<br><font size=2 face="sans-serif">Hi Walter,</font>
<br>
<br><font size=2 face="sans-serif">We fixed the freeradius so that the
WiMAX VSA may be downloaded to the ASNGW after</font>
<br><font size=2 face="sans-serif">EAP completion. We have not enhanced
freeradius to be AAA server in a WiMAX network.</font>
<br><font size=2 face="sans-serif">We download the MSK from freeradius
to our ASNGW. Based on the downloaded MSK</font>
<br><font size=2 face="sans-serif">our ASNGW generates the AK context and
hence the required keys. Freeradius only</font>
<br><font size=2 face="sans-serif">provides the key material, generation
is part of our ASNGW. Hope this explanation helps.</font>
<br>
<br><font size=2 face="sans-serif">We can work towards making freeradius
a complete AAA server for the WiMAX network.</font>
<br>
<br><font size=2 face="sans-serif">Regards</font>
<br><font size=2 face="sans-serif">Nitin</font>
<br>
<br>
<br>
<br>
<table width=100%>
<tr valign=top>
<td width=40%><font size=1 face="sans-serif"><b>freeradius-users-request@lists.freeradius.org</b>
</font>
<br><font size=1 face="sans-serif">Sent by: freeradius-users-bounces+nitin.naveen=hsc.com@lists.freeradius.org</font>
<p><font size=1 face="sans-serif">07/19/2007 09:27 AM</font>
<table border>
<tr valign=top>
<td bgcolor=white>
<div align=center><font size=1 face="sans-serif">Please respond to<br>
freeradius-users@lists.freeradius.org</font></div></table>
<br>
<td width=59%>
<table width=100%>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">To</font></div>
<td><font size=1 face="sans-serif">freeradius-users@lists.freeradius.org</font>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">cc</font></div>
<td>
<tr valign=top>
<td>
<div align=right><font size=1 face="sans-serif">Subject</font></div>
<td><font size=1 face="sans-serif">Freeradius-Users Digest, Vol 27, Issue
114</font></table>
<br>
<table>
<tr valign=top>
<td>
<td></table>
<br></table>
<br>
<br>
<br><tt><font size=2>Send Freeradius-Users mailing list submissions to<br>
freeradius-users@lists.freeradius.org<br>
<br>
To subscribe or unsubscribe via the World Wide Web, visit<br>
http://lists.freeradius.org/mailman/listinfo/freeradius-users<br>
or, via email, send a message with subject or body 'help' to<br>
freeradius-users-request@lists.freeradius.org<br>
<br>
You can reach the person managing the list at<br>
freeradius-users-owner@lists.freeradius.org<br>
<br>
When replying, please edit your Subject line so it is more specific<br>
than "Re: Contents of Freeradius-Users digest..."<br>
<br>
<br>
Today's Topics:<br>
<br>
1. RE: Mikrotik Accounting ON/OFF (Hugh Messenger)<br>
2. Re: 1.1.7 sqlippool %{SQL-User-Name} (Peter Nixon)<br>
3. Testing WAD via ntlm_auth (ken)<br>
4. Re: Testing WAD via ntlm_auth (A.L.M.Buxey@lboro.ac.uk)<br>
5. RE: Mikrotik Accounting ON/OFF (tnt@kalik.co.yu)<br>
6. Re: Testing WAD via ntlm_auth (tnt@kalik.co.yu)<br>
7. RE: Mikrotik Accounting ON/OFF (Hugh Messenger)<br>
8. Support for WiMAX VSA (Nitin Naveen)<br>
9.Support for WiMAX VSA(Walter Goulet)<br>
<br>
<br>
----------------------------------------------------------------------<br>
<br>
Message: 1<br>
Date: Wed, 18 Jul 2007 14:47:22 -0500<br>
From: "Hugh Messenger" <hugh@alaweb.com><br>
Subject: RE: Mikrotik Accounting ON/OFF<br>
To: "'FreeRadius users mailing list'"<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID: <00d301c7c974$76445ed0$010210ac@DELLBOY><br>
Content-Type: text/plain;
charset="us-ascii"<br>
<br>
tnt@kalik.co.yu said:<br>
> >, but if anyone on this list has a Beta 3 setup :-D<br>
> <br>
> Good old SETUP - missing or bug:<br>
> http://forum.mikrotik.com/viewtopic.php?f=1&t=16963<br>
<br>
OK, I'll rephrase that ... "if anyone on this list has a 3.0beta10
install<br>
they can test with". :)<br>
<br>
> Ivan Kalik<br>
> Kalik Informatika ISP<br>
<br>
-- hugh<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 2<br>
Date: Wed, 18 Jul 2007 23:03:46 +0300<br>
From: Peter Nixon <listuser@peternixon.net><br>
