- Freeradius-Users - lists.freeradius.org

Simple Peap + PAP authentication
by Matthew Ceroni 10 Mar '13

10 Mar '13

Trying to setup 802.1x authentication on my home router (running OpenWRT). http://pastebin.com/fWtNZ8FD Above is the output of radiusd -X I am trying to connect via my Android phone. Shouldn't the request coming from the device include the ClearText password it is looking for? I am simply listing the user in the users file. No LDAP, AD, SQL database. Thanks

2 1

Release of Version 2.2.1
by Alan DeKok 09 Mar '13

09 Mar '13

It's been a while since Version 2.2 was released, so it's time for the next release. I'd like to fix the reported memory leak issue, and then release it later next week. The changes are minor, and mostly cleanups and bug fixes. Please let me know if there are any issues. Alan DeKok.

4 5

Re: Failed to load module "jradius" freeradius server
by David Bird 09 Mar '13

09 Mar '13

Hi Arran, Thanks for the note that support for rlm_jradius has been removed in FR 3.0. I'm slightly disappointed that it wasn't brought forward from 2.x, but can understand that it's not considered a standard module (even though it is included in some popular distributions). I haven't been following the changes in 3.0 very carefully, but if the demand is there, I will look into updating it for 3.0. Even though I do consider supporting and compiling freeradius modules 'on-topic' for freeradius mailing list, anyone is welcome to bring up the topic at jradius(a)coova.org instead. Cheers, David > Date: Thu, 7 Mar 2013 11:02:17 -0500 > From: Arran Cudbard-Bell <a.cudbardb(a)freeradius.org> > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Subject: Re: Failed to load module "jradius" freeradius server > Message-ID: <C9EB7AE3-492A-4D59-BE04-1645044DC3E8(a)freeradius.org> > Content-Type: text/plain; charset=iso-8859-1 > > > On 7 Mar 2013, at 10:55, Iftakhul Anwar <anwar(a)meruvian.org> wrote: > > > Actually i install freeradius from apt-get , > > Right, so jradius won't have been built. > > jradius support is going away, it will *NOT* be in Version 3 unless someone contributes a new version of the module which works with the updated jradius protocol. > > -Arran > > >

2 1

hashed username in MySQL?
by Adam Moffett 08 Mar '13

08 Mar '13

I had a user set up in the users file and it was all working. Now I'm experimenting with MySQL and in the debug output I'm looking at the SQL queries and instead of the actual clear text username I'm getting this: AE576AA1F2CB984F6D07750C01C0EAF9 ...which I assume is the username hashed. Is there some simple option someone can't think of that would explain a clear text username being ok for the files module, but getting a hashed username in the SQL module? An unrelated comment: The last time I used RADIUS there was PAP and CHAP. MSCHAP was a new thing. The amount that has changed in the past 15 years is a little overwhelming.

