- Freeradius-Users - lists.freeradius.org

Simple Proxy setup
by Randy 25 Feb '13

25 Feb '13

Hi, I am upgrading from an older server which uses version 1 quite happily. The setup is simple, upstream proxies talk to my FreeRadius which then talks to my Home server which is a really old DOS based product. I read other threads saying just to use realms, but I still get lost in the conf files. Getting over a major operation has left me feeling a bit foggy and I would really appreciate some assistance. Treat me like the village idiot, I don't mind, but I need this to be as simple as possible. Exactly what do I need in the clients, proxy and radiusd.conf files? Any help appreciated.

2 2

MAC-Auth + Freeradius + MySQL Database
by Russell Mike 24 Feb '13

24 Feb '13

Greetings Dear Alan D. & List Members, First of all, thank you very much for developing such application. I need help, i have functional Freeradius server with MySQL backend. i have been asked to add MAC address authentication support for the servers. i googled the topic and got many many mail archive results, i tried to read those for about a day before posting to the maling list. Most of them, administrators are discussing troubleshoot topics, but i was searching how to.. start implementation and the REQUIREMENTS. i also came across where guys are discussing EAP and MAC authentication. i could not conclude, if it is a better way of doing MAC authentication using EAP. Finally, i came across wiki documentation. almost everything is there and it is well explained as well, thanks. i have now understand how it works. But SQL part is not still a question. http://wiki.freeradius.org/guide/Mac-Auth#Mac-Auth-authorisation-by-SSID-SQL How to store MACs in MySQL database. Perhaps, i need to create additional table to store MAC, Honestly, i am not sure how to go about it. Is there any documentation that i may do NOT know of. and i can follow to finish the setup. Grate thanks for attending to this request and thanks for your support ever since ! additional Information: FR_v2.2 With Coova 1.3.0 Regards -- RM

3 8

user doesnt connect but freeradius say connect
by armagan yaman 24 Feb '13

24 Feb '13

I have a problem on the freeradius. When I was using these commands "radwho" and "radlast" it shows "still login" but some users doesnt connect. How can I fixed this Sorry for my bad english.

1 0

radlast and radwho commands
by armagan yaman 23 Feb '13

23 Feb '13

I have a problem on the freeradius. When I was using this commands "radwho" and "radlast" it shows "still login" but some users doesnt connect. what is wrong , ı dont understand. Sorry for my bad english.

1 0

Re: Re: Server exits without warning on radtest‏
by Adrien Morvan 22 Feb '13

22 Feb '13

Thanks So i ran it with gdb. There is a seg fault but i don't understand what is happening. I just noticed the 0xdeadbeef value. Program received signal SIGSEGV, Segmentation fault. rad_mangle (request=0x82ba520, data=<optimized out>) at rlm_preprocess.c:217 217 request_pairs = request->packet->vps; (gdb) p request $6 = (REQUEST *) 0x82ba520 (gdb) p request->packet $7 = (RADIUS_PACKET *) 0xdeadbeef (gdb) p request->packet->vps Cannot access memory at address 0xdeadbf4f (gdb) p request_pairs $8 = <optimized out> My system is a Ubuntu 12.04 LTS and the version is FreeRADIUS Version 2.1.10. Adrien

3 2

Re: Re: Server exits without warning on radtest‏
by Adrien Morvan 22 Feb '13

22 Feb '13

I changed my version of freeradius to the 2.2.0 and my radtest is working now. So thank you for the support.

1 0

RE: proxy the radius server
by Lakshmi Narayana Baliah 22 Feb '13

22 Feb '13

Hi all, I want to configure the proxy from my free radius to another free radius server How do i do that ??? please help.... Thanks Lakshmi ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

RE: proxy the radius server
by Lakshmi Narayana Baliah 22 Feb '13

22 Feb '13

Hi all, I want to configure the proxy from my free radius to another free radius server How do i do that ??? please help.... Thanks Lakshmi ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/tim/disclaimer.html">http://tim.techmahindra.com/tim/disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

