219 202153984 (6079) Mon Oct 29 14:40:20 2018: Debug: FB1-B: MD5 on 'key' directive maps to: 8c9ebba43c49461c579616773eb1d008 (6079) Mon Oct 29 14:40:20 2018: Debug: FB1-B: Searching for an entry for key: '193.25.18.219 202153984' (6079) Mon Oct 29 14:40:20 2018: Debug: FB1-B: Entry not found (6079) Mon Oct 29 14:40:20 2018: Debug: [FB1-B] = notfound (6079) Mon Oct 29 14:40:20 2018: Debug: } # accounting = notfound (6079) Mon Oct 29 14:40:20 2018: Debug: Not sending reply to client. (6079) Mon Oct 29 14:40:20 2018: Debug: Finished request (6079) Mon Oct 29 14:40:21 2018: Debug: Cleaning up request packet ID 132 with timestamp +76 If we adjust the order of the ippools in the site-availiable configuration so that the used area is in first place, it will be evaluated correctly at the Acct-Stop and the IP address will be released but the evaluation will jump out again after the first pool without an entry. (unabridged debug log in appendix —> debug_2) (2931) Mon Oct 29 14:45:52 2018: Debug: Received Accounting-Request Id 149 from 193.25.18.219:38622 to 10.100.16.162:2011 length 213 (2931) Mon Oct 29 14:45:52 2018: Debug: User-Name = "user1" (2931) Mon Oct 29 14:45:52 2018: Debug: NAS-Port = 202162176 (2931) Mon Oct 29 14:45:52 2018: Debug: Service-Type = Framed-User (2931) Mon Oct 29 14:45:52 2018: Debug: Framed-Protocol = PPP (2931) Mon Oct 29 14:45:52 2018: Debug: Framed-IP-Address = 10.99.156.54 (2931) Mon Oct 29 14:45:52 2018: Debug: Called-Station-Id = "193.25.18.219" (2931) Mon Oct 29 14:45:52 2018: Debug: Framed-IP-Address = 10.99.156.54 (2931) Mon Oct 29 14:45:52 2018: Debug: Called-Station-Id = "193.25.18.219" (2931) Mon Oct 29 14:45:52 2018: Debug: Calling-Station-Id = "109.90.177.240" (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Status-Type = Stop (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Delay-Time = 0 (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Input-Octets = 2747 (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Output-Octets = 2789 (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Session-Id = "6DC02E1B" (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Authentic = RADIUS (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Session-Time = 6 (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Input-Packets = 43 (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Output-Packets = 6 (2931) Mon Oct 29 14:45:52 2018: Debug: Acct-Terminate-Cause = User-Request (2931) Mon Oct 29 14:45:52 2018: Debug: NAS-Port-Type = Virtual ... (2931) Mon Oct 29 14:45:52 2018: Debug: accounting { (2931) Mon Oct 29 14:45:52 2018: Debug: detail: EXPAND /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d (2931) Mon Oct 29 14:45:52 2018: Debug: detail: --> /var/log/freeradius/radacct/193.25.18.219/detail-20181029 (2931) Mon Oct 29 14:45:52 2018: Debug: detail: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/193.25.18.219/detail-20181029 (2931) Mon Oct 29 14:45:52 2018: Debug: detail: EXPAND %t (2931) Mon Oct 29 14:45:52 2018: Debug: detail: --> Mon Oct 29 14:45:52 2018 (2931) Mon Oct 29 14:45:52 2018: Debug: [detail] = ok (2931) Mon Oct 29 14:45:52 2018: Debug: [unix] = ok (2931) Mon Oct 29 14:45:52 2018: Debug: DVZ-S: EXPAND %{NAS-IP-Address} %{NAS-Port} (2931) Mon Oct 29 14:45:52 2018: Debug: DVZ-S: --> 193.25.18.219 202162176 (2931) Mon Oct 29 14:45:52 2018: Debug: DVZ-S: MD5 on 'key' directive maps to: e1441074cac9707ffe85004a796a5062 (2931) Mon Oct 29 14:45:52 2018: Debug: DVZ-S: Searching for an entry for key: '193.25.18.219 202162176' (2931) Mon Oct 29 14:45:52 2018: Debug: DVZ-S: Deallocated entry for ip: 10.99.156.54 (2931) Mon Oct 29 14:45:52 2018: Debug: DVZ-S: Allocated count now: 0 (2931) Mon Oct 29 14:45:52 2018: Debug: [DVZ-S] = ok (2931) Mon Oct 29 14:45:52 2018: Debug: Gaeste: EXPAND %{NAS-IP-Address} %{NAS-Port} (2931) Mon Oct 29 14:45:52 2018: Debug: Gaeste: --> 193.25.18.219 202162176 (2931) Mon Oct 29 14:45:52 2018: Debug: Gaeste: MD5 on 'key' directive maps to: e1441074cac9707ffe85004a796a5062 (2931) Mon Oct 29 14:45:52 2018: Debug: Gaeste: Searching for an entry for key: '193.25.18.219 202162176' (2931) Mon Oct 29 14:45:52 2018: Debug: Gaeste: Entry not found (2931) Mon Oct 29 14:45:52 2018: Debug: [Gaeste] = notfound (2931) Mon Oct 29 14:45:52 2018: Debug: } # accounting = notfound (2931) Mon Oct 29 14:45:52 2018: Debug: Not sending reply to client. (2931) Mon Oct 29 14:45:52 2018: Debug: Finished request (2931) Mon Oct 29 14:45:52 2018: Debug: Cleaning up request packet ID 149 with timestamp +42 Does anyone know a similar behavior and has a tip for us? The unabridged debug logs and the corresponding sites-available configuration (vpn) can be found in the appendix. Many thanks in advance! Yours sincerely Lars Hillebrand __ Fachhochschule Dortmund University of Applied Sciences and Arts Dipl.-Ing. (FH) Lars Hillebrand Dez. VI, IT-Basisdienste Sonnenstraße 100 - 44139 Dortmund Raum SON D 008 Tel 0231 9112-253 Fax 0231 9112-338 lars.hillebrand(a)fh-dortmund.de www.fh-dortmund.de

2 3

Remove double quotes from variable
by Raghu nathan 29 Oct '18

29 Oct '18

We are calling %{Module-Failure-Message} in linelog and trying to create JSON logs. But we are getting sometime error with double quotes, which is creating issue on JSON spec. For example, In linelog messages we have below entry Access-Reject = "{\"Datetime\":\"%t\",\ \"Packet-Type\":\"%{reply:Packet-Type}\",\ \"User-Name\":\"%{User-Name}\",\ \"Module-Failure-Message\":\"%{Module-Failure-Message}\"\ }" We are getting the logs as {"Datetime":"Fri Oct 26 09:07:17 2018","Packet-Type":"Access-Reject","User-Name":"CONSUMER4.TATA","Module-Failure-Message":"pap: Cleartext password "WRONG-PASSWORD" does not match "known good" password"} In the Module-Failure-Message output we are receiving the message with double quotes which is not as per JSON standard. Please let me know how I can solve the issue without doing any coding. Regards, Raghu.

3 3

Connect static ip with freeradius (ip -> address)
by One Zero Art 27 Oct '18

27 Oct '18

Hi, I'm new to freeradius and Mikrotik. I need some help to connect Mikrotik static ip users to freeradius. I have set static IP users on Mikrotik by going ip -> address then add IP address there also I setup same IP address on pc. I am trying to set radius for these users but I am not sure which service to check. Is it DHCP or login or IPsec. Can you please help me. Did I miss something? Thank you

2 3