- Freeradius-Users - lists.freeradius.org

FreeRadius Novice problems
by Tzvika Gelber 19 Nov '12

19 Nov '12

Hello, I'm seeking help as I'm very new to FreeRadius and I'm trying to do a lot of things that I know FreeRadius can do but I don't know how to do it. I'm hoping someone can point me in the right direction. I'm a novice when it comes to FreeRadius and not that big of an expert in Linux. I have FreeRadius installed and I added the user I wanted and I can authenticate with EAP with my WiFi clients. Server info: Core I3 with 2Gb ram running Ubuntu 12.04 Installed: FreeRadius 2.1.10 L.A.M.P server (full) My questions: 1. How do I create users that have a specific vlan attached to them (say user2 will always associate Vlan2 when connected), user1 is untagged so it's vlan1, user2 is attached to vlan2 and so on and so on. a. As I explained I have one user (untagged) running and working, but I would like to prevent the locking of this user so a lot of connections will be allowed to use the same Username (this is a lab environment not production) 2. Accounting: how do I enable accounting? a. How do I view the accounting file for each connected user? i. And since I have MySQL installed is there a way to view this on a GUI? b. Can I have accounting for none authenticated users (since this is a Wifi testing lab we need the user to be in "open" mode and Also enable accounting) – how? 3. GUI: is there a management GUI for FreeRadius and if so how do I install it? Thank you very much. -- ____ Sometimes you just glow in the dark...

2 1

(no subject)
by brekler aaa 19 Nov '12

19 Nov '12

Hi people, i work at an university, we use Freeradius 2.1.10. We use Hotspot service on ruckus wireless network, and it works fine with our freeradius, but we are trying to put it as 802.1x and its not working, i fixed a few things.We use a sql base to get the info of the users.So i will paste the error here, so you guys can see. http://dpaste.com/833344/ So up in the link its the error. Thanks in advance guys.If you need anything else just tell me and ill get it.

3 3

user names and user passwords
by Dmitry Korzhevin 19 Nov '12

19 Nov '12

Guys, does anybody know something about maximum username length and user password lengt? I try to use next login passwords without success (checked with radtest): http://dpaste.com/832115/ Best Regards, Dmitry --- Dmitry KORZHEVIN System Administrator STIDIA S.A. - Luxembourg e: dmitry.korzhevin(a)stidia.com m: +38 093 874 5453 w: http://www.stidia.com

3 4

Personalizing ldap filters from users file
by Angel L. Mateo 19 Nov '12

19 Nov '12

Hello, I have freeradius (2.2.0) using ldap as backend for user information. This radius server is used by different applications to authenticate and authorize users. I want now to use different ldap filters for different applications. In LDAP I'm using SCHAC schema and schacUserStatus is a multivalue attribute (in URN format) indicating services that the user has enabled or disabled in the way: dn: uid=user,<basedn> uid: user schacUserStatus: <urn prefix>:dovecot:enabled schacUserStatus: <urn prefix>:eduroam:enabled schacUserStatus: <urn prefix>:vpn:disabled ... What I want is to define ldap filter as: ldap { ... filter = "(&(mail=%{User-Name})(schacUserStatus=<urn prefix>: %{X-Atica-Service}:enabled))" ... } where "X-Atica-Service" is a private attribute (of type string) I have defined in dictionary, and this attribute is defined in users file for the each with something like: DEFAULT X-Actica-Service = 'vpn', Auth-Type = LDAP, Realm == um.es User-Name := `%{User-Name}`, Fall-Through = No But this does not work. As I have a virtual server for each service radius is authenticating I don't mind defining this attribute in virtual server configuration. What I want to avoid is to define different ldap modules differing just the filter. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

2 2

radwho: No configuration information in radutmp section of radiusd.conf
by Angel L. Mateo 19 Nov '12

