Commentaires pour Colibrix.info

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par nicodeme

nicodeme — Wed, 25 Aug 2010 17:33:24 +0000

Selon vos logs votre serveur radius fonctionne très bien. Seul ces lignes de fin de fichier comptent et vous indiquent le bon fonctionnement:
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.
Cela veut dire que votre serveur est joignable. Vous n’avez nullement besoin de faire un radtest. Vous pouvez passer à l’installation de daloradius.

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par AHLEM

AHLEM — Tue, 24 Aug 2010 12:18:23 +0000

salut pour tous le monde svp je suis devant une grande problème j’ai installè freeradius sous ubuntu 10.04 tous est bien marché souf lorsque je lance la commande radtest je trouve ça :
freeradius -X
FreeRADIUS Version 2.1.8, for host i486-pc-linux-gnu, built on Jan 5 2010 at 02:49:11
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redistribute copies of FreeRADIUS under the terms of the
GNU General Public License v2.
Starting - reading configuration files …
including configuration file /etc/freeradius/radiusd.conf
including configuration file /etc/freeradius/proxy.conf
including configuration file /etc/freeradius/clients.conf
including files in directory /etc/freeradius/modules/
including configuration file /etc/freeradius/modules/ntlm_auth
including configuration file /etc/freeradius/modules/expr
including configuration file /etc/freeradius/modules/passwd
including configuration file /etc/freeradius/modules/ldap
including configuration file /etc/freeradius/modules/detail.log
including configuration file /etc/freeradius/modules/smsotp
including configuration file /etc/freeradius/modules/mac2ip
including configuration file /etc/freeradius/modules/exec
including configuration file /etc/freeradius/modules/etc_group
including configuration file /etc/freeradius/modules/mac2vlan
including configuration file /etc/freeradius/modules/detail.example.com
including configuration file /etc/freeradius/modules/sqlcounter_expire_on_login
including configuration file /etc/freeradius/modules/checkval
including configuration file /etc/freeradius/modules/acct_unique
including configuration file /etc/freeradius/modules/always
including configuration file /etc/freeradius/modules/counter
including configuration file /etc/freeradius/modules/realm
including configuration file /etc/freeradius/modules/pam
including configuration file /etc/freeradius/modules/attr_filter
including configuration file /etc/freeradius/modules/perl
including configuration file /etc/freeradius/modules/unix
including configuration file /etc/freeradius/modules/sql_log
including configuration file /etc/freeradius/modules/detail
including configuration file /etc/freeradius/modules/policy
including configuration file /etc/freeradius/modules/logintime
including configuration file /etc/freeradius/modules/pap
including configuration file /etc/freeradius/modules/files
including configuration file /etc/freeradius/modules/echo
including configuration file /etc/freeradius/modules/cui
including configuration file /etc/freeradius/modules/linelog
including configuration file /etc/freeradius/modules/digest
including configuration file /etc/freeradius/modules/preprocess
including configuration file /etc/freeradius/modules/radutmp
including configuration file /etc/freeradius/modules/otp
including configuration file /etc/freeradius/modules/expiration
including configuration file /etc/freeradius/modules/krb5
including configuration file /etc/freeradius/modules/ippool
including configuration file /etc/freeradius/modules/sradutmp
including configuration file /etc/freeradius/modules/smbpasswd
including configuration file /etc/freeradius/modules/mschap
including configuration file /etc/freeradius/modules/wimax