2 1

Freeradius 2.2.0 memory leak issue.
by kao quadrantx 08 Mar '13

08 Mar '13

Hi, i got the same issue in freeradius memory issue http://freeradius.1045715.n5.nabble.com/Memory-leak-in-FR-2-1-10-and-2-2-0-… My test ENV: eapol_test with md5 to do AUTH (client) ---------> freeradius 2.2.0 to proxy the client request (proxy) -----------------------------> freeradius 2.2.0 More request more memory (VmRSS) consumed by radiusd (proxy), and the daemon performance will also down. And i use valgrind to log this: ==14786== ==14786== HEAP SUMMARY: ==14786== in use at exit: 172,724 bytes in 2,819 blocks ==14786== total heap usage: 43,388 allocs, 40,569 frees, 5,148,356 bytes allocated ==14786== ==14786== 4 bytes in 1 blocks are definitely lost in loss record 1 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x633A061: strdup (in /lib/libc-2.9.so) ==14786== by 0x40E641: cf_item_parse (conffile.c:953) ==14786== by 0x41BF4A: listen_parse (listen.c:1953) ==14786== by 0x41C5CA: listen_init (listen.c:2174) ==14786== by 0x438A36: radius_event_init (event.c:3648) ==14786== by 0x425971: main (radiusd.c:332) ==14786== ==14786== 5 bytes in 1 blocks are definitely lost in loss record 3 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x633A061: strdup (in /lib/libc-2.9.so) ==14786== by 0x40E641: cf_item_parse (conffile.c:953) ==14786== by 0x40EE5C: cf_section_parse (conffile.c:1173) ==14786== by 0x41DE96: switch_users (mainconfig.c:614) ==14786== by 0x41E6B9: read_mainconfig (mainconfig.c:874) ==14786== by 0x4257CD: main (radiusd.c:263) ==14786== ==14786== 368 (136 direct, 232 indirect) bytes in 1 blocks are definitely lost in loss record 477 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x42B8AF: rad_malloc (util.c:347) ==14786== by 0x41B9BF: listen_alloc (listen.c:1735) ==14786== by 0x41BC83: proxy_new_listener (listen.c:1838) ==14786== by 0x43D514: home_server_create_callback (realms.c:2254) ==14786== by 0x4E45CFA: WalkNodeInOrder (rbtree.c:551) ==14786== by 0x4E45E78: rbtree_walk (rbtree.c:603) ==14786== by 0x43D564: home_server_create_listeners (realms.c:2280) ==14786== by 0x41CA15: listen_init (listen.c:2323) ==14786== by 0x438A36: radius_event_init (event.c:3648) ==14786== by 0x425971: main (radiusd.c:332) ==14786== ==14786== 6,800 bytes in 25 blocks are possibly lost in loss record 522 of 527 ==14786== at 0x4C252BE: calloc (vg_replace_malloc.c:593) ==14786== by 0x40104BE: _dl_allocate_tls (in /lib/ld-2.9.so) ==14786== by 0x5491C14: pthread_create (in /lib/libpthread-2.9.so) ==14786== by 0x42A611: spawn_thread (threads.c:663) ==14786== by 0x42AB1B: thread_pool_init (threads.c:862) ==14786== by 0x438803: radius_event_init (event.c:3575) ==14786== by 0x425971: main (radiusd.c:332) ==14786== ==14786== 37,440 (18,720 direct, 18,720 indirect) bytes in 60 blocks are definitely lost in loss record 526 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x4E488C8: pairalloc (valuepair.c:72) ==14786== by 0x4E4AFFC: pairmake (valuepair.c:1526) ==14786== by 0x4E4B553: pairread (valuepair.c:1736) ==14786== by 0x4E4B8C4: userparse (valuepair.c:1850) ==14786== by 0x412A7F: radius_exec_program (exec.c:583) ==14786== by 0x6C1A5F5: ??? ==14786== by 0x6C1A71B: ??? ==14786== by 0x421CAB: call_modsingle (modcall.c:304) ==14786== by 0x422AD5: modcall (modcall.c:686) ==14786== by 0x41FCB8: indexed_modcall (modules.c:740) ==14786== by 0x4216FC: module_post_auth (modules.c:1662) ==14786== ==14786== 37,440 bytes in 120 blocks are definitely lost in loss record 527 of 527 ==14786== at 0x4C23224: malloc (vg_replace_malloc.c:270) ==14786== by 0x4E488C8: pairalloc (valuepair.c:72) ==14786== by 0x4E4AFFC: pairmake (valuepair.c:1526) ==14786== by 0x4E4B553: pairread (valuepair.c:1736) ==14786== by 0x4E4B8C4: userparse (valuepair.c:1850) ==14786== by 0x412A7F: radius_exec_program (exec.c:583) ==14786== by 0x6C1A5F5: ??? ==14786== by 0x421CAB: call_modsingle (modcall.c:304) ==14786== by 0x422AD5: modcall (modcall.c:686) ==14786== by 0x41FCB8: indexed_modcall (modules.c:740) ==14786== by 0x4216B4: module_pre_proxy (modules.c:1645) ==14786== by 0x435F6E: successfully_proxied_request (event.c:2230) ==14786== ==14786== LEAK SUMMARY: ==14786== definitely lost: 56,305 bytes in 183 blocks ==14786== indirectly lost: 18,952 bytes in 63 blocks ==14786== possibly lost: 6,800 bytes in 25 blocks ==14786== still reachable: 90,667 bytes in 2,548 blocks ==14786== suppressed: 0 bytes in 0 blocks ==14786== Reachable blocks (those to which a pointer was found) are not shown. ==14786== To see them, rerun with: --leak-check=full --show-reachable=yes ==14786== ==14786== For counts of detected and suppressed errors, rerun with: -v ==14786== Use --track-origins=yes to see where uninitialised values come from ==14786== ERROR SUMMARY: 715158 errors from 470 contexts (suppressed: 201 from 43)

