Re: Failed to load module wimax freeradius 2.1.10
Don't trust my last message, I just answered too quickly: I was ooking forward to get in touch man! :). Apparently wimax module is part of experimanental modules and must be enabled with the --with-experimental-modules switch. However It's quite unclear why the config file of the module is packaged in freeradius packages while the shared object files are not... may be a little patch should be done to the debian files. regards. 2011/6/10 Alexandre > Hi Teva, > > I assume you're trying to build the freeradius packages from sources from > the offcial tarball from freeradius.org. Right? > If so there are chances that the debian config files used to build package > do not include the wimax module (quite recently added in the source tree) > You can add new files in the debian directory to enable dpkg framework to > build a freeradius-wimax packages or make it part of an existing package. > > Best regards. > > > 2011/6/10 Teva AVRIL-TEIPOARII > >> >> Greetings guys, >> >> I'm trying to install Freeradius 2.1.10 with module wimax on Debian >> squeeze >> with apt-get command (apt-get build-dep freeradius). >> >> Installation is successful, however when I launch freeradius I've got this >> error: >> >> Error: /etc/freeradius/modules/wimax[92]: Failed to link to module >> 'rlm_wimax': file not found >> Error: /etc/freeradius/sites-enabled/default[104]: Failed to load module >> "wimax". >> >> Indeed when I check on /usr/lib/freeradius, I've got no rlm_wimax.so nor >> rlm_wimax-2.1.10.so >> >> Moreover, if I'm checking directly on the Debian packages on >> http://packages.debian.org/squeeze/amd64/freeradius/filelist, there are >> no >> such files like rlm_wimax >> >> Is anyone has already encountered this issue ? >> >> >> Regards, >> >> >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Failed to load module wimax freeradius 2.1.10
Hi Teva, I assume you're trying to build the freeradius packages from sources from the offcial tarball from freeradius.org. Right? If so there are chances that the debian config files used to build package do not include the wimax module (quite recently added in the source tree) You can add new files in the debian directory to enable dpkg framework to build a freeradius-wimax packages or make it part of an existing package. Best regards. 2011/6/10 Teva AVRIL-TEIPOARII > > Greetings guys, > > I'm trying to install Freeradius 2.1.10 with module wimax on Debian squeeze > with apt-get command (apt-get build-dep freeradius). > > Installation is successful, however when I launch freeradius I've got this > error: > > Error: /etc/freeradius/modules/wimax[92]: Failed to link to module > 'rlm_wimax': file not found > Error: /etc/freeradius/sites-enabled/default[104]: Failed to load module > "wimax". > > Indeed when I check on /usr/lib/freeradius, I've got no rlm_wimax.so nor > rlm_wimax-2.1.10.so > > Moreover, if I'm checking directly on the Debian packages on > http://packages.debian.org/squeeze/amd64/freeradius/filelist, there are no > such files like rlm_wimax > > Is anyone has already encountered this issue ? > > > Regards, > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Failed to load module wimax freeradius 2.1.10
Greetings guys, I'm trying to install Freeradius 2.1.10 with module wimax on Debian squeeze with apt-get command (apt-get build-dep freeradius). Installation is successful, however when I launch freeradius I've got this error: Error: /etc/freeradius/modules/wimax[92]: Failed to link to module 'rlm_wimax': file not found Error: /etc/freeradius/sites-enabled/default[104]: Failed to load module "wimax". Indeed when I check on /usr/lib/freeradius, I've got no rlm_wimax.so nor rlm_wimax-2.1.10.so Moreover, if I'm checking directly on the Debian packages on http://packages.debian.org/squeeze/amd64/freeradius/filelist, there are no such files like rlm_wimax Is anyone has already encountered this issue ? Regards, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: ask for help on WiMAX + Freeradius + Disconnec
Subject: RE? RE: ask for help on WiMAX + Freeradius + Disconnect
To:
Message-ID: <005b01cb4a33$19178370$4b468a...@com>
Content-Type: text/plain; charset="gb2312"
Message: 4
Date: Wed, 1 Sep 2010 09:35:53 -0500
From: "Ben Wiechman"
Subject: RE: ask for help on WiMAX + Freeradius + Disconnect
To: "FreeRadius users mailing list"
Message-ID: <4c7e64c3.c84de70a.22a4.2...@mx.google.com>
Content-Type: text/plain; charset="iso-2022-jp"
Step 1: Read the wimax dictionary file. It will help you understand what
types of data you need to be putting into each attribute.