19 Nov '12

Hello, I have a problem with radwho since I upgraded from 2.1.10 to 2.2.0. The same configuration (I'm trying now the default configuration installed from ubuntu packages) works with version 2.1.10 and not with 2.2.0. The error I get is; radwho: No configuration information in radutmp section of radiusd.conf My config (for default virtual server) is: authorize { preprocess chap mschap suffix eap { ok = return } unix files expiration logintime pap } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } unix eap } preacct { preprocess suffix files } accounting { detail unix #radutmp attr_filter.accounting_response } # Session database, used for checking Simultaneous-Use. Either the radutmp # or rlm_sql module can handle this. # The rlm_sql module is *much* faster session { radutmp # # See "Simultaneous Use Checking Queries" in sql.conf # sql } post-auth { exec Post-Auth-Type REJECT { attr_filter.access_reject } } pre-proxy { } # # When the server receives a reply to a request it proxied # to a home server, the request may be massaged here, in the # post-proxy stage. # post-proxy { eap } I have tried it enabling and disabling radutmp in accounting section. As I have already said, this same configuration works with 2.1.8 (default ubuntu package) but not with 2.2.0. Any idea? -- Angel L. Mateo Martínez Sección de Telemática Área de Tecnologías de la Información y las Comunicaciones Aplicadas (ATICA) http://www.um.es/atica Tfo: 868889150 Fax: 868888337

3 5

RE: Pamd su client to proxy User-Name shows as root
by Brad 16 Nov '12

16 Nov '12

Hi Alan, I can achieve similar results through sudo and allowed exceptions, was just hoping for an easier and more straight forward approach with sudo root. Thanks for answering. -----Original Message----- From: Alan DeKok Sent: 11/16/2012 11:59 AM To: FreeRadius users mailing list Subject: Re: Pamd su client to proxy User-Name shows as root brad wrote: > On proxy radius –X shows: > > User-Name = “root” Yes, because that's the user being authenticated. > Is there a way to get the client to send the id of the person logging in > through sudo su - to show as “Bob” rather than “root”. I don't think so. If there is a way, see the PAM documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: rlm_perl and threads
by Sander Eerdekens 16 Nov '12

16 Nov '12

The old wiki used to contain more information on this. I'm currently in the process of making our rlm_perl module multithreaded as well. Some pointers: perl -V | grep -i multipl ... useithreads=define, usemultiplicity=define Compile-time options: HAS_TIMES MULTIPLICITY PERLIO_LAYERS check your multiplicity here. Multiplicity causes one perl process to be started, with multiple perl interpreters inside. Add a CLONE function to your perl script (yes, all in caps). The CLONE function is run every time a new perl interpreter is started. What happens is all existing variables are copied to the new interpreter when a new thread is started. In this function you can adjust values that should be unique for each thread (like database handlers). The number of threads are controlled trough the max_servers and max/min spare servers in your radiusd.conf Threading is not done in debug mode (-X), start your freeradius in normal mode to test multithreading. AFAIK the above information is correct and recent. Kind regards Sander Eerdekens Informatiesystemen Systeembeheer & Ondersteuning sander(a)uzleuven.be UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven | www.uzleuven.be ------------------------------ Message: 5 Date: Mon, 05 Nov 2012 14:01:56 +0000 From: Phil Mayers <p.mayers(a)imperial.ac.uk> To: freeradius-users(a)lists.freeradius.org Subject: Re: rlm_perl and threads Message-ID: <5097C6D4.9070904(a)imperial.ac.uk> Content-Type: text/plain; charset=ISO-8859-1; format=flowed On 05/11/12 13:36, Edgar Fu? wrote: >> Yes. Likely, even. > Thanks. So will these then be two distinct Perl interpreters or two instances > of the same Perl interpreter? From the Perl script's point of view, what will > the two instances share? > Can you hint me to any documentation covering this? I'm not aware of any docs. You might need to refer to the source. In particular, the USE_ITHREADS #define seems to control how the perl interpreter is created/allocated/used. I'm not familiar enough with perl to understand the code, personally. See here: https://github.com/FreeRADIUS/freeradius-server/blob/master/src/modules/rlm… ...and the rest of that file.

