Freeradius-Users digest, Vol 1 #3436 - 11 msgs

Eki Y. Baskoro Mon, 05 Jul 2004 03:21:15 -0700

Send Freeradius-Users mailing list submissions to
[EMAIL PROTECTED]

To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
[EMAIL PROTECTED]

You can reach the person managing the list at
[EMAIL PROTECTED]

When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

 1. Re: ./configure again (Victor A Belous)
 2. OT: L2TP from Lucent/Ascend Max? (Garry Glendown)
 3. Failing debuild (marcolfa)
 4. Re: Re: Sniff radius (Gary McKinney)
 5. Re: Ingoring unknown Client error. (Gary McKinney)
 6. Re: Sniff radius (Thomas MARCHESSEAU)
 7. Re: Sniff radius (Thomas MARCHESSEAU)
 8. Re: FreeRadius/LDAP conf : little problem (Grant, Alastair Ian)
 9. LDAP Bind authentication and Other Attributes (Grant, Alastair Ian)
10. Re: Matching Acct-Start and Acct-Stop (Alan DeKok)
11. problems with radius accounting when using mysql (Maqbool Hashim)

--__--__--

Message: 1
Date: Wed, 30 Jun 2004 11:11:07 +0400
From: Victor A Belous <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: ./configure again
Reply-To: [EMAIL PROTECTED]

*This message was transferred with a trial version of CommuniGate(tm) Pro*
Alan DeKok сообщил:

>Victor A Belous <[EMAIL PROTECTED]> wrote:
>
>
>>When I run configure with the command line
>>./configure --with-openssl-includes=/usr/local/ssl/include
>>--with-openssl-libraries=/usr/local/ssl
>>
>>
>
> Are you sure it isn't: ... --with-openssl-libraries=/usr/local/ssl/lib ?
>

I had tried

--with-openssl-libraries=/usr/local/ssl/lib
--with-openssl-libraries=/usr/local/ssl
--with-openssl-libraries=/usr/local
--with-openssl-libraries=/usr
--with-openssl-libraries
and --with-openssl-libraries=/usr/local/ssl/lib/libssl.so

with the same error.

What path is correct?

Tnanks.

Victor Belous

>
>
>
>>checking for OpenSSL version >= 0.9.7... yes
>>checking for DH_new in -lcrypto... yes
>>checking for SSL_new in -lssl... no
>>
>>
>
> Yup.
>
>
>
>>bash-2.05# ls /usr/local/ssl/lib
>>libcrypto.a libcrypto.so.0 libssl.a libssl.so.0
>> pkgconfig
>>libcrypto.so libcrypto.so.0.9.7 libssl.so libssl.so.0.9.7
>>
>>
>
> Use the correct path.
>
> Alan DeKok.
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>

--__--__--

Message: 2
Date: Wed, 30 Jun 2004 09:12:22 +0200
From: Garry Glendown <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: OT: L2TP from Lucent/Ascend Max?
Reply-To: [EMAIL PROTECTED]

Sorry, slightly off topic, but my google search didn't turn up anything
helpful ...

I'm wondering, is it possible to set up a Max 2000/4000 series dialup
router to send certain (or, if not certain, all) dialups to another
router via l2tp instead of doing auth and stuff itself? I want to/need
to integrate some dialups into MPLS VRFs which are usually DSL
connections terminated by a Cisco 7200 ... those DSL connections are
already sent to the Cisco as l2tp traffic ... (and authenticated /
accounted through FreeRadius ;) )

Tnx in advance, -gg

--__--__--

Message: 3
From: "marcolfa" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Failing debuild
Date: Wed, 30 Jun 2004 11:17:01 +0200
Reply-To: [EMAIL PROTECTED]

debuild -us -uc --lintian
debian sid
deb rules on snapshot 29/4

I get the deb but with inside some broken symbolic links to rlm_peap
rlm_ttsl libraries, in <libdrir>

reading the build output file i believe to see a badlinking problem:

*** Warning: Linking the shared library rlm_eap_peap.la against the loadable
module
*** rlm_eap_tls.so is not portable!

*** Warning: Linking the shared library rlm_eap_ttls.la against the loadable
module
*** rlm_eap_tls.so is not portable!

Relinking is non effective to solve the problem.
Using --disable-shared option cause a lot of errors like these ones:
: undefined reference to `gnutls_certificate_get_peers'
/usr/lib/libldap.a(gnutls.o)(.text+0xb3c): In function `gnutls_SSL_set_bio':
: undefined reference to `gnutls_transport_set_ptr2'
/usr/lib/libldap.a(gnutls.o)(.text+0xb83): In function `gnutls_SSL_set_bio':
: undefined reference to `gnutls_transport_set_pull_function'
/usr/lib/libldap.a(gnutls.o)(.text+0x38): In function
`gnutls_ERR_error_string':

and no deb package as result.

Is there a method, a parameter to solve the proplem ? I need both peap and
ttls.
I do prefer using deb packets on remote machines' for upgrading purposes.

thanks
marco

--__--__--

Message: 4
From: "Gary McKinney" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Re: Re: Sniff radius
Date: Wed, 30 Jun 2004 05:39:10 -0400
Reply-To: [EMAIL PROTECTED]

Try searching for: radiusniff (just one 's')...

gm...

----- Original Message -----
From: "nsinit" <[EMAIL PROTECTED]>
To: "[EMAIL PROTECTED]"
<[EMAIL PROTECTED]>
Sent: Tuesday, June 29, 2004 9:22 PM
Subject: Re: Re: Sniff radius

>
> >yeah i found it yesterday afet the post , thx anyway .
> >i use radiussniff too.
>
> Hi, can you tell me where i can download radiussniff?
> I have searched it at google/freshmeat.net/sourceforge.net,
> but get nothing.
>
> thx.
>
>
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> ---
> [This E-mail scanned for viruses by Declude Ant-Virus Scanner]
>
>

---
[This E-mail scanned for viruses by Declude Ant-Virus Scanner]

--__--__--

Message: 5
From: "Gary McKinney" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Subject: Re: Ingoring unknown Client error.
Date: Wed, 30 Jun 2004 05:43:44 -0400
Reply-To: [EMAIL PROTECTED]

This is a multi-part message in MIME format.

------=_NextPart_000_0010_01C45E65.34D74ED0
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

Looks like the 'name' of the NAS in the clients.conf file is not correct =
or the shared (secret) password is not correct - careful of whitespace =
and non-printable characters in the clients.conf file or the PM3 - also, =
I think this is case sensitive as well...

gm..
----- Original Message -----=20
From: Alexander Lopez=20
To: [EMAIL PROTECTED]
Sent: Tuesday, June 29, 2004 10:40 PM
Subject: Ingoring unknown Client error.

So I thought it was going to be simple. Download, Complie install =
configure files and bam!! Radius, NOT SO!!

=20

I am running:

[EMAIL PROTECTED] sbin]# `pwd`/radiusd -v

radiusd: FreeRADIUS Version 1.0.0-pre3, for host , built on Jun 28 =
2004 at 12:13:59

=20

When I start radiusd with -X

I get this when trying to authenticate a dialup user from a Livingston =
PM3

=20

rad_recv: Access-Request packet from host 216.22.88.240:1142, =
id=3D182, length=3D115

Ignoring request from unknown client 216.22.88.240:1142

--- Walking the entire request list ---

Nothing to do. Sleeping until we see a request.

=20

=20

I have added the secret in the clients.conf file, stopped and started =
the radiusd process. I have changed the secret on the PM3 (just to make =
sure I knew what it was)

Funny thing is that the PM3 works fine on my Sun box that I am trying =
to retire. (This is that last thing that remains)

=20

This is what I have done:

=20

Made sure that the PM3 is using port 1812 (as per RFC)

Made sure that the PM3 can ping and has connectivity, (long shot, but =
wanted to rule the network out)

=20

=20

I don't know what else to check.. Do I just have a weird one??

=20

=20

=20

=20

=20

------=_NextPart_000_0010_01C45E65.34D74ED0
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable

<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<HTML xmlns=3D"http://www.w3.org/TR/REC-html40" xmlns:o =3D=20
"urn:schemas-microsoft-com:office:office" xmlns:w =3D=20
"urn:schemas-microsoft-com:office:word"><HEAD>
<META http-equiv=3DContent-Type content=3D"text/html; =
charset=3Diso-8859-1">
<META content=3D"MSHTML 6.00.2800.1400" name=3DGENERATOR>
<STYLE>@page Section1 {size: 8.5in 11.0in; margin: 1.0in 1.25in 1.0in =
1.25in; }
P.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
LI.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
DIV.MsoNormal {
FONT-SIZE: 12pt; MARGIN: 0in 0in 0pt; FONT-FAMILY: "Times New Roman"
}
A:link {
COLOR: blue; TEXT-DECORATION: underline
}
SPAN.MsoHyperlink {
COLOR: blue; TEXT-DECORATION: underline
}
A:visited {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.MsoHyperlinkFollowed {
COLOR: purple; TEXT-DECORATION: underline
}
SPAN.EmailStyle17 {
COLOR: windowtext; FONT-FAMILY: Arial; mso-style-type: personal-compose
}
DIV.Section1 {
page: Section1
}
</STYLE>
</HEAD>
<BODY lang=3DEN-US vLink=3Dpurple link=3Dblue bgColor=3D#ffffff>
<DIV>Looks like the 'name' of the NAS in the =

clients.conf file is not correct or the shared (secret) password is not =
correct=20
- careful of whitespace and non-printable characters in the clients.conf =
file or=20
the PM3 - also, I think this is case sensitive as well...</DIV>
<DIV> </DIV>
<DIV>gm..</DIV>
<BLOCKQUOTE dir=3Dltr=20
style=3D"PADDING-RIGHT: 0px; PADDING-LEFT: 5px; MARGIN-LEFT: 5px; =
BORDER-LEFT: #000000 2px solid; MARGIN-RIGHT: 0px">
<DIV style=3D"FONT: 10pt arial">----- Original Message ----- </DIV>
<DIV=20
style=3D"BACKGROUND: #e4e4e4; FONT: 10pt arial; font-color: =
black">From:=20
<A [EMAIL PROTECTED] href="" PROTECTED]">Alexander =
Lopez</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial">To: <A=20
[EMAIL PROTECTED]
=
href="" PROTECTED]">[EMAIL PROTECTED]
sts.freeradius.org</A>=20
</DIV>
<DIV style=3D"FONT: 10pt arial">Sent: Tuesday, June 29, 2004 =
10:40=20
PM</DIV>
<DIV style=3D"FONT: 10pt arial">Subject: Ingoring unknown =
Client=20
error.</DIV>
<DIV> </DIV>
<DIV class=3DSection1>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">So I thought it was =
going to be=20
simple. Download, Complie install configure files and bam!! Radius, =
NOT=20
SO!!<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">I am=20
running:<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">[EMAIL PROTECTED] sbin]# =
`pwd`/radiusd=20
-v<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">radiusd: FreeRADIUS =
Version=20
1.0.0-pre3, for host , built on Jun 28 2004 at=20
12:13:59<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">When I start radiusd =
with=20
=96X<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">I get this when trying =
to=20
authenticate a dialup user from a Livingston =
PM3<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">rad_recv: Access-Request =
packet=20
from host 216.22.88.240:1142, id=3D182, =
length=3D115<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Ignoring request from =
unknown=20
client 216.22.88.240:1142<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">--- Walking the entire =
request=20
list ---<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Nothing to do.  =
Sleeping=20
until we see a request.<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">I have added the secret =
in the=20
clients.conf file, stopped and started the radiusd process. I have =
changed the=20
secret on the PM3 (just to make sure I knew what it=20
was)<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Funny thing is that the =
PM3 works=20
fine on my Sun box that I am trying to retire. (This is that last =
thing that=20
remains)<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">This is what I have=20
done:<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Made sure that the PM3 =
is using=20
port 1812 (as per RFC)<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">Made sure that the PM3 =
can ping=20
and has connectivity, (long shot, but wanted to rule the network=20
out)<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: Arial">I don=92t know what else =
to=20
check..  Do I just have a weird =
one??<o:p></o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p>
<SPAN=20
style=3D"FONT-SIZE: 10pt; FONT-FAMILY: =
Arial"><o:p> </o:p></DIV></BLOCKQUOTE></BODY></HTM=
L>

------=_NextPart_000_0010_01C45E65.34D74ED0--

---
[This E-mail scanned for viruses by Declude Ant-Virus Scanner]

--__--__--

Message: 6
Date: Wed, 30 Jun 2004 12:39:36 +0200
From: Thomas MARCHESSEAU <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Sniff radius
Reply-To: [EMAIL PROTECTED]

Hi Gary,

thx , i got it , i even patch it to match with my needs ;)
cya .

Thom .

Gary McKinney wrote:

>Try searching for: radiusniff (just one 's')...
>
>gm...
>
>----- Original Message -----
>From: "nsinit" <[EMAIL PROTECTED]>
>To: "[EMAIL PROTECTED]"
><[EMAIL PROTECTED]>
>Sent: Tuesday, June 29, 2004 9:22 PM
>Subject: Re: Re: Sniff radius
>
>
>
>
>>>yeah i found it yesterday afet the post , thx anyway .
>>>i use radiussniff too.
>>>
>>>
>>Hi, can you tell me where i can download radiussniff?
>>I have searched it at google/freshmeat.net/sourceforge.net,
>>but get nothing.
>>
>>thx.
>>
>>
>>
>>
>>-
>>List info/subscribe/unsubscribe? See
>>
>>
>http://www.freeradius.org/list/users.html
>
>
>>---
>>[This E-mail scanned for viruses by Declude Ant-Virus Scanner]
>>
>>
>>
>>
>
>---
>[This E-mail scanned for viruses by Declude Ant-Virus Scanner]
>
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>

--__--__--

Message: 7
Date: Wed, 30 Jun 2004 12:59:23 +0200
From: Thomas MARCHESSEAU <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Sniff radius
Reply-To: [EMAIL PROTECTED]

Hi Nsinit,

you can get it on ADM's ftp.
adm.freelsd.net/ADM

regards
Thomas MARCHESSEAU

nsinit wrote:

>>yeah i found it yesterday afet the post , thx anyway .
>>i use radiussniff too.
>>
>>
>
>Hi, can you tell me where i can download radiussniff?
>I have searched it at google/freshmeat.net/sourceforge.net,
>but get nothing.
>
>thx.
>
>
>
>
>-
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
>
>

--__--__--

Message: 8
Date: Wed, 30 Jun 2004 09:56:20 -0300
From: "Grant, Alastair Ian" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: FreeRadius/LDAP conf : little problem
Reply-To: [EMAIL PROTECTED]

>
> > And the userPassword is used for the LDAP bind by PAP right?
>
> Yes.
>
> > Do you know of a windows client that can do PAP/EAP-TTLS?
>
> Yes, there are some Windows clients. There is even one that is free (as
> in gratis) for personal use: <http://www.securew2.com/uk/downloadbuy/>.
> However, I have not used any of them. Some of my user's do not have the
> priviledges on their computers needed to install software. Therefore, a
> third party client was not an option for me.
>

Paul,
How is your radiusd.conf configured for authorization and authentication? Which
modules have to be enabled where? Also, how is your eap settings configured? If you
don't mind sending snippets from the files, that would probabyl be easiest. Thanks!

-Al

--__--__--

Message: 9
Date: Wed, 30 Jun 2004 11:46:56 -0300
From: "Grant, Alastair Ian" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: LDAP Bind authentication and Other Attributes
Reply-To: [EMAIL PROTECTED]

Hello,
If the type of authentication being done is an LDAP bind, is it possible to retrieve
other attributes from the LDAP directory, such as the Calling-Station-ID, and
authenticate against them as well? I have an LDAP bind authentication working (with
username and password) but I would like to authenticate based on a MAC Address as well
(3 things in total). Thanks in advance!

-Al

--__--__--

Message: 10
From: "Alan DeKok" <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: Re: Matching Acct-Start and Acct-Stop
Date: Wed, 30 Jun 2004 11:02:25 -0400
Reply-To: [EMAIL PROTECTED]

"PS" <[EMAIL PROTECTED]> wrote:
> I've been developing classes for radius client and read all related
> rfc, but I still have trouble to understand some stuff.
> There are situation when gnugk (VoIP) sends acct-stop without ever
> sending acct-start. Is it leagal according to radius protocol?

I don't see why not.

> Should such requests be rejected/dropped??

No.

Alan DeKok.

--__--__--

Message: 11
Date: Wed, 30 Jun 2004 17:24:01 +0100
From: Maqbool Hashim <[EMAIL PROTECTED]>
To: [EMAIL PROTECTED]
Subject: problems with radius accounting when using mysql
Reply-To: [EMAIL PROTECTED]

Hi,

I have radius set up to get authentication information from a mysql
database. I want it to log accounting information to the radacct table
in my
mysql database. I have set up the accounting section in my radiusd.conf
file as follows:

accounting {
 acct_unique
 detail
 unix
 sql
 radutmp
 }

However radius is still logging accounting information to the files and
I can't see anything in the radacct table in my database. (I have
rebooted the radius server).

Am I missing a crucial setting here?

Regards,

Maqbool

--__--__--

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

End of Freeradius-Users Digest

Freeradius-Users digest, Vol 1 #3436 - 11 msgs

Reply via email to