Currently using freeradius-1.1.2 Solaris openldap-2.3.19, but not live so upgrade is fine. I have successfully setup FreeRadius to use LDAP for the user/pass, and profiles. However on the legacy Radius servers, the administration that was most frequent is adding/removing/modifying the list of NAS IPs that is allowed to talk to us, and for which services. Plus this need to be synchronised with all Radius servers. Is it possible to also store the NAS IPs in LDAP, so changes can be done centrally? At the moment they are listed clients.conf. Lund -- Jorgen Lundman | <lundman@lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)
Would those be appreciated, or just end up in-house? Lund Alan DeKok wrote:
Jorgen Lundman wrote:
Is it possible to also store the NAS IPs in LDAP, so changes can be done centrally?
Not without source code patches.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Jorgen Lundman | <lundman@lundman.net> Unix Administrator | +81 (0)3 -5456-2687 ext 1017 (work) Shibuya-ku, Tokyo | +81 (0)90-5578-8500 (cell) Japan | +81 (0)3 -3375-1767 (home)
On Wed 26 Sep 2007, Alan DeKok wrote:
Jorgen Lundman wrote:
Would those be appreciated, or just end up in-house?
If the patch is against CVS head, it's likely to be accepted.
Yep. I think this would be a usefull option and would be happy to help with patch testing if you do the writing ;-) Cheers -- Peter Nixon http://peternixon.net/
I am attempting to install freeradius 1.1.7 on an XServe with integration with Novell edirectory. I ran the ./configure with the --with-edir option, everything else was standard, out of the box. The install appeared to go fine, but when I started up the server, I received the following error: radiusd.conf[1600] Failed to link to module 'rlm_exec': dlopen(/usr/ local/lib/rlm_exec-1.1.7.so, 9): Symbol not found: _debug_flag Referenced from: /usr/local/lib/rlm_exec-1.1.7.so Expected in: flat namespace I assume this error is telling me that there is a problem with the name of a flag in the rlm_exec file, but I don't know how to fix it. Then again, I could be wrong. If anyone can offer some help, I'd really appreciate it. Brad Lachel Community High School District #155 1 S Virginia Rd Crystal Lake, IL 60014 815-455-8500 x 28 stuff@d155.org ----------------------------- All e-mail to and from this address is subject to the Acceptable Use Policies of Community High School District #155. All e-mail may be monitored and/or disclosed to third parties. Any views or opinions presented in an e-mail are solely those of the author and may not represent those of Community High School District #155. Community High School District #155 http://www.d155.org
Brad Lachel wrote:
radiusd.conf[1600] Failed to link to module 'rlm_exec': dlopen(/usr/local/lib/rlm_exec-1.1.7.so, 9): Symbol not found: _debug_flag Referenced from: /usr/local/lib/rlm_exec-1.1.7.so Expected in: flat namespace
Re-configure as: $ ./configure --enable-developer then re-build and re-install. It appears that the libraries are failing to find symbols in the main radiusd program, because the symbols have been stripped. Alan DeKok.
On Wed 26 Sep 2007, Brad Lachel wrote:
I am attempting to install freeradius 1.1.7 on an XServe with integration with Novell edirectory. I ran the ./configure with the --with-edir option, everything else was standard, out of the box. The install appeared to go fine, but when I started up the server, I received the following error:
radiusd.conf[1600] Failed to link to module 'rlm_exec': dlopen(/usr/ local/lib/rlm_exec-1.1.7.so, 9): Symbol not found: _debug_flag Referenced from: /usr/local/lib/rlm_exec-1.1.7.so Expected in: flat namespace
I assume this error is telling me that there is a problem with the name of a flag in the rlm_exec file, but I don't know how to fix it. Then again, I could be wrong.
If anyone can offer some help, I'd really appreciate it.
Try using my SUSE packages at: http://download.opensuse.org/repositories/network:/aaa -- Peter Nixon http://peternixon.net/
"Alan" == Alan DeKok <aland@deployingradius.com> writes:
Alan> Jorgen Lundman wrote: >> Is it possible to also store the NAS IPs in LDAP, so changes >> can be done centrally? Alan> Not without source code patches. Isn't this 'radiusClientIPAddress' (RADIUS attribute 'Client-IP-Address')? 'Client-IP-Address. Matches the IP address of the client in the request.'
Turbo Fredriksson wrote:
Isn't this 'radiusClientIPAddress' (RADIUS attribute 'Client-IP-Address')?
'Client-IP-Address. Matches the IP address of the client in the request.'
No. That *matches* the client address. It's a comparison for policies. It does NOT define a client. Real client definitions need more information, like a shared secret. Alan DeKok.
participants (5)
-
Alan DeKok -
Brad Lachel -
Jorgen Lundman -
Peter Nixon -
Turbo Fredriksson