Subject: Re: 1.1.7 sqlippool %{SQL-User-Name}<br>
To: FreeRadius users mailing list<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID: <200707182303.46430.listuser@peternixon.net><br>
Content-Type: text/plain; charset="iso-8859-1"<br>
<br>
On Wed 18 Jul 2007, Hugh Messenger wrote:<br>
> Peter Nixon quoth:<br>
> > On Tue 17 Jul 2007, Hugh Messenger wrote:<br>
> > > Can we add sqlippool to the ./modules/stable list?<br>
> ><br>
> > It is in the stable list for 2.0 but its up to Alan whether we
put it in<br>
> > for 1.1.7<br>
><br>
> It's been pretty darn stable for me in 1.1.6. And now we've
gotten the<br>
> MySQL stuff whipped into shape and fixed a few other issues for 1.1.7,
I'd<br>
> say it's ready for Prime Time.<br>
<br>
OK. Thats good enough for me. I have added it :-)<br>
<br>
-- <br>
<br>
Peter Nixon<br>
http://peternixon.net/<br>
<br>
<br>
------------------------------<br>
<br>
Message: 3<br>
Date: Wed, 18 Jul 2007 21:41:10 +0100<br>
From: ken <k.brown@bbk.ac.uk><br>
Subject: Testing WAD via ntlm_auth<br>
To: FreeRadius users mailing list<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID: <469E7AE6.8060505@bbk.ac.uk><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br>
<br>
Does anyone have actual examples of radclient (or other <br>
command-line tools) being used to test Freeradius using Windows <br>
Active Directory authentication via samba/ntlm_auth?<br>
<br>
I'd like to be able to test Radius authentication for various <br>
different categories of user on our Active Directory.<br>
<br>
Presumably this involves PEAP/MSCHAPv2 I can't work out how to <br>
do it without using a Windows client and a wireless <br>
infrastructure we don't have yet. (or even if it is doable)<br>
<br>
I can use radclient to test PAP and "straight" CHAP against <br>
locally defined users with cleartext passwords. Time to go one <br>
step further.<br>
<br>
<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 4<br>
Date: Wed, 18 Jul 2007 21:55:08 +0100<br>
From: A.L.M.Buxey@lboro.ac.uk<br>
Subject: Re: Testing WAD via ntlm_auth<br>
To: k.brown@bbk.ac.uk,
FreeRadius users mailing list<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID: <20070718205508.GA21505@lboro.ac.uk><br>
Content-Type: text/plain; charset=us-ascii<br>
<br>
Hi,<br>
<br>
> Presumably this involves PEAP/MSCHAPv2 I can't work out how to <br>
> do it without using a Windows client and a wireless <br>
> infrastructure we don't have yet. (or even if it is doable)<br>
<br>
you dont need wireless to do such testing - there are plenty<br>
of ethernet switches out there that do 802.1x and can throw<br>
the EAP authentication to your RADIUS box...<br>
....with this in mind, you could use wpa_supplicant on linux<br>
- yes it does wired 802.1x nicely... eg have this in the config<br>
<br>
eap=PEAP<br>
identity="domain\username"<br>
password="secret_password"<br>
ca_cert="/etc/cert/ca.pem"<br>
phase1="peaplabel=0"<br>
phase2="auth=MSCHAPV2"<br>
<br>
or..since you're playing with wpa_supplicant..use its handy tool<br>
eapol_test - very useful. <br>
<br>
of course, with wired 802.1x you can also play with the windows client<br>
and get used to its quirks and foibles.<br>
<br>
alan<br>
<br>
<br>
------------------------------<br>
<br>
Message: 5<br>
Date: Wed, 18 Jul 2007 22:05:01 +0100<br>
From: <tnt@kalik.co.yu><br>
Subject: RE: Mikrotik Accounting ON/OFF<br>
To: "FreeRadius users mailing list"<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID: <b03pBwWK.1184792701.4799830.tnt@kalik.co.yu><br>
Content-Type: text/plain; charset=ISO-8859-2<br>
<br>
I have an idle routerboard waiting for a replacement wifi mini-pci. It<br>
has routeros 2.9 but somehow I am not tempted to try the upgrade:<br>
<br>
upgrade to 3beta & failed logins:<br>
http://forum.mikrotik.com/viewtopic.php?f=3&t=17128<br>
<br>
On liked topic things go from bad to worse - it seems that the wireless<br>
package is working as well as setup command in beta:<br>
<br>
RB133c and 3.10b:<br>
