Re: question about freeradius

2013-04-28 Thread Leo Combes
El abr 28, 2013 10:13 p.m., Tim Reichhart t...@nwohiobb.com escribió:

 Hey Guys

 I am just wondering if I can use freeradius for hotspot and dial up
accounts on same box or does it have to be separate box for hotspot and
dial up accounts?



 Tim


 -
 List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

In same box, with virtual seves.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem with login in FR wiki

2013-04-05 Thread Leo Combes
I'm trying to post on FR WIKI with an openID account, as I try to log
in with my ID I get an Authentication failed - Insufficient data from
authentication provider, name not provided or empty error. The same
happens to me when I try to log in with my GitHub account.

Somebody has an idea?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Problem with login in FR wiki

2013-04-05 Thread Leo Combes
Many thanks!

2013/4/5 Arran Cudbard-Bell a.cudba...@freeradius.org:

 On 5 Apr 2013, at 12:18, Leo Combes comb...@gmail.com wrote:

 I'm trying to post on FR WIKI with an openID account, as I try to log
 in with my ID I get an Authentication failed - Insufficient data from
 authentication provider, name not provided or empty error. The same
 happens to me when I try to log in with my GitHub account.

 Somebody has an idea?

 OK lets break apart the message.

 Authentication failed - You failed authentication
 Insufficient data from authentication provider - Because the provider 
 didn't send all the information we required
 name not provided or empty - The thing that was missing was your name

 This post explains why your name is required:
 http://comments.gmane.org/gmane.comp.lang.lua.luajit/1165

 Please add your name to your GitHub profile or OpenID account

 -Arran
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius as DHCP server (static IP + some options)

2013-04-05 Thread Leo Combes
New article on wiki:

http://wiki.freeradius.org/dhcp-for-static-ip-allocation

Please let me know your thoughts.

2013/3/3 Alan DeKok al...@deployingradius.com:
 Leo Combes wrote:
 As additional information, I tried with PPA version in Debian and do
 not work (same problem).
 Maybe is a problem in my server.

   Maybe.  I've just been running it with an Ubuntu 12.04 system, and it
 seems to work for me.  I didn't install selinux, firewalls, or anything
 else.

   I'd suggest trying the v2.x.x branch from git.  I've put some more
 debugging messages in there (and cleaned others up).  That should make
 it clear what's going on.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Update reply to DHCP-Ack

2013-03-27 Thread Leo Combes
Works fine with this:

if(ok){
update request {
DHCP-Message-Type := DHCP-Ack
}
deselabs_dhcp_cpes.post-auth
}

See that I use update request instead of update reply.
I don't know if is correct this way, but works.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Update reply to DHCP-Ack

2013-03-25 Thread Leo Combes
I have a small problem that I do not know how to solve.
Freeradius works correctly as DHCP server delivering static IPs, but I
need to write a log in the PostAuth database if the transaction
finalizes with a DHCP-Ack.

Currently when transaction ends with a DHCP-Ack, this configuration
log a DHCP-Request instead of DHCP-Ack.

This is my setup:


server dhcp {
listen {
type = dhcp
ipaddr = 255.255.255.255
port = 67
interface = eth1.2
broadcast = yes
}

dhcp DHCP-Discover {
update reply {
DHCP-Message-Type = DHCP-Offer
}

update reply {
DHCP-Domain-Name-Server = 0.0.0.0
DHCP-IP-Address-Lease-Time = 7200
DHCP-DHCP-Server-Identifier = 172.31.1.1
}

deselabs_dhcp_cpes.authorize
ok
}

dhcp DHCP-Request {
update reply {  # Is not the type supposed to be 
changed here?
DHCP-Message-Type = DHCP-Ack
}

update reply {
DHCP-Domain-Name-Server = 0.0.0.0
DHCP-IP-Address-Lease-Time = 7200
DHCP-DHCP-Server-Identifier = 172.31.1.1
Reply-Message = Framed protocol is
}

deselabs_dhcp_cpes.authorize
deselabs_dhcp_cpes.post-auth
ok
}

dhcp {
# send a DHCP NAK.
reject
}
}




This is the debug output:



