Freeradius mysql MAC authentication using m0n0wall as NAS

www.computing-tips.net - Tips to help you in your computing life

Home | Software | Blog |

Very Rough Notes: Freeradius mysql MAC authentication using m0n0wall as NAS.

Work in progress

Requirements:

Linux installed PC (with mysql installed).
Freeradius sofware.
phpmyadmin (for administration of mysql).
WinSCP for transfering files between you windows pc and the Freeradius server.
physdiskwrite for m0n0wall installation
M0n0wall - this will be our NAS
Putty - nice windows ssh utility

SSh into your linux server

mkdir /downloads/; cd /downloads;
#Download and install freeradius: http://freeradius.org/download.html (In my case I got version 2.1.10.)
tar -zxvf freeradius-server-2.1.10.tar.gz;
cd freeradius-server-2.1.10;
./configure;
make;
make install;

Default radiusd location is: /usr/local/sbin/radiusd. Use 'whereis radiusd' to locate it.

M0n0wall installation

1. Download m0n0wall
2. Download image writting utility: http://m0n0.ch/wall/physdiskwrite.php (take the one without GUI - it will simplify your life! )

M0n0wall installation procedure is the same as Zeroshell Installation.

Phpmyadmin installation

PHPmyadmin: download and install it . It will help in mysql db management here
mkdir /downloads/;
cd /downloads;
wget http://nchc.dl.sourceforge.net/project/phpmyadmin/phpMyAdmin/3.3.10/phpMyAdmin-3.3.10-english.tar.gz;
tar -zxvf phpMyAdmin-3.3.10-english.tar.gz;
mv phpMyAdmin-3.3.10-english /var/www/html/radiusadmin;

Putting all stuff together

How to:

launch phpmyadmin and login into mysql
create a new database called 'radius'
Using WinSCP log into your freeradius server and pull the database schema (schema.sql) at : /etc/raddb/sql/mysql in phpmyadmin go to import under the database 'radius' and browse for the schema.sql . You should see about 7 tables created.
ssh into your linux using putty and continue with the following steps
create link (only to make life easy.); ln -s edit /etc/raddb/clients.conf and add the following at the end:
client MYNAS {
ipaddr = 10.250.0.0
netmask = 16
secret = siriyangu
shortname = jinafupi
nastype = other
}
Edit /etc/raddb/sql.conf and enter your mysql login information.
database = "mysql"
# # Which FreeRADIUS driver to use.
# driver = "rlm_sql_${database}"
# Connection info:
server = "localhost"
#port = 3306
login = " password = ""
Edit /etc/raddb/radiusd.conf . Find and uncomment the these lines:
#uncomment this for mysql to work
$INCLUDE sql.conf
# for accounting purposes
$INCLUDE sql/mysql/counter.conf
Edit /etc/raddb/sites-enabled/default . Under "authorize " uncomment 'sql' at the end of the section add:
volumelimitcounter
Under "accounting ", uncomment 'sql'. under "session " , uncomment 'sql' . For post auth logging you can uncomment 'sql' under "post-auth " .
Copy dictionary file (dictionary.chillispot) from: here and paste it in a new blank at /etc/raddb/dictionary.chillispot .
(should come before and in no. 5). Edit /etc/raddb/dictionary and add :
$INCLUDE dictionary.chillispot # my chilli dictionary.
# just below
$INCLUDE /usr/local/share/freeradius/dictionary
Edit counter.conf and add:
sqlcounter volumelimitcounter {
counter-name = Total-Max-Octets
check-name = Max-Octets
reply-name = ChilliSpot-Max-Total-Octets
sqlmod-inst = sql
key = User-Name
reset = never
error-msg = "Sorry, your bandwidth has exceed the provided limit"
query = "SELECT SUM(AcctOutputOctets+AcctInputOctets) FROM radacct where UserName='%{%k}'" }
Enter records into DataBase using your phpmyadmin Max-Octets := xxxxxx is in bytes

M0n0wall Captive Portal configuration

Sorry: this M0n0wall captive portal part is under construction - pls come again soon.

Make it better !

Now, to make your life easier, you can install & configure 'Dialup Admin Web Administration Interface'

Common Freeradius Configuration Problems :

You get the error show below:
/usr/local/etc/raddb/modules/counter[71]: Failed to link to module 'rlm_counter': rlm_counter.so: cannot open shared object file: No such file or directory
/usr/local/etc/raddb/sites-enabled/default[174]: Failed to load module "daily".
/usr/local/etc/raddb/sites-enabled/default[62]: Errors parsing authorize section.
A. You have refered to a module that does not exist. I uncommented 'daily' under authorization and I got the error. Commenting it back to the way it was solved the problem.
You get error: rlm_sql: Failed to create the pair: Invalid octet string "value" for attribute name "Max-Octets"
A. See if you included "volumelimitcounter" in the authorize section of your '/etc/raddb/sites-enambled/default' file