ya tengo el freeradius pinchando hace anos,mi problema es el caller-id, de todas formas te voy a postear una guia que segui, pero desgraciadamente esta en ingles.
Saludos
I-DI-S17 Instrucciones para montaje y configuración de servidor FreeRadius
http://www.ban-solms.de/t/debian-radius.html
Install Mysql:
sudo apt-get install mysql-server
Install Freeradius:
sudo apt-get install freeradius freeradius-mysql
Install needed support for apache etc:
sudo apt-get install php5-mysql debhelper libltdl3-dev libpam0g-dev libmysqlclient15-dev build-essential libgdbm-dev libldap2-dev libsasl2-dev libiodbc2-dev libkrb5-dev snmp autotools-dev dpatch libperl-dev libtool dpkg-dev libpq-dev libsnmp-dev libssl-dev php-pear php5-gd php-pear
Install apache:
sudo apt-get install apache2
Get daloRadius: from
http://sourceforge.net/projects/daloradius
Extract daloradius:
tar -zxvf daloradius-0.9-7.tar.gz
Move daloradius to www:
sudo cp daloiradius-x.y-z/ /var/www -R !!!!!!!you can change the name to something you like the x.y.z reflect the current code level.
Set permissions:
chown www-data:www-data /var/www/daloradius-x.x-z -R
chmod 644 /var/www/daloradius-x.y-z/library/daloradius.conf
I'm not all that familiar with mysql via command line so I cheated and used mysql admin.
sudo apt-get install mysql-admin
launch MySql Administrator Go to catalogs create a new database (schema) called radius Then go to user administration and create a user and password Then under the User Accounts section make sure to add host 127.0.0.1 if your mysql is binding to that address if you don't know it most likely is. Then select schema priviledges in there add all the priviledges for that schema to that user. Click apply you can exit now.
launch Mysql Query Browser Open the sql script located in /var/www/daloradius-x.y-z/contrib/db/fr2-mysql-daloradius-and-freeradius.sql Then click on execute. This will build your tables for free radius and for daloradius.
Configure the daloradius.conf.php file in /var/www/daloradius/library/daloradius.conf.php with the appropriate database information
restart apache
sudo /etc/init.d/apache2 restart
Now you need to configure freeradius…joy!
use your favorite editor vi,nano…whatever
sudo vi /etc/freeradius/radiusd.conf
There will be a section in there reguarding instantiate for authorize. Just search for sql1 above that create a line with sql. Save and exit.
Open and edit /etc/freeradius/sql.conf edit the username, password, and make sure it is pointing to 127.0.0.1 or whatever ip your sql server is binding to. save and exit
Open and edit /etc/freeradius/sites-enabled/default uncomment all the sql tags in here (or the ones you want to use with mysql)
with that done make the following directory and file. Otherwise you won't authenticate.
sudo mkdir /var/log/freeradius/radacct/
sudo touch /var/log/freeradius/radacct/sql-relay
Make sure freeradius has write permissions in that directories. Otherwise, you won't log accounting activity
Open up your browser to
http://localhost/daloradius
username administrator
password radius
create a user in here and a nas if you are using one.
Use radtest tool to test freeradius:
radtest username password 127.0.0.1 0 radius-secret
If you want to run freeradius in test mode so you can see some errors or successes on your console.
Stop freeradius daemon
sudo /etc/init.d/freeradius stop
Start freeradius in debug mode
sudo freeradius -X
You should be good now. If not I highly recommend starting freeradius in debug mode and reviewing the issues. I'll try to help when I can.
Por supuesto, es necesario agregar en la configuracion del Cisco las siguientes líneas:
aaa new-model
aaa authentication login default radius local
aaa authentication ppp default radius local
aaa authorization exec default radius local
aaa accounting exec default start-stop radius
aaa accounting commands 15 default start-stop radius
aaa accounting network default start-stop radius
radius-server host 192.168.99.15 auth-port 1812 acct-port 1813
radius-server key passwd
Además, se debe agregar en clients.conf la configuracion del NAS:
client 192.168.99.3 {
secret = password
nastype = cisco
shortname = cisco-algo
}
MUY IMPORTANTE:
Crear en /var/log/freeradius/radacct/IP-DEL-NAS
por ejemplo:
/var/log/freeradius/radacct/192.168.99.3
Con permisos de lectura y escritura para el usuario freerad
Sin este directorio el sistema NO hace accounting
. Si alguien tiene experiencia con este tema le agradeceria mucho que me diera una mano.