- Freeradius-Users - lists.freeradius.org

Re: Sql log
by Lucas Diaz 27 Jan '16

27 Jan '16

Below is my "/usr/local/etc/raddb/mods-enabled/sql" file. I'm using freeradius 3.0.11 now, the server works very well, but still can't log queries to a file. I would appreciate any thoughts. Thanks. # -*- text -*- ## ## sql.conf -- SQL modules ## ## $Id: e1431d634a28f20a0e5deaeedd66a161deb88eb7 $ ###################################################################### # # Configuration for the SQL module # # The database schemas and queries are located in subdirectories: # # sql/<DB>/main/schema.sql Schema # sql/<DB>/main/queries.conf Authorisation and Accounting queries # # Where "DB" is mysql, mssql, oracle, or postgresql. # # sql { # The sub-module to use to execute queries. This should match # the database you're attempting to connect to. # # * rlm_sql_mysql # * rlm_sql_mssql # * rlm_sql_oracle # * rlm_sql_postgresql # * rlm_sql_sqlite # * rlm_sql_null (log queries to disk) # driver = "rlm_sql_firebird" # # Several drivers accept specific options, to set them, a # config section with the the name as the driver should be added # to the sql instance. # # Driver specific options are: # # sqlite { # # Path to the sqlite database # filename = "/my/sqlite/database.db" # # # If the file above does not exist and bootstrap is set # # a new database file will be created, and the SQL statements # # contained within the file will be executed. # bootstrap = "/my/sqlite/schema.sql" # } # # mysql { # # If any of the below files are set tls encryption is enabled # tls { # ca_file = "/etc/ssl/certs/my_ca.crt" # ca_path = "/etc/ssl/certs/" # certificate_file = "/etc/ssl/certs/private/client.crt" # private_key_file = "/etc/ssl/certs/private/client.key" # cipher = "DHE-RSA-AES256-SHA:AES128-SHA" # } # } # # The dialect of SQL you want to use, this should usually match # the driver you selected above. # # If you're using rlm_sql_null, then it should be the type of # database the logged queries are going to be executed against. dialect = "firebird" # Connection info: # server = "localhost" port = 3050 login = "sysdba" password = "passdbq" # Database table configuration for everything except Oracle radius_db = "/eternet/DB/RADIUS.FDB" # If you are using Oracle then use this instead # radius_db = "(DESCRIPTION=(ADDRESS=(PROTOCOL=TCP)(HOST=localhost)(PORT=1521))(CONNECT_DATA=(SID=your_sid)))" # If you're using postgresql this can also be used instead of the connection info parameters # radius_db = "dbname=radius host=localhost user=radius password=raddpass" # If you want both stop and start records logged to the # same SQL table, leave this as is. If you want them in # different tables, put the start table in acct_table1 # and stop table in acct_table2 acct_table1 = "radacct" acct_table2 = "radacct" # Allow for storing data after authentication postauth_table = "radpostauth" # Tables containing 'check' items authcheck_table = "radius_check" groupcheck_table = "radgroupcheck" # Tables containing 