FreeRadius with MySQL
Title: Untitled Document
Hi!
Don't know why but when i try to
authentication an user using database don't work.
I commented that's lines in file
/etc/raddb/users
# First setup all accounts to be checked
against the UNIX /etc/passwd.# (Unless a password was already given earlier
in this file).##DEFAULT Auth-Type =
System# Fall-Through =
1
To force Auth-Type in databases and give
this error:
rad_recv: Access-Request
packet from host 192.168.0.60:32799, id=228,
length=61 User-Name =
"aferreira" User-Password =
"stag" NAS-IP-Address =
255.255.255.255 NAS-Port =
0modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request
0radius_xlat:
'/var/log/radius/radacct/192.168.0.60/auth-detail-20031210'rlm_detail:
/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to
/var/log/radius/radacct/192.168.0.60/auth-detail-20031210
modcall[authorize]: module "auth_log" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
modcall[authorize]: module "eap" returns noop for request
0 rlm_realm: No '@' in User-Name = "aferreira",
looking up realm NULL rlm_realm: No such realm
"NULL" modcall[authorize]: module "suffix" returns noop for request
0 modcall[authorize]: module "files" returns notfound for request
0 modcall[authorize]: module "mschap" returns noop for request
0modcall: group authorize returns ok for request 0auth: No
authenticate method (Auth-Type) configuration found for the request: Rejecting
the userauth: Failed to validate the user.Delaying request 0
for 1 seconds
Anybody know what de
happend?
Leandro
Sant'anaMeu Provedor Tecnologias e Informática
Ltda.Rua Camerino, 128 Grs.
302Centro - Rio de Janeiro - RJ - CEP 20080-010Tel.: 55 21 25181011
(PABX/FAX)Telefone Móvel - Celular: 55 21
8844-2645
mp.jpg
FreeRadius with MySQL
Leandro, See to it you included sql in authorization and accounting. Another helpful information ... http://www.frontios.com/freeradius.html = wilfredo pahilanga apellido jr. technical support mactan online bacolod city, philippines +63 34 4348311 If you can't hear me, it's because i'm in parentheses. __ Do you Yahoo!? New Yahoo! Photos - easier uploading and sharing. http://photos.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius with MySQL
Please read the FAQ before posting again. Turn off your Graphic and html. Leandro Sant'ana wrote: A bunch of html with a graphic covering the text - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius with MySQL
Leandro Sant'ana [EMAIL PROTECTED] wrote: I commented that's lines in file /etc/raddb/users ... #DEFAULT Auth-Type =3D System #Fall-Through =3D 1 To force Auth-Type in databases No. Uncommenting that line means you forced it to NOT use System authentication. But you didn't tell it what OTHER authentication method to use, so the server failed. modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Did you try setting an Auth-Type somewhere? What part of the error message is unclear? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Cisco Aironet MAC Auth to FreeRadius with mysql backend
Hi David.
Did you manage to make it work?
On Thu, 18 Sep 2003 11:05:36 -0700
David Chait [EMAIL PROTECTED] wrote:
Greetings,
I have managed to get this most of the way configured on my own, however
the lack of docs has lead to me a dead end. I cannot seem to get the Aironet
to do an Auth request, only an Accounting request. Cisco isn't much help
unfortunately so I will post my config below as well as the debug responses,
hopefully someone can find my mistake. Ideally I would like to create a DB
of allowable MAC addresses via mysql and have the AP's refference that,
denying all requests not on that list.
Thanks,
David
[EMAIL PROTECTED] sbin]# ./radiusd -X
Starting - reading configuration files ...
reread_config: reading radiusd.conf
Config: including file: /usr/local/etc/raddb/proxy.conf
Config: including file: /usr/local/etc/raddb/clients.conf
Config: including file: /usr/local/etc/raddb/snmp.conf
Config: including file: /usr/local/etc/raddb/sql.conf
main: prefix = /usr/local
main: localstatedir = /usr/local/var
main: logdir = /usr/local/var/log/radius
main: libdir = /usr/local/lib
main: radacctdir = /usr/local/var/log/radius/radacct
main: hostname_lookups = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 0
main: allow_core_dumps = no
main: log_stripped_names = no
main: log_file = /usr/local/var/log/radius/radius.log
main: log_auth = no
main: log_auth_badpass = no
main: log_auth_goodpass = no
main: pidfile = /usr/local/var/run/radiusd/radiusd.pid
main: user = (null)
main: group = (null)
main: usercollide = no
main: lower_user = no
main: lower_pass = no
main: nospace_user = no
main: nospace_pass = no
main: checkrad = /usr/local/sbin/checkrad
main: proxy_requests = yes
proxy: retry_delay = 5
proxy: retry_count = 3
proxy: synchronous = no
proxy: default_fallback = yes
proxy: dead_time = 120
proxy: post_proxy_authorize = yes
proxy: wake_all_if_all_dead = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
Using deprecated naslist file. Support for this will go away soon.
read_config_files: reading clients
Using deprecated clients file. Support for this will go away soon.
read_config_files: reading realms
Using deprecated realms file. Support for this will go away soon.
radiusd: entering modules setup
Module: Library search path is /usr/local/lib
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap: encryption_scheme = crypt
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = no
mschap: require_strong = no
mschap: passwd = (null)
mschap: authtype = MS-CHAP
Module: Instantiated mschap (mschap)
Module: Loaded eap
eap: default_eap_type = md5
eap: timer_expire = 60
rlm_eap: Loaded and initialized the type md5
rlm_eap: Loaded and initialized the type leap
Module: Instantiated eap (eap)
Module: Loaded preprocess
preprocess: huntgroups = /usr/local/etc/raddb/huntgroups
preprocess: hints = /usr/local/etc/raddb/hints
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
realm: format = suffix
realm: delimiter = @
Module: Instantiated realm (suffix)
Module: Loaded SQL
sql: driver = rlm_sql_mysql
sql: server = localhost
sql: port =
sql: login = root
sql: password =
sql: radius_db = radius
sql: acct_table = radacct
sql: acct_table2 = radacct
sql: authcheck_table = radcheck
sql: authreply_table = radreply
sql: groupcheck_table = radgroupcheck
sql: groupreply_table = radgroupreply
sql: usergroup_table = usergroup
sql: nas_table = nas
sql: dict_table = dictionary
sql: sqltrace = no
sql: sqltracefile = /usr/local/var/log/radius/sqltrace.sql
sql: deletestalesessions = yes
sql: num_sql_socks = 5
sql: sql_user_name = %{User-Name}
sql: default_user_profile =
sql: query_on_not_found = no
sql: authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id
sql: authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id
sql: authorize_group_check_query = SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche
ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName =
radgroupcheck.GroupName ORDER BY radgroupcheck.id
sql:
Cisco Aironet MAC Auth to FreeRadius with mysql backend
Greetings,
I have managed to get this most of the way configured on my own, however
the lack of docs has lead to me a dead end. I cannot seem to get the Aironet
to do an Auth request, only an Accounting request. Cisco isn't much help
unfortunately so I will post my config below as well as the debug responses,
hopefully someone can find my mistake. Ideally I would like to create a DB
of allowable MAC addresses via mysql and have the AP's refference that,
denying all requests not on that list.
Thanks,
David
[EMAIL PROTECTED] sbin]# ./radiusd -X
Starting - reading configuration files ...
reread_config: reading radiusd.conf
Config: including file: /usr/local/etc/raddb/proxy.conf
Config: including file: /usr/local/etc/raddb/clients.conf
Config: including file: /usr/local/etc/raddb/snmp.conf
Config: including file: /usr/local/etc/raddb/sql.conf
main: prefix = /usr/local
main: localstatedir = /usr/local/var
main: logdir = /usr/local/var/log/radius
main: libdir = /usr/local/lib
main: radacctdir = /usr/local/var/log/radius/radacct
main: hostname_lookups = no
main: max_request_time = 30
main: cleanup_delay = 5
main: max_requests = 1024
main: delete_blocked_requests = 0
main: port = 0
main: allow_core_dumps = no
main: log_stripped_names = no
main: log_file = /usr/local/var/log/radius/radius.log
main: log_auth = no
main: log_auth_badpass = no
main: log_auth_goodpass = no
main: pidfile = /usr/local/var/run/radiusd/radiusd.pid
main: user = (null)
main: group = (null)
main: usercollide = no
main: lower_user = no
main: lower_pass = no
main: nospace_user = no
main: nospace_pass = no
main: checkrad = /usr/local/sbin/checkrad
main: proxy_requests = yes
proxy: retry_delay = 5
proxy: retry_count = 3
proxy: synchronous = no
proxy: default_fallback = yes
proxy: dead_time = 120
proxy: post_proxy_authorize = yes
proxy: wake_all_if_all_dead = no
security: max_attributes = 200
security: reject_delay = 1
security: status_server = no
main: debug_level = 0
read_config_files: reading dictionary
read_config_files: reading naslist
Using deprecated naslist file. Support for this will go away soon.
read_config_files: reading clients
Using deprecated clients file. Support for this will go away soon.
read_config_files: reading realms
Using deprecated realms file. Support for this will go away soon.
radiusd: entering modules setup
Module: Library search path is /usr/local/lib
Module: Loaded expr
Module: Instantiated expr (expr)
Module: Loaded PAP
pap: encryption_scheme = crypt
Module: Instantiated pap (pap)
Module: Loaded CHAP
Module: Instantiated chap (chap)
Module: Loaded MS-CHAP
mschap: use_mppe = yes
mschap: require_encryption = no
mschap: require_strong = no
mschap: passwd = (null)
mschap: authtype = MS-CHAP
Module: Instantiated mschap (mschap)
Module: Loaded eap
eap: default_eap_type = md5
eap: timer_expire = 60
rlm_eap: Loaded and initialized the type md5
rlm_eap: Loaded and initialized the type leap
Module: Instantiated eap (eap)
Module: Loaded preprocess
preprocess: huntgroups = /usr/local/etc/raddb/huntgroups
preprocess: hints = /usr/local/etc/raddb/hints
preprocess: with_ascend_hack = no
preprocess: ascend_channels_per_line = 23
preprocess: with_ntdomain_hack = no
preprocess: with_specialix_jetstream_hack = no
preprocess: with_cisco_vsa_hack = no
Module: Instantiated preprocess (preprocess)
Module: Loaded realm
realm: format = suffix
realm: delimiter = @
Module: Instantiated realm (suffix)
Module: Loaded SQL
sql: driver = rlm_sql_mysql
sql: server = localhost
sql: port =
sql: login = root
sql: password =
sql: radius_db = radius
sql: acct_table = radacct
sql: acct_table2 = radacct
sql: authcheck_table = radcheck
sql: authreply_table = radreply
sql: groupcheck_table = radgroupcheck
sql: groupreply_table = radgroupreply
sql: usergroup_table = usergroup
sql: nas_table = nas
sql: dict_table = dictionary
sql: sqltrace = no
sql: sqltracefile = /usr/local/var/log/radius/sqltrace.sql
sql: deletestalesessions = yes
sql: num_sql_socks = 5
sql: sql_user_name = %{User-Name}
sql: default_user_profile =
sql: query_on_not_found = no
sql: authorize_check_query = SELECT id,UserName,Attribute,Value,op FROM
radcheck WHERE Username = '%{SQL-User-Name}' ORDER BY id
sql: authorize_reply_query = SELECT id,UserName,Attribute,Value,op FROM
radreply WHERE Username = '%{SQL-User-Name}' ORDER BY id
sql: authorize_group_check_query = SELECT
radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupche
ck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName =
radgroupcheck.GroupName ORDER BY radgroupcheck.id
sql: authorize_group_reply_query = SELECT
radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgrouprep
ly.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE
usergroup.Username = '%{SQL-User-Name}' AND usergroup.GroupName =
radgroupreply.GroupName
freeradius and mysql connectivity
hi, I am studying about the freeradius and want to connect it to the mysql server. But the problem is that mysql server refusses the connection when I run radius in debug mode. even the "biulddbm" command doesn't work. Please mail me some more information about the mysql connectivity.I am not comfortable with the present documentation in 0.8.1. I would be very thankful to you. cheers. SMS using the Yahoo! Messenger; Download latest version.
