RE: NAS table

18 Apr 2009

      so thak you ivan...really apreciate for your answeri just install it using apt-get install command ubuntu 7.10. so i'll upgrade to wich version??which version is better..??

--- On Sat, 4/18/09, Ivan Kalik <tnt@kalik.net> wrote:

From: Ivan Kalik <tnt@kalik.net>
Subject: RE: NAS table
To: "'FreeRadius users mailing list'" <freeradius-users@lists.freeradius.org>
Date: Saturday, April 18, 2009, 3:06 AM

Upgrade. That's a very old server version. In 1.x you had to have an 
entry in clients.conf for sql to read clients. And something is wrong with your 
clients.conf since debug stops when server tries to read it.

Ivan 
Kalik
Kalik 
Informatika ISP

  -----Original Message-----
From: 
  freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org 
  [mailto:freeradius-users-bounces+tnt=kalik.net@lists.freeradius.org] On 
  Behalf Of Nizar Zulmi
Sent: 16 April 2009 13:25
To: 
  FreeRadius users mailing list
Subject: RE: NAS 
  table

      dearl list all..don't know how to thanks to you to reply 
        my email and answer my quest. and sorry for to much question.:D
        i've run this command
        radiusd -X 
        but it return this 

        The program 'radiusd' can be found in the following packages:
         * radiusd-livingston
         * yardradius
         * xtradius
        Try: apt-get install <selected package

        i read freeradius documentation to do debug in ubuntu, and i try 
        this command but i 
        freeradius -X and return this message

        freeradius -X
        Starting - reading configuration files ...
        reread_config:  reading radiusd.conf
        Config:   including file: /etc/freeradius/proxy.conf
        Config:   including file: /etc/freeradius/clients.conf
        Config:   including file: /etc/freeradius/snmp.conf
        Config:   including file: /etc/freeradius/eap.conf
        Config:   including file: /etc/freeradius/sql.conf
         main: prefix = "/usr"
         main: localstatedir = "/var"
         main: logdir = "/var/log/freeradius"
         main: libdir = "/usr/lib/freeradius"
         main: radacctdir = "/var/log/freeradius/radacct"
         main: hostname_lookups = no
         main: max_request_time = 30
         main: cleanup_delay = 5
         main: max_requests = 1024
         main: delete_blocked_requests = 0
         main: port = 0
         main: allow_core_dumps = no
         main: log_stripped_names = no
         main: log_file = "/var/log/freeradius/radius.log"
         main: log_auth = no
         main: log_auth_badpass = no
         main: log_auth_goodpass = no
         main: pidfile = "/var/run/freeradius/freeradius.pid"
         main: user = "freerad"
         main: group = "freerad"
         main: usercollide = no
         main: lower_user = "no"
         main: lower_pass = "no"
         main: nospace_user = "no"
         main: nospace_pass = "no"
         main: checkrad = "/usr/sbin/checkrad"
         main: proxy_requests = yes
         proxy: retry_delay = 5
         proxy: retry_count = 3
         proxy: synchronous = no
         proxy: default_fallback = yes
         proxy: dead_time = 120
         proxy: post_proxy_authorize = no
         proxy: wake_all_if_all_dead = no
         security: max_attributes = 200
         security: reject_delay = 1
         security: status_server = no
         main: debug_level = 0
        read_config_files:  reading dictionary
        read_config_files:  reading naslist
        Using deprecated naslist file.  Support for this will go away 
        soon.
        read_config_files:  reading clients

        this message after i comment out this inf clients.conf

        #client 127.0.0.1 {

        #        secret         
         = passwordradius

        #       shortname       = 
        localhost
        #        nastype     = other   
          # localhost isn't usually a NAS...