Received DHCP-Discover of id 7ca9d708 from 0.0.0.0:68 to 255.255.255.255:67
DHCP-Opcode = Client-Message
DHCP-Hardware-Type = Ethernet
DHCP-Hardware-Address-Length = 6
DHCP-Hop-Count = 0
DHCP-Transaction-Id = 2091505416
DHCP-Number-of-Seconds = 0
DHCP-Flags = Broadcast
DHCP-Client-IP-Address = 0.0.0.0
DHCP-Your-IP-Address = 0.0.0.0
DHCP-Server-IP-Address = 0.0.0.0
DHCP-Gateway-IP-Address = 0.0.0.0
DHCP-Client-Hardware-Address = 00:50:c2:31:24:4f
DHCP-Message-Type = DHCP-Discover
DHCP-Client-Identifier = 0x010050c231244f00
DHCP-IP-Address-Lease-Time = 4294967040
DHCP-IP-Address-Lease-Time = 4294967295
DHCP-Parameter-Request-List = DHCP-Subnet-Mask
DHCP-Parameter-Request-List = DHCP-Router-Address
DHCP-Parameter-Request-List = DHCP-Domain-Name-Server
DHCP-Parameter-Request-List = DHCP-Domain-Name
DHCP-Parameter-Request-List = DHCP-Bootp-Extensions-Path
DHCP-Parameter-Request-List = DHCP-TFTP-Server-Name
DHCP-Parameter-Request-List = DHCP-SIP-Servers-DHCP-Option
DHCP-Parameter-Request-List = DHCP-HTTP-Proxy
DHCP-Parameter-Request-List = 213
DHCP-Parameter-Request-List = 214
DHCP-Parameter-Request-List = 215
server dhcp {
Trying sub-section dhcp DHCP-Discover {...}
+- entering group DHCP-Discover {...}
++[reply] returns noop
++[reply] returns noop
[deselabs_dhcp_cpes]expand: %{DHCP-Client-Hardware-Address} -
00:50:c2:31:24:4f
[deselabs_dhcp_cpes] sql_set_user escaped user -- '00:50:c2:31:24:4f'
rlm_sql (deselabs_dhcp_cpes): Reserving sql socket id: 4
[deselabs_dhcp_cpes]expand: SELECT '1', mac_address,
'Cleartext-Password', REPLACE('%{SQL-User-Name}', ':', ''), ':='
FROM cpes WHERE mac_address = 
REPLACE('%{SQL-User-Name}', ':', '')
UNION   SELECT '2', mac_address, 'Auth-Type', 'Accept', ':='
FROM
cpes WHERE mac_address = REPLACE('%{SQL-User-Name}', ':', '') -
SELECT '1', mac_address, 'Cleartext-Password',
REPLACE('00:50:c2:31:24:4f', ':', ''), ':=' FROM cpes WHERE
mac_address = REPLACE('00:50:c2:31:24:4f', ':', '') UNION   SELECT
'2', mac_address, 'Auth-Type', 'Accept', ':='   FROM cpes WHERE
mac_address = REPLACE('00:50:c2:31:24:4f', ':', '')
[deselabs_dhcp_cpes] User found in radcheck table
[deselabs_dhcp_cpes]expand: SELECT '1', mac_address as username,
'DHCP-Your-IP-Address' AS attribute, CONCAT_WS('.', nets.net_prefix,
cpes.ip_host) AS value, '=' AS op   FROM cpes LEFT OUTER JOIN 
nets
ON cpes.net=nets.net_id WHERE cpes.mac_address =
REPLACE('%{SQL-User-Name}', ':', '') UNION  SELECT '2' as id,
mac_address, 'DHCP-Subnet-Mask' AS attribute, nets.netmask AS value,
'=' AS op   FROM cpes LEFT OUTER JOIN nets ON 
cpes.net=nets.net_id
WHERE cpes.mac_address = REPLACE('%{SQL-User-Name}', ':', '') UNION
SELECT '3' as id, mac_address, 'DHCP-Router-Address' AS 
attribute,
nets.gateway AS value, '=' AS opFROM cpes LEFT OUTER JOIN 
nets
ON cpes.net=nets.net_id WHERE cpes.mac_address =
REPLACE('%{SQL-User-Name}', ':', '') UNION  SELECT '4' as id,
mac_address, 'DHCP-Bootp-Extensions-Path' AS 