'reply' items authreply_table = "radius_reply" groupreply_table = "radgroupreply" # Table to keep group info usergroup_table = "radusergroup" # If set to 'yes' (default) we read the group tables # If set to 'no' the user MUST have Fall-Through = Yes in the radreply table read_groups = no # Remove stale session if checkrad does not see a double login delete_stale_sessions = yes # Write SQL queries to a logfile. This is potentially useful for tracing # issues with authorization queries. logfile = ${logdir}/sqllog.sql #logfile = /usr/local/var/log/radius/sqllog.sql # As of version 3.0, the "pool" section has replaced the # following configuration items: # # num_sql_socks # connect_failure_retry_delay # lifetime # max_queries # # The connection pool is new for 3.0, and will be used in many # modules, for all kinds of connection-related activity. # # When the server is not threaded, the connection pool # limits are ignored, and only one connection is used. # pool { # Number of connections to start start = 20 # Minimum number of connections to keep open min = 3 # Maximum number of connections # # If these connections are all in use and a new one # is requested, the request will NOT get a connection. # # Setting 'max' to LESS than the number of threads means # that some threads may starve, and you will see errors # like "No connections available and at max connection limit" # # Setting 'max' to MORE than the number of threads means # that there are more connections than necessary. # max = ${thread[pool].max_servers} # Spare connections to be left idle # # NOTE: Idle connections WILL be closed if "idle_timeout" # is set. spare = 6 # Number of uses before the connection is closed # # 0 means "infinite" uses = 0 # The lifetime (in seconds) of the connection lifetime = 0 # idle timeout (in seconds). A connection which is # unused for this length of time will be closed. idle_timeout = 300 # NOTE: All configuration settings are enforced. If a # connection is closed because of "idle_timeout", # "uses", or "lifetime", then the total number of # connections MAY fall below "min". When that # happens, it will open a new connection. It will # also log a WARNING message. # # The solution is to either lower the "min" connections, # or increase lifetime/idle_timeout. } # Set to 'yes' to read radius clients from the database ('nas' table) # Clients will ONLY be read on server startup. read_clients = yes # Table to keep radius client info client_table = "get_svr_nas" # Read database-specific queries $INCLUDE ${modconfdir}/${.:name}/main/${dialect}/queries.conf } LUCAS DIAZ | DPTO. REDES _______________________________________________________ Istilart 255 | Tel.: 02983 513040 C.P. B7500EGE | Tres Arroyos | Bs As | Argentina www.eternet.cc | ETERNET SISTEMAS -- *LUCAS DIAZ | DPTO. REDES* _______________________________________________________ Istilart 255 | Tel.: 02983 513040 C.P. B7500EGE | Tres Arroyos | Bs As | Argentina * *www.eternet.cc <http://www.eternet.cc/> | *ETERNET SISTEMAS *