Re: freeradius and mysql connectivity
On Wed, Jul 09, 2003 at 09:30:17AM +0100, Nitin Kaushik wrote: hi, I am studying about the freeradius and want to connect it to the mysql server. But the problem is that mysql server refusses the connection when I run radius in debug mode. Check if mysqld is running. Check if you can connect to your database using mysql cli. even the biulddbm command doesn't work. Where can I find this builddbm command? Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql connectivity
On Wed, 9 Jul 2003 12:17 pm, Oliver Graf wrote: On Wed, Jul 09, 2003 at 09:30:17AM +0100, Nitin Kaushik wrote: hi, I am studying about the freeradius and want to connect it to the mysql server. But the problem is that mysql server refusses the connection when I run radius in debug mode. Check if mysqld is running. Check if you can connect to your database using mysql cli. even the biulddbm command doesn't work. Where can I find this builddbm command? I think he means builddbm which would seem to be a command related to dbm and nothing to do with MySQL. I think he is a little confused.. -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql connectivity
On Wed, Jul 09, 2003 at 12:32:57PM +0300, Peter Nixon wrote: Where can I find this builddbm command? I think he means builddbm which would seem to be a command related to dbm and nothing to do with MySQL. I think he is a little confused.. Normally I would say there is no such thing as a 'dump question', but reading this list has helped me to revise my view. Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
So the question is: where would he like to use MD5? to encrypt the password on the AAA server or does the nokia nas talk some strange protocol which uses MD5 encryption (I bet it's the first one)? I try to use freeradius with Ldap.I store the user password in Ldap using a md5 password.All work fine.The server radius takes the md5 password from ldap and the user can authenticate and accounting.I have ldap in authorize and authenticate section. After I try to use freeradius with mysql.With clear password all work fine,but with an md5 password stored in mysql the user cannot authenticate. I put sql in autorize and Auth-type=local as default in user file. I hope that now is more clear my problem. Thanks Roberto --- This mail sent through CSP Webmail System - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius 0.8.1 + mysql + password md5
I try to use freeradius whith user in mysql and all work fine if I use clear password. If I use the web interface to write md5 password in the mysql db when I try to anthenticate I'm reject. If I use the web interface whit clear password option I have no problem. How can I use cripted password with mysql? Thanks Robert Pioli - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: freeradius 0.8.1 + mysql + password md5
Hi Robert, It is the authentication method that the client-nas have decided on that determines what format the password needs to be in. The CHAP method requires clear text passwords. The MS-CHAP method requires a NT-PASSWORD or LM-PASSWORD format. The PAP method requires... and so on. Regards Mike D. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Roberto Pioli Sent: 13 June 2003 10:52 To: [EMAIL PROTECTED] Subject: freeradius 0.8.1 + mysql + password md5 I try to use freeradius whith user in mysql and all work fine if I use clear password. If I use the web interface to write md5 password in the mysql db when I try to anthenticate I'm reject. If I use the web interface whit clear password option I have no problem. How can I use cripted password with mysql? Thanks Robert Pioli - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
Hi Robert, It is the authentication method that the client-nas have decided on that determines what format the password needs to be in. The CHAP method requires clear text passwords. The MS-CHAP method requires a NT-PASSWORD or LM-PASSWORD format. The PAP method requires... and so on. thanks and so If I wantto use an MD5 password it is not possible!?! Rob Regards Mike D. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
On Fri, Jun 13, 2003 at 11:55:26AM +0200, Roberto Pioli wrote: Hi Robert, It is the authentication method that the client-nas have decided on that determines what format the password needs to be in. The CHAP method requires clear text passwords. The MS-CHAP method requires a NT-PASSWORD or LM-PASSWORD format. The PAP method requires... and so on. The PAP method requires nothing. PAP states that a clear text password is sent over the line. How it is compared against a stored password is in your hands. It's the standart problem: will the hacker hijack your phone lines an sniff clear text PAP passwords, or will he hack your servers and see those clear text passwords required for CHAP in your database? thanks and so If I wantto use an MD5 password it is not possible!?! If you use CHAP, you need clear text passwords. With PAP you can use any encryption supported by freeradius. the standart crypt of glibc2 will also support md5 crypts, if the crypted password (use the Crypt-Password Attribute in your mysql db) has a certain format: $1$SEED$CRYPT (see man crypt o your glibc2 system). If you don't have glibc2 you have to use the pap module of freeradius. This is a bit tricky, cause freeradius will do an string compare of passwords if it finds a Password attribute, and so rlm_pap gets not called. I send a patch for this to the list two days ago. Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
On Fri, Jun 13, 2003 at 12:38:29PM +0200, Oliver Graf wrote: thanks and so If I wantto use an MD5 password it is not possible!?! If you use CHAP, you need clear text passwords. With PAP you can use any encryption supported by freeradius. the standart crypt of glibc2 will also support md5 crypts, if the crypted password (use the Crypt-Password Attribute in your mysql db) has a certain format: $1$SEED$CRYPT (see man crypt o your glibc2 system). Just another note: if you don't use the pap module, please note that using the internal crypt of freeradius is not thread-safe. It will start failing all crypted auths after some hours (if crypt is used by multiple threads at the same time). mod PAP has a mutex against it, but you will have a hard time getting freeradius to use it (as I said: search the list for my patches). Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: freeradius 0.8.1 + mysql + password md5
From: Oliver Graf Sent: Friday, 13 June 2003 8:43 PM On Fri, Jun 13, 2003 at 12:38:29PM +0200, Oliver Graf wrote: thanks and so If I wantto use an MD5 password it is not possible!?! With PAP you can use any encryption supported by freeradius. the standart crypt of glibc2 will also support md5 crypts, if the crypted password (use the Crypt-Password Attribute in your mysql db) has a certain format: $1$SEED$CRYPT (see man crypt o your glibc2 system). mod PAP has a mutex against it, but you will have a hard time getting freeradius to use it (as I said: search the list for my patches). Huh? I've got mysql+freeradius (CVS, mind you) + PAP/md5 working fine here I think... Passwords in the database are store with MD5(password), and it auths OK... Is the patch you're referring to freeradius-cvs-cryptmutex.diff?? Maybe you're solving a problem I don't have, but I'm wondering why I've not _got_ that problem. Quick glance at the patch, it matters only if your use Crypt-Password instead of Password? Bleh, over my head. I can post my config sans comments if it you're willing to explain why I'm not having problems. -- = Paul TBBle Hampson Bubblesworth Pty Ltd (ABN: 51 095 284 361) [EMAIL PROTECTED] The Creation of the Universe was made possible by a grant from Texas Instruments. -- PBS - Random signature generator 3.0 by Paul TBBle Hampson = - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
On Fri, Jun 13, 2003 at 09:15:45PM +1000, Paul Hampson wrote: From: Oliver Graf Sent: Friday, 13 June 2003 8:43 PM On Fri, Jun 13, 2003 at 12:38:29PM +0200, Oliver Graf wrote: thanks and so If I wantto use an MD5 password it is not possible!?! With PAP you can use any encryption supported by freeradius. the standart crypt of glibc2 will also support md5 crypts, if the crypted password (use the Crypt-Password Attribute in your mysql db) has a certain format: $1$SEED$CRYPT (see man crypt o your glibc2 system). mod PAP has a mutex against it, but you will have a hard time getting freeradius to use it (as I said: search the list for my patches). Huh? I've got mysql+freeradius (CVS, mind you) + PAP/md5 working fine here I think... Passwords in the database are store with MD5(password), and it auths OK... Is the patch you're referring to freeradius-cvs-cryptmutex.diff?? Maybe you're solving a problem I don't have, but I'm wondering why I've not _got_ that problem. Yup, if you use rlm_pap, scheme md5, you are fine. You are not fine if you use crypt, and crypt is made by main/auth.c rlm_pap is thread-safe. Quick glance at the patch, it matters only if your use Crypt-Password instead of Password? Bleh, over my head. I can post my config sans comments if it you're willing to explain why I'm not having problems. Yep. Only if you use Crypt-Password. rlm_pap uses the Password attribute. Perhaps it is only a documentation bug, but the the fallback crypt in auth.c is vulnerable in any way. I'm all open for your config. The problem is that you have many ways to get freeradius to work. Even ways that should not work (I used Auth-Type := 'Login' which is nonexistent, gave me no error, but worked!) work sometimes... So what freeradius needs is lots of clarifications, I think. Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
The PAP method requires nothing. PAP states that a clear text password is sent over the line. How it is compared against a stored password is in your hands. It's the standart problem: will the hacker hijack your phone lines an sniff clear text PAP passwords, or will he hack your servers and see those clear text passwords required for CHAP in your database? thanks but the problem is that I'm using the nokia p022 access controller that don't use Pap but normal radius. So in authorize I use sql but in authtntication I use local. What can I use for md5? Thanks Rob - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: freeradius 0.8.1 + mysql + password md5
Hi, I think we are all going in different directions with this one. that don't use Pap but normal radius. What do you mean by normal radius ? what are you expecting? What function does the Nokia box perform for you. What type of authentication will it be doing? Regards Mike D. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Roberto Pioli Sent: 13 June 2003 01:48 To: [EMAIL PROTECTED] Subject: Re: freeradius 0.8.1 + mysql + password md5 The PAP method requires nothing. PAP states that a clear text password is sent over the line. How it is compared against a stored password is in your hands. It's the standart problem: will the hacker hijack your phone lines an sniff clear text PAP passwords, or will he hack your servers and see those clear text passwords required for CHAP in your database? thanks but the problem is that I'm using the nokia p022 access controller that don't use Pap but normal radius. So in authorize I use sql but in authtntication I use local. What can I use for md5? Thanks Rob - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius 0.8.1 + mysql + password md5
On Fri, Jun 13, 2003 at 04:27:05PM +0200, Michael Davidson wrote: thanks but the problem is that I'm using the nokia p022 access controller that don't use Pap but normal radius. So in authorize I use sql but in authtntication I use local. What can I use for md5? Hi, I think we are all going in different directions with this one. that don't use Pap but normal radius. What do you mean by normal radius ? what are you expecting? Yep, you are right... Mr. Pioli seems not to know where to put which protocol. PAP and CHAP are authetication schemes of PPP, which is done between CPE (the 'modem') and NAS (the nokia in this case). PAP transfers a username and a password clear text over the PPP connection, CHAP transfers a station name and a encrypted string over the PPP connection. RADIUS is a protocol in which the NAS (nokia) talks to the AAA server (freeradius). The AAA server has to have some data about the user (username and password). Normally the password is encrypted (except with CHAP, cause chap needs a clear text password) in local storage. This can be done with many different methods. So the question is: where would he like to use MD5? to encrypt the password on the AAA server or does the nokia nas talk some strange protocol which uses MD5 encryption (I bet it's the first one)? Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRadius and MySQL installation GENERAL ANSWER!!!
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi there, because exist too much question, please find one GENERAL answer to all question for Radius-MySQL installation is a file RADIUS-SQL.schema in /doc folder. or just: http://www.frontios.com/freeradius.html please read it carefully and install all thinks that described. best regards, Oleg - -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Sent: Thursday, June 12, 2003 8:25 AM To: [EMAIL PROTECTED] Subject: Re: problem compiling freeradius rlm_sql_mysql module Hi Before compile your FreeRADIUS, please install the develope package of MySQL. Jeson [EMAIL PROTECTED] 2003-06-12 I try compiling freeradius 0.8.1 on a red hat 9 with mysql installed with rpm. I use ./configure --with-mysql-include-dir ,but the module rlm_sql_mysql is not compiled. How can I do? Thanks Teb! - - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -BEGIN PGP SIGNATURE- Version: PGP 8.0 iQA/AwUBPuhA5czLGGLKlEfaEQJ8OACgsTNEemsrg6PpdBG3BWbyV1/jH0cAoIt4 SMSg66Jlkwj8mszEpOkbsR75 =VQbU -END PGP SIGNATURE- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius with Mysql under Solaris can't work
Thanks again. I have check the Makefile in rlm_sql_mysql directory. It says: TARGET = rlm_sql_mysql SRCS = sql_mysql.c And rlm_sql_mysql.a rlm_sql_mysql.la are both generated. So I think it's not my fault to configure the project. Hi Zasp, Yes. When you do make, there are no error were report, but look= through the information, you will find make do nothing with= rlm_sql_mysql. And the TARGET entry in Makefile in the= correspond directory is empty. If your configure find the head= file and shared library, this entry will be filled with= rlm_sql_mysql. Please check it. =09 Jeson [EMAIL PROTECTED] =A1=A12003-06-05 If I remember correctly the development package for MySQL that= comes from sunfreeware puts the files in the wrong location for= freeradius to look for them. You can specify the location of= the files or you can download the source and install from that.= Solaris 8 and 9 fixed the location problem without having ro= specify. Gene Parks VIP Direct -Original Message- From: [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 8:49 AM To: [EMAIL PROTECTED] Subject: Re: FreeRadius with Mysql under Solaris can't work Thanks to Jeson. The MYSQL package is downloaded from sunfreeware and installed= directly by pkgadd command. I am sure there are development= header and lib included. Files in the lib directory are as= follows: =09=09libdbug.a libmygcc.a libmysqlclient.a libmysqlclient_r.a =09=09libmystrings.a libmysys.a By the way, I had ever compiled and installed mysql 3.23.52 from= source package. When I do install freeradius with configure, make and make= install, there is no error reported. So I don't think it's the= reason. Am I right? Best, =09Zasp Hi, Please make sure you have the MySQL development package,= FreeRADIUS compile the rlm_sql_mysql module need the include file from= MySQL development package. Enjoy it!=09 =1B$B!!=1B(J =1B$B!!=1B(JJeson Hi,all =09I want to use freeradius with mysql support under Solaris= sparc 2.7. I meet the same problem as many newbies when I start radiusd: =09rlm_sql (sql): Could not link driver rlm_sql_mysql: file not= found =09rlm_sql (sql): Make sure it (and all its dependent= libraries!) are in the search path of your system's ld. =09radiusd.conf[14]: sql: Module instantiation failed. =09All methods have been tried but failed. MySQL is working= well.=3D I try to compile freeradius under gcc 3.2.3 as FAQ says= configure --disable-shared, or set proper LD_LIBRARY_PATH variable, or= copy the dynamic lib files to /usr/lib. But the problem keeps= here. =09When I do use rlm_unix not rlm_sql_mysql for authentication,= it works well. I have been confused for several days. Maybe anyone can help= me? Thanks :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Re: FreeRadius with Mysql under Solaris can't work
