- Freeradius-Users - lists.freeradius.org

copying module instead of build
by Lloyd Gill 23 Apr '14

23 Apr '14

For systems with similar OS versions, would it be ok to build the module on one server and copy over the pam_radius_auth.so module to other servers? I understand it would likely be ideal to build fresh on each server, but would it be advised to simply copy the module for quicker deployment? Thanks, Lloyd

2 1

MySQL Cluster + FreeRADIUS
by Antonio Modesto 23 Apr '14

23 Apr '14

Hi there, We are an ISP and we want to build a high redundancy radius environment. We are thinking about using the MySQL Cluster DBMS, once it would be compatible with our actual schema and would not require any changes in our management application or freeradius. Has anybody got any experience with this scenario? If so, what had to be changed? Were the results good? I would be very thankful for any tips. Thanks in advance. Regards. -- Atenciosamente, Antonio Modesto Amaral Sousa Gerente de rede Praça Getúlio Vargas, 77 - Sala 308 - Centro Santo Antônio do Monte/MG - 35.560-000 (37) 3281-2800 (ramal: 110) / 0800-300-2800 / *37.9814-8465* *modesto(a)isimples.com.br* / faleconosco(a)isimples.com.br http://www.isimples.com.br

2 1

multiple ldap servers in freeradius
by val john 23 Apr '14

23 Apr '14

Hi Guys Is it possible to add multiple ldap servers in freeradius configuration Thank you John

7 8

freeradius and heartbleed tests in Debian
by Rui Ribeiro 23 Apr '14

23 Apr '14

Hi, Just to let you know the Debian 7 update version of ssl is 1.0.1e-2+deb7u7, and as such FreeRadius refuses to boot unless you put allow_vulnerable_openssl in radiusd.conf. Regards, Rui Ribeiro

4 4

RE: Where to download Freeradius version 2.2.4 debian package?
by Rui Ribeiro 22 Apr '14

22 Apr '14

Hi Stefan and Ila, For Debian 7 (Ubuntu is Debian based), I do before compiling: aptitude install libssl-dev quilt libtool libltdl3-dev libpam0g-dev libmysqlclient-dev libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev libperl-dev libpcap-dev python-dev libsnmp-dev libpq-dev debhelper > > Message: 1 > Date: Tue, 22 Apr 2014 11:54:08 +0000 > From: Stefan Paetow <Stefan.Paetow(a)ja.net> > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Subject: RE: Where to download Freeradius version 2.2.4 debian > package? > Message-ID: <C072996E0B81144DBB9426B44462540CE61415@EXC001> > Content-Type: text/plain; charset="utf-8" > > There is no version 2.2.4 of FreeRADIUS on Debian or Ubuntu. > > You will have to build it yourself. Now, you?ve posted some build output. > It shows that you do not have the postgresql development libraries > installed (and likely a lot of other development libraries are missing as > well. You must install those with ?apt-get install? first before you > attempt to build them. > > With Regards > > Stefan > > From: freeradius-users-bounces+stefan.paetow=ja.net(a)lists.freeradius.org[mailto: > freeradius-users-bounces+stefan.paetow=ja.net(a)lists.freeradius.org] On > Behalf Of Ilavajuthy Palanisamy > Sent: 22 April 2014 07:44 > To: FreeRadius users mailing list > Subject: Where to download Freeradius version 2.2.4 debian package? > > Hi, > > I'm looking for Freeradius version 2.2.4 debian package to install in > Ubuntu 12.04. > I there any location where I can download the Freeradius 2.2.4 debian > package? > When I do 'sudo apt-get install freeradius', it is installing Freeradius > 2.1.12 version. > Is there a way to specify a particular version of freeradius during > apt-get install? > > What are the steps to create debian package from the source code? > I tried the below command, but the debian package creation failed. > > > > > tar zxf freeradius-server-2.X.Y.tar.gz > > cd freeradius-server-2.X.Y > > > > sudo su > > dpkg-buildpackage -b -uc > .... > checking for suffix of executables... > checking for suffix of object files... (cached) o > checking whether we are using the GNU C compiler... (cached) yes > checking whether gcc accepts -g... (cached) yes > checking for gcc option to accept ISO C89... (cached) none needed > checking for libpq-fe.h... yes > checking for PQconnectdb in -lpq... no > configure: error: set --without-rlm_sql_postgresql to disable it > explicitly. > configure: error: ./configure failed for ./drivers/rlm_sql_postgresql > configure: error: ./configure failed for src/modules/rlm_sql > make: *** [config.status] Error 1 > dpkg-buildpackage: error: debian/rules build gave error exit status 2 > > > > Any pointers will be really helpful. > > Thanks, > Ila. > > > Janet(UK) is a trading name of Jisc Collections and Janet Limited, a > not-for-profit company which is registered in England under No. 2881024 > and whose Registered Office is at Lumen House, Library Avenue, > Harwell Oxford, Didcot, Oxfordshire. OX11 0SG. VAT No. 614944238 > >

