- Freeradius-Users - lists.freeradius.org

can't find /etc/raddb/sql
by ICHIBA Sara 09 Jun '15

09 Jun '15

hello there, I'm trying to install freeradius on a centos 7 VM. So far I installed mariadb-server 1:5.5.41-2.el7_0 , freeradius 3.0.4-6.el7 , freeradius-mysql 3.0.4-6.el7 and freeradius-utils 3.0.4-6.el7 . I'm using yum to install these packages. But when I try to import the sql schema i can't find it. any ideas? What's wrong whith what I did??

2 1

multiple CAs
by Christian Bösch 09 Jun '15

09 Jun '15

Hi, How do I realize this scenario? I have Cisco IP phones which do 802.1X EAP-TLS with their manufactoring installed cert. Behind (through the internal switch in the phone) there are clients which do 802.1X PEAP. So the phone needs to validate against the Cisco CA and the client against another CA. Is there any fallback mechanism so that I can specify 2 CA_file lines in the eap config file? Or is there any other approach? Thanks, Chris

3 3

Freeradius2 with mysql function on openwrt.
by bruno d'ambrosio 08 Jun '15

08 Jun '15

Hi mate My ask is: - I have installed on openwrt, freeradius2, mod mysql and mysql server, have also installed all library and dependence, now i have configure all, but mysql not write in table radacct why? By Bruno D'Ambrosio

5 22

[Attrs Regex]
by Thomas Fagart 08 Jun '15

08 Jun '15

Hello, We were sucessfuly using regexp on keys in attr_filter module with FR 2.1.6 FreeBSD 8.0 Something like that in attrs file : "~\^$.+$\\.telco$" Framed-IP-Address =* ANY, Framed-IP-Netmask =* ANY, Framed-MTU =* ANY, Service-Type =* ANY, Framed-Protocol =* ANY, ERX-Virtual-Router-Name := "test", Tunnel-Type:0 =* ANY, Tunnel-Preference:0 =* ANY, Tunnel-Medium-Type:0 =* ANY, Tunnel-Client-Endpoint:0 =* ANY, Tunnel-Server-Endpoint:0 =* ANY, Tunnel-Assignment-Id:0 =* ANY, Tunnel-Client-Auth-Id:0 =* ANY, Tunnel-Server-Auth-Id:0 =* ANY, Class =* ANY After upgrading to FR 2.2.6 Freebsd 10.0, I've got the feeling that this regular expression on realm attribute does not work anymore. I've also noticed that the same regular expression still work in proxy.conf. Tue May 12 02:07:30 2015 : Debug: [suffix] Looking up realm "toto.telco" for User-Name = "test(a)toto.telco" Tue May 12 02:07:30 2015 : Debug: [suffix] Found realm "~^(.+)\.telco$" Tue May 12 02:07:30 2015 : Debug: [suffix] Adding Realm = "toto.telco" Tue May 12 02:07:30 2015 : Debug: [suffix] Proxying request from user test to realm ~^(.+)\.telco$ Tue May 12 02:07:30 2015 : Debug: [suffix] Preparing to proxy authentication request to realm "~^(.+)\.telco$" ... Tue May 12 02:07:30 2015 : Debug: +group post-proxy { Tue May 12 02:07:30 2015 : Debug: [attr_filter.post-proxy] expand: %{Realm} -> toto.telco Tue May 12 02:07:30 2015 : Debug: ++[attr_filter.post-proxy] = noop Tue May 12 02:07:30 2015 : Debug: +} # group post-proxy = noop After spending some time on the mailing list and the doc, I've got different ideas to solve that : 1. The new FR might not have been compile properly with pcre lib (as this was a package) (radiusd -Xv does not tell me wether this is the case or not) 2. The way regex work have change and I should fine the proper one 3. FR 3.x.x has been rewriten and should work better 4. Do not use rlm_attrs_filter and do something else (unlang ?) Could you advise ? Many thanks Thomas

