- Freeradius-Users - lists.freeradius.org

Cannot disconnect radius user using radclient
by Iftakhul Anwar 10 Mar '13

10 Mar '13

Hi All, I've successfully install coovachili anda freeradius using mysql database. Now I've just try to disconnect coovachilli user online with radclient command: I try with command bellow to disconect user="alice" * echo "User-Name=alice" | radclient -x localhost:3779 disconnect testing123 * *Sending Disconnect-Request of id 126 to 127.0.0.1 port 3779* * User-Name = "alice"* *rad_recv: Disconnect-ACK packet from host 127.0.0.1 port 3779, id=126, length=20* And then, user alice be disconnect from coova. Then i try to give disconnect command using remote acces using command bellow : *echo "User-Name=alice" | radclient -x 192.168.2.3:3779 disconnect testing123* *Sending Disconnect-Request of id 78 to 192.168.2.3 port 3779* * User-Name = "alice"* *radclient: no response from server for ID 78 socket 3* * * Note: 192.168.2.3 is ip of radius server But no response from radius server. I've add on client.conf ip address which i use to radius client.But still have same problem. I try that command on my local machine using comand : *echo "User-Name=alice" | radclient -x 192.168.2.3:3779 disconnect testing123* * * Radius still no response. How i can execute this command both of on local and on remote machine ? Thanks -- *M.Iftakhul Anwar* Meruvian Integrator High Performance Computing / Cloud Computing (HPC/CC) Office Phone : 021-93586577 Mobile Phone : 085215331477 Blog : http://blog.mervpolis.com/roller/anwar FB : http://www.facebook.com/troya.adromeda Website : www.meruvian.org

3 8

free time
by Jed Gainer 10 Mar '13

10 Mar '13

I would like to ignore bandwidth usage between 2 and 5 am. sqlcounter counterChilliSpotMaxTotalOctetsDaily { counter-name = ChilliSpot-Max-Total-Octets-Daily check-name = CS-Total-Octets-Daily counter-type = data reply-name = ChilliSpot-Max-Total-Octets sqlmod-inst = sql key = User-Name reset = daily query = "SELECT IFNULL((SUM(AcctInputOctets + AcctOutputOctets)),0) FROM radacct WHERE UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime > UNIX_TIMESTAMP(CONCAT(CURDATE(),' ', '00:00:00')) AND UNIX_TIMESTAMP(AcctStartTime) + AcctSessionTime NOT BETWEEN UNIX_TIMESTAMP(CONCAT(CURDATE(),' ', '02:00:00')) AND UNIX_TIMESTAMP(CONCAT(CURDATE(),' ', '05:00:00'))" } Should I do it all in the SQL like that? or does someone have a better idea.

3 5

Simple Peap + PAP authentication
by Matthew Ceroni 10 Mar '13

10 Mar '13

Trying to setup 802.1x authentication on my home router (running OpenWRT). http://pastebin.com/fWtNZ8FD Above is the output of radiusd -X I am trying to connect via my Android phone. Shouldn't the request coming from the device include the ClearText password it is looking for? I am simply listing the user in the users file. No LDAP, AD, SQL database. Thanks

2 1

Release of Version 2.2.1
by Alan DeKok 09 Mar '13

09 Mar '13

It's been a while since Version 2.2 was released, so it's time for the next release. I'd like to fix the reported memory leak issue, and then release it later next week. The changes are minor, and mostly cleanups and bug fixes. Please let me know if there are any issues. Alan DeKok.

