hi everybody, i try to use the main_pool module but i meet some problems with it. I'm using radius server in order to authenticate vpn users connected on a cisco router i would like to assign fixed ip for each vpn users but when i use main_pool module in post-auth section, freeradius don't want to start with this error : Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded files Module: Instantiated files (files) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded IPPOOL rlm_ippool: Failed to open file /etc/freeradius/db.ippool: Permission denied radiusd.conf[561]: main_pool: Module instantiation failed. radiusd.conf[611] Unknown module "main_pool". radiusd.conf[609] Failed to parse post-auth section. what is the utility of db.ippool and db.ipindex ? and what is the right syntaxe for this both files ?
Hello List Has anyone had any experience integrating the Canopy BAM 2.1 by Motorola with freeRADIUS? Thanks Duane Cox
Duane Cox wrote:
Hello List
Has anyone had any experience integrating the Canopy BAM 2.1 by Motorola with freeRADIUS? yes -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 Off. 325-691-3301 Cell 325-439-0533 fax 325-695-6841
Pierre LEONARD wrote:
i would like to assign fixed ip for each vpn users but when i use
The pool module does not do this. It assigns IPs based on a configurable hash of NAS attributes. By default, this is NAS IP and port number. Your users will therefore get a random IP from the pool each time they connect. If you want to assign fixed IPs per-user, use the rlm_passwd module to key on username. It would look something like this: modules { passwd user2ip { filename = /etc/freeradius/user2ip format = "*User-Name:=Framed-IP-Address" hashsize = 100 } } authorize { preprocess files user2ip } Then in /etc/freeradius/user2ip: username:1.2.3.4 userfoo:5.6.7.8
main_pool module in post-auth section, freeradius don't want to start with this error :
rlm_ippool: Failed to open file /etc/freeradius/db.ippool: Permission denied
Fix the permissions.
what is the utility of db.ippool and db.ipindex ? and what is the right syntaxe for this both files ?
They are binary/dbm files. They are created and maintained by freeradius. There is no "syntax"
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Phil Mayers a écrit :
Pierre LEONARD wrote:
i would like to assign fixed ip for each vpn users but when i use
The pool module does not do this. It assigns IPs based on a configurable hash of NAS attributes. By default, this is NAS IP and port number. Your users will therefore get a random IP from the pool each time they connect.
If you want to assign fixed IPs per-user, use the rlm_passwd module to key on username. It would look something like this:
modules { passwd user2ip { filename = /etc/freeradius/user2ip format = "*User-Name:=Framed-IP-Address" hashsize = 100 } }
authorize { preprocess files user2ip }
Then in /etc/freeradius/user2ip:
username:1.2.3.4 userfoo:5.6.7.8
main_pool module in post-auth section, freeradius don't want to start with this error :
rlm_ippool: Failed to open file /etc/freeradius/db.ippool: Permission denied
Fix the permissions.
what is the utility of db.ippool and db.ipindex ? and what is the right syntaxe for this both files ?
They are binary/dbm files. They are created and maintained by freeradius. There is no "syntax"
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
your syntax functioned one time and now the server reject my user even if i delete the rlm_passwd...?? i don't understand where is the problem are there some files with index that i must delete so ?
Phil Mayers a écrit :
Pierre LEONARD wrote:
i would like to assign fixed ip for each vpn users but when i use
The pool module does not do this. It assigns IPs based on a configurable hash of NAS attributes. By default, this is NAS IP and port number. Your users will therefore get a random IP from the pool each time they connect.
If you want to assign fixed IPs per-user, use the rlm_passwd module to key on username. It would look something like this:
modules { passwd user2ip { filename = /etc/freeradius/user2ip format = "*User-Name:=Framed-IP-Address" hashsize = 100 } }
authorize { preprocess files user2ip }
Then in /etc/freeradius/user2ip:
username:1.2.3.4 userfoo:5.6.7.8
main_pool module in post-auth section, freeradius don't want to start with this error :
rlm_ippool: Failed to open file /etc/freeradius/db.ippool: Permission denied
Fix the permissions.
what is the utility of db.ippool and db.ipindex ? and what is the right syntaxe for this both files ?
They are binary/dbm files. They are created and maintained by freeradius. There is no "syntax"
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
sorry it was a bug from my part i've a "\t" at the end of my login so the radius don't accept my request
participants (4)
-
Duane Cox -
Lewis Bergman -
Phil Mayers -
Pierre LEONARD