Re: Freeradius as DHCP server (static IP + some options)

2013-03-01 Thread Leo Combes
 what configuration options are in the PPA version? something is not right 
 there

Once installed, the configuration files in /etc/freeradius or
/etc/raddb are the same, or at least the most relevant ones to its
functionality.
I will compare one by one to see if I find any difference.

 ...and it can go onto WIKI/HOWTO

 alan


Install DHCP for static IP allocation in Freeradius.

Example based on Debian.
Freeradius as DHCP server for static ip allocation from MySQL, with
use of DHCP options.
Might work for provision of cable modems.

One important thing! (specially Ubuntu users):  (*)
DHCP functionality will not work when installed from PPA, or at least
the package version 2.2.0 + dfsg-ppa10 not work.
Reason: I dont know. I installed and configured without errors, seems
to respond correctly OFFER and ACK but this packets never leaves the
network adapter.

This example assumes that:
The network adapter where is connected freeradius have the following 
settings:

auto eth1
iface eth1 inet static
address 192.168.10.1
netmask 255.255.255.0
network 192.168.10.0
broadcast 192.168.10.255

Client mac-address is 00:11:22:00:33:44


Let's start:

From sources:
- Download sources from Freeradius:
wget 
ftp://ftp.freeradius.org/pub/freeradius/freeradius-server-2.2.0.tar.gz

- Unpack sources, then enter in new directory:
tar -xvzf freeradius-server-2.2.0.tar.gz
cd freeradius-server-2.2.0

- Configure it:
./configure --with-dhcp

- Add dictionary:   (**)
edit share/dictionary (in sources files) and add a line containing
$INCLUDE dictionary.dhcp whithout quotes.

- If mysql is not installed, install it:
apt-get install mysql-server

- Also, with mysql need some extra packages:(***)
apt-get install mysql-devel libmysqld-dev libmysqlclient-dev
libmysqld-dev libmysqld-pic

- Compile:
make
make install (do as root)

- Modify radiusd.conf (the configuration files is located in
/usr/local/etc/raddb)
uncomment $INCLUDE sql.conf
set user = root and group = root

- Modify sql.conf
configure login/password for access to mysql database
leave dialup.conf included

- Create database radius
mysql -u user -p pass (login in mysql console)
create database radius

- Load schema for mysql
mysql -u user -p pass radius  schema.sql

- Add this in radius database:
mysql -u user -p pass (login in mysql console)
use radius;
INSERT INTO `radcheck` (`username`, `attribute`, `op`, `value`)
VALUES ('00:11:22:00:33:44', 'Cleartext-Password', ':=', '');
INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`)
VALUES ('00:11:22:00:33:44', 'DHCP-Your-IP-Address', '=',
'192.168.10.10');

optionally included as example:

INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`)
VALUES ('00:11:22:00:33:44', 'DHCP-Subnet-Mask', '=',
'255.255.255.0');
INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`)
VALUES ('00:11:22:00:33:44', 'DHCP-Router-Address', '=',
'192.168.10.1');
INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`)
VALUES ('00:11:22:00:33:44', 'DHCP-Bootp-Extensions-Path', '=',
'modem.acf');
INSERT INTO `radreply` (`username`, `attribute`, `op`, `value`)
VALUES ('00:11:22:00:33:44', 'DHCP-TFTP-Server-Name', '=',
'172.31.1.1');

- Modify /usr/local/etc/raddb/sql/dialup.conf, replace:
sql_user_name = %{User-Name}
for...
sql_user_name = %{DHCP-Client-Hardware-Address}
This use mac-address as username.