update disconnect {
User-Name = "%{User-Name}"
Calling-Station-Id = "%{Calling-Station-Id}"
WiMAX-AAA-Session-Id = "%{WiMAX-AAA-Session-Id}"
WiMAX-DM-Action-Code = Deregister-MS
}
The session ID needs to be identical to the one returned to the ASN-GW
during network entry.
man unlang for more info.
For testing from the CLI echo the required attributes into radclient. man
radclient
Ben
***
Use attributes that are defined in the WiMAX dictionary.
Or, update the WiMAX dictionary to include the attributes you're using.
Alan DeKok.
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Thanks Alan and Ben,
I will try today and email the result in the mailing list.
Xiaochen
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<<
>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>>
Thanks Alan and Ben,
It works.
I also found why it couldn't pass --- I used Freeradius 1.1.7 before. Today
I tried freeradisu 2.1.9 which fully support CoA and DM.
Best regards!
Xiaochen
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: ask for help on WiMAX + Freeradius + Disconnect
Step 1: Read the wimax dictionary file. It will help you understand what
types of data you need to be putting into each attribute.
update disconnect {
User-Name = "%{User-Name}"
Calling-Station-Id = "%{Calling-Station-Id}"
WiMAX-AAA-Session-Id = "%{WiMAX-AAA-Session-Id}"
WiMAX-DM-Action-Code = Deregister-MS
}
The session ID needs to be identical to the one returned to the ASN-GW
during network entry.
man unlang for more info.
For testing from the CLI echo the required attributes into radclient. man
radclient
Ben
From: freeradius-users-bounces+wiechman.lists=gmail@lists.freeradius.org
[mailto:freeradius-users-bounces+wiechman.lists=gmail@lists.freeradius.o
rg] On Behalf Of Xiaochen
Sent: Tuesday, August 31, 2010 8:44 PM
To: freeradius-users@lists.freeradius.org
Subject: ask for help on WiMAX + Freeradius + Disconnect
Hello, friends,
As I met some problems when using Freeradius to send Disconnect Request.
Hope you can give me any suggestions.
Please let me describe my issue.
First I created a packete.txt for radclinet.exe.
The content of packet.txt is as:
Acct-Session-Id="0001"
Calling-Station-Id="001E310008CC"
User-Name="wimax"
X-Ascend-Session-Svr-Key="0123456789"
NAS-IP-Address=100.1.6.5
NAS-Identifier=100.1.6.5
WiMAX-Session-ID=”XXX”
WiMAX-DM-Action-Code=””
After packet.txt was sent to AGW, radclinet debug window said: “Unknown
WiMAX-Session -ID or Unknown WiMAX-DM-Action-Code ”
WiMAX NWG 1.3 says:
5.4.1.7 RADIUS Disconnect Request Message
isconnect Request message should be defined with the following:
User-Name、Calling-Station-Id、 WiMAX-Session-ID、 WiMAX-DM-Action-Code
So I must add and make WiMAX-Session-ID and WiMAX-DM-Action-Code sent by
Freeradius.
Could you please give me any suggestions on how to add the attribute of
WiMAX-Session-ID and WiMAX-DM-Action-Code into the sent message ?
Thanks a lot for your help in advance!
