RE: How to update a MySql table after successfully WIFI

4 Sep 2011

      Arran,
 </:includetail> 
 Thanks a lot again.</:includetail>
 </:includetail> 
 It works.</:includetail>
 </:includetail> 
 As what you advised,</:includetail>
 </:includetail> 
 1. edit </:includetail>/usr/local/etc/raddb/sites-available/default, uncomment below sql line.</:includetail>
 post-auth {</:includetail>
 ......
#sql
......</:includetail>
 }</:includetail>
 2. edit </:includetail>/usr/local/etc/raddb/sql/mysql/dialup.conf</:includetail>
 updae postauth_query defination.</:includetail>
 </:includetail> 
 Very busy these days. So reply late.</:includetail>
 </:includetail> 
 Tom

  ------------------ Original ------------------
  From:  "freeradius-users"<freeradius-users-request@lists.freeradius.org>;
 Date:  Fri, Sep 2, 2011 06:11 AM
 To:  "freeradius-users"<freeradius-users@lists.freeradius.org>; 

 Subject:  Freeradius-Users Digest, Vol 77, Issue 5

Send Freeradius-Users mailing list submissions to
freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at
freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

   1. How to update a MySql table after successfully WIFI
      authentication? ( 2394263740 )
   2. Re: How to update a MySql table after successfully WIFI
      authentication? (Arran Cudbard-Bell)
   3. Re: Example configuration that proxy PEAP MSCHAPv2 to an IAS
      server (Jacob Dawson)
   4. Using encrypted passwords in users file (sundoo)
   5. cisco 3825 authentication error (Dom)
   6. Re: Using encrypted passwords in users file (Paul Bartell)
   7. Re: Pre release of 2.1.12 (Alan Buxey)

----------------------------------------------------------------------

Message: 1
Date: Thu, 1 Sep 2011 22:29:11 +0800
From: " 2394263740 " <2394263740@qq.com>
Subject: How to update a MySql table after successfully WIFI
authentication?
To: " freeradius-users " <freeradius-users@lists.freeradius.org>
Message-ID: <tencent_3B36E2AF6F7D0370683C1EB1@qq.com>
Content-Type: text/plain; charset="iso-8859-1"

Hello,

 I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1.
OS: Linux Enterprise Server 6.1
Radius: free radius server 2.1.11
Database: Mysql

 I got a WIFI network, using one radius server.

 The whole thing works fine.

 I got a requirement, which is, after each successful WIFI connection, one record need be added into connectionlog table.

 CREATE TABLE connectionlog (
  radacctid bigint(21) NOT NULL auto_increment,
  acctsessionid varchar(64) NOT NULL default '',
  acctuniqueid varchar(32) NOT NULL default '',
  username varchar(64) NOT NULL default '',
  groupname varchar(64) NOT NULL default '',
  realm varchar(64) default '',
  nasipaddress varchar(15) NOT NULL default '',
  nasportid varchar(15) default NULL,
  nasporttype varchar(32) default NULL,
  acctstarttime datetime NULL default NULL,
  acctstoptime datetime NULL default NULL,
  acctsessiontime int(12) default NULL,
  acctauthentic varchar(32) default NULL,
  connectinfo_start varchar(50) default NULL,
  connectinfo_stop varchar(50) default NULL,
  acctinputoctets bigint(20) default NULL,
  acctoutputoctets bigint(20) default NULL,
  calledstationid varchar(50) NOT NULL default '',
  callingstationid varchar(50) NOT NULL default '',
  acctterminatecause varchar(32) NOT NULL default '',
  servicetype varchar(32) default NULL,
  framedprotocol varchar(32) default NULL,
  framedipaddress varchar(15) NOT NULL default '',
  acctstartdelay int(12) default NULL,
  acctstopdelay int(12) default NULL,
  xascendsessionsvrkey varchar(10) default NULL,
  PRIMARY KEY  (radacctid),
  KEY username (username),
  KEY framedipaddress (framedipaddress),
  KEY acctsessionid (acctsessionid),
  KEY acctsessiontime (acctsessiontime),
  KEY acctuniqueid (acctuniqueid),
  KEY acctstarttime (acctstarttime),
  KEY acctstoptime (acctstoptime),
  KEY nasipaddress (nasipaddress)
) ;

 Can you please kindly advise how to do this?