- create a /usr/local/etc/raddb/sites-enabled/dhcp_static and add this:
(you can find the original example in
/usr/local/etc/raddb/sites-available/dhcp)

server dhcp {
listen {
type = dhcp
ipaddr = 255.255.255.255
port = 67
interface = eth1
broadcast = yes
}

dhcp DHCP-Discover {
update reply {
   DHCP-Message-Type = DHCP-Offer
}

update reply {  
DHCP-Domain-Name-Server = 0.0.0.0
DHCP-IP-Address-Lease-Time = 7200
DHCP-DHCP-Server-Identifier = 192.168.10.1
}

sql.authorize

ok
}

dhcp DHCP-Request {
update reply {
   DHCP-Message-Type = DHCP-Ack
}

update reply {
DHCP-Domain-Name-Server = 

Re: Freeradius as DHCP server (static IP + some options)

2013-03-01 Thread Leo Combes
   That might be an Ubuntu security setting.  It seems to work fine on my
 systems.  So it's hard to track down what's happening on other systems.

   Alan DeKok.


As additional information, I tried with PPA version in Debian and do
not work (same problem).
Maybe is a problem in my server.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius as DHCP server (static IP + some options)

2013-02-27 Thread Leo Combes
I apollogize for the late response, I have been very busy and I
couldn't keep working on this.

I found the problem!
(at least it works now)

I installed Freeradius from PPA.
https://launchpad.net/~freeradius/+archive/stable

DHCP functionality not work when installed from PPA, or at least the
package version 2.2.0 + dfsg-ppa10 not work.
Reason: installed and configured without errors, seems to respond
correctly OFFER and ACK but this packets never leaves the network
adapter.

SOLUTION: install and configure from sources.

I'm writing a how-to for setting freeradius as DHCP server, completely
from scratch, for static IP allocation, with DHCP options and using
Mysql.
If you allow me, i'd like to post it in this mailing list for you to
test and correct it.

Thanks!
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: output attributes in free-radius

2013-01-30 Thread Leo Combes
2013/1/29 Lakshmi Narayana Baliah lb0074...@techmahindra.com:
 Hi All,

 How can i define output attributes in free-radius?
 Any help would be appreciated.


I'm no expert on this, but maybe adding a custom dictionary?
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius as DHCP server (static IP + some options)

2013-01-28 Thread Leo Combes
2013/1/23  a.l.m.bu...@lboro.ac.uk:
 hi,

 those ID values look a little 'wierd' - vary large and negative

I don't understand where this values came from? which would be the
normal values?

 does the DHCP response leave the server?   do you have anything
 like dHCP snooping on the network that might be blocking the
 responses from this new DHCP server  or is the client getting
 its answers from a.n.another DHCP server and so not dealing with
 the FR response?

 alan

I tried connecting the modem directly to the server, without a switch
or any server that may cause any trouble. I got the same result, the
server receives DISCOVER packet. Chechinkg the log on debug, it seems
to send and OFFER (Sending DHCP-Offer of id 8e22cb4d from
255.255.255.255:67 to 255.255.255.255:68) but it doesn't, It's
verified that it does not send it.

What can I check, in order to find the problem?

Thanks for your interest.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius as DHCP server (static IP + some options)

2013-01-23 Thread Leo Combes
Thanks for your reply.
Fortunately it seems that the segfault is a false alarm.
As it semt strange to me that Freeradius stop working by segfault, I
installed FR in another PC and I copy the same configuration.

Now it seems to be working, except that it stays in loop on DHCP
Discover (no Offer, no Request, no Ack).

