windows XP computer WPA, TKIP, PEAP, EAP-MSCHAP v2 has "No User-Password or CHAP-Password attribute in the request"
My freeradius client is a windows XP SP2 computer running 802.11 WPA, TKIP, PEAP, EAP-MSCHAP v2 and trying to connect to the linux Fedora Core 2 wireless server. I run the freeradius server in debugging mode # radiusd -sfxxyz -l stdout This is the output. How to fix this problem? rad_recv: Access-Request packet from host 127.0.0.1:52001, id=38, length=134 Framed-MTU = 1380 NAS-IP-Address = 0.0.0.0 NAS-Identifier = "wifictrl" User-Name = "test" NAS-Port-Id = ":2:2" Service-Type = Framed-User NAS-Port-Type = Wireless-802.11 Called-Station-Id = "00-f0-00-06-67-a8" Calling-Station-Id = "00-20-a6-57-7a-e9" EAP-Message = 0x020100090174657374 Message-Authenticator = 0x737afc3b6c1fb17ad13ee348ca5fbf4b Processing the authorize section of radiusd.conf modcall: entering group authorize for request 5 modcall[authorize]: module "preprocess" returns ok for request 5 modcall[authorize]: module "chap" returns noop for request 5 modcall[authorize]: module "mschap" returns noop for request 5 rlm_realm: No '@' in User-Name = "test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 5 rlm_eap: EAP packet type response id 1 length 9 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 5 users: Matched test at 90 radius_xlat: 'Hello, test' modcall[authorize]: module "files" returns ok for request 5 modcall: group authorize returns updated for request 5 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 5 for 1 seconds Finished request 5 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 38 to 127.0.0.1:52001 Reply-Message = "Hello, test" Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 5 ID 38 with timestamp 43d1500d Nothing to do. Sleeping until we see a request. # radiusd -v radiusd: FreeRADIUS Version 1.0.1, for host , built on Apr 15 2005 at 11:57:29 # uname -a Linux wifictrl 2.6.5-1.358 #1 Sat May 8 09:04:50 EDT 2004 i686 i686 i386 GNU/Linux __________________________________________________________ Find your next car at http://autos.yahoo.ca
Hi,
My freeradius client is a windows XP SP2 computer running 802.11 WPA, TKIP, PEAP, EAP-MSCHAP v2 and trying to connect to the linux Fedora Core 2 wireless server.
I run the freeradius server in debugging mode # radiusd -sfxxyz -l stdout
why not radiusd -X ?
rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user.
do you have this user listed in the Users file? how exactly are you trying to authenticate them? alan
Now I used # radiusd -X I configure /etc/raddb/users as follows: test Auth-Type := Local, User-Password == "testing" Reply-Message = "Hello, %u" I authenticate at my windows xp wireless computer by entering this data as follows: User name: test Password: testing Logon domain: This is the radius debug output: rad_recv: Access-Request packet from host 127.0.0.1:52001, id=40, length=134 Framed-MTU = 1380 NAS-IP-Address = 0.0.0.0 NAS-Identifier = "wifictrl" User-Name = "test" NAS-Port-Id = ":2:2" Service-Type = Framed-User NAS-Port-Type = Wireless-802.11 Called-Station-Id = "00-f0-00-06-67-a8" Calling-Station-Id = "00-20-a6-57-7a-e9" EAP-Message = 0x020100090174657374 Message-Authenticator = 0x3157a2bead5a4a286220ffe87a7b7842 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 9 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched test at 90 radius_xlat: 'Hello, test' modcall[authorize]: module "files" returns ok for request 0 modcall: group authorize returns updated for request 0 rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 40 to 127.0.0.1:52001 Reply-Message = "Hello, test" Waking up in 4 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 40 with timestamp 43d4f7e2 Nothing to do. Sleeping until we see a request. --- A.L.M.Buxey@lboro.ac.uk wrote:
Hi,
My freeradius client is a windows XP SP2 computer running 802.11 WPA, TKIP, PEAP, EAP-MSCHAP v2 and trying to connect to the linux Fedora Core 2 wireless server.
