- Freeradius-Users - lists.freeradius.org

error of segmentation during the implementation of eap2
by arnauld ndefo 18 Sep '12

18 Sep '12

Hi everyone, i want to implement the freeradius with eap-psk. In many forum it is recommend to read the experimental.conf for configure the module eap2. After reading the experimental.conf, i have created the file eap2.conf which is attached to my email. Also, in the radius.conf, i have put in module section $INCLUDE eap2.conf. In the default file, i have put in the authenticate section eap2 { ok = return}; replace in that file, all the eap by eap2. When i launch the radius with export LD_PRELOAD=/home/dibus/hostap-06/eap_example/libeap.so && radiusd -X ; i have the output which is in file sortie_freerad_ubuntu. At the end, you will see and error of segmentation when it starts to load the module files Someone can help me to find the issue please??? It is very urgent for me. Thank you for your help.

4 17

unlang time / date comparison
by Franks Andy (RLZ) IT Systems Engineer 18 Sep '12

18 Sep '12

Hi, Hopefully a simple question. I've looked around for a while but can't find the answer to this. I'd like to be able to take a date/time from a sql database, use unlang (not a module) to compare it to the current time and make a decision based on the fact that it's, for example, less or more than 3600 seconds/60 minutes/1 hour etc ago. I can't really work out the comparison of dates, or simple mathematical functions for that matter. Perhaps I'm missing something obvious - apologies if so, I've not been using FR for that long. Thanks as always. Andy

3 3

Discarding of Access Requests by Radius server
by ramakrishna 18 Sep '12

18 Sep '12

Hi I am using FreeRADIUS 2.1.12 and I have some queries regarding the working of Radius server. 1) Does Radius server discard any Access Request messages for any reasons? 2) If Radius server received two Access Requests with different attributed but with same identifier within short span of time, How does Radius server behave? Any help is highly appreciated. Thanks in Advance. -- Best Regards, M.Rama Krishna Prasad,

2 1

Customization of RADIUS reply
by Václav Pernica 18 Sep '12

18 Sep '12

Hello I’m configuring the FreeRADIUS together with the Oracle DB. I need to get the user authenticated and in the reply provide the parameter "mailbox_fullname" from the DB. The Oracle DB has for my purpose only one view which contains the following columns. mailbox_id,mailbox_email,mailbox_fullname,mailbox_password I created new attribute in dictionary: ATTRIBUTE Full-Mailbox-Name 3000 string And customized the SQL queries as following (dialup.conf): authorize_check_query = "SELECT mailbox_id,mailbox_email,'Cleartext-Password',mailbox_password,':=' FROM ${authcheck_table} WHERE mailbox_email = '%{SQL-User-Name}' ORDER BY mailbox_id" authorize_reply_query = "SELECT mailbox_id,mailbox_email,'Full-Mailbox-Name',mailbox_fullname,':=' FROM ${authreply_table} WHERE mailbox_email = '%{SQL-User-Name}' ORDER BY mailbox_id" The user authentication works, however I need to have in the reply the value of “mailbox_fullname” from DB query. Instead of it, there is nothing. Could you please advise how to get in the reply “mailbox_fullname” for the corresponding mailbox_email? Here is the sample radtest output and in attachment full output from debug mode. radtest -x a00000012 password localhost 0 testing123 Sending Access-Request of id 26 to 127.0.0.1 port 1812 User-Name = "a00000012" User-Password = "password" NAS-IP-Address = 10.7.96.25 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=26, length=20 Thanks a lot! Vaclav

3 6

proxied server and right flamed IP to ppp clients
by lscrlstld 18 Sep '12

18 Sep '12

Is there any way to ensure (or check) that the proxied server assigned a right framed IP within a specific range of IPs? unlang perhaps? Main Server proxy to +-> freeradius Server 1 | (must be use ip pool 10.0.0.0/24) +------+ | | | +-> freeradius Server 2 | (must be use ip pool 10.0.1.0/24) | Main server check if the framed IP is within the correct pool, if not reject. Thank you.

3 4

Re: error of segmentation during the implementation of eap2
by alan buxey 18 Sep '12

18 Sep '12

Hi, > Hi, > We do this before, when we started freeradius compilation. yes - and now you have to do it again (well, just the git pull) as a patch has been made to the repository. alan

1 0

Re: Freeradius-Users Digest, Vol 89, Issue 58
by Matthew 18 Sep '12

18 Sep '12

1 0

Failed login lockout protection in FreeRADIUS
by mr. s 18 Sep '12

18 Sep '12

Hello, I was reading an article in computer world comparing a few RADIUS servers. It said that FreeRADIUS had "failed login lockout protection", however I can't find that particular verbiage in the FreeRADIUS documentation, FAQ or HowTos. Can anyone point me to what this may be referring to or clear up my confusion. Thanks for your time.

5 8

generating ssl certs in debian squeeze
by austin wonderly 17 Sep '12

17 Sep '12

Hello, I was wondering if anyone knew of any tutorials for generating ssl certificates for freeradius in debian squeeze? Have been trying to find a method that would work over the last few days and have not found a solution yet (have probably spent around 6-7 hrs just getting this part to work so far), I am trying to setup a radius server to provide eap-ttls authentication for a non public network (windows machines, as well linux based machines would be on the network), if someone could point me in the right direction though or possibly offer some advice I would really appreciate it as i've pretty much exhausted my options at this point in time. having said that, would there be any downsides to just using the "snakeoil" certificates in this type of configuration? thanks

3 5

max_queue_size > 65536
by Arran Cudbard-Bell 17 Sep '12

17 Sep '12

A friendly heads up. The bug fixes item "Use max_queue_size in threading code" refers to an issue in the threading code where the value used to initialise the request queue, was different to the value used to check when the max entries had been added into the queue, thus if you'd set the config item max_queue_size to something larger than 65536 and actually used more than that number of queue slots the server would crash. This config item was previously undocumented so hopefully few people have altered it. If you have and you're using a version < 2.2.0, please remove the config item to set it back to defaults, or set it to a value less than 65536. -Arran

1 0