configurar Freeradius com uma base sql

--esse esta mais atualizado 2016-07
https://www.vivaolinux.com.br/artigo/FreeRadius-3-iODBC-Base-de-Dados-em-MS-SQL-Server-2008-no-Ubuntu-Server-Guia-definitivo



https://lalitvc.wordpress.com/2014/07/03/freeradius-3-0-x-installation-and-configuration-with-mysql/

http://www.vivaolinux.com.br/artigo/Freeradius-servidor-radius-eficiente-e-completo?pagina=4
"arquivos faltando procurar nos sources"


 http://wiki.freeradius.org/config/MS%20SQL%20DDL%20script

avaliar:

https://www.howtoforge.com/setting-up-a-freeradius-based-aaa-server-with-mysql-and-management-with-daloradius

debug:

http://mailman.unixodbc.org/pipermail/unixodbc-support/2007-September/001456.html


odbc configuration:
https://wiki.archlinux.org/index.php/Open_Database_Connectivity

install fretds on centos 7
You can install php-mssql and freetds from EPEL. Run yum install epel-release, then yum install php-mssql freetds.

configuration:
https://www.caseylabs.com/how-to-install-unixodbc-and-freetds-on-centos-6-5-for-microsoft-sql-server-connections/

http://www.opensource.apple.com/source/freeradius/freeradius-42/freeradius/doc/mssql

http://serverfault.com/questions/448365/debian-build-the-freeradius-package-with-unixodbc-support
---

cat /etc/odbc.ini
[MSSQL-DB]
description     = FreeRADIUS ODBC for MSSQL 7.0
driver          = FreeTDS
server          = mssql.yourdomain.com
port            = 1433
database        = mydatabase
tds_version     = 7.0
language        = us_english

cat /etc/odbcinst.ini
[FreeTDS]
description     = FreeTDS driver for MSSQL
driver          = /usr/lib/libtdsodbc.so
setup           = /usr/lib/libtdsS.so
fileusage       = 1

cat /srv/radiusd/mssql.conf
sql {
        driver = "rlm_sql_unixodbc"
        server = "MSSQL-DB"

        login = "mylogin"
        password = "mypassword"

        radius_db = "mydatabase"

        acct_table1 = "radacct"
        acct_table2 = "radacct"

        authcheck_table = "radcheck"
        authreply_table = "radreply"

----------------

  825  yum install freeradius
 1033  yum install mssql-devel
 1041  yum install freeradius-mssql*
 1042  yum install mssql*
 1071  yum install unixodbc-dev
 1072  yum install unixodbc
 1073  yum install unixODBC
 1074  yum install unixODBC-dev
 1075  yum install unixODBC
 1076  yum install freetds
 1077  yum install freetds*
 1078  yum install unixODBC*
 1085  yum install free*
 1086  yum install freeradi*
 1123  yum install msodbc*
 1124  yum install mso*
 1125  yum install freet*
 1128  yum install wget
 1132  yum install freetds freetds-devel
 1133  yum install epel-release
 1134  yum install freetds
 1198  yum install freetds-dev
 1199  yum install freetds-dev*
 

------ 

order install

http://lists.freeradius.org/pipermail/freeradius-users/2007-April/018281.html

=====

If you're on Ubuntu 12.04 32 bit.

sudo apt-get install freetds-dev

or

sudo apt-get install tdsodbc

now look in:

/usr/lib/i386-linux-gnu/odbc/libtdsodbc.so

• The default Debian / Ubuntu build rules include OpenSSL support. As of version 2.1.8, OpenSSL support is included by default in the debian build rules shipped with FreeRADIUS, but it still requires you to install the OpenSSL libraries manually. Version 2.1.9 does not have this problem. Using pre-built packages also avoids this problem. You can install the needed OpenSSL libraries by doing:

apt-get install libssl-dev

======

options:

http://lists.freeradius.org/pipermail/freeradius-users/2007-April/018281.html 

arquivoc conf. 

http://www.inspiredtechies.com/setup-freeradius-openldap-mysql-server/ 

--- 

traduzido:

http://wiki.brivaldojunior.facom.ufms.br/index.php/FreeRadius

---

dicas

não usar pacotes do freeradius pre-compilados via apt-get ou yum install, 

baixar os fontes e compilar tradicionalmente:

tem a pegadinha, tambem precisa compilar os drivers para sql

 362  cd /root/freeradius-server-2.2.8/src/modules/rlm_sql/drivers/
  363  ls
  364  ls-l
  365  ls -l
  366  cd rlm_sql_unixodbc/
  367  ls
  368  ls-l
  369  ls -l
  370  ./configure --help
  371  ./configure
  372  make
  373  make install
  374  cd /usr/local/lib
  375  ls
  376  ls -l
 

comandos insert sql

http://www.easysoft.com/applications/freeradius/odbc-authorization.html

-

encriptacao de password:

https://www.packtpub.com/books/content/freeradius-authentication-storing-passwords

  ---- 

usar case sensitive

é preciso alterar o arquivo /etc/freeradius/sql/mysql/dialup.conf e mudar nas querys as opções para consultas com username BINARY ativado.



troca a parte abaixo:

  

     authorize_check_query = "SELECT id, username, attribute, value, op \

          FROM ${authcheck_table} \

          WHERE ativo ='s' AND ativo2 ='s' AND username = '%{SQL-User-Name}' \

          ORDER BY id"

  

 por essa outra abaixo:

  

     authorize_check_query = "SELECT id, username, attribute, value, op \

          FROM ${authcheck_table} \

          WHERE ativo ='s' AND ativo2 ='s' AND username = BINARY '%{SQL-User-Name}' \

          ORDER BY id" 

botar para auto start

cp /usr/local/sbin/rc.radiusd /etc/init.d/radiusd

Just change the privileges of radiusd.
 chmod 755 /etc/init.d/radiusd ,
 and then start the script by 
/etc/init.d/radiusd start
 hope it can solve your problem. 