Xiaochen Chen @ WiMAX Test Lab
Beiing , China
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: ask for help on WiMAX + Freeradius + Disconnect (Alan DeKok)
Xiaochen wrote: > [r...@aaa bin]# cat packet.txt | radclient -x 100.1.6.4:3799 disconnect > 0123456789 > radclient: XUnknown attribute "WiMAX-Session-Id" Use attributes that are defined in the WiMAX dictionary. Or, update the WiMAX dictionary to include the attributes you're using. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re:Re: ask for help on WiMAX + Freeradius + Disconnect (Alan DeKok)
Xiaochen wrote: > After packet.txt was sent to AGW, radclinet debug window said: ?Unknown > WiMAX-Session ?ID or Unknown WiMAX-DM-Action-Code ? radclient doesn't produce that error message. Please post the *real* error message, and not anything else. Alan DeKok. > When content of packet.txt is as: Acct-Session-Id="0001" Calling-Station-Id="001E310008CC" User-Name="wimax" X-Ascend-Session-Svr-Key="0123456789" NAS-IP-Address=100.1.6.5 NAS-Identifier=100.1.6.5 WiMAX-DM-Action-Id="" #WiMAX-Session-Id="02" Freeradius said: [r...@aaa bin]# cat packet.txt | radclient -x 100.1.6.4:3799 disconnect 0123456789 radclient: XUnknown attribute "WiMAX-DM-Action-Id" [r...@aaa bin]# When content of packet.txt is as: Acct-Session-Id="0001" Calling-Station-Id="001E310008CC" User-Name="wimax" X-Ascend-Session-Svr-Key="0123456789" NAS-IP-Address=100.1.6.5 NAS-Identifier=100.1.6.5 #WiMAX-DM-Action-Id="" WiMAX-Session-Id="02" [r...@aaa bin]# cat packet.txt | radclient -x 100.1.6.4:3799 disconnect 0123456789 radclient: XUnknown attribute "WiMAX-Session-Id" [r...@aaa bin]# Thanks ! xiaochen - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: ask for help on WiMAX + Freeradius + Disconnect
Xiaochen wrote: > After packet.txt was sent to AGW, radclinet debug window said: “Unknown > WiMAX-Session –ID or Unknown WiMAX-DM-Action-Code ” radclient doesn't produce that error message. Please post the *real* error message, and not anything else. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ask for help on WiMAX + Freeradius + Disconnect
Hello, friends, As I met some problems when using Freeradius to send Disconnect Request. Hope you can give me any suggestions. Please let me describe my issue. First I created a packete.txt for radclinet.exe. The content of packet.txt is as: Acct-Session-Id="0001" Calling-Station-Id="001E310008CC" User-Name="wimax" X-Ascend-Session-Svr-Key="0123456789" NAS-IP-Address=100.1.6.5 NAS-Identifier=100.1.6.5 WiMAX-Session-ID=”XXX” WiMAX-DM-Action-Code=”” After packet.txt was sent to AGW, radclinet debug window said: “Unknown WiMAX-Session �CID or Unknown WiMAX-DM-Action-Code ” WiMAX NWG 1.3 says: 5.4.1.7 RADIUS Disconnect Request Message isconnect Request message should be defined with the following: User-Name、Calling-Station-Id、 WiMAX-Session-ID、 WiMAX-DM-Action-Code So I must add and make WiMAX-Session-ID and WiMAX-DM-Action-Code sent by Freeradius. Could you please give me any suggestions on how to add the attribute of WiMAX-Session-ID and WiMAX-DM-Action-Code into the sent message ? Thanks a lot for your help in advance! Xiaochen Chen @ WiMAX Test Lab Beiing , China - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ask for help on WiMAX + Freeradius + Disconnect
Hello, friends, As I met some problems when using Freeradius to send Disconnect Request. Hope you can give me any suggestions. Please let me describe my issue. First I created a packete.txt for radclinet.exe. The content of packet.txt is as: Acct-Session-Id="0001" Calling-Station-Id="001E310008CC" User-Name="wimax" X-Ascend-Session-Svr-Key="0123456789" NAS-IP-Address=100.1.6.5 NAS-Identifier=100.1.6.5 WiMAX-Session-ID="XXX" WiMAX-DM-Action-Code="" After packet.txt was sent to AGW, radclinet debug window said: "Unknown WiMAX-Session -ID or Unknown WiMAX-DM-Action-Code " WiMAX NWG 1.3 says: 5.4.1.7 RADIUS Disconnect Request Message isconnect Request message should be defined as per [28] with the following: Attribute TYPE Description DR DR-ACK DR-NAK User-Name 1 The NAI of the MS as received during Access-Authentication. 