Hi Zasp, Do you get the rlm_sql_mysql.so? If not, please recompile your freeRadius project with configure --enable-static. By default, freeRadius use the shared library. Or, you can try to use the environment variable LD_PRELOAD=/path/your/rlm_sql_mysql. Jeson [EMAIL PROTECTED] 2003-06-06 Thanks again. I have check the Makefile in rlm_sql_mysql directory. It says: TARGET = rlm_sql_mysql SRCS = sql_mysql.c And rlm_sql_mysql.a rlm_sql_mysql.la are both generated. So I think it's not my fault to configure the project. Hi Zasp, Yes. When you do make, there are no error were report, but look= through the information, you will find make do nothing with= rlm_sql_mysql. And the TARGET entry in Makefile in the= correspond directory is empty. If your configure find the head= file and shared library, this entry will be filled with= rlm_sql_mysql. Please check it. =09 Jeson [EMAIL PROTECTED] =A1=A12003-06-05 If I remember correctly the development package for MySQL that= comes from sunfreeware puts the files in the wrong location for= freeradius to look for them. You can specify the location of= the files or you can download the source and install from that.= Solaris 8 and 9 fixed the location problem without having ro= specify. Gene Parks VIP Direct -Original Message- From: [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 8:49 AM To: [EMAIL PROTECTED] Subject: Re: FreeRadius with Mysql under Solaris can't work Thanks to Jeson. The MYSQL package is downloaded from sunfreeware and installed= directly by pkgadd command. I am sure there are development= header and lib included. Files in the lib directory are as= follows: =09=09libdbug.a libmygcc.a libmysqlclient.a libmysqlclient_r.a =09=09libmystrings.a libmysys.a By the way, I had ever compiled and installed mysql 3.23.52 from= source package. When I do install freeradius with configure, make and make= install, there is no error reported. So I don't think it's the= reason. Am I right? Best, =09Zasp Hi, Please make sure you have the MySQL development package,= FreeRADIUS compile the rlm_sql_mysql module need the include file from= MySQL development package. Enjoy it!=09 =1B$B!!=1B(J =1B$B!!=1B(JJeson Hi,all =09I want to use freeradius with mysql support under Solaris= sparc 2.7. I meet the same problem as many newbies when I start radiusd: =09rlm_sql (sql): Could not link driver rlm_sql_mysql: file not= found =09rlm_sql (sql): Make sure it (and all its dependent= libraries!) are in the search path of your system's ld. =09radiusd.conf[14]: sql: Module instantiation failed. =09All methods have been tried but failed. MySQL is working= well.=3D I try to compile freeradius under gcc 3.2.3 as FAQ says= configure --disable-shared, or set proper LD_LIBRARY_PATH variable, or= copy the dynamic lib files to /usr/lib. But the problem keeps= here. =09When I do use rlm_unix not rlm_sql_mysql for authentication,= it works well. I have been confused for several days. Maybe anyone can help= me? Thanks :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius with Mysql under Solaris can't work
Thanks to Jeson. The MYSQL package is downloaded from sunfreeware and installed directly by pkgadd command. I am sure there are development header and lib included. Files in the lib directory are as follows: libdbug.a libmygcc.a libmysqlclient.a libmysqlclient_r.a libmystrings.a libmysys.a By the way, I had ever compiled and installed mysql 3.23.52 from source package. When I do install freeradius with configure, make and make install, there is no error reported. So I don't think it's the reason. Am I right? Best, Zasp Hi, Please make sure you have the MySQL development package, FreeRADIUS compile the rlm_sql_mysql module need the include file from MySQL development package. Enjoy it! Jeson Hi,all I want to use freeradius with mysql support under Solaris sparc 2.7. I meet the same problem as many newbies when I start radiusd: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. All methods have been tried but failed. MySQL is working well.= I try to compile freeradius under gcc 3.2.3 as FAQ says configure --disable-shared, or set proper LD_LIBRARY_PATH variable, or copy the dynamic lib files to /usr/lib. But the problem keeps here. When I do use rlm_unix not rlm_sql_mysql for authentication, it works well. I have been confused for several days. Maybe anyone can help me? Thanks :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRadius with Mysql under Solaris can't work
If I remember correctly the development package for MySQL that comes from sunfreeware (Bputs the files in the wrong location for freeradius to look for them. You can specify (Bthe location of the files or you can download the source and install from that. (BSolaris 8 and 9 fixed the location problem without having ro specify. (B (BGene Parks (BVIP Direct (B (B-Original Message- (BFrom: [mailto:[EMAIL PROTECTED] (BSent: Wednesday, June 04, 2003 8:49 AM (BTo: [EMAIL PROTECTED] (BSubject: Re: FreeRadius with Mysql under Solaris can't work (B (B (BThanks to Jeson. (B (BThe MYSQL package is downloaded from sunfreeware and installed directly by pkgadd (Bcommand. I am sure there are development header and lib included. Files in the lib (Bdirectory are as follows: (Blibdbug.a libmygcc.a libmysqlclient.a libmysqlclient_r.a (Blibmystrings.a libmysys.a (B (BBy the way, I had ever compiled and installed mysql 3.23.52 from source package. (B (BWhen I do install freeradius with configure, make and make install, there is no error (Breported. So I don't think it's the reason. (B (BAm I right? (B (BBest, (BZasp (B (BHi, (B (B Please make sure you have the MySQL development package, FreeRADIUS (B compile the rlm_sql_mysql module need the include file from MySQL (B development package. (B (B Enjoy it! (B (B $B!!(J $B!!(JJeson (B (B (BHi,all (B I want to use freeradius with mysql support under Solaris sparc 2.7. (BI meet the same (Bproblem as many newbies when I start radiusd: (B (B rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found (B rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the (B search path of your system's ld. (B radiusd.conf[14]: sql: Module instantiation failed. (B (B All methods have been tried but failed. MySQL is working well.= I (Btry to compile freeradius under gcc 3.2.3 as FAQ says "configure (B--disable-shared", or set proper LD_LIBRARY_PATH variable, or copy (Bthe dynamic lib files to /usr/lib. But the problem keeps here. (B (B When I do use rlm_unix not rlm_sql_mysql for authentication, it works (Bwell. (B I have been confused for several days. Maybe anyone can help me? Thanks :) (B (B (B (B (B- (BList info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html (B (B- (BList info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: FreeRadius with Mysql under Solaris can't work
Hi Zasp, Yes. When you do make, there are no error were report, but look through the information, you will find make do nothing with rlm_sql_mysql. And the TARGET entry in Makefile in the correspond directory is empty. If your configure find the head file and shared library, this entry will be filled with rlm_sql_mysql. Please check it. Jeson [EMAIL PROTECTED] 2003-06-05 If I remember correctly the development package for MySQL that comes from sunfreeware puts the files in the wrong location for freeradius to look for them. You can specify the location of the files or you can download the source and install from that. Solaris 8 and 9 fixed the location problem without having ro specify. Gene Parks VIP Direct -Original Message- From: [mailto:[EMAIL PROTECTED] Sent: Wednesday, June 04, 2003 8:49 AM To: [EMAIL PROTECTED] Subject: Re: FreeRadius with Mysql under Solaris can't work Thanks to Jeson. The MYSQL package is downloaded from sunfreeware and installed directly by pkgadd command. I am sure there are development header and lib included. Files in the lib directory are as follows: libdbug.a libmygcc.a libmysqlclient.a libmysqlclient_r.a libmystrings.a libmysys.a By the way, I had ever compiled and installed mysql 3.23.52 from source package. When I do install freeradius with configure, make and make install, there is no error reported. So I don't think it's the reason. Am I right? Best, Zasp Hi, Please make sure you have the MySQL development package, FreeRADIUS compile the rlm_sql_mysql module need the include file from MySQL development package. Enjoy it! $B!!(J $B!!(JJeson Hi,all I want to use freeradius with mysql support under Solaris sparc 2.7. I meet the same problem as many newbies when I start radiusd: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. All methods have been tried but failed. MySQL is working well.= I try to compile freeradius under gcc 3.2.3 as FAQ says configure --disable-shared, or set proper LD_LIBRARY_PATH variable, or copy the dynamic lib files to /usr/lib. But the problem keeps here. When I do use rlm_unix not rlm_sql_mysql for authentication, it works well. I have been confused for several days. Maybe anyone can help me? Thanks :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius with Mysql under Solaris can't work
Yes. As you say, I have altered the MySQL include directory location under Solaris 7, otherwise it can't compile correctly. Now I can't go on the project with MySQL support. I have been discouraged by this unsolved problem. If I remember correctly the development package for MySQL that comes from sunfreeware puts the files in the wrong location for freeradius to look for them. You can specify the location of the files or you can download the source and install from that. Solaris 8 and 9 fixed the location problem without having ro specify. Gene Parks VIP Direct Thanks to Jeson. The MYSQL package is downloaded from sunfreeware and installed directly by pkgadd command. I am sure there are development header and lib included. Files in the lib directory are as follows: libdbug.a libmygcc.a libmysqlclient.a libmysqlclient_r.a libmystrings.a libmysys.a By the way, I had ever compiled and installed mysql 3.23.52 from source package. When I do install freeradius with configure, make and make install, there is no error reported. So I don't think it's the reason. Am I right? Hi, Please make sure you have the MySQL development package, FreeRADIUS compile the rlm_sql_mysql module need the include file from MySQL development package. Hi,all I want to use freeradius with mysql support under Solaris sparc 2.7. I meet the same problem as many newbies when I start radiusd: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. All methods have been tried but failed. MySQL is working well. I try to compile freeradius under gcc 3.2.3 as FAQ says configure --disable-shared, or set proper LD_LIBRARY_PATH variable, or copy the dynamic lib files to /usr/lib. But the problem keeps here. When I do use rlm_unix not rlm_sql_mysql for authentication, it works well. I have been confused for several days. Maybe anyone can help me? Thanks :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius with Mysql under Solaris can't work
Hi, Please make sure you have the MySQL development package, FreeRADIUS compile the rlm_sql_mysql module need the include file from MySQL development package. Enjoy it! Jeson Welcome to: http://www.zyxel.com [EMAIL PROTECTED] 2003-06-04 === 2003-06-04 15:57:00 === Hi,all I want to use freeradius with mysql support under Solaris sparc 2.7. I meet the same problem as many newbies when I start radiusd: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. All methods have been tried but failed. MySQL is working well. I try to compile freeradius under gcc 3.2.3 as FAQ says configure --disable-shared, or set proper LD_LIBRARY_PATH variable, or copy the dynamic lib files to /usr/lib. But the problem keeps here. When I do use rlm_unix not rlm_sql_mysql for authentication, it works well. I have been confused for several days. Maybe anyone can help me? Thanks :) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius and mysql on solaris
i'm having problems compiling freeradius v0.8.1 on a solaris 9 machine with mysql support and any help would be greatly appreciated. here's some more details on the setup. solaris 9 (12/02) freeradius v0.8.1 mysql 3.23.53 (from sunfreeware.com) mysql base dir is at /usr/local/mysql with includes at /usr/local/mysql/include/mysql and libs at /usr/local/mysql/lib/mysql my ./configure and args are as follows: ./configure --with-mysql-include-dir=/usr/local/mysql/include/mysql --with-mysql-lib-dir=/usr/local/mysql/lib/mysql and the output includes the following: checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for compress in -lz... (cached) yes checking for mysql/mysql.h... yes checking for mysql_init in -lmysqlclient... no configure: warning: mysql libraries not found. Use --with-mysql-lib-dir=path. configure: warning: sql submodule 'mysql' disabled and when i run radiusd -X the following is the tail end of the output before failure: rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[14]: sql: Module instantiation failed. /usr/local/mysql/lib/mysql/libmysqlclient.a is there on the system and current sorry about the size of the post, just wanted to get in all the details. feel free to trim on reply. i've been working on this for a while and i think i just need a fresh set of eyes for suggestions. thanks in advance -paul - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql on solaris
At 02:13 AM 4/1/2003, you wrote: i'm having problems compiling freeradius v0.8.1 on a solaris 9 machine with mysql support and any help would be greatly appreciated. here's some more details on the setup. solaris 9 (12/02) freeradius v0.8.1 mysql 3.23.53 (from sunfreeware.com) mysql base dir is at /usr/local/mysql with includes at /usr/local/mysql/include/mysql and libs at /usr/local/mysql/lib/mysql my ./configure and args are as follows: ./configure --with-mysql-include-dir=/usr/local/mysql/include/mysql --with-mysql-lib-dir=/usr/local/mysql/lib/mysql and the output includes the following: checking whether we are using GNU C... (cached) yes checking whether gcc accepts -g... (cached) yes checking how to run the C preprocessor... (cached) gcc -E checking for compress in -lz... (cached) yes checking for mysql/mysql.h... yes checking for mysql_init in -lmysqlclient... no configure: warning: mysql libraries not found. Use --with-mysql-lib-dir=path. configure: warning: sql submodule 'mysql' disabled I run Solaris8 and MySQL4.0. When I upgraded from MySQL 3.23.52, I encountered a similar problem. The solution is below. 1. Check out config.log. Does it say anything about the floor function (or any other function from the math library). You may need to modify your configure script (in drivers/rlm_sql_mysql) to include the math library during linking (i.e. add -lm to configure). cvs diff configure Index: configure === RCS file: /source/radiusd/src/modules/rlm_sql/drivers/rlm_sql_mysql/configure,v retrieving revision 1.5 diff -r1.5 configure 901c901 LIBS=$LIBS -lz --- LIBS=$LIBS -lm -lz With LINUX, you can get away with not having the '-lm', but not w/Solaris (at least when using MySQL 4). HTH, Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRADIUS 0.8.1 MySQL Module issue
Deramus, Chris [EMAIL PROTECTED] wrote: I'm currently having an issue starting up FreeRADIUS with MySQL support. I did a proper configure, and have the necessary library files located in /usr/local/lib I also have that directory referenced in my radiusd.conf and it's still a no go. I also tried doing a configure and disabling shared libraries, still no luck. Is there something that I'm missing? I've set this up on previous versions of FreeRADIUS in almost the exact same manner and haven't had this issue. Any light you can shed on this would be most beneficial. ... ERROR: Cannot find a configuration entry for module sql. $INCLUDE sql.conf Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRadius 0.8.1 MySQL authenthication problem
Hi, I'm working with Quintum Tenor GateWay/GateKeeper and have a problem: For user authenthication, Quintum sends two packets: Authentication ana Authirization. I'm using MySQL with freeRadius and can't understand how can my radius understand whether comes Authentication and whether Authorization request, because in SQL module I can define only one query for Authentication/Authorization request (radcheck, radreply, etc.) Can any body help me... what should i do? Should I use two SQL modules or somehow tell for existing SQL module whether which query to use? How can i define these two types of queries? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius 0.8.1 MySQL authenthication problem
=?iso-8859-4?Q?Ar=FEnas_Mila=B9auskas?= [EMAIL PROTECTED]wrote: I'm working with Quintum Tenor GateWay/GateKeeper and have a problem: For user authenthication, Quintum sends two packets: Authentication ana Authirization. No, it doesn't. RADIUS has only Access-Request and Accounting-Requert packets. There are no Authentication-Request or Authorization-Request packets. because in SQL module I can define only one query for Authentication/Authorization request (radcheck, radreply, etc.) There is no authentication to SQL modules. See the list archives for reasons why. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Freeradius with mysql
Ok kostas, I changed the operator from = to := and everything works fine I have one more question about the attribute NAS-Port-Type. This is a reply or check attribute? And what operator must use. Thanks P.s Sorry for the disclaimer but it is appended automatically from my provider. -Original Message- From: Kostas Kalevras [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 19, 2003 7:29 PM To: [EMAIL PROTECTED] Subject: Re: Freeradius with mysql On Wed, 19 Feb 2003, Apostolis Ayianoglou wrote: I use freeradius 0.8.1 with Suse 8 and mysql to authenticate users Try to authenticate and everything is work fine but, when I put option Simultaneus-Use in radcheck or in radgroupcheck table the authntication is not working with message Pair is not match. Do you also put an operator (op should be := )? -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius with mysql
Le Jeudi 20 Février 2003 17:35, Apostolis Ayianoglou a écrit : I have one more question about the attribute NAS-Port-Type. This is a reply or check attribute? Well, incredibly enough, I know the answer for that one :-) It is a check attribute (fairly logic : if the user has dialed into an analog port, you can't change this situation, lest you physically change the user's modem into an ISDN adapter). And what operator must use. Depends on what you need to do. Most of the time, you will want some users to only be able to dial in with an analog modem. So, you will use something like that in radgroupcheck : | GroupName | Attribute | op | Value | +---+---+--+---+ | analog| NAS-Port-Type | == | Async | But you could probably also use regular expressions (=~) for accounts authorized on different modes, I presume. Regards, -- [ Jacques Caruso [EMAIL PROTECTED] Développeur PHP ] [ Monaco Internet http://monaco-internet.mc/ ] [ Tél : (+377) 93 10 00 43Clé PGP : 0x41F5C63D ] [ -+- Trespassers will be shot. Survivors will be prosecuted. -+- ] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius with mysql
Title: Freeradius with mysql I use freeradius 0.8.1 with Suse 8 and mysql to authenticate users Try to authenticate and everything is work fine but, when I put option Simultaneus-Use in radcheck or in radgroupcheck table the authntication is not working with message Pair is not match. DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you.