5 9

Extra validation for EAP-TLS
by Arran Cudbard-Bell 08 Jun '15

08 Jun '15

Hi All, I've added some additional validation for EAP-TLS that caps the maximum inbound TLS record size at the length indicated in the first (L) Length Included packet. If you're using v3.0.x and EAP-TLS could you please check to make sure this isn't tripped by any of the supplicants in use at your site. I've tested with OSX 10.10.3, and IOS 8.3, and will test with wpa_supplicant/eapol_test but don't have access to all the different Windows variants. Thanks, -Arran Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2

2 2

Freeradius 3.0.8 - expansion and unlang - concatenation of AVPs
by Aleš Rygl 08 Jun '15

08 Jun '15

Hello all, With freeradius 3.0.8 and MariaDB 10.0.19 I am struggling with concatenation of AVP in case of their multiple occurrence: According to http://freeradius.org/radiusd/man/unlang.html the expansion below should produce a string separated by n _%{Attribute-Name[*]}_ _ All values of Attribute-Name, concatenated together with n as the separator. _ Basicaly it works. But what I can see is than instead of a newline there is "=2C" sequence inserted to the acct table. It regards Dynamic-QoS-Param AVP below: query = " INSERT INTO ${....acct_table1} (${...column_list}) VALUES ('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{NAS-IP-Address}', '%{NAS-Port-Id}', FROM_UNIXTIME(%{integer:Event-Timestamp}), FROM_UNIXTIME(%{integer:Event-Timestamp}), NULL, NULL, '%{Connect-Info}', '%{Acct-Input-Octets}', '%{Acct-Output-Octets}', '%{Acct-Input-Packets}', '%{Acct-Output-Packets}', '%{Acct-Input-Gigawords}', '%{Acct-Output-Gigawords}', '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Callback-Number}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0', '%{Acct-Status-Type}', '%{Acct-Terminate-Cause}', '%{Mac-Addr}', '%{NAS-Identifier}', '%{Dynamic-QoS-Param[*]}')" And when sql trace tunrned on, I can see that it is being inserted in this way by freeradius: INSERT INTO radacct_adsl (......., 'pwfq-circuit-rate-max 23716 parent=2Cpolice-circuit-rate rate-absolute 2240 parent'); Client charset and DB charset is utf8. "2c" represents comma in utf8. What am I doing wrong? Regards Ales

2 2

Freeradius2 with mysql function on openwrt.
by bruno d'ambrosio 08 Jun '15

08 Jun '15

Hi mate My ask is: - I have installed on openwrt, freeradius2, mod mysql and mysql server, have also installed all library and dependence, now i have configure all, but mysql not write in table radacct why? By Bruno D'Ambrosio

1 0

Function on Openwrt, Freeradius 2 with Mysql ?
by Bruno D'Ambrosio 08 Jun '15

08 Jun '15

Hi mate They are almost three days I'm trying to run but without success, freeradius, mysql on system openwrt. Now I ask but on openwrt it is possible to operate freeradius with mysql?

1 0

on freeradius 3.0.0
by Yaisel Cruz Zuñiga 08 Jun '15

08 Jun '15

Hello list, following an old manual build and install freeradius 3.0.0m my question is. as freeradius server starts if you have any startup scripts? Universidad de Cienfuegos http://www.ucf.edu.cu/

7 8

Freeradius and Groups
by Hossein Rafighi 06 Jun '15

06 Jun '15

Hi, I have freeradius-2.1.12-6.el6.x86_64 installed and working like a charm. I have multiple groups on a LDAP server students, faculty, visitors, and so on. I want to configure the radius servre to allow access to faculty members, but not others. How do I go about that? Does anyone have a step-by-step recipe? Many thanks in advance, Hossein Rafighi -- _____ _____ _____ _ _ _ _ ____ Hossein Rafighi |_ _|| _ \ |_ _|| | | || \_/ || __|TRIUMF, 4004 Wesbrook Mall | | | |_| ) | | | | | || || |__ Vancouver BC, Canada, V6T 2A3 | | | _ / | | | \_/ || \_/ || __|Voice: (604) 222-1047 | | | | \ \ _| |_ | || | | || | Fax: (604) 222-1074 |_| |_| \_\|_____| \___/ |_| |_||_| Website: http://www.triumf.ca

2 4