Re: question about freeradius
El abr 28, 2013 10:13 p.m., "Tim Reichhart" escribió: > > Hey Guys > > I am just wondering if I can use freeradius for hotspot and dial up accounts on same box or does it have to be separate box for hotspot and dial up accounts? > > > > Tim > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html In same box, with virtual seves. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius as DHCP server (static IP + some options)
New article on wiki: http://wiki.freeradius.org/dhcp-for-static-ip-allocation Please let me know your thoughts. 2013/3/3 Alan DeKok : > Leo Combes wrote: >> As additional information, I tried with PPA version in Debian and do >> not work (same problem). >> Maybe is a problem in my server. > > Maybe. I've just been running it with an Ubuntu 12.04 system, and it > seems to work for me. I didn't install selinux, firewalls, or anything > else. > > I'd suggest trying the v2.x.x branch from git. I've put some more > debugging messages in there (and cleaned others up). That should make > it clear what's going on. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Problem with login in FR wiki
Many thanks! 2013/4/5 Arran Cudbard-Bell : > > On 5 Apr 2013, at 12:18, Leo Combes wrote: > >> I'm trying to post on FR WIKI with an openID account, as I try to log >> in with my ID I get an "Authentication failed - Insufficient data from >> authentication provider, name not provided or empty" error. The same >> happens to me when I try to log in with my GitHub account. >> >> Somebody has an idea? > > OK lets break apart the message. > > "Authentication failed" - You failed authentication > "Insufficient data from authentication provider" - Because the provider > didn't send all the information we required > "name not provided or empty" - The thing that was missing was your name > > This post explains why your name is required: > http://comments.gmane.org/gmane.comp.lang.lua.luajit/1165 > > Please add your name to your GitHub profile or OpenID account > > -Arran > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Problem with login in FR wiki
I'm trying to post on FR WIKI with an openID account, as I try to log in with my ID I get an "Authentication failed - Insufficient data from authentication provider, name not provided or empty" error. The same happens to me when I try to log in with my GitHub account. Somebody has an idea? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Update reply to DHCP-Ack
Works fine with this: if(ok){ update request { DHCP-Message-Type := DHCP-Ack } deselabs_dhcp_cpes.post-auth } See that I use "update request" instead of "update reply". I don't know if is correct this way, but works. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Update reply to DHCP-Ack
I have a small problem that I do not know how to solve. Freeradius works correctly as DHCP server delivering static IPs, but I need to write a log in the PostAuth database if the transaction finalizes with a DHCP-Ack. Currently when transaction ends with a DHCP-Ack, this configuration log a "DHCP-Request" instead of "DHCP-Ack". This is my setup: server dhcp { listen { type = dhcp ipaddr = 255.255.255.255 port = 67 interface = eth1.2 broadcast = yes } dhcp DHCP-Discover { update reply { DHCP-Message-Type = DHCP-Offer } update reply { DHCP-Domain-Name-Server = 0.0.0.0 DHCP-IP-Address-Lease-Time = 7200 DHCP-DHCP-Server-Identifier = 172.31.1.1 } deselabs_dhcp_cpes.authorize ok } dhcp DHCP-Request { update reply { # Is not the type supposed to be changed here? DHCP-Message-Type = DHCP-Ack } update reply { DHCP-Domain-Name-Server = 0.0.0.0 DHCP-IP-Address-Lease-Time = 7200 DHCP-DHCP-Server-Identifier = 172.31.1.1 Reply-Message = "Framed protocol is" } deselabs_dhcp_cpes.authorize deselabs_dhcp_cpes.post-auth ok } dhcp { # send a DHCP NAK. reject } } This is the debug output: Received DHCP-Discover of id 7ca9d708 from 0.0.0.0:68 to 255.255.255.255:67 DHCP-Opcode = Client-Message DHCP-Hardware-Type = Ethernet DHCP-Hardware-Address-Length = 6 DHCP-Hop-Count = 0 DHCP-Transaction-Id = 2091505416 DHCP-Number-of-Seconds = 0 DHCP-Flags = Broadcast DHCP-Client-IP-Address = 0.0.0.0 DHCP-Your-IP-Address = 0.0.0.0 DHCP-Server-IP-Address = 0.0.0.0 DHCP-Gateway-IP-Address = 0.0.0.0 DHCP-Client-Hardware-Address = 00:50:c2:31:24:4f DHCP-Message-Type = DHCP-Discover DHCP-Client-Identifier = 0x010050c231244f00 DHCP-IP-Address-Lease-Time = 4294967040 DHCP-IP-Address-Lease-Time = 4294967295 DHCP-Parameter-Request-List = DHCP-Subnet-Mask DHCP-Parameter-Request-List = DHCP-Router-Address DHCP-Parameter-Request-List = DHCP-Domain-Name-Server DHCP-Parameter-Request-List = DHCP-Domain-Name DHCP-Parameter-Request-List = DHCP-Bootp-Extensions-Path DHCP-Parameter-Request-List = DHCP-TFTP-Server-Name DHCP-Parameter-Request-List = DHCP-SIP-Servers-DHCP-Option DHCP-Parameter-Request-List = DHCP-HTTP-Proxy DHCP-Parameter-Request-List = 213 DHCP-Parameter-Request-List = 214 DHCP-Parameter-Request-List = 215 server dhcp { Trying sub-section dhcp DHCP-Discover {...} +- entering group DHCP-Discover {...} ++[reply] returns noop ++[reply] returns noop [deselabs_dhcp_cpes]expand: %{DHCP-Client-Hardware-Address} -> 00:50:c2:31:24:4f [deselabs_dhcp_cpes] sql_set_user escaped user --> '00:50:c2:31:24:4f' rlm_sql (deselabs_dhcp_cpes): Reserving sql socket id: 4 [deselabs_dhcp_cpes]expand: SELECT '1', mac_address, 'Cleartext-Password', REPLACE('%{SQL-User-Name}', ':', ''), ':=' FROM cpes WHERE mac_address = REPLACE('%{SQL-User-Name}', ':', '') UNION SELECT '2', mac_address, 'Auth-Type', 'Accept', ':=' FROM cpes WHERE mac_address = REPLACE('%{SQL-User-Name}', ':', '') -> SELECT '1', mac_address, 'Cleartext-Password', REPLACE('00:50:c2:31:24:4f', ':', ''), ':=' FROM cpes WHERE mac_address = REPLACE('00:50:c2:31:24:4f', ':', '') UNION SELECT '2', mac_address, 'Auth-Type', 'Accept', ':=' FROM cpes WHERE mac_address = REPLACE('00:50:c2:31:24:4f', ':', '') [deselabs_dhcp_cpes] User found in radcheck table [deselabs_dhcp_cpes]expand: SELECT '1', mac_address as username, 'DHCP-Your-IP-Address' AS attribute, CONCAT_WS('.', nets.net_prefix, cpes.ip_host) AS value, '=' AS op FROM cpes LEFT OUTER JOIN nets ON cpes.net=nets.net_id WHERE cpes.mac_address = REPLACE('%{SQL-User-Name}', ':', '') UNION SELECT '2' as id, mac_address, 'DHCP-Subnet-Mask' AS attribute, nets.netmask AS value, '=' AS op FROM cpes LEFT OUTER JOIN nets ON cpes.net=nets.net_id WHERE cpes.mac_address = REPLACE('%{SQL-User-Name}', ':', '') UNION SELECT '3' as id, mac_address, 'DHCP-Router-Address' AS attribute, nets.gateway AS value, '=' AS opFROM cpes LEFT OUTER JOIN nets ON cpes.net=nets.net_id WHERE cpes.mac_address = REPLACE('%{SQL-User-Name}', ':', '') UNION SELECT '4' as id, mac_address, 'DHCP-Bootp-Extensions-Pa
Re: Freeradius as DHCP server (static IP + some options)
> That might be an Ubuntu security setting. It seems to work fine on my > systems. So it's hard to track down what's happening on other systems. > > Alan DeKok. As additional information, I tried with PPA version in Debian and do not work (same problem). Maybe is a problem in my server. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius as DHCP server (static IP + some options)
> what configuration options are in the PPA version? something is not right > there Once installed, the configuration files in /etc/freeradius or /etc/raddb are the same, or at least the most relevant ones to its functionality. I will compare one by one to see if I find any difference. > ...and it can go onto WIKI/HOWTO > > alan Install DHCP for static IP allocation in Freeradius. Example based on Debian. Freeradius as DHCP server for static ip allocation from MySQL, with use of DHCP options. Might work for provision of cable modems. One important thing! (specially Ubuntu users): (*) DHCP functionality will not work when installed from PPA, or at least the package version 2.2.0 + dfsg-ppa10 not work. Reason: I dont know. I installed and configured without errors, seems to respond correctly OFFER and ACK but this packets never leaves the network adapter. This example assumes that: The network adapter where is connected freeradius have the following settings: auto eth1 iface eth1 inet static address 192.168.10.1 netmask 255.255.255.0 network 192.168.10.0 broadcast 192.168.10.255 Client mac-address is 00:11:22:00:33:44 Let's start: >From sources: - Download sources from Freeradius: wget ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.2.0.tar.gz - Unpack sources, then enter in new directory: tar -xvzf freeradius-server-2.2.0.tar.gz cd freeradius-server-2.2.0 - Configure it: ./configure --with-dhcp - Add dictionary: (**) edit share/dictionary (in sources files) and add a line containing "$INCLUDE dictionary.dhcp" whithout quotes. - If mysql is not installed, install it: apt-get install mysql-server - Also, with mysql need some extra packages:(***) apt-get install mysql-devel libmysqld-dev libmysqlclient-dev libmysqld-dev libmysqld-pic - Compile: make make install (do as root) - Modify radiusd.conf (the configuration files is located in /usr/local/etc/raddb) uncomment "$INCLUDE sql.conf" set "user = root" and "group = root" - Modify sql.conf configure login/password for access to mysql database leave dialup.conf included - Create database "radius" mysql -u user -p pass (login in mysql console) create database radius - Load schema for mysql mysql -u user -p pass radius < schema.sql - Add this in radius database: mysql -u user -p pass (login in mysql console) use radius; INSERT INTO `radcheck` (`username`, `attribute`, `op`, `value`) VALUES ('00:11:22:00:33:44', 'Cleartext-Password', ':=', ''); INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`) VALUES ('00:11:22:00:33:44', 'DHCP-Your-IP-Address', '=', '192.168.10.10'); optionally included as example: INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`) VALUES ('00:11:22:00:33:44', 'DHCP-Subnet-Mask', '=', '255.255.255.0'); INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`) VALUES ('00:11:22:00:33:44', 'DHCP-Router-Address', '=', '192.168.10.1'); INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`) VALUES ('00:11:22:00:33:44', 'DHCP-Bootp-Extensions-Path', '=', 'modem.acf'); INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`) VALUES ('00:11:22:00:33:44', 'DHCP-TFTP-Server-Name', '=', '172.31.1.1'); - Modify /usr/local/etc/raddb/sql/dialup.conf, replace: sql_user_name = "%{User-Name}" for... sql_user_name = "%{DHCP-Client-Hardware-Address}" This use mac-address as username. - create a /usr/local/etc/raddb/sites-enabled/dhcp_static and add this: (you can find the original example in /usr/local/etc/raddb/sites-available/dhcp) server dhcp { listen { type = dhcp ipaddr = 255.255.255.255 port = 67 interface = eth1 broadcast = yes } dhcp DHCP-Discover { update reply { DHCP-Message-Type = DHCP-Offer } update reply { DHCP-Domain-Name-Server = 0.0.0.0 DHCP-IP-Address-Lease-Time = 7200 DHCP-DHCP-Server-Identifier = 192.168.10.1 } sql.authorize ok } dhcp DHCP-Request { update reply { DHCP-Message-Type = DHCP-Ack } update reply { DHCP-Domai
Re: Freeradius as DHCP server (static IP + some options)
I apollogize for the late response, I have been very busy and I couldn't keep working on this. I found the problem! (at least it works now) I installed Freeradius from PPA. https://launchpad.net/~freeradius/+archive/stable DHCP functionality not work when installed from PPA, or at least the package version 2.2.0 + dfsg-ppa10 not work. Reason: installed and configured without errors, seems to respond correctly OFFER and ACK but this packets never leaves the network adapter. SOLUTION: install and configure from sources. I'm writing a how-to for setting freeradius as DHCP server, completely from scratch, for static IP allocation, with DHCP options and using Mysql. If you allow me, i'd like to post it in this mailing list for you to test and correct it. Thanks! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: output attributes in free-radius
2013/1/29 Lakshmi Narayana Baliah : > Hi All, > > How can i define output attributes in free-radius? > Any help would be appreciated. > I'm no expert on this, but maybe adding a custom dictionary? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius as DHCP server (static IP + some options)