Re: Freeradius with mysql
One thing is that it should be Simultaneous-Use and not Simultaneus-Use Can this be the problem? On Wed, 19 Feb 2003, Apostolis Ayianoglou wrote: I use freeradius 0.8.1 with Suse 8 and mysql to authenticate users Try to authenticate and everything is work fine but, when I put option Simultaneus-Use in radcheck or in radgroupcheck table the authntication is not working with message Pair is not match. DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Freeradius with mysql
No I write (Simultaneous-Use) correct but in message I typed error. -Original Message- From: Evren Yurtesen [mailto:[EMAIL PROTECTED]] Sent: Wednesday, February 19, 2003 5:29 PM To: [EMAIL PROTECTED] Subject: Re: Freeradius with mysql One thing is that it should be Simultaneous-Use and not Simultaneus-Use Can this be the problem? On Wed, 19 Feb 2003, Apostolis Ayianoglou wrote: I use freeradius 0.8.1 with Suse 8 and mysql to authenticate users Try to authenticate and everything is work fine but, when I put option Simultaneus-Use in radcheck or in radgroupcheck table the authntication is not working with message Pair is not match. DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html DISCLAIMER: The information in this message is confidential and may be legally privileged. It is intended solely for the addressee. Access to this message by anyone else is unauthorised. If you are not the intended recipient, any disclosure, copying, or distribution of the message, or any action or omission taken by you in reliance on it, is prohibited and may be unlawful. Please immediately contact the sender if you have received this message in error. Thank you. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius with mysql
On Wed, 19 Feb 2003, Apostolis Ayianoglou wrote: I use freeradius 0.8.1 with Suse 8 and mysql to authenticate users Try to authenticate and everything is work fine but, when I put option Simultaneus-Use in radcheck or in radgroupcheck table the authntication is not working with message Pair is not match. Do you also put an operator (op should be := )? -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Problems building Freeradius with MySQL support
Do you have the mysql development libraries installed when you do the compilation, as this stops it working. regards, Keith -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of john zurowski Sent: 28 January 2003 11:06 To: [EMAIL PROTECTED] Subject: Problems building Freeradius with MySQL support I've been using Freeradius with the users file without any problems for a while now. I've decided to upgrade to using MySQL to maintain the users/accounting database I've tried building freeradius using the following ./configure without any luck. ./configure --with-rlm-mysql-lib-dir=/usr/local/mysql/lib/ --with-rlm-mysql-include-dir=/usr/local/mysql/include/ and ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/ --with-mysql-include-dir=/usr/local/mysql/include/ I'm using freeradius.0.8.1 MySQL 3.23.54 after doing a make looking in : src/modules/rlm_sql/drivers/rlm_sql_mysql no object files are being generated although a Makefile is created It would be greatly appreciated if someone could point me at a how-to to resolve this issue. As I know that its something that I'm not doing right - just can't figure out what it is. Thanks in advance --- John Zurowski _ Overloaded with spam? With MSN 8, you can filter it out http://join.msn.com/?page=features/junkmailpgmarket=en-gbXAPID=3 2DI=1059 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problems building Freeradius with MySQL support
I've been using Freeradius with the users file without any problems for a while now. I've decided to upgrade to using MySQL to maintain the users/accounting database I've tried building freeradius using the following ./configure without any luck. ./configure --with-rlm-mysql-lib-dir=/usr/local/mysql/lib/ --with-rlm-mysql-include-dir=/usr/local/mysql/include/ and ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/ --with-mysql-include-dir=/usr/local/mysql/include/ I'm using freeradius.0.8.1 MySQL 3.23.54 after doing a make looking in : src/modules/rlm_sql/drivers/rlm_sql_mysql no object files are being generated although a Makefile is created It would be greatly appreciated if someone could point me at a how-to to resolve this issue. As I know that its something that I'm not doing right - just can't figure out what it is. Thanks in advance --- John Zurowski _ Overloaded with spam? With MSN 8, you can filter it out http://join.msn.com/?page=features/junkmailpgmarket=en-gbXAPID=32DI=1059 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems building Freeradius with MySQL support
hi john, "ABSOLUTELY MAKE SURE you have the mysql-devel (headers and libraries) package installed with your MySQL, otherwise freeradius won't compile with MySQL support properly. Many people seem to miss having this." you can also check http://www.frontios.com/freeradius.html great site, great help hope that helps Regards Ossama john zurowski wrote: I've been using Freeradius with the users file without any problems for a while now. I've decided to upgrade to using MySQL to maintain the users/accounting database I've tried building freeradius using the following ./configure without any luck. ./configure --with-rlm-mysql-lib-dir=/usr/local/mysql/lib/ --with-rlm-mysql-include-dir=/usr/local/mysql/include/ and ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/ --with-mysql-include-dir=/usr/local/mysql/include/ I'm using freeradius.0.8.1 MySQL 3.23.54 after doing a "make" looking in : src/modules/rlm_sql/drivers/rlm_sql_mysql no object files are being generated although a Makefile is created It would be greatly appreciated if someone could point me at a how-to to resolve this issue. As I know that its something that I'm not doing right - just can't figure out what it is. Thanks in advance --- John Zurowski _ Overloaded with spam? With MSN 8, you can filter it out http://join.msn.com/?page=features/junkmailpgmarket=en-gbXAPID=32DI=1059 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems building Freeradius with MySQL support
Should have added Building on PC under RedHat 7.3 From: john zurowski [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Problems building Freeradius with MySQL support Date: Tue, 28 Jan 2003 11:06:03 + I've been using Freeradius with the users file without any problems for a while now. I've decided to upgrade to using MySQL to maintain the users/accounting database I've tried building freeradius using the following ./configure without any luck. ./configure --with-rlm-mysql-lib-dir=/usr/local/mysql/lib/ --with-rlm-mysql-include-dir=/usr/local/mysql/include/ and ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/ --with-mysql-include-dir=/usr/local/mysql/include/ I'm using freeradius.0.8.1 MySQL 3.23.54 after doing a make looking in : src/modules/rlm_sql/drivers/rlm_sql_mysql no object files are being generated although a Makefile is created It would be greatly appreciated if someone could point me at a how-to to resolve this issue. As I know that its something that I'm not doing right - just can't figure out what it is. Thanks in advance --- John Zurowski _ Overloaded with spam? With MSN 8, you can filter it out http://join.msn.com/?page=features/junkmailpgmarket=en-gbXAPID=32DI=1059 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _ Worried what your kids see online? Protect them better with MSN 8 http://join.msn.com/?page=features/parentalpgmarket=en-gbXAPID=186DI=1059 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problems building Freeradius with MySQL support
Problem fixed The original installation for mysql was from a binary tar ball. It worked fine once I'd followed the installation steps i.e. mysql would allow me to talk to the database. However this setup didn't build freeradius with the mysql extensions. I subsequently downloaded the appropriate rpms for mySQL, installed them and then the freeradius ./configure worked fine. htmlDIV DIV P/P PA href=http://www.zurowski.btinternet.co.uk;John Zurowski/A/P P/P/DIV/DIV/html From: Ossama Suleiman [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Re: Problems building Freeradius with MySQL support Date: Tue, 28 Jan 2003 13:26:57 +0200 _ MSN Messenger - fast, easy and FREE! http://messenger.msn.co.uk ---BeginMessage--- hi john, "ABSOLUTELY MAKE SURE you have the mysql-devel (headers and libraries) package installed with your MySQL, otherwise freeradius won't compile with MySQL support properly. Many people seem to miss having this." you can also check http://www.frontios.com/freeradius.html great site, great help hope that helps Regards Ossama john zurowski wrote: I've been using Freeradius with the users file without any problems for a while now. I've decided to upgrade to using MySQL to maintain the users/accounting database I've tried building freeradius using the following ./configure without any luck. ./configure --with-rlm-mysql-lib-dir=/usr/local/mysql/lib/ --with-rlm-mysql-include-dir=/usr/local/mysql/include/ and ./configure --with-mysql-lib-dir=/usr/local/mysql/lib/ --with-mysql-include-dir=/usr/local/mysql/include/ I'm using freeradius.0.8.1 MySQL 3.23.54 after doing a "make" looking in : src/modules/rlm_sql/drivers/rlm_sql_mysql no object files are being generated although a Makefile is created It would be greatly appreciated if someone could point me at a how-to to resolve this issue. As I know that its something that I'm not doing right - just can't figure out what it is. Thanks in advance --- John Zurowski _ Overloaded with spam? With MSN 8, you can filter it out http://join.msn.com/?page=features/junkmailpgmarket=en-gbXAPID=32DI=1059 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ---End Message---
Re: Please - Help Problem in freeradius an Mysql Accounting
On Thu, 3 Oct 2002, Marcelo da Silva wrote: please , i need help, anyone answer, my question;; have one problem in version 0.7 of freeradius . in the accounting in freeradius, the registers is not updated, the freeradius write one register when user connect and other register when user disconnect; mysql select AcctSessionId,UserName,AcctStartTime,AcctStopTime from radacct where AcctSessionId='470003FC'; +---+--+-+-+ | AcctSessionId | UserName | AcctStartTime | AcctStopTime| +---+--+-+-+ | 470003FC | mariner | 2002-10-03 09:58:28 | -00-00 00:00:00 | | 470003FC | mariner | -00-00 00:00:00 | 2002-10-03 10:04:38 | +---+--+-+-+ It seems that accounting_stop_query fails and the sql module falls back to accounting_stop_query_alt. Check that you get NASIPAddress in the accounting-request and that it matches the one in sql. Add NASIPAddress in the above query and check them out. Run radiusd in debug mode (radiusd -X) and check the output. -- Kostas Kalevras Network Operations Center [EMAIL PROTECTED] National Technical University of Athens, Greece Work Phone: +30 210 7721861 'Go back to the shadow' Gandalf - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problem in freeradius an Mysql Accounting
have one problem in version 0.7 of freeradius . in the accounting in freeradius, the registers is not updated, the freeradius write one register when user connect and other register when user disconnect; mysql select AcctSessionId,UserName,AcctStartTime,AcctStopTime from radacct where AcctSessionId='470003FC';+---+--+-+-+| AcctSessionId | UserName | AcctStartTime | AcctStopTime |+---+--+-+-+| 470003FC | mariner | 2002-10-03 09:58:28 | -00-00 00:00:00 || 470003FC | mariner | -00-00 00:00:00 | 2002-10-03 10:04:38 |+---+--+-+-+
Please - Help Problem in freeradius an Mysql Accounting
please , i need help, anyone answer, my question;; have one problem in version 0.7 of freeradius . in the accounting in freeradius, the registers is not updated, the freeradius write one register when user connect and other register when user disconnect; mysql select AcctSessionId,UserName,AcctStartTime,AcctStopTime from radacct where AcctSessionId='470003FC'; +---+--+-+-+ | AcctSessionId | UserName | AcctStartTime | AcctStopTime| +---+--+-+-+ | 470003FC | mariner | 2002-10-03 09:58:28 | -00-00 00:00:00 | | 470003FC | mariner | -00-00 00:00:00 | 2002-10-03 10:04:38 | +---+--+-+-+ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Please - Help Problem in freeradius an Mysql Accounting
Marcelo da Silva [EMAIL PROTECTED] wrote: have one problem in version 0.7 of freeradius . in the accounting in freeradius, the registers is not updated, the freeradius write one register when user connect and other register when user disconnect; Look at the SQL queries from debugging mode to figure out why this is happening. And posting the SAME message over and over again is NOT going to get you a response more quickly. That kind of behaviour is more likely to convince everyone that they should ignore you completely. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius and MySQL Initial Setup
Hi, We're looking to move from Merit radius/LDAP to Freeradius/MySQL, however, I seem to be at a loss for configuring Freeradius to use MySQL. I didn't have any problems compiling Freeradius 0.7 with MySQL support and I have configured sql.conf. My question lies in how do you configure radiusd.conf to use MySQL for everything but accounting? I would still like to use radutmp based accounting rather than logging it in the database. I think I may be confused a bit since I had first tried to use ICRadius and although similiar, Freeradius does have significant differences. When running radiusd -X it appears to load the sql module without problem, but then it halts at the end. The first several times, I tried to add sql to the preacct, authorize, authenticate, and session sections, but it appears that sql is only appropriate for session. I have searched through the list archives via Google and didn't seem to find anybody that has a specific start-to-finish Freeradius/MySQL configuration guide. Thanks. --Josh Snyder NetNITCO Systems Administration - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius and MySQL Initial Setup
NetNITCO Systems Administration [EMAIL PROTECTED] wrote: We're looking to move from Merit radius/LDAP to Freeradius/MySQL, That's a good idea. however , I seem to be at a loss for configuring Freeradius to use MySQL. I didn't have any problems compiling Freeradius 0.7 with MySQL support and I have configured sql.conf. My question lies in how do you configure radiusd.conf to use MySQL for everything but accounting? sql can be used in the 'authorize' section. I would still like to use radutmp based accounting rather than logging it in the database. The 'radutmp' file is NOT accounting! It keeps track of who is currently logged on, but it may be wrong, and it WILL destroy data, once someone has logged off. You definitely do NOT want to use radutmp for anything other than enforcing Simultaneous-Use. When running radiusd -X it appears to load the sql module without problem, but then it halts at the end. The first several times, I tried to add sql to the preacct, authorize, authenticate, and session sections, but it appears that sql is only appropriate for session. No, you can add it to the 'authorize' section, too. I have searched through the list archives via Google and didn't seem to find anybody that has a specific start-to-finish Freeradius/MySQL configuration guide. See: http://www.frontios.com/freeradius.html http://www.y-min.or.jp/~nob/FreeBSD/freeradius-MySQL.html They may be outdated, but they're a start. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Help needed with setup of: freeradius-0.7 + mysql (+ dialup_admin)
Hi all, Maybe I haven't read enough documentation, or perhaps there isn't enough, so i've decided to post a question to the mailing list. I'm trying to setup FR-0.7 with mysql database. All i need is to authenticate ISDN and dial-up users against it. I've compiled the FR itself, looked through the radiusd.conf file, tweked it, tested a simple user bob like specified in one of the documentation files, works well. One of the problems I ran into is that radius cannot connect to mysql through a socket because it's looking for it in the /var/lib/mysql/ dir, but the way I have it is in /tmp. Where/how do I change that? It would save a lot of trouble if somebody could suggest where I can read exactly the setup for mysql, or pin point me in the right direction. I've never dealt with radius so i have no idea how the authentication works, nor do i know what's required for the authentication (keywords, sections, etc etc) Also I'm wondering if anyone has dialup_admin working with freeradius-0.7. I've got it installed, the only thing I need now is to get mysql going, and hopefully I'll be on my way. Thank you very much for any help/info/suggestions in advance. Regards, Max Gorouvein - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Help needed with setup of: freeradius-0.7 + mysql (+ dialup_admin)
Max Gorouvein [EMAIL PROTECTED] wrote: One of the problems I ran into is that radius cannot connect to mysql through a socket because it's looking for it in the /var/lib/mysql/ dir, but the way I have it is in /tmp. Where/how do I change that? That's a MySQL setup question. FreeRADIUS can't control that at all. It would save a lot of trouble if somebody could suggest where I can read exactly the setup for mysql, or pin point me in the right direction. I've never dealt with radius so i have no idea how the authentication works, nor do i know what's required for the authentication (keywords, sections, etc etc) shrug Read the docs, and the configuration files. They're a decent start. Go to Amazon, and look at the RADIUS book, it has more information. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius and MySQL
Hi... I think I've managed to run my radius server and client, but only through the text files. Now I need to run it interacting with mysql. Any help, pleeeeee. And the accounting how does it work? TA Jorge Lanza Calderón Department of Communications Engineering Telematic Engineering Group University of Cantabria Avda. de los Castros, s/n 39005 - Santander (SPAIN) Tel: +34 942 200914 Fax: +34 942 201488 mailto:[EMAIL PROTECTED] Web: http://www.tlmat.unican.es - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius and MySQL
On Tuesday 16 July 2002 02:56, Jorge Lanza wrote: Hi... I think I've managed to run my radius server and client, but only through the text files. Now I need to run it interacting with mysql. Any help, pleeeeee. And the accounting how does it work? If you read the documentation, the FAQ, and the past few weeks of this mailing list you will find all of those answers. You can search this mailing list via google groups if you want. Nick -- Nick Davis Associate Systems Administrator [EMAIL PROTECTED] Internet Exposure, Inc. http://www.iexposure.com (612)676-1946 Web Development-Web Marketing-ISP Services - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql replication question
At 07:40 PM 7/9/2002 -0700, Koyabu, Ken wrote: I looked up Colin Bloch's documentation, and I managed to setup mysql replication option. I'm running two identical freeradius 0.6 with mysql 3.23.38 radius database on two separate FreeBSD 4.5 servers, and our ISP is proxing their radius authentications to our radius servers, so we can have accounting information, and we can bill to our customers. I have some question regarding mysql replication setup since I believe radacct table will not be identical if you are running two separate freeradius servers, and different clients may be hitting two servers randomly. You will probably want to take a look at the 'doc/radrelay' documentation. Instead of doing replication at the sql level, this will relay accounting data at the packet level ( and gracefully handle backlogs or remote server unavailability ). This has been added to the latest CVS, so you'll need to upgrade to that to use ( or wait for 0.6.1 which should be coming out shortly ). -Chris -- \\\|||/// \ StarNet Inc. \ Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql replication question
Hi, another way is to write a script to pull all acct stored at the slave/frontend sql server, then insert into the master/backend sql server. In that case, the master sql server will always hv all the acct. If still feel insecure, try replicating the master sql server to another backup server either by using mysql bin log or just backup the raw mysql data file. just my 2 cents :) On Tue, 9 Jul 2002, Koyabu, Ken wrote: Date: Tue, 9 Jul 2002 19:40:04 -0700 From: Koyabu, Ken [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: '[EMAIL PROTECTED]' [EMAIL PROTECTED] Cc: Koyabu, Ken [EMAIL PROTECTED] Subject: freeradius and mysql replication question Does anyone have any tips regarding how to set up mysql replication with freeradius for redundancy in production environment? Regards, Ken - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Cheers, CM. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius and mysql replication question
I looked up Colin Bloch's documentation, and I managed to setup mysql replication option. I'm running two identical freeradius 0.6 with mysql 3.23.38 radius database on two separate FreeBSD 4.5 servers, and our ISP is proxing their radius authentications to our radius servers, so we can have accounting information, and we can bill to our customers. I have some question regarding mysql replication setup since I believe radacct table will not be identical if you are running two separate freeradius servers, and different clients may be hitting two servers randomly. I used binlog-do-db=radius option on my mysql master to replicate only radius database, and I also used replicate-ignore-table=radius.radacct on my mysql slave serer to ignore replication on radacct table. When master and slave database are not identical, the slave serer replication process usually failed, so I tried to avoid the situation like this by ignoring radacct table. Also, if you want to have a single accounting data to reference for all radius authentications, running multiple freeradius front end on multiple servers to point a single mysql backend server? Does anyone have any tips regarding how to set up mysql replication with freeradius for redundancy in production environment? Regards, Ken - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
FreeRadius 0.6 + MySQL Question
To all: I just recently downloaded the new version of FreeRadius and am configuring it on a test box before deploying it into our current setup. I set it up just about exactly the same as 0.5, however, I'm having trouble getting authentication to work. I ran radiusd -xx log and viewed the log file afterwards, unlike 0.5 it doesn't even echo out that it's loading SQL, or connecting to the SQL database. Is this supposed to be an underlying event, that isn't displayed in the logs, or is MySQL just not even being loaded? I have the module defined and everything in sql.conf and radiusd.conf...this is definitely odd. Thanks, Chris DeRamus HQ VPN Administrator Verizon 301-903-2093
FreeRadius makes MySQL 100% CPU loading
Title: FreeRadius makes MySQL 100% CPU loading
Dear all,
When I use FreeRadius 0.5 and use MySQL module,
the CPU loading of MySQL server is extremely high.
radiusd.conf has only sql in authorize section
authorize {
sql
}
Thanks.
