Mikrotik + Freeradius + Mysql + Hotspot ( Casando MAC/IP/Login/Senha )

[edsonrocha88]

oi, sou muito leigo nesse assunto
queria saber onde eu vou compilar o freeradius, se preciso baixar mais algum programas fora o freeradios q vc disponibilizou...já estou cm uma máquina cm o mikrotik instalado e outra com o win.xp msm, tenho q instalar algum outro sistema?
esse freeradius é instalado no windows??
é um ambiente?
me ajuda por favor!
desde já agradeco
=)

[iceblue]

Postado Originalmente por edsonrocha88

oi, sou muito leigo nesse assunto
queria saber onde eu vou compilar o freeradius, se preciso baixar mais algum programas fora o freeradios q vc disponibilizou...já estou cm uma máquina cm o mikrotik instalado e outra com o win.xp msm, tenho q instalar algum outro sistema?
esse freeradius é instalado no windows??
é um ambiente?
me ajuda por favor!
desde já agradeco
=)

Linux: Freeradius - servidor radius eficiente e completo [Artigo]

Divirta-se!

[AirKing]

Postado Originalmente por edsonrocha88

oi, sou muito leigo nesse assunto
queria saber onde eu vou compilar o freeradius, se preciso baixar mais algum programas fora o freeradios q vc disponibilizou...já estou cm uma máquina cm o mikrotik instalado e outra com o win.xp msm, tenho q instalar algum outro sistema?
esse freeradius é instalado no windows??
é um ambiente?
me ajuda por favor!
desde já agradeco
=)

Ola amigo... vc vai instalar o Freeradius no linux na distribuicao que vc achar melhor... eu particularmente gosto do CentOS www.centos.org - The Community ENTerprise Operating System - ele é uma versao free do red hat enterprise

Abracos.
Glauber Mattar

[jhonnyp]

amigos, vamos fazer um wiki com isso, muito bom esse material.

[iuredaluz]

tentei rodar em modo debug
deu erro

root@servidor:/usr/sbin# freeradius -x
Starting - reading configuration files ...
Errors reading dictionary: dict_init: No ATTRIBUTE "Wireless-Enc-Algo" defined for VALUE "104-bit-WEP"
Errors reading radiusd.conf

[AirKing]

Ola amigo... isso ai é porque vc precisa comentar algumas linhas no dictionary.mikrotik sao umas 3 linhas....

Abracos.
AirKing

[AirKing]

Postado Originalmente por jhonnyp

amigos, vamos fazer um wiki com isso, muito bom esse material.

podem ficar a vontaqde pra colocar no wiki.... falta um artigo assim no wiki da underlinux..

Abracos.
AirKing

[iuredaluz]

Ae galera, instalei meu servidor radius,(estou usando pppoe-server) porem não esta autenticando, eu n sei mais o que faço para funcionar, eu executo ele em modo debug, e inicia blz, mais quando vou conectar da erro. Olhe:

rad_recv: Access-Request packet from host 192.168.10.1:42948, id=84, length=258
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 120
NAS-Port-Type = Ethernet
User-Name = "iure@netexpress.com.br"
Calling-Station-Id = "00:19:21:8D:66:FC"
Called-Station-Id = "PPPoE-WinXP"
NAS-Port-Id = "Local"
MS-CHAP-Domain = "netexpress.com.br"
MS-CHAP-Challenge = 0xc74ceaf7d0b2c5514ce2a0d191e1833b
MS-CHAP2-Response = 0x01003ef5ea2cc2dd9309fc2d1edad45c3 b14000000000000 0000c6cb688188e9e7c15379f1958dd1afb 27abcb866208f5c df
NAS-Identifier = "Eletron Luz"
NAS-IP-Address = 192.168.10.1
Mikrotik-Realm = "netexpress.com.br"
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 0
modcall[authorize]: module "preprocess" returns ok for request 0
modcall[authorize]: module "chap" returns noop for request 0
rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'
modcall[authorize]: module "mschap" returns ok for request 0
rlm_realm: Looking up realm "netexpress.com.br" for User-Name = "iure@netexpress.com.br"
rlm_realm: Found realm "netexpress.com.br"
rlm_realm: Adding Stripped-User-Name = "iure"
rlm_realm: Proxying request from user iure to realm netexpress.com.br
rlm_realm: Adding Realm = "netexpress.com.br"
rlm_realm: Preparing to proxy authentication request to realm "netexpress.com.br"
modcall[authorize]: module "suffix" returns updated for request 0
radius_xlat: 'iure@netexpress.com.br'
rlm_sql (sql): sql_set_user escaped user --> 'iure@netexpress.com.br'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'iure@netexpress.com.br' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): User iure@netexpress.com.br not found in radcheck
radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.Grou pName,radgroupc heck.Attribute,radgroupcheck.Value, radgroupcheck.o p FROM radgroupcheck,usergroup WHERE usergroup.Username = 'iure@netexpress.com.br' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT radgroupreply.id,radgroupreply.Grou pName,radgroupr eply.Attribute,radgroupreply.Value, radgroupreply.o p FROM radgroupreply,usergroup WHERE usergroup.Username = 'iure@netexpress.com.br' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): User iure@netexpress.com.br not found in radgroupcheck
rlm_sql (sql): Released sql socket id: 4
rlm_sql (sql): User not found
modcall[authorize]: module "sql" returns notfound for request 0
modcall: leaving group authorize (returns updated) for request 0
Sending Access-Request of id 0 to 192.168.10.5 port 1812
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 120
NAS-Port-Type = Ethernet
User-Name = "iure"
Calling-Station-Id = "00:19:21:8D:66:FC"
Called-Station-Id = "PPPoE-WinXP"
NAS-Port-Id = "Local"
MS-CHAP-Domain = "netexpress.com.br"
MS-CHAP-Challenge = 0xc74ceaf7d0b2c5514ce2a0d191e1833b
MS-CHAP2-Response = 0x01003ef5ea2cc2dd9309fc2d1edad45c3 b14000000000000 0000c6cb688188e9e7c15379f1958dd1afb 27abcb866208f5c df
NAS-Identifier = "Eletron Luz"
NAS-IP-Address = 192.168.10.1
Mikrotik-Realm = "netexpress.com.br"
Proxy-State = 0x3834
--- Walking the entire request list ---
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 192.168.10.5:1814, id=0, length=244
Service-Type = Framed-User
Framed-Protocol = PPP
NAS-Port = 120
NAS-Port-Type = Ethernet
User-Name = "iure"
Calling-Station-Id = "00:19:21:8D:66:FC"
Called-Station-Id = "PPPoE-WinXP"
NAS-Port-Id = "Local"
MS-CHAP-Domain = "netexpress.com.br"
MS-CHAP-Challenge = 0xc74ceaf7d0b2c5514ce2a0d191e1833b
MS-CHAP2-Response = 0x01003ef5ea2cc2dd9309fc2d1edad45c3 b14000000000000 0000c6cb688188e9e7c15379f1958dd1afb 27abcb866208f5c df
NAS-Identifier = "Eletron Luz"
NAS-IP-Address = 192.168.10.1
Mikrotik-Realm = "netexpress.com.br"
Proxy-State = 0x3834
Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
modcall[authorize]: module "preprocess" returns ok for request 1
modcall[authorize]: module "chap" returns noop for request 1
rlm_mschap: Found MS-CHAP attributes. Setting 'Auth-Type = mschap'
modcall[authorize]: module "mschap" returns ok for request 1
