Re: dialup admin and pptp
I think this depends if your NAS supports it or not - Freeradius just sends the request and the NAS deals with it [EMAIL PROTECTED] 24/05/2005 12:36 from dialup_admin web interface i can clear sessions but i cannot disconnect users. when i press disconnect user nothing happens. i use latest cvs dialup admin , freeradius with mysql and pptp. any clue ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: radius crash
radius -x file [EMAIL PROTECTED] 13/05/2005 15:07:52 you mean radiusd -X?Can this full debug information somehow be saved in a file instead of dirrectly on the console?EdgarsSebastian Wild wrote: Edgars wrote: Hello, is there any debug/error file where I could searh for the reason why the RADIUS server is stopping to work after some time interval (radiusd is listed under 'ps axuf' but simply is not responding)? Edgars - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html there is some comandline parameter for radiusd that makes it give you a lot of debug info. Afair it is radiusd -D Debug info will then be wirtten to the console. cheers Sebastian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: redirect
I believe Radius can only return the message - you would need to use another means to display it - web server script etc.. [EMAIL PROTECTED] 04/17 12:37 am Question about re-directing? I have a friend who uses radius who wants pop-up a message to everyone who signs in through his radio server.Kevin-This mail sent through Rural Communications Webmailhttp://www.myrural.comWith Service in St. Joseph County Michigan- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Radiusd Restart - any side affects
If I was to run a /etc/init.d/radiusd restart would it stop accounting or affect users logged in? Or would the only effect be that it wouldn't be reachable for a few seconds? /etc/init.d/radiusd reload appears to not unload Radius but when I use it, it says it's sucessful but has unloaded radius. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: PAP + MD5 problems
On Mon, 07 Feb 2005 18:59:39 -0500, Alan DeKok [EMAIL PROTECTED] wrote: Neil Craig [EMAIL PROTECTED] wrote: WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! That is a pretty definitive message. How does Chilli pass the password? I thought it had to go plain text to Freeradius for PAP?? Bit stuck on this so any help appreciated Have you tried checking the shared secrets? Alan DeKok. The secrets are correct - I think the problem is how chilli passes the password I have entered a MD5 password in MySQL and if I use NTRadtest it works ok. Can someone give me an example of how to create a MD5 password using the shared radius secret to make sure I am getting that right? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
MD5 Password into SQL
Does anyone know how to create the MD5 password using the secret to insert into MySQL? I will be using a PHP frontend to do this and have tried PHP's md5() function but can't get it to create the correct hash using the secret. Any help appreciated :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: MD5 Password into SQL
I have entered a MD5 password into SQL created using PHP MD5 function - it never authenticates to this - do I need to use the secret as the key for the encryption? On Tue, 08 Feb 2005 17:00:56 +0100 (CET), [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Neil Craig schrieb: Does anyone know how to create the MD5 password using the secret to insert into MySQL? Sorry, I'm completely failing to understand what you're trying to do. What relation do you see between MD5 hash of the password and the secret? Is that referring to the radius secret used to crypt communication between server and client? Regards, Stefan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: MD5 Password into SQL
I have resolved this..it..that..whatever On Tue, 08 Feb 2005 12:56:00 -0500, Alan DeKok [EMAIL PROTECTED] wrote: Neil Craig [EMAIL PROTECTED] wrote: I have entered a MD5 password into SQL created using PHP MD5 function - it never authenticates to this - I have no idea what you mean by that. Can you use *descriptive* words, and not it and this? Makign people play guessing games is annoying. do I need to use the secret as the key for the encryption? What secret? You were asked pointedly if you were referring to the radius secret, and you refused to respond. If you're going to ask questions on this list, then: a) ask questions with content b) answer questions you're asked If you fail to follow those two guidelines, people will delete your posts and never respond to them. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
PAP + MD5 problems
Trying to get PAP authentication working with Chillispot and Freeradius. I use the line - printmeta http-equiv='refresh' content=1;url=http://.$_SESSION[uamip].:.$_SESSION['uamport']./logon?username=.$_SESSION['username'].password=$pappassworduserurl=.$_SESSION[userurl].; to send the details to Chilli Entered a MD5 password in the DB using php (md5($_SESSION[password]) - SQL entries look like (I have the pap module set to encryption type md5, this part is called ok) - testuserAuth-Type := PAP-MD5 testuserSimultaneous-Use:= 1 testuserMax-All-Session := 900 testuserUser-Password := bcc720f2981d1a68dbd66ffd67560c37 Output from Freeradius is - rad_check_password: Found Auth-Type PAP-MD5 auth: type PAP-MD5 Processing the authenticate section of radiusd.conf modcall: entering group Auth-Type for request 3 rlm_pap: login attempt by testuser with password øØl??Ô÷ÉÕ]Ä¥äO rlm_pap: Using password bcc720f2981d1a68dbd66ffd67560c37 for user testuser authentication. rlm_pap: Using MD5 encryption. rlm_pap: Passwords don't match modcall[authenticate]: module pap-md5 returns reject for request 3 modcall: group Auth-Type returns reject for request 3 auth: Failed to validate the user. WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! Delaying request 3 for 1 seconds Finished request 3 Going to the next request How does Chilli pass the password? I thought it had to go plain text to Freeradius for PAP?? Bit stuck on this so any help appreciated Cheers - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: badusers?
I think this is for Dialup Admin...not actually used by Freeradius? [EMAIL PROTECTED] 31/01/2005 10:16:04 Hi list, what is the badusers table in the radius db good for? Didn't find any usefull info bout it on the freeradius page or via google :( cheers Sebastian - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: NAS from db - add without restart
Could use cron to HUP server every so often [EMAIL PROTECTED] 21/01/2005 00:05:09 Just floating an idea... Is it worth considering adding a periodic section to radiusd.conf and the radius server? Rather than retrofitting reload this, reload that, functionality into existing functions that are called during the processing of a request, modules could implement a periodic function that could be called at a configurable period, and possibly only when the number of requests that the server is currently handling is below some threshold? This way client lists, proxy lists, etc, could be updated automatically, without adversely affecting the response times of single authentication or accounting requests. I haven't looked at the server code to see how feasible/difficult this would be, and maybe it doesn't make sense at all... Just an idea! If the idea floats, I'd be happy to spend some time looking more closely at the problem, though I couldn't guarantee a delivery date... Regards, Mike Or, if you're willing to edit the source, have it periodically re-read the NAS list form SQL. Reading the NAS data from SQL for every request is a bad idea. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject)
What platform are you running it on? Easiest way is to use rpm or yum/apt etc to install (on Linux). Have a look at http://www.frontios.com/freeradius.html and also search the list archives - the notes are also included in all the conf files which are pretty handy [EMAIL PROTECTED] 21/01/2005 10:59:59 Hi all! I am new in freeradius. I use debian testing. How i install and config freeradius, freeradius-dialupadmin? Please help me guys Sincerely, Tulga.G Lead Programist of Netsoft LLC - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject)
Use apt to install freeradius-sql.. [EMAIL PROTECTED] 21/01/2005 11:27:06 Tnx for your reply! My kernel is 2.6.8-1-686. OS is Debian testing. I install: apt-get install freeradius and apt-get install freeradius-dialupadmin. Installation is successfully finished. So i cannot config freeradius and cannot use dialup-admin. My installed dialupadmin hasn't sql, and more folders. Neil Craig writes: What platform are you running it on? Easiest way is to use rpm or yum/apt etc to install (on Linux). Have a look at http://www.frontios.com/freeradius.html and also search the list archives - the notes are also included in all the conf files which are pretty handy [EMAIL PROTECTED] 21/01/2005 10:59:59 Hi all! I am new in freeradius. I use debian testing. How i install and config freeradius, freeradius-dialupadmin? Please help me guys Sincerely, Tulga.G Lead Programist of Netsoft LLC - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Sincerely, Tulga.G Lead Programist of Netsoft LLC - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
NAS from db - add without restart
Hi Is it possible to add a NAS to SQL and have Freeradius recognise and use it without restarting radius? The only way I can get this to work is by adding in the entry and restarting, otherwise it thinks it's an invalid NAS Thanks in advance Neil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-Program-Wait Problem
Hi I am using a MySQL DB to store the list of NAS's - if I add one to the nas table, is there a way to get Freeradius to read it without having to restart radiusd? Thanks in advance Neil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Is it possible to authenticate RADIUS users just on Username with no password?
Hi Why not have the form break the code into a username and password then send it to the NAS. On Mon, 17 Jan 2005 10:41:40 -, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi All, I am using radius for my personal wireless ISP venture. I got some pre-paid cards used for long distance voice calls and I want to use them for occasional wi-fi users. Though radius needs a username/pwd pair for authentication they have only PIN printed on them. Can I use these PINs as RADIUS username? Each PIN is 16 digits long. In short how can I make password un-necessary for RADIUS authentication? Thanks, Sagar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: AW: MySQL and FreeRadius
As mentioned before - you can install the RPM or get Freeradius source and compile the module from there [EMAIL PROTECTED] 17/01/2005 15:48:43 Hello yes you canUnder Debian you must install the Packet freeradius-mysql for your Linux idon't know it -Ursprüngliche Nachricht- Von: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Im Auftrag von Mike-Olumide, Johnson Gesendet: Montag, 17. Januar 2005 16:10 An: freeradius-users@lists.freeradius.org Betreff: MySQL and FreeRadius Hi All, Freeradius1.0.1 was installed on RH9.0 linux and it ran ok. Afterwards downloaded the standard version 4.0.23 of MySQL and installed. Radisud.conf was also edited to authenticate and authorize via MySQL. Debug output is as below. Is there a way forward from here? Please help! [EMAIL PROTECTED] raddb]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = yes main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = yes proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib Module: Loaded exec exec: wait = yes exec: program = "(null)" exec: input_pairs = "request" exec: output_pairs = "(null)" exec: packet_type = "(null)" rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP pap: encryption_scheme = "crypt" Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP mschap: use_mppe = yes mschap: require_encryption = no mschap: require_strong = no mschap: with_ntdomain_hack = no mschap: passwd = "(null)" mschap: authtype = "MS-CHAP" mschap: ntlm_auth = "(null)" Module: Instantiated mschap (mschap) Module: Loaded eap eap: default_eap_type = "md5" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = "Password: " gtc: auth_type = "PAP" rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = no Module: Instantiated preprocess (preprocess) Module: Loaded realm realm: format = "suffix" realm: delimiter = "@" realm: ignore_default = no realm: ignore_null = no Module: Instantiated realm (suffix) Module: Loaded SQL sql: driver = "rlm_sql_mysql" sql: server = "localhost" sql: port = "" sql: login = "root" sql: password = "rootpass" sql: radius_db = "radius" sql: acct_table = "radacct" sql: acct_table2 = "radacct" sql: authcheck_table = "radcheck" sql: authreply_table = "radreply" sql: groupcheck_table = "radgroupcheck" sql: groupreply_table = "radgroupreply" sql: usergroup_table = "usergroup" sql: nas_table = "nas" sql: dict_table = "dictionary" sql: sqltrace = no sql: sqltracefile = "/usr/local/var/log/radius/sqltrace.sql" sql: readclients = no sql: deletestalesessions = yes sql: num_sql_socks = 5 sql: sql_user_name =
Re: MySQL and FreeRadius
I think you need MySQl development package installed [EMAIL PROTECTED] 17/01/2005 16:52:48 --- Alan DeKok [EMAIL PROTECTED] wrote: "Mike-Olumide, Johnson" [EMAIL PROTECTED] wrote: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed.How can I correct this pls? Please read the FAQ. Alan DeKok.I have read the FAQ and chose to make make installfrom source, but it returned with plenty errors asbelow. The other options with lib path and linker arestrange as i couldn't figure out what to do. Willappreciate any help on this!ibraries have been installed in: /usr/local/libIf you ever happen to want to link against installedlibrariesin a given directory, LIBDIR, you must either uselibtool, andspecify the full pathname of the library, or use the`-LLIBDIR'flag during linking and do at least one of thefollowing: - add LIBDIR to the `LD_LIBRARY_PATH' environmentvariable during execution - add LIBDIR to the `LD_RUN_PATH' environmentvariable during linking - use the `-Wl,--rpath -Wl,LIBDIR' linker flag - have your system administrator add LIBDIR to`/etc/ld.so.conf'See any operating system documentation about sharedlibraries formore information, such as the ld(1) and ld.so(8)manual pages.--gmake[6]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_realm'Making install in rlm_sql...gmake[6]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql'if [ "xrlm_sql" != "x" ]; then \ /root/freeradius-1.0.1/libtool --mode=install/root/freeradius-1.0.1/install-sh -c -c \ rlm_sql.la /usr/local/lib/rlm_sql.la; \ rm -f /usr/local/lib/rlm_sql-1.0.1.la; \ ln -s rlm_sql.la /usr/local/lib/rlm_sql-1.0.1.la;\filibtool: install: `rlm_sql.la' is not a valid libtoolarchiveTry `libtool --help --mode=install' for moreinformation.gmake[7]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql'gmake[8]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql'Making install in drivers...gmake[9]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers'/usr/bin/gmake -w WHAT_TO_MAKE=install commongmake[10]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers'Making install in rlm_sql_iodbc...gmake[11]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers/rlm_sql_iodbc'[ "x" = "x" ] || /root/freeradius-1.0.1/libtool--mode=install /root/freeradius-1.0.1/install-sh -c -c .la /usr/local/lib/.lagmake[11]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers/rlm_sql_iodbc'Making install in rlm_sql_mysql...gmake[11]: Entering directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers/rlm_sql_mysql'[ "xrlm_sql_mysql" = "x" ] ||/root/freeradius-1.0.1/libtool --mode=install /root/freeradius-1.0.1/install-sh -c -c rlm_sql_mysql.la/usr/local/lib/rlm_sql_mysql.lalibtool: install: `rlm_sql_mysql.la' is not a validlibtool archiveTry `libtool --help --mode=install' for moreinformation.gmake[11]: *** [install] Error 1gmake[11]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers/rlm_sql_mysql'gmake[10]: *** [common] Error 1gmake[10]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers'gmake[9]: *** [install] Error 2gmake[9]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql/drivers'gmake[8]: *** [common] Error 1gmake[8]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql'gmake[7]: *** [install-drivers] Error 2gmake[7]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql'gmake[6]: *** [install] Error 2gmake[6]: Leaving directory`/root/freeradius-1.0.1/src/modules/rlm_sql'gmake[5]: *** [common] Error 1gmake[5]: Leaving directory`/root/freeradius-1.0.1/src/modules'gmake[4]: *** [install] Error 2gmake[4]: Leaving directory`/root/freeradius-1.0.1/src/modules'gmake[3]: *** [common] Error 1gmake[3]: Leaving directory`/root/freeradius-1.0.1/src'gmake[2]: *** [install] Error 2gmake[2]: Leaving directory`/root/freeradius-1.0.1/src'gmake[1]: *** [common] Error 1gmake[1]: Leaving directory `/root/freeradius-1.0.1'make: *** [install] Error 2 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Thanks for your help.Mike=Michael-Olumide Johnson B.Sc.(Phy), PG.D(Fin.Mgt), MCP, CCNA08033133324 __ Do you Yahoo!? Yahoo! Mail - 250MB free storage. Do more. Manage less. http://info.mail.yahoo.com/mail_250- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Suggestion
Good idea - I could create a forum on my webspace which may be better - if anyone thinks it's a good idea I will set it up tonight [EMAIL PROTECTED] 01/14/05 8:09 AM I have suggestion. We can create on online community at Yahoo/MSN messengers for fast resolution of problems. Amit Gupta Mobile: 91-9891062552 Yahoo IM: amitguptainn MSN IM : amitguptainn - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius Logs
In radiusd.conf it specifies the log directory :) On Fri, 14 Jan 2005 10:59:30 -0600, Michael A Cooper [EMAIL PROTECTED] wrote: Hey Guys, I have a question wher do I look for my logs for FreeRadius? I am very new to this process and haven't learned where to look for those yet. I have been noticing some people having problems with freeradius and I haven't noticed any but then again didn't know where to look for the logs. Thanks in Advance, Michael A Cooper P.S. Yes I am looking for them now lol :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Primary Radius + Seconadary and NAS
What software are you running on your PC to give the NAS functionality? [EMAIL PROTECTED] 11/01/2005 11:19:21 hello and thank you a lot for your quick reply. i have undersatnd your reply but : is my real NAS can be a PC ? if yes,how to configure a NAS which is a pc ? ( if a nomade machine connect to the network, how it knows where to contact the freeradius, i don't understtand that ..??) can i find some *.conf in order to help me ? how to configure a real nas ? ps: i don't know how to reply to my post. thank you for all ___[ Pub ] Envie de discuter gratuitement avec vos amis ? Téléchargez Yahoo! Messenger http://yahoo.ifrance.com _ Envie de discuter gratuitement avec vos amis ? Téléchargez Yahoo! Messenger http://yahoo.ifrance.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: secondary freeradius server if the first fallback is itpossible ?
The NAS should have a setting to specify Radius 1 and 2 or similar - if the 1st isn't contactable then it will look to the second. [EMAIL PROTECTED] 11/01/2005 09:47:42 hello, i'm french and i don't talk very well english. exuse for my mistakes. I had installed a FreeRadius Server with realms. But, now i would like to install a secondary freeradius if my primary freeradius fallback. For example: if testuser want to auth, and my primary freeradius didn't respond, i would like to redirect automatically the request to over freeradius. i have stop my primary freeradius server service (daemons ??) I have tested : radtest testuser password localhost auth secret and the request is not redirect.How and where i have to specify (if the primary is down , so use the secondary at this adress). Also, i have no Access point or something like that. My NAS is the same pc. Thank you very much for all I hope you will understand my mail. ___[ Pub ] Envie de discuter gratuitement avec vos amis ? Téléchargez Yahoo! Messenger http://yahoo.ifrance.com _ Envie de discuter gratuitement avec vos amis ? Téléchargez Yahoo! Messenger http://yahoo.ifrance.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: dependent libraries
I think you need the MySQL development libraries installed if your compiling [EMAIL PROTECTED] 30/12/2004 13:45:12 I am trying to compile freeradius 0.9.1, I know tha this is not the last version,but i can't change it...I configured with ./configure --disable-shared and then make and make install.But when i call radiusd -X, i got the error:rlm_sql (sql): Could not link driver rlm_sql_mysql: rlm_sql_mysql.a: cannot openshared object file: No such file or directoryrlm_sql (sql): Make sure it (and all its dependent libraries!) are in the searchpath of your system's ld.radiusd.conf[14]: sql: Module instantiation failed.what can I do? Any suggestions?Luiz Gustavo-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: NAS from MYSQL
Thanks for the reply! Freeradius has been restarted - when I run -X it doesn't mention the nas table - reads from clients.conf ok. I have all SQL accounting etc working and changed it to read from nas in SQL.conf - not sure what else I need to do/change to get this to work. Regards Neil [EMAIL PROTECTED] 30/12/2004 04:14:46 Hi Neil,Please restart you Freeradius after you add NAS entry in 'nas' table. Also to see whether radius is reading from 'nas' table, run radius with following command# radiusd -XThis will show from where radius is reading NAS info.I hope you will get your problem resolved now. If not then you are welcome to chat with me.ByeAmit GuptaMobile: 91-9818052171Yahoo IM: amitguptainnMSN IM : amitguptainn-Original Message-From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil CraigSent: Wednesday, December 29, 2004 5:14 AMTo: freeradius-users@lists.freeradius.orgSubject: NAS from MYSQLI'm trying to set Freeradius to read the NAS list from MySQL but nothaving much luck. All SQL is working for user auth etc and line insql.conf is set to yes to have it read the nas list from the nas table.If I have the entry in clients.conf then it works fine but never seemsto read from the db...any ideas?Thanks in advance..- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: dependent libraries
I'm guessing they aren't - install them via rpm or whatever method you choose. Not sure how to check if thedevelopment headersare installed but you need to specify at install time [EMAIL PROTECTED] 30/12/2004 14:22:01 And how can i check if they are already installed? I think you need the MySQL development libraries installed if your compiling [EMAIL PROTECTED] 30/12/2004 13:45:12 I am trying to compile freeradius 0.9.1, I know tha this is not the last version, but i can't change it... I configured with ./configure --disable-shared and then make and make install. But when i call radiusd -X, i got the error: rlm_sql (sql): Could not link driver rlm_sql_mysql: rlm_sql_mysql.a: cannot open shared object file: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. what can I do? Any suggestions? Luiz Gustavo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: dependent libraries
If you use rpm then you could use rpm -qa | grep mysql...but then you could use rpm to install freeradius :/ [EMAIL PROTECTED] 30/12/2004 15:41:16 On Thu, 30 Dec 2004 15:23:50 +, Neil Craig [EMAIL PROTECTED] wrote: I'm guessing they aren't - install them via rpm or whatever method you choose. Not sure how to check if the development headers are installed but you need to specify at install time I don't know what your os is but in mandrake I can pull up installedsoftware (under (I think) systemconfigurepackagesinstalledsoftware) and search there to see what I've got. You might havesomething similar..Then you could just look for sql and see if any of your installedsoftware has the word devel in it. If it does you just need to checkto see if that version is acceptable.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Login and Max-All-Session
Hello all Running Freeradius 1.0.1 MySQL Chillispot 0.98 I have sucessfully setup accounting and authorisation via MySQL - all is working fine until I add an sqlcounter (Max-All-Session) - when this is active Freeradius throws up an error saying that the password supplied contains unprintable characters - when it isn't used login is fine! I'm using Crypt-Password to store the users password. How can adding the counter make a difference?? Thanks in advance - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius =1.0 uses clients.conf for authenticating devicesor 'nas' table in database can serve sa
[EMAIL PROTECTED] 09/12/2004 10:12:55 I have one confusion. freeradius =1.0 uses clients.conf for authenticating devices or 'nas' table in database can serve same purpose. They should both do the same. I'm trying to use NAS table but even with the line in sql.conf uncommented it is still using clients.conf .
Re: freeradius =1.0 uses clients.conf for authenticatingdevicesor 'nas' table in database can serve
[EMAIL PROTECTED] 09/12/2004 12:36:07 On Thu, 9 Dec 2004, Neil Craig wrote: [EMAIL PROTECTED] 09/12/2004 10:12:55 I have one confusion. freeradius =1.0 uses clients.conf for authenticating devices or 'nas' table in database can serve same purpose. They should both do the same. I'm trying to use NAS table but even with the line in sql.conf uncommented it is still using clients.conf .The server will always read the client.conf file. You should have at least one entry there (an entry for localhost would be enough). Thanks...any idea why it doesn't read from SQL?
Clients SQL
Hi I'm having a strange problem with reading the NAS list from SQL - I have uncommented the appropriate line in sql.conf and made the entry in the db - I assumed this was working until I added another to the db - it doesn't recognise the NAS - if I put it in clients.conf then all is fine. Is there anything else that needs done to get Freeradius reading the NAS list from a database? (accounting, authorisation etc all works fine from db) Many Thanks Neil
Re: freeradius =1.0 uses clients.conf forauthenticatingdevicesor 'nas' table in database can serve
Thanks...any idea why it doesn't read from SQL?No idea. Run it in debug mode to see what happens. I have - just complains of unknown NAS...checked IP/secret etc all ok
Groups and individual attributes
Is it possible to use both group and individual user attributes? When a user is part of a group it applies all the attribs for that but also the ones listed in radcheck? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius installation problem
Hi all I'm looking to implement a prepaid card type service - I plan on using Session-Timeout to disconnect the users. How does freeradius keep track of the time elapsed while connected? I am holding all the info in SQL - I guess when a user connects it counts down until 0 then sends the signal to the NAS to disconnect - if the user reconnects it is back to the original value. How can I have a counter that doesn't expire - say the user 'topped up' by 30 days worth on the 9th of the month - it wouldn't expire until 30 days from then (so couldn't use monthly counters?) Regards - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Experience of use
Hi Can anyone who has Freeradius running in a production environment comment on how stable it is with 100's (1000's?) of users? Do you see a marked degradation of service when lots of people are authenticating and accounting being sent? I have a system set up in a test environment which is running stable but only ever has 5 users connecting :) Thanks Neil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Max-Monthly-Session
Hi If I use Max-Monthly-Session - does it reset on the 1st of every month or a month from when applied? Sorry if the answer is really obvious :/ Thanks Neil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Max-Monthly-Session
[EMAIL PROTECTED] 07/12/2004 21:34:20 Neil Craig [EMAIL PROTECTED] wrote: If I use Max-Monthly-Session - does it reset on the 1st of every month or a month from when applied? The first of every month. Alan DeKok. Thank you!!! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
NAS - Authentication by MAC address
Hi all Is it possible for Freeradius to accept a NAS by the MAC address instead of the IP? I'm using sql to authenticate my NAS's and I haven't read of any way of doing this Thanks in advance Neil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: NAS - Authentication by MAC address
[EMAIL PROTECTED] 12/05/04 9:40 AM Neil Craig wrote: Is it possible for Freeradius to accept a NAS by the MAC address instead of the IP? I'm using sql to authenticate my NAS's and I haven't read of any way of doing this No it's not possible. Would be possible if freeradius would be programmed for it. What I don't understand if why you would want this. It would mean you can only use a NAS on the same subnet, which is a bit restrictive, isn't it? Oh well...thanks for the reply. For places that have a non static IP then I thought MAC auth would make sense - so no matter what the IP changed to I could still authenticate them... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: NAS - Authentication by MAC address
[EMAIL PROTECTED] 05/12/2004 13:32:26 Neil Craig wrote: For places that have a non static IP then I thought MAC auth would make sense - so no matter what the IP changed to I could still authenticate them... You can do that by defining all possible IPs as clients. But the downside is that you'll have to open you radius server to accept requests from all those IPs, which isn't a good idea because your server could than easily be disturbed by DOS attacks. You can overcome the problem of dynamic IPs by using tunnels however. How do you go about setting a tunnel up? Just like a VPN connection between NAS and Server? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_sqlcounter - segmentation error
Hi all I'm using Freeradius 1.0.1 on a Fedoura Core 3 box. Everything is working fine apart from the sqlcounter module. radiusd starts up and sits waiting for connections. As soon as an authentication request is sent it dies with an error - segmentation fault in module sqlcounter. I had installed Freeradius with rpm's and built the module from source after - seems to load etc ok. Is there anything I should try that may resolve this or is it a problem because of the seperate module compile and install?? Any help much appreciated. Regards Neil - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject)
[EMAIL PROTECTED] 03/12/2004 17:37:45
I am testing my freeradius using NTRadPing Utility. I am running
radius
in debugger mode and I get this:
rad_recv: Access-Request packet from host 10.192.1.11:3628, id=1,
length=44
Ignoring request from unknown client 10.192.1.11:3628
In clients.conf I have this entry:
client 10.192.1.11/16 {
secret = testing123
shortname = mbasso
}
Have you tried just having the single IP in clients.conf?
client 10.192.1.11 {
secret = testing123
shortname = mbasso
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