Patrick
Re: FreeRadius makes MySQL 100% CPU loading
My machine (a athlon 1000 with 512mb ram) begins to run slower afer two days of radius
operation... and mysql begins to take more and more cpu..
I've been using mysql on this machine for more than a year now, and this begun only
with freeradius-0.5. Now I'm using a four-days ago snapshot, and had to boot the machine
today..
--Original Message Text---
From: Patrick Chan
Date: Thu, 23 May 2002 17:33:48 +0800
FreeRadius makes MySQL 100% CPU loading
Dear all,
When I use FreeRadius 0.5 and use MySQL module,
the CPU loading of MySQL server is extremely high.
radiusd.conf has only sql in authorize section
authorize {
sql
}
Thanks.
Patrick
Asopiniõesformuladasnestee-mailsãodecaráter
exclusivamentepessoal.Minhaopiniãonãonecessariamente
representaaopiniãodomeuMotoGruponemdaempresaonde
trabalho.
MeneSakkhetur-seveh
AlexandreGanso-DiretorSteelGooseMotoGroup
6,7e8desetembro-Aniversario10anosSteelGoose-OuroBranco-MG
500FourVermelha
[EMAIL PROTECTED]
ICQ#3778773
Re: FreeRadius makes MySQL 100% CPU loading
At 06:28 PM 5/23/2002 -0300, Alexandre Strube wrote: My machine (a athlon 1000 with 512mb ram) begins to run slower afer two days of radius operation... and mysql begins to take more and more cpu.. I've been using mysql on this machine for more than a year now, and this begun only with freeradius-0.5. Now I'm using a four-days ago snapshot, and had to boot the machine today.. Most likely your mysql server/table definitions do not contain proper or sufficient indexes. The fact that it slows over time strongly indicates this. You should look at your mysql tables, and investigate creating additional indexes. Use the 'explain' function of mysql. More docs on tuning mysql available at: www.mysql.com. -Chris -- \\\|||/// \ StarNet Inc. \ Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius makes MySQL 100% CPU loading
Alexandre Strube [EMAIL PROTECTED] wrote: My machine (a athlon 1000 with 512mb ram) begins to run slower afer two days of radius operation... and mysql begins to take more and more cpu.. Have you tried indexing your MySQL database? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: FreeRadius makes MySQL 100% CPU loading
On Thu, 23 May 2002 16:37:09 -0500, Chris Parker wrote: At 06:28 PM 5/23/2002 -0300, Alexandre Strube wrote: My machine (a athlon 1000 with 512mb ram) begins to run slower afer two days of radius operation... and mysql begins to take more and more cpu.. I've been using mysql on this machine for more than a year now, and this begun only with freeradius-0.5. Now I'm using a four-days ago snapshot, and had to boot the machine today.. Most likely your mysql server/table definitions do not contain proper or sufficient indexes. The fact that it slows over time strongly indicates this. You should look at your mysql tables, and investigate creating additional indexes. Use the 'explain' function of mysql. More docs on tuning mysql available at: www.mysql.com. I`m using the standard radius tables as described on rlm_sql_mysql schema. And this happens only when freeradius is running on the machine. I've closed freeradius and nothing happened, inspite of intensive use of mysql thoughout the day. As opiniões formuladas neste e-mail são de caráter exclusivamente pessoal. Minha opinião não necessariamente representa a opinião do meu Moto Grupo nem da empresa onde trabalho. Mene Sakkhet ur-seveh Alexandre Ganso - Diretor Steel Goose Moto Group 6, 7 e 8 de setembro - Aniversario 10 anos Steel Goose - Ouro Branco - MG 500 Four Vermelha [EMAIL PROTECTED] ICQ# 3778773 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Exec-program-wait with FreeRadius 0.5 + MySQL
Hello all, I am successfuly running FreeRadius 0.5 with MySQL support for authorizing and accounting purposes. Only doubt here is how to exec programs on Start and Stop accounting packets? I have read previous postings, added appropriate lines in 'users_acct' but it seems that Radius does interpret that file. Including Exec-Program-Wait to radreply or radgroupreply does not do the job, since it is passed as AV pair on Auth-Request. I guess Radius does not read files because it is not listed in accounting section in its config file - according to configuration manual for MySQL support. One possible thing to do is remove sql module and write external authentication program with DEFAULT := Accept, which sux because we have sql module. Another possible thing to do is simply reading another tables called starreply and stopreply and passing them to Radius when Accounting Stop and Start requests are made to MySQL module, but I do not know how to modify sql.conf or maybe MySQL module. Any ideas or help would be greatly appreciated! TIA. -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
Hi, Try using acct_users rather than users_acct - you also need to have the 'files' sections in radiusd.conf, both in the 'modules' and the 'preacct' sections (I think...). On Tue, 2002-05-14 at 21:09, Kliment Toshkov wrote: Hello all, I am successfuly running FreeRadius 0.5 with MySQL support for authorizing and accounting purposes. Only doubt here is how to exec programs on Start and Stop accounting packets? I have read previous postings, added appropriate lines in 'users_acct' but it seems that Radius does interpret that file. Including Exec-Program-Wait to radreply or radgroupreply does not do the job, since it is passed as AV pair on Auth-Request. I guess Radius does not read files because it is not listed in accounting section in its config file - according to configuration manual for MySQL support. One possible thing to do is remove sql module and write external authentication program with DEFAULT := Accept, which sux because we have sql module. Another possible thing to do is simply reading another tables called starreply and stopreply and passing them to Radius when Accounting Stop and Start requests are made to MySQL module, but I do not know how to modify sql.conf or maybe MySQL module. Any ideas or help would be greatly appreciated! TIA. -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Cheers, Mattt. [EMAIL PROTECTED] Network and Tech Guy,ICQ: 117539757 Expressnet. www.expressnet.net.au - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
Hello Mattt, I have adder files in preacct section, fixed some typos in acct_users (Yeah, i've mistaken the name below), fixed some more errors in users file (since it was not processed before because files directive was missing), and voila, it runs. Only thing left is to understand how to pass some AV pairs, etc. Thank you very much! Mattt said: Hi, Try using acct_users rather than users_acct - you also need to have the 'files' sections in radiusd.conf, both in the 'modules' and the 'preacct' sections (I think...). On Tue, 2002-05-14 at 21:09, Kliment Toshkov wrote: Hello all, I am successfuly running FreeRadius 0.5 with MySQL support for authorizing and accounting purposes. Only doubt here is how to exec programs on Start and Stop accounting packets? I have read previous postings, added appropriate lines in 'users_acct' but it seems that Radius does interpret that file. Including Exec-Program-Wait to radreply or radgroupreply does not do the job, since it is passed as AV pair on Auth-Request. I guess Radius does not read files because it is not listed in accounting section in its config file - according to configuration manual for MySQL support. One possible thing to do is remove sql module and write external authentication program with DEFAULT := Accept, which sux because we have sql module. Another possible thing to do is simply reading another tables called starreply and stopreply and passing them to Radius when Accounting Stop and Start requests are made to MySQL module, but I do not know how to modify sql.conf or maybe MySQL module. Any ideas or help would be greatly appreciated! TIA. -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Cheers, Mattt. [EMAIL PROTECTED] Network and Tech Guy,ICQ: 117539757 Expressnet. www.expressnet.net.au - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
Hello all, Another lame question - how do I set Radius to execute a program on Authentication request (preffered only on successful one)? I have no DEFAULT entries at all in users file, since users are authenticated from MySQL module. A decent configuration file should be enough for me, I just have no knowledge of Radius. Thank you! Mattt said: Hi, Try using acct_users rather than users_acct - you also need to have the 'files' sections in radiusd.conf, both in the 'modules' and the 'preacct' sections (I think...). On Tue, 2002-05-14 at 21:09, Kliment Toshkov wrote: Hello all, I am successfuly running FreeRadius 0.5 with MySQL support for authorizing and accounting purposes. Only doubt here is how to exec programs on Start and Stop accounting packets? I have read previous postings, added appropriate lines in 'users_acct' but it seems that Radius does interpret that file. Including Exec-Program-Wait to radreply or radgroupreply does not do the job, since it is passed as AV pair on Auth-Request. I guess Radius does not read files because it is not listed in accounting section in its config file - according to configuration manual for MySQL support. One possible thing to do is remove sql module and write external authentication program with DEFAULT := Accept, which sux because we have sql module. Another possible thing to do is simply reading another tables called starreply and stopreply and passing them to Radius when Accounting Stop and Start requests are made to MySQL module, but I do not know how to modify sql.conf or maybe MySQL module. Any ideas or help would be greatly appreciated! TIA. -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Cheers, Mattt. [EMAIL PROTECTED] Network and Tech Guy,ICQ: 117539757 Expressnet. www.expressnet.net.au - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
I am aware of that statement, but I authorize my usersh through mysql module. All data about users is held in MySQL database. So what do I put and where do I put it? Thank you! Alan DeKok said: Kliment Toshkov [EMAIL PROTECTED] wrote: Another lame question - how do I set Radius to execute a program on Authentication request (preffered only on successful one)? In the 'users' file, you do something like: bob Auth-Type := System Exec-Program = /foo/bar If the user is authenticated, then the program is executed. If the user isn't authenticated, then it isn' executed. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
Kliment Toshkov [EMAIL PROTECTED] wrote: I am aware of that statement, but I authorize my usersh through mysql module. All data about users is held in MySQL database. So what do I put and where do I put it? Thank you! In the list of reply items in the MySQL database? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
This will almost double the size of database. Is there any possible hack or something with config files to Exec-Program-Wait evern for *EVERY* user authenticated through Radiusd? Thank you! Alan DeKok said: Kliment Toshkov [EMAIL PROTECTED] wrote: I am aware of that statement, but I authorize my usersh through mysql module. All data about users is held in MySQL database. So what do I put and where do I put it? Thank you! In the list of reply items in the MySQL database? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
Kliment Toshkov [EMAIL PROTECTED] wrote: This will almost double the size of database. Is there any possible hack or something with config files to Exec-Program-Wait evern for *EVERY* user authenticated through Radiusd? That's what DEFAULT is for. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Exec-program-wait with FreeRadius 0.5 + MySQL
This is what I am asking from the begining. Could you please tell me what will be the exact syntax of that DEFAULT statement (example maybe)? Thank you! Alan DeKok said: Kliment Toshkov [EMAIL PROTECTED] wrote: This will almost double the size of database. Is there any possible hack or something with config files to Exec-Program-Wait evern for *EVERY* user authenticated through Radiusd? That's what DEFAULT is for. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Technical Director of VIKET Networks web/mail: www.viket.net; [EMAIL PROTECTED] gsm/gsm2: +359 88 803280; +359 87 800743 - Get YOUR internet access NOW! 40 hours unlimited access for only 6 lv! http://www.viket.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
Artur Hecker [EMAIL PROTECTED] wrote: again, the problem was not the SQL and whatsoever dependint on it. for a plenty of people here the problem are the *tmp files which DO NOT exist even it the modules ARE active. Add debugging statements to the module, to track when/where/why it's making it's decisions. Figure out where it's making a wrong decision, and send a patch to the list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
Hello,
if you make debugging in radius server and in Cisco ('debug
radius' :), you should find, that Cisco doesn't send this attribute in the
auth. requests, therefore you cannot make auth. decision by this
attribute. I don't know that it is possible to configure Cisco to send
this attribute, I cannot make that.
Another solution: you should write/rewrite TCL IVR script and you
can send the info (e.g. called-station-id) via Cisco VSA attribute and
your FreeRADIUS server will see this through VSAs. Take a look for
h323-ivr-in and h323-ivr-out in the TCL IVR 2 documentation.
Regards,
Thomas
On Thu, 11 Apr 2002, Dirk Tanneberger wrote:
sql.conf is o.k. and with sql tracing I see, that these values are blank.
I think the Cisco AS5300 send not these values.
But how can I configure AS5300 to send the parameters?
In details-file are the following entries:
Thu Apr 11 15:54:34 2002
NAS-IP-Address = 192.168.0.254
NAS-Port = 106
Cisco-NAS-Port = Serial3:10
NAS-Port-Type = ISDN
User-Name = test
Called-Station-Id = 3552000
Calling-Station-Id = 3551720
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = B005
Framed-Protocol = PPP
Acct-Link-Count = 2
X-Ascend-Num-In-Multilink = 1
Acct-Multi-Session-Id = 14165
Framed-IP-Address = 193.98.116.99
X-Ascend-Disconnect-Cause = 45
X-Ascend-Pre-Input-Octets = 154
X-Ascend-Pre-Output-Octets = 139
X-Ascend-Pre-Input-Packets = 4
X-Ascend-Pre-Output-Packets = 5
Acct-Input-Octets = 666
Acct-Output-Octets = 394
Acct-Input-Packets = 26
Acct-Output-Packets = 19
X-Ascend-PreSession-Time = 1
Acct-Session-Time = 13
X-Ascend-Data-Rate = 64000
X-Ascend-Xmit-Rate = 64000
X-Ascend-Multilink-ID = 14165
Acct-Delay-Time = 0
Client-IP-Address = 192.168.1.41
Timestamp = 1018533274
Thanks Dirk
- Original Message -
From: Chris Parker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 11, 2002 5:27 PM
Subject: Re: freeradius and mysql accounting and use of called-station-id
At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote:
Hello all,
I use freeradius 0.5 and my NAS is a Cisco AS5300.
I test with freeradius and mysql since 2 weeks and I have 2 problems:
The radius server writes the accounting records in the mysql-table, but
the following entries leave blank for all records:
++
AcctUniqueId
ConnectInfo_start
ConnectInfo_stop
AcctTerminateCause
NASPortId = 0 (for all records)
++
How can I fill these parameters?
What do you have in 'sql.conf' for the queries? Simply adding the columns
to the table definition will not fill them in. You must also alter your
sql.conf to add them if they do not exist.
Also, make sure you are correctly calling the 'acct_unique' module in your
config.
If this has been done, run the server in debugging mode, with sql tracing
enabled, so you can see what sql queries are being run.
-Chris
--
\\\|||/// \ StarNet Inc. \Chris Parker
\ ~ ~ / \ WX *is* Wireless!\ Director, Engineering
| @ @ |\ http://www.starnetwx.net \ (847) 963-0116
oOo---(_)---oOo--\--
\ Wholesale Internet Services - http://www.megapop.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: freeradius and mysql accounting and use of called-station-id
Hi,
In addition of using TCL IVR script... you will see all the information you need for
++
AcctUniqueId = h323-conf-id
ConnectInfo_start = (not quite sure... see Cisco doc)
ConnectInfo_stop = (not quite sure... see Cisco doc)
AcctTerminateCause = h323-disconnect-cause
NASPortId = 0 (for all records)= Cisco-NAS-Port
++
-Original Message-
From: Thomas Jalsovsky [mailto:[EMAIL PROTECTED]]
Sent: Friday, April 12, 2002 1:25 PM
To: [EMAIL PROTECTED]
Subject: Re: freeradius and mysql accounting and use of
called-station-id
Hello,
if you make debugging in radius server and in Cisco ('debug
radius' :), you should find, that Cisco doesn't send this attribute in the
auth. requests, therefore you cannot make auth. decision by this
attribute. I don't know that it is possible to configure Cisco to send
this attribute, I cannot make that.
Another solution: you should write/rewrite TCL IVR script and you
can send the info (e.g. called-station-id) via Cisco VSA attribute and
your FreeRADIUS server will see this through VSAs. Take a look for
h323-ivr-in and h323-ivr-out in the TCL IVR 2 documentation.
Regards,
Thomas
On Thu, 11 Apr 2002, Dirk Tanneberger wrote:
sql.conf is o.k. and with sql tracing I see, that these values are blank.
I think the Cisco AS5300 send not these values.
But how can I configure AS5300 to send the parameters?