        #   }

        but if i uncomment that 
        then i run freeradius -X it return this message

         main: debug_level = 0
        read_config_files:  reading dictionary
        read_config_files:  reading naslist
        Using deprecated naslist file.  Support for this will go away 
        soon.
        read_config_files:  reading clients
        read_config_files:  reading realms
        radiusd:  entering modules setup
        Module: Library search path is /usr/lib/freeradius
        Module: Loaded exec
         exec: wait = yes
         exec: program = "(null)"
         exec: input_pairs = "request"
         exec: output_pairs = "(null)"
         exec: packet_type = "(null)"
        rlm_exec: Wait=yes but no output defined. Did you mean 
        output=none?
        Module: Instantiated exec (exec)
        Module: Loaded expr
        Module: Instantiated expr (expr)
        Module: Loaded PAP
         pap: encryption_scheme = "crypt"
         pap: auto_header = yes
        Module: Instantiated pap (pap)
        Module: Loaded CHAP
        Module: Instantiated chap (chap)
        Module: Loaded MS-CHAP
         mschap: use_mppe = yes
         mschap: require_encryption = no
         mschap: require_strong = no
         mschap: with_ntdomain_hack = no
         mschap: passwd = "(null)"
         mschap: ntlm_auth = "(null)"
        Module: Instantiated mschap (mschap)
        Module: Loaded System
         unix: cache = no
         unix: passwd = "(null)"
         unix: shadow = "/etc/shadow"
         unix: group = "(null)"
         unix: radwtmp = "/var/log/freeradius/radwtmp"
         unix: usegroup = no
         unix: cache_reload = 600
        Module: Instantiated unix (unix)
        Module: Loaded eap
         eap: default_eap_type = "md5"
         eap: timer_expire = 60
         eap: ignore_unknown_eap_types = no
         eap: cisco_accounting_username_bug = no
        rlm_eap: Loaded and initialized type md5
        rlm_eap: Loaded and initialized type leap
         gtc: challenge = "Password: "
         gtc: auth_type = "PAP"
        rlm_eap: Loaded and initialized type gtc
         mschapv2: with_ntdomain_hack = no
        rlm_eap: Loaded and initialized type mschapv2
        Module: Instantiated eap (eap)
        Module: Loaded preprocess
         preprocess: huntgroups = "/etc/freeradius/huntgroups"
         preprocess: hints = "/etc/freeradius/hints"
         preprocess: with_ascend_hack = no
         preprocess: ascend_channels_per_line = 23
         preprocess: with_ntdomain_hack = no
         preprocess: with_specialix_jetstream_hack = no
         preprocess: with_cisco_vsa_hack = no
         preprocess: with_alvarion_vsa_hack = no
        Module: Instantiated preprocess (preprocess)
        Module: Loaded realm
         realm: format = "suffix"
         realm: delimiter = "@"
         realm: ignore_default = no
         realm: ignore_null = no
        Module: Instantiated realm (suffix)
        Module: Loaded SQL
         sql: driver = "rlm_sql_mysql"
         sql: server = "localhost"
         sql: port = ""
         sql: login = "root"
         sql: password = "jOeLya"
         sql: radius_db = "radius"
         sql: nas_table = "nas"
         sql: sqltrace = no
         sql: sqltracefile = "/var/log/freeradius/sqltrace.sql"
         sql: readclients = yes
         sql: deletestalesessions = yes
         sql: num_sql_socks = 5
         sql: sql_user_name = "%{User-Name}"
         sql: default_user_profile = ""
         sql: query_on_not_found = no
         sql: authorize_check_query = "SELECT id, UserName, Attribute, 
        Value, op                   

                  FROM radcheck       
            WHERE Username = '%{SQL-User-Name}'       
            ORDER B               

           Y id"
         sql: authorize_reply_query = "SELECT id, UserName, Attribute, 
        Value, op                   

                  FROM radreply       
            WHERE Username = '%{SQL-User-Name}'       
            ORDER B               

           Y id"
         sql: authorize_group_check_query = "SELECT 
        radgroupcheck.id,radgroupcheck.Group           

         Name,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op 
         FROM radgroup               

           check,usergroup WHERE usergroup.Username = 
        '%{SQL-User-Name}' AND usergroup.Grou           

               pName = radgroupcheck.GroupName ORDER BY 
        radgroupcheck.id"
         sql: authorize_group_reply_query = "SELECT 
        radgroupreply.id,radgroupreply.Group           

         Name,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op 
         FROM radgroup               

           reply,usergroup WHERE usergroup.Username = 
        '%{SQL-User-Name}' AND usergroup.Grou           

               pName = radgroupreply.GroupName ORDER BY 
        radgroupreply.id"
         sql: accounting_onoff_query = "UPDATE radacct SET 
        AcctStopTime='%S', AcctSessio             

             nTime=unix_timestamp('%S') - 
        unix_timestamp(AcctStartTime), AcctTerminateCause='       

                   %{Acct-Terminate-Cause}', 
        AcctStopDelay = '%{Acct-Delay-Time}' WHERE AcctSession     

                     Time=0 AND 
        AcctStopTime=0 AND NASIPAddress= '%{NAS-IP-Address}' AND AcctStartTim 

                         e <= 
        '%S'"
         sql: accounting_update_query = "UPDATE radacct     
              SET FramedIPAddress =         

                  '%{Framed-IP-Address}',     
              AcctSessionTime = '%{Acct-Session-Time}',   

              AcctInputOctets = '%{Acct-Input-Octets}',   
                AcctOutputOctets = '%{       

                   Acct-Output-Octets}'   
                WHERE AcctSessionId = '%{Acct-Session-Id}' 