3 4

Using cui with freeradius
by Arash Shams 27 Jan '16

27 Jan '16

Hello I want to use cui in freeradius i searched wiki but there is no documentation about that ( or icant find it) in google i find some topics but they are all talk about eduroam . Is cui available in core package or i need to install it manually ? how can i find a good toturial about that ? i tell about my problem before in mailing list but again : i have 4 device authenticate with 1 username to get daily 4G bandwidth but each device get 4G bandwidth means 16G daily i think cui maybe solve my problem

2 2

Version 3.0.11 has been released
by Alan DeKok 26 Jan '16

26 Jan '16

Full release notes are available at http://freeradius.org/press/index.html It has lots of work-arounds for OpenSSL problems. :( People using TTLS and/or PEAP may notice new WARNING messages in debug mode. The server will now check for compatibility of inner/outer user identities. If the identities are problematic (i.e. someone is spoofing), a WARNING will be printed. We now allow setting Response-Packet-Type in "Post-Proxy-Type Fail", which is useful when the home server does not respond. Alan DeKok.

2 4

EAP - TLS Free Radius Configuration question.
by Jeff Ausfeld 26 Jan '16

26 Jan '16

I have been trying to debug this configuration for quite some time and I think it's almost correct but I'm missing something and could really use your help. *****Versions:******* freeradius: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Aug 26 2015 at 14:47:03 mysql Ver 14.14 Distrib 5.5.46, for debian-linux-gnu (x86_64) using readline 6.3 Ubuntu 14.04 kernel 4.3 64 bit. ******freeradius -XXX******** Sun Jan 24 23:19:39 2016 : Info: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 44707, id=0, length=128 User-Name = "chillispot" NAS-IP-Address = 127.0.0.1 Calling-Station-Id = "02-00-00-00-00-01" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x0200000f016368696c6c6973706f74 Message-Authenticator = 0xe86fc9d356c87144c7d115539c17172b Sun Jan 24 23:45:40 2016 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/XXXXXXXX Sun Jan 24 23:45:40 2016 : Info: +- entering group authorize {...} Sun Jan 24 23:45:40 2016 : Info: ++[preprocess] returns ok Sun Jan 24 23:45:40 2016 : Info: [eap] EAP packet type response id 0 length 15 Sun Jan 24 23:45:40 2016 : Info: [eap] No EAP Start, assuming it's an on-going EAP conversation Sun Jan 24 23:45:40 2016 : Info: ++[eap] returns updated Sun Jan 24 23:45:40 2016 : Debug: rlm_sql (sql): Reserving sql socket id: 1 Sun Jan 24 23:45:40 2016 : Info: [sql] expand: -> Sun Jan 24 23:45:40 2016 : Error: [sql] Error generating query; rejecting user Sun Jan 24 23:45:40 2016 : Debug: rlm_sql (sql): Released sql socket id: 1 Sun Jan 24 23:45:40 2016 : Info: ++[sql] returns fail Sun Jan 24 23:45:40 2016 : Info: Using Post-Auth-Type Reject Sun Jan 24 23:45:40 2016 : Info: # Executing group from file /etc/freeradius/sites-enabled/XXXXXXX Sun Jan 24 23:45:40 2016 : Info: +- entering group REJECT {...} Sun Jan 24 23:45:40 2016 : Info: [attr_filter.access_reject] expand: %{User-Name} -> chillispot Sun Jan 24 23:45:40 2016 : Debug: attr_filter: Matched entry DEFAULT at line 11 Sun Jan 24 23:45:40 2016 : Info: ++[attr_filter.access_reject] returns updated Sun Jan 24 23:45:40 2016 : Info: Delaying reject of request 7 for 1 seconds Sun Jan 24 23:45:40 2016 : Debug: Going to the next request Sun Jan 24 23:45:40 2016 : Debug: Waking up in 0.9 seconds. Sun Jan 24 23:45:41 2016 : Info: Sending delayed reject for request 7 Sending Access-Reject of id 0 to 127.0.0.1 port 44707 Sun Jan 24 23:45:41 2016 : Debug: Waking up in 4.9 seconds. Sun Jan 24 23:45:46 2016 : Info: Cleaning up request 7 ID 0 with timestamp +3210 Sun Jan 24 23:45:46 2016 : Info: Ready to process requests. ****** eapol response ********* root@XXXXXXX:/etc/freeradius/sites-available# eapol_test -c /etc/freeradius/eapol_test/eap-tls -a 127.0.0.1 -p 1812 -s testing123Reading configuration file '/etc/freeradius/eapol_test/eap-tls' Line: 7 - start of a new network block key_mgmt: 0x1 eap methods - hexdump(len=16): 00 00 00 00 0d 00 00 00 00 00 00 00 00 00 00 00 identity - hexdump_ascii(len=10): **** HEX DUMPS REMOVED **** Authentication