 Which file should be edited?

 Where is the context to put in the script?

 What is the script?

 Thanks!

 Tom
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/20110901/440326d6/attachment.html>

------------------------------

Message: 2
Date: Thu, 1 Sep 2011 16:36:40 +0200
From: Arran Cudbard-Bell <a.cudbardb@freeradius.org>
Subject: Re: How to update a MySql table after successfully WIFI
authentication?
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Message-ID: <C781BD59-4F30-48C4-B6CC-FF4790379DE1@freeradius.org>
Content-Type: text/plain; charset=iso-8859-1

Look in raddb/sql/mysql/dialup.conf

The postauth query is the one you need to edit.

Then uncomment the 'sql' module in 

raddb/sites-available/default

post-auth {

}

-Arran

Arran Cudbard-Bell
a.cudbardb@freeradius.org

RADIUS - Half the complexity of Diameter

------------------------------

Message: 3
Date: Thu, 1 Sep 2011 10:40:18 -0400
From: Jacob Dawson <dawson@vt.edu>
Subject: Re: Example configuration that proxy PEAP MSCHAPv2 to an IAS
server
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Message-ID: <14B9C69C-CB59-4CA7-9F5B-39CD6C81404C@vt.edu>
Content-Type: text/plain; charset=us-ascii

It's largely successful, but as I mentioned in my note to this group from the 29th, I've run into problems with Windows clients having a disagreement with FreeRADIUS about the final stages of the PEAP-MSCHAPv2 conversation, after IAS has authenticated them successfully.

- Jacob

On 31 Aug 2011, at 16:32, Alan DeKok wrote:
...
It really should work... it works for my tests.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------

Message: 4
Date: Thu, 1 Sep 2011 08:57:14 -0700 (PDT)
From: sundoo <sandu_nastas@yahoo.com>
Subject: Using encrypted passwords in users file
To: freeradius-users@lists.freeradius.org
Message-ID: <1314892634927-4758890.post@n5.nabble.com>
Content-Type: text/plain; charset=us-ascii

Hello, I'm new to FreeRadius and to linux. Maybe this question will sound
stupid, but I really need you help.
I have a server running freeradius. 
These are some outputs of the configuration: 

*etc/freeradius/radiusd.conf*
# passwd = /etc/passwd
  shadow = /etc/shadow
# group = /etc/group

*/etc/freeradius/users*
test1 Auth-Type := Crypt-Local, User-Password :=
"$1$NzW2iwkn$ygDcJgb4WhAEqQYfySFkj/"
        Service-Type = Administrative-User,
        Cajun-Service-Type := 3,

*/etc/shadow*
test1:$1$cnEh49V6$Q.68mw.3P5rgmsfhbo/iC1:15217:0:99999:7:::

I would like to change the password for the user test1. But in the users
file I see only the encrypted password. Where is the original password
stored ? 

How do I change it ? 

Thanks a lot for your help.

--
View this message in context: http://freeradius.1045715.n5.nabble.com/Using-encrypted-passwords-in-users-f...
Sent from the FreeRadius - User mailing list archive at Nabble.com.

------------------------------

Message: 5
Date: Thu, 01 Sep 2011 15:45:02 -0400
From: Dom <dversace@tekcorner.ca>
Subject: cisco 3825 authentication error
To: freeradius-users@lists.freeradius.org
Message-ID: <4E5FE0BE.8010800@tekcorner.ca>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed

I am trying to terminate vpdn sessions through our cisco 3825 using 
freeradius.  I am new to this whole process and I was hoping to get some 
assistance with the missing configuration.