                AND UserName = '%{SQL-User-Name}'   
                AND NASIPAddress= '%{NAS-IP-Addr   

                       ess}'"
         sql: accounting_update_query_alt = "INSERT into radacct 
        (AcctSessionId, AcctUni               

           queId, UserName, Realm, NASIPAddress, NASPortId, 
        NASPortType, AcctStartTime, Acc           

               tSessionTime, AcctAuthentic, 
        ConnectInfo_start, AcctInputOctets, AcctOutputOctet       

                   s, CalledStationId, 
        CallingStationId, ServiceType, FramedProtocol, FramedIPAddre   

                       ss, 
        AcctStartDelay) values('%{Acct-Session-Id}', 
        '%{Acct-Unique-Session-Id}', '%           

               {SQL-User-Name}', '%{Realm}', 
        '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Ty       

                   pe}', DATE_SUB('%S',INTERVAL 
        (%{Acct-Session-Time:-0} + %{Acct-Delay-Time:-0}) S       

                   ECOND), '%{Acct-Session-Time}', 
        '%{Acct-Authentic}', '', '%{Acct-Input-Octets}',       

                    '%{Acct-Output-Octets}', 
        '%{Called-Station-Id}', '%{Calling-Station-Id}', '%{Se     

                     rvice-Type}', 
        '%{Framed-Protocol}', '%{Framed-IP-Address}', '0')"
         sql: accounting_start_query = "INSERT into radacct 
        (AcctSessionId, AcctUniqueId             

             , UserName, Realm, NASIPAddress, NASPortId, 
        NASPortType, AcctStartTime, AcctStop           

               Time, AcctSessionTime, AcctAuthentic, 
        ConnectInfo_start, ConnectInfo_stop, AcctI         

                 nputOctets, AcctOutputOctets, 
        CalledStationId, CallingStationId, AcctTerminateCa       

                   use, ServiceType, 
        FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay   

                       ) 
        values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', 
        '%{SQL-User-Name}',               

            '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', 
        '%{NAS-Port-Type}', '%S', '0', '           

               0', '%{Acct-Authentic}', '%{Connect-Info}', 
        '', '0', '0', '%{Called-Station-Id}'           

               , '%{Calling-Station-Id}', '', 
        '%{Service-Type}', '%{Framed-Protocol}', '%{Frame       

                   d-IP-Address}', 
        '%{Acct-Delay-Time}', '0')"
         sql: accounting_start_query_alt = "UPDATE radacct SET 
        AcctStartTime = '%S', Acc             

             tStartDelay = '%{Acct-Delay-Time}', 
        ConnectInfo_start = '%{Connect-Info}' WHERE         

                  AcctSessionId = '%{Acct-Session-Id}' 
        AND UserName = '%{SQL-User-Name}' AND NASIP         

                 Address = '%{NAS-IP-Address}'"
         sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime 
        = '%S', AcctSessi               

           onTime = '%{Acct-Session-Time}', AcctInputOctets = 
        '%{Acct-Input-Octets}', AcctO             

             utputOctets = '%{Acct-Output-Octets}', 
        AcctTerminateCause = '%{Acct-Terminate-Ca         

                 use}', AcctStopDelay = 
        '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}     

                     ' WHERE AcctSessionId = 
        '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' A     

                     ND NASIPAddress = 
        '%{NAS-IP-Address}'"
         sql: accounting_stop_query_alt = "INSERT into radacct 
        (AcctSessionId, AcctUniqu             

             eId, UserName, Realm, NASIPAddress, NASPortId, 
        NASPortType, AcctStartTime, AcctS           

               topTime, AcctSessionTime, AcctAuthentic, 
        ConnectInfo_start, ConnectInfo_stop, Ac         

                 ctInputOctets, AcctOutputOctets, 
        CalledStationId, CallingStationId, AcctTerminat       

                   eCause, ServiceType, 
        FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDe   

                       lay) 
        values('%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', 
        '%{SQL-User-Name}               

           ', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', 
        '%{NAS-Port-Type}', DATE_SUB(             

             '%S', INTERVAL (%{Acct-Session-Time:-0} + 
        %{Acct-Delay-Time:-0}) SECOND), '%S',           

                '%{Acct-Session-Time}', '%{Acct-Authentic}', 
        '', '%{Connect-Info}', '%{Acct-Inpu           

               t-Octets}', '%{Acct-Output-Octets}', 
        '%{Called-Station-Id}', '%{Calling-Station-         

                 Id}', '%{Acct-Terminate-Cause}', 
        '%{Service-Type}', '%{Framed-Protocol}', '%{Fra       

                   med-IP-Address}', '0', 
        '%{Acct-Delay-Time}')"
         sql: group_membership_query = "SELECT GroupName FROM 
        usergroup WHERE UserName='             

             %{SQL-User-Name}'"
         sql: connect_failure_retry_delay = 60
         sql: simul_count_query = ""
         sql: simul_verify_query = "SELECT RadAcctId, AcctSessionId, 
        UserName, NASIPAddr               

           ess, NASPortId, FramedIPAddress, CallingStationId, 
        FramedProtocol FROM radacct W             