server 127.0.0.1:1812 RADIUS local address: 127.0.0.1:44707 ENGINE: Loading dynamic engine ENGINE: Loading dynamic engine EAPOL: SUPP_PAE entering state DISCONNECTED EAPOL: KEY_RX entering state NO_KEY_RECEIVE EAPOL: SUPP_BE entering state INITIALIZE EAP: EAP entering state DISABLED EAPOL: External notification - portValid=0 EAPOL: External notification - portEnabled=1 EAPOL: SUPP_PAE entering state CONNECTING EAPOL: SUPP_BE entering state IDLE EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE Sending fake EAP-Request-Identity EAPOL: Received EAP-Packet frame EAPOL: SUPP_PAE entering state RESTART EAP: EAP entering state INITIALIZE EAP: EAP entering state IDLE EAPOL: SUPP_PAE entering state AUTHENTICATING EAPOL: SUPP_BE entering state REQUEST EAPOL: getSuppRsp EAP: EAP entering state RECEIVED EAP: Received EAP-Request id=0 method=1 vendor=0 vendorMethod=0 EAP: EAP entering state IDENTITY CTRL-EVENT-EAP-STARTED EAP authentication started EAP: Status notification: started (param=) EAP: EAP-Request Identity data - hexdump_ascii(len=0): EAP: using real identity - hexdump_ascii(len=10): 63 68 69 6c 6c 69 73 70 6f 74 chillispot EAP: EAP entering state SEND_RESPONSE EAP: EAP entering state IDLE EAPOL: SUPP_BE entering state RESPONSE EAPOL: txSuppRsp WPA: eapol_test_eapol_send(type=0 len=15) TX EAP -> RADIUS - hexdump(len=15): 02 00 00 0f 01 63 68 69 6c 6c 69 73 70 6f 74 Encapsulating EAP message into a RADIUS packet Learned identity from EAP-Response-Identity - hexdump(len=10): 63 68 69 6c 6c 69 73 70 6f 74 Sending RADIUS message to authentication server RADIUS message: code=1 (Access-Request) identifier=0 length=128 Attribute 1 (User-Name) length=12 Value: 'chillispot' Attribute 4 (NAS-IP-Address) length=6 Value: 127.0.0.1 Attribute 31 (Calling-Station-Id) length=19 Value: '02-00-00-00-00-01' Attribute 12 (Framed-MTU) length=6 Value: 1400 Attribute 61 (NAS-Port-Type) length=6 Value: 19 Attribute 77 (Connect-Info) length=24 Value: 'CONNECT 11Mbps 802.11b' Attribute 79 (EAP-Message) length=17 Value: 0200000f016368696c6c6973706f74 Attribute 80 (Message-Authenticator) length=18 Value: e86fc9d356c87144c7d115539c17172b Next RADIUS client retransmit in 3 seconds EAPOL: SUPP_BE entering state RECEIVE Received 20 bytes from RADIUS server Received RADIUS message RADIUS message: code=3 (Access-Reject) identifier=0 length=20 STA 02:00:00:00:00:01: Received RADIUS packet matched with a pending request, round trip time 1.00 sec Allowing RADIUS Access-Reject without Message-Authenticator since it does not include EAP-Message RADIUS packet matching with station could not extract EAP-Message from RADIUS message EAPOL: EAP key not available EAPOL: EAP Session-Id not available WPA: Clear old PMK and PTK MPPE keys OK: 0 mismatch: 1 FAILURE ***** eap-tls.conf ****** # eapol_test -c eap-tls.conf -s testing123 # # Set also "nostrip" in raddb/proxy.conf, realm "example.com" # And make it a LOCAL realm. # network={ key_mgmt=WPA-EAP eap=TLS identity="chillispot" ca_cert="etc/freeradius/certs/ca.pem" client_cert="etc/freeradius/certs/client.crt" private_key="etc/freeradius/certs/client.key" private_key_passwd="XXXXXXXXXXXXXXXXXX" } mysql, freeradius, and the eapol command were all run from within the same physical server box via ssh. When I expose the file option instead of sql it calls from the users file and it works fine. I have traced mysql and it does not seem to be generating any query. So my guess is this is getting stopped or discarded in the initial security checks before sql somewhere. I have tried this with every permutation I can think of including disabling firewalls. There is not much information I could find on the authenticator but my guess is the packet is not getting formatting correctly as a result of my configuration/setup, or there is something odd with the certs, or something similar and since I have restricted this down to only eap-tls it is causing the failure. If anybody wants the tshark output, just let me know what switches / or how you want it sent. It can get fairly verbose, and I was trying to keep the initial email to under the size of a novel. I am very thankful for your time and for any advice or help you can provide. Regards with thanks, Jeff.