3 10

Re: Failed to load module "jradius" freeradius server
by Alan Buxey 08 Mar '13

08 Mar '13

"This is the freeradius list, not the jradius list. If you want help and advice then use the appropriate list" Which bit wasn't clear?

1 0

Re: Failed to load module "jradius" freeradius server
by Alan Buxey 08 Mar '13

08 Mar '13

This is the freeradius list, not the jradius list. If you want help and advice then use the appropriate list Many thanks alan

2 1

Re: Freeradius with either LDAP or Mysql Error lib not found
by Alan Buxey 08 Mar '13

08 Mar '13

As Fajar says, some distros split up the functions into separate packages (so you don't need to install loads of things just to have a basic server) use your package manager to find/install the sub packages alan -- This smartphone uses free WiFi around the world with eduroam, now that's what I call smart.

2 1

Packet-Original-Timestamp
by Бен Томпсон 08 Mar '13

08 Mar '13

Hello Everyone I have a NAS which is not sending Event-Timestamp in accounting messages. I wondered if I could create it in unlang by subtracting Acct-Delay-Time from Packet-Original-Timestamp. However, when I put a reference to Packet-Original-Timestamp in the acconting setion I get the following error :- Reference "${Packet-Original-Timestamp}" not found Am I doing something wrong?

3 12

Freeradius with either LDAP or Mysql Error lib not found
by Iftakhul Anwar 08 Mar '13

08 Mar '13

Hi All I just try to config freeradius using either Mysql or LDAP. But i get same error like bellow : [errror Mysq] Fri Mar 8 13:44:46 2013 : Error: Could not link driver rlm_sql_mysql: rlm_sql_mysql.so: cannot open shared object file: No such file or directory Fri Mar 8 13:44:46 2013 : Error: Make sure it (and all its dependent libraries!) are in the search path of your system's ld. Fri Mar 8 13:44:46 2013 : Error: /usr/local/etc/raddb/sql.conf[22]: Instantiation failed for module "sql" Fri Mar 8 13:44:46 2013 : Error: /usr/local/etc/raddb/sites-enabled/default[177]: Failed to find "sql" in the "modules" section. Fri Mar 8 13:44:46 2013 : Error: /usr/local/etc/raddb/sites-enabled/default[69]: Errors parsing authorize section. i've read in some article that it's solved by installed mysql-devel package. In this case i've installed libmysqlclient-dev on my ubuntu 12.04 But still get same error. It's also happen on my freeradius ldap? [error LDAP] /usr/local/etc/raddb/modules/ldap[29]: Failed to link to module 'rlm_ldap': rlm_ldap.so: cannot open shared object file: No such file or directory /usr/local/etc/raddb/sites-enabled/default[305]: Failed to find "ldap" in the "modules" section. /usr/local/etc/raddb/sites-enabled/default[305]: Failed to parse "ldap" How i can solve this issue ? Thanks -- *M.Iftakhul Anwar* Meruvian Integrator High Performance Computing / Cloud Computing (HPC/CC) Office Phone : 021-93586577 Mobile Phone : 085215331477 Blog : http://blog.mervpolis.com/roller/anwar FB : http://www.facebook.com/troya.adromeda Website : www.meruvian.org

3 4