- Freeradius-Users - lists.freeradius.org

[3.0.4] LDAP issues
by Hachmer, Tobias 12 Sep '14

12 Sep '14

Hello list, thanks for version 3.0.4. On our test system here I encountered the following issues regarding the ldap module: 1. rlm_ldap: Falling back to build time libldap version info. Query for LDAP_OPT_API_INFO returned: -1 rlm_ldap: libldap vendor: OpenLDAP version: 20423 Is this an error/warning/info? Should I act on this? 2. lots of: (0) ERROR: ldap : Failed tokenising attribute string: Expecting operator (0) WARNING: ldap : Failed parsing 'radiusAttribute' value "reply:Xylan-Access-Priv += Xylan-Read-Priv" as valuepair, skipping... What have changed regarding generic radiusAttribute in ldap? Thanks in advance, Tobias Hachmer

3 4

New repository - was Re: Release of Version 3.0.4
by Rui Ribeiro 12 Sep '14

12 Sep '14

Good morning Alan, This is excellent news! I would like to point out it is apparently giving an error in Debian, when running apt-get update: Get:12 http://ftp.us.debian.org wheezy/contrib amd64 Packages [42.0 kB] Get:13 http://ftp.us.debian.org wheezy/non-free amd64 Packages [80.8 kB] Err http://packages.networkradius.com wheezy/main amd64 Packages 500 Bad redirection (invalid URL) Ign http://packages.networkradius.com wheezy/main Translation-en_US Get:14 http://ftp.us.debian.org wheezy/contrib Translation-en [34.8 kB] Ign http://packages.networkradius.com wheezy/main Translation-en Get:15 http://ftp.us.debian.org wheezy/main Translation-en [3,847 kB] Get:16 http://ftp.us.debian.org wheezy/non-free Translation-en [66.1 kB] Fetched 10.5 MB in 4s (2,476 kB/s) W: Failed to fetch http://packages.networkradius.com/debian/dists/wheezy/main/binary-amd64/Pac… 500 Bad redirection (invalid URL) E: Some index files failed to download. They have been ignored, or old ones used instead. Regards, Rui Ribeiro > Message: 6 > Date: Wed, 10 Sep 2014 16:56:06 -0400 > From: Alan DeKok <aland(a)deployingradius.com> > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Subject: Re: Release of Version 3.0.4 > Message-ID: <5410BAE6.8030609(a)deployingradius.com> > Content-Type: text/plain; charset=ISO-8859-1 > > We encourage people to use the latest release, even when OS vendors > don't upgrade their packages. > > To help people use the latest release, we now offer "official" > pre-built packages. They currently are for a limited range of systems. > > If there is demand for more packages, please ask. We'll see what we > can do. > > The packages are available here: > > https://packages.networkradius.com/ > > Alan DeKok. > > >

4 3

How to store data to a custom table in phpmyadmin?
by rafa alfurqan 12 Sep '14

12 Sep '14

Hi all, is it possible to store IMSI code (IMSI for eap-sim data in users file) from freeradius to a custom table that i made in phpmyadmin, if it's possible can someone show me if the examples of the implementation? what i want to achieve is that for freeradius to store IMSI data to asterisk's real time table or for asterisk to read from freeradius's table for sip.conf and extension.conf username in asterisk files. really need help.

1 0

/etc/raddb/sites-enabled/default[90]: Expecting section start brace '{' after "{ Huntgroup-Name"
by Jeroen Bosch 11 Sep '14

11 Sep '14

Dear freeRADIUS users, FreeRADIUS Version 2.1.12 I'm trying to setup Huntgroups using the HOWTO http://wiki.freeradius.org/guide/SQL-Huntgroup-HOWTO After I add "{ Huntgroup-Name := "%{sql:SELECT groupnameFROM radhuntgroup WHERE nasipaddress='%{NAS-IP-Address}'}" }" to my sites-enabled/default configuration I get the following error message: including configuration file /etc/raddb/sites-enabled/default /etc/raddb/sites-enabled/default[90]: Expecting section start brace '{' after "{ Huntgroup-Name" Errors reading /etc/raddb/radiusd.conf How to resolve this error message? Thanks in advance! Kind regards, Jeroen Bosch *Design Driven Networking - Smarter, better, controllable networks * Jeroen Bosch | Developer Business Centre Leeuwenveldseweg 5n, 1382 LV Weesp, NL m: +31 6 22768473 | t: +31 20 894 3412 jeroen.bosch(a)netyce.com | www.netyce.com

2 3

Using radmin with v3.0.4
by Kev Pearce 11 Sep '14

11 Sep '14

Hi, With the following in my config: listen { type = control socket = ${run_dir}/${name}.sock mode = rw } I get this on start-up: radiusd: #### Opening IP addresses and Ports #### listen { type = "control" listen { socket = "@localstatedir@/run/radiusd/radiusd.sock" mode = "rw" } Failed binding to @localstatedir@/run/radiusd/radiusd.sock: No such file or directory Is there a different way to setup radmin in v3? Cheers Kev/.

