date:20091130

Re: Remote access control in freeradius with mysql

2009-11-30 Thread cktan


Dear all,

Problem solved. Using Auth-Type attribute in radcheck table solve the 
problem.


Cheers.

cktan wrote:

Dear all,

I've a freeradius server running with LDAP as the Authentication and 
Authorization where else Accounting running on Mysql. It was working 
well at the moment and I'm looking to migrate from LDAP to run fully 
in Mysql.


Question is I need to have control on remote access for certain users. 
In LDAP, I used to have "dialupAccess" attribute to control the access 
for user and I can't find it in Mysql. I come across to radreply table 
but not sure which attribute should I use to have authorization for 
user to access. Looking for your kind information in this matter.


Regards



--
This message has been scanned for viruses and
dangerous content by MailScanner, and is
believed to be clean.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Error= Expecting section start brace '{' after "FreeRADIUS Version"

2009-11-30 Thread Yagnesh Dave

Hi Everyone,

I was trying to set-up mysql for logging the accounting logs for the users. I 
followed the instruction on http://www.frontios.com/freeradius.html and also on 
http://wiki.freeradius.org/SQL_HOWTO. The I tried to run the FreeRadius server. 
It did not start and was giving this error as given below,
###
including configuration file /usr/local/etc/raddb/sites-enabled/default
including configuration file /usr/local/etc/raddb/sites-enabled/inner-tunnel
including configuration file /usr/local/etc/raddb/sites-enabled/control-socket
including configuration file /usr/local/etc/raddb/sites-enabled/nohup.out
/usr/local/etc/raddb/sites-enabled/nohup.out[1]: Expecting section start brace 
'{' after "FreeRADIUS Version"
Errors reading /usr/local/etc/raddb/radiusd.conf
bash-3.00# 


Please help me to overcome this.

Thanks and Regards,
Yagnesh Dave.-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error= Expecting section start brace '{' after "FreeRADIUS Version"

2009-11-30 Thread Josip Rodin

On Mon, Nov 30, 2009 at 09:20:32AM -, Yagnesh Dave wrote:
> including configuration file /usr/local/etc/raddb/sites-enabled/nohup.out
> /usr/local/etc/raddb/sites-enabled/nohup.out[1]: Expecting section start 
> brace '{' after "FreeRADIUS Version"
> Errors reading /usr/local/etc/raddb/radiusd.conf

You have a "nohup.out" file in the sites-enabled directory. Remove it?

-- 
 2. That which causes joy or happiness.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: chilli + freeradius + mysql : Password check failed

2009-11-30 Thread David BiTx0


 

   Hi all,

  Forgive me for not answering but weekends I do not work J
 
 
>t...@kalik.net>Is it well written oon the login page? Try simpler password 
>(something>like 12345 - that will work even with CAPS LOCK on). If it still 
>fails>take it up with chillispot people.
 
I have tried with 1234 :
 