I run the freeradius server in debugging mode # radiusd -sfxxyz -l stdout
why not radiusd -X ?
rad_check_password: Found Auth-Type Local auth: type Local auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user.
do you have this user listed in the Users file? how exactly are you trying to authenticate them?
alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________________ Find your next car at http://autos.yahoo.ca
PoWah Wong <wong_powah@yahoo.ca> wrote:
I configure /etc/raddb/users as follows: test Auth-Type := Local, User-Password == "testing"
That should be test Auth-Type = Local, User-Password := "testing" See the "man" page for the "users" file, and other posts to this list. Alan DeKok.
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is: Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0 I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up. Here's what I did: 1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following # Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3 I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html 4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following: <Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true <Stop admin.conf>
I've found that my problem might be with Apache 2 and PHP 5 - does anyone else have dialup-admin running properly on Apache 2 and PHP 5? I'd hate to think I'd have to downgrade. Thanks, Scott ----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, January 23, 2006 1:03 PM Subject: dialup-admin problem
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is:
Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0
I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up.
Here's what I did:
1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following
# Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3
I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html
4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following:
<Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true
<Stop admin.conf>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeBSD 6.0 Apache 2.2.0 PHP 5.1.1 FreeRadius 1.0.5 Dialup_admin works fine for me. It does appear to be a PHP problem. Look at your apache logs and see what errors you are getting if any. You might want to check the "error_reporting" setting in your php.ini, make sure it is set to E_ALL so you can see what errors are occuring. If this is not a production box you might even want to change "display_errors" to On. This should give you a couple more "hints" on where to go next. Rich Scott Miller wrote:
I've found that my problem might be with Apache 2 and PHP 5 - does anyone else have dialup-admin running properly on Apache 2 and PHP 5? I'd hate to think I'd have to downgrade.
Thanks, Scott
----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, January 23, 2006 1:03 PM Subject: dialup-admin problem
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is:
Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0
I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up.
Here's what I did:
1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following
# Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3
I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html
4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following:
<Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true
<Stop admin.conf>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Richard Marriner II Maingear.Net Sr. Network Consultant I.T. Consulting richard@maingear.net www.maingear.net
Thanks for all the help. I verified that "error_reporting" is set to E_ALL, and have changed "display_errors" to On. Now, when I go to dialup-admin I get the first page fine, but when I click a link, here's the errors it displays: (above link window) Notice: Undefined variable: HTTP_SERVER_VARS in /usr/local/dialup-admin/html/buttons/default/buttons.html.php3 on line 22 ----------------- (inside link window - above links) Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in /usr/local/dialup-admin/conf/config.php3 on line 8 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/conf/config.php3 on line 61 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 66 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 69 Notice: Use of undefined constant general_username_mappings_file - assumed 'general_username_mappings_file' in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined index: general_username_mappings_file in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/html/buttons/default/buttons.html.php3 on line 91 ----------------- (Right side when I click on "Find User" (all others have alot more "notice" statements:) Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in /usr/local/dialup-admin/conf/config.php3 on line 8 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/conf/config.php3 on line 61 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 66 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 69 Notice: Use of undefined constant general_username_mappings_file - assumed 'general_username_mappings_file' in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined index: general_username_mappings_file in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined variable: search_IN in /usr/local/dialup-admin/htdocs/find.php3 on line 3 Notice: Undefined variable: radius_attr in /usr/local/dialup-admin/htdocs/find.php3 on line 4 Notice: Undefined variable: max_results in /usr/local/dialup-admin/htdocs/find.php3 on line 5 I was getting permissions errors, but then changed group ownership to "apache" and set the entire directory to "755" Any help with these errors would be appriciated. Thanks, Scott Miller ----- Original Message ----- From: "Rich Marriner" <richard@maingear.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, January 24, 2006 10:05 AM Subject: Re: dialup-admin problem
FreeBSD 6.0 Apache 2.2.0 PHP 5.1.1 FreeRadius 1.0.5
Dialup_admin works fine for me. It does appear to be a PHP problem. Look at your apache logs and see what errors you are getting if any. You might want to check the "error_reporting" setting in your php.ini, make sure it is set to E_ALL so you can see what errors are occuring. If this is not a production box you might even want to change "display_errors" to On.
This should give you a couple more "hints" on where to go next.
Rich
Scott Miller wrote:
I've found that my problem might be with Apache 2 and PHP 5 - does anyone else have dialup-admin running properly on Apache 2 and PHP 5? I'd hate to think I'd have to downgrade.