4 5

Re: Failed to load module "jradius" freeradius server
by David Bird 09 Mar '13

09 Mar '13

Hi Arran, Thanks for the note that support for rlm_jradius has been removed in FR 3.0. I'm slightly disappointed that it wasn't brought forward from 2.x, but can understand that it's not considered a standard module (even though it is included in some popular distributions). I haven't been following the changes in 3.0 very carefully, but if the demand is there, I will look into updating it for 3.0. Even though I do consider supporting and compiling freeradius modules 'on-topic' for freeradius mailing list, anyone is welcome to bring up the topic at jradius(a)coova.org instead. Cheers, David > Date: Thu, 7 Mar 2013 11:02:17 -0500 > From: Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Subject: Re: Failed to load module "jradius" freeradius server > Message-ID: <C9EB7AE3-492A-4D59-BE04-1645044DC3E8(a)freeradius.org> > Content-Type: text/plain; charset=iso-8859-1 > > > On 7 Mar 2013, at 10:55, Iftakhul Anwar <anwar(a)meruvian.org> wrote: > > > Actually i install freeradius from apt-get , > > Right, so jradius won't have been built. > > jradius support is going away, it will *NOT* be in Version 3 unless someone contributes a new version of the module which works with the updated jradius protocol. > > -Arran > > >

2 1

hashed username in MySQL?
by Adam Moffett 08 Mar '13

08 Mar '13

I had a user set up in the users file and it was all working. Now I'm experimenting with MySQL and in the debug output I'm looking at the SQL queries and instead of the actual clear text username I'm getting this: AE576AA1F2CB984F6D07750C01C0EAF9 ...which I assume is the username hashed. Is there some simple option someone can't think of that would explain a clear text username being ok for the files module, but getting a hashed username in the SQL module? An unrelated comment: The last time I used RADIUS there was PAP and CHAP. MSCHAP was a new thing. The amount that has changed in the past 15 years is a little overwhelming.