In details-file are the following entries:
Thu Apr 11 15:54:34 2002
NAS-IP-Address = 192.168.0.254
NAS-Port = 106
Cisco-NAS-Port = Serial3:10
NAS-Port-Type = ISDN
User-Name = test
Called-Station-Id = 3552000
Calling-Station-Id = 3551720
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = B005
Framed-Protocol = PPP
Acct-Link-Count = 2
X-Ascend-Num-In-Multilink = 1
Acct-Multi-Session-Id = 14165
Framed-IP-Address = 193.98.116.99
X-Ascend-Disconnect-Cause = 45
X-Ascend-Pre-Input-Octets = 154
X-Ascend-Pre-Output-Octets = 139
X-Ascend-Pre-Input-Packets = 4
X-Ascend-Pre-Output-Packets = 5
Acct-Input-Octets = 666
Acct-Output-Octets = 394
Acct-Input-Packets = 26
Acct-Output-Packets = 19
X-Ascend-PreSession-Time = 1
Acct-Session-Time = 13
X-Ascend-Data-Rate = 64000
X-Ascend-Xmit-Rate = 64000
X-Ascend-Multilink-ID = 14165
Acct-Delay-Time = 0
Client-IP-Address = 192.168.1.41
Timestamp = 1018533274
Thanks Dirk
- Original Message -
From: Chris Parker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 11, 2002 5:27 PM
Subject: Re: freeradius and mysql accounting and use of called-station-id
At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote:
Hello all,
I use freeradius 0.5 and my NAS is a Cisco AS5300.
I test with freeradius and mysql since 2 weeks and I have 2 problems:
The radius server writes the accounting records in the mysql-table, but
the following entries leave blank for all records:
++
AcctUniqueId
ConnectInfo_start
ConnectInfo_stop
AcctTerminateCause
NASPortId = 0 (for all records)
++
How can I fill these parameters?
What do you have in 'sql.conf' for the queries? Simply adding the columns
to the table definition will not fill them in. You must also alter your
sql.conf to add them if they do not exist.
Also, make sure you are correctly calling the 'acct_unique' module in your
config.
If this has been done, run the server in debugging mode, with sql tracing
enabled, so you can see what sql queries are being run.
-Chris
--
\\\|||/// \ StarNet Inc. \Chris Parker
\ ~ ~ / \ WX *is* Wireless!\ Director, Engineering
| @ @ |\ http://www.starnetwx.net \ (847) 963-0116
oOo---(_)---oOo--\--
\ Wholesale Internet Services - http://www.megapop.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
Hello,
thanks for all answer. The accounting attribute, I will check
with debuging on cisco router, in order to locate the problem.
My authentication problem with called -station-id is another.
Authentication with one entry per user for called-station-id in radcheck-table
works fine. But the probleme is, that the user comes with different called-staton-id.
How can I check two or more called-station-id's per user? Or can I us wildcards?
regards
Dirk Tanneberger
- Original Message -
From: Thomas Jalsovsky [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 12, 2002 8:25 AM
Subject: Re: freeradius and mysql accounting and use of called-station-id
Hello,
if you make debugging in radius server and in Cisco ('debug
radius' :), you should find, that Cisco doesn't send this attribute in the
auth. requests, therefore you cannot make auth. decision by this
attribute. I don't know that it is possible to configure Cisco to send
this attribute, I cannot make that.
Another solution: you should write/rewrite TCL IVR script and you
can send the info (e.g. called-station-id) via Cisco VSA attribute and
your FreeRADIUS server will see this through VSAs. Take a look for
h323-ivr-in and h323-ivr-out in the TCL IVR 2 documentation.
Regards,
Thomas
On Thu, 11 Apr 2002, Dirk Tanneberger wrote:
sql.conf is o.k. and with sql tracing I see, that these values are blank.
I think the Cisco AS5300 send not these values.
But how can I configure AS5300 to send the parameters?
In details-file are the following entries:
Thu Apr 11 15:54:34 2002
NAS-IP-Address = 192.168.0.254
NAS-Port = 106
Cisco-NAS-Port = Serial3:10
NAS-Port-Type = ISDN
User-Name = test
Called-Station-Id = 3552000
Calling-Station-Id = 3551720
Acct-Status-Type = Stop
Acct-Authentic = RADIUS
Service-Type = Framed-User
Acct-Session-Id = B005
Framed-Protocol = PPP
Acct-Link-Count = 2
X-Ascend-Num-In-Multilink = 1
Acct-Multi-Session-Id = 14165
Framed-IP-Address = 193.98.116.99
X-Ascend-Disconnect-Cause = 45
X-Ascend-Pre-Input-Octets = 154
X-Ascend-Pre-Output-Octets = 139
X-Ascend-Pre-Input-Packets = 4
X-Ascend-Pre-Output-Packets = 5
Acct-Input-Octets = 666
Acct-Output-Octets = 394
Acct-Input-Packets = 26
Acct-Output-Packets = 19
X-Ascend-PreSession-Time = 1
Acct-Session-Time = 13
X-Ascend-Data-Rate = 64000
X-Ascend-Xmit-Rate = 64000
X-Ascend-Multilink-ID = 14165
Acct-Delay-Time = 0
Client-IP-Address = 192.168.1.41
Timestamp = 1018533274
Thanks Dirk
- Original Message -
From: Chris Parker [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 11, 2002 5:27 PM
Subject: Re: freeradius and mysql accounting and use of called-station-id
At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote:
Hello all,
I use freeradius 0.5 and my NAS is a Cisco AS5300.
I test with freeradius and mysql since 2 weeks and I have 2 problems:
The radius server writes the accounting records in the mysql-table, but
the following entries leave blank for all records:
++
AcctUniqueId
ConnectInfo_start
ConnectInfo_stop
AcctTerminateCause
NASPortId = 0 (for all records)
++
How can I fill these parameters?
What do you have in 'sql.conf' for the queries? Simply adding the columns
to the table definition will not fill them in. You must also alter your
sql.conf to add them if they do not exist.
Also, make sure you are correctly calling the 'acct_unique' module in your
config.
If this has been done, run the server in debugging mode, with sql tracing
enabled, so you can see what sql queries are being run.
-Chris
--
\\\|||/// \ StarNet Inc. \Chris Parker
\ ~ ~ / \ WX *is* Wireless!\ Director, Engineering
| @ @ |\ http://www.starnetwx.net \ (847) 963-0116
oOo---(_)---oOo--\--
\ Wholesale Internet Services - http://www.megapop.net
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
freeradius and mysql accounting and use of called-station-id
Hello all, I use freeradius 0.5 and my NAS is a Cisco AS5300. I test with freeradius and mysql since 2 weeks and I have 2 problems: The radius server writes the accounting records in the mysql-table, but the following entries leave blank for all records: ++ AcctUniqueId ConnectInfo_start ConnectInfo_stop AcctTerminateCause NASPortId = 0 (for all records) ++ How can I fill these parameters? My AS5300 config: ++ aaa accounting delay-start aaa accounting exec default start-stop group radius aaa accounting network default start-stop group radius radius-server attribute 44 include-in-access-req radius-server attribute nas-port format c radius-server vsa send accounting ++ My second problem is the use of Called-Station-ID. Is there a way to define two or more Called-Station-Id for one user? What I mean is, that a user can dial in several services. For the first service, he called 34567 and for the second service he called 34568. When I define both, Called-Station-Id = 34567 and Called-Station-Id = 34568, dial in is not possible. The same is, when I define Called-Station-Id = 3456 or Called-Station-Id = 3456*. Can I use wildcards or what can I do to solve this problem? Thanks for any answer. regards Dirk Tanneberger - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql accounting and use of called-station-id
sql.conf is o.k. and with sql tracing I see, that these values are blank. I think the Cisco AS5300 send not these values. But how can I configure AS5300 to send the parameters? In details-file are the following entries: Thu Apr 11 15:54:34 2002 NAS-IP-Address = 192.168.0.254 NAS-Port = 106 Cisco-NAS-Port = Serial3:10 NAS-Port-Type = ISDN User-Name = test Called-Station-Id = 3552000 Calling-Station-Id = 3551720 Acct-Status-Type = Stop Acct-Authentic = RADIUS Service-Type = Framed-User Acct-Session-Id = B005 Framed-Protocol = PPP Acct-Link-Count = 2 X-Ascend-Num-In-Multilink = 1 Acct-Multi-Session-Id = 14165 Framed-IP-Address = 193.98.116.99 X-Ascend-Disconnect-Cause = 45 X-Ascend-Pre-Input-Octets = 154 X-Ascend-Pre-Output-Octets = 139 X-Ascend-Pre-Input-Packets = 4 X-Ascend-Pre-Output-Packets = 5 Acct-Input-Octets = 666 Acct-Output-Octets = 394 Acct-Input-Packets = 26 Acct-Output-Packets = 19 X-Ascend-PreSession-Time = 1 Acct-Session-Time = 13 X-Ascend-Data-Rate = 64000 X-Ascend-Xmit-Rate = 64000 X-Ascend-Multilink-ID = 14165 Acct-Delay-Time = 0 Client-IP-Address = 192.168.1.41 Timestamp = 1018533274 Thanks Dirk - Original Message - From: Chris Parker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 11, 2002 5:27 PM Subject: Re: freeradius and mysql accounting and use of called-station-id At 05:09 PM 4/11/2002 +0200, Dirk Tanneberger wrote: Hello all, I use freeradius 0.5 and my NAS is a Cisco AS5300. I test with freeradius and mysql since 2 weeks and I have 2 problems: The radius server writes the accounting records in the mysql-table, but the following entries leave blank for all records: ++ AcctUniqueId ConnectInfo_start ConnectInfo_stop AcctTerminateCause NASPortId = 0 (for all records) ++ How can I fill these parameters? What do you have in 'sql.conf' for the queries? Simply adding the columns to the table definition will not fill them in. You must also alter your sql.conf to add them if they do not exist. Also, make sure you are correctly calling the 'acct_unique' module in your config. If this has been done, run the server in debugging mode, with sql tracing enabled, so you can see what sql queries are being run. -Chris -- \\\|||/// \ StarNet Inc. \Chris Parker \ ~ ~ / \ WX *is* Wireless!\ Director, Engineering | @ @ |\ http://www.starnetwx.net \ (847) 963-0116 oOo---(_)---oOo--\-- \ Wholesale Internet Services - http://www.megapop.net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
Artur Hecker [EMAIL PROTECTED] wrote: i don't use sql and it doesn't work either. the files are the aquivalents of the system-wide utmp, wtmp, etc. files, if i'm not completely wrong. SQL accounting is NOT the equivalent of utmp/wmtp. Even utmp/wmtp are not equivalent. They have different purposes. I have a patch sitting somewhere which adds the ability for SQL to do Simultaneous-Use checks, that might help. in fact i'm waiting for a note/comment of one of the developers (alan?) but the issue is either well-known or not important since there is no answer inspite of numerous posts. ... or the answer is unknown. I don't use SQL, so I'm not too familiar with it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
I have a patch sitting somewhere which adds the ability for SQL to do Simultaneous-Use checks, that might help. If you can dig up that patch and post it, I will greatly appreciate it. So other than Simultaneous-Use, what else do the tmp files do for me? I'm just trying to see if I need to get them working, or if I can just not worry about it and rely on SQL accounting. Thanks!! Frank - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
Alan DeKok wrote: Artur Hecker [EMAIL PROTECTED] wrote: i don't use sql and it doesn't work either. the files are the aquivalents of the system-wide utmp, wtmp, etc. files, if i'm not completely wrong. SQL accounting is NOT the equivalent of utmp/wmtp. Even utmp/wmtp are not equivalent. They have different purposes. you misgot it. we were talking about the sense of the radutmp/sradutmp/radwtmp files. Frank just supposed that these files don't exist in his case because of the usage of SQL accounting. I answered that they do not exist in my case either, even I don't use the SQL accounting. ... or the answer is unknown. I don't use SQL, so I'm not too familiar with it. again, the problem was not the SQL and whatsoever dependint on it. for a plenty of people here the problem are the *tmp files which DO NOT exist even it the modules ARE active. do you have an idea on this topic? it just doesn't log anything, in my case for example. I've already posted this issue here at least three times with all the needed information, I would suppose... Thanks, artur -- artur[at]hecker.info - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
Artur, My situation seems to be the same as yours.. no tmp files and radwho doesn't work.. I first sent a Start to get accounting going, which causes it to log in the detail file and in the mysql table.. I'm thinking that maybe if we use mysql, then it won't generate the tmp files because of it being redundant? I don't have much of a clue as to what I'm doing, so I'm probably wrong. But, are these tmp files just for keeping track of who is connected and for using radwho to see it? If so, then can't we just do some simple mysql queries and get the same info? If I'm wrong, please let me know, because this is all new to me. Thanks! Frank - Original Message - From: Artur Hecker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, April 06, 2002 7:34 AM Subject: Re: freeradius and mysql tywe wrote: That did it!! My accounting is working just fine! And now I even see it updating the mysql tables! Thanks a TON! Frank does it write any radutmp, radwtmp, sradutmp files, etc.? can you use radwho? in which sequence did you send your Accounting messages? First an ON or first a Start? in my case i get it working but it just wouldn't log anything (except in the details file) do you have the same problem? any comments are appreciated! artur -- hecker[at]enst.fr - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
Nevermind that last message, I just realized that radutmp is used for checking Simultaneous-Use.. Hmm, I wonder why it doesn't work. I have radutmp listed in the accounting section right below sql. Maybe it should come before sql? I'll have to test this out more when I get some time. Please let me know if you figure it out before then. Thanks! Frank - Original Message - From: Artur Hecker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, April 06, 2002 7:34 AM Subject: Re: freeradius and mysql tywe wrote: That did it!! My accounting is working just fine! And now I even see it updating the mysql tables! Thanks a TON! Frank does it write any radutmp, radwtmp, sradutmp files, etc.? can you use radwho? in which sequence did you send your Accounting messages? First an ON or first a Start? in my case i get it working but it just wouldn't log anything (except in the details file) do you have the same problem? any comments are appreciated! artur -- hecker[at]enst.fr - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
hello i don't use sql and it doesn't work either. the files are the aquivalents of the system-wide utmp, wtmp, etc. files, if i'm not completely wrong. in fact i'm waiting for a note/comment of one of the developers (alan?) but the issue is either well-known or not important since there is no answer inspite of numerous posts. that's kind of sad, they could at least say: hey, you dumb ass, the answer is in the archives, etc. so, no logging so far :-( tywe wrote: Nevermind that last message, I just realized that radutmp is used for checking Simultaneous-Use.. Hmm, I wonder why it doesn't work. I have radutmp listed in the accounting section right below sql. Maybe it should come before sql? I'll have to test this out more when I get some time. Please let me know if you figure it out before then. Thanks! Frank - Original Message - From: Artur Hecker [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Saturday, April 06, 2002 7:34 AM Subject: Re: freeradius and mysql tywe wrote: That did it!! My accounting is working just fine! And now I even see it updating the mysql tables! Thanks a TON! Frank does it write any radutmp, radwtmp, sradutmp files, etc.? can you use radwho? in which sequence did you send your Accounting messages? First an ON or first a Start? in my case i get it working but it just wouldn't log anything (except in the details file) do you have the same problem? any comments are appreciated! artur -- hecker[at]enst.fr - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- -- o [EMAIL PROTECTED]| o IRCNET:MadArt@#karlsruhe o [EMAIL PROTECTED] | o http://www.madart.de --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
tywe wrote: That did it!! My accounting is working just fine! And now I even see it updating the mysql tables! Thanks a TON! Frank does it write any radutmp, radwtmp, sradutmp files, etc.? can you use radwho? in which sequence did you send your Accounting messages? First an ON or first a Start? in my case i get it working but it just wouldn't log anything (except in the details file) do you have the same problem? any comments are appreciated! artur -- hecker[at]enst.fr - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
If you have a windows machine that you can use, then NTRADPing is a nice
(free) tool to help test RADIUS configs
http://www.mastersoft-group.com/download/
Despite mentioning 'NT', I've used it on a Windows 98SE machine with no
problems.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 4:38 PM
Subject: Re: freeradius and mysql
Nicolas,
Thanks a ton for the reply about my accounting issue. I thought the same
thing at first about it being due to an unknown NAS, but even when the NAS
is recognized, it still doesn't do any accounting. And now, every time I
test it, the NAS is recognized anyways, and still no accounting. Are you
sure it isn't due to me using radtest to test this? I have tried to run
radclient to do a test, but I can't seem to find any docs that explain how
to test the accounting part. I did see something that said to do this:
echo User-Name = fnord | radclient 1.2.3.4 auth testing123
so, I did that, and it responded with:
Received response ID 98, code 3, length = 20
I checked the radius.log and it had rejected me, which was correct. But,
still no accounting.
So, I tried this just to see what would happen:
echo User-Name = fnord | radclient 1.2.3.4 acct testing123
And I got some accounting!!
var/log/radius/radacct/2.3.4.5/detail
Thu Apr 4 05:27:33 2002
User-Name = fnord
NAS-IP-Address = 2.3.4.5
Client-IP-Address = 2.3.4.5
Timestamp = 1017916053
So I guess accounting is working? But, I don't know how to use radclient
to
properly test it? Can someone give an example that I can try, so that I
can
see what a real accounting session will look like? Also, even though I
found
a little bit of accounting in the radacct folder, I noticed that nothing
showed up in the mysql radacct table? And yes, I do have sql listed in the
accounting section of radiusd.conf.
And, as for full-debugging is concerned, yes, I have tried watching a
debug
session to see if it gives any clues, but I don't see much of anything
being
listed that concerns accounting? I see a couple of things about accounting
files and the mysql accounting tables when the radiusd first starts up,
but
doing a test with radtest, it doesn't cause any info at all to show up
about
accounting?
Thanks again!
Frank
- Original Message -
From: Nicolas [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 2:03 AM
Subject: Re: freeradius and mysql
I have the same problem concerning clients.conf, you should use
clients
also, for me it works !
concerning your accounting pb, it's probably the same reason: unknown
NAS,
are you Full-Debugging ?
Nicolas
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 12:21 AM
Subject: Re: freeradius and mysql
Ya, I don't know much about that file either. I just made an entry
that
looked about like the default one, and added it below the default one:
client 1.2.3.4 {
secret = testing123
shortname = anyname
}
And it seemed to work. It's kind of weird though, because the logs
show
the
correct shortname sometimes, but then other times, it says
UNKNOWN-NAS,
but
still processes the request anyways. Haven't quite nailed down what is
causing this yet.
And I think my accounting problem (no accounting records) might be due
to
me
using radtest right now. I think I might have to use radclient to
actually
see the accounting kick in. Not sure though, but I'll let you know how
it
goes.
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 2:27 PM
Subject: Re: freeradius and mysql
the only problem I am having is I dont understand the clients.conf,
is
there
a site that explains it, and etc.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 9:41 AM
Subject: Re: freeradius and mysql
I guess so, but we can also do it on the list too so that others
may
benefit
in the future?
Anyhow, I mainly just followed the instructions at:
http://www.frontios.com/freeradius.html
I had to install the MySQL-devel rpm before I did anything. The
only
thing
I
had to do different than what it says is that I had to remove
sql
from
the
authenticate section and put it back into the authorize section,
even
though
the above website said to do the opposite.
The only thing I'm a little stuck on right now is the accounting
stuff.
I
added sql to the accounting section, but I don't see anything
showing
up
in
the mySQL tables, or even anything in the /var/log/radius/radacct
folder?
I
do have all the logging turned
Re: freeradius and mysql
Thanks Mark, I'll give it a shot!
Frank
- Original Message -
From: Mark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 6:10 PM
Subject: Re: freeradius and mysql
If you have a windows machine that you can use, then NTRADPing is a nice
(free) tool to help test RADIUS configs
http://www.mastersoft-group.com/download/
Despite mentioning 'NT', I've used it on a Windows 98SE machine with no
problems.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 4:38 PM
Subject: Re: freeradius and mysql
Nicolas,
Thanks a ton for the reply about my accounting issue. I thought the same
thing at first about it being due to an unknown NAS, but even when the
NAS
is recognized, it still doesn't do any accounting. And now, every time I
test it, the NAS is recognized anyways, and still no accounting. Are you
sure it isn't due to me using radtest to test this? I have tried to run
radclient to do a test, but I can't seem to find any docs that explain
how
to test the accounting part. I did see something that said to do this:
echo User-Name = fnord | radclient 1.2.3.4 auth testing123
so, I did that, and it responded with:
Received response ID 98, code 3, length = 20
I checked the radius.log and it had rejected me, which was correct. But,
still no accounting.
So, I tried this just to see what would happen:
echo User-Name = fnord | radclient 1.2.3.4 acct testing123
And I got some accounting!!
var/log/radius/radacct/2.3.4.5/detail
Thu Apr 4 05:27:33 2002
User-Name = fnord
NAS-IP-Address = 2.3.4.5
Client-IP-Address = 2.3.4.5
Timestamp = 1017916053
So I guess accounting is working? But, I don't know how to use radclient
to
properly test it? Can someone give an example that I can try, so that I
can
see what a real accounting session will look like? Also, even though I
found
a little bit of accounting in the radacct folder, I noticed that nothing
showed up in the mysql radacct table? And yes, I do have sql listed in
the
accounting section of radiusd.conf.
And, as for full-debugging is concerned, yes, I have tried watching a
debug
session to see if it gives any clues, but I don't see much of anything
being
listed that concerns accounting? I see a couple of things about
accounting
files and the mysql accounting tables when the radiusd first starts up,
but
doing a test with radtest, it doesn't cause any info at all to show up
about
accounting?
Thanks again!
Frank
- Original Message -
From: Nicolas [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 2:03 AM
Subject: Re: freeradius and mysql
I have the same problem concerning clients.conf, you should use
clients
also, for me it works !
concerning your accounting pb, it's probably the same reason: unknown
NAS,
are you Full-Debugging ?
Nicolas
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 12:21 AM
Subject: Re: freeradius and mysql
Ya, I don't know much about that file either. I just made an entry
that
looked about like the default one, and added it below the default
one:
client 1.2.3.4 {
secret = testing123
shortname = anyname
}
And it seemed to work. It's kind of weird though, because the logs
show
the
correct shortname sometimes, but then other times, it says
UNKNOWN-NAS,
but
still processes the request anyways. Haven't quite nailed down what
is
causing this yet.
And I think my accounting problem (no accounting records) might be
due
to
me
using radtest right now. I think I might have to use radclient to
actually
see the accounting kick in. Not sure though, but I'll let you know
how
it
goes.
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 2:27 PM
Subject: Re: freeradius and mysql
the only problem I am having is I dont understand the
clients.conf,
is
there
a site that explains it, and etc.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 9:41 AM
Subject: Re: freeradius and mysql
I guess so, but we can also do it on the list too so that others
may
benefit
in the future?
Anyhow, I mainly just followed the instructions at:
http://www.frontios.com/freeradius.html
I had to install the MySQL-devel rpm before I did anything. The
only
thing
I
had to do different than what it says is that I had to remove
sql
from
the
authenticate section and put it back into the authorize section,
even
though
Re: freeradius and mysql
That did it!! My accounting is working just fine! And now I even see it
updating the mysql tables! Thanks a TON!
Frank
- Original Message -
From: Mark [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 6:10 PM
Subject: Re: freeradius and mysql
If you have a windows machine that you can use, then NTRADPing is a nice
(free) tool to help test RADIUS configs
http://www.mastersoft-group.com/download/
Despite mentioning 'NT', I've used it on a Windows 98SE machine with no
problems.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 4:38 PM
Subject: Re: freeradius and mysql
Nicolas,
Thanks a ton for the reply about my accounting issue. I thought the same
thing at first about it being due to an unknown NAS, but even when the
NAS
is recognized, it still doesn't do any accounting. And now, every time I
test it, the NAS is recognized anyways, and still no accounting. Are you
sure it isn't due to me using radtest to test this? I have tried to run
radclient to do a test, but I can't seem to find any docs that explain
how
to test the accounting part. I did see something that said to do this:
echo User-Name = fnord | radclient 1.2.3.4 auth testing123
so, I did that, and it responded with:
Received response ID 98, code 3, length = 20
I checked the radius.log and it had rejected me, which was correct. But,
still no accounting.
So, I tried this just to see what would happen:
echo User-Name = fnord | radclient 1.2.3.4 acct testing123
And I got some accounting!!
var/log/radius/radacct/2.3.4.5/detail
Thu Apr 4 05:27:33 2002
User-Name = fnord
NAS-IP-Address = 2.3.4.5
Client-IP-Address = 2.3.4.5
Timestamp = 1017916053
So I guess accounting is working? But, I don't know how to use radclient
to
properly test it? Can someone give an example that I can try, so that I
can
see what a real accounting session will look like? Also, even though I
found
a little bit of accounting in the radacct folder, I noticed that nothing
showed up in the mysql radacct table? And yes, I do have sql listed in
the
accounting section of radiusd.conf.
And, as for full-debugging is concerned, yes, I have tried watching a
debug
session to see if it gives any clues, but I don't see much of anything
being
listed that concerns accounting? I see a couple of things about
accounting
files and the mysql accounting tables when the radiusd first starts up,
but
doing a test with radtest, it doesn't cause any info at all to show up
about
accounting?
Thanks again!
Frank
- Original Message -
From: Nicolas [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 2:03 AM
Subject: Re: freeradius and mysql
I have the same problem concerning clients.conf, you should use
clients
also, for me it works !
concerning your accounting pb, it's probably the same reason: unknown
NAS,
are you Full-Debugging ?
Nicolas
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 12:21 AM
Subject: Re: freeradius and mysql
Ya, I don't know much about that file either. I just made an entry
that
looked about like the default one, and added it below the default
one:
client 1.2.3.4 {
secret = testing123
shortname = anyname
}
And it seemed to work. It's kind of weird though, because the logs
show
the
correct shortname sometimes, but then other times, it says
UNKNOWN-NAS,
but
still processes the request anyways. Haven't quite nailed down what
is
causing this yet.
And I think my accounting problem (no accounting records) might be
due
to
me
using radtest right now. I think I might have to use radclient to
actually
see the accounting kick in. Not sure though, but I'll let you know
how
it
goes.
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 2:27 PM
Subject: Re: freeradius and mysql
the only problem I am having is I dont understand the
clients.conf,
is
there
a site that explains it, and etc.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 9:41 AM
Subject: Re: freeradius and mysql
I guess so, but we can also do it on the list too so that others
may
benefit
in the future?
Anyhow, I mainly just followed the instructions at:
http://www.frontios.com/freeradius.html
I had to install the MySQL-devel rpm before I did anything. The
only
thing
I
had to do different than what it says is that I had to remove
sql
from
Re: freeradius and mysql
I guess so, but we can also do it on the list too so that others may benefit in the future? Anyhow, I mainly just followed the instructions at: http://www.frontios.com/freeradius.html I had to install the MySQL-devel rpm before I did anything. The only thing I had to do different than what it says is that I had to remove sql from the authenticate section and put it back into the authorize section, even though the above website said to do the opposite. The only thing I'm a little stuck on right now is the accounting stuff. I added sql to the accounting section, but I don't see anything showing up in the mySQL tables, or even anything in the /var/log/radius/radacct folder? I do have all the logging turned on right now, and that is working, because I see a /var/log/radius/radius.log file, but I have no idea why accounting isn't working. Anyone have any ideas? Let me know what info I should post to help figure this out? Anyhow, let me know what you are stuck on, and I'll try to help. I'm definitely a newbie right now though, so don't be surprised if you already know more than me. :) Frank - Original Message - From: Juan Hernandez [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 12:10 PM Subject: Re: freeradius and mysql hey could you and I discouse off list what you did with free radius and mysql? - Original Message - From: tywe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 12:55 AM Subject: Re: freeradius and mysql Hi, Thanks to all for the help, I now have freeradius and mysql working together quite nicely :) My only question: Is it normal to see Info: Sending duplicate authentication reply to client whenever the request is rejected? Everything seems to work great, I was just wondering if that duplicate message was anything to worry about or not. Thanks again! Frank - Original Message - From: Nicolas [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 1:50 AM Subject: Re: freeradius and mysql To use Mysql, you'd better have to set the good directories during Building process (./configure --with-mysql-lib=/usr/lib ) then compile and install binaries. After that , take care to validate ld.so.conf with these directories in it and run ldconfig. Build your database in mysql (with the sql dump file, grant privileges to your user and fill in sql.conf) fill also clients.conf and clients and create a user in users in order to validate radiusd itself, after that create entries in radcheck table and test again with mysql. You should tune your radiusd.conf to validate the use of sql in auth and acct chapters Do some tests (radiusd -X)and come back Nicolas - Original Message - From: tywe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 5:20 AM Subject: Re: freeradius and mysql http://www.frontios.com/freeradius.html That's the only one I've came across so far. If anyone knows of others, please let us know. I'm trying to get this working right now too. Hope that helps! Frank - Original Message - From: Juan Hernandez To: [EMAIL PROTECTED] Sent: Wednesday, April 03, 2002 7:37 PM Subject: freeradius and mysql I know freeradius has the ability to work with mysql, to read from a mysql db, how do I configure it to do this? you dont have to tell me, I just need to get to a website that explains it. thanks for any help Juan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
the only problem I am having is I dont understand the clients.conf, is there a site that explains it, and etc. - Original Message - From: tywe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 9:41 AM Subject: Re: freeradius and mysql I guess so, but we can also do it on the list too so that others may benefit in the future? Anyhow, I mainly just followed the instructions at: http://www.frontios.com/freeradius.html I had to install the MySQL-devel rpm before I did anything. The only thing I had to do different than what it says is that I had to remove sql from the authenticate section and put it back into the authorize section, even though the above website said to do the opposite. The only thing I'm a little stuck on right now is the accounting stuff. I added sql to the accounting section, but I don't see anything showing up in the mySQL tables, or even anything in the /var/log/radius/radacct folder? I do have all the logging turned on right now, and that is working, because I see a /var/log/radius/radius.log file, but I have no idea why accounting isn't working. Anyone have any ideas? Let me know what info I should post to help figure this out? Anyhow, let me know what you are stuck on, and I'll try to help. I'm definitely a newbie right now though, so don't be surprised if you already know more than me. :) Frank - Original Message - From: Juan Hernandez [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 12:10 PM Subject: Re: freeradius and mysql hey could you and I discouse off list what you did with free radius and mysql? - Original Message - From: tywe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 12:55 AM Subject: Re: freeradius and mysql Hi, Thanks to all for the help, I now have freeradius and mysql working together quite nicely :) My only question: Is it normal to see Info: Sending duplicate authentication reply to client whenever the request is rejected? Everything seems to work great, I was just wondering if that duplicate message was anything to worry about or not. Thanks again! Frank - Original Message - From: Nicolas [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 1:50 AM Subject: Re: freeradius and mysql To use Mysql, you'd better have to set the good directories during Building process (./configure --with-mysql-lib=/usr/lib ) then compile and install binaries. After that , take care to validate ld.so.conf with these directories in it and run ldconfig. Build your database in mysql (with the sql dump file, grant privileges to your user and fill in sql.conf) fill also clients.conf and clients and create a user in users in order to validate radiusd itself, after that create entries in radcheck table and test again with mysql. You should tune your radiusd.conf to validate the use of sql in auth and acct chapters Do some tests (radiusd -X)and come back Nicolas - Original Message - From: tywe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 5:20 AM Subject: Re: freeradius and mysql http://www.frontios.com/freeradius.html That's the only one I've came across so far. If anyone knows of others, please let us know. I'm trying to get this working right now too. Hope that helps! Frank - Original Message - From: Juan Hernandez To: [EMAIL PROTECTED] Sent: Wednesday, April 03, 2002 7:37 PM Subject: freeradius and mysql I know freeradius has the ability to work with mysql, to read from a mysql db, how do I configure it to do this? you dont have to tell me, I just need to get to a website that explains it. thanks for any help Juan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: freeradius and mysql
Ya, I don't know much about that file either. I just made an entry that
looked about like the default one, and added it below the default one:
client 1.2.3.4 {
secret = testing123
shortname = anyname
}
And it seemed to work. It's kind of weird though, because the logs show the
correct shortname sometimes, but then other times, it says UNKNOWN-NAS, but
still processes the request anyways. Haven't quite nailed down what is
causing this yet.
And I think my accounting problem (no accounting records) might be due to me
using radtest right now. I think I might have to use radclient to actually
see the accounting kick in. Not sure though, but I'll let you know how it
goes.
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 2:27 PM
Subject: Re: freeradius and mysql
the only problem I am having is I dont understand the clients.conf, is
there
a site that explains it, and etc.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 9:41 AM
Subject: Re: freeradius and mysql
I guess so, but we can also do it on the list too so that others may
benefit
in the future?
Anyhow, I mainly just followed the instructions at:
http://www.frontios.com/freeradius.html
I had to install the MySQL-devel rpm before I did anything. The only
thing
I
had to do different than what it says is that I had to remove sql from
the
authenticate section and put it back into the authorize section, even
though
the above website said to do the opposite.
The only thing I'm a little stuck on right now is the accounting stuff.
I
added sql to the accounting section, but I don't see anything showing up
in
the mySQL tables, or even anything in the /var/log/radius/radacct
folder?
I
do have all the logging turned on right now, and that is working,
because
I
see a /var/log/radius/radius.log file, but I have no idea why accounting
isn't working. Anyone have any ideas? Let me know what info I should
post
to
help figure this out?
Anyhow, let me know what you are stuck on, and I'll try to help. I'm
definitely a newbie right now though, so don't be surprised if you
already
know more than me. :)
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 12:10 PM
Subject: Re: freeradius and mysql
hey could you and I discouse off list what you did with free radius
and
mysql?
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 12:55 AM
Subject: Re: freeradius and mysql
Hi,
Thanks to all for the help, I now have freeradius and mysql working
together
quite nicely :)
My only question: Is it normal to see Info: Sending duplicate
authentication reply to client whenever the request is rejected?
Everything
seems to work great, I was just wondering if that duplicate message
was
anything to worry about or not.
Thanks again!
Frank
- Original Message -
From: Nicolas [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 1:50 AM
Subject: Re: freeradius and mysql
To use Mysql, you'd better have to set the good directories during
Building
process (./configure --with-mysql-lib=/usr/lib ) then compile
and
install binaries.
After that , take care to validate ld.so.conf with these
directories
in
it
and run ldconfig.
Build your database in mysql (with the sql dump file, grant
privileges
to
your user and fill in sql.conf) fill also clients.conf and clients
and
create a user in users in order to validate radiusd itself, after
that
create entries in radcheck table and test again with mysql. You
should
tune
your radiusd.conf to validate the use of sql in auth and acct
chapters
Do some tests (radiusd -X)and come back
Nicolas
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 5:20 AM
Subject: Re: freeradius and mysql
http://www.frontios.com/freeradius.html
That's the only one I've came across so far. If anyone knows of
others,
please let us know. I'm trying to get this working right now too.
Hope that helps!
Frank
- Original Message -
From: Juan Hernandez
To: [EMAIL PROTECTED]
Sent: Wednesday, April 03, 2002 7:37 PM
Subject: freeradius and mysql
I know freeradius has the ability to work with mysql, to read
from
a
mysql
db, how do I configure it to do this?
you dont have to tell me, I just need to get to a website that
explains
it. thanks for any help
Re: freeradius and mysql
I have the same problem concerning clients.conf, you should use clients
also, for me it works !
concerning your accounting pb, it's probably the same reason: unknown NAS,
are you Full-Debugging ?
Nicolas
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Friday, April 05, 2002 12:21 AM
Subject: Re: freeradius and mysql
Ya, I don't know much about that file either. I just made an entry that
looked about like the default one, and added it below the default one:
client 1.2.3.4 {
secret = testing123
shortname = anyname
}
And it seemed to work. It's kind of weird though, because the logs show
the
correct shortname sometimes, but then other times, it says UNKNOWN-NAS,
but
still processes the request anyways. Haven't quite nailed down what is
causing this yet.
And I think my accounting problem (no accounting records) might be due to
me
using radtest right now. I think I might have to use radclient to actually
see the accounting kick in. Not sure though, but I'll let you know how it
goes.
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 2:27 PM
Subject: Re: freeradius and mysql
the only problem I am having is I dont understand the clients.conf, is
there
a site that explains it, and etc.
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 9:41 AM
Subject: Re: freeradius and mysql
I guess so, but we can also do it on the list too so that others may
benefit
in the future?
Anyhow, I mainly just followed the instructions at:
http://www.frontios.com/freeradius.html
I had to install the MySQL-devel rpm before I did anything. The only
thing
I
had to do different than what it says is that I had to remove sql
from
the
authenticate section and put it back into the authorize section, even
though
the above website said to do the opposite.
The only thing I'm a little stuck on right now is the accounting
stuff.
I
added sql to the accounting section, but I don't see anything showing
up
in
the mySQL tables, or even anything in the /var/log/radius/radacct
folder?
I
do have all the logging turned on right now, and that is working,
because
I
see a /var/log/radius/radius.log file, but I have no idea why
accounting
isn't working. Anyone have any ideas? Let me know what info I should
post
to
help figure this out?
Anyhow, let me know what you are stuck on, and I'll try to help. I'm
definitely a newbie right now though, so don't be surprised if you
already
know more than me. :)
Frank
- Original Message -
From: Juan Hernandez [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 12:10 PM
Subject: Re: freeradius and mysql
hey could you and I discouse off list what you did with free radius
and
mysql?
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 12:55 AM
Subject: Re: freeradius and mysql
Hi,
Thanks to all for the help, I now have freeradius and mysql
working
together
quite nicely :)
My only question: Is it normal to see Info: Sending duplicate
authentication reply to client whenever the request is rejected?
Everything
seems to work great, I was just wondering if that duplicate
message
was
anything to worry about or not.
Thanks again!
Frank
- Original Message -
From: Nicolas [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 1:50 AM
Subject: Re: freeradius and mysql
To use Mysql, you'd better have to set the good directories
during
Building
process (./configure --with-mysql-lib=/usr/lib ) then
compile
and
install binaries.
After that , take care to validate ld.so.conf with these
directories
in
it
and run ldconfig.
Build your database in mysql (with the sql dump file, grant
privileges
to
your user and fill in sql.conf) fill also clients.conf and
clients
and
create a user in users in order to validate radiusd itself,
after
that
create entries in radcheck table and test again with mysql. You
should
tune
your radiusd.conf to validate the use of sql in auth and acct
chapters
Do some tests (radiusd -X)and come back
Nicolas
- Original Message -
From: tywe [EMAIL PROTECTED]
To: [EMAIL PROTECTED]
Sent: Thursday, April 04, 2002 5:20 AM
Subject: Re: freeradius and mysql
http://www.frontios.com/freeradius.html
That's the only one I've came across so far. If anyone knows of
others,
please let us know. I'm trying
freeradius and mysql
I know freeradius has the ability to work with mysql, to read from a mysql db, how do I configure it to do this? you dont have to tell me, I just need to get to a website that explains it. thanks for any help Juan
Re: freeradius and mysql
You should read the documentation that comes with freeradius in the doc directory. vec - Original Message - From: Juan Hernandez To: [EMAIL PROTECTED] Sent: Wednesday, April 03, 2002 5:37 PM Subject: freeradius and mysql I know freeradius has the ability to work with mysql, to read from a mysql db, how do I configure it to do this? you dont have to tell me, I just need to get to a website that explains it. thanks for any help Juan
Re: freeradius and mysql
To use Mysql, you'd better have to set the good directories during Building process (./configure --with-mysql-lib=/usr/lib ) then compile and install binaries. After that , take care to validate ld.so.conf with these directories in it and run ldconfig. Build your database in mysql (with the sql dump file, grant privileges to your user and fill in sql.conf) fill also clients.conf and clients and create a user in users in order to validate radiusd itself, after that create entries in radcheck table and test again with mysql. You should tune your radiusd.conf to validate the use of sql in auth and acct chapters Do some tests (radiusd -X)and come back Nicolas - Original Message - From: tywe [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, April 04, 2002 5:20 AM Subject: Re: freeradius and mysql http://www.frontios.com/freeradius.html That's the only one I've came across so far. If anyone knows of others, please let us know. I'm trying to get this working right now too. Hope that helps! Frank - Original Message - From: Juan Hernandez To: [EMAIL PROTECTED] Sent: Wednesday, April 03, 2002 7:37 PM Subject: freeradius and mysql I know freeradius has the ability to work with mysql, to read from a mysql db, how do I configure it to do this? you dont have to tell me, I just need to get to a website that explains it. thanks for any help Juan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject).. compiling freeradius with mysql.
I installed mysql from source and mysql.h is there in include directory . With ./configure command i also provided this include directory. But still I dont know whether rlm_sql_mysql has been compiled or not. In /usr/local/lib i have the following files related to sql. rlm_sql.a, rlm_sql.so.0.0.0, rlm_sql_mysql.so.0 rlm_sql.la, rlm_sql_mysql.a, rlm_sql_mysql.so.0.0.0 rlm_sql.so, rlm_sql_mysql.la, rlm_sql.so.0 rlm_sql_mysql.so Thanks for your reply. Aqeel --- Nikodim Nikodimov [EMAIL PROTECTED] wrote: This happens probably because you don't have rlm_sql_mysql compiled. How did you install mysql? from source or rpm...I had the same problem, because first I had mysql from rpm...and I didn't have mysql.h...and some other header files...so I installed mysql from source...and after then I reinstalled freeradius and after that I had rlm_sql_mysql. NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 12:24 PM Subject: (no subject) HI all I am trying to run radius with mysql. when i start radius the following error message is shown. Starting - reading configuration files ... Module: Loaded SQL rlm_sql: Could not link driver rlm_sql_mysql: file not found rlm_sql: Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[4]: sql: Module instantiation failed. what should i do in this case. Thanks for your help. Aqeel __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject).. compiling freeradius with mysql.
Do you have in /etc/ld.so.conf /usr/local/lib this file tells where to search for shred libraries...if you don't put it and make ldconfig...to update ld.so.cache NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 1:21 PM Subject: Re: (no subject).. compiling freeradius with mysql. I installed mysql from source and mysql.h is there in include directory . With ./configure command i also provided this include directory. But still I dont know whether rlm_sql_mysql has been compiled or not. In /usr/local/lib i have the following files related to sql. rlm_sql.a, rlm_sql.so.0.0.0, rlm_sql_mysql.so.0 rlm_sql.la, rlm_sql_mysql.a, rlm_sql_mysql.so.0.0.0 rlm_sql.so, rlm_sql_mysql.la, rlm_sql.so.0 rlm_sql_mysql.so Thanks for your reply. Aqeel --- Nikodim Nikodimov [EMAIL PROTECTED] wrote: This happens probably because you don't have rlm_sql_mysql compiled. How did you install mysql? from source or rpm...I had the same problem, because first I had mysql from rpm...and I didn't have mysql.h...and some other header files...so I installed mysql from source...and after then I reinstalled freeradius and after that I had rlm_sql_mysql. NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 12:24 PM Subject: (no subject) HI all I am trying to run radius with mysql. when i start radius the following error message is shown. Starting - reading configuration files ... Module: Loaded SQL rlm_sql: Could not link driver rlm_sql_mysql: file not found rlm_sql: Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[4]: sql: Module instantiation failed. what should i do in this case. Thanks for your help. Aqeel __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject).. compiling freeradius with mysql.
I am using freeradius on solaris 2.7. There is no /etc/ld.so.conf file and also there is no ldconfig file. I have installed gnu binutil but still these files are not avaiable. Thanks for your reply. Aqeel --- Nikodim Nikodimov [EMAIL PROTECTED] wrote: Do you have in /etc/ld.so.conf /usr/local/lib this file tells where to search for shred libraries...if you don't put it and make ldconfig...to update ld.so.cache NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 1:21 PM Subject: Re: (no subject).. compiling freeradius with mysql. I installed mysql from source and mysql.h is there in include directory . With ./configure command i also provided this include directory. But still I dont know whether rlm_sql_mysql has been compiled or not. In /usr/local/lib i have the following files related to sql. rlm_sql.a, rlm_sql.so.0.0.0, rlm_sql_mysql.so.0 rlm_sql.la, rlm_sql_mysql.a, rlm_sql_mysql.so.0.0.0 rlm_sql.so, rlm_sql_mysql.la, rlm_sql.so.0 rlm_sql_mysql.so Thanks for your reply. Aqeel --- Nikodim Nikodimov [EMAIL PROTECTED] wrote: This happens probably because you don't have rlm_sql_mysql compiled. How did you install mysql? from source or rpm...I had the same problem, because first I had mysql from rpm...and I didn't have mysql.h...and some other header files...so I installed mysql from source...and after then I reinstalled freeradius and after that I had rlm_sql_mysql. NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 12:24 PM Subject: (no subject) HI all I am trying to run radius with mysql. when i start radius the following error message is shown. Starting - reading configuration files ... Module: Loaded SQL rlm_sql: Could not link driver rlm_sql_mysql: file not found rlm_sql: Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[4]: sql: Module instantiation failed. what should i do in this case. Thanks for your help. Aqeel __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: (no subject).. compiling freeradius with mysql.
Well I don't know how is it with shared libraries in Solaris...:(( see this information in the beginning of the rasius.conf file # # libdir: Where to find the rlm_* modules. # # This should be automatically set at configuration time. # # If the server builds and installs, but fails at execution time # with an 'undefined symbol' error, then you can use the libdir # directive to work around the problem. # # The cause is usually that a library has been installed on your # system in a place where the dynamic linker CANNOT find it. When # executing as root (or another user), your personal environment MAY # be set up to allow the dynamic linker to find the library. When # executing as a daemon, FreeRADIUS MAY NOT have the same # personalized configuration. # # To work around the problem, find out which library contains that symbol, # and add the directory containing that library to the end of 'libdir', # with a colon separating the directory names. NO spaces are allowed. # # e.g. libdir = /usr/local/lib:/opt/package/lib # # If that does not work, then you can re-configure and re-build the # server to NOT use shared libraries, via: # # ./configure --disable-shared # make # make install # NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 2:56 PM Subject: Re: (no subject).. compiling freeradius with mysql. I am using freeradius on solaris 2.7. There is no /etc/ld.so.conf file and also there is no ldconfig file. I have installed gnu binutil but still these files are not avaiable. Thanks for your reply. Aqeel --- Nikodim Nikodimov [EMAIL PROTECTED] wrote: Do you have in /etc/ld.so.conf /usr/local/lib this file tells where to search for shred libraries...if you don't put it and make ldconfig...to update ld.so.cache NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 1:21 PM Subject: Re: (no subject).. compiling freeradius with mysql. I installed mysql from source and mysql.h is there in include directory . With ./configure command i also provided this include directory. But still I dont know whether rlm_sql_mysql has been compiled or not. In /usr/local/lib i have the following files related to sql. rlm_sql.a, rlm_sql.so.0.0.0, rlm_sql_mysql.so.0 rlm_sql.la, rlm_sql_mysql.a, rlm_sql_mysql.so.0.0.0 rlm_sql.so, rlm_sql_mysql.la, rlm_sql.so.0 rlm_sql_mysql.so Thanks for your reply. Aqeel --- Nikodim Nikodimov [EMAIL PROTECTED] wrote: This happens probably because you don't have rlm_sql_mysql compiled. How did you install mysql? from source or rpm...I had the same problem, because first I had mysql from rpm...and I didn't have mysql.h...and some other header files...so I installed mysql from source...and after then I reinstalled freeradius and after that I had rlm_sql_mysql. NN - Original Message - From: Aqeel Anwar [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, April 02, 2002 12:24 PM Subject: (no subject) HI all I am trying to run radius with mysql. when i start radius the following error message is shown. Starting - reading configuration files ... Module: Loaded SQL rlm_sql: Could not link driver rlm_sql_mysql: file not found rlm_sql: Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[4]: sql: Module instantiation failed. what should i do in this case. Thanks for your help. Aqeel __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Do You Yahoo!? Yahoo! Tax Center - online filing with TurboTax http://http://taxes.yahoo.com/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