2013/1/23 : > hi, > > those ID values look a little 'wierd' - vary large and negative I don't understand where this values came from? which would be the normal values? > does the DHCP response leave the server? do you have anything > like dHCP snooping on the network that might be blocking the > responses from this new DHCP server or is the client getting > its answers from a.n.another DHCP server and so not dealing with > the FR response? > > alan I tried connecting the modem directly to the server, without a switch or any server that may cause any trouble. I got the same result, the server receives DISCOVER packet. Chechinkg the log on debug, it seems to send and OFFER (Sending DHCP-Offer of id 8e22cb4d from 255.255.255.255:67 to 255.255.255.255:68) but it doesn't, It's verified that it does not send it. What can I check, in order to find the problem? Thanks for your interest. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius as DHCP server (static IP + some options)
Thanks for your reply. Fortunately it seems that the segfault is a false alarm. As it semt strange to me that Freeradius stop working by segfault, I installed FR in another PC and I copy the same configuration. Now it seems to be working, except that it stays in loop on DHCP Discover (no Offer, no Request, no Ack). FreeRADIUS Version 2.2.0, for host x86_64-pc-linux-gnu, built on Sep 20 2012 at 04:13:51 Copyright (C) 1999-2012 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may redistribute copies of FreeRADIUS under the terms of the GNU General Public License v2. Starting - reading configuration files ... including configuration file /etc/freeradius/radiusd.conf including configuration file /etc/freeradius/clients.conf including files in directory /etc/freeradius/mods-enabled/ including configuration file /etc/freeradius/mods-enabled/sqlcounter_expire_on_login including configuration file /etc/freeradius/mods-enabled/rediswho including configuration file /etc/freeradius/mods-enabled/otp including configuration file /etc/freeradius/mods-enabled/mac2vlan including configuration file /etc/freeradius/mods-enabled/smsotp including configuration file /etc/freeradius/mods-enabled/chap including configuration file /etc/freeradius/mods-enabled/checkval including configuration file /etc/freeradius/mods-enabled/dhcp_sqlippool including configuration file /etc/freeradius/mods-enabled/pap including configuration file /etc/freeradius/mods-enabled/inner-eap including configuration file /etc/freeradius/mods-enabled/ippool including configuration file /etc/freeradius/mods-enabled/soh including configuration file /etc/freeradius/mods-enabled/exec including configuration file /etc/freeradius/mods-enabled/sql_log including configuration file /etc/freeradius/mods-enabled/redis including configuration file /etc/freeradius/mods-enabled/ntlm_auth including configuration file /etc/freeradius/mods-enabled/logintime including configuration file /etc/freeradius/mods-enabled/passwd including configuration file /etc/freeradius/mods-enabled/expiration including configuration file /etc/freeradius/mods-enabled/counter including configuration file /etc/freeradius/mods-enabled/acct_unique including configuration file /etc/freeradius/mods-enabled/krb5 including configuration file /etc/freeradius/mods-enabled/policy including configuration file /etc/freeradius/mods-enabled/dynamic_clients including configuration file /etc/freeradius/mods-enabled/detail.log including configuration file /etc/freeradius/mods-enabled/expr including configuration file /etc/freeradius/mods-enabled/ldap including configuration file /etc/freeradius/mods-enabled/opendirectory including configuration file /etc/freeradius/mods-enabled/cache including configuration file /etc/freeradius/mods-enabled/always including configuration file /etc/freeradius/mods-enabled/digest including configuration file /etc/freeradius/mods-enabled/realm including configuration file /etc/freeradius/mods-enabled/detail including configuration file /etc/freeradius/mods-enabled/perl including configuration file /etc/freeradius/mods-enabled/detail.example.com including configuration file /etc/freeradius/mods-enabled/attr_rewrite including configuration file /etc/freeradius/mods-enabled/mac2ip including configuration file /etc/freeradius/mods-enabled/files including configuration file /etc/freeradius/mods-enabled/linelog including configuration file /etc/freeradius/mods-enabled/preprocess including configuration file /etc/freeradius/mods-enabled/pam including configuration file /etc/freeradius/mods-enabled/attr_filter including configuration file /etc/freeradius/mods-enabled/etc_group including