1 0 0 Calling-Station-Id 31 The MAC address in binary format of the MS. 1 0 0 WiMAX-Session-ID 26/4 The NAI contained in the User-Name and the WiMAX-Session-ID forms a unique identifier of the session at the NAS. 1 0 0 WiMAX-DM-Action-Code 26/60 Carries the deregistration action code from AAA to the NAS. If the WiMAX-DM-Action-Code is not present in the RADIUS Disconnect message then the result will be to the same as if the action code 0x was included. The end result should be that the BS sends the RES-CMD to the MS. 0-1 0 0 So I must add and make WiMAX-Session-ID and WiMAX-DM-Action-Code sent by Freeradius. Could you please give me any suggestions on how to add the attribute of WiMAX-Session-ID and WiMAX-DM-Action-Code into the sent message ? Thanks a lot for your help in advance! Xiaochen Chen @ WiMAX Test Lab Beiing , China - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wimax + Freeradius
Maxim Vinnichenko wrote: > Thank You very much. Vendor forces us to buy theirs "unique" TRIAS > server aka radius. :) That costs several hundred thousands. Dollars? Odds are that their product is less functional than FreeRADIUS. It would likely be cheaper to figure out what the problem is, and to make FreeRADIUS inter-operate with the vendor. And what the vendor *really* meant is that they do *not* implement the standards, and they don't care. Why not buy equipment from a vendor that is interested in making *useful* products? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re[2]: Wimax + Freeradius
Hello Alan, Monday, May 18, 2009, 4:03:42 PM, you wrote: > Maxim Vinnichenko wrote: >> Thank you for you answer. I've changed test user and now the server >> sends access-accept but CPE still doesn't connect. > Some NAS equipment will ignore Access-Accept if it doesn't contain the > right magic. The exact definition of this magic is usually found buried > in a footnote on page 400 out of 800 of the vendor documentation. > Go look at the NAS logs, and see if there is any useful messages. If > not, call the NAS vendor, and tell them that their product is defective. > FreeRADIUS works with WiMAX equipment from Nokia, Cisco and Motorola. > (That I've seen.) Other vendors known to have problems include > Alvarion. They don't seem to care that their equipment doesn't work, > and they haven't answered any of my messages about it. > The only solution is to point out publicly that Alvarion is *not* > following the WiMAX specs, and therefore people should buy *real* WiMAX > equipment. > Alan DeKok. Thank You very much. Vendor forces us to buy theirs "unique" TRIAS server aka radius. :) That costs several hundred thousands. Anyway thanks to all of you for help. -- Винниченко Максим Отдел IP телефонии __ ООО "Babilon - T", Таджикистан, г. Душанбе, п-кт Сомони 8. Офис: (992 44) 600 00 83 Мобильный: (992 918) 62 37 22 Эл. почта: ma...@babilon-t.tj - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wimax + Freeradius
Maxim Vinnichenko wrote: > Thank you for you answer. I've changed test user and now the server > sends access-accept but CPE still doesn't connect. Some NAS equipment will ignore Access-Accept if it doesn't contain the right magic. The exact definition of this magic is usually found buried in a footnote on page 400 out of 800 of the vendor documentation. Go look at the NAS logs, and see if there is any useful messages. If not, call the NAS vendor, and tell them that their product is defective. FreeRADIUS works with WiMAX equipment from Nokia, Cisco and Motorola. (That I've seen.) Other vendors known to have problems include Alvarion. They don't seem to care that their equipment doesn't work, and they haven't answered any of my messages about it. The only solution is to point out publicly that Alvarion is *not* following the WiMAX specs, and therefore people should buy *real* WiMAX equipment. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re[2]: Wimax + Freeradius
Hello Ivan,
Monday, May 18, 2009, 2:09:39 PM, you wrote:
>> We are trying to implement AAA service for WIMAX project and have
>> some problems.