FreeRADIUS Version 2.2.0, for host x86_64-pc-linux-gnu, built on Sep
20 2012 at 04:13:51
Copyright (C) 1999-2012 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files ...
including configuration file /etc/freeradius/radiusd.conf
including configuration file /etc/freeradius/clients.conf
including files in directory /etc/freeradius/mods-enabled/
including configuration file
/etc/freeradius/mods-enabled/sqlcounter_expire_on_login
including configuration file /etc/freeradius/mods-enabled/rediswho
including configuration file /etc/freeradius/mods-enabled/otp
including configuration file /etc/freeradius/mods-enabled/mac2vlan
including configuration file /etc/freeradius/mods-enabled/smsotp
including configuration file /etc/freeradius/mods-enabled/chap
including configuration file /etc/freeradius/mods-enabled/checkval
including configuration file /etc/freeradius/mods-enabled/dhcp_sqlippool
including configuration file /etc/freeradius/mods-enabled/pap
including configuration file /etc/freeradius/mods-enabled/inner-eap
including configuration file /etc/freeradius/mods-enabled/ippool
including configuration file /etc/freeradius/mods-enabled/soh
including configuration file /etc/freeradius/mods-enabled/exec
including configuration file /etc/freeradius/mods-enabled/sql_log
including configuration file /etc/freeradius/mods-enabled/redis
including configuration file /etc/freeradius/mods-enabled/ntlm_auth
including configuration file /etc/freeradius/mods-enabled/logintime
including configuration file /etc/freeradius/mods-enabled/passwd
including configuration file /etc/freeradius/mods-enabled/expiration
including configuration file /etc/freeradius/mods-enabled/counter
including configuration file /etc/freeradius/mods-enabled/acct_unique
including configuration file /etc/freeradius/mods-enabled/krb5
including configuration file /etc/freeradius/mods-enabled/policy
including configuration file /etc/freeradius/mods-enabled/dynamic_clients
including configuration file /etc/freeradius/mods-enabled/detail.log
including configuration file /etc/freeradius/mods-enabled/expr
including configuration file /etc/freeradius/mods-enabled/ldap
including configuration file /etc/freeradius/mods-enabled/opendirectory
including configuration file /etc/freeradius/mods-enabled/cache
including configuration file /etc/freeradius/mods-enabled/always
including configuration file /etc/freeradius/mods-enabled/digest
including configuration file /etc/freeradius/mods-enabled/realm
including configuration file /etc/freeradius/mods-enabled/detail
including configuration file /etc/freeradius/mods-enabled/perl
including configuration file /etc/freeradius/mods-enabled/detail.example.com
including configuration file /etc/freeradius/mods-enabled/attr_rewrite
including configuration file /etc/freeradius/mods-enabled/mac2ip
including configuration file /etc/freeradius/mods-enabled/files
including configuration file /etc/freeradius/mods-enabled/linelog
including configuration file /etc/freeradius/mods-enabled/preprocess
including configuration file /etc/freeradius/mods-enabled/pam
including configuration file /etc/freeradius/mods-enabled/attr_filter
including configuration file /etc/freeradius/mods-enabled/etc_group
including configuration file /etc/freeradius/mods-enabled/radutmp
including configuration file /etc/freeradius/mods-enabled/smbpasswd
including configuration file /etc/freeradius/mods-enabled/echo
including configuration file /etc/freeradius/mods-enabled/wimax
including configuration file /etc/freeradius/mods-enabled/replicate
including configuration file /etc/freeradius/mods-enabled/mschap
including configuration file /etc/freeradius/mods-enabled/cui
including configuration file /etc/freeradius/mods-enabled/unix
including configuration file /etc/freeradius/mods-enabled/radrelay
including configuration file /etc/freeradius/mods-enabled/sradutmp
including configuration file /etc/freeradius/eap.conf
including configuration file /etc/freeradius/sqlippool.conf
including configuration file /etc/freeradius/sql/mysql/ippool.conf
including configuration file /etc/freeradius/policy.conf
including files in directory /etc/freeradius/sites-enabled/
including configuration file /etc/freeradius/sites-enabled/dhcp
including configuration file /etc/freeradius/sites-enabled/default
including configuration file /etc/freeradius/sites-enabled/inner-tunnel
main {
user = root
group = freerad
allow_core_dumps = no
}

Re: Freeradius as DHCP server (static IP + some options)

2013-01-22 Thread Leo Combes
Thanks Alan.
I hope to make it work.

As I have little experience with Freeradius, I want to start doing a little
test with the mac2ip module.