3 6

Pamd su client to proxy User-Name shows as root
by brad 16 Nov '12

16 Nov '12

Hi Everyone, Summary: trying to 2 factor from client to proxy to auth on sudo su -, su root. On client in pam.d/su: auth sufficient pam_radius_auth.so ruser debug On proxy radius -X shows: .. User-Name = "root" And it rejects it because the user "root" does not exist, but "Bob" who is sudo su'ing does. Is there a way to get the client to send the id of the person logging in through sudo su - to show as "Bob" rather than "root". Thanks, Brad

2 1

MS-CHAPv2 change password not working in master
by Carlos Velasco 16 Nov '12

16 Nov '12

Hi, I downloaded git master yesterday to test the new MS-CHAPv2 change password functionality. My setup is a Cisco router with "passwd-expiry" setup with Cisco VPN client for login, with FreeRadius to Windows AD through Winbind. MS-CHAPv2 authentication works fine. Winbind and AD setup is right. But testing the new passchange functionality by selecting "User must change password at next logon" in the Windows user, the New password windows popup in Cisco VPN client, but the change password process fails: ntlm_auth said: Password-Change: No Password-Change-Error: Wrong Password . . Winbind logs also shows: NT_STATUS_WRONG_PASSWORD Looking into code I suppose the problem is something with the old NT hash, but not an expert here. Any help would be apreciated. In these logs the user is "NIMASTELECOM\testpw". The current password is "y58R41ut8W" (expired). And the new password used was "H6eEWu7r65tw38ert1". Some radius logs: === # radiusd -X radiusd: FreeRADIUS Version 3.0.0, for host x86_64-unknown-linux-gnu, built on Nov 16 2012 at 01:46:19 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License. For more information about these matters, see the file named COPYRIGHT. Starting - reading configuration files ... ...................................... Ready to process requests. rad_recv: Access-Request packet from host 10.112.14.2 port 1645, id=127, length=202 User-Name = "NIMASTELECOM\\testpw" Calling-Station-Id = "217.126.166.195" MS-CHAP-Challenge = 0xdd2a98d3c3c69fb959df2f561d50d025 MS-CHAP2-Response = 0x01007b0896de80c7098bac5566313c61d1b200000000000000003cc2724e1d2be6d1868df97bd0607859441dc99b5ef37af0 NAS-Port-Type = Virtual Cisco-NAS-Port = "85.112.6.36" NAS-Port = 0 NAS-Port-Id = "85.112.6.36" Service-Type = Login-User NAS-IP-Address = 10.112.14.2 Event-Timestamp = "Nov 16 2012 10:39:06 CET" (0) # Executing section authorize from file /etc/raddb/sites-enabled/vpn_nimas_tk (0) group authorize { (0) - entering group authorize {...} (0) mschap-vpn_nimas_tk : Found MS-CHAP attributes. Setting 'Auth-Type = mschap-vpn_nimas_tk' (0) [mschap-vpn_nimas_tk] = ok (0) ? if (!control:Auth-Type) (0) ? Evaluating !(control:Auth-Type) -> FALSE (0) ? if (!control:Auth-Type) -> FALSE (0) detail-vpn_nimas_tk-auth : expand: /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d -> /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (0) detail-vpn_nimas_tk-auth : /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d expands to /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (0) detail-vpn_nimas_tk-auth : expand: %t -> Fri Nov 16 10:39:06 2012 (0) [detail-vpn_nimas_tk-auth] = ok (0) Found Auth-Type = MSCHAP (0) # Executing group from file /etc/raddb/sites-enabled/vpn_nimas_tk (0) group MS-CHAP { (0) - entering group MS-CHAP {...} (0) mschap-vpn_nimas_tk : Creating challenge hash with username: testpw (0) mschap-vpn_nimas_tk : Client is using MS-CHAPv2 for testpw, we need NT-Password (0) mschap-vpn_nimas_tk : expand: --username=%{mschap-vpn_nimas_tk:User-Name} -> --username=testpw (0) mschap-vpn_nimas_tk : expand: --domain=%{mschap-vpn_nimas_tk:NT-Domain} -> --domain=NIMASTELECOM (0) mschap-vpn_nimas_tk : Creating challenge hash with username: testpw (0) mschap-vpn_nimas_tk : expand: --challenge=%{mschap-vpn_nimas_tk:Challenge:-00} -> --challenge=3550f7bf5746677f (0) mschap-vpn_nimas_tk : expand: --nt-response=%{mschap-vpn_nimas_tk:NT-Response:-00} -> --nt-response=3cc2724e1d2be6d1868df97bd0607859441dc99b5ef37af0 Exec-Program output: Must change password (0xc0000224) Exec-Program-Wait: plaintext: Must change password (0xc0000224) Exec-Program: returned: 1 (0) mschap-vpn_nimas_tk : ntlm_auth says Must change password (0xc0000224) (0) [mschap-vpn_nimas_tk] = reject (0) Failed to authenticate the user. (0) Login incorrect: [NIMASTELECOM\\testpw] (from client RMADTKNIMAS01 port 0 cli 217.126.166.195) (0) Using Post-Auth-Type Reject (0) WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. (0) Finished request 0. Waking up in 0.9 seconds. (0) Sending delayed reject Sending Access-Reject of id 127 from 85.112.8.156 port 1812 to 10.112.14.2 port 1645 MS-CHAP-Error = "\001E=648 R=0 C=47763c0a72e4fb2d546c9a413245f87b V=3 M=Password Expired" Waking up in 4.9 seconds. (0) Cleaning up request packet ID 127 with timestamp +14 Ready to process requests. rad_recv: Access-Request packet from host 10.112.14.2 port 1645, id=128, length=755 User-Name = "NIMASTELECOM\\testpw" MS-CHAP-Challenge = 0xf42a98d3c3c69fb959df2f561d50d025 MS-CHAP2-CPW = 0x070100000000000000000000000000000000b79a22699ae1dedc832935c8f5c5d7880000000000000000b0bfd263d6c0bbc0b2b28e085c072676857cf1f7c6f88a300000 MS-CHAP-NT-Enc-PW = 0x0601000176116065c54f9ef590a62a9e5d90a75e906e19b76954e1ff0deeb5f3a5212f64e16adf48e0f1e3bb2cd3c3889dac2d67b6584725b87c28d1612fdedf8268e3af3096a2c596ea8efb16697a10b5e726a86e457a84669c6ec82cfc67a301ff9d329b0ef45b96084d099823105412e0779971079efc9260b6ab1805df81b10f3fa65d4aa859beeaae01f0a2311f51bfc9c84f0168b595fa80273b6a08180e83ec63f03a6face5015ccb52114017 MS-CHAP-NT-Enc-PW = 0x060100025ddd392405df3b0952a11ad2158f1c26398cdd6f2eb4be40607ff1fe81fc1e4f335e9b1a8a8a4a081f4b6834fe8e8d024ae1c80da758057f9505f8dff2a0211dd68d67fea4cb6de33f582be526fb0698669878264cb7ab61883a4caa4e4bc60f5421496218319c3ad4c0210383edc4daf25f43a55002d8014c287659c32cdbc6a43e0dc01c2c2effc7aa43267a0cf5c2100b4d25de0408559dd012496716837562ff79032b2f1671cd85d582 MS-CHAP-NT-Enc-PW = 0x060100030c2cb9971bac6562e7e0615b9d89c703e7bbd4e0765af7c420590cd3b6d0149ab90d95b03f56e543759da80aea68ca44bf4b7514a1f2550fa2be6571c1639fd67738d2351a248f43f7ce4e1c552cf769416be4b6b78e7c1f49b32e5f2b7421acebab117a2009ccb87e0170cd30b31024a331920c5c2891a939ec22061af7fad85140a0bd99e89c3c6d56a3e9eb3a8025d5ef968ba7523c78f11bb43cd49936d2b28d289788d164b507a76fb6 NAS-Port-Type = Virtual Cisco-NAS-Port = "85.112.6.36" NAS-Port = 0 NAS-Port-Id = "85.112.6.36" Service-Type = Login-User NAS-IP-Address = 10.112.14.2 Event-Timestamp = "Nov 16 2012 10:39:20 CET" (1) # Executing section authorize from file /etc/raddb/sites-enabled/vpn_nimas_tk (1) group authorize { (1) - entering group authorize {...} (1) mschap-vpn_nimas_tk : Found MS-CHAP attributes. Setting 'Auth-Type = mschap-vpn_nimas_tk' (1) [mschap-vpn_nimas_tk] = ok (1) ? if (!control:Auth-Type) (1) ? Evaluating !(control:Auth-Type) -> FALSE (1) ? if (!control:Auth-Type) -> FALSE (1) detail-vpn_nimas_tk-auth : expand: /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d -> /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (1) detail-vpn_nimas_tk-auth : /var/log/radius/radacct/vpn_nimas_tk-auth-%Y%m%d expands to /var/log/radius/radacct/vpn_nimas_tk-auth-20121116 (1) detail-vpn_nimas_tk-auth : expand: %t -> Fri Nov 16 10:39:20 2012 (1) [detail-vpn_nimas_tk-auth] = ok (1) Found Auth-Type = MSCHAP (1) # Executing group from file /etc/raddb/sites-enabled/vpn_nimas_tk (1) group MS-CHAP { (1) - entering group MS-CHAP {...} (1) mschap-vpn_nimas_tk : MS-CHAPv2 password change request received (1) mschap-vpn_nimas_tk : Password change payload valid (1) mschap-vpn_nimas_tk : Doing MS-CHAPv2 password change via ntlm_auth helper (1) mschap-vpn_nimas_tk : expand: username: %{mschap-vpn_nimas_tk:User-Name} -> username: testpw (1) mschap-vpn_nimas_tk : expand: nt-domain: %{mschap-vpn_nimas_tk:NT-Domain} -> nt-domain: NIMASTELECOM (1) mschap-vpn_nimas_tk : ntlm_auth said: Password-Change: No Password-Change-Error: Wrong Password . . (1) mschap-vpn_nimas_tk : ntlm auth password change failed: Password-Change-Error: Wrong Password (1) mschap-vpn_nimas_tk : Password change failed (1) [mschap-vpn_nimas_tk] = reject (1) Failed to authenticate the user. (1) Login incorrect: [NIMASTELECOM\\testpw] (from client RMADTKNIMAS01 port 0) (1) Using Post-Auth-Type Reject (1) WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action. (1) Finished request 1. Waking up in 0.2 seconds. Waking up in 0.7 seconds. (1) Sending delayed reject Sending Access-Reject of id 128 from 85.112.8.156 port 1812 to 10.112.14.2 port 1645 MS-CHAP-Error = "\001E=709 R=0 M=Password change failed" Waking up in 4.9 seconds. (1) Cleaning up request packet ID 128 with timestamp +28 Ready to process requests. === The mschap derived module is simple: === mschap mschap-vpn_nimas_tk { with_ntdomain_hack = yes ntlm_auth = "/usr/bin/ntlm_auth --request-nt-key --username=%{mschap-vpn_nimas_tk:User-Name} --domain=%{mschap-vpn_nimas_tk:NT-Domain} --challenge=%{mschap-vpn_nimas_tk:Challenge:-00} --nt-response=%{mschap-vpn_nimas_tk:NT-Response:-00}" passchange { ntlm_auth = "/usr/bin/ntlm_auth -d 10 -l /var/log/samba --helper-protocol=ntlm-change-password-1" ntlm_auth_username = "username: %{mschap-vpn_nimas_tk:User-Name}" ntlm_auth_domain = "nt-domain: %{mschap-vpn_nimas_tk:NT-Domain}" retry_msg = "Re-enter (or reset) the password" } === Winbind logs: === [2012/11/16 10:39:06.810639, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:06.810793, 10] winbindd/winbindd.c:644(process_request) process_request: request fn INTERFACE_VERSION [2012/11/16 10:39:06.810841, 3] winbindd/winbindd_misc.c:384(winbindd_interface_version) [ 9918]: request interface version [2012/11/16 10:39:06.810906, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9918:INTERFACE_VERSION]: delivered response to client [2012/11/16 10:39:06.810964, 10] winbindd/winbindd.c:644(process_request) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2012/11/16 10:39:06.811002, 3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir) [ 9918]: request location of privileged pipe [2012/11/16 10:39:06.811068, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9918:WINBINDD_PRIV_PIPE_DIR]: delivered response to client [2012/11/16 10:39:06.811117, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited [2012/11/16 10:39:06.811171, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:06.811227, 10] winbindd/winbindd.c:617(process_request) process_request: Handling async request 9918:PAM_AUTH_CRAP [2012/11/16 10:39:06.811266, 3] winbindd/winbindd_pam_auth_crap.c:56(winbindd_pam_auth_crap_send) [ 9918]: pam auth crap domain: [NIMASTELECOM] user: testpw [2012/11/16 10:39:07.071142, 10] winbindd/winbindd.c:679(wb_request_done) wb_request_done[9918:PAM_AUTH_CRAP]: NT_STATUS_PASSWORD_MUST_CHANGE [2012/11/16 10:39:07.071243, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9918:PAM_AUTH_CRAP]: delivered response to client [2012/11/16 10:39:07.071320, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited [2012/11/16 10:39:20.825567, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:20.825731, 10] winbindd/winbindd.c:644(process_request) process_request: request fn INTERFACE_VERSION [2012/11/16 10:39:20.825780, 3] winbindd/winbindd_misc.c:384(winbindd_interface_version) [ 9957]: request interface version [2012/11/16 10:39:20.825851, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:INTERFACE_VERSION]: delivered response to client [2012/11/16 10:39:20.825916, 10] winbindd/winbindd.c:644(process_request) process_request: request fn WINBINDD_PRIV_PIPE_DIR [2012/11/16 10:39:20.825960, 3] winbindd/winbindd_misc.c:417(winbindd_priv_pipe_dir) [ 9957]: request location of privileged pipe [2012/11/16 10:39:20.826035, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:WINBINDD_PRIV_PIPE_DIR]: delivered response to client [2012/11/16 10:39:20.826106, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited [2012/11/16 10:39:20.826169, 6] winbindd/winbindd.c:794(new_connection) accepted socket 25 [2012/11/16 10:39:20.826235, 10] winbindd/winbindd.c:644(process_request) process_request: request fn DOMAIN_NAME [2012/11/16 10:39:20.826279, 3] winbindd/winbindd_misc.c:394(winbindd_domain_name) [ 9957]: request domain name [2012/11/16 10:39:20.826341, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:DOMAIN_NAME]: delivered response to client [2012/11/16 10:39:20.826497, 10] winbindd/winbindd.c:617(process_request) process_request: Handling async request 9957:PAM_CHNG_PSWD_AUTH_CRAP [2012/11/16 10:39:20.826544, 3] winbindd/winbindd_pam_chng_pswd_auth_crap.c:57(winbindd_pam_chng_pswd_auth_crap_send) [ 9957]: pam change pswd auth crap domain: NIMASTELECOM user: testpw [2012/11/16 10:39:20.856407, 10] winbindd/winbindd.c:679(wb_request_done) wb_request_done[9957:PAM_CHNG_PSWD_AUTH_CRAP]: NT_STATUS_WRONG_PASSWORD [2012/11/16 10:39:20.856498, 10] winbindd/winbindd.c:740(winbind_client_response_written) winbind_client_response_written[9957:PAM_CHNG_PSWD_AUTH_CRAP]: delivered response to client [2012/11/16 10:39:20.856674, 6] winbindd/winbindd.c:842(winbind_client_request_read) closing socket 25, client exited === Regards, Carlos Velasco