Server exits without warning on radtest‏
by Adrien Morvan 22 Feb '13

22 Feb '13

HelloI'm facing a problem with the server. I set it and test it with a basic radtest and it exits without warning or error message.The last line is Thu Feb 21 08:33:14 2013 : Info: +- entering group authorize {...}So i guessed there was a problem in the very beginning of authorize, as the preprocess module doesn't output anything.But i couldn't find anything weird in the first lines :authorize { # The preprocess module takes care of sanitizing some bizarre # attributes in the request, and turning them into attributes # which are more standard. # # It takes care of processing the 'raddb/hints' and the # 'raddb/huntgroups' files. preprocessI didn't do big changes in the configuration files I only uncommented the sql related lines und set the SQL server info.Do you have an idea of the origin of the problem ?Here is the debug output of the server :Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and ! linkedThu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect to radius@localhost:/radiusThu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 0Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #0Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #0Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 1Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #1Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #1Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 2Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #2Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2Thu Feb 21 08:33:10 2013 : Info: rlm_sq! l (sql): Connected new DB handle, #2Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 3Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #3Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #3Thu Feb 21 08:33:10 2013 : Debug: rlm_sql (sql): starting 4Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Attempting to connect rlm_sql_mysql #4Thu Feb 21 08:33:10 2013 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4Thu Feb 21 08:33:10 2013 : Info: rlm_sql (sql): Connected new DB handle, #4Thu Feb 21 08:33:10 2013 : Debug: Module: Checking preacct {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: (Loaded rlm_acct_unique, checking if it's valid)Thu Feb 21 08:33:10 2013 : Debug: Module: Linked to module rlm_acct_uniqueThu Feb 21 08:33:10 2013 : Debug: Module: Instantiating module "acct_unique" from file /etc/freeradius/modules/acct_uniqueThu Feb 21 08:33:10 2013 : Debug: ! acct_unique {Thu Feb 21 08:33:10 2013 : Debug: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port"Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: Module: Checking accounting {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: (Loaded rlm_detail, checking if it's valid)Thu Feb 21 08:33:10 2013 : Debug: Module: Linked to module rlm_detailThu Feb 21 08:33:10 2013 : Debug: Module: Instantiating module "detail" from file /etc/freeradius/modules/detailThu Feb 21 08:33:10 2013 : Debug: detail {Thu Feb 21 08:33:10 2013 : Debug: detailfile = "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d"Thu Feb 21 08:33:10 2013 : Debug: header = "%t"Thu Feb 21 08:33:10 2013 : Debug: detailperm = 384Thu Feb 21 08:33:10 2013 : Debug: dirperm = 493Thu Feb 21 08:33:10 2013 : Debug: locking = noThu Feb 21 08:33:10 2013 : Debug: log_packet_header = noThu Feb 21 08:33:10 2013 : Debug: }T! hu Feb 21 08:33:10 2013 : Debug: Module: Instantiating module "attr_f ilter.accounting_response" from file /etc/freeradius/modules/attr_filterThu Feb 21 08:33:10 2013 : Debug: attr_filter attr_filter.accounting_response {Thu Feb 21 08:33:10 2013 : Debug: attrsfile = "/etc/freeradius/attrs.accounting_response"Thu Feb 21 08:33:10 2013 : Debug: key = "%{User-Name}"Thu Feb 21 08:33:10 2013 : Debug: relaxed = noThu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: Module: Checking session {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: Module: Checking post-proxy {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: Module: Checking post-auth {...} for more modules to loadThu Feb 21 08:33:10 2013 : Debug: } # modulesThu Feb 21 08:33:10 2013 : Debug: } # serverThu Feb 21 08:33:10 2013 : Debug: radiusd: #### Opening IP addresses and Ports ####Thu Feb 21 08:33:10 2013 : Debug: listen {Thu Feb 21 08:33:10 2013 : Debug: type = "auth"Thu Feb 21 08:33:10 2013 : Debug: ipaddr = *Thu Feb 2! 1 08:33:10 2013 : Debug: port = 0Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: listen {Thu Feb 21 08:33:10 2013 : Debug: type = "acct"Thu Feb 21 08:33:10 2013 : Debug: ipaddr = *Thu Feb 21 08:33:10 2013 : Debug: port = 0Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: listen {Thu Feb 21 08:33:10 2013 : Debug: type = "auth"Thu Feb 21 08:33:10 2013 : Debug: ipaddr = 127.0.0.1Thu Feb 21 08:33:10 2013 : Debug: port = 18120Thu Feb 21 08:33:10 2013 : Debug: }Thu Feb 21 08:33:10 2013 : Debug: Listening on authentication address * port 1812Thu Feb 21 08:33:10 2013 : Debug: Listening on accounting address * port 1813Thu Feb 21 08:33:10 2013 : Debug: Listening on authentication address 127.0.0.1 port 18120 as server inner-tunnelThu Feb 21 08:33:10 2013 : Debug: Listening on proxy address * port 1814Thu Feb 21 08:33:10 2013 : Info: Ready to process requests.rad_recv: Access-Request packet from host 127.0.0.1 port 4! 3468, id=182, length=56 User-Name = "jean" User-Password = "pw" NAS-IP-Address = 127.0.1.1 NAS-Port = 0Thu Feb 21 08:33:14 2013 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/defaultThu Feb 21 08:33:14 2013 : Info: +- entering group authorize {...}Thank you

2 1

eap over lan simulation
by tabibel sami 22 Feb '13

22 Feb '13

Hi freeradiusers, In purpose to implementing eap-sim supplicant i created the following virtual infrastructure : supplicant -------------------------- NAS (Access Point) --------------------------------------------- freeradius server 10.0.0.1 Ethernet 10.0.0.2 UDP 195.12.16.17 supplicant :: is my real computer NAS:: is a vmplayer virtual machien and freeradius server: is lxc container (virtual machine too) i have to test communications between supplicant <-> NAS and then between NAS <-> server thanks to eapol_test i can know test udp communications between NAS and server (thank you matthew your answer was very apreciated) and know i have to test (simulate, understand )802.1x eap communication between supplicant and nas, i can't find a way to simulate a NAS (Point ACCESS) with 802.1x supplicant thant can controle ethernet and not wireless access from supplicant, because i use linux bridge to connect my virtuel machines to each others (so no wireless or can we simulate wireless connexion too ?) clarification on this point will be very appreciated ! Thanks in advance

2 1