3 5

packages: freeradius vs freeradius-mysql
by Daniel Lopez 25 Jan '16

25 Jan '16

Hi. I'm using Freeradius 2.1.12 in Ubuntu 14.04 with MYSQL and PhpMyadmin. I install only freeradius-mysql package and so far everything has gone well. However recently I've seen some tutorials where they install both freeradius and freeradius-mysql. I was wrong to install only freeradius-mysql package? what features could I miss? Now when I try to install freeradius package it says to me it is already installed, but, for instance, I can't find the *.cnf files in /certs folder. Thanks for your help

4 8

Freeradius LOG problems
by Adem Darguner 24 Jan '16

24 Jan '16

Hi Everyone, We use Ubuntu 15.10 Server (32-bit) We have problem Freeradius + MYSQL log problem.We cannot see Access-Accept , Access-Reject Log in the /var/log/freeradius/ We see only the MYSQL requests to Freeradius log. We want see Access-Accept and Access-Reject log in the /var/log/Freeradius. radias.conf log { destination = files file = ${logdir}/radius.log requests = ${logdir}/radiusd-%{%{Virtual-Server}:-DEFAULT}-%Y%m%d.log syslog_facility = daemon stripped_names = no auth = no auth_badpass = no auth_goodpass = no # msg_goodpass = "" # msg_badpass = "" } I want to see username >> Access-accept and username >> Access-Reject logs. I only see MYSQL request. What is problem? Thank you for your help. Regards root@tokenserver:/var/log/freeradius# radtest adem 00000000066186770941821001 localhost 0 freeradiussecret Sending Access-Request of id 100 to 127.0.0.1 port 1812 User-Name = "adem" User-Password = "00000000066186770941821001" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=100, length=20 root@tokenserver:/var/log/freeradius# MYSQL Reguest in the /var/log/freeradius/ drwxr-x--- 2 freerad freerad 4096 Jan 24 06:48 . drwxrwxr-x 14 root syslog 4096 Jan 24 06:48 .. -rw-r--r-- 1 freerad freerad 1267 Jan 24 16:12 radius.log -rw-r--r-- 1 freerad freerad 10888 Jan 24 06:48 radius.log.1 -rw-r--r-- 1 freerad freerad 900 Jan 17 06:38 radius.log.2.gz -rw-r--r-- 1 freerad freerad 1774 Jan 11 06:28 radius.log.3.gz -rw-r--r-- 1 freerad freerad 336 Jan 3 06:30 radius.log.4.gz -rw-r--r-- 1 freerad freerad 0 Dec 30 09:08 radwtmp radius.log.1 Sun Jan 17 06:38:07 2016 : Info: Loaded virtual server inner-tunnel Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Mon Jan 18 13:07:03 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Tue Jan 19 10:41:29 2016 : Info: Signalled to terminate Tue Jan 19 10:41:29 2016 : Info: Exiting normally. Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 4 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 3 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 2 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 1 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radius Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 -- Adem DARGÜNER Network Engineer