1 0

Where to download Freeradius version 2.2.4 debian package?
by Ilavajuthy Palanisamy 22 Apr '14

22 Apr '14

Hi, I'm looking for Freeradius version 2.2.4 debian package to install in Ubuntu 12.04. I there any location where I can download the Freeradius 2.2.4 debian package? When I do 'sudo apt-get install freeradius', it is installing Freeradius 2.1.12 version. Is there a way to specify a particular version of freeradius during apt-get install? What are the steps to create debian package from the source code? I tried the below command, but the debian package creation failed. tar zxf freeradius-server-2.X.Y.tar.gz cd freeradius-server-2.X.Y sudo su dpkg-buildpackage -b -uc .... checking for suffix of executables... checking for suffix of object files... (cached) o checking whether we are using the GNU C compiler... (cached) yes checking whether gcc accepts -g... (cached) yes checking for gcc option to accept ISO C89... (cached) none needed checking for libpq-fe.h... yes checking for PQconnectdb in -lpq... no configure: error: set --without-rlm_sql_postgresql to disable it explicitly. configure: error: ./configure failed for ./drivers/rlm_sql_postgresql configure: error: ./configure failed for src/modules/rlm_sql make: *** [config.status] Error 1 dpkg-buildpackage: error: debian/rules build gave error exit status 2 Any pointers will be really helpful. Thanks, Ila.

2 1

Imminent release of 2.2.5 and 3.0.3
by Alan DeKok 22 Apr '14

22 Apr '14

For people with time, please test the v2.x.x branch, and the v3.0.x branch. We'd like to issue new releases to address the "heartbleed" issue with OpenSSL. Alan DeKok.

11 30

FreeRadius - Multiple Clients
by Casey Daniels 21 Apr '14

21 Apr '14

Hello, Starting to get into using FreeRADIUS and had a question, that I can't seem to find the answer to, I'm guessing its because I'm not even totally clear of the correct terminology. I'm using FreeRADIUS 3.0.? not sure of the exact version as I complied it a month or two ago and I don't have access to the computer right this second. Okay, my question is how do I set things up so the FreeRADIUS will evaluate a request based on where its coming from. So given the following Set up. Have two services wanting to use FreeRADIUS for authentication 1. Wifi 2. a HTTP Proxy I also have a bunch of users. All users can use Wifi (unless of course I need to revoke them for a little bit) Then certain Users need to be authenticated against the HTTP Proxy to allow them to do direct connections instead I plan on using the standard users file if possible. Thank You, Casey