Thanks, Scott
----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, January 23, 2006 1:03 PM Subject: dialup-admin problem
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is:
Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0
I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up.
Here's what I did:
1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following
# Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3
I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html
4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following:
<Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true
<Stop admin.conf>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Richard Marriner II Maingear.Net Sr. Network Consultant I.T. Consulting richard@maingear.net www.maingear.net
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK - I've figured out my own problem (I think) but not sure exactly what I did - BUT it seems to be working fine. However, how do I get rid of the MySQL Debug output such as: ----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, February 06, 2006 10:45 AM Subject: Re: dialup-admin problem
Thanks for all the help. I verified that "error_reporting" is set to E_ALL, and have changed "display_errors" to On.
Now, when I go to dialup-admin I get the first page fine, but when I click a link, here's the errors it displays:
(above link window) Notice: Undefined variable: HTTP_SERVER_VARS in /usr/local/dialup-admin/html/buttons/default/buttons.html.php3 on line 22 ----------------- (inside link window - above links) Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in /usr/local/dialup-admin/conf/config.php3 on line 8 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/conf/config.php3 on line 61 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 66 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 69 Notice: Use of undefined constant general_username_mappings_file - assumed 'general_username_mappings_file' in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined index: general_username_mappings_file in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/html/buttons/default/buttons.html.php3 on line 91 ----------------- (Right side when I click on "Find User" (all others have alot more "notice" statements:) Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in /usr/local/dialup-admin/conf/config.php3 on line 8 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/conf/config.php3 on line 61 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 66 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 69 Notice: Use of undefined constant general_username_mappings_file - assumed 'general_username_mappings_file' in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined index: general_username_mappings_file in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined variable: search_IN in /usr/local/dialup-admin/htdocs/find.php3 on line 3 Notice: Undefined variable: radius_attr in /usr/local/dialup-admin/htdocs/find.php3 on line 4 Notice: Undefined variable: max_results in /usr/local/dialup-admin/htdocs/find.php3 on line 5
I was getting permissions errors, but then changed group ownership to "apache" and set the entire directory to "755"
Any help with these errors would be appriciated.
Thanks, Scott Miller
----- Original Message ----- From: "Rich Marriner" <richard@maingear.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, January 24, 2006 10:05 AM Subject: Re: dialup-admin problem
FreeBSD 6.0 Apache 2.2.0 PHP 5.1.1 FreeRadius 1.0.5
Dialup_admin works fine for me. It does appear to be a PHP problem. Look at your apache logs and see what errors you are getting if any. You might want to check the "error_reporting" setting in your php.ini, make sure it is set to E_ALL so you can see what errors are occuring. If this is not a production box you might even want to change "display_errors" to On.
This should give you a couple more "hints" on where to go next.
Rich
Scott Miller wrote:
I've found that my problem might be with Apache 2 and PHP 5 - does anyone else have dialup-admin running properly on Apache 2 and PHP 5? I'd hate to think I'd have to downgrade.
Thanks, Scott
----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, January 23, 2006 1:03 PM Subject: dialup-admin problem
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is:
Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0
I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up.
Here's what I did:
1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following
# Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3
I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html
4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following:
<Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true
<Stop admin.conf>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Richard Marriner II Maingear.Net Sr. Network Consultant I.T. Consulting richard@maingear.net www.maingear.net
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
OK - I think I figured out my problem, although not sure exactly which correction I did fixed it. However, I am still getting the MySQL Debug output and was wondering how to get rid of it: DEBUG(SQL,MYSQL DRIVER): Query: SELECT groupname FROM usergroup WHERE username = 'srmiller'; DEBUG(SQL,MYSQL DRIVER): Query Result: Thanks, Scott Miller ----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, February 06, 2006 10:45 AM Subject: Re: dialup-admin problem
Thanks for all the help. I verified that "error_reporting" is set to E_ALL, and have changed "display_errors" to On.
