- Freeradius-Users - lists.freeradius.org

RE: Freeradius-Users Digest, Vol 150, Issue 24
by Peter Hutchison 13 Oct '17

13 Oct '17

> Any ideas what cause the freeradius service to stop and restart > repeatedly like this? > > - do you run latest version of FR (or at least, latest available from your distro)? Yes. - does it happen often, or only on that specified time? It only happens occasionally, on you Fortinet wireless graphs we we a sudden drop in connections when it happens. - does something happen on that time that restart freeradius (e.g. logrotate, apt-get upgrade, or something)? No, there is nothing obvious I can see that could cause it. Any cron jobs run well outside normal daytime hours. - does FR access external things (e.g. database)? What is the state of those systems at that time? No databases are used. Logs are sent to local storage in /var/log. The usual troubleshooting methods would be 'run freeradius in debug mode and read the logs', but it might not be able to help you much if the problem is due FR being restarted. I would like to do that but debug logs generate a log of information and due to the high number of connections would be difficult to read. Peter University of Huddersfield inspiring tomorrow's professionals. [http://marketing.hud.ac.uk/_HOSTED/EmailSig2014/EmailSigFooter.jpg] This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail and remove it from your system. If the content of this e-mail does not relate to the business of the University of Huddersfield, then we do not endorse it and will accept no liability.

1 0

Ldap DNS SRV record support
by Dave Macias 12 Oct '17

12 Oct '17

Is it possible for the module to do DNS discovery of the available ldap servers? I created a srv record for my ldap servers which im able to resolve. # domain amer.nwk.jwm2.net _ldap._tcp SRV 0 1 389 my-ldap-server1 _ldap._tcp SRV 0 2 389 my-ldap-server2 _ldap._tcp SRV 0 3 389 my-ldap-server3 $ host -t srv _ldap._tcp.amer _ldap._tcp.amer.nwk.jwm2.net has SRV record 0 3 389 my-ldap-server3.amer.nwk.jwm2.net. _ldap._tcp.amer.nwk.jwm2.net has SRV record 0 2 389 my-ldap-server2.amer.nwk.jwm2.net. _ldap._tcp.amer.nwk.jwm2.net has SRV record 0 1 389 my-ldap-server1.amer.nwk.jwm2.net. $ ldapsearch -LLL -H "ldap:///dc%3Damer.nwk.jwm2.net" -b dc=datacom,dc=net -D "cn=manager,dc=datacom,dc=net" -w '<pass>' uid=config dn: uid=config,ou=People,dc=datacom,dc=net uid: config cn: ECR user givenName: ECR ... ... Thanks! -dave

5 7

Called-Station-Id
by Cassiano Peixoto 11 Oct '17

11 Oct '17

Hi there, I'm using radius proxy and I'm trying to send to main radius the value of NAS-Port-Id to Called-Station-Id Atribute. I added the following line on post-auth section: update reply { Called-Station-Id += "%{reply:NAS-Port-Id}" } But It's doesn't work. Anyone could help how should I proceeded? Thanks.

3 3

Reply issue on Class attribute
by Umut Arus 10 Oct '17

10 Oct '17

Hi, We are reconfiguring radius on 3.0.15 version and we would like to reply the Class attribute with variable data getting through ldap but it could not send to Controller. Have you an idea? Regards. -- *Umut A.*

2 1

"User-Password" in cleartext
by Samia El Haddouti 10 Oct '17

10 Oct '17

Dear All, Is there an option to do not show the fiedl "User-Password" in cleartext on the debug mode of freeradius when we use PAP as a default authentication method? -Sam

2 1

Freeradius Logging level - set log level to error
by Siddiqui Najam 10 Oct '17

10 Oct '17

Hi, We see client secrets being logged in the log (stdout), something like: Info: Adding client 192.168.1.2/32 with shared secret "testing123" Is there a way to set the log level to ERROR, basically suppress this log? Regards, Najam ________________________________ This message and any attachments are intended solely for the addressees and may contain confidential information. Any unauthorized use or disclosure, either whole or partial, is prohibited. E-mails are susceptible to alteration. Our company shall not be liable for the message if altered, changed or falsified. If you are not the intended recipient of this message, please delete it and notify the sender. Although all reasonable efforts have been made to keep this transmission free from viruses, the sender will not be liable for damages caused by a transmitted virus.

2 1

Problem with shared secret on H3C WX5004
by Igor Sousa 10 Oct '17

10 Oct '17

Hello everyone, Yes, I've known that H3C WX5004 is too old wireless controller, but it is that I have in moment. :D I've already radius configuration in WX5004 that pointing to a freeradius server 2.x. Aiming to test freeradius 3.0.15, I've configured another radius configuration and pointing to freeradius server 3.x, but when Access-Request arrives to freeradius 3.x, freeradius drops because shered secret is incorrect. Thus, I have two questions: 1. Is there a method to check shared secret in message sent to freeradius? 2. Someone have similar problem with this controller (H3C WX5004) Att., -- Igor Sousa

2 2

Sending CoA by configuring nas table.
by Joy C 09 Oct '17

09 Oct '17

I am using nas table for configuring RADIUS client. For setting up the CoA, coa_server attribute needs to be set . The radius schema does not include coa_server field . How do we set the coa_server field if nas table is used. I am using FreeRadius 3.0.10

2 3

Insufficient Space to Store Pair string
by Arnab Roy 09 Oct '17

09 Oct '17

Hi All, I am probably doing something wrong but, we have a requirement to log all Input and output attributes following post auth. So we configured a linelog module and added %{pairs:&request:} & %{pairs:&reply:} Worked a treat with EAP-PEAP, however we enabled EAP-TLS and all the attributes from the certificate is causing some out of memory condition and get a error saying insufficient space to store pair string, needed 2390 bytes available 2048 bytes. Any other more efficient way of dealing with this so I can capture the entire value pair. Many Thanks Arnab

2 3

When installing freeradius2 and sqlite3, schema.sql and dialup.conf are missing
by Ricardo Ruiz 09 Oct '17

09 Oct '17

Hello, I am using freeradius2 and sqlite3 in a router that has LEDE.https://lede-project.org/packages/pkgdata/freeradius2 https://lede-project.org/packages/pkgdata/freeradius2-mod-sql https://lede-project.org/packages/pkgdata/freeradius2-mod-sql-sqlite If I use the user file, the system works perfectly, but now I would like to use a small database, sqlite3, and for doing that the schema.sql and dialup.conf to setup the queries. When I go to github and switch to 2.x branch, I don't see a sqlite section (but for example I see mysql with those)https://github.com/FreeRADIUS/freeradius-server/tree/v2.x.x/raddb/sql I guess I can create the schema easily for example using the mysql version (removing the INNODB thing perhaps), but about the queries, I am not sure what to do. Where should I get these files exactly? searching on the net I could not find them.Any suggestion? Thanks a lot.

2 1