2 2

How to reject when user is not in the appropiate Huntgroup for site?
by Jeroen Bosch 11 Sep '14

11 Sep '14

Dear freeRADIUS users, FreeRADIUS Version 2.1.12 I'm trying to setup Huntgroups using the HOWTO http://wiki.freeradius.org/guide/SQL-Huntgroup-HOWTO after adding "update reply { Huntgroup-Name := "%{sql:SELECT groupname FROM radhuntgroup WHERE nasipaddress='%{NAS-IP-Address}'}" }" to my sites-enabled/default I do see the queries in the debugging information checking if the supplied user is part of the Huntgroup however when this is not the case the user still get's access: How do I reject when a user is nog in the appropiate Huntgroup? Thanks in advance! Kind regards, Jeroen Bosch *Design Driven Networking - Smarter, better, controllable networks * Jeroen Bosch | Developer Business Centre Leeuwenveldseweg 5n, 1382 LV Weesp, NL m: +31 6 22768473 | t: +31 20 894 3412 jeroen.bosch(a)netyce.com | www.netyce.com

2 4

dynamic_clients example in v3.0.4
by Kev Pearce 11 Sep '14

11 Sep '14

Hi all, In the dynamic_clients example file in FR v3.0.4 it uses the netmask field, but when you start up you get: 'netmask' field found in client dynamic is deprecated, use CIDR notation instead. Please fix your configuration Support for 'netmask' will be removed in a future release Just thought I'd let you know so you can amend the example dynamic_clients file. Cheers Kev/.

2 1

Subject: Re: Release of Version 3.0.4
by Mike Poole 11 Sep '14

11 Sep '14

> Message: 6 > Date: Wed, 10 Sep 2014 16:56:06 -0400 > From: Alan DeKok <aland(a)deployingradius.com<mailto:aland@deployingradius.com>> > To: FreeRadius users mailing list o <freeradius-users(a)lists.freeradius.org<mailto:freeradius-users@lists.freeradius.org>> > Subject: Re: Release of Version 3.0.4 > Message-ID: <5410BAE6.8030609(a)deployingradius.com<mailto:5410BAE6.8030609@deployingradius.com>> > Content-Type: text/plain; charset=ISO-8859-1 > We encourage people to use the latest release, even when OS vendors don't upgrade their packages. > To help people use the latest release, we now offer "official" > pre-built packages. They currently are for a limited range of systems. > If there is demand for more packages, please ask. We'll see what we can do. > The packages are available here: > https://packages.networkradius.com/ > Alan DeKok. > ************************************************* Thank you Alan. We've been stuck on Wheezy and 2.1.12 and doing patches/fixes ourselves for the last couple of years. We are in the process of moving to Ubuntu for development but that's months away and this will help immensely.

2 1

change mac-address (Calling-Station-Id) on radius-request from AP to lower case
by Попов Александр 11 Sep '14

11 Sep '14

Hello, friends. Ubuntu 14.04, freeradius 2.1.12+dfsg-1.1ubuntu0.1 How to change mac-address (Calling-Station-Id) on radius-request from AP to lower case? Default rewrite_calling_station_id not help. Thank you. С уважением, Попов Александр pop5s(a)mail.ru

2 2

Request is supposed to be proxied to Realm SOMEREALM. Not doing EAP.
by Axel Luttgens 10 Sep '14

10 Sep '14

Hello, With proxying turned on, when an "outsider" connects to an AP of ours, the debug log shows: ... eap: Request is supposed to be proxied to Realm SOMEREALM. Not doing EAP. [ eap ] = noop ... Conversely, everything in the authorize section that follows: eap { ok = return } is executed for each roundtrip between the client and the remote server; in the case of EAP, that may mean a dozen of DB queries, a dozen of lines logged thru a linelog instance, and so on. Is this the behavior to be expected? (another way to ask: may I assume I didn't err in my config?) TIA, Axel

5 9