http://forum.mikrotik.com/viewtopic.php?f=1&t=16502&p=80766<br>
<br>
And since routerboard has flash memory and not HDD for storing OS I am<br>
not so sure what would happen to the licence after the<br>
upgrade/downgrade. Not particularly keen to find out :-(<br>
<br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
<br>
Dana 18/7/2007, "Hugh Messenger" <hugh@alaweb.com> pi?e:<br>
<br>
>tnt@kalik.co.yu said:<br>
>> >, but if anyone on this list has a Beta 3 setup :-D<br>
>><br>
>> Good old SETUP - missing or bug:<br>
>> http://forum.mikrotik.com/viewtopic.php?f=1&t=16963<br>
><br>
>OK, I'll rephrase that ... "if anyone on this list has a 3.0beta10
install<br>
>they can test with". :)<br>
><br>
>> Ivan Kalik<br>
>> Kalik Informatika ISP<br>
><br>
> -- hugh<br>
><br>
><br>
>-<br>
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>
><br>
><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 6<br>
Date: Wed, 18 Jul 2007 23:38:12 +0100<br>
From: <tnt@kalik.co.yu><br>
Subject: Re: Testing WAD via ntlm_auth<br>
To: freeradius-users@lists.freeradius.org<br>
Message-ID: <20aUZbvV.1184798292.9840090.tnt@kalik.co.yu><br>
Content-Type: text/plain; charset=ISO-8859-2<br>
<br>
http://www.nabble.com/MSCHAP-test-client--tf4069370.html<br>
<br>
You don't need to do PEAP to test ntlm_auth, just MSCHAP.<br>
<br>
Ivan Kalik<br>
Kalik Informatika ISP<br>
<br>
<br>
Dana 18/7/2007, "ken" <k.brown@bbk.ac.uk> pi?e:<br>
<br>
>Does anyone have actual examples of radclient (or other<br>
>command-line tools) being used to test Freeradius using Windows<br>
>Active Directory authentication via samba/ntlm_auth?<br>
><br>
>I'd like to be able to test Radius authentication for various<br>
>different categories of user on our Active Directory.<br>
><br>
>Presumably this involves PEAP/MSCHAPv2 I can't work out how to<br>
>do it without using a Windows client and a wireless<br>
>infrastructure we don't have yet. (or even if it is doable)<br>
><br>
>I can use radclient to test PAP and "straight" CHAP against<br>
>locally defined users with cleartext passwords. Time to go one<br>
>step further.<br>
><br>
><br>
><br>
><br>
>-<br>
>List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>
><br>
><br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 7<br>
Date: Wed, 18 Jul 2007 17:58:06 -0500<br>
From: "Hugh Messenger" <hugh@alaweb.com><br>
Subject: RE: Mikrotik Accounting ON/OFF<br>
To: "'FreeRadius users mailing list'"<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID: <00e401c7c98f$1b3a2450$010210ac@DELLBOY><br>
Content-Type: text/plain;
charset="us-ascii"<br>
<br>
I finally thought to look in the changelog<br>
<br>
http://www.mikrotik.com/download/CHANGELOG_beta<br>
<br>
> What's new in 3.0beta10:<br>
[blah blah]<br>
> *) added radius client to send Accounting-On packet on startup;<br>
[blah]<br>
<br>
-- hugh<br>
<br>
<br>
<br>
<br>
------------------------------<br>
<br>
Message: 8<br>
Date: Thu, 19 Jul 2007 09:11:26 +0530<br>
From: Nitin Naveen <Nitin.Naveen@hsc.com><br>
Subject: Support for WiMAX VSA<br>
To: freeradius-users@lists.freeradius.org<br>
Cc:<br>
freeradius-users-bounces+nitin.naveen=hsc.com@lists.freeradius.org,<br>
freeradius-users@lists.freeradius.org<br>
Message-ID:<br>
<OF4AEE7966.C6FE6E61-ON6525731D.00137FC1-6525731D.00149CEF@hsc.com><br>
Content-Type: text/plain; charset="us-ascii"<br>
<br>
Hello All,<br>
<br>
Hi I am Nitin Naveen working with HUGHES SYSTIQUE. We have been working
to<br>
enhance freeradius to support WiMAX VSA (as per WiMAX NWG forum). WiMAX<br>
VSA are not the typical type-length-value rather they have <br>
type-length-controlinfo-value.<br>
We have enhanced the dictionary but we were not able to generate the <br>
attributes <br>
as per the WiMAX NWG format. For now we have developed our own <br>
rlm_hsc_wimax<br>
module. We like to contribute to freeradius so that the WiMAX VSA
are <br>
supported as<br>
part of the standard distribution. To this end we can share our code. But
<br>
before that<br>