Now, when I go to dialup-admin I get the first page fine, but when I click a link, here's the errors it displays:
(above link window) Notice: Undefined variable: HTTP_SERVER_VARS in /usr/local/dialup-admin/html/buttons/default/buttons.html.php3 on line 22 ----------------- (inside link window - above links) Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in /usr/local/dialup-admin/conf/config.php3 on line 8 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/conf/config.php3 on line 61 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 66 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 69 Notice: Use of undefined constant general_username_mappings_file - assumed 'general_username_mappings_file' in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined index: general_username_mappings_file in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/html/buttons/default/buttons.html.php3 on line 91 ----------------- (Right side when I click on "Find User" (all others have alot more "notice" statements:) Notice: import_request_variables() [function.import-request-variables]: No prefix specified - possible security hazard in /usr/local/dialup-admin/conf/config.php3 on line 8 Notice: Use of undefined constant general_use_session - assumed 'general_use_session' in /usr/local/dialup-admin/conf/config.php3 on line 61 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 66 Notice: Undefined variable: login in /usr/local/dialup-admin/conf/config.php3 on line 69 Notice: Use of undefined constant general_username_mappings_file - assumed 'general_username_mappings_file' in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined index: general_username_mappings_file in /usr/local/dialup-admin/conf/config.php3 on line 76 Notice: Undefined variable: search_IN in /usr/local/dialup-admin/htdocs/find.php3 on line 3 Notice: Undefined variable: radius_attr in /usr/local/dialup-admin/htdocs/find.php3 on line 4 Notice: Undefined variable: max_results in /usr/local/dialup-admin/htdocs/find.php3 on line 5
I was getting permissions errors, but then changed group ownership to "apache" and set the entire directory to "755"
Any help with these errors would be appriciated.
Thanks, Scott Miller
----- Original Message ----- From: "Rich Marriner" <richard@maingear.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Tuesday, January 24, 2006 10:05 AM Subject: Re: dialup-admin problem
FreeBSD 6.0 Apache 2.2.0 PHP 5.1.1 FreeRadius 1.0.5
Dialup_admin works fine for me. It does appear to be a PHP problem. Look at your apache logs and see what errors you are getting if any. You might want to check the "error_reporting" setting in your php.ini, make sure it is set to E_ALL so you can see what errors are occuring. If this is not a production box you might even want to change "display_errors" to On.
This should give you a couple more "hints" on where to go next.
Rich
Scott Miller wrote:
I've found that my problem might be with Apache 2 and PHP 5 - does anyone else have dialup-admin running properly on Apache 2 and PHP 5? I'd hate to think I'd have to downgrade.
Thanks, Scott
----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, January 23, 2006 1:03 PM Subject: dialup-admin problem
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is:
Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0
I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up.
Here's what I did:
1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following
# Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3
I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html
4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following:
<Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true
<Stop admin.conf>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Richard Marriner II Maingear.Net Sr. Network Consultant I.T. Consulting richard@maingear.net www.maingear.net
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
OK - I think I figured out my problem, although not sure exactly which correction I did fixed it. However, I am still getting the MySQL Debug output and was wondering how to get rid of it:
DEBUG(SQL,MYSQL DRIVER): Query: SELECT groupname FROM usergroup WHERE username = 'srmiller'; DEBUG(SQL,MYSQL DRIVER): Query Result:
um, debugging is enabled by default. it helps fix things for the new installers. to 'shut it up' you simply edit the admin.conf in the conf/ directory....look for the obvious line: sql_debug: true and comment it out alan
Hi Guys, I have an older version of dialupadmin and I upgraded to the latest on sourceforge and now I don't see the clear_opensessions.php3 file and there is no way to do it in the gui.. Any thoughts? Dave
Currenty i am working on new freeradius Admin interface i will soon launch this package in mailling list David Antognini <dave@antognini.com> wrote: Hi Guys, I have an older version of dialupadmin and I upgraded to the latest on sourceforge and now I don't see the clear_opensessions.php3 file and there is no way to do it in the gui.. Any thoughts? Dave - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html $ cat ~/satish/url.txt http://www.linuxbug.org _____________________________________________________________________________________________________ --------------------------------- Unlimited freedom, unlimited storage. Get it now
Mine too is FreeBSD 6.0 with Apache2.2.0 and php5.1 Dialup admin works fine only one dialup menu option i.e "Statistics" when I click on it, gives the error as follows; ============================================ Warning: mktime() expects parameter 1 to be long, string given in /usr/home/httpd/baayu.com/dialbaayu/lib/functions.php3 on line 83 Warning: mktime() expects parameter 1 to be long, string given in /usr/home/httpd/baayu.com/dialbaayu/lib/functions.php3 on line 83 ================================================================== On 1/24/2006, "Scott Miller" <srmiller@interbel.net> wrote:
I've found that my problem might be with Apache 2 and PHP 5 - does anyone else have dialup-admin running properly on Apache 2 and PHP 5? I'd hate to think I'd have to downgrade.