2 1

Freeradius 2.2.0 memory leak issue.
by kao quadrantx 08 Mar '13

08 Mar '13

Hi, i got the same issue in freeradius memory issue http://freeradius.1045715.n5.nabble.com/Memory-leak-in-FR-2-1-10-and-2-2-0-… My test ENV: eapol_test with md5 to do AUTH (client) ---------> freeradius 2.2.0 to proxy the client request (proxy) -----------------------------> freeradius 2.2.0 More request more memory (VmRSS) consumed by radiusd (proxy), and the daemon performance will also down. And i use valgrind to log this: ==14786== ==14786== HEAP SUMMARY: ==14786== in use at exit: 172,724 bytes in 2,819 blocks ==14786== total heap usage: 43,388 allocs, 40,569 frees, 5,148,356 bytes allocated ==14786== ==14786== 4 bytes in 1 blocks are definitely lost in loss record 1 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x633A061: strdup (in /lib/libc-2.9.so) ==14786== by 0x40E641: cf_item_parse (conffile.c:953) ==14786== by 0x41BF4A: listen_parse (listen.c:1953) ==14786== by 0x41C5CA: listen_init (listen.c:2174) ==14786== by 0x438A36: radius_event_init (event.c:3648) ==14786== by 0x425971: main (radiusd.c:332) ==14786== ==14786== 5 bytes in 1 blocks are definitely lost in loss record 3 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x633A061: strdup (in /lib/libc-2.9.so) ==14786== by 0x40E641: cf_item_parse (conffile.c:953) ==14786== by 0x40EE5C: cf_section_parse (conffile.c:1173) ==14786== by 0x41DE96: switch_users (mainconfig.c:614) ==14786== by 0x41E6B9: read_mainconfig (mainconfig.c:874) ==14786== by 0x4257CD: main (radiusd.c:263) ==14786== ==14786== 368 (136 direct, 232 indirect) bytes in 1 blocks are definitely lost in loss record 477 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x42B8AF: rad_malloc (util.c:347) ==14786== by 0x41B9BF: listen_alloc (listen.c:1735) ==14786== by 0x41BC83: proxy_new_listener (listen.c:1838) ==14786== by 0x43D514: home_server_create_callback (realms.c:2254) ==14786== by 0x4E45CFA: WalkNodeInOrder (rbtree.c:551) ==14786== by 0x4E45E78: rbtree_walk (rbtree.c:603) ==14786== by 0x43D564: home_server_create_listeners (realms.c:2280) ==14786== by 0x41CA15: listen_init (listen.c:2323) ==14786== by 0x438A36: radius_event_init (event.c:3648) ==14786== by 0x425971: main (radiusd.c:332) ==14786== ==14786== 6,800 bytes in 25 blocks are possibly lost in loss record 522 of 527 ==14786== at 0x4C252BE: calloc (vg_replace_malloc.c:593) ==14786== by 0x40104BE: _dl_allocate_tls (in /lib/ld-2.9.so) ==14786== by 0x5491C14: pthread_create (in /lib/libpthread-2.9.so) ==14786== by 0x42A611: spawn_thread (threads.c:663) ==14786== by 0x42AB1B: thread_pool_init (threads.c:862) ==14786== by 0x438803: radius_event_init (event.c:3575) ==14786== by 0x425971: main (radiusd.c:332) ==14786== ==14786== 37,440 (18,720 direct, 18,720 indirect) bytes in 60 blocks are definitely lost in loss record 526 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x4E488C8: pairalloc (valuepair.c:72) ==14786== by 0x4E4AFFC: pairmake (valuepair.c:1526) ==14786== by 0x4E4B553: pairread (valuepair.c:1736) ==14786== by 0x4E4B8C4: userparse (valuepair.c:1850) ==14786== by 0x412A7F: radius_exec_program (exec.c:583) ==14786== by 0x6C1A5F5: ??? ==14786== by 0x6C1A71B: ??? ==14786== by 0x421CAB: call_modsingle (modcall.c:304) ==14786== by 0x422AD5: modcall (modcall.c:686) ==14786== by 0x41FCB8: indexed_modcall (modules.c:740) ==14786== by 0x4216FC: module_post_auth (modules.c:1662) ==14786== ==14786== 37,440 bytes in 120 blocks are definitely lost in loss record 527 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x4E488C8: pairalloc (valuepair.c:72) ==14786== by 0x4E4AFFC: pairmake (valuepair.c:1526) ==14786== by 0x4E4B553: pairread (valuepair.c:1736) ==14786== by 0x4E4B8C4: userparse (valuepair.c:1850) ==14786== by 0x412A7F: radius_exec_program (exec.c:583) ==14786== by 0x6C1A5F5: ??? ==14786== by 0x421CAB: call_modsingle (modcall.c:304) ==14786== by 0x422AD5: modcall (modcall.c:686) ==14786== by 0x41FCB8: indexed_modcall (modules.c:740) ==14786== by 0x4216B4: module_pre_proxy (modules.c:1645) ==14786== by 0x435F6E: successfully_proxied_request (event.c:2230) ==14786== ==14786== LEAK SUMMARY: ==14786== definitely lost: 56,305 bytes in 183 blocks ==14786== indirectly lost: 18,952 bytes in 63 blocks ==14786== possibly lost: 6,800 bytes in 25 blocks ==14786== still reachable: 90,667 bytes in 2,548 blocks ==14786== suppressed: 0 bytes in 0 blocks ==14786== Reachable blocks (those to which a pointer was found) are not shown. ==14786== To see them, rerun with: --leak-check=full --show-reachable=yes ==14786== ==14786== For counts of detected and suppressed errors, rerun with: -v ==14786== Use --track-origins=yes to see where uninitialised values come from ==14786== ERROR SUMMARY: 715158 errors from 470 contexts (suppressed: 201 from 43)

3 10

Re: Failed to load module "jradius" freeradius server
by Alan Buxey 08 Mar '13

08 Mar '13

"This is the freeradius list, not the jradius list. If you want help and advice then use the appropriate list" Which bit wasn't clear?

1 0

Re: Failed to load module "jradius" freeradius server
by Alan Buxey 08 Mar '13

08 Mar '13

This is the freeradius list, not the jradius list. If you want help and advice then use the appropriate list Many thanks alan

2 1

Re: Freeradius with either LDAP or Mysql Error lib not found
by Alan Buxey 08 Mar '13

08 Mar '13

As Fajar says, some distros split up the functions into separate packages (so you don't need to install loads of things just to have a basic server) use your package manager to find/install the sub packages alan -- This smartphone uses free WiFi around the world with eduroam, now that's what I call smart.

2 1