configuration file /etc/freeradius/mods-enabled/radutmp including configuration file /etc/freeradius/mods-enabled/smbpasswd including configuration file /etc/freeradius/mods-enabled/echo including configuration file /etc/freeradius/mods-enabled/wimax including configuration file /etc/freeradius/mods-enabled/replicate including configuration file /etc/freeradius/mods-enabled/mschap including configuration file /etc/freeradius/mods-enabled/cui including configuration file /etc/freeradius/mods-enabled/unix including configuration file /etc/freeradius/mods-enabled/radrelay including configuration file /etc/freeradius/mods-enabled/sradutmp including configuration file /etc/freeradius/eap.conf including configuration file /etc/freeradius/sqlippool.conf including configuration file /etc/freeradius/sql/mysql/ippool.conf including configuration file /etc/freeradius/policy.conf including files in directory /etc/freeradius/sites-enabled/ including configuration file /etc/freeradius/sites-enabled/dhcp including configuration file /etc/freeradius/sites-enabled/default including configuration file /etc/freeradius/sites-enabled/inner-tunnel main { user = "root" group = "freerad" allow_core_dumps = no } incl
Re: Freeradius as DHCP server (static IP + some options)
Thanks again Alan. > > At last I tried to run freeradius: > > Please use "radiusd -X", not "radiusd -Xx" OK. > > Info: server dhcp { > > Debug: Trying sub-section dhcp DHCP-Discover {...} > > Info: +- entering group DHCP-Discover {...} > > Info: ++[reply] returns noop > > Info: ++[reply] returns noop > > Segmentation fault > > > > I'm missing something obvious? > > Nope. It should work. It looks like the mac2ip module is crashing > for some unknown reason. > > Can you follow doc/bugs? It will tell you how to post more debugging > information so we can see exactly where it's going wrong. I don't know how to do that. Any link on how to do it? Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius as DHCP server (static IP + some options)
Thanks Alan. I hope to make it work. As I have little experience with Freeradius, I want to start doing a little test with the "mac2ip" module. I made a file called mac2ip in /etc/freeradius with the following contents: 00:13:96:00:f9:84,10.1.100.1 The /etc/freeradius/sites-enabled/dhcp as follows: server dhcp { listen { type = dhcp ipaddr = 255.255.255.255 port = 67 interface = eth0 #broadcast = no } dhcp DHCP-Discover { update reply { DHCP-Message-Type = DHCP-Offer } # The contents here are invented. Change them! update reply { DHCP-Domain-Name-Server = 8.8.8.8 DHCP-Domain-Name-Server += 8.8.4.4 DHCP-Subnet-Mask = 255.255.0.0 DHCP-Router-Address = 10.1.1.3 DHCP-IP-Address-Lease-Time = 7200 DHCP-DHCP-Server-Identifier = 10.1.2.10 } mac2ip # Or, allocate IPs from the DHCP pool in SQL. #dhcp_sqlippool.postauth ok } dhcp DHCP-Request { update reply { DHCP-Message-Type = DHCP-Ack } # The contents here are invented. Change them! update reply { DHCP-Domain-Name-Server = 8.8.8.8 DHCP-Domain-Name-Server += 8.8.4.4 DHCP-Router-Address = 10.1.1.3 DHCP-IP-Address-Lease-Time = 7200 DHCP-DHCP-Server-Identifier = 10.1.2.10 } mac2ip # Or, allocate IPs from the DHCP pool in SQL. #dhcp_sqlippool.postauth ok } # If there's no named section for the packet type, then the packet # is processed through this section. dhcp { # send a DHCP NAK. reject } } passwd mac2ip { filename = ${confdir}/mac2ip format = "*DHCP-Client-Hardware-Address:=DHCP-Your-IP-Address" delimiter = "," } I have added the dhcp.dictionary. At last I tried to run freeradius: Info: Starting - reading configuration files ... Debug: including configuration file /etc/freeradius/radiusd.conf Debug: including configuration file /etc/freeradius/clients.conf Debug: including files in directory /etc/freeradius/mods-enabled/ Debug: including configuration file /etc/freeradius/mods-enabled/rediswho Debug: including configuration file /etc/freeradius/mods-enabled/replicate Debug: including configuration file /etc/freeradius/mods-enabled/linelog Debug: including configuration file /etc/freeradius/mods-enabled/redis Debug: including configuration file /etc/freeradius/mods-enabled/counter Debug: including configuration file /etc/freeradius/mods-enabled/sradutmp