5 20

Duplicate release of IP ?
by adrian.sandu＠asandu.eu 19 Apr '14

19 Apr '14

Hello list, For some time now, I've been getting some complaints that some users are getting duplicate ips and not doing any traffic .. Allocated IP: x.x.x.42 from main (did cli 00:25:22 port 622 user szc) Released IP x.x.x.42 (did cli 00:25:22 user szc) Allocated IP: x.x.x.42 from main (did cli C8:3A:35 port 25 user vii) Released IP x.x.x.42 (did cli C8:3A:35 user vii) Allocated IP: x.x.x.42 from main (did cli 00:1B:B9 port 670 user cor) Released IP x.x.x.42 (did cli 00:1B:B9 user cor) Allocated IP: x.x.x.42 from main (did cli 64:70:02 port 8 user tur) Released IP x.x.x.42 (did cli 64:70:02 user tur) Released IP x.x.x.42 (did cli C8:3A:35 user vii) Allocated IP: x.x.x.42 from main (did cli 00:26:22 port 610 user fuv) Released IP x.x.x.42 (did cli 00:26:22 user fuv) Allocated IP: x.x.x.42 from main (did cli 00:19:CB port 88 user stl) Released IP x.x.x.42 (did cli 00:19:CB user stl) Allocated IP: x.x.x.42 from main (did cli 00:14:0B port 436 user per) Released IP x.x.x.42 (did cli 00:14:0B user per) Allocated IP: x.x.x.244 from main (did cli 07:50:32 port 315 user visan Released IP x.x.x.244 (did cli 07:50:32 user visan Allocated IP: x.x.x.244 from main (did cli 37:5B:5D port 175 user cristea Released IP x.x.x.244 (did cli 37:5B:5D user cristea Allocated IP: x.x.x.244 from main (did cli 4A:69:39 port 140 user dinita Released IP x.x.x.244 (did cli 4A:69:39 user dinita Allocated IP: x.x.x.244 from main (did cli DC:D9:2F port 503 user dragusin Released IP x.x.x.244 (did cli DC:D9:2F user dragusin Allocated IP: x.x.x.244 from main (did cli 52:E2:FA port 33 user pamblica Released IP x.x.x.244 (did cli 52:E2:FA user pamblica Allocated IP: x.x.x.244 from main (did cli 95:AB:62 port 431 user ocoleanu Released IP x.x.x.244 (did cli 95:AB:62 user ocoleanu Allocated IP: x.x.x.244 from main (did cli 00:00:00 port 686 user lungu Released IP x.x.x.244 (did cli 00:00:00 user lungu Released IP x.x.x.244 (did cli 00:00:00 user lungu Allocated IP: x.x.x.244 from main (did cli 17:AA:E8 port 643 user ene Released IP x.x.x.244 (did cli 17:AA:E8 user ene Released IP x.x.x.244 (did cli 00:00:00 user lungu Allocated IP: x.x.x.244 from main (did cli EB:AF:CF port 173 user simion Released IP x.x.x.244 (did cli EB:AF:CF user simion Allocated IP: x.x.x.244 from main (did cli 15:B2:E2 port 216 user coroiu Released IP x.x.x.244 (did cli 15:B2:E2 user coroiu Allocated IP: x.x.x.244 from main (did cli 2D:AD:65 port 281 user stefan Released IP x.x.x.244 (did cli 2D:AD:65 user stefan Allocated IP: x.x.x.244 from main (did cli 03:15:27 port 545 user spita Released IP x.x.x.244 (did cli 03:15:27 user spita Allocated IP: x.x.x.244 from main (did cli 2D:AD:65 port 281 user stefan Released IP x.x.x.244 (did cli 2D:AD:65 user stefan Allocated IP: x.x.x.244 from main (did cli 2F:58:05 port 376 user simion Released IP x.x.x.244 (did cli 2F:58:05 user simion I also made a lil' script to monitor what is in radacct/radippool .. what ifconfig says and what radwho says...I can provide the source if wanted .. 2014-04-15 11:46:02 - 708 distinct ( 708 total ) framedipaddress in SQL radippool 2014-04-15 11:46:02 - Total Connected in radius SQL radacct : 380 2014-04-15 11:46:02 - Distinct IPs in radius SQL radacct: 379 2014-04-15 11:46:02 - Users sharing IP: x.x.x.x.42 - 2 - vii tur 2014-04-15 11:46:02 - There are a total of 15 reserved (SQL radreply) IPs that are connected (SQL radacct) 2014-04-15 11:46:02 - There are a total of 15 distinct reserved (SQL radreply) IPs that are connected (SQL radacct) 2014-04-15 11:46:02 - There are a total of 45 reserved IPs in SQL radreply 2014-04-15 11:46:02 - There are a total of 45 distinct reserved IPs in SQL radreply 2014-04-15 11:46:02 - There are 363 total connected users in radippool. 2014-04-15 11:46:02 - There are 363 distinct connected users in radippool. 2014-04-15 11:46:02 - There are 363 total connected user IPs in radippool. 2014-04-15 11:46:02 - There are 363 distinct connected user IPs in radippool. 2014-04-15 11:46:02 - Total IPs in radwho CLI: 380 2014-04-15 11:46:02 - Distinct IPs in radwho CLI: 379 2014-04-15 11:46:02 - Total IPs in ifconfig CLI: 380 2014-04-15 11:46:02 - Distinct IPs in ifconfig CLI: 379 2014-04-15 11:46:02 - FAIL: Total connected 15 (reserved) + 363 (radippool) != 380 (radacct) - should be 378 2014-04-15 18:18:01 - 708 distinct ( 708 total ) framedipaddress in SQL radippool 2014-04-15 18:18:01 - Total Connected in radius SQL radacct : 404 2014-04-15 18:18:01 - Distinct IPs in radius SQL radacct: 403 2014-04-15 18:18:01 - Users sharing IP: x.x.x.244 - 2 - lungu ene 2014-04-15 18:18:01 - There are a total of 13 reserved (SQL radreply) IPs that are connected (SQL radacct) 2014-04-15 18:18:01 - There are a total of 13 distinct reserved (SQL radreply) IPs that are connected (SQL radacct) 2014-04-15 18:18:01 - There are a total of 45 reserved IPs in SQL radreply 2014-04-15 18:18:01 - There are a total of 45 distinct reserved IPs in SQL radreply 2014-04-15 18:18:01 - There are 390 total connected users in radippool. 2014-04-15 18:18:01 - There are 390 distinct connected users in radippool. 2014-04-15 18:18:01 - There are 390 total connected user IPs in radippool. 2014-04-15 18:18:01 - There are 390 distinct connected user IPs in radippool. 2014-04-15 18:18:01 - Total IPs in radwho CLI: 405 2014-04-15 18:18:01 - Distinct IPs in radwho CLI: 404 2014-04-15 18:18:01 - Total IPs in ifconfig CLI: 404 2014-04-15 18:18:01 - Distinct IPs in ifconfig CLI: 403 2014-04-15 18:18:01 - FAIL: Total connected 13 (reserved) + 390 (radippool) != 404 (radacct) - should be 403 The script is ran every 2 minutes and only has selects. The "sharing" ip part goes on for some time .. I can provide full logs.. I'm running gentoo [ebuild R ] net-dialup/ppp-2.4.6:0/2.4.6 USE="pam radius -activefilter -atm -dhcp -eap-tls -gtk -ipv6" 0 kB [ebuild R ] net-dialup/rp-pppoe-3.11-r1 USE="-X" 0 kB [ebuild R ] dev-db/mysql-5.5.32 USE="community perl ssl -cluster -debug -embedded -extraengine -jemalloc -latin1 -max-idx-128 -minimal -profiling (-selinux) -static -systemtap -tcmalloc {-test}" 0 kB [ebuild R ] net-dialup/freeradius-2.2.0 USE="mysql pam readline ssl -bindist -debug (-firebird) -iodbc -kerberos -ldap -odbc -oracle -pcap -postgres -python -sqlite (-ruby%)" 0 kB The machine seems idle .. 16:06:50 up 2 days, 3:48, 2 users, load average: 0.17, 0.27, 0.39 radius is running with -xx for the past few days so I can provide logs .. 828M /var/log/radius/radius.log I've tried looking through them but can't figure out why it would do that ..

