- Freeradius-Users - lists.freeradius.org

Commit report for master branch
by a.cudbardb＠freeradius.org 14 Sep '12

14 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ======

1 0

Commit report for master branch
by a.cudbardb＠freeradius.org 14 Sep '12

14 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ======

1 0

Commit report for master branch
by a.cudbardb＠freeradius.org 14 Sep '12

14 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ======

1 0

Commit report for master branch
by a.cudbardb＠freeradius.org 14 Sep '12

14 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ======

1 0

Commit report for master branch
by a.cudbardb＠freeradius.org 14 Sep '12

14 Sep '12

New activity for FreeRADIUS (the high performance and highly configurable RADIUS server) ======

1 0

AUTO: Joachim Brauer/Germany/IBM is out of the office (returning 10/01/2012)
by Joachim Brauer 14 Sep '12

14 Sep '12

I am out of the office until 10/01/2012. Nicht im Büro. Post wird >nicht< bearbeitet. Bitte wenden Sie sich in eiligen Fällen an meine LAN Team Kollegen. I am not at my desk. Mail >won't< be checked. In urgent cases please contact my teammates. You are welcome :-) Note: This is an automated response to your message "Freeradius-Users Digest, Vol 89, Issue 48" sent on 14/09/2012 15:48:16. This is the only notification you will receive while this person is away.

1 0

Problem with increasing the cache size in ippool
by ranjan kumar 14 Sep '12

14 Sep '12

Hi All, I am trying to set 65000 cache size but it is giving error. Please help me: ============================================== ippool my_sec_ippool { range-start = 10.160.0.0 range-stop = 10.160.254.254 netmask = 255.255.255.0 cache-size = 65000 session-db = ${raddbdir}/db.ippool1 ip-index = ${raddbdir}/db.ipindex1 override = no maximum-timeout = 0 key = "%{NAS-IP-Address} %{Calling-Station-Id} %{NAS-Port}" } =================================== Error : rlm_ippool: Failed to set cache size Thanks, Regards Ranjan

1 0

Help with 802.1x Certificate
by Tyller D 14 Sep '12

14 Sep '12

Hi all, I would like to use FreeRadius to do 802.1x EAP-PEAP for wireless users. I have everything configured and working when I disabled "validate server Certificate" on windows. I have a wildcard certificate purchased from godaddy.com. I had a problem when using it with apache as I had to add the intermediate chain in the config but can't find a place to do that in FreeRaius. So currently I have 3 files. Private Key Certificate Intermediate Chain When Auth fails because of validation then I get this in Freeradius debug [peap] Length Included [peap] eaptls_verify returned 11 [peap] <<< TLS 1.0 Alert [length 0002], fatal access_denied TLS Alert read:fatal:access denied [peap] WARNING: No data inside of the tunnel. [peap] eaptls_process returned 7 Is there something that I can do to get this to work? Regards, Ryan

4 6

EAP-SIM on 2.2.0
by Francois Gaudreault 14 Sep '12

14 Sep '12

Hi, I am playing with EAP-SIM on 2.2.0, but I am facing an issue I cannot even understand :S Not because I don't want to, but the error messages are not talking much. I did compute SRES/Kc for my SIM, but after the third triplet, I just have: rlm_perl: Added pair EAP-Sim-Rand3 = 0xff626ed6104164234aabebecafecafe3 rlm_perl: Added pair EAP-Sim-Rand2 = 0x771634015641aabcd4e5a2a3ab521242 rlm_perl: Added pair EAP-Sim-SRES1 = 0xa0a116fe rlm_perl: Added pair EAP-Sim-SRES2 = 0xc891c365 rlm_perl: Added pair EAP-Sim-KC1 = 0x603c63ecd59340cb rlm_perl: Added pair EAP-Sim-Rand1 = 0xab521824610aca27814bbde2810347a1 rlm_perl: Added pair EAP-Sim-KC3 = 0xa62f0f3aca277041 rlm_perl: Added pair EAP-Sim-KC2 = 0xbdaf3f47b1fc2520 rlm_perl: Added pair EAP-Sim-SRES3 = 0x6daeb494 rlm_perl: Added pair Auth-Type = EAP rlm_perl: Added pair EAP-Type = SIM ++[packetfence] returns noop Found Auth-Type = EAP # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/sim [eap] processing type sim [eap] Handler failed in EAP/sim [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. I am using sim_files to populate the attributes. Anyone can enlight me? By the way, the same config works on 2.1.12 (just tested it): rlm_perl: Added pair EAP-Sim-Rand3 = 0xff626ed6104164234aabebecafecafe3 rlm_perl: Added pair EAP-Sim-Rand2 = 0x771634015641aabcd4e5a2a3ab521242 rlm_perl: Added pair EAP-Sim-SRES1 = 0xa0a116fe rlm_perl: Added pair EAP-Sim-SRES2 = 0xc891c365 rlm_perl: Added pair EAP-Sim-KC1 = 0x603c63ecd59340cb rlm_perl: Added pair EAP-Sim-Rand1 = 0xab521824610aca27814bbde2810347a1 rlm_perl: Added pair EAP-Sim-KC3 = 0xa62f0f3aca277041 rlm_perl: Added pair EAP-Sim-KC2 = 0xbdaf3f47b1fc2520 rlm_perl: Added pair EAP-Sim-SRES3 = 0x6daeb494 rlm_perl: Added pair Auth-Type = EAP rlm_perl: Added pair EAP-Type = SIM ++[packetfence] returns noop Found Auth-Type = EAP # Executing group from file /usr/local/pf/raddb/sites-enabled/packetfence +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/sim [eap] processing type sim MAC check succeed [eap] Underlying EAP-Type set EAP ID to 27 [eap] Freeing handler ++[eap] returns ok # Executing section post-auth from file /usr/local/pf/raddb/sites-enabled/packetfence +- entering group post-auth {...} ++[exec] returns noop ++[reply] returns noop } # server packetfence Sending Access-Accept of id 34 to 10.0.0.24 port 1051 Thanks! -- Francois Gaudreault, ing. jr fgaudreault(a)inverse.ca :: +1.514.447.4918 (x130) :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence (www.packetfence.org)

5 26

building FR3.0 jlibtool problem
by Scott Armitage 13 Sep '12

13 Sep '12

All, is anyone else having problems with using building FR3.0 I get the following: [root@boppity-new freeradius-server]# ./configure --prefix=/usr --with-large-files --with-raddbdir=/etc/raddb --with-experimental-modules --enable-developer | grep WARN configure: WARNING: snmpget not found - Simultaneous-Use and checkrad.pl may not work configure: WARNING: snmpwalk not found - Simultaneous-Use and checkrad.pl may not work configure: WARNING: pcap library not found, silently disabling the RADIUS sniffer. configure: WARNING: silently not building rlm_counter. configure: WARNING: FAILURE: rlm_counter requires: libgdbm. configure: WARNING: FAILURE: rlm_dbm requires: (ndbm.h or gdbm/ndbm.h or gdbm-ndbm.h) (libndbm or libgdbm or libgdbm_compat). configure: WARNING: silently not building rlm_dbm. configure: WARNING: the TNCS library isn't found! configure: WARNING: silently not building rlm_eap_tnc. configure: WARNING: FAILURE: rlm_eap_tnc requires: -lTNCS. configure: WARNING: silently not building rlm_eap_pwd. configure: WARNING: FAILURE: rlm_eap_pwd requires: EC_GROUP_free. configure: WARNING: silently not building rlm_eap_ikev2. configure: WARNING: FAILURE: rlm_eap_ikev2 requires: libeap-ikev2 EAPIKEv2/connector.h. configure: WARNING: silently not building rlm_ippool. configure: WARNING: FAILURE: rlm_ippool requires: libgdbm. configure: WARNING: silently not building rlm_opendirectory. configure: WARNING: FAILURE: rlm_opendirectory requires: membership.h. configure: WARNING: silently not building rlm_pam. configure: WARNING: FAILURE: rlm_pam requires: libpam. configure: WARNING: silently not building rlm_python. configure: WARNING: FAILURE: rlm_python requires: Python.h libpython2.6. configure: WARNING: hiredis libraries not found. Use --with-redis-lib-dir=<path>. configure: WARNING: hiredis headers not found. Use --with-redis-include-dir=<path>. configure: WARNING: silently not building rlm_redis. configure: WARNING: FAILURE: rlm_redis requires: libhiredis hiredis.h. configure: WARNING: hiredis libraries not found. Use --with-redis-lib-dir=<path>. configure: WARNING: hiredis headers not found. Use --with-redis-include-dir=<path>. configure: WARNING: silently not building rlm_rediswho. configure: WARNING: FAILURE: rlm_rediswho requires: libhiredis hiredis.h. configure: WARNING: silently not building rlm_rest. configure: WARNING: FAILURE: rlm_rest requires: curl/curl.h. configure: WARNING: silently not building rlm_ruby. configure: WARNING: FAILURE: rlm_ruby requires: ruby-binary. configure: WARNING: silently not building rlm_sql_postgresql. configure: WARNING: FAILURE: rlm_sql_postgresql requires: libpq-fe.h libpq. configure: WARNING: silently not building rlm_sql_iodbc. configure: WARNING: FAILURE: rlm_sql_iodbc requires: libiodbc isql.h. configure: WARNING: Sqlite libraries not found. Use --with-sqlite-lib-dir=<path>. configure: WARNING: Sqlite headers not found. Use --with-sqlite-include-dir=<path>. configure: WARNING: silently not building rlm_sql_sqlite. configure: WARNING: FAILURE: rlm_sql_sqlite requires: libsqlite3 sqlite.h. configure: WARNING: silently not building rlm_sql_db2. configure: WARNING: FAILURE: rlm_sql_db2 requires: libdb2 sqlcli.h. configure: WARNING: oracle headers not found. Use --with-oracle-include-dir=<path>. configure: WARNING: silently not building rlm_sql_oracle. configure: WARNING: FAILURE: rlm_sql_oracle requires: oci.h. configure: WARNING: silently not building rlm_sql_unixodbc. configure: WARNING: FAILURE: rlm_sql_unixodbc requires: libodbc sql.h. configure: WARNING: silently not building rlm_sql_firebird. configure: WARNING: FAILURE: rlm_sql_firebird requires: libfbclient ibase.h. configure: WARNING: MySQL libraries not found. Use --with-mysql-lib-dir=<path>. configure: WARNING: MySQL headers not found. Use --with-mysql-include-dir=<path>. configure: WARNING: silently not building rlm_sql_mysql. configure: WARNING: FAILURE: rlm_sql_mysql requires: libmysqlclient_r mysql.h. [root@boppity-new freeradius-server]# make Making all in src... Making all in src/include... gmake[4]: Nothing to be done for `all'. Making all in src/lib... CC dict.c gmake[4]: /usr/local/src/freeradius-server/libtool: Command not found gmake[4]: *** [dict.lo] Error 127 gmake[3]: *** [lib] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [src] Error 2 make: *** [all] Error 2 Even if I try: [root@boppity-new freeradius-server]# echo 'BOILER=yes' >> Make.inc [root@boppity-new freeradius-server]# make Making all in src... Making all in src/include... gmake[4]: Nothing to be done for `all'. Making all in src/lib... CC dict.c gmake[4]: /usr/local/src/freeradius-server/libtool: Command not found gmake[4]: *** [dict.lo] Error 127 gmake[3]: *** [lib] Error 2 gmake[2]: *** [all] Error 2 gmake[1]: *** [src] Error 2 make: *** [all] Error 2 Am I being an idiot? Regards Scott Armitage

4 4