RE: question
Hi Alan - This is a wireless network. If you have a minute could you explain why this is different between `wireless' & `wired' system? Thanks for your time, Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] dius.org] On Behalf Of Alan DeKok Sent: Monday, November 24, 2008 10:36 AM To: FreeRadius users mailing list Subject: Re: question Jackson Jerry-NPC637 wrote: > Hi - > > Summary - I want/need to configure free radius to allow a TLS user on > to the system; without having To authenticate the certs? I am not > sure if this is possible, but wanted to ask if there was a way to > bypass TLS cert authentication. It's not possible for wireless networks. It might be possible for wired networks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
question
Hi - Summary - I want/need to configure free radius to allow a TLS user on to the system; without having To authenticate the certs? I am not sure if this is possible, but wanted to ask if there was a way to bypass TLS cert authentication. I did set the Default-auth-type = Accept; got a `Login Ok' response from free radius; but the user still wasn't able to get network entry? Any options? Thanks, Jerry Login OK: [EMAIL PROTECTED]/] (from client PAYLOAD_SET65537 port 1 cli 001de104702b) Processing the post-auth section of radiusd.conf modcall: entering group post-auth for request 43 radius_xlat: '/usr/local/var/log/radius/radacct/192.168.104.41/reply-detail-20081121' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m %d expands to /usr/local/var/log/radius/radacct/192.168.104.41/reply-detail-20081121 modcall[post-auth]: module "reply_log" returns ok for request 43 modcall: leaving group post-auth (returns ok) for request 43 Sending Access-Accept of id 110 to 192.168.104.41 port 33039 Reply-Message = "Default = Accept" Finished request 43 Going to the next request - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dictionary question
I'm a freeradius newbie so bear with me. Two questions/issues: 1. I've installed version 1.1.6, but have some dictionary files that are/were setup for Freeradius 1.1.3. I've seen from the README/faq that the dictionary files have changed post 1.1.3 & am wondering what I need to do/change to incooperate my 1.1.3 dictionary files to work with Freeradius 1.1.6? It looks like most of the 1.1.3 dict. files are duplicated in 1.1.6, but notice I have a couple (company specific) dictionary files that I need to use with freeradius 1.1.6? 2. Probably not a big deal (just curious), but was wondering what exactly changed with the dictionary files between freeradius 1.1.3 & 1.1.6. I see an error like "values can only be Interger types", but am not sure what this means. Hopefully this is just a quick/short answer. Thanks, Jerry - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius & fedors core 5,6
Ok. I'm fairly new to Linux & thought that doing a `make clean' would accomplish this. Do I have to go in & delete all of the leftover freeradius files after the `make clean'? Or, what is the best way to make sure that the previous install has been completely removed. Thanks, Jerry Jackson Jerry-NPC637 wrote: ... > & still get the double free error starting up radius. > > Is there anything else I need to do besides a (make clean) of the > previous installation? Make sure that the old version has been removed. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius & fedors core 5,6
I appreciate the help from everyone, but ran into the same problem after checking out new source from CVS & make clean ./configure Make Make install & still get the double free error starting up radius. Is there anything else I need to do besides a (make clean) of the previous installation? Maybe waiting for 1.1.6 is the best answer. Thanks again, Jerry $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: anoncvs $ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd Jackson Jerry-NPC637 wrote: > Last question on this I'm sure. If I wanted to get this update for version > > 1.1.3? 1.1.6. See the web site for details when it comes out. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius & fedors core 5,6
Last question on this I'm sure. If I wanted to get this update for version 1.1.3? Jerry From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jackson Jerry-NPC637 Sent: Thursday, April 05, 2007 1:28 PM To: FreeRadius users mailing list Subject: RE: Re : problem with freeradius & fedors core 5,6 Eshun - Thanks for the info. Bear with me, but from the info I've received on the mailing list it looks like; (there is a fix for this, but it needs to be checked out of cvs & built?), correct. I haven't used cvs in a while, but will try an grab this update/fix. Will the instructions for making this work after checking out of cvs be the same - ./configure Make Make install Thanks, From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eshun Benjamin Sent: Thursday, April 05, 2007 10:18 AM To: FreeRadius users mailing list Subject: Re : problem with freeradius & fedors core 5,6 > Module: Library search path is /usr/local/lib > *** glibc detected *** radiusd: double free or corruption (fasttop): > 0x090fcde8 *** if you are installing 1.1.5 then install cvs . $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: anoncvs $ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd == Benjamin K. Eshun - Message d'origine De : Jackson Jerry-NPC637 <[EMAIL PROTECTED]> À : Jackson Jerry-NPC637 <[EMAIL PROTECTED]>; freeradius-users@lists.freeradius.org Envoyé le : Jeudi, 5 Avril 2007, 16h16mn 58s Objet : problem with freeradius & fedors core 5,6 Hi I hope I haven't missed something obvious, but am having trouble getting radius to start after /configure/make/make install running Fedora core 5 or 6. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] Thanks for your help. Jerry J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses <http://fr.rd.yahoo.com/evt=42054/*http:/fr.answers.yahoo.com> . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius & fedors core 5,6
Eshun - Thanks for the info. Bear with me, but from the info I've received on the mailing list it looks like; (there is a fix for this, but it needs to be checked out of cvs & built?), correct. I haven't used cvs in a while, but will try an grab this update/fix. Will the instructions for making this work after checking out of cvs be the same - ./configure Make Make install Thanks, From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eshun Benjamin Sent: Thursday, April 05, 2007 10:18 AM To: FreeRadius users mailing list Subject: Re : problem with freeradius & fedors core 5,6 > Module: Library search path is /usr/local/lib > *** glibc detected *** radiusd: double free or corruption (fasttop): > 0x090fcde8 *** if you are installing 1.1.5 then install cvs . $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: anoncvs $ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd == Benjamin K. Eshun - Message d'origine De : Jackson Jerry-NPC637 <[EMAIL PROTECTED]> À : Jackson Jerry-NPC637 <[EMAIL PROTECTED]>; freeradius-users@lists.freeradius.org Envoyé le : Jeudi, 5 Avril 2007, 16h16mn 58s Objet : problem with freeradius & fedors core 5,6 Hi I hope I haven't missed something obvious, but am having trouble getting radius to start after /configure/make/make install running Fedora core 5 or 6. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] Thanks for your help. Jerry J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses <http://fr.rd.yahoo.com/evt=42054/*http:/fr.answers.yahoo.com> . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
problem with freeradius & fedors core 5,6
Hi I hope I haven't missed something obvious, but am having trouble getting radius to start after /configure/make/make install running Fedora core 5 or 6. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] Thanks for your help. Jerry J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
error on start up
Hello - I hope I haven't missed something obvious, but am having trouble getting radius to start after installing/configure/make...running Fedora core 5. Note - I'm not an Linux expert, so bear with me. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] === Memory map: 00111000-00123000 r-xp fd:00 976235 /usr/lib/libz.so.1.2.3 00123000-00124000 rwxp 00011000 fd:00 976235 /usr/lib/libz.so.1.2.3 00124000-00127000 r-xp fd:00 976261 /usr/lib/libkrb5support.so.0.0 00127000-00128000 rwxp 2000 fd:00 976261 /usr/lib/libkrb5support.so.0.0 0016d000-0017e000 r-xp fd:00 18515580 /lib/libnsl-2.4.so 0017e000-0017f000 r-xp 0001 fd:00 18515580 /lib/libnsl-2.4.so 0017f000-0018 rwxp 00011000 fd:00 18515580 /lib/libnsl-2.4.so 0018-00182000 rwxp 0018 00:00 0 001d3000-001d4000 r-xp 001d3000 00:00 0 [vdso] 002e1000-002f6000 r-xp fd:00 959556 /usr/local/lib/libradius-1.1.5.so 002f6000-002f7000 rwxp 00014000 fd:00 959556 /usr/local/lib/libradius-1.1.5.so 002f7000-002f8000 rwxp 002f7000 00:00 0 00345000-00347000 r-xp fd:00 18515584 /lib/libcom_err.so.2.1 00347000-00348000 rwxp 1000 fd:00 18515584 /lib/libcom_err.so.2.1 0037a000-0037c000 r-xp fd:00 976373 /usr/local/lib/rlm_exec-1.1.5.so 0037c000-0037d000 rwxp 1000 fd:00 976373 /usr/local/lib/rlm_exec-1.1.5.so 003fe000-0040 r-xp fd:00 18515576 /lib/libdl-2.4.so 0040-00401000 r-xp 1000 fd:00 18515576 /lib/libdl-2.4.so 00401000-00402000 rwxp 2000 fd:00 18515576 /lib/libdl-2.4.so 00455000-0046d000 r-xp fd:00 976264 /usr/lib/libgssapi_krb5.so.2.2 0046d000-0046e000 rwxp 00017000 fd:00 976264 /usr/lib/libgssapi_krb5.so.2.2 004d6000-004db000 r-xp fd:00 18515589 /lib/libcrypt-2.4.so 004db000-004dc000 r-xp 4000 fd:00 18515589 /lib/libcrypt-2.4.so 004dc000-004dd000 rwxp 5000 fd:00 18515589 /lib/libcrypt-2.4.so 004dd000-00504000 rwxp 004dd000 00:00 0 0057-00575000 r-xp fd:00 955078 /usr/local/lib/libltdl.so.3.1.4 00575000-00576000 rwxp 4000 fd:00 955078 /usr/local/lib/libltdl.so.3.1.4 005c9000-005e2000 r-xp fd:00 18515573 /lib/ld-2.4.so 005e2000-005e3000 r-xp 00018000 fd:00 18515573 /lib/ld-2.4.so 005e3000-005e4000 rwxp 00019000 fd:00 18515573 /lib/ld-2.4.so 006f9000-0073a000 r-xp fd:00 18515586 /lib/libssl.so.0.9.8a 0073a000-0073e000 rwxp 0004 fd:00 18515586 /lib/libssl.so.0.9.8a 0073e000-0085d000 r-xp fd:00 18515585 /lib/libcrypto.so.0.9.8a 0085d000-0087 rwxp 0011e00