- Freeradius-Users - lists.freeradius.org

Re: Doubts about the rlm_replicate
by Jorge Pereira 15 Jun '15

15 Jun '15

Hi, My idea is to add support for "post-proxy" in the rlm_replicate. So I believe it can be sure that the first packet "Acct-Start" received ACK and then I can send the "replicated" packet that became in the "Acct-Interim-Updated" will be sent ok. Aland and Arran, what do you think about my idea? -- Jorge Pereira On Fri, Jun 12, 2015 at 5:47 PM, Jorge Pereira <jpereiran(a)gmail.com> wrote: > Hi, > > I have a situation that I get a packet "Acct-Start" and then is > necessary to duplicate and transform in a "Acct-Interim-Update". > but, I should send the second packet "Acct-Interim-Update" after I get the > "Accounting-Response" from the first sending "Acct-Start". > have someone idea about the solution? > > My first thought was to add in rlm_replicate the capability to process a > "preaccounting" and add some "flag" in the first packet saving > in redis cache... but is a madness. I prefer to hear other suggestions! > > p.s: my radius is a proxy between two others. > -- > Jorge Pereira >

2 4

Error in `radiusd': free(): invalid next size (normal)
by ICHIBA Sara 15 Jun '15

15 Jun '15

Hey there, I'm getting this error while trying to do radiusd -X: *** Error in `radiusd': free(): invalid next size (normal): 0x00007f2754001d10 *** ======= Backtrace: ========= /lib64/libc.so.6(+0x7d1fd)[0x7f27622d71fd] /lib64/libstdc++.so.6(_ZNSt18basic_stringstreamIcSt11char_traitsIcESaIcEED1Ev+0xdc)[0x7f275bb41f9c] /usr/local/lib64/libcassandra.so.2(_ZNK4cass7Address9to_stringEb+0x223)[0x7f275c0e7383] /usr/local/lib64/libcassandra.so.2(_ZN4cass10ConnectionC1EP9uv_loop_sRKNS_6ConfigEPNS_7MetricsERKNS_7AddressERKSsiPNS0_8ListenerE+0x1b1)[0x7f275c0f6ba3] /usr/local/lib64/libcassandra.so.2(_ZN4cass17ControlConnection9reconnectEb+0x19e)[0x7f275c10041a] /usr/local/lib64/libcassandra.so.2(_ZN4cass17ControlConnection7connectEPNS_7SessionE+0xc9)[0x7f275c1001b9] /usr/local/lib64/libcassandra.so.2(_ZN4cass7Session16internal_connectEv+0x8f)[0x7f275c14a075] /usr/local/lib64/libcassandra.so.2(_ZN4cass7Session10on_resolveEPNS_8ResolverE+0xf3)[0x7f275c14a957] /usr/local/lib64/libcassandra.so.2(_ZN4cass8Resolver10on_resolveEP16uv_getaddrinfo_siP8addrinfo+0x8c)[0x7f275c14d3a1] /usr/local/lib/libuv.so.1(+0x7998)[0x7f275bdb5998] /usr/local/lib/libuv.so.1(+0x953d)[0x7f275bdb753d] /usr/local/lib/libuv.so.1(+0x95de)[0x7f275bdb75de] /usr/local/lib/libuv.so.1(+0x15fdc)[0x7f275bdc3fdc] /usr/local/lib/libuv.so.1(uv_run+0xe7)[0x7f275bdb7de7] /usr/local/lib64/libcassandra.so.2(_ZN4cass10LoopThread15on_run_internalEPv+0x44)[0x7f275c14b9bc] /usr/local/lib/libuv.so.1(+0x13207)[0x7f275bdc1207] /lib64/libpthread.so.0(+0x7df5)[0x7f2762859df5] /lib64/libc.so.6(clone+0x6d)[0x7f27623501ad]

4 7

Rejected: Username contains ..s; 3.0.8
by firing neurons 15 Jun '15

15 Jun '15

I compiled freeradius-3.0.8-2.fc23 from fedora koji with the SRPM method. Running on fedora 22. I used modified files of my 3.0.4 config. 3.0.4 crashes on originate-coa. What version is recommended for coa? FN