we would like to follow the correct procedure for releasing the code. Your
<br>
inputs and<br>
suggestion are awaited.<br>
<br>
Regards<br>
Nitin Naveen<br>
Principal Engineer<br>
HUGHES SYSTIQUE<br>
D-8, Infocity-11<br>
Sector-33, Gugaon<br>
Haryana, India<br>
tel: +91-124-3045400<br>
fax: +91-124-4039301<br>
nitin.naveen@hsc.com<br>
www.hsc.com<br>
<br>
<br>
<br>
<br>
<br>
*****************************************************DISCLAIMER*****************************************************<br>
<br>
This message and/or attachment(s) contained here are confidential, proprietary
to HUGHES SYSTIQUE and its customers. <br>
Contents may be privileged or otherwise protected by law. The information
is solely intended for the entity it is <br>
addressed to. If you are not the intended recipient of this message, it
is strictly prohibited to read, forward, <br>
print, retain, copy or disseminate this message or any part of it. If you
have received this e-mail in error, <br>
please notify the sender immediately and delete the message.<br>
<br>
********************************************************************************************************************<br>
<br>
-------------- next part --------------<br>
An HTML attachment was scrubbed...<br>
URL: https://lists.freeradius.org/pipermail/freeradius-users/attachments/20070719/1e34d8ef/attachment-0001.html
<br>
<br>
------------------------------<br>
<br>
Message: 9<br>
Date: Wed, 18 Jul 2007 22:57:37 -0500<br>
From: "Walter Goulet" <wgoulet@gmail.com><br>
Subject: Re: Support for WiMAX VSA<br>
To: "FreeRadius users mailing list"<br>
<freeradius-users@lists.freeradius.org><br>
Message-ID:<br>
<4a5b59560707182057s24c37776lae398d9460e98300@mail.gmail.com><br>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed<br>
<br>
Hi Nitin,<br>
<br>
Question on your planned contribution to FreeRADIUS: Does your module<br>
support the key generation algorithms for the WiMAX mobility keys?<br>
Specifically, is your module able to correctly generate the<br>
MN-HA-MIP4-KEY and related key material from the EMSK derived as part<br>
of the EAP exchange?<br>
<br>
Personally this was seen as the biggest challenge towards building NWG<br>
compliance into FreeRADIUS as opposed to VSA format.<br>
<br>
Thanks,<br>
Walter<br>
<br>
On 7/18/07, Nitin Naveen <Nitin.Naveen@hsc.com> wrote:<br>
><br>
> Hello All,<br>
><br>
> Hi I am Nitin Naveen working with HUGHES SYSTIQUE. We have been working
to<br>
> enhance freeradius to support WiMAX VSA (as per WiMAX NWG forum).
WiMAX<br>
> VSA are not the typical type-length-value rather they have<br>
> type-length-controlinfo-value.<br>
> We have enhanced the dictionary but we were not able to generate the<br>
> attributes<br>
> as per the WiMAX NWG format. For now we have developed our own rlm_hsc_wimax<br>
> module. We like to contribute to freeradius so that the WiMAX
VSA are<br>
> supported as<br>
> part of the standard distribution. To this end we can share our code.
But<br>
> before that<br>
> we would like to follow the correct procedure for releasing the code.
Your<br>
> inputs and<br>
> suggestion are awaited.<br>
><br>
> Regards<br>
> Nitin Naveen<br>
> Principal Engineer<br>
> HUGHES SYSTIQUE<br>
> D-8, Infocity-11<br>
> Sector-33, Gugaon<br>
> Haryana, India<br>
> tel: +91-124-3045400<br>
> fax: +91-124-4039301<br>
> nitin.naveen@hsc.com<br>
> www.hsc.com<br>
><br>
><br>
<br>
<br>
*****************************************************DISCLAIMER*****************************************************<br>
<br>
This<br>
> message and/or attachment(s) contained here are confidential, proprietary
to<br>
> HUGHES SYSTIQUE and its customers.<br>
Contents may be privileged or otherwise<br>
> protected by law. The information is solely intended for the entity
it is<br>
><br>
addressed to. If you are not the intended recipient of this message, it
is<br>
> strictly prohibited to read, forward,<br>
print, retain, copy or disseminate<br>
> this message or any part of it. If you have received this e-mