FreeRadius with MySQL
Leandro, See to it you included sql in authorization and accounting. Another helpful information ... http://www.frontios.com/freeradius.html = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin (cvs last 12-04-2003)
hello guys, NAS doesnt show in User's Online Information. = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
CHAP authentication
hello here's debug output and the error, thanks
mysql select * from radgroupcheck;
++---+--+++
| id | GroupName | Attribute| op | Value
|
++---+--+++
| 1 | admin | Auth-Type| == | CHAP
|
| 2 | admin | Simultaneous-Use | := | 1
|
| 3 | disabled-user | Auth-Type| := | Reject
|
++---+--+++
3 rows in set (0.00 sec)
mysql select * from radcheck;
++--+-++--+
| id | UserName | Attribute | op | Value
|
++--+-++--+
| 1 | cache| User-Password | == | cache
|
| 6 | cache| Expiration | := | 20
November 2003 |
| 3 | reject | CHAP-Password | := | reject
|
| 15 | cache| Max-Monthly-Session | := | 45213
|
| 11 | apellido | CHAP-Password | := | apellido
|
| 14 | apellido | Max-Monthly-Session | := | 3600
|
| 16 | janine | CHAP-Password | := | janine
|
| 17 | jinh | CHAP-Password | := | jinh
|
++--+-++--+
8 rows in set (0.00 sec)
part of radius -xxx output
radtest cache cache localhost 1645 testing123
Tue Nov 18 22:04:40 2003 : Debug: modcall: group
authorize returns ok for request 2
Tue Nov 18 22:04:40 2003 : Debug:
rad_check_password: Found Auth-Type CHAP
Tue Nov 18 22:04:40 2003 : Debug: auth: type CHAP
Tue Nov 18 22:04:40 2003 : Debug: modcall: entering
group Auth-Type for request 2
Tue Nov 18 22:04:40 2003 : Debug:
modsingle[authenticate]: calling chap (rlm_chap) for
request 2
Tue Nov 18 22:04:40 2003 : Auth: rlm_chap: Attribute
CHAP-Password is required for authentication. Cannot
use User-Password.
Tue Nov 18 22:04:40 2003 : Debug:
modsingle[authenticate]: returned from chap (rlm_chap)
for request 2
Tue Nov 18 22:04:40 2003 : Debug:
modcall[authenticate]: module chap returns invalid
for request 2
Tue Nov 18 22:04:40 2003 : Debug: modcall: group
Auth-Type returns invalid for request 2
Tue Nov 18 22:04:40 2003 : Debug: auth: Failed to
validate the user.
Tue Nov 18 22:04:40 2003 : Auth: Login incorrect:
[cache/cache] (from client localhost port 1645)
radtest janine janine localhost 1645 testing123
Tue Nov 18 22:07:00 2003 : Debug:
rad_check_password: Found Auth-Type CHAP
Tue Nov 18 22:07:00 2003 : Debug: auth: type CHAP
Tue Nov 18 22:07:00 2003 : Debug: modcall: entering
group Auth-Type for request 4
Tue Nov 18 22:07:00 2003 : Debug:
modsingle[authenticate]: calling chap (rlm_chap) for
request 4
Tue Nov 18 22:07:00 2003 : Auth: rlm_chap: Attribute
CHAP-Password is required for authentication. Cannot
use User-Password.
Tue Nov 18 22:07:00 2003 : Debug:
modsingle[authenticate]: returned from chap (rlm_chap)
for request 4
Tue Nov 18 22:07:00 2003 : Debug:
modcall[authenticate]: module chap returns invalid
for request 4
Tue Nov 18 22:07:00 2003 : Debug: modcall: group
Auth-Type returns invalid for request 4
Tue Nov 18 22:07:00 2003 : Debug: auth: Failed to
validate the user.
Tue Nov 18 22:07:00 2003 : Auth: Login incorrect:
[janine/janine] (from client localhost port 1645)
radius.conf
instantiate {
#
# The expression module doesn't do
authorization,
# authentication, or accounting. It only
does dynamic
# translation, of the form:
#
# Session-Timeout = `%{expr:2 + 3}`
#
# So the module needs to be instantiated, but
CANNOT be
# listed in any other section. See
'doc/rlm_expr' for
# more information.
#
expr
Monthly
#
# We add the counter module here so that it
registers
# the check-name attribute before any module
which sets
# it
# daily
}
# Authorization. First preprocess (hints and
huntgroups files),
# then realms, and finally look in the users file.
#
# The order of the realm modules will determine the
order that
# we try to find a matching realm.
#
# Make *sure* that 'preprocess' comes before any
realm if you
# need to setup hints for the remote radius server
authorize {
#
# The preprocess module takes care of
sanitizing some bizarre
# attributes in the request, and turning them
into attributes
# which are more standard.
#
# It takes care of processing the
'raddb/hints' and the
# 'raddb/huntgroups' files.
#
# It also adds a Client-IP-Address attribute to the
request.
preprocess
#
# If you want to have a log of authentication
requests,
# un-comment the following line, and the
'detail auth_log'
# section, above.
auth_log
#
# The chap module will set 'Auth-Type :=
CHAP' if we are
# handling a
CHAP authentication
Good day Mr. Dekok, sorry if im asking stupid question. Im just asking so that i can sure that chap authentication doesnt work and maybe someone could give some comment. Hoping maybe i miss something. I test it already before asking this in mailing list and it doesnt work. = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
CHAP authentication
can i use chap authentication in rlm_sql? = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
CHAP authentication
Good day Mr. Dekok, sorry what i mean is im using mysql to store user's information and pap authentication to authenticatite them. what im asking is if i can use chap? = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
failed login (log_badlogins script)
dialup_admin failed login doesnt show any report -- sql debug - # login time server terminate cause callerid DEBUG(SQL,MYSQL DRIVER): Query: SELECT AcctStopTime,UserName,NASIPAddress,NASPortId,AcctTerminateCause,CallingStationId FROM radacct WHERE AcctStopTime = '2003-11-14 20:20:24' AND AcctStopTime = '2003-11-14 19:50:24' AND (AcctTerminateCause LIKE 'Login-Incorrect%' OR AcctTerminateCause LIKE 'Invalid-User%' OR AcctTerminateCause LIKE 'Multiple-Logins%') ORDER BY AcctStopTime desc LIMIT 10; DEBUG(SQL,MYSQL DRIVER): Query Result: - radacct table mysql select * from radacct; +---+---+--+--+---++---+-+-+-+-+---+---+--+-+--+-+--+--+-++-++---+ | RadAcctId | AcctSessionId | AcctUniqueId | UserName | Realm | NASIPAddress | NASPortId | NASPortType | AcctStartTime | AcctStopTime| AcctSessionTime | AcctAuthentic | ConnectInfo_start | ConnectInfo_stop | AcctInputOctets | AcctOutputOctets | CalledStationId | CallingStationId | AcctTerminateCause | ServiceType | FramedProtocol | FramedIPAddress | AcctStartDelay | AcctStopDelay | +---+---+--+--+---++---+-+-+-+-+---+---+--+-+--+-+--+--+-++-++---+ | 1 | | 235cd91b0ffaca7b433075696d487b93 | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:02:03 | 2003-11-13 22:02:03 | 0 | NULL | NULL | NULL | 0 |0 | | | Login-Incorrect | NULL| NULL | | NULL | NULL | | 2 | | 2f1a4527f658172f1be13fb44f7f0589 | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:03:06 | 2003-11-13 22:03:06 | 0 | NULL | NULL | NULL | 0 |0 | | | Invalid-User (rlm_counter: Maxim | NULL| NULL | | NULL | NULL | | 3 | | 70f79c55f8ecac877d7e68ca72c9c871 | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:05:18 | 2003-11-13 22:05:18 | 0 | NULL | NULL | NULL | 0 |0 | | | Outside allowed timespan (time a | NULL| NULL | | NULL | NULL | | 4 | | f123f3b60856f7247c8faa92c1c771ab | cache| | 127.0.0.1 | 1645 | NULL| 2003-11-13 22:19:25 | 2003-11-13 22:19:25 | 0 | NULL | NULL | NULL | 0 |0 | | | Outside allowed timespan (time a | NULL| NULL | | NULL | NULL | | 5 | 0316 | | cache| | 203.177.29.204 | 6 | Async | 2003-11-14 00:00:53 | 2003-11-14 00:11:54 | 661 | | 33600 V42bis | 33600 V42bis |8352 | 5246 | | | | Framed-User | PPP | 203.177.29.211 | 0 | 0 | | 6 | 0317 | | cache| | 203.177.29.204 | 6 | Async | 2003-11-14 00:14:23 | 2003-11-14 00:38:28 | 0 | | 33600 V42bis | | 0 | 0 | | | | Framed-User | PPP | 203.177.29.211 | 0 | 0 | | 7 | 0318 | | cache| | 203.177.29.204 | 6 | Async | 2003-11-14 00:41:22 | 2003-11-14 00:51:23 | 601 | | 33600 V42bis | 33600 V42bis |8235 | 5692 | |
dialup_admin
Good day Mr. Kalevras, as your suggestion im tried to create a script to perform manual reset in GDBM database(db.monthly). I want to synchronize the update of GDBM database and MySQL. My question is after sucessfully reseting user's counter in GDBM database then how can i update user's status in dialup_admin? = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin statistic report ?
Good day, = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin statistic report?
Good day, why isnt it User Statistic and Statistic Report doesnt show anthing? = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Sql Counter ?
try to run radiusd in debugging mode ... it will show the next reset ... in your case this will be reset @ first day of december. = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Protect your identity with Yahoo! Mail AddressGuard http://antispam.yahoo.com/whatsnewfree - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_counter question
Hello Mr. Kalevras, i already look @ rad_counter.pl and i understand the flow of this script. It open the database as READONLY, print the information where u can specify the db filename, user, how the counter will be shown, second (default), minutes, hours and match. My problem is i dont have any hint in command or syntax. Just like how do i open the database as read/write? What is cmd to update, delete, add or edit. I know this is not related in Freeeradius but i dont have any choice, im spending days try to search this web but i dont see any documentation. thanks very much ... = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Exclusive Video Premiere - Britney Spears http://launch.yahoo.com/promos/britneyspears/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_counter question
hello , after searching for any documents and tutorial regarding GDBM and perl got no luck. i want to write a script that would reset the counter in GDBM database using perl. Anyone know documentation or maybe tutorial, books... thanks very much = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Exclusive Video Premiere - Britney Spears http://launch.yahoo.com/promos/britneyspears/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SQLcounter unwanted Session-Reply ( from development mailing list )
Good day, im surfing in development mailing list and one of the list posted there is SQLcounter unwanted Session-Reply. It seems it is related to sqlcounter count-attribute. Any development for this? thanks ... = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SQLcounter unwanted Session-Reply ( from development mailing list )
Navid, here's my email address: [EMAIL PROTECTED] thanks. I been trying ot test from 0.9.0 to 0.9.2 and latest CVS but no luck. Reading your post in development mailing list answered my question regarding rlm_sqlcounter and rlm_counter, difference between them. = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin latest cvsup
Good day Mr. Kalevras. statistics, user's statistics
and online users doesnt show anything in latest
dialup_admin cvsup. here's my config
-
admin.conf
-
#
# Main Configuration File
#
# it can be default or whatever language. Only greek
are supported
# from non latin alphabet languages
# These attribute only apply for ldap not for sql
#
general_prefered_lang: en
general_prefered_lang_name: English
#
# The charset which will be added as a meta tag in all
pages
#
general_charset: iso-8859-1
#
# Uncomment this if normal attributes (not the
;lang-xx ones) in ldap
# are utf8 encoded.
#
#general_decode_normal_attributes: yes
#
# The directory where dialupadmin is installed
#
general_base_dir: /usr/local/www/data/dialup_admin
#
# The base directory of the freeradius radius
installation
#
general_radiusd_base_dir: /usr/local/freeradius-0.9.2
general_domain: mactan.ph
#
# Set it to yes to use sessions and cache the various
mappings
# You can also set use_session = 1 in config.php3 to
also cache
# the admin.conf
#
# IMPORTANT -- IMPORTANT -- IMPORTANT
#Remember to use the 'Clear Cache' page if you use
sessions and do any changes
#in any of the configuration files.
#
general_use_session: no
#
# This is used by the failed logins page. It states
the default back time
# in minutes.
#
general_most_recent_fl: 30
#
# Realm setup
#
# Set general_strip_realms to yes in order to stip
realms from usernames.
# By default realms are not striped
#general_strip_realms : yes
#
# The delimiter used in realms. Default is @
#
#general_realm_delimiter: @
#
# The format of the realms. Can be either suffix
(realm is after the username)
# or prefix (realm is before the username). Default is
suffix
#
#general_realm_format: suffix
#
#
# Determines if the administrator will be able to
change the user password through
# the user edit page
general_show_user_password: yes
#general_ldap_attrmap:
%{general_radiusd_base_dir}/etc/raddb/ldap.attrmap
general_sql_attrmap:
%{general_base_dir}/conf/sql.attrmap
general_accounting_attrs_file:
%{general_base_dir}/conf/accounting.attrs
#general_extra_ldap_attrmap:
%{general_base_dir}/conf/extra.ldap-attrmap
#
# it can be either ldap or sql
# This affects the user base not accounting.
Accounting is always in sql
#
general_lib_type: sql
#
# Define which attributes will be visible in the user
edit page
#
general_user_edit_attrs_file:
%{general_base_dir}/conf/user_edit.attrs
#
# Used by the Accounting Report Generator
#
general_sql_attrs_file:
%{general_base_dir}/conf/sql.attrs
#
# Set default values for various attributes
#
general_default_file:
%{general_base_dir}/conf/default.vals
#general_ld_library_path: /usr/local/snmpd/lib
#
# can be 'snmp' (for snmpfinger) or empty to query the
radacct table without first
# querying the nas
# This is used by the online users page
#
general_finger_type: snmp
general_snmpfinger_bin:
%{general_base_dir}/bin/snmpfinger
general_radclient_bin:
%{general_radiusd_base_dir}/bin/radclient
#
# this information is used from the server check page
#
general_test_account_login: cache
general_test_account_password: cache
#
# These are used as default values for the user test
page
#
general_radius_server: localhost
general_radius_server_port: 1645
#
# can be either pap or chap
#
general_radius_server_auth_proto: pap
#
# sorry, single valued for now. Should become
something like
# password[server-name]: x
#
general_radius_server_secret: cyclades
general_auth_request_file:
%{general_base_dir}/conf/auth.request
#
# can be one of crypt,md5,clear
#
general_encryption_method: clear
#
# can be either asc (older dates first) or desc
(recent dates first)
# This is used in the user accounting and badusers
pages
#
general_accounting_info_order: desc
#
# Use the totacct table in the user statistics page
instead of the radacct
# table. That will make the page run quicker. totacct
should have data for
# this to work :-)
#
general_stats_use_totacct: yes
INCLUDE: %{general_base_dir}/conf/naslist.conf
INCLUDE: %{general_base_dir}/conf/captions.conf
#
# The ldap server to connect to.
# Both ldap_server and ldap_write_server can be a
space-separated
# list of ldap hostnames. In that case the library
will try to connect
# to the servers in the order that they appear. If the
first host is down
# ldap_connect will ask for the second ldap host and
so on.
#
#ldap_server: ldap.%{general_domain}
#
# There are many cases where we have a small write
master and
# a lot of fast read only replicas. If that is the
case uncomment
# ldap_write_server and point it to the write master.
It will be
# used only when writing to the directory, not when
reading
#
#ldap_write_server: master.%{general_domain}
#ldap_base: dc=company,dc=com
#ldap_binddn: cn=Directory Manager
#ldap_bindpw: XXX
#ldap_default_new_entry_suffix:
ou=dialup,ou=guests,%{ldap_base}
#ldap_default_dn: uid=default-dialup,%{ldap_base}
dialup_admin latest cvsup
I tried the latest cvsup of dialup_admin and there's a new feature in user's information, the open session however the online user command is not working, then i switch to dialup_admin which included in freeradiu-0.9.0 package and it is working as i expected. what is the file to be update in dialup_admin (freeradius-0.9.0)to have this latest feature which included in latest cvsup? = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_counter and rlm_sqlcounter
attribute Max-Monthly-Session is number 1082 rlm_sqlcounter: num=1, last=m rlm_sqlcounter: Current Time: 1066614026 [2003-10-20 09:40:26], Next reset 1067616000 [2003-11-01 00:00:00] rlm_sqlcounter: num=3, last=m rlm_sqlcounter: Current Time: 1066614026 [2003-10-20 09:40:26], Prev reset 1059667200 [2003-08-01 00:00:00] Module: Instantiated sqlcounter (monthlycounter) Module: Loaded Acct-Unique-Session-Id acct_unique: key = User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port-Id Module: Instantiated acct_unique (acct_unique) Initializing the thread pool... thread: start_servers = 5 thread: max_servers = 32 thread: min_spare_servers = 3 thread: max_spare_servers = 10 thread: max_requests_per_server = 0 thread: cleanup_delay = 5 Thread spawned new child 1. Total threads in pool: 1 Thread spawned new child 2. Total threads in pool: 2 Thread spawned new child 3. Total threads in pool: 3 Thread spawned new child 4. Total threads in pool: 4 Thread spawned new child 5. Total threads in pool: 5 Listening on IP address *, ports 1645/udp and 1646/udp. Ready to process requests. Thread 1 waiting to be assigned a request Thread 2 waiting to be assigned a request Thread 3 waiting to be assigned a request Thread 4 waiting to be assigned a request Thread 5 waiting to be assigned a request why isnt it the next reset STILL first day of the month? = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_counter costume reset
what wrong with this configuration?
counter Monthly {
filename = ${raddbdir}/db.monthly
key = User-name
count-attribute = Acct-Session-Time
reset = 3m
counter-name = Monthly-Session-Time
check-name = Max-Monthly-Session
allowed-servicetype = Framed-User
cache-size = 5000
}
here's the part of the log :
sqlcounter: counter-name = Monthly-Session-Time
sqlcounter: check-name = Max-Monthly-Session
sqlcounter: key = User-Name
sqlcounter: sqlmod-inst = sqlcca3
sqlcounter: query = SELECT SUM(AcctSessionTime) FROM
radacct WHERE UserName='%{%k}' AND AcctStartTime
FROM_UNIXTIME('%b')
sqlcounter: reset = monthly
rlm_sqlcounter: Counter attribute Monthly-Session-Time
is number 1081
rlm_sqlcounter: Check attribute Max-Monthly-Session is
number 1082
rlm_sqlcounter: Current Time: 1066458752 [2003-10-18
14:32:32], Next reset 1067616000 [2003-11-01 00:00:00]
rlm_sqlcounter: Current Time: 1066458752 [2003-10-18
14:32:32], Prev reset 1064937600 [2003-10-01 00:00:00]
Module: Instantiated sqlcounter (monthlycounter)
why isnt it the next reset still first day of the
month eventhough it is set for 3 month?
=
[ apellido jr., wilfredo p. ]
+63 034 4880-449
If you can't hear me, it's because i'm in parentheses.
__
Do you Yahoo!?
The New Yahoo! Shopping - with improved product search
http://shopping.yahoo.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Help on FreBSD
try to install gmake using port: cd /usr/port/dev/gmake make install clean = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rad_counter.pl error
hello, i got this error when im trying to run rad_counter.pl in FreeBSD 4.8 perl rad_counter.pl Can't locate warnings.pm in @INC (@INC contains: /usr/local/lib/perl5/site_perl/5.005/i386-freebsd /usr/local/lib/perl5/site_perl/5.005 . /usr/libdata/perl/5.00503/mach /usr/libdata/perl/5.00503) at rad_counter.pl line 5. BEGIN failed--compilation aborted at rad_counter.pl line 5. i tried to comment this in perl script to see what other errors may come then i got this: perl rad_counter.pl Can't locate GDBM_File.pm in @INC (@INC contains: /usr/local/lib/perl5/site_perl/5.005/i386-freebsd /usr/local/lib/perl5/site_perl/5.005 . /usr/libdata/perl/5.00503/mach /usr/libdata/perl/5.00503) at rad_counter.pl line 6. BEGIN failed--compilation aborted at rad_counter.pl line 6. i installed gdbm, rlm_dbm and rlm_counter thinking that this script may solve my problem regarding in reseting the counter attribute. what im missing here? what other dependencies should i install to run this script? thanks ... = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_counter question
hello guys good day, after reading the mailing list. Part of the problem solved. Using rlm_counter you can disconnect the user using the specified session timeout entry. I just want to ask, how to reset the counter immediatly? In radius.conf the counter can be reset to zero, daily weekly, monthly and user define. I configure the radius server using prepaid internet which consumable for 1 month but not all user comsume their account at exactly 1 month, sometime 3 day, 2 week or 3 weeks. Now, if they want to update their account to us then how can i update(reset) the user as soon as possible without waiting for an hour, day , week or month ? Thanks = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_sqlcounter
Good day Mr. kalevras thanks for suggestion. As of now, the user login works correctly. I have a question regarding rlm_sqlcounter, do i need to create a special counter to do this task? I want to limit the monthly internet usage of the client. For example 10 hours per month then after 10 hours it is disconnected and dialup_admin show that the user is out of monthly quota. Monthly counter work in this but I thought because the user already consume 10 hours probably the user can't login anymore without administrator's update. But after testing whew ... the user can still login again and again and again, disconnecting every 10 hours. = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Login-Time Problem Freeradius-0.9.1
Good day Mr. Kalevras, thanks for the reply. I think the problem is my NAS (Cyclades Ze using Portslave) and Portmaster. And i got another one problem Simultaneous-Use doesnt work also. if the user is already connected then i tried to connect using radtest unfortunately it is accepted. In dialup_admin Online user report shows it disconnected but it radius log (radius -xx) nothing stating that the user is disconnected. In reality the user still connected. Lastly, I got no log in my radius.log and i know that the problem also related to my NAS. I got no any Manual so i tried to search any documentation in web but unfortunately im still hanging looking for anything. Do u have any Suggestion ? thanks very much = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Login-Time Problem Freeradius-0.9.1
Good day, im just wondering if my configuration is correct. I tried to limit the internet access of the user april from 11 pm - 3 am then i got this entry in my DB. After 3 am why isnt it the user (april) is still Online? I tried to disconnect her and when she login once again she cant, i got this reply msg from radius : Reply-Message = You are calling outside your allowed timespan\r\n That's what i actually expect. What im missing here? thanks thanks. mysql select * from radcheck; ++--+-++-+ | id | UserName | Attribute | op | Value | ++--+-++-+ | 1 | janine | User-Password | == | janine | | 2 | apellido | User-Password | := | apellido | | 4 | jinh | User-Password | := | jinh | | 9 | april| User-Password | := | april | | 8 | cache| User-Password | := | cache | | 10 | april| Max-Monthly-Session | := | 36000 | | 11 | april| Login-Time | := | Al2300-0300 | | 12 | april| Expiration | = | 31 October 2003 | | 13 | cache| Expiration | == | 31 October 2003 | | 15 | cache| Login-Time | := | 2300-2400 | ++--+-++-+ 10 rows in set (0.03 sec) = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_sqlcounter ( Monthly Limit)
hello guys why isnt it i got this error when im trying to run radius -xx? rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module sql returns ok rlm_sqlcounter: Entering module authorize code rlm_sqlcounter: Could not find Check item value pair modcall[authorize]: module monthlycounter returns noop i just added sqlcounter.conf in /etc/raddb and added monthlycounter in radius.conf under authorization. The user can authenticate but the Login-Time doesnt work. They can still Login eventhough they are not in the time span. What im missing here? thanks = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin
Good day guys, i tried to add another group using dialup_admin then i try to show groups, the one that ive created doesnt appear in the report. when im check my db (mysql) it apeears that the group ive created is already inserted. here's my output mysql select * from radgroupreply; ++---+++-+--+ | id | GroupName | Attribute | op | Value | prio | ++---+++-+--+ | 1 | admin | Framed-Compression | = | Van-Jacobsen-TCP-IP |0 | | 2 | admin | Framed-Protocol| = | PPP |0 | | 3 | admin | Service-Type | = | Framed-User |0 | | 4 | admin | Auth-Type | = | System |0 | | 5 | admin | Framed-MTU | = | 1500|0 | | 6 | Night-Owl Prepaid | Framed-Protocol| = | PPP |0 | | 7 | Night-Owl Prepaid | Framed-MTU | = | 1500|0 | | 8 | Night-Owl Prepaid | Framed-Compression | = | Van-Jacobsen-TCP-IP |0 | | 9 | Night-Owl Prepaid | Service-Type | = | Framed-User |0 | ++---+++-+--+ The Night-Owl Prepaid group is the one ive inserted through dialup_admin and admin group ive inserted manually. im using dialup_admin which include in freeradius-0.9.0 package. Thanks = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeBSD 4.8 FreeRadius-0.9.1 and MySQL 4.0.15 sucessfully compiled
hello, good day guys i just wanna share for those who got error (gethostbyname_r) in compiling Freebsd 4.8, FreeRadius-0.9.1 and Mysql with rlm_sqlcounter. Try to update the entire port your FreeBSD 4.8. = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin
Thank you very much Mr. Kalevras, maybe it work after updating the user_admin.php3 but my BIG problem now is to how to use CVS? :( but anyway thank you very much. = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin
Good day Mr. Kalevras i know this is not part of this mailing list. But im very glad if you can help me with this. When im trying to cvs: cvs -d :pserver:[EMAIL PROTECTED]:/source login then it promt for the password: Logging in to :pserver:[EMAIL PROTECTED]:2401/source CVS password: when i type anoncvs, nothing happens. Just came back to root. im using freebsd4.8 = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin
Thanks you, thank you, thank you, thank you very much Mr. Kalevras. :) it works after overwrite the origal user_admin.php3. hehehehe im very happy maybe i can replace our buggy and slow radius server after a few week of testing. = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin
Good day once again Mr. Kalevras, ive just copy the user_admin.php3 code from this site: http://cvs.sourceforge.net/viewcvs.py/dialup-admin/dialup_admin/htdocs/user_admin.php3?rev=1.14content-type=text/vnd.viewcvs-markup and make a new file with the same name (user_admin.php3) backup the original one then overwrite. Here's the output http://203.177.22.190. The problem still exist and maybe more worse than before, Monthly Limit which under in Subscription Analysis doesnt show up eventhough ive already add an entry. What im missing here? Im using Dialup_admin as part Freeradius 0.9.0 distribution. Thanks thanks thanks once again. = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dialup_admin
Mr. Kalevras, good day. I've already add Max-Monthly-Session in user_edit.attrs and also added in sql.attrmap. - user_edit.attrs #Max-Weekly-Session Weekly Limit (secs) Max-Monthly-Session Montly Limit (secs) - sql.attrmap checkItem Max-Monthly-Session Max-Monthly-Session What im missing here? Feel free to see the website http://203.177.22.190 thanks ... = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
rlm_sqlcounter cannot compile in FreeBSD 4.8
Hello guys, after sucessfully installed freeradius without experimental module. Our company decided to launch an prepaid internet. Now, im tried to reconfigure my freeradius with experimental module and here's the error after compiling. ### sh /usr/local/freeradius-snapshot-20030816/src/modules/rlm_sqlcounter/configure here's the Makefile # Generated automatically from Makefile.in by configure. TARGET = rlm_sqlcounter SRCS= rlm_sqlcounter.c HEADERS = RLM_CFLAGS = RLM_LIBS= RLM_INSTALL = include ../rules.mak $(STATIC_OBJS): $(HEADERS) $(DYNAMIC_OBJS): $(HEADERS) ## and here's the error after issuing make ../rules.mak, line 65: Missing dependency operator ../rules.mak, line 82: Missing dependency operator ../rules.mak, line 84: Need an operator ../rules.mak, line 86: Need an operator ../rules.mak, line 92: Missing dependency operator ../rules.mak, line 94: Need an operator ../rules.mak, line 123: Need an operator ../rules.mak, line 129: Need an operator make: fatal errors encountered -- cannot continue = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
cannot compile with --with-experimental-modules in freebsd 4.8
hello, im trying to install the latest cvs of freeradius (freeradius-snapshot-20030820)in freebsd 4.8, without experimental modules the radius almost work but since we are thinking of prepaid internet ( 10 hrs , 20 hrs and unlimited where consumable for one month) im trying to install with --with-experimental-modules and here my log: /configure --localstatedir=/var --sysconfdir=/etc --enable-ltdl-install --with-rlm-mysql-lib-dir=/usr/local/lib/mysql --with-rlm-mysql-include-dir=/usr/local/include/mysql --with-experimental-modules then make: /usr/local/freeradius-snapshot-20030820/libtool --mode=link ld \ -module -static -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwri ar cru rlm_realm.a rlm_realm.o ranlib rlm_realm.a gmake[5]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_realm' Making static dynamic in rlm_smb... gmake[5]: Entering directory `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_smb' gcc -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align -Wwrite-strings - gmake[5]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules/rlm_smb' gmake[4]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules' gmake[3]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src/modules' gmake[2]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src' gmake[1]: Leaving directory `/usr/local/freeradius-snapshot-20030820/src' *** Error code 2 Stop in /usr/local/freeradius-snapshot-20030820. anyone can suggest, please thanks = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
cannot compile with --with-experimental-modules in freebsd 4.8
sir, im trying to send my log but since the message is bigger than 65536 bytes - its refused. my mail bounce. if you have spare time to see my log here's the website. thanks configure: http://203.177.22.150:8080/configure.txt make http://203.177.22.150:8080/make.txt make install: http://203.177.22.150:8080/make-install.txt Sir i want to test the another option, what Mr. Paul Hampson said. how to add rlm_sqlcounter? Thank you very much = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
users configuration using mysql
hello, good day, i just want to know what is the users configuration if im using mysql as user information (database).i want to use chap as authentication. = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius FAQ (14.3)
After succesfull testing of my radius using radtest, i
tried to test using dial-up connection. It will say
the computer you are dialling cannot establish dial-up
connection. The problem is according to freeradius FAQ
14.3. The NAS has no idea which RADIUS server you use.
I run tcpdump udp on localhost here's the output:
16:27:33.075451 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 9]:
{dialup-008.mactan.ph}(1) {dialup-
16:27:34.013197 CM-14D.mactan.ph.1046
mail.mactan.ph.domain: 3373+ PTR?
188.22.177.203.in-addr.arpa. (45)
16:27:34.013892 mail.mactan.ph.domain
CM-14D.mactan.ph.1046: 3373* 1/1/1 (135)
16:27:34.014250 CM-14D.mactan.ph.1047
mail.mactan.ph.domain: 3374+ PTR?
160.22.177.203.in-addr.arpa. (45)
16:27:34.014909 mail.mactan.ph.domain
CM-14D.mactan.ph.1047: 3374* 1/1/1 (135)
16:27:34.015109 CM-14D.mactan.ph.1048
mail.mactan.ph.domain: 3375+ PTR?
163.22.177.203.in-addr.arpa. (45)
16:27:34.015766 mail.mactan.ph.domain
CM-14D.mactan.ph.1048: 3375* 1/1/1 (135)
16:27:35.012533 CM-14D.mactan.ph.1049
mail.mactan.ph.domain: 3376+ PTR?
151.22.177.203.in-addr.arpa. (45)
16:27:35.013226 mail.mactan.ph.domain
CM-14D.mactan.ph.1049: 3376* 2/1/1[|domain]
16:28:05.050417 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 9]:
{dialup-008.mactan.ph}(1) {dialup-
16:28:36.915323 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 9]:
{dialup-008.mactan.ph}(1) {dialup-
16:28:46.223213 210.23.208.159.1050
CM-14D.mactan.ph.netbios-ns: NBT UDP PACKET(137):
QUERY; REQUEST; BROADCAST
16:28:47.013783 CM-14D.mactan.ph.1050
mail.mactan.ph.domain: 3377+ PTR?
159.208.23.210.in-addr.arpa. (45)
16:28:47.305273 mail.mactan.ph.domain
CM-14D.mactan.ph.1050: 3377 NXDomain* 0/1/0 (134)
16:29:08.889632 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 9]:
{dialup-008.mactan.ph}(1) {dialup-
16:29:40.864544 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 9]:
{dialup-008.mactan.ph}(1) {dialup-
16:30:12.729307 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 9]:
{dialup-008.mactan.ph}(1) {dialup-
16:30:24.265651 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 1]:
{dialup-023.mactan.ph}(16)
16:30:24.305225 CM-14D.mactan.ph.1051
mail.mactan.ph.domain: 3378+ PTR?
175.22.177.203.in-addr.arpa. (45)
16:30:24.305888 mail.mactan.ph.domain
CM-14D.mactan.ph.1051: 3378* 1/1/1 (135)
is my analysis correct? that the NAS dont know where
radius server to use? because when i try to run radius
in debugging mode, it shown nothing but if i use
radtest then here's the output:
rad_recv: Access-Request packet from host
127.0.0.1:1052, id=243, length=60
Thread 2 assigned request 1
--- Walking the entire request list ---
Cleaning up request 0 ID 213 with timestamp 3f3f3713
Nothing to do. Sleeping until we see a request.
Thread 2 handling request 1, (1 handled so far)
User-Name = apellido
User-Password = apellido
NAS-IP-Address = 255.255.255.255
NAS-Port = 0
modcall: entering group authorize
modcall[authorize]: module preprocess returns ok
modcall[authorize]: module chap returns noop
rlm_realm: No '@' in User-Name = apellido,
looking up realm NULL
rlm_realm: No such realm NULL
modcall[authorize]: module suffix returns noop
radius_xlat: 'apellido'
rlm_sql (sql): sql_set_user escaped user --
'apellido'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op
FROM radcheck WHERE Username = 'apellido' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 3
radius_xlat: 'SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op
FROM radgroupcheck,usergroup WHERE usergroup.Username
= 'apellido' AND usergroup.GroupName =
radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id,UserName,Attribute,Value,op
FROM radreply WHERE Username = 'apellido' ORDER BY id'
radius_xlat: 'SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op
FROM radgroupreply,usergroup WHERE usergroup.Username
= 'apellido' AND usergroup.GroupName =
radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): Released sql socket id: 3
modcall[authorize]: module sql returns ok
modcall[authorize]: module mschap returns noop
modcall: group authorize returns ok
auth: type Local
auth: user supplied User-Password matches local
User-Password
Login OK: [apellido/apellido] (from client localhost
port 0)
Sending Access-Accept of id 243 to 127.0.0.1:1052
Framed-Compression = Van-Jacobson-TCP-IP
Framed-Protocol = PPP
Service-Type = Framed-User
Framed-MTU = 1500
Finished request 1
Going to the next request
Thread 2 waiting to be assigned a request
what attributes im missing? thanks in advance
=
[ apellido jr., wilfredo p. ]
+63 034 4880-449
If you can't hear me, it's because i'm in parentheses
whats wrong with my configuration?
# - Leave blank or commented out to disable
verification step
# - Note that the returned field order should not
be changed.
###
# Uncomment simul_count_query to enable simultaneous
use checking
# simul_count_query = SELECT COUNT(*) FROM
${acct_table1} WHERE UserName='%{SQL-User-Name}' AND
AcctStopTime = 0
simul_verify_query = SELECT RadAcctId,
AcctSessionId, UserName, NASIPAddress, NASPortId,
FramedIPAddress, CallingStationId, FramedProtocol FROM
${acct_table1} WHERE UserName='%{SQL-User-Name}' AND
AcctStopTime = 0
###
# Group Membership Queries
###
# group_membership_query- Check user group
membership
###
group_membership_query = SELECT GroupName FROM
${usergroup_table} WHERE UserName='%{SQL-User-Name}'
}
radiusd.sql
USE radius
INSERT INTO usergroup (UserName,GroupName) VALUES
('sam','dynamic');
INSERT INTO radcheck (UserName,Attribute,Value) VALUES
('sam','User-Password','sam');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Framed-Compression',
'Van-Jacobsen-TCP-IP');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Framed-Protocol','PPP');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES
('dynamic','Service-Type','Framed-User');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Auth-Type','Local');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Framed-MTU','1500');
=
[ apellido jr., wilfredo p. ]
+63 034 4880-449
If you can't hear me, it's because i'm in parentheses.
__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Authentication problem
of
current connections for verification
# - Leave blank or commented out to disable
verification step
# - Note that the returned field order should not
be changed.
###
# Uncomment simul_count_query to enable simultaneous
use checking
# simul_count_query = SELECT COUNT(*) FROM
${acct_table1} WHERE UserName='%{SQL-User-Name}' AND
AcctStopTime = 0
simul_verify_query = SELECT RadAcctId,
AcctSessionId, UserName, NASIPAddress, NASPortId,
FramedIPAddress, CallingStationId, FramedProtocol FROM
${acct_table1} WHERE UserName='%{SQL-User-Name}' AND
AcctStopTime = 0
###
# Group Membership Queries
###
# group_membership_query- Check user group
membership
###
group_membership_query = SELECT GroupName FROM
${usergroup_table} WHERE UserName='%{SQL-User-Name}'
}
radiusd.sql
USE radius
INSERT INTO usergroup (UserName,GroupName) VALUES
('sam','dynamic');
INSERT INTO radcheck (UserName,Attribute,Value) VALUES
('sam','User-Password','sam');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Framed-Compression',
'Van-Jacobsen-TCP-IP');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Framed-Protocol','PPP');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES
('dynamic','Service-Type','Framed-User');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Auth-Type','Local');
INSERT INTO radgroupreply (GroupName, Attribute,
Value) VALUES ('dynamic','Framed-MTU','1500');
=
[ apellido jr., wilfredo p. ]
+63 034 4880-449
If you can't hear me, it's because i'm in parentheses.
__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
(no subject)
juha, The NAS dont even send any auth request to radius server. When i run radiusd -xxyz -l stdout the Log doesnt show even some problem or what just saying ready to process. Do i need to put some Auth-Type in my users file? what is it? Thanks = [ apellido jr., wilfredo p. ] +63 034 4880-449 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? Yahoo! SiteBuilder - Free, easy-to-use web site design software http://sitebuilder.yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Authentication problem
juha,
The NAS dont even send any auth request to
radius server. When i run radiusd -xxyz -l stdout the
Log doesnt show even some problem or what just saying
ready to process. Do i need to put some Auth-Type in
my users file? what is it? I try to run tcpdump,
here's the output. Thanks
diameter# tcpdump udp
tcpdump: listening on rl0
10:55:05.346866 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 14]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:55:06.128642 diameter.mactan.ph.1035
mail.mactan.ph.domain: 6860+ PTR?
188.22.177.203.in-addr.arpa. (45)
10:55:06.129720 mail.mactan.ph.domain
diameter.mactan.ph.1035: 6860* 1/1/1 (135)
10:55:06.171196 diameter.mactan.ph.1036
mail.mactan.ph.domain: 6861+ PTR?
161.22.177.203.in-addr.arpa. (45)
10:55:06.171858 mail.mactan.ph.domain
diameter.mactan.ph.1036: 6861* 1/1/1 (135)
10:55:06.172071 diameter.mactan.ph.1037
mail.mactan.ph.domain: 6862+ PTR?
163.22.177.203.in-addr.arpa. (45)
10:55:06.172732 mail.mactan.ph.domain
diameter.mactan.ph.1037: 6862* 1/1/1 (135)
10:55:07.166119 diameter.mactan.ph.1038
mail.mactan.ph.domain: 6863+ PTR?
151.22.177.203.in-addr.arpa. (45)
10:55:07.166808 mail.mactan.ph.domain
diameter.mactan.ph.1038: 6863* 2/1/1[|domain]
10:55:31.831821 dialup-043.mactan.ph.netbios-dgm
223.177.22.191.netbios-dgm: NBT UDP PACKET(138)
10:55:31.831906 dialup-043.mactan.ph.netbios-ns
223.177.22.191.netbios-ns: NBT UDP PACKET(137): QUERY;
REQUEST; BROADCAST
10:55:32.166622 diameter.mactan.ph.1039
mail.mactan.ph.domain: 6864+ PTR?
145.22.177.203.in-addr.arpa. (45)
10:55:32.167302 mail.mactan.ph.domain
diameter.mactan.ph.1039: 6864* 1/1/1 (135)
10:55:32.583526 dialup-043.mactan.ph.netbios-ns
223.177.22.191.netbios-ns: NBT UDP PACKET(137): QUERY;
REQUEST; BROADCAST
10:55:33.03 dialup-043.mactan.ph.netbios-ns
223.177.22.191.netbios-ns: NBT UDP PACKET(137): QUERY;
REQUEST; BROADCAST
10:55:38.416101 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 14]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:56:03.467880 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 1]:
{dialup-020.mactan.ph}(16)
10:56:04.167083 diameter.mactan.ph.1040
mail.mactan.ph.domain: 6865+ PTR?
172.22.177.203.in-addr.arpa. (45)
10:56:04.167757 mail.mactan.ph.domain
diameter.mactan.ph.1040: 6865* 1/1/1 (135)
10:56:09.401609 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 14]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:56:41.706264 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 14]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:57:14.229926 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 14]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:57:46.760078 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 14]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:58:19.282467 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 13]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:58:51.802101 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 13]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
10:59:24.326142 portmaster.mactan.ph.router
203.177.22.191.router: RIPv1-resp [items 13]:
{dialup-009.mactan.ph}(1)
{dialup-011.mactan.ph}(1)[|rip]
=
[ apellido jr., wilfredo p. ]
+63 034 4880-449
If you can't hear me, it's because i'm in parentheses.
__
Do you Yahoo!?
Yahoo! SiteBuilder - Free, easy-to-use web site design software
http://sitebuilder.yahoo.com
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