3 7

Executing an external program
by Muhammad Usman 18 Apr '14

18 Apr '14

Hi, I am using Freeradius version 2.2.4, I want to execute an external Java program, whenever I receive an Accounting Stop packet, I have added the below code in the "Accounting" section of /etc/raddb/sites-enabled/default accounting { # # Create a 'detail'ed log of the packets. # Note that accounting requests which are proxied # are also logged in the detail file. detail # daily # Update the wtmp file # # If you don't use "radlast", you can delete this line. unix # # For Simultaneous-Use tracking. # # Due to packet losses in the network, the data here # may be incorrect. There is little we can do about it. radutmp # sradutmp # Return an address to the IP Pool when we see a stop record. # main_pool # # Log traffic to an SQL database. # # See "Accounting queries" in sql.conf sql # # If you receive stop packets with zero session length, # they will NOT be logged in the database. The SQL module # will print a message (only in debugging mode), and will # return "noop". # # You can ignore these packets by uncommenting the following # three lines. Otherwise, the server will not respond to the # accounting request, and the NAS will retransmit. # # if (noop) { # ok # } # # Instead of sending the query to the SQL server, # write it into a log file. # # sql_log # Cisco VoIP specific bulk accounting # pgsql-voip # For Exec-Program and Exec-Program-Wait exec # Filter attributes from the accounting response. attr_filter.accounting_response update reply { Tmp-String-0 = "%{exec:/usr/bin/java -jar "/var/AccountingProcessor.jar" arg1 arg2 >> /home/user/capture.log}" } # # See "Autz-Type Status-Server" for how this works. # # Acct-Type Status-Server { # # } } where arg1 and arg2 will be the radius accounting stop packet attributes. i will add the IF condition for checking stop packets later Currently I am receiving error in logs, error is mentioned below ++[exec] returns noop [attr_filter.accounting_response] expand: %{User-Name} -> muhd.usman(a)hotmail.com attr_filter: Matched entry DEFAULT at line 12 ++[attr_filter.accounting_response] returns updated ERROR: Badly formatted variable: %{exec:/usr/bin/java -jar ++[reply] returns updated Sending Accounting-Response of id 14 to 192.168.6.121 port 55006 Finished request 1. Thanks in advance

4 10