Thanks, Scott
----- Original Message ----- From: "Scott Miller" <srmiller@interbel.net> To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Sent: Monday, January 23, 2006 1:03 PM Subject: dialup-admin problem
I've installed freeradius 1.1.0, went through all the tests and everything (the tests) seems to be working fine there. My platform is:
Fedora Core 4 Sendmail 8.13.4 Apache 2.0.54 MySQL 4.1.16 PHP 5.0.5-2.1 Freeradius 1.1.0
I've also followed the instructions for the dialup-admin, and have run into a problem. When I view servername.com/dialup-admin, I can see the first page just fine, but when I click on any link on the left, the right side just turns white - nothing displays. The "home" link brings me back to the "A web based administration interface for the freeradius radius server " page, but no other links seem to bring anyting up.
Here's what I did:
1. Copied the directory dialup-admin to the /user/local/ directory 2. In /var/www/html I created a simlink /user/local/dialup-admin/htdocs named dialup-admin ln -s /usr/local/dialup-admin/htdocs /var/www/html/dialup-admin 3. Edited httpd.conf to the following
# Scott Added for freeradius dialup-admin #LoadModule php4_module libexec/libphp4.so #AddModule mod_php4.c AddType application/x-httpd-php .php AddType application/x-httpd-php .php3
I had to comment out the fist two lines, because httpd kept failing and producing the error: Apache 1.3 configuration directives found please read /usr/share/doc/httpd-2.0.54/migration.html
4. I did not do: [1.3.2.2] Creating a more secure web interface. - wanting to make it work first, then will start securing it. 5. Created the 4 additional MySQL Databases according to the instructions and all look fine. 6. I then went through the general configuraiton options. I commented out all LDAP options, and fixed the following:
<Start admin.conf> general_prefered_lang: en general_prefered_lang_name: English general_charset: iso-8859-1 #general_decode_normal_attributes: yes general_base_dir: /usr/local/dialup-admin general_radiusd_base_dir: /usr/local/radiusd general_use_session: no general_most_recent_fl: 30 #general_strip_realms : yes general_realm_delimiter: @ general_realm_format: suffix general_show_user_password: yes general_raddb_dir: %{general_radiusd_base_dir}/etc/raddb general_ldap_attrmap: %{general_raddb_dir}/ldap.attrmap #general_clients_conf: %{general_raddb_dir}/clients.conf general_clients_conf: /usr/local/etc/raddb/clients.conf general_sql_attrmap: %{general_base_dir}/conf/sql.attrmap general_accounting_attrs_file: %{general_base_dir}/conf/accounting.attrs general_extra_ldap_attrmap: %{general_base_dir}/conf/extra.ldap-attrmap general_lib_type: sql general_user_edit_attrs_file: %{general_base_dir}/conf/user_edit.attrs general_sql_attrs_file: %{general_base_dir}/conf/sql.attrs general_default_file: %{general_base_dir}/conf/default.vals #general_ld_library_path: /usr/local/snmpd/lib general_finger_type: snmp general_nas_type: cisco general_snmpfinger_bin: %{general_base_dir}/bin/snmpfinger general_radclient_bin: %{general_radiusd_base_dir}/bin/radclient general_test_account_login: test general_test_account_password: testpass general_radius_server: localhost general_radius_server_port: 1812 general_radius_server_auth_proto: pap general_radius_server_secret: commented-out general_auth_request_file: %{general_base_dir}/conf/auth.request general_encryption_method: crypt general_accounting_info_order: desc general_stats_use_totacct: no general_restrict_badusers_access: no INCLUDE: %{general_base_dir}/conf/naslist.conf INCLUDE: %{general_base_dir}/conf/captions.conf #ldap_server: ldap.%{general_domain} #ldap_write_server: master.