             HERE UserName='%{SQL-User-Name}' AND AcctStopTime = 
        0"
         sql: postauth_query = "INSERT into radpostauth (id, user, 
        pass, reply, date) va               

           lues ('', '%{User-Name}', 
        '%{User-Password:-Chap-Password}', '%{reply:Packet-Typ     

                     e}', NOW())"
         sql: safe-characters = 
        "@abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ01     

                     23456789.-_: /"
        rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded 
        and linked
        rlm_sql (sql): Attempting to connect to 
root@localhost:/radius
        rlm_sql (sql): starting 0
        rlm_sql (sql): Attempting to connect rlm_sql_mysql #0
        rlm_sql_mysql: Starting connect to MySQL server for #0
        rlm_sql (sql): Connected new DB handle, #0
        rlm_sql (sql): starting 1
        rlm_sql (sql): Attempting to connect rlm_sql_mysql #1
        rlm_sql_mysql: Starting connect to MySQL server for #1
        rlm_sql (sql): Connected new DB handle, #1
        rlm_sql (sql): starting 2
        rlm_sql (sql): Attempting to connect rlm_sql_mysql #2
        rlm_sql_mysql: Starting connect to MySQL server for #2
        rlm_sql (sql): Connected new DB handle, #2
        rlm_sql (sql): starting 3
        rlm_sql (sql): Attempting to connect rlm_sql_mysql #3
        rlm_sql_mysql: Starting connect to MySQL server for #3
        rlm_sql (sql): Connected new DB handle, #3
        rlm_sql (sql): starting 4
        rlm_sql (sql): Attempting to connect rlm_sql_mysql #4
        rlm_sql_mysql: Starting connect to MySQL server for #4
        rlm_sql (sql): Connected new DB handle, #4
        rlm_sql (sql): - generate_sql_clients
        rlm_sql (sql): Query: SELECT * FROM nas
        rlm_sql (sql): Reserving sql socket id: 4
        rlm_sql (sql): Read entry 
        nasname=127.0.0.1,shortname=localhost,secret=passwordr     

                     adius
        rlm_sql (sql): Adding client 127.0.0.1 (localhost) to clients 
        list
        rlm_sql (sql): Released sql socket id: 4
        Module: Instantiated sql (sql)
        Module: Loaded Acct-Unique-Session-Id
         acct_unique: key = "User-Name, Acct-Session-Id, 
        NAS-IP-Address, Client-IP-Addre           

               ss, NAS-Port"
        Module: Instantiated acct_unique (acct_unique)
        Module: Loaded files
         files: usersfile = "/etc/freeradius/users"
         files: acctusersfile = "/etc/freeradius/acct_users"
         files: preproxy_usersfile = 
        "/etc/freeradius/preproxy_users"
         files: compat = "no"
        Module: Instantiated files (files)
        Module: Loaded detail
         detail: detailfile = 
        "/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%     

                     Y%m%d"
         detail: detailperm = 384
         detail: dirperm = 493
         detail: locking = no
        Module: Instantiated detail (detail)
        Module: Loaded radutmp
         radutmp: filename = "/var/log/freeradius/radutmp"
         radutmp: username = "%{User-Name}"
         radutmp: case_sensitive = yes
         radutmp: check_with_nas = yes
         radutmp: perm = 384
         radutmp: callerid = yes
        Module: Instantiated radutmp (radutmp)
        Listening on authentication *:1812
        Listening on accounting *:1813
        Ready to process requests.

         whats really wrong...still cannot read NAS from nas table on 
        radius..was it?

        really apreciate your answer.

        Nizar

        --- On Thu, 4/16/09, Ivan Kalik <tnt@kalik.net> 
        wrote:

From: 
          Ivan Kalik <tnt@kalik.net>
Subject: RE: NAS table
To: 
          "'FreeRadius users mailing list'" 
          <freeradius-users@lists.freeradius.org>
Date: Thursday, April 
          16, 2009, 4:02 AM

          this is result of 
freeradius -X
reread_config:  
          reading radiusd.conf
Config:   including file: 
          /etc/freeradius/proxy.conf
Config:   including file: 
          /etc/freeradius/clients.conf
Config:   including file: 
          /etc/freeradius/snmp.conf
Config:   including file: 
          /etc/freeradius/eap.conf
Config:   including file: 
          /etc/freeradius/sql.conf

          It's not. It's a result of HUP. Now post what you were 
          told.

          Ivan Kalik
          Kalik Informatika ISP 

-----Inline Attachment 
          Follows-----

          -
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

  No virus found in this incoming message.
Checked 
  by AVG - www.avg.com
Version: 8.0.238 / Virus Database: 270.11.57/2060 - 
  Release Date: 04/15/09 19:52:00

-----Inline Attachment Follows-----

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html