including configuration file /etc/freeradius/modules/attr_rewrite
including configuration file /etc/freeradius/modules/inner-eap
including configuration file /etc/freeradius/modules/chap
including configuration file /etc/freeradius/eap.conf
including configuration file /etc/freeradius/sql.conf
including configuration file /etc/freeradius/sql/mysql/dialup.conf
including configuration file /etc/freeradius/sql/mysql/counter.conf
including configuration file /etc/freeradius/policy.conf
including files in directory /etc/freeradius/sites-enabled/
including configuration file /etc/freeradius/sites-enabled/default
including configuration file /etc/freeradius/sites-enabled/inner-tunnel
main {
user = “freerad”
group = “freerad”
allow_core_dumps = no
}
including dictionary file /etc/freeradius/dictionary
main {
prefix = “/usr”
localstatedir = “/var”
logdir = “/var/log/freeradius”
libdir = “/usr/lib/freeradius”
radacctdir = “/var/log/freeradius/radacct”
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5
max_requests = 1024
pidfile = “/var/run/freeradius/freeradius.pid”
checkrad = “/usr/sbin/checkrad”
debug_level = 0
proxy_requests = yes
log {
stripped_names = no
auth = no
auth_badpass = no
auth_goodpass = no
}
security {
max_attributes = 200
reject_delay = 1
status_server = yes
}
}
radiusd: #### Loading Realms and Home Servers ####
proxy server {
retry_delay = 5
retry_count = 3
default_fallback = no
dead_time = 120
wake_all_if_all_dead = no
}
home_server localhost {
ipaddr = 127.0.0.1
port = 1812
type = “auth”
secret = “testing123″
response_window = 20
max_outstanding = 65536
require_message_authenticator = no
zombie_period = 40
status_check = “status-server”
ping_interval = 30
check_interval = 30
num_answers_to_alive = 3
num_pings_to_alive = 3
revive_interval = 120
status_check_timeout = 4
irt = 2
mrt = 16
mrc = 5
mrd = 30
}
home_server_pool my_auth_failover {
type = fail-over
home_server = localhost
}
realm example.com {
auth_pool = my_auth_failover
}
realm LOCAL {
}
radiusd: #### Loading Clients ####
client localhost {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = “testing123″
nastype = “other”
}
radiusd: #### Instantiating modules ####
instantiate {
Module: Linked to module rlm_exec
Module: Instantiating exec
exec {
wait = no
input_pairs = “request”
shell_escape = yes
}
Module: Linked to module rlm_expr
Module: Instantiating expr
Module: Linked to module rlm_expiration
Module: Instantiating expiration
expiration {
reply-message = “Password Has Expired ”
}
Module: Linked to module rlm_logintime
Module: Instantiating logintime
logintime {
reply-message = “You are calling outside your allowed timespan ”
minimum-timeout = 60
}
}
radiusd: #### Loading Virtual Servers ####
server inner-tunnel {
modules {
Module: Checking authenticate {…} for more modules to load
Module: Linked to module rlm_pap
Module: Instantiating pap
pap {
encryption_scheme = “auto”
auto_header = no
}
Module: Linked to module rlm_chap
Module: Instantiating chap
Module: Linked to module rlm_mschap
Module: Instantiating mschap
mschap {
use_mppe = yes
require_encryption = no
require_strong = no
with_ntdomain_hack = no
}
Module: Linked to module rlm_unix
Module: Instantiating unix
unix {
radwtmp = “/var/log/freeradius/radwtmp”
}
Module: Linked to module rlm_eap
Module: Instantiating eap
eap {
default_eap_type = “md5″
timer_expire = 60
ignore_unknown_eap_types = no
cisco_accounting_username_bug = no
max_sessions = 4096
}
Module: Linked to sub-module rlm_eap_md5
Module: Instantiating eap-md5
Module: Linked to sub-module rlm_eap_leap
Module: Instantiating eap-leap
Module: Linked to sub-module rlm_eap_gtc
Module: Instantiating eap-gtc
gtc {
challenge = “Password: ”
auth_type = “PAP”
}
Module: Linked to sub-module rlm_eap_tls
Module: Instantiating eap-tls