Debug: including configuration file /etc/freeradius/mods-enabled/sql_log Debug: including configuration file /etc/freeradius/mods-enabled/echo Debug: including configuration file /etc/freeradius/mods-enabled/files Debug: including configuration file /etc/freeradius/mods-enabled/mac2vlan Debug: including configuration file /etc/freeradius/mods-enabled/ntlm_auth Debug: including configuration file /etc/freeradius/mods-enabled/always Debug: including configuration file /etc/freeradius/mods-enabled/soh Debug: including configuration file /etc/freeradius/mods-enabled/detail.log Debug: including configuration file /etc/freeradius/mods-enabled/unix Debug: including configuration file /etc/freeradius/mods-enabled/inner-eap Debug: including configuration file /etc/freeradius/mods-enabled/exec Debug: including configuration file /etc/freeradius/mods-enabled/krb5 Debug: including configuration file /etc/freeradius/mods-enabled/smbpasswd Debug: including configuration file /etc/freeradius/mods-enabled/cui Debug: including configuration file /etc/freeradius/mods-enabled/expiration Debug: including configuration file /etc/freeradius/mods-enabled/perl Debug: including configuration file /etc/freeradius/mods-enabled/mac2ip Debug: including configuration file /etc/freeradius/mods-enabled/digest Debug: including configuration file /etc/freeradius/mods-enabled/smsotp Debug: including configuration file /etc/freeradius/mods-enabled/pam Debug: including configuration file /etc/freeradius/mods-enabled/wimax Debug: including configuration file /etc/freeradius/mods-enabled/mschap Debug: including configuration file /etc/freeradius/mods-enabled/checkval Debug: including configuration file /etc/freeradius/mods-enabled/otp Debug: including configuration file /etc/freeradius/mods-enabled/radutmp Debug: including configuration file /etc/freeradius/mods-enabled/preprocess Debug: including configuration file /etc/freeradius/mods-enabled/ippool Debug: including configuration file /etc/freeradius/mods-enabled/ldap Debug: including configuration file /etc/freeradius/mods-enabled/logintime Debug: including configuration file /etc/freeradius/mods-enabled/sqlcounter_expire_on_login Debug: including configuration file /etc/freeradius/mods-enabled/detail Debug: including configuration file /etc/freeradius/mods-enabled/acct_unique Debug: including configuration file /etc/freeradius/mods-enabled/passwd Debug: including configuration file /etc/freeradius/mods-enabled/chap Debug: including
Freeradius as DHCP server (static IP + some options)
Hello. I successfully run ISC-DHCP server for provisioning modems in an ISP's network, but what I wanted to try is something more modern and with database support. I want to try using Freeradius as DHCP server, but first I want to know if it is possible with these requirements: - Need to deliver fixed IP (or static) according to mac-address. - Need to provide, in addition to the IP, some DHCP options. Option 1 (Subnet mask), Option 3 (Routers), Option 6 (DNS server), Option 15 (Domainname), Option 18 (Extensions path), Option 66 (TFTP server name), Option120 (SIP Servers DHCP Option). - The IP and Options corresponding to each mac-address has to be stored in mysql. According dhcpdump, the dhcp client request looks like this: TIME: 2013-01-21 16:23:30.787 IP: 0.0.0.0 (0:13:96:0:f9:84) > 255.255.255.255 (ff:ff:ff:ff:ff:ff) OP: 1 (BOOTPREQUEST) HTYPE: 1 (Ethernet) HLEN: 6 HOPS: 0 XID: 8e22cb4d SECS: 0 FLAGS: 7f80 CIADDR: 0.0.0.0 YIADDR: 0.0.0.0 SIADDR: 0.0.0.0 GIADDR: 0.0.0.0 CHADDR: 00:13:96:00:f9:84:00:00:00:00:00:00:00:00:00:00 SNAME: . FNAME: . OPTION: 53 ( 1) DHCP message type 1 (DHCPDISCOVER) OPTION: 61 ( 8) Client-identifier 01:00:13:96:00:f9:84:00 OPTION: 51 ( 4) IP address leasetime -256 () OPTION: 51 ( 4) IP address leasetime -1 () OPTION: 55 ( 11) Parameter Request List 1 (Subnet mask) 3 (Routers) 6 (DNS server) 15 (Domainname) 18 (Extensions path) 66 (TFTP server name) 120 (SIP Servers DHCP Option) 135 (???) 213 (???) 214 (???) 215 (???) Freeradius 2.2.0 can provide this functionality just configuring it, or it would be necessary to use modules or developments that aren't available yet? Thanks in advance! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html