%{general_domain} #ldap_base: dc=company,dc=com #ldap_binddn: cn=Directory Manager #ldap_bindpw: XXXXXXX #ldap_default_new_entry_suffix: ou=dialup,ou=guests,%{ldap_base} #ldap_default_dn: uid=default-dialup,%{ldap_base} #ldap_regular_profile_attr: dialupregularprofile #ldap_use_http_credentials: yes #ldap_directory_manager: cn=Directory Manager #ldap_map_to_directory_manager: admin #ldap_debug: true # Allow for defining the ldap filter used when searching for a user # Variables supported: # %u: username # %U: username provided though http authentication # %mu: mappings for userdb # %ma: mappings for accounting #ldap_filter: (uid=%u) #ldap_userdn: uid=%u,%{ldap_base} sql_type: mysql sql_server: localhost sql_port: 3306 sql_username: xxxxxxx sql_password: xxxxxxx sql_database: radius sql_accounting_table: radacct sql_badusers_table: badusers sql_check_table: radcheck sql_reply_table: radreply sql_user_info_table: userinfo sql_groupcheck_table: radgroupcheck sql_groupreply_table: radgroupreply sql_usergroup_table: usergroup sql_total_accounting_table: totacct sql_nas_table: nas sql_command: /usr/local/bin/mysql general_snmp_type: net general_snmpwalk_command: /usr/local/bin/snmpwalk general_snmpget_command: /usr/local/bin/snmpget sql_debug: true #sql_use_http_credentials: yes #sql_accounting_extra_query: %ma sql_use_user_info_table: true sql_use_operators: true #sql_default_user_profile: DEFAULT sql_password_attribute: User-Password sql_date_format: Y-m-d sql_full_date_format: Y-m-d H:i:s sql_row_limit: 40 sql_connect_timeout: 3 #sql_extra_servers: sql2.company.com sql3.company.com counter_default_daily: 14400 counter_default_weekly: 72000 counter_default_monthly: none #counter_monthly_calculate_usage: true
<Stop admin.conf>
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
"users" file is changed to: test Auth-Type = Local, User-Password := "testing" However, still has problem. Debug output is: rad_recv: Access-Request packet from host 127.0.0.1:52001, id=42, length=149 Framed-MTU = 1380 NAS-IP-Address = 0.0.0.0 NAS-Identifier = "wifictrl" User-Name = "test" NAS-Port-Id = ":2:2" Service-Type = Framed-User NAS-Port-Type = Wireless-802.11 Called-Station-Id = "00-f0-00-06-67-c0" Calling-Station-Id = "00-20-a6-57-7a-d1" State = 0x41653c6968055aecfa354aa7a6ed95a0 EAP-Message = 0x020200060319 Message-Authenticator = 0x6b63991cc7c8d008d37a418927f261a4 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 2 modcall[authorize]: module "preprocess" returns ok for request 2 modcall[authorize]: module "chap" returns noop for request 2 modcall[authorize]: module "mschap" returns noop for request 2 rlm_realm: No '@' in User-Name = "test", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 2 rlm_eap: EAP packet type response id 2 length 6 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 2 users: Matched test at 90 radius_xlat: 'Hello, test' modcall[authorize]: module "files" returns ok for request 2 modcall: group authorize returns updated for request 2 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 2 rlm_eap: Request found, released from the list rlm_eap: EAP NAK rlm_eap: EAP-NAK asked for EAP-Type/peap rlm_eap: No such EAP type peap rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 2 modcall: group authenticate returns invalid for request 2 auth: Failed to validate the user. Delaying request 2 for 1 seconds Finished request 2 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 1 ID 41 with timestamp 43d55f0d Sending Access-Reject of id 42 to 127.0.0.1:52001 EAP-Message = 0x04020004 Message-Authenticator = 0x00000000000000000000000000000000 Reply-Message = "Hello, test" Cleaning up request 2 ID 42 with timestamp 43d55f0d Nothing to do. Sleeping until we see a request. --- Alan DeKok <aland@ox.org> wrote:
PoWah Wong <wong_powah@yahoo.ca> wrote:
I configure /etc/raddb/users as follows: test Auth-Type := Local, User-Password == "testing"
That should be
test Auth-Type = Local, User-Password := "testing"
See the "man" page for the "users" file, and other posts to this list.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
__________________________________________________________ Find your next car at http://autos.yahoo.ca
participants (8)
-
A.L.M.Buxey＠lboro.ac.uk -
Alan DeKok -
bishal＠baayu.com.np -
David Antognini -
PoWah Wong -
Rich Marriner -
satish patel -
Scott Miller