Below is the error message I am receiving when trying to authenticate 
via the router.

rad_recv: Access-Request packet from host 64.34.66.5 port 1645, id=19, 
length=135
         Framed-Protocol = PPP
         User-Name = "aewais@domain.com"
         User-Password = "password"
         Calling-Station-Id = "bas203300000455"
         Connect-Info = "1000000000"
         NAS-Port-Type = Virtual
         NAS-Port = 532
         NAS-Port-Id = "Uniq-Sess-ID532"
         Service-Type = Framed-User
         NAS-IP-Address = 64.34.66.5
# Executing section authorize from file 
/etc/freeradius/sites-enabled/default
+- entering group authorize {...}
++[preprocess] returns ok
++[chap] returns noop
++[mschap] returns noop
++[digest] returns noop
[suffix] Looking up realm "domain.com" for User-Name = "aewais@domain.com"
[suffix] No such realm "domain.com"
++[suffix] returns noop
[eap] No EAP-Message, not doing EAP
++[eap] returns noop
[files] users: Matched entry DEFAULT at line 172
++[files] returns ok
++[expiration] returns noop
++[logintime] returns noop
[pap] WARNING! No "known good" password found for the user.  
Authentication may fail because of this.
++[pap] returns noop
ERROR: No authenticate method (Auth-Type) found for the request: 
Rejecting the user
Failed to authenticate the user.
Using Post-Auth-Type Reject
# Executing group from file /etc/freeradius/sites-enabled/default
+- entering group REJECT {...}
[attr_filter.access_reject]     expand: %{User-Name} -> aewais@domain.com
  attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Waking up in 0.9 seconds.
Sending delayed reject for request 0
Sending Access-Reject of id 19 to 64.34.66.5 port 1645
Waking up in 4.9 seconds.
Cleaning up request 0 ID 19 with timestamp +381
Ready to process requests.

------------------------------

Message: 6
Date: Thu, 1 Sep 2011 14:54:29 -0700
From: Paul Bartell <paul.bartell@gmail.com>
Subject: Re: Using encrypted passwords in users file
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Message-ID:
<CAHXqhmh49eNKABTpwmv0Rb1+UX7WPMaN4UB0RQKiiGVSuGoDzg@mail.gmail.com>
Content-Type: text/plain; charset=ISO-8859-1

that is the hashed password. You can change it by generating a hash of
your new password... you would probably use crypt(3) to do that... The
original password was never stored in cleartext form. You could store
a cleartext password if you really wanted to, but that is less than
secure.

On Thu, Sep 1, 2011 at 8:57 AM, sundoo <sandu_nastas@yahoo.com> wrote:
...
Hello, I'm new to FreeRadius and to linux. Maybe this question will sound
stupid, but I really need you help.
I have a server running freeradius.
These are some outputs of the configuration:
*etc/freeradius/radiusd.conf*
# passwd = /etc/passwd
?shadow = /etc/shadow
# group = /etc/group
*/etc/freeradius/users*
test1 Auth-Type := Crypt-Local, User-Password :=
"$1$NzW2iwkn$ygDcJgb4WhAEqQYfySFkj/"
? ? ? ?Service-Type = Administrative-User,
? ? ? ?Cajun-Service-Type := 3,
*/etc/shadow*
test1:$1$cnEh49V6$Q.68mw.3P5rgmsfhbo/iC1:15217:0:99999:7:::
I would like to change the password for the user test1. But in the users
file I see only the encrypted password. Where is the original password
stored ?
How do I change it ?
Thanks a lot for your help.
--
View this message in context: http://freeradius.1045715.n5.nabble.com/Using-encrypted-passwords-in-users-f...
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Random quote of the week/month/whenever i get to updating it: "Quis custodiet
ipsos custodes?": "who shall watch the watchers themselves?" - Juvenal

------------------------------

Message: 7
Date: Thu, 1 Sep 2011 23:11:23 +0100
From: Alan Buxey <A.L.M.Buxey@lboro.ac.uk>
Subject: Re: Pre release of 2.1.12
To: FreeRadius users mailing list
<freeradius-users@lists.freeradius.org>
Message-ID: <20110901221123.GF16795@lboro.ac.uk>
Content-Type: text/plain; charset=us-ascii

Hi,
...
it's now running on our most busy server. Both -X and
background-multithreaded do their usual job. I do not see any problems
so far.
its on one of our production servers and on a couple of other
systems. 

alan

------------------------------

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

End of Freeradius-Users Digest, Vol 77, Issue 5
***********************************************

</:includetail>