2 8

building "master" under mock buildroot
by Phil Mayers 16 Nov '12

16 Nov '12

All, I'm preparing a FreeRADIUS 3 RPM, in the hope we can move to a pre-release of the "master" branch, for a bit of soak testing but also because I'm tired of backporting stuff to our local 2.x branch ;o) Sadly, the source builds fine in the "native" OS, but doesn't build under "mock" (and RPM "build in chroot" tool). I'm extremely reluctant to deviate from our normal build procedures. The errors at the end of the log are pretty mysterious: + make gcc /builddir/build/BUILD/freeradius3-3.0.0pre1/scripts/jlibtool.c -o /builddir/build/BUILD/freeradius3-3.0.0pre1/scripts/jlibtool /builddir/build/BUILD/freeradius3-3.0.0pre1/scripts/jlibtool.c: In function 'parse_args': /builddir/build/BUILD/freeradius3-3.0.0pre1/scripts/jlibtool.c:1771: warning: assignment discards qualifiers from pointer target type Making all in src... ln -sf include freeradius-devel Making all in src/include... gmake[4]: *** [features.h] Error 1 gmake[3]: *** [include] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [src] Error 2 RPM build errors: make: *** [all] Error 2 More annoying, if I "mock shell" into the buildroot and re-try "make", it all works fine. I can't see any obvious culprits such as an environment variable further up. Does anyone have any idea what could cause the build to fail in this way, with those gmake errors?

3 11