tls {
rsa_key_exchange = no
dh_key_exchange = yes
rsa_key_length = 512
dh_key_length = 512
verify_depth = 0
pem_file_type = yes
private_key_file = “/etc/freeradius/certs/server.key”
certificate_file = “/etc/freeradius/certs/server.pem”
CA_file = “/etc/freeradius/certs/ca.pem”
private_key_password = “whatever”
dh_file = “/etc/freeradius/certs/dh”
random_file = “/etc/freeradius/certs/random”
fragment_size = 1024
include_length = yes
check_crl = no
cipher_list = “DEFAULT”
make_cert_command = “/etc/freeradius/certs/bootstrap”
cache {
enable = no
lifetime = 24
max_entries = 255
}
}
Module: Linked to sub-module rlm_eap_ttls
Module: Instantiating eap-ttls
ttls {
default_eap_type = “md5″
copy_request_to_tunnel = no
use_tunneled_reply = no
virtual_server = “inner-tunnel”
include_length = yes
}
Module: Linked to sub-module rlm_eap_peap
Module: Instantiating eap-peap
peap {
default_eap_type = “mschapv2″
copy_request_to_tunnel = no
use_tunneled_reply = no
proxy_tunneled_request_as_eap = yes
virtual_server = “inner-tunnel”
}
Module: Linked to sub-module rlm_eap_mschapv2
Module: Instantiating eap-mschapv2
mschapv2 {
with_ntdomain_hack = no
}
Module: Checking authorize {…} for more modules to load
Module: Linked to module rlm_realm
Module: Instantiating suffix
realm suffix {
format = “suffix”
delimiter = “@”
ignore_default = no
ignore_null = no
}
Module: Linked to module rlm_files
Module: Instantiating files
files {
usersfile = “/etc/freeradius/users”
acctusersfile = “/etc/freeradius/acct_users”
preproxy_usersfile = “/etc/freeradius/preproxy_users”
compat = “no”
}
Module: Checking session {…} for more modules to load
Module: Linked to module rlm_radutmp
Module: Instantiating radutmp
radutmp {
filename = “/var/log/freeradius/radutmp”
username = “%{User-Name}”
case_sensitive = yes
check_with_nas = yes
perm = 384
callerid = yes
}
Module: Checking post-proxy {…} for more modules to load
Module: Checking post-auth {…} for more modules to load
Module: Linked to module rlm_attr_filter
Module: Instantiating attr_filter.access_reject
attr_filter attr_filter.access_reject {
attrsfile = “/etc/freeradius/attrs.access_reject”
key = “%{User-Name}”
}
} # modules
} # server
server {
modules {
Module: Checking authenticate {…} for more modules to load
Module: Checking authorize {…} for more modules to load
Module: Linked to module rlm_preprocess
Module: Instantiating preprocess
preprocess {
huntgroups = “/etc/freeradius/huntgroups”
hints = “/etc/freeradius/hints”
with_ascend_hack = no
ascend_channels_per_line = 23
with_ntdomain_hack = no
with_specialix_jetstream_hack = no
with_cisco_vsa_hack = no
with_alvarion_vsa_hack = no
}
Module: Checking preacct {…} for more modules to load
Module: Linked to module rlm_acct_unique
Module: Instantiating acct_unique
acct_unique {
key = “User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port”
}
Module: Checking accounting {…} for more modules to load
Module: Linked to module rlm_detail
Module: Instantiating detail
detail {
detailfile = “/var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d”
header = “%t”
detailperm = 384
dirperm = 493
locking = no
log_packet_header = no
}
Module: Instantiating attr_filter.accounting_response
attr_filter attr_filter.accounting_response {
attrsfile = “/etc/freeradius/attrs.accounting_response”
key = “%{User-Name}”
}
Module: Checking session {…} for more modules to load
Module: Checking post-proxy {…} for more modules to load
Module: Checking post-auth {…} for more modules to load
} # modules
} # server
radiusd: #### Opening IP addresses and Ports ####
listen {
type = “auth”
ipaddr = *
port = 0
}
listen {
type = “acct”
ipaddr = *
port = 0
}
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Listening on proxy address * port 1814
Ready to process requests.