Re: 12.04 LTS - Freeradius not starting at boot

Hello, sorry for my bad english. My native language is spanis. I build quick fix for this problem.

1.Some demons and services are loaded in the beggining in /etc/rcN.d/ for example, some services located in /etc/rc2.d/, including freeradius.

2. Other programs in ubuntu 12.04 LTS is executed with /lib/init/upstart-job script , this script load the script ejecution located in /etc/init/, implemented y loaded at the end, including the mysql.

3. When activated Freeradius with mysql, freeradius search mysql, but mysql services is not ready, and freeradius fail.

For fix this bug in ubuntu 12.04 please have the following steps (with root user):

1. Desactivate freeradius loaded in /etc/rcN.d with command: update-rc.d freeradius disable
2. rename script ejecution in /etc/init.d/ with name is freeradius with name freeradiusbck for example with command: mv freeradius freeradiusbck
3. move to /etc/init/ and create script with name freeradius.conf with content

# freeradius - server
description "Radius server Fixed"
author "Moises Gomez Diaz <halcons@gmail.com>"


start on filesystem or runlevel [2345]
stop on runlevel [!2345]


respawn


exec /etc/init.d/freeradiusbck start

4. Create symbolic link in /etc/init.d/ to script created in step 3, (located in /etc/init.d/ write command ln -s /lib/init/upstart-job freeradius)
5. restart your server with shutdown -r now
6. Enjoy!

 -----

radius

http://www.ezradius.net/support/index.php?_m=knowledgebase&_a=viewarticle&kbarticleid=37

qual motivo para nas type = ethernet?

http://wiki.radius.net.br/index.php?title=Configura%C3%A7%C3%A3o_Hotspot_e_PPPoE

interessante:

http://wiki.radius.net.br/index.php?title=Par%C3%A2metros_do_Radius

----------------------------

se ocorrer o seguinte erro:

# ./radiusd check
/usr/local/sbin/radiusd: error while loading shared libraries: libfreeradius-radius-020208.so: cannot open shared object file: No such file or directory

se o arquivo existir:

# find / -name libfreeradiu*
/usr/local/lib/libfreeradius-radius-020208.so

verifique:

Try puting /usr/loval/lib into the file /etc/ld.so.conf and then run 
ldconfig ... 

--------------------

Se aparecer mensagem de vulnerabilidade do openssl:

Refusing to start with libssl version OpenSSL 1.0.1f 6 Jan 2014 (in range 1.0.1 - 1.0.1f).  Security advisory CVE-2014-0160 (Heartbleed)
For more information see http://heartbleed.com




Faça:

https://lalitvc.wordpress.com/2014/06/26/freeradius-refusing-to-start-with-libssl-version-openssl-security-advisory-cve-2014-0160/

ou recompila: (não testado)

> I want to compile freeradius without ssl, i tried with 
> ./configure --disable-ssl 
> ./configure --disable-openssl 
> ./configure --without-ssl 
> ./configure --without-openssl 
> however always i see 
> checking for regex.h... yes 
> checking for openssl/ssl.h... no 
> checking for off_t... yes 
> how can i compile without support ssl
You need to disable everything that use SSL. 

$ ./configure  --without-rlm_eap_peap \ 
               --without-rlm_eap_tls \ 
               --without-rlm_eap_ttls \ 
               --without-rlm_otp \ 
               --without-rlm_sql_postgresql \ 
               --without-snmp 

--- install daloradius em ubuntu 15

https://dcamero.azurewebsites.net/freeradius-daloradius.html  (fora do ar, ver cache)

https://dani33l.wordpress.com/2014/11/01/freeradius-daloradius-ubuntu-server-configuration/

http://wombat3.kozo.ch/j/kvm-list/9605-kvm-802-1x-freeradius

--- install lamp no ubuntu

https://www.digitalocean.com/community/tutorials/como-instalar-a-pilha-linux-apache-mysql-php-lamp-no-ubuntu-16-04-pt 

--- comandos sql para inserir users

https://www.howtoforge.com/setting-up-a-freeradius-based-aaa-server-with-mysql-and-management-with-daloradius

http://www.ubuntugeek.com/install-freeradius-on-ubuntu-15-04-server-and-manage-using-daloradius-freeradius-web-management-application.html


--- texto bem explicado:
http://www.serveradminblog.com/2011/12/freeradius-install-howto-4-populating-tables/ 

--- projeto futuro dhcp com freeradius
http://freeradius.org/features/dhcp.html 
https://www.google.com.br/?client=firefox-b#newwindow=1&q=radius+dhcp+authentication

--- ssl certificado
https://www.digitalocean.com/community/tutorials/how-to-secure-apache-with-let-s-encrypt-on-ubuntu-16-04

---- verificar account no ippool
http://www.tuxlanding.net/freeradius-style-dhcp-and-high-availability/
----(pdf precisar acertar NULL para 0000-00-.... e account sqlippool)