I made a file called mac2ip in /etc/freeradius with the following contents:

00:13:96:00:f9:84,10.1.100.1

The /etc/freeradius/sites-enabled/dhcp as follows:

server dhcp {
listen {
type = dhcp
ipaddr = 255.255.255.255
port = 67
interface = eth0
#broadcast = no
}

dhcp DHCP-Discover {
update reply {
   DHCP-Message-Type = DHCP-Offer
}

#  The contents here are invented.  Change them!
update reply {
DHCP-Domain-Name-Server = 8.8.8.8
DHCP-Domain-Name-Server += 8.8.4.4
DHCP-Subnet-Mask = 255.255.0.0
DHCP-Router-Address = 10.1.1.3
DHCP-IP-Address-Lease-Time = 7200
DHCP-DHCP-Server-Identifier = 10.1.2.10
}

mac2ip

#  Or, allocate IPs from the DHCP pool in SQL.
#dhcp_sqlippool.postauth
ok
}

dhcp DHCP-Request {
update reply {
   DHCP-Message-Type = DHCP-Ack
}

#  The contents here are invented.  Change them!
update reply {
DHCP-Domain-Name-Server = 8.8.8.8
DHCP-Domain-Name-Server += 8.8.4.4
DHCP-Router-Address = 10.1.1.3
DHCP-IP-Address-Lease-Time = 7200
DHCP-DHCP-Server-Identifier = 10.1.2.10
}

mac2ip

#  Or, allocate IPs from the DHCP pool in SQL.
#dhcp_sqlippool.postauth
ok
}

#  If there's no named section for the packet type, then the packet
#  is processed through this section.
dhcp {
# send a DHCP NAK.
reject
}
}

passwd mac2ip {
filename = ${confdir}/mac2ip
format = *DHCP-Client-Hardware-Address:=DHCP-Your-IP-Address
delimiter = ,
}


I have added the dhcp.dictionary.
At last I tried to run freeradius:


Info: Starting - reading configuration files ...
Debug: including configuration file /etc/freeradius/radiusd.conf
Debug: including configuration file /etc/freeradius/clients.conf
Debug: including files in directory /etc/freeradius/mods-enabled/
Debug: including configuration file /etc/freeradius/mods-enabled/rediswho
Debug: including configuration file /etc/freeradius/mods-enabled/replicate
Debug: including configuration file /etc/freeradius/mods-enabled/linelog
Debug: including configuration file /etc/freeradius/mods-enabled/redis
Debug: including configuration file /etc/freeradius/mods-enabled/counter
Debug: including configuration file /etc/freeradius/mods-enabled/sradutmp
Debug: including configuration file /etc/freeradius/mods-enabled/sql_log
Debug: including configuration file /etc/freeradius/mods-enabled/echo
Debug: including configuration file /etc/freeradius/mods-enabled/files
Debug: including configuration file /etc/freeradius/mods-enabled/mac2vlan
Debug: including configuration file /etc/freeradius/mods-enabled/ntlm_auth
Debug: including configuration file /etc/freeradius/mods-enabled/always
Debug: including configuration file /etc/freeradius/mods-enabled/soh
Debug: including configuration file /etc/freeradius/mods-enabled/detail.log
Debug: including configuration file /etc/freeradius/mods-enabled/unix
Debug: including configuration file /etc/freeradius/mods-enabled/inner-eap
Debug: including configuration file /etc/freeradius/mods-enabled/exec
Debug: including configuration file /etc/freeradius/mods-enabled/krb5
Debug: including configuration file /etc/freeradius/mods-enabled/smbpasswd
Debug: including configuration file /etc/freeradius/mods-enabled/cui
Debug: including configuration file /etc/freeradius/mods-enabled/expiration
Debug: including configuration file /etc/freeradius/mods-enabled/perl
Debug: including configuration file /etc/freeradius/mods-enabled/mac2ip
Debug: including configuration file /etc/freeradius/mods-enabled/digest
Debug: including configuration file /etc/freeradius/mods-enabled/smsotp
Debug: including configuration file /etc/freeradius/mods-enabled/pam
Debug: including configuration file /etc/freeradius/mods-enabled/wimax
Debug: including configuration file /etc/freeradius/mods-enabled/mschap
Debug: including configuration file /etc/freeradius/mods-enabled/checkval
Debug: including configuration file /etc/freeradius/mods-enabled/otp
Debug: including configuration file /etc/freeradius/mods-enabled/radutmp
Debug: including configuration file /etc/freeradius/mods-enabled/preprocess
Debug: including configuration file /etc/freeradius/mods-enabled/ippool
Debug: including configuration file /etc/freeradius/mods-enabled/ldap
Debug: including configuration file /etc/freeradius/mods-enabled/logintime
Debug: including configuration file
/etc/freeradius/mods-enabled/sqlcounter_expire_on_login
Debug: including configuration file /etc/freeradius/mods-enabled/detail
Debug: including configuration file /etc/freeradius/mods-enabled/acct_unique
Debug: including configuration file /etc/freeradius/mods-enabled/passwd
Debug: including configuration file /etc/freeradius/mods-enabled/chap
Debug: including 