^[cq
exit
^[q
^[cq
^C
root@sadok-desktop:~#
root@sadok-desktop:~#
root@sadok-desktop:~# radtest Thus0 motdepasse 127.0.0.1 0 testing123
radclient:: Failed to find IP address for sadok-desktop
radclient: Nothing to send.

je n’ai sait pas quel est le problème contactez moi par e_mail mohamed.intissar@yahoo.fr

merci bocoooooooooooooooooo !!

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par nicodeme

nicodeme — Sat, 07 Aug 2010 09:44:50 +0000

Je pense que vous n’avez pas besoin d’effecteur cette commande étant donné que vous avez déjà créé un utilisateur qui s’appelle radius avec privilège sur la table radius (# echo “grant all on radius.* to radius@’%’ identified by ‘motdepasse_sql’; flush privileges;” | mysql -u root -p). Continuez donc votre installation…

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par rousseau

rousseau — Tue, 03 Aug 2010 16:00:40 +0000

Je trouve pas… une histoire de mots de passe cela doit venir des premières commandes effectuée pour la configuration de Mysql !
Je nage un peut…

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par rousseau

rousseau — Mon, 02 Aug 2010 12:56:45 +0000

Bonjour

Je vous remercie pour vos précédent conseil !!
A cause du travail je n’ai pas eu le temps de mis remettre…
Après avoir installé Daloradius je bloque a la commande :

mysqladmin create radius

cela me met

mysqladmin: connect to server at ‘localhost’ failed
error: ‘Access denied for user ‘root’@'localhost’ (using password: NO)’

Je pense que cela viens de mon mysql !! mais ou ?

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par nicodeme

nicodeme — Mon, 26 Jul 2010 17:46:41 +0000

@rousseau
Cela veut dire que vous n’avez pas bien complété les fichiers de configuration /etc/freeradius/sql.conf à la ligne 22 ainsi que le fichier de /etc/freeradius/sites-enabled/default à la ligne 152 et 62. Il faut bien comprendre la manière dont est écrit le passage concernant les sections : dans sql.conf il faut remplacer ce qui en gras par vos propres login, mot de passe et nom de base. Pour le fichier default ce qui est en gras doit être décommenté et ce qui ne l’est pas est ce qui doit rester dans votre fichier… De même “motdepasse_sql” correspond à votre propre mot de passe…

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par rousseau

rousseau — Mon, 26 Jul 2010 14:39:58 +0000

Avez-vous une idée ??

Merci d’avance …

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par rousseau

rousseau — Mon, 26 Jul 2010 14:39:12 +0000

J’ai trois messages d’erreurs qui s’affiche lors de l’éxecution de Freeradius -X

/etc/freeradius/sql.conf[22]: Instantiation failed for module “sql”
/etc/freeradius/sites-enables/default[152]: failed to find module “sql”.
/etc/freeradius/sites-enables/default[62]: Errors parsing authorize section

Je pense que cela vient de la ligne de commande :

# echo “grant all on radius.* to radius@’%’ identified by ‘motdepasse_sql’; flush privileges;” | mysql -u root -p

Lorsque j’ai effectué cette commande cela ma affiché un curseur >, le seul moyen de reprendre la main c’est de faire un ctr+C .

Je me retrouve encore coincé…

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par nicodeme

nicodeme — Mon, 26 Jul 2010 13:54:57 +0000

Décommenter veut bien dire qu’il faut enlever le signe “#” avant la ligne. Personnellement je conseille de modifier les fichiers avec le logiciel vi qui permet grâce à la coloration syntaxique de bien voir ce que l’on fait et de mieux se retrouver dans le fichier.

Commentaires sur Installer Freeradius et Daloradius sous Debian (ou Ubuntu) par rousseau

rousseau — Mon, 26 Jul 2010 11:56:20 +0000

J’ai oublié de vous remercié … dsl j’ai écrit avant de voir votre réponse !! Merci et je vous tient au courant de mon avancement !!