- Freeradius-Users - lists.freeradius.org

Discarding of Access Requests by Radius server
by ramakrishna 18 Sep '12

18 Sep '12

Hi I am using FreeRADIUS 2.1.12 and I have some queries regarding the working of Radius server. 1) Does Radius server discard any Access Request messages for any reasons? 2) If Radius server received two Access Requests with different attributed but with same identifier within short span of time, How does Radius server behave? Any help is highly appreciated. Thanks in Advance. -- Best Regards, M.Rama Krishna Prasad,

2 1

Customization of RADIUS reply
by Václav Pernica 18 Sep '12

18 Sep '12

Hello I’m configuring the FreeRADIUS together with the Oracle DB. I need to get the user authenticated and in the reply provide the parameter "mailbox_fullname" from the DB. The Oracle DB has for my purpose only one view which contains the following columns. mailbox_id,mailbox_email,mailbox_fullname,mailbox_password I created new attribute in dictionary: ATTRIBUTE Full-Mailbox-Name 3000 string And customized the SQL queries as following (dialup.conf): authorize_check_query = "SELECT mailbox_id,mailbox_email,'Cleartext-Password',mailbox_password,':=' FROM ${authcheck_table} WHERE mailbox_email = '%{SQL-User-Name}' ORDER BY mailbox_id" authorize_reply_query = "SELECT mailbox_id,mailbox_email,'Full-Mailbox-Name',mailbox_fullname,':=' FROM ${authreply_table} WHERE mailbox_email = '%{SQL-User-Name}' ORDER BY mailbox_id" The user authentication works, however I need to have in the reply the value of “mailbox_fullname” from DB query. Instead of it, there is nothing. Could you please advise how to get in the reply “mailbox_fullname” for the corresponding mailbox_email? Here is the sample radtest output and in attachment full output from debug mode. radtest -x a00000012 password localhost 0 testing123 Sending Access-Request of id 26 to 127.0.0.1 port 1812 User-Name = "a00000012" User-Password = "password" NAS-IP-Address = 10.7.96.25 NAS-Port = 0 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=26, length=20 Thanks a lot! Vaclav

3 6

proxied server and right flamed IP to ppp clients
by lscrlstld 18 Sep '12

18 Sep '12

Is there any way to ensure (or check) that the proxied server assigned a right framed IP within a specific range of IPs? unlang perhaps? Main Server proxy to +-> freeradius Server 1 | (must be use ip pool 10.0.0.0/24) +------+ | | | +-> freeradius Server 2 | (must be use ip pool 10.0.1.0/24) | Main server check if the framed IP is within the correct pool, if not reject. Thank you.

3 4

Re: error of segmentation during the implementation of eap2
by alan buxey 18 Sep '12

18 Sep '12

Hi, > Hi, > We do this before, when we started freeradius compilation. yes - and now you have to do it again (well, just the git pull) as a patch has been made to the repository. alan

1 0

Re: Freeradius-Users Digest, Vol 89, Issue 58
by Matthew 18 Sep '12

18 Sep '12

1 0

Failed login lockout protection in FreeRADIUS
by mr. s 18 Sep '12

18 Sep '12

Hello, I was reading an article in computer world comparing a few RADIUS servers. It said that FreeRADIUS had "failed login lockout protection", however I can't find that particular verbiage in the FreeRADIUS documentation, FAQ or HowTos. Can anyone point me to what this may be referring to or clear up my confusion. Thanks for your time.

5 8

generating ssl certs in debian squeeze
by austin wonderly 17 Sep '12

17 Sep '12

Hello, I was wondering if anyone knew of any tutorials for generating ssl certificates for freeradius in debian squeeze? Have been trying to find a method that would work over the last few days and have not found a solution yet (have probably spent around 6-7 hrs just getting this part to work so far), I am trying to setup a radius server to provide eap-ttls authentication for a non public network (windows machines, as well linux based machines would be on the network), if someone could point me in the right direction though or possibly offer some advice I would really appreciate it as i've pretty much exhausted my options at this point in time. having said that, would there be any downsides to just using the "snakeoil" certificates in this type of configuration? thanks

3 5

max_queue_size > 65536
by Arran Cudbard-Bell 17 Sep '12

17 Sep '12

A friendly heads up. The bug fixes item "Use max_queue_size in threading code" refers to an issue in the threading code where the value used to initialise the request queue, was different to the value used to check when the max entries had been added into the queue, thus if you'd set the config item max_queue_size to something larger than 65536 and actually used more than that number of queue slots the server would crash. This config item was previously undocumented so hopefully few people have altered it. If you have and you're using a version < 2.2.0, please remove the config item to set it back to defaults, or set it to a value less than 65536. -Arran

1 0

Proxy and requests queue
by AemNet 17 Sep '12

17 Sep '12

Hi everybody I've a question about the management of the queue in freeradius 2.1.12. Let's assume my server are used for local authentication for the realm mydomanin.org and proxy the request for the realm remote.org (a pool with a single home server). Let's assume also that max_servers and max_spare_server are sets correctly. What happens if the home server for the proxy takes too long to respond? The requests for the local side are ignored or have their own queue? And if my proxy are used for different realm (remote1.org, remote2.org etc...) all with their own single home_server what happens if a remote home server takes too long to respond? To make a long story short it's possible that a problem on a remote home server (that receives a huge number of requests) blocks the requests for my local server? Thanks I know this can be a stupid question but I didn't find an answer in the wiki or in the docs (probably I've searched in the wrong place or the wrong terms sorry) PS: sorry for my English

2 2

users file case sensitive
by Gregg Douglas 17 Sep '12

17 Sep '12

Hi, Background: FreeRadius Version: 2.1.1-7.10.1 Users are stored in LDAP, I am using the users file to assign static IP Addresses to certain users. It seems that the users file is case sensitive, I found a few articles on the net regarding this, but none really supplied a definitive answer. Is there a way to prevent the users file from being case sensitive ? If not, what is the recommended method to elegantly avoid this problem. Regards Gregg

2 1