- INICIO 
---
 
Mon Nov 30 10:45:56 2009 : Debug: rlm_sql (sql): Released sql socket id: 4
Mon Nov 30 10:45:56 2009 : Info: ++[sql] returns ok
Mon Nov 30 10:45:56 2009 : Info: ++[expiration] returns noop
Mon Nov 30 10:45:56 2009 : Info: ++[logintime] returns noop
Mon Nov 30 10:45:56 2009 : Info: [pap] Found existing Auth-Type, not changing 
it.
Mon Nov 30 10:45:56 2009 : Info: ++[pap] returns noop
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Entering module authorize code
Mon Nov 30 10:45:56 2009 : Debug: sqlcounter_expand:  'SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='%{User-Name}''
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='%{User-Name}' -> SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'
Mon Nov 30 10:45:56 2009 : Debug: sqlcounter_expand:  '%{sql:SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'}'
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter] sql_xlat
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: %{User-Name} -> 
9799-8798-3665-6561
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter] sql_set_user escaped user --> 
'9799-8798-3665-6561'
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561' -> 
SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'
Mon Nov 30 10:45:56 2009 : Debug: rlm_sql (sql): Reserving sql socket id: 3
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter] row[0] returned NULL
Mon Nov 30 10:45:56 2009 : Debug: rlm_sql (sql): Released sql socket id: 3
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: %{sql:SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'} -> 
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: No integer found in string ""
Mon Nov 30 10:45:56 2009 : Info: ++[noresetcounter] returns noop
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Entering module authorize code
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Could not find Check item 
value pair
Mon Nov 30 10:45:56 2009 : Info: ++[dailycounter] returns noop
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Entering module authorize code
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Could not find Check item 
value pair
Mon Nov 30 10:45:56 2009 : Info: ++[monthlycounter] returns noop
Mon Nov 30 10:45:56 2009 : Info: Found Auth-Type = CHAP
Mon Nov 30 10:45:56 2009 : Info: +- entering group CHAP {...}
Mon Nov 30 10:45:56 2009 : Info: [chap] login attempt by "9799-8798-3665-6561" 
with CHAP password
Mon Nov 30 10:45:56 2009 : Info: [chap] Using clear text password "1234" for 
user 9799-8798-3665-6561 authentication.
Mon Nov 30 10:45:56 2009 : Info: [chap] Password check failed
Mon Nov 30 10:45:56 2009 : Info: ++[chap] returns reject
Mon Nov 30 10:45:56 2009 : Info: Failed to authenticate the user.
Mon Nov 30 10:45:56 2009 : Info: Using Post-Auth-Type Reject
Mon Nov 30 10:45:56 2009 : Info: +- entering group REJECT {...}
Mon Nov 30 10:45:56 2009 : Info: [attr_filter.access_reject]expand: 
%{User-Name} -> 9799-8798-3665-6561
Mon Nov 30 10:45:56 2009 : Debug:  attr_filter: Matched entry DEFAULT at line 11
Mon Nov 30 10:45:56 2009 : Info: ++[attr_filter.access_reject] returns updated
Mon Nov 30 10:45:56 2009 : Info: Delaying reject of request 0 for 1 seconds
Mon Nov 30 10:45:56 2009 : Debug: Going to the next request
Mon Nov 30 10:45:56 2009 : Debug: Waking up in 0.9 seconds.
Mon Nov 30 10:45:57 2009 : Info: Sending delayed reject for request 0
Sending Access-Reject of id 0 to 192.168.65.99 port 38212
Mon Nov 30 10:45:57 2009 : Debug: Waking up in 4.9 seconds.
Mon Nov 30 10:46:02 2009 : Info: Cleaning up request 0 ID 0 with timestamp +40
Mon Nov 30 10:46:02 2009 : Debug: Ready to process requests.
 
--- FIN 
--
 
 
>José Adiel Blandón Rivera canc...@gmail.com
> 
>are you using Crypted password in the database? you have to use clear 
>passwords in the database to successful login through chillispot and 
>freeradius.
> 
>Regards
 
I am using Clear passwords :
 
mysql> select * from radcheck;
++-+++---+
| id | username| attribute  | op | value |
++-+++---+
|  2 | 9799-8798-3665-6561 | Cleartext-Password | := | 1234  | 
++-+--

RE: chilli + freeradius + mysql : Password check failed

2009-11-30 Thread David BiTx0


   Hi all,

  Forgive me for not answering but weekends I do not work J
 
 
>t...@kalik.net>Is it well written oon the login page? Try simpler password 
>(something>like 12345 - that will work even with CAPS LOCK on). If it still 
>fails>take it up with chillispot people.
 
I have tried with 1234 :
 