3 2

Re: %{check:Attribute-Name} not working in V3
by Jake He 14 Jun '15

14 Jun '15

I am trying to migrate from version 2 to version 3. The same unlang code worked in version 2. However in version 3 the same code does not work. This is the error: /etc/freeradius/sites-enabled/default[406]: Failed parsing expanded string: /etc/freeradius/sites-enabled/default[406]: %{sql:SET @reset_date = '%{check:Reset-Date}'; SELECT IFNULL((sum(acctinputoctets)+sum(acctoutp... /etc/freeradius/sites-enabled/default[406]: ^ Unknown module If I remove check the parser does not throw errors. Change '%{check:Reset-Date}' to '%{Reset-Date}'. However this will break my code, because Reset-Date is a radcheck attribute, stored in the radcheck table. Any ideas? Jake He

2 1

How create profile with Counter time that limit for device?
by Bruno D'Ambrosio 14 Jun '15

14 Jun '15

Hi Mate I have need to this Profile on freeradius2: 1 Hour to navigation internet for device - Reset daily. Each connected device will have its own counter. Please.Help Best Regard Bruno D'Ambrosio

1 0

How create profile with Counter time that limit for device?
by bruno d'ambrosio 14 Jun '15

14 Jun '15

Hi mate How create profile attribute with counter time that limit for device? Best regard Bruno D'Ambrosio

2 1

Help. Counter time that limit per device.
by Bruno D'Ambrosio 13 Jun '15

13 Jun '15

Hi Mate What is the profile with Counter time that limit per device ? Help Please. Best Regard Bruno D'Ambrosio

1 0

MSCHAPv2 fails to authenticate against OpenDirectory with error 5100 (0x13ec)
by Alan Egerton 13 Jun '15

13 Jun '15

Dear FreeRADIUS users, I'm trying to follow the instructions in Dan Barrett's article <https://www.yesdevnull.net/2013/10/os-x-mavericks-server-setting-up-freerad…> to get the distribution of FreeRADIUS (v2.2.0) that ships with OS X Server (v4.1) to authenticate Open Directory users via non-Apple authenticators. However, the MSCHAPv2 module always fails as follows: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Creating challenge hash with username: username [mschap] Client is using MS-CHAPv2 for username, we need NT-Password [mschap] Using OpenDirectory to authenticate [mschap] Doing OD MSCHAPv2 auth [mschap] Authentication failed for username: error 5100 (0x13ec): unknown error I can't find any documentation on what might have caused this error and am not sure how to progress from here. Your thoughts would be most welcome! Kind regards, -- Alan

6 11

how do I define in my dictionary the vendor of format Extended-Vendor-Specific-1
by Vereecke, Katrien (Katrien) 12 Jun '15

12 Jun '15

Hello, I am using freeradius-server-3.0.8. I am trying to use the extended-vendor-sepcific-1 attribute as specified in RC6929. How can I indicate in my dictionary that the vendor must be according to the extended-vendor-specific format? I added the following in a new dictionary file: VENDOR Alcatel-IPD-Ext-1 241.26.6527 BEGIN-VENDOR Alcatel-IPD-Ext-1 ATTRIBUTE Alc-Ext-TestAttr-1 1 integer END-VENDOR Alcatel-IPD-Ext-1 This gives no problems when starting the radius server, but the attribute is not sent in the extended-vendor-specific format but still in the old way VSA. I found in the http://freeradius.org/radiusd/man/dictionary.txt that : "You can also use "format=Extended-Vendor-Specific-1", through "format=Extended-Vendor-Specific-6". These define VSAs in the "extended vendor-specific" space" but this gives errors : Errors reading dictionary: dict_init: /usr/local/share/freeradius/dictionary.alcatel.sr.ext[15]: Invalid format for VENDOR. Expected text like "1,1", got "Extended-Vendor-Specific-1" Could you please help in how this should be done? Thanks.

3 8

Doubts about the rlm_replicate
by Jorge Pereira 12 Jun '15

12 Jun '15

Hi, I have a situation that I get a packet "Acct-Start" and then is necessary to duplicate and transform in a "Acct-Interim-Update". but, I should send the second packet "Acct-Interim-Update" after I get the "Accounting-Response" from the first sending "Acct-Start". have someone idea about the solution? My first thought was to add in rlm_replicate the capability to process a "preaccounting" and add some "flag" in the first packet saving in redis cache... but is a madness. I prefer to hear other suggestions! p.s: my radius is a proxy between two others. -- Jorge Pereira

1 0