2 1

Re: Access-Accept and Access-Reject Log problem
by Adem Darguner 24 Jan '16

24 Jan '16

Hi Everyone, We use Ubuntu 15.10 Server (32-bit) We have problem Freeradius + MYSQL log problem.We cannot see Access-Accept , Access-Reject Log in the /var/log/freeradius/ We see only the MYSQL requests to Freeradius log. We want see Access-Accept and Access-Reject log in the /var/log/Freeradius. radias.conf log { destination = files file = ${logdir}/radius.log requests = ${logdir}/radiusd-%{%{Virtual-Server}:-DEFAULT}-%Y%m%d.log syslog_facility = daemon stripped_names = no auth = no auth_badpass = no auth_goodpass = no # msg_goodpass = "" # msg_badpass = "" } I want to see username >> Access-accept and username >> Access-Reject logs. I only see MYSQL request. What is problem? Thank you for your help. Regards root@tokenserver:/var/log/freeradius# radtest adem 00000000066186770941821001 localhost 0 freeradiussecret Sending Access-Request of id 100 to 127.0.0.1 port 1812 User-Name = "adem" User-Password = "00000000066186770941821001" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=100, length=20 root@tokenserver:/var/log/freeradius# MYSQL Reguest in the /var/log/freeradius/ drwxr-x--- 2 freerad freerad 4096 Jan 24 06:48 . drwxrwxr-x 14 root syslog 4096 Jan 24 06:48 .. -rw-r--r-- 1 freerad freerad 1267 Jan 24 16:12 radius.log -rw-r--r-- 1 freerad freerad 10888 Jan 24 06:48 radius.log.1 -rw-r--r-- 1 freerad freerad 900 Jan 17 06:38 radius.log.2.gz -rw-r--r-- 1 freerad freerad 1774 Jan 11 06:28 radius.log.3.gz -rw-r--r-- 1 freerad freerad 336 Jan 3 06:30 radius.log.4.gz -rw-r--r-- 1 freerad freerad 0 Dec 30 09:08 radwtmp radius.log.1 Sun Jan 17 06:38:07 2016 : Info: Loaded virtual server inner-tunnel Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Mon Jan 18 13:07:03 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Tue Jan 19 10:41:29 2016 : Info: Signalled to terminate Tue Jan 19 10:41:29 2016 : Info: Exiting normally. Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 4 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 3 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 2 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 1 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radius Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 2016-01-24 17:17 GMT+02:00 Adem Darguner <adarguner(a)gmail.com>: > Hi Everyone, > > We use Ubuntu 15.10 Server (32-bit) > > We have problem Freeradius + MYSQL log problem.We cannot see Access-Accept > , Access-Reject Log in the /var/log/freeradius/ > We see only the MYSQL requests to Freeradius log. We want see > Access-Accept and Access-Reject log in the /var/log/Freeradius. > > radias.conf > > log { > destination = files > file = ${logdir}/radius.log requests = ${logdir}/radiusd-%{%{Virtual-Server}:-DEFAULT}-%Y%m%d.log > syslog_facility = daemon > stripped_names = no > auth = no > auth_badpass = no > auth_goodpass = no > # msg_goodpass = "" > # msg_badpass = "" > } > > > I want to see username >> Access-accept and username >> Access-Reject > logs. I only see MYSQL request. > > What is problem? > > Thank you for your help. > > Regards > > > root@tokenserver:/var/log/freeradius# *radtest adem > 00000000066186770941821001 localhost 0 freeradiussecret* > Sending Access-Request of id 100 to 127.0.0.1 port 1812 > User-Name = "adem" > User-Password = "00000000066186770941821001" > NAS-IP-Address = 127.0.1.1 > NAS-Port = 0 > Message-Authenticator = 0x00000000000000000000000000000000 > rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=100, > length=20 > root@tokenserver:/var/log/freeradius# > > > > > > > > *MYSQL Reguest in the /var/log/freeradius/* > > drwxr-x--- 2 freerad freerad 4096 Jan 24 06:48 . > drwxrwxr-x 14 root syslog 4096 Jan 24 06:48 .. > -rw-r--r-- 1 freerad freerad 1267 Jan 24 16:12 radius.log > -rw-r--r-- 1 freerad freerad 10888 Jan 24 06:48 radius.log.1 > -rw-r--r-- 1 freerad freerad 900 Jan 17 06:38 radius.log.2.gz > -rw-r--r-- 1 freerad freerad 1774 Jan 11 06:28 radius.log.3.gz > -rw-r--r-- 1 freerad freerad 336 Jan 3 06:30 radius.log.4.gz > -rw-r--r-- 1 freerad freerad 0 Dec 30 09:08 radwtmp > > > > * radius.log.1 * > > Sun Jan 17 06:38:07 2016 : Info: Loaded virtual server inner-tunnel > Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #4 > Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #4 > Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 > Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #3 > Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #3 > Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 > Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #2 > Mon Jan 18 13:07:03 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #2 > Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 > Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #1 > Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #1 > Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 > Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #0 > Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #0 > Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 > Tue Jan 19 10:41:29 2016 : Info: Signalled to terminate > Tue Jan 19 10:41:29 2016 : Info: Exiting normally. > Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 4 > Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 3 > Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 2 > Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 1 > Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 0 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql > (module rlm_sql_mysql) loaded and linked > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect to > radius@localhost:/radius > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #0 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #0 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #1 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #1 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect > rlm_sql_mysql #2 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL > server for #2 > Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, > #2 > > -- Adem DARGÜNER Network Engineer