>>
>> Freeradius ver 2.1.3 is installed on Gentoo. The schema is this
>>
>> CPE >> WASN9770 GW >> RADIUS
>>
>> At the moment problem is the following
>>
>> [mschap] No Cleartext-Password configured. Cannot create LM-Password.
>> [mschap] No Cleartext-Password configured. Cannot create NT-Password.
>> [mschap] Told to do MS-CHAPv2 for 1...@wimax.tj with NT-Password
>> [mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
>> [mschap] FAILED: MS-CHAP2-Response is incorrect
>>
>> The test user is listed in users.
> Is he?
> server inner-tunnel {
> +- entering group authorize {...}
> ...
> ++[files] returns noop
> ...
Thank you for you answer. I've changed test user and now the server
sends access-accept but CPE still doesn't connect.
[eap] Freeing handler
++[eap] returns ok
+- entering group post-auth {...}
++[exec] returns noop
Sending Access-Accept of id 47 to 10.155.11.20 port 10001
Service-Type = Framed-User
Framed-Protocol = PPP
Framed-Routing = Broadcast-Listen
Framed-MTU = 1500
MS-MPPE-Recv-Key =
0xc7aba316325d0182e2d6fe42f5592cbef7f5039843cc2166245465ba9d3fb62f
MS-MPPE-Send-Key =
0x526fc822f641a56a7fcc024b2cbd5891072192621baf10d2d1efbc52e448127e
EAP-Message = 0x03080004
Message-Authenticator = 0x
User-Name = "123"
Finished request 7.
Going to the next request
Full log is here
http://217.11.185.178:8080/eap2.log
> Ivan Kalik
> Kalik Informatika ISP
--
Винниченко Максим
Отдел IP телефонии
__
ООО "Babilon - T", Таджикистан,
г. Душанбе, п-кт Сомони 8.
Офис: (992 44) 600 00 83
Мобильный: (992 918) 62 37 22
Эл. почта: ma...@babilon-t.tj
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Wimax + Freeradius
> We are trying to implement AAA service for WIMAX project and have
> some problems.
>
> Freeradius ver 2.1.3 is installed on Gentoo. The schema is this
>
> CPE >> WASN9770 GW >> RADIUS
>
> At the moment problem is the following
>
> [mschap] No Cleartext-Password configured. Cannot create LM-Password.
> [mschap] No Cleartext-Password configured. Cannot create NT-Password.
> [mschap] Told to do MS-CHAPv2 for 1...@wimax.tj with NT-Password
> [mschap] FAILED: No NT/LM-Password. Cannot perform authentication.
> [mschap] FAILED: MS-CHAP2-Response is incorrect
>
> The test user is listed in users.
Is he?
server inner-tunnel {
+- entering group authorize {...}
...
++[files] returns noop
...
Ivan Kalik
Kalik Informatika ISP
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Wimax + Freeradius
Hello Freeradius-users, We are trying to implement AAA service for WIMAX project and have some problems. Freeradius ver 2.1.3 is installed on Gentoo. The schema is this CPE >> WASN9770 GW >> RADIUS At the moment problem is the following [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] No Cleartext-Password configured. Cannot create NT-Password. [mschap] Told to do MS-CHAPv2 for 1...@wimax.tj with NT-Password [mschap] FAILED: No NT/LM-Password. Cannot perform authentication. [mschap] FAILED: MS-CHAP2-Response is incorrect The test user is listed in users. But as far as I understood radius is not using users to authenticate anyone. Please help. Full debug is here http://217.11.185.178:8080/eap.log Maxim Vinnichenko. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