rlm_realm: No '@' in User-Name = "iure", looking up realm NULL
rlm_realm: No such realm "NULL"
modcall[authorize]: module "suffix" returns noop for request 1
radius_xlat: 'iure'
rlm_sql (sql): sql_set_user escaped user --> 'iure'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'iure' ORDER BY id'
rlm_sql (sql): Reserving sql socket id: 3
radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.Grou pName,radgroupc heck.Attribute,radgroupcheck.Value, radgroupcheck.o p FROM radgroupcheck,usergroup WHERE usergroup.Username = 'iure' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id'
radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'iure' ORDER BY id'
radius_xlat: 'SELECT radgroupreply.id,radgroupreply.Grou pName,radgroupr eply.Attribute,radgroupreply.Value, radgroupreply.o p FROM radgroupreply,usergroup WHERE usergroup.Username = 'iure' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id'
rlm_sql (sql): Released sql socket id: 3
rlm_sql (sql): No matching entry in the database for request from user [iure]
modcall[authorize]: module "sql" returns notfound for request 1
modcall: leaving group authorize (returns ok) for request 1
rad_check_password: Found Auth-Type MS-CHAP
auth: type "MS-CHAP"
Processing the authenticate section of radiusd.conf
modcall: entering group MS-CHAP for request 1
rlm_mschap: No User-Password configured. Cannot create LM-Password.
rlm_mschap: No User-Password configured. Cannot create NT-Password.
rlm_mschap: Told to do MS-CHAPv2 for iure with NT-Password
rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication.
rlm_mschap: FAILED: MS-CHAP2-Response is incorrect
modcall[authenticate]: module "mschap" returns reject for request 1
modcall: leaving group MS-CHAP (returns reject) for request 1
auth: Failed to validate the user.
Delaying request 1 for 1 seconds
Finished request 1
Going to the next request
Waking up in 6 seconds...
rad_recv: Access-Request packet from host 192.168.10.1:42948, id=84, length=258
Ignoring duplicate packet from client mikrotik:42948 - ID: 84, due to outstanding proxied request 0.
--- Walking the entire request list ---
Waking up in 1 seconds...
rad_recv: Access-Request packet from host 192.168.10.1:42948, id=84, length=258
Ignoring duplicate packet from client mikrotik:42948 - ID: 84, due to outstanding proxied request 0.
Sending Access-Reject of id 0 to 192.168.10.5 port 1814
Proxy-State = 0x3834
Waking up in 1 seconds...
rad_recv: Access-Reject packet from host 192.168.10.5:1812, id=0, length=24
Proxy-State = 0x3834
Processing the post-proxy section of radiusd.conf
modcall: entering group post-proxy for request 0
modcall[post-proxy]: module "eap" returns noop for request 0
modcall: leaving group post-proxy (returns noop) for request 0
Delaying request 0 for 1 seconds
Finished request 0
Going to the next request
Waking up in 1 seconds...
--- Walking the entire request list ---
Waking up in 1 seconds...
--- Walking the entire request list ---
Sending Access-Reject of id 84 to 192.168.10.1 port 42948
Waking up in 3 seconds...
--- Walking the entire request list ---
Cleaning up request 1 ID 0 with timestamp 470770c9
Waking up in 1 seconds...
--- Walking the entire request list ---
Cleaning up request 0 ID 84 with timestamp 470770ca
Nothing to do. Sleeping until we see a request.


Me ajudem

[iceblue]

Galera,

desculpe a ignorancia da pergunta....

Eu gostaria de saber quais sao as vantagens de trabalhar com o free radius + mysql...

Alguem pode me explicar?

obrigado.

[cleciorodrigo]

Centralização dos dados, ou seja vc pode ter varios servidores mikrotik e ter todos os seus clientes cadastrados em uma unica base de dados, facilitando a manutenção, e podendo implementar outros serviços como o cliente tirar extrato de uso, logs, e alterar a propria senha

Falow

Postado Originalmente por iceblue

Galera,

desculpe a ignorancia da pergunta....

Eu gostaria de saber quais sao as vantagens de trabalhar com o free radius + mysql...

Alguem pode me explicar?

obrigado.