Re: Freeradius as DHCP server (static IP + some options)

2013-01-22 Thread Leo Combes
Thanks again Alan.

  At last I tried to run freeradius:

   Please use radiusd -X, not radiusd -Xx

OK.


  Info: server dhcp {
  Debug: Trying sub-section dhcp DHCP-Discover {...}
  Info: +- entering group DHCP-Discover {...}
  Info: ++[reply] returns noop
  Info: ++[reply] returns noop
  Segmentation fault
 
  I'm missing something obvious?

   Nope.  It should work.  It looks like the mac2ip module is crashing
 for some unknown reason.

   Can you follow doc/bugs?  It will tell you how to post more debugging
 information so we can see exactly where it's going wrong.

I don't know how to do that. Any link on how to do it?

Thanks.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Freeradius as DHCP server (static IP + some options)

2013-01-21 Thread Leo Combes
Hello.
I successfully run ISC-DHCP server for provisioning modems in an ISP's
network, but what I wanted to try is something more modern and with
database support.
I want to try using Freeradius as DHCP server, but first I want to know if
it is possible with these requirements:

- Need to deliver fixed IP (or static) according to mac-address.
- Need to provide, in addition to the IP, some DHCP options. Option 1
(Subnet mask), Option 3 (Routers), Option 6 (DNS server), Option 15
(Domainname), Option 18 (Extensions path), Option 66 (TFTP server name),
Option120 (SIP Servers DHCP Option).
- The IP and Options corresponding to each mac-address has to be stored in
mysql.

According dhcpdump, the dhcp client request looks like this:

TIME: 2013-01-21 16:23:30.787
IP: 0.0.0.0 (0:13:96:0:f9:84)  255.255.255.255 (ff:ff:ff:ff:ff:ff)
OP: 1 (BOOTPREQUEST)
 HTYPE: 1 (Ethernet)
  HLEN: 6
  HOPS: 0
   XID: 8e22cb4d
  SECS: 0
 FLAGS: 7f80
CIADDR: 0.0.0.0
YIADDR: 0.0.0.0
SIADDR: 0.0.0.0
GIADDR: 0.0.0.0
CHADDR: 00:13:96:00:f9:84:00:00:00:00:00:00:00:00:00:00
 SNAME: .
 FNAME: .
OPTION:  53 (  1) DHCP message type 1 (DHCPDISCOVER)
OPTION:  61 (  8) Client-identifier 01:00:13:96:00:f9:84:00
OPTION:  51 (  4) IP address leasetime  -256 ()
OPTION:  51 (  4) IP address leasetime  -1 ()
OPTION:  55 ( 11) Parameter Request List  1 (Subnet mask)
  3 (Routers)
  6 (DNS server)
 15 (Domainname)
 18 (Extensions path)
 66 (TFTP server name)
120 (SIP Servers DHCP Option)
135 (???)
213 (???)
214 (???)
215 (???)

Freeradius 2.2.0 can provide this functionality just configuring it, or it
would be necessary to use modules or developments that aren't available yet?

Thanks in advance!
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html