1 0

Access-Accept Access-Reject log problem
by Adem Darguner 24 Jan '16

24 Jan '16

Hi Everyone, We use Ubuntu 15.10 Server (32-bit) We have problem Freeradius + MYSQL log problem.We cannot see Access-Accept , Access-Reject Log in the /var/log/freeradius/ We see only the MYSQL requests to Freeradius log. We want see Access-Accept and Access-Reject log in the /var/log/Freeradius. radias.conf log { destination = files file = ${logdir}/radius.log requests = ${logdir}/radiusd-%{%{Virtual-Server}:-DEFAULT}-%Y%m%d.log syslog_facility = daemon stripped_names = no auth = no auth_badpass = no auth_goodpass = no # msg_goodpass = "" # msg_badpass = "" } I want to see username >> Access-accept and username >> Access-Reject logs. I only see MYSQL request. What is problem? Thank you for your help. Regards root@tokenserver:/var/log/freeradius# radtest adem 00000000066186770941821001 localhost 0 freeradiussecret Sending Access-Request of id 100 to 127.0.0.1 port 1812 User-Name = "adem" User-Password = "00000000066186770941821001" NAS-IP-Address = 127.0.1.1 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=100, length=20 root@tokenserver:/var/log/freeradius# MYSQL Reguest in the /var/log/freeradius/ drwxr-x--- 2 freerad freerad 4096 Jan 24 06:48 . drwxrwxr-x 14 root syslog 4096 Jan 24 06:48 .. -rw-r--r-- 1 freerad freerad 1267 Jan 24 16:12 radius.log -rw-r--r-- 1 freerad freerad 10888 Jan 24 06:48 radius.log.1 -rw-r--r-- 1 freerad freerad 900 Jan 17 06:38 radius.log.2.gz -rw-r--r-- 1 freerad freerad 1774 Jan 11 06:28 radius.log.3.gz -rw-r--r-- 1 freerad freerad 336 Jan 3 06:30 radius.log.4.gz -rw-r--r-- 1 freerad freerad 0 Dec 30 09:08 radwtmp radius.log.1 Sun Jan 17 06:38:07 2016 : Info: Loaded virtual server inner-tunnel Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #4 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3 Mon Jan 18 13:05:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Mon Jan 18 13:05:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #3 Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Mon Jan 18 13:07:03 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Mon Jan 18 13:07:03 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Mon Jan 18 13:07:25 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Mon Jan 18 13:07:25 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Tue Jan 19 10:41:29 2016 : Info: Signalled to terminate Tue Jan 19 10:41:29 2016 : Info: Exiting normally. Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 4 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 3 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 2 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 1 Tue Jan 19 10:41:29 2016 : Info: rlm_sql (sql): Closing sqlsocket 0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radius Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #0 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #1 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2 Tue Jan 19 10:42:16 2016 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Tue Jan 19 10:42:16 2016 : Info: rlm_sql (sql): Connected new DB handle, #2 -- Adem DARGÜNER Network Engineer

2 1

Device can't get access
by Koenraad Lelong 24 Jan '16

24 Jan '16

Hi, I'm trying to configure a Lantronix Matchport bg Pro to access my wireless network. I seem unable to configure it to give it access, and I don't find why. My freeradius (3.0.10) can authenticate laptops and smartphones, it's only the device that gives problems, so I think I'm doing something wrong on the device. Below is my debug log for the device. I think in section (5) is my problem : (5) eap_peap: ERROR: SSL says: error:1412E152:SSL routines:SSL_PARSE_CLIENTHELLO_TLSEXT:unsafe legacy renegotiation disabled Is it possible to enable SSLv3 (temporarily), so I can see if that really is the problem ? Thanks, Koenraad.

2 1

Multiple FreeRadius servers with one PostgreSQL backend
by Ruslan Kalakutsky 22 Jan '16

22 Jan '16

Hello everyone. I'm trying to create a horizontally scalable VPN service: a lot of IPSEC nodes with FreeRadius server for EAP-auth and accounting. FreeRadius backend is a PostgreSQL server. The question is: "Is it possible to run multiple freeradius services (one on each VPN gateway) with one backend server?" It makes a configuration a really much easier, because I do not need to care about separate radius server performance/scaling and failover - each VPN node has its own server. Best Regards, Ruslan.

3 11