- INICIO 
---
 
Mon Nov 30 10:45:56 2009 : Debug: rlm_sql (sql): Released sql socket id: 4
Mon Nov 30 10:45:56 2009 : Info: ++[sql] returns ok
Mon Nov 30 10:45:56 2009 : Info: ++[expiration] returns noop
Mon Nov 30 10:45:56 2009 : Info: ++[logintime] returns noop
Mon Nov 30 10:45:56 2009 : Info: [pap] Found existing Auth-Type, not changing 
it.
Mon Nov 30 10:45:56 2009 : Info: ++[pap] returns noop
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Entering module authorize code
Mon Nov 30 10:45:56 2009 : Debug: sqlcounter_expand:  'SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='%{User-Name}''
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='%{User-Name}' -> SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'
Mon Nov 30 10:45:56 2009 : Debug: sqlcounter_expand:  '%{sql:SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'}'
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter] sql_xlat
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: %{User-Name} -> 
9799-8798-3665-6561
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter] sql_set_user escaped user --> 
'9799-8798-3665-6561'
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561' -> 
SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'
Mon Nov 30 10:45:56 2009 : Debug: rlm_sql (sql): Reserving sql socket id: 3
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter] row[0] returned NULL
Mon Nov 30 10:45:56 2009 : Debug: rlm_sql (sql): Released sql socket id: 3
Mon Nov 30 10:45:56 2009 : Info: [noresetcounter]   expand: %{sql:SELECT 
SUM(AcctSessionTime) FROM radacct WHERE UserName='9799-8798-3665-6561'} -> 
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: No integer found in string ""
Mon Nov 30 10:45:56 2009 : Info: ++[noresetcounter] returns noop
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Entering module authorize code
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Could not find Check item 
value pair
Mon Nov 30 10:45:56 2009 : Info: ++[dailycounter] returns noop
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Entering module authorize code
Mon Nov 30 10:45:56 2009 : Debug: rlm_sqlcounter: Could not find Check item 
value pair
Mon Nov 30 10:45:56 2009 : Info: ++[monthlycounter] returns noop
Mon Nov 30 10:45:56 2009 : Info: Found Auth-Type = CHAP
Mon Nov 30 10:45:56 2009 : Info: +- entering group CHAP {...}
Mon Nov 30 10:45:56 2009 : Info: [chap] login attempt by "9799-8798-3665-6561" 
with CHAP password
Mon Nov 30 10:45:56 2009 : Info: [chap] Using clear text password "1234" for 
user 9799-8798-3665-6561 authentication.
Mon Nov 30 10:45:56 2009 : Info: [chap] Password check failed
Mon Nov 30 10:45:56 2009 : Info: ++[chap] returns reject
Mon Nov 30 10:45:56 2009 : Info: Failed to authenticate the user.
Mon Nov 30 10:45:56 2009 : Info: Using Post-Auth-Type Reject
Mon Nov 30 10:45:56 2009 : Info: +- entering group REJECT {...}
Mon Nov 30 10:45:56 2009 : Info: [attr_filter.access_reject]expand: 
%{User-Name} -> 9799-8798-3665-6561
Mon Nov 30 10:45:56 2009 : Debug:  attr_filter: Matched entry DEFAULT at line 11
Mon Nov 30 10:45:56 2009 : Info: ++[attr_filter.access_reject] returns updated
Mon Nov 30 10:45:56 2009 : Info: Delaying reject of request 0 for 1 seconds
Mon Nov 30 10:45:56 2009 : Debug: Going to the next request
Mon Nov 30 10:45:56 2009 : Debug: Waking up in 0.9 seconds.
Mon Nov 30 10:45:57 2009 : Info: Sending delayed reject for request 0
Sending Access-Reject of id 0 to 192.168.65.99 port 38212
Mon Nov 30 10:45:57 2009 : Debug: Waking up in 4.9 seconds.
Mon Nov 30 10:46:02 2009 : Info: Cleaning up request 0 ID 0 with timestamp +40
Mon Nov 30 10:46:02 2009 : Debug: Ready to process requests.
 
--- FIN 
--
 
 
>José Adiel Blandón Rivera canc...@gmail.com
> 
>are you using Crypted password in the database? you have to use clear 
>passwords in the database to successful login through chillispot and 
>freeradius.
> 
>Regards
 
I am using Clear passwords :
 
mysql> select * from radcheck;
++-+++---+
| id | username| attribute  | op | value |
++-+++---+
|  2 | 9799-8798-3665-6561 | Cleartext-Password | := | 1234  | 
++-+-

Making certs for Windows users

2009-11-30 Thread Peter Carlstedt

Hello everyone.

I got some questions regarding how to make a certificate that works towards
windows clients while running Freeradius with PEAP.

Well I have read on the wiki for Freeradius about making a standalone cert for
windows clients (root cert) but why do i need that installed on the windows
clients when i want to run peap? Isn´t peap meant to work in the way that you
shouldnt have to install stand alone certs in the users computers?

Anyway... I dont really understand what it is that i need to do to make real
certificates, I´ve read the "readme" file in raddb/certs but dont understand
what it says. I have got ca.cnf anf ca.pem etc since i started the radius
server the first time where it said that it made some certs, which i guess it
test certificates... the readme file only says that i should remove the old
ones but when i try to get into the certs folder through the terminal it says i
do not have permission to go into that folder.. Im using Ubuntu Desktop and I
dont know a way to get into the folder with the root other than typing "sudo cd
certs" which do not work. :/

Can I ignore the part which says that I need to remove the certs created when i
run the server the first time and just do changes in the ca.cnf?

As a sidenote, I´ve never worked with certificates before, I know what they are
meant to do but more than that i dont know.

Best regards/ Peter Carlstedt

_
Windows Live Hotmail: Your friends can get your Facebook updates, right from
Hotmail®.
http://www.microsoft.com/middleeast/windows/windowslive/see-it-in-action/social-network-basics.aspx?ocid=PID23461::T:WLMTAGL:ON:WL:en-xm:SI_SB_4:092009-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

53 matches

Mail list logo