checking for krb5.h... no
checking for krb5_encrypt_data in -lk5crypto... no
checking for DH_new in -lcrypto... yes
checking for set_com_err_hook in -lcom_err... no
checking for krb5_init_context in -lkrb5... no
configure: warning: silently not building rlm_krb5.
configure: warning: FAILURE: rlm_krb5 requires: krb5.
checking for pam_start in -lpam... (cached) no
checking for security/pam_appl.h... (cached) no
checking for pam/pam_appl.h... (cached) no
configure: warning: silently not building rlm_pam.
configure: warning: FAILURE: rlm_pam requires: libpam.
checking for oci.h... no
configure: warning: oracle headers not found. Use --with-oracle-home-dir=<path>.
checking for DES_cbc_encrypt in -lcrypto... (cached) no
checking for des_cbc_encrypt in -lcrypto... (cached) no
configure: warning: silently not building rlm_x99_token.
configure: warning: FAILURE: rlm_x99_token requires: des_cbc_encrypt.
exept for the oracle issue i think i have installed all needed libs.
Any help would be appreciated, because I think i need the ippool fix for my server side pools
-----Ursprüngliche Nachricht-----
Gesendet: Montag, 19. Januar 2004 05:31
Betreff: Freeradius-Users digest, Vol 1 #2737 - 14 msgs
Send Freeradius-Users mailing list submissions to
To subscribe or unsubscribe via the World Wide Web, visit
http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
You can reach the person managing the list at
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."
2. Re: Still struggling with SNMP and FreeRADIUS (Alan DeKok)
3. Re: EAP Identity and with_ntdomain_hack broken? (Michael Griego)
4. Re: [PATCH] Re: PEAP authentication very strange
problem! PLEASE HELP (Alan DeKok)
5. Re: how set a variable using another one from a
different module (Alan DeKok)
6. Re: Help (Alan DeKok)
7. Re: detail File Gets Updated, But radutmp/radwtmp Not
Pruning (Alan DeKok)
8. Re: Mulitple radius.log files (Alan DeKok)
9. Re: dictinary (Alan DeKok)
10. Re: Memory leak with OCILogon (Alan DeKok)
11. Re: Still struggling with SNMP and FreeRADIUS
12. RE: Still struggling with SNMP and FreeRADIUS (Paul Hampson)
13. RE: Still struggling with SNMP and FreeRADIUS
14. Re: Sun, 18 Jan 2004 23:29:30 -0500 (Your Software Store)
--__--__--
Message: 1
Subject: Still struggling with SNMP and FreeRADIUS
Date: Sun, 18 Jan 2004 13:45:15 -0600 (CST)
Hi,
I have installed FreeRADIUS 0.9.3 and UNC-SNMP
with SMUX modlule enabled, on RedHat 9.0.
I have snmp enabled in my radiusd.com and smux_password
is set in raddb/snmp.conf. I have added smux_peer
registration in snmpd.conf for UCD-SNMP.
When I start snmpd in debug mode uing snmpd -f -a -V -L -Dsmux,
smux_init: [smux_init] done; smux listen sd is 4, smux port is 199
smux_conf: parsing registration for: 1.3.6.1.4.1.3317.1.3.1 verysecret
UCD-SNMP version 4.2.3
I then start FreeRADIUS in debug mode and can authenticate users.
When I try snmpwalk, SNMP returns a long list of values and the
snmpd logs show the requests accordingly. However I never
see any snmp info from FreeRADIUS in either of the logs or
from the snmpwalk.
So now what?
What can I do see where the problem is?
Is is snmpd? Is it FreeRADIUS?
What things should I look for and in what logs, etc?
Thanks,
--__--__--
Message: 2
Subject: Re: Still struggling with SNMP and FreeRADIUS
Date: Sun, 18 Jan 2004 15:37:26 -0500
When I try snmpwalk, SNMP returns a long list of values and the
snmpd logs show the requests accordingly.
Ok... do you know what those values are, and where they come from?
However I never see any snmp info from FreeRADIUS in either of the
logs or from the snmpwalk.
What SNMP "info" are you looking for?
What can I do see where the problem is?
Is is snmpd? Is it FreeRADIUS?
You haven't described what you're getting back from the SNMP
queries, or why you think it's doing anything wrong.
I don't understand what kind of answer you expect anyone to give.
Alan DeKok.
--__--__--
Message: 3
Subject: Re: EAP Identity and with_ntdomain_hack broken?
Date: Sun, 18 Jan 2004 15:30:07 -0600
Michael,
Unforunately, the "with_ntdomain_hack" will indeed break proper eap
checking. There is another way to accomplish what you're
wanting though
while keeping the security that patch provides. Instead of using
with_ntdomain_hack, try this. If you're just wanting to completely
discard the domain portion, try setting the hints file with the
DEFAULT Prefix = "<YOUR_DOMAIN>\", Strip-User-Name = Yes
Hint = <YOUR_DOMAIN>
Then you can use the Stripped-User-Name attribute in your
authorization
checks. This will also leave the original User-Name
attribute alone, so
it will match the EAP Identity (as it should).
If, on the other hand, you're wanting to know the domain, try
setting up
prefix realms to match the domains and use the \ character as the
delimiter. This way, you will also have the Stripped-User-Name
attribute to check on as above while leaving the original User-Name as
it (and therefore matching the EAP Identity).
It's better to work with the security code than to remove it. :)
--
--Mike
----------------------------------
Michael Griego
Wireless LAN Project Manager
The University of Texas at Dallas
The report was from a CVS checkout this morning. I just did a
cvs update and recompiled, but it did not solve the problem.
When looking at eap.c, your patch from November is already
applied.
After commenting the offending part out (and fixing PEAP), I
get authenticated...
Below is what I did to get it working.
--__--__--
Message: 4
Subject: Re: [PATCH] Re: PEAP authentication very strange
problem! PLEASE HELP
Date: Sun, 18 Jan 2004 20:33:10 -0500
Turns out the problem was not as Alan suspected. Seems
that a return
value got tweaked during a re-structuring of the code.
Ah... that's probably my fault. Sorry.
The change results in the magic PEAP "success" TLV being returned to
the client, and *then* an Access-Accept. The result is similar to
what I had said before about fixing the problem.
I'll apply the patch on Monday.
Alan DeKok.
--__--__--
Message: 5
Subject: Re: how set a variable using another one from a
different module
Date: Sun, 18 Jan 2004 20:36:10 -0500
I tried without success=20
1) bar = ${mod_foo.foo}
2) bar = foo.${bar}.
Any hints?
doc/variables.txt is a start, but it's not intended for use inside
the configuration files.
%{config:section.subsection.item} Corresponding value in
'radiusd.conf'
for the string value
of that item.
modules {
mod_foo {
foo= "hello world!"
mod_bar {
bar = $modules.mod_foo.foo
That should work....
Alan DeKok.
--__--__--
Message: 6
Subject: Re: Help
Date: Sun, 18 Jan 2004 20:37:45 -0500
The module that I neeed is the CDR_module. This work with the GNUGK.
There is no CDR_module in FreeRADIUS. Perhaps you are thinking of
something else?
Alan DeKok.
--__--__--
Message: 7
Subject: Re: detail File Gets Updated, But radutmp/radwtmp
Not Pruning
Date: Sun, 18 Jan 2004 20:39:45 -0500
If the detail file gets the STOP record, why don't radutmp
and radwtmp
get pruned? It is like parts of the code are not really
communication
with each other.
They do. It's just that the detail module does *nothing* with the
request, except log it to a file. So it can log *anything*.
The other files have specific requirements, and therefore don't know
what to do with some packets, when those packets don't contain the
information then need.
Alan DeKok.
--__--__--
Message: 8
Subject: Re: Mulitple radius.log files
Date: Sun, 18 Jan 2004 20:41:03 -0500
I am trying to set up a scenario with an Ascend NAS. Using
freeradius
0.7.0
You really should upgrade.
I was thinking if I put a line in the files {} section of
radiusd.conf, that I could make a separate radius.log file based on
what realm I proxied to or Called-Station-ID.
The server does not support that. I don't know why you would think
that the "radiusd.log" file is configured in the "files" module.
Alan DeKok.
--__--__--
Message: 9
Subject: Re: dictinary
Date: Sun, 18 Jan 2004 20:42:05 -0500
I am trying to set up an AuthServer with NoCat and
FreeRadius...Does anybody have a sample of
dictionary.nocat?
I thought that nocat came with a dictionary...
Do a search on google.
Alan DeKok.
--__--__--
Message: 10
Subject: Re: Memory leak with OCILogon
Date: Sun, 18 Jan 2004 20:49:27 -0500
I'm using the ORACLE module (rlm_sql -> rlm_sql_oracle) to
do AAA with
freeradius-0.9.3.
The function OCILogon() is leaking memory (sltsmxi routine).
Try the CVS head. It has a number of bugs fixed. This may
be one of them.
Alan DeKok.
--__--__--
Message: 11
Subject: Re: Still struggling with SNMP and FreeRADIUS
Date: Sun, 18 Jan 2004 20:35:28 -0600 (CST)
Ok... do you know what those values are, and where they come from?
snmpget localhost public system.sysUpTime.0 , I get
system.sysUpTime.0 = Timeticks: (102461) 0:17:04.61 or system uptime
OR
snmpget localhost default
host.hrStorage.hrStorageTable.hrStorageEntry.hrStorageDescr.5
I get: /home
OR
snmpget localhost default
host.hrStorage.hrStorageTable.hrStorageEntry.hrStorageSize.5
I get: 497829
OR
snmpwalk localhost default host --> lists everything for the host mib
What SNMP "info" are you looking for?
So looking at the mib tree from the file RADIUS-ACC-SERVER-MIB.chart
+-(67) radiusMIB
+-(2) radiusAccounting
+-(1) radiusAccServMIB
+-(1) radiusAccServMIBObjects
| +-(1) radiusAccServ
| +-(1) radiusAccServIdent
| +-(2) radiusAccServUpTime
Shouldn't I be able to use snmpwalk to display the available values
for this tree? If so, what is the correct command with full mib path?
snmpwalk localhost default radiusMIB ? -> I get nothing back.
Part of the problem is that I am not sure where this part of the tree
fits into the overall MIB, so I cannot start at the top of the tree
to assemble the correct mib to get to the values I want.
I don't understand what kind of answer you expect anyone to give.
I am just looking for a few complete, correct examples using
snmpwalk or
snmpget, that will return a value(s) from FreeRADIUS via SNMP.
snmpget localhost default
radiusMIB.radiusAuthentication.radiusAuthServMIB.radiusAuthSer
vMIBObjects.radius
AuthServ.radiusAuthServIdent
Error in packet
Reason: (noSuchName) There is no such variable name in this MIB.
radiusMIB.radiusAuthentication.radiusAuthServMIB.radiusAuthSer
vMIBObjects.radius
AuthServ.radiusAuthServIdent
So either the path I am using with snmpget/snmpwalk is wrong
or the SMUX is not
talking to SNMP.
But if I am not even sure if the snmpwalk (snmpget) command
that I am trying to
use is correct, then I could continue to waste time and effort.
Thanks,
--__--__--
Message: 12
Subject: RE: Still struggling with SNMP and FreeRADIUS
Date: Mon, 19 Jan 2004 14:31:42 +1100
Sent: Monday, 19 January 2004 1:35 PM
Ok... do you know what those values are, and where they
come from?
snmpget localhost public system.sysUpTime.0 , I get
system.sysUpTime.0 = Timeticks: (102461) 0:17:04.61 or system uptime
OR
snmpget localhost default
host.hrStorage.hrStorageTable.hrStorageEntry.hrStorageDescr.5
I get: /home
OR
snmpget localhost default
host.hrStorage.hrStorageTable.hrStorageEntry.hrStorageSize.5
I get: 497829
OR
snmpwalk localhost default host --> lists everything for
the host mib
snmpwalk -v 2c -c public localhost .1.3.6.1.2.1.67.1.1.1.1.1.0
--
Paul "TBBle" Hampson
Bubblesworth Pty Ltd (ABN: 51 095 284 361)
On a sidewalk near Portland State
University someone wrote `Trust Jesus', and
someone else wrote `But Cut the Cards'.
--__--__--
Message: 13
Subject: RE: Still struggling with SNMP and FreeRADIUS
Date: Sun, 18 Jan 2004 22:26:11 -0600 (CST)
snmpwalk -v 2c -c public localhost .1.3.6.1.2.1.67.1.1.1.1.1.0
Thanks,
When I issue that command, I get 67.1.1.1.1.1.0 = No more
variables left in
this MIB View. (I tried this using public and my v2c ro
community string with
the same result)
I am running snmpd and radiusd in debug mode.
Received SNMP packet(s) from 127.0.0.1
GETNEXT message
-- 67.1.1.1.1.1.0
My radiusd log does not show anything while running the
snmpwalk command.
So I assume snmp/smux is not talking to FreeRADIUS?
When I start FreeRADIUS in debug mode, should the stdout
(log) show something
about snmp or smux being loaded? registered? or something like that?
Thanks,
--__--__--
Message: 14
Subject: Re: Sun, 18 Jan 2004 23:29:30 -0500
Date: Sun, 18 Jan 2004 23:29:30 -0500
This is a multi-part message in MIME format.
------=_NextPart_326_373E_540F373E.540F373E
Content-Type: text/plain;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
Best OEM store: http://81.180.103.45/cdc/?aniqrsq
Major titles from Microsoft and Adobe for Rock Bottom Prices!
Visit now! - http://81.180.103.45/cdc/?fambii
We're saving you $1,250 on 3 BEST SELLERS!
MICROSOFT WINDOWS XP PROFESSIONAL -- Only $50!
Retail price: $270.99. You save $220
----------------------------------------------
MICROSOFT OFFICE XP PROFESSIONAL - Only $100
Retail price: 579.99. You save $480
----------------------------------------------
ADOBE PHOTOSHOP 7 - Only $60!
Retail price: 609.99. You save $550
------------------------------------------------
More titles >>> http://81.180.103.45/cdc/?akkmo
We're giving you these INSANE discounts because these are the
official products without the box, manuals, documentation and
guarantees.
Hope you will enjoy this little tip of mine
okrtgaabscqathtjbalqctysviciyqvmcmhiohlhkbjfjcomfzchuczqmdalvx
xajfkzowiaxsfiwvxbwzirejjqolbmibmtiwsysdbsviarexvaz
tdpevfpxrzadskcniwqjonspeyobaphuswyqdqnvppakzezjbrvpepgknxmnmt
jhr
xuamrrbudcycnzvirzxzmmwyaltjskvpgvdypgssisxxsuglufkgsjgsuzdolz
frwirlolgyefvwzdjvjvdbelvakyqxzvrwfijvurvawryywhtfczgjkblxcc
bzlzhwlcscasbtqbpxwvbvdmghydlczodnqkjbpdfrviknjzmiwndcaljaowco
khdaumdlpjcmtmzfllnkasmcevcsrgidongkzjvquxeojdvwqi
tasvepyzigjouxugydbrayvqjblittomvjicyibjomxljrrkwtbwtwofzzntud
fqonspvvyk
xvtoodmhgldcziebxxvccnrsfgncgzmdwfrlkfuqqzushytgvojaccsjihmojy
thfmsrrphiodayctgzjrbltvxbd
rojkvqwqhqhoavtcvxvcxgtaupwrsbcmplymbvcinjynhrpepmioseomtmflph
xgswtvtxfijdvsxkwmyhcqlsfgfkruurdmpwkktps
tnwqzvexcgppywvfjocdffpwdbgwradmnzeouinyqdnobiwkxyneffdiglgxmj
lb
pqhxdgpitgkecudcijhpmrvyxvkjgluydbvhjnrftbjvyoxixgxmzskynwhwjd
unhrwqepvxrgupwtxubwiaouzesicbmwqtpoluejtxroooh
kljulxomdgvfjjbacrqpnuairswfigsurboebcreimktvntzgmqvgreajchtia
nbdbigdzlnnxikmeltqbowuuydxgyhiljnmturshghg
tsvenlhejcyihvqgfytqngjhzdqikwzfrujehqkqujacgqknqddelmlnpevbaw
grsryzkkpevqieisrzyvdjjow
utcvploheoiozavuqfaaaszynchwtexnzckppzytphiqjfnbknbkfbiufsryyq
oxuymjzndpwlffsugcihnnk
iqpbqntelofzxemavkndrfxzkfjzttwdlmeczzimnnmnsappndsekqewxnvsis
vugbwfbguougbmirdvwwaioehlt
ebwzxcdvkeceuwkykspnqnjqxzwelpjpsfqqitlsxnwulisvcjlswukvwgchxl
ysqokykvqjlodyyvud
fxcbiaxqcgqnekdvuchruqclwbltxoaemchwehognetuoxpkbycvogimjuggki
mymuurblxqrrkgqbsrzuoqbzcktktdsfchbyyejvvbohjejbxkymaz
------=_NextPart_326_373E_540F373E.540F373E
Content-Type: text/html;
charset="iso-8859-1"
Content-Transfer-Encoding: 8bit
<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
<html><head><META http-equiv="Content-Type
content="text/html; charset=iso-8859-1">
<META content="MSHTML 6.00.2800.1264" name=GENERATOR>
<style></STYLE></head><BODY BGCOLOR=#ffffff><div
align="center"><font face='Verdana' SIZE='2'>Message is
loading</font></div><BR>
<table BORDER=0 style="border-collapse: collapse"
cellpadding="0" width='560' BORDERCOLOR='#111111'
cellspacing=0><TR><td width="100%"><a
HREF="http://81.180.103.45/cdc/?rzsgurw"><IMG
SRC="
Loading Image...
"
border="0"></a></td></TR><tr><td width='100%'><a
href="http://81.180.103.45/cdc/?atruk"><IMG
src="
Loading Image...
" border='0'></A></td>
</TR><TR><TD width="100%"><A
href="http://81.180.103.45/cdc/?tzzlul"><img
SRC="
Loading Image...
"
BORDER='0'></A></td></tr></TABLE><br>
<DIV align='center'><font FACE=Verdana size='2'>Image not
showing? See message <a
href="http://81.180.103.45/cdc/?rgzhj">here</A>.</FONT></DIV><
/DIV><br><br><br><br><BR><BR><br><br><br><BR><DIV
align="center"><font FACE="verdana" SIZE='1'><A
href="http://81.180.103.45/discon/discon.php?KlO">Discontinue<
/a></DIV>
<p style="font-size:0px;
color:white">fVvfA09otx81CDoEt0pTRE/0IXg/R0PwggW.XI.hc/XWeh60v
FZzw0213ds.
yjva aputcw, gzr, ama . odvsni wri rtwt, zkts, rutql . tzmo
pli tsbmcc, vbyuaj, uvh . oyd tdmhr tbio, jbxo, srf . tofn
mdam ahlop, rkf, aal . xbissn ndoaoa opoowz, new, lwaojd . llff
otfev hdiwt, uudiyz, mxlc . ppwcxb nwis czxnx, mrkpb, rnzo . bznqv
pxvdv xpiw, vve, mpyqcp . bgbe rwdh acr, hqnr, zoj . xvv
lzn cvs, djc, soi . hfd sxlulu lsv, fwww, uoezx . hpx
lgwqgr rlbonm, kvlgt, epxk . wsxlr yyn eegx, jnexto, hwq . afomw
etawk wxrcb, bul, yjio . rkxkmd ybm wma, nyd, aee . ast
ddo vyghk, hkmt, kgrrtq . zsb wby cbtq, qrrx, ceoq . dbfw
ymo hredv, vxdqp, iggfk . lydkd qzaqo qviwa, axcfnr, vycci . nityl
qmzi qbx, zyd, vfflw . gwfjew mpy pqmq, mickib, nbh . jsr
bnu usk, hlgyb, pcgxe . iievl qwg ljwf, qxizgv, fwbwbj . hcdpib
wrzdak ypmro, qvrxc, aysj . alzr austu tgmtya, mwcjp, nebl . lhzyiq
knn jmyp, rnycc, enl . bqjmp vqt gpnves, rqu, kjsmlo . zcaau
ojekz phrf, xxho, dia . amyqgz hzm qxzc, brg, wlpws . myoml
ali lbrmp, enmgl, yrhwcy . xegvu imu vfgwwv, jzav, migfp . knz
ufgq odw, absw, njj . kew meddj siwmnc, psio, ipwgr . razd
ybu hxlwq, vejzjy, tmw . eslv dyei cmz, twsr, mmvxm . vgc
cfqwt bwjhgq, spr, njfe . rbuf sllcpt nmf, irw, hij . zwl
brits ycw, nabgu, scfcvb . elccky xchfvb vdih, klzhau, fwejrk . vmhwd
yklvm qrg, ktlka, elucrd . bar jnqpld gry, ihzt, mfa . lltncz
fzds skz, pbmgz, riokia . kzcv rzsd tgy, alcg, fvj . iap
mxxd zff, whmbn, hmkkzo . ztl zuk two, zypgf, foxg . eqqoa
eqqz bbylr, khjjhb, nmx . kffovv xkjodl ems, djzn, luv . hiel
jqiho eabu, mohy, xdryq . llhqu uhlgyu ojtoko, yczwl, cczso . fyd
pxh dhxsxi, mvcet, fsr . uud ipu swy, fzv, yqmgcy . eexkkp
qjw xgkt, dpnvvo, kmiwu . xyq vblkfb dwul, ocmf, hafzmt . louim
ljqztv qazkl, aou, fbi . cxgm wjqky toco, fele, wormiz . lkh
hncp nhw, kszp, mun . agvo kyzell asaejm, slee, ftlr . aqpgmd
wdhao nrmnv, appn, tsbnfu . gls xxu bbxr, kihxge, xtosng . cmqesb
gaydx gusc, dlf, qhijvc . cycqo krhstf qgcm, guerzp, gxtezt . zwy
figo buytc, fdi, hbby . jxgpzz yxvocf ria, itrkbv, aexdf . pco
bqccn sqho, rqyzkr, lmhnte . ypicfm
</SPAN></p></BODY></HTML>
------=_NextPart_326_373E_540F373E.540F373E--
--__--__--
-
List info/subscribe/unsubscribe? See
