2009/2/25 <freeradius-users-request@lists.freeradius.org>

Send Freeradius-Users mailing list submissions to
freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at
freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

1. RE: Freeradius-Users Digest, Vol 46, Issue 96 (Shimon Weinreich)
2. Re: Why is groupname field blank in radacct (tnt@kalik.net)
3. RE: SMF manifest to run freeradius in solaris 10 (Thomas Noppe)

----------------------------------------------------------------------

Message: 1
Date: Wed, 25 Feb 2009 11:53:56 +0200
From: "Shimon Weinreich" <shimon@openu.ac.il>
Subject: RE: Freeradius-Users Digest, Vol 46, Issue 96
To: <freeradius-users@lists.freeradius.org>
Message-ID: <A8DAF37AB05CA74C938F57DD19095766143614@AMNON.openu.local>
Content-Type: text/plain; charset="windows-1255"

Tnx Ivan,

I'll upgrade it.

-------
?????,

????? ????????
??????????? ??????

-----Original Message-----
From: freeradius-users-bounces+shimon=openu.ac.il@lists.freeradius.org [mailto:freeradius-users-bounces+shimon=openu.ac.il@lists.freeradius.org] On Behalf Of freeradius-users-request@lists.freeradius.org
Sent: Wednesday, February 25, 2009 11:45 AM
To: freeradius-users@lists.freeradius.org
Subject: Freeradius-Users Digest, Vol 46, Issue 96

Send Freeradius-Users mailing list submissions to
freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at
freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

1. SMF manifest to run freeradius in solaris 10 (Thomas Noppe)
2. Re: does peap/mschap-v2 must use with ldap? (Nicolas Goutte)
3. RE: auth: Failed to validate the user - NEED SOME HELP !
(tnt@kalik.net)
4. RE: SMF manifest to run freeradius in solaris 10 (Mats Blomgren B)

----------------------------------------------------------------------

Message: 1
Date: Wed, 25 Feb 2009 10:09:45 +0100
From: Thomas Noppe <thomas.noppe@uz.kuleuven.ac.be>
Subject: SMF manifest to run freeradius in solaris 10
To: freeradius <freeradius-users@lists.freeradius.org>
Message-ID:
<B44A93F24BD174408E495C668C3E3E763945333E06@EX2007-MBX-1.uz.kuleuven.ac.be>

Content-Type: text/plain; charset="us-ascii"

Has anyone got such a manifest for solaris 10?

Kind regards

Thomas

---------------------------------------------------------------------------------------------
Thomas Noppe
Dienst Informatiesystemen - S&O

thomas.noppe@uzleuven.be<mailto:thomas.noppe@uzleuven.be>
+32 16 34 79 87
+32 16 34 78 01
UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven | www.uzleuven.be<http://www.uzleuven.be>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090225/9c1e0f0c/attachment.html>

------------------------------

Message: 2
Date: Wed, 25 Feb 2009 10:28:57 +0100
From: Nicolas Goutte <nicolas.goutte@extragroup.de>
Subject: Re: does peap/mschap-v2 must use with ldap?
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Message-ID: <C9E5D8F1-9493-44DF-BADA-FAFF7E9DF695@extragroup.de>
Content-Type: text/plain; charset="utf-8"; Format="flowed";
DelSp="yes"

Am 25.02.2009 um 09:59 schrieb ??:

[...]

>
> Does it because I'm not configure LDAP? Does PEAP/MSCHAP-V2 must
> use with LDAP?
> In my database I have already add the "testuser User-
> Password := test123" in radcheck table but it doesn't work.

Try using Cleartext-Password instead of User-Password, so that mschap
has a chance to compute the correct hash.

Have a nice day!

Nicolas Goutte

extragroup GmbH - Karlsruhe
Waldstr. 49
76133 Karlsruhe
Germany

Gesch?ftsf?hrer: Stephan M?nninghoff, Hans Martin Kern, Tilman
Haerdle
Registergericht: Amtsgericht M?nster / HRB: 5624
Steuer Nr.: 337/5903/0421 / UstID: DE 204607841

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090225/ad237149/attachment.html>

------------------------------

Message: 3
Date: Wed, 25 Feb 2009 10:42:10 +0100
From: <tnt@kalik.net>
Subject: RE: auth: Failed to validate the user - NEED SOME HELP !
To: freeradius-users@lists.freeradius.org
Message-ID: <WHqqEMjo.1235554930.0769900.tnt@kalik.net>
Content-Type: text/plain; charset=ISO-8859-2

>rad_recv: Access-Request packet from host 127.0.0.1:54057, id=172, length=59
>
> User-Name = "monitor"
>
> User-Password = "XXXXXXXX"
>
> NAS-IP-Address = 255.255.255.255
>
> NAS-Port = 1812
>
> Processing the authorize section of radiusd.conf
>
>modcall: entering group authorize for request 0
>
> modcall[authorize]: module "preprocess" returns ok for request 0
>
> modcall[authorize]: module "chap" returns noop for request 0
>
> modcall[authorize]: module "mschap" returns noop for request 0
>
> rlm_realm: No '@' in User-Name = "monitor", looking up realm NULL
>
> rlm_realm: No such realm "NULL"
>
> modcall[authorize]: module "suffix" returns noop for request 0
>
> rlm_eap: No EAP-Message, not doing EAP
>
> modcall[authorize]: module "eap" returns noop for request 0
>
> users: Matched entry DEFAULT at line 152
>
> users: Matched entry monitor at line 216
>
> modcall[authorize]: module "files" returns ok for request 0
>
>modcall: leaving group authorize (returns ok) for request 0
>
> rad_check_password: Found Auth-Type System
>
>auth: type "System"
>

You are using an ancient version of the server. Upgrade. If you insist on
using outdated, buggy and unsecure version then comment out the DEFAULT
entry setting Auth-Type System in users file.

Ivan Kalik
Kalik informatika ISP

------------------------------

Message: 4
Date: Wed, 25 Feb 2009 10:12:36 +0100
From: "Mats Blomgren B" <mats.b.blomgren@ericsson.com>
Subject: RE: SMF manifest to run freeradius in solaris 10
To: "FreeRadius users mailing list"
<freeradius-users@lists.freeradius.org>
Message-ID:
<D96608909E170042B40D538BEB20B56901EE959F@esealmw121.eemea.ericsson.se>

Content-Type: text/plain; charset="us-ascii"

File named radius.xml

<?xml version="1.0"?>
<!DOCTYPE service_bundle SYSTEM
"/usr/share/lib/xml/dtd/service_bundle.dtd.1">
<service_bundle type='manifest' name='radius'>
<service
name='system/radius'
type='service'
version='1'>
<create_default_instance enabled='false' />
<single_instance/>
<exec_method
type='method'
name='start'
exec='/lib/svc/method/svc-radius start'
timeout_seconds='60' />
<exec_method
type='method'
name='stop'
exec='/lib/svc/method/svc-radius stop'
timeout_seconds='60' />
<exec_method
type='method'
name='refresh'
exec='/lib/svc/method/svc-radius stop reload'
timeout_seconds='60' />
<stability value='Unstable' />
<template>
<common_name>
<loctext xml:lang='C'> radius
</loctext>
</common_name>
<documentation>
<manpage title='radius' section='1M'
manpath='/usr/share/man' />
</documentation>
</template>
</service>
</service_bundle>

Best Regards

Mats Blomgren B

________________________________

From:
freeradius-users-bounces+mats.b.blomgren=ericsson.com@lists.freeradius.o
rg
[mailto:freeradius-users-bounces+mats.b.blomgren=ericsson.com@lists.free
radius.org] On Behalf Of Thomas Noppe
Sent: den 25 februari 2009 10:10
To: freeradius
Subject: SMF manifest to run freeradius in solaris 10

Has anyone got such a manifest for solaris 10?

Kind regards

Thomas

------------------------------------------------------------------------
---------------------

Thomas Noppe
Dienst Informatiesystemen - S&O

thomas.noppe@uzleuven.be <mailto:thomas.noppe@uzleuven.be>
+32 16 34 79 87
+32 16 34 78 01

UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven |
www.uzleuven.be <http://www.uzleuven.be>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090225/d37d6c1e/attachment.html>

------------------------------

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

End of Freeradius-Users Digest, Vol 46, Issue 96
************************************************

------------------------------

Message: 2
Date: Wed, 25 Feb 2009 10:56:40 +0100
From: <tnt@kalik.net>
Subject: Re: Why is groupname field blank in radacct
To: "FreeRadius users mailing list"
<freeradius-users@lists.freeradius.org>
Message-ID: <yq43PtC6.1235555800.4823680.tnt@kalik.net>
Content-Type: text/plain; charset=ISO-8859-2

>I installed freeradius and have noticed that all while other fields are
>filled in on the radacct table some are not. Of particular importance to me
>is the groupname field. I need this field because I need to know which group
>the customer is from so that I charge them accordingly. A person may belong
>to more than one group and we need a particular group the person used to log
>into the system.
>
>How can we cause the groupname to be written to the radacct table?

Nothing is written to that field by default. Edit the accounting queries
in dialup.conf to fill that field.

Ivan Kalik

------------------------------

Message: 3
Date: Wed, 25 Feb 2009 10:59:12 +0100
From: Thomas Noppe <thomas.noppe@uz.kuleuven.ac.be>
Subject: RE: SMF manifest to run freeradius in solaris 10
To: "'FreeRadius users mailing list'"
<freeradius-users@lists.freeradius.org>
Message-ID:
<B44A93F24BD174408E495C668C3E3E763945333E07@EX2007-MBX-1.uz.kuleuven.ac.be>

Content-Type: text/plain; charset="us-ascii"

Thank you very much!

---------------------------------------------------------------------------------------------
Thomas Noppe
Dienst Informatiesystemen - S&O

thomas.noppe@uzleuven.be<mailto:thomas.noppe@uzleuven.be>
+32 16 34 79 87
+32 16 34 78 01
UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven | www.uzleuven.be<http://www.uzleuven.be>

Van: freeradius-users-bounces+thomas.noppe=uz.kuleuven.ac.be@lists.freeradius.org [mailto:freeradius-users-bounces+thomas.noppe=uz.kuleuven.ac.be@lists.freeradius.org] Namens Mats Blomgren B
Verzonden: woensdag 25 februari 2009 10:14
Aan: FreeRadius users mailing list
Onderwerp: RE: SMF manifest to run freeradius in solaris 10

I forgot to include "svc-radius"

#!/bin/sh
. /lib/svc/share/smf_include.sh

#!/bin/sh
#
# radiusd Start the radius daemon.
#
# This program is free software; you can redistribute it and/or modify
# it under the terms of the GNU General Public License as published by
# the Free Software Foundation; either version 2 of the License, or
# (at your option) any later version.
#
# This program is distributed in the hope that it will be useful,
# but WITHOUT ANY WARRANTY; without even the implied warranty of
# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
# GNU General Public License for more details.
#
# You should have received a copy of the GNU General Public License
# along with this program; if not, write to the Free Software
# Foundation, Inc., 59 Temple Place, Suite 330, Boston, MA 02111-1307 USA
#
# Copyright (C) 2001-2002 The FreeRADIUS Project http://www.freeradius.org

prefix=/usr/local
exec_prefix=${prefix}
sbindir=${exec_prefix}/sbin
localstatedir=${prefix}/var
logdir=${localstatedir}/log/radius
rundir=${localstatedir}/run/radiusd
sysconfdir=${prefix}/etc

#
# If you have issues with OpenSSL, uncomment these next lines.
#
# Something similar may work for MySQL, and you may also
# have to LD_PRELOAD libz.so
#
#LD_LIBRARY_PATH=-L/usr/local/ssl/lib -lcrypto -lssl -lcrypto
#LD_RUN_PATH=-L/usr/local/ssl/lib -lcrypto -lssl -lcrypto:
#LD_PRELOAD=-L/usr/local/ssl/lib -lcrypto -lssl -lcryptolibcrypto.so
LD_LIBRARY_PATH=/usr/local/lib/:/opt/mysql/mysql/lib
export LD_LIBRARY_PATH LD_RUN_PATH LD_PRELOAD

RADIUSD=$sbindir/radiusd
RADDBDIR=${sysconfdir}/raddb
DESC="FreeRADIUS"

#
# See 'man radiusd' for details on command-line options.
#
ARGS=""

test -f $RADIUSD || exit 0
test -f $RADDBDIR/radiusd.conf || exit 0

case "$1" in
start)
echo -n "Starting $DESC:"
$RADIUSD $ARGS
echo "radiusd"
;;
stop)
[ -z "$2" ] && echo -n "Stopping $DESC: "
[ -f $rundir/radiusd.pid ] && kill -TERM `cat $rundir/radiusd.pid`
[ -z "$2" ] && echo "radiusd."
;;
reload|force-reload)
echo "Reloading $DESC configuration files."
[ -f $rundir/radiusd.pid ] && kill -HUP `cat $rundir/radiusd.pid`
;;
restart)
sh $0 stop quiet
sleep 3
sh $0 start
;;
*)
echo "Usage: /usr/local/sbin/rc.radius {start|stop|reload|restart}"
exit 1
esac

exit 0

Best Regards

Mats Blomgren B

________________________________
From: freeradius-users-bounces+mats.b.blomgren=ericsson.com@lists.freeradius.org [mailto:freeradius-users-bounces+mats.b.blomgren=ericsson.com@lists.freeradius.org] On Behalf Of Thomas Noppe
Sent: den 25 februari 2009 10:10
To: freeradius
Subject: SMF manifest to run freeradius in solaris 10
Has anyone got such a manifest for solaris 10?

Kind regards

Thomas

---------------------------------------------------------------------------------------------
Thomas Noppe
Dienst Informatiesystemen - S&O

thomas.noppe@uzleuven.be<mailto:thomas.noppe@uzleuven.be>
+32 16 34 79 87
+32 16 34 78 01
UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven | www.uzleuven.be<http://www.uzleuven.be>

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20090225/117ef8fe/attachment.html>

------------------------------

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

End of Freeradius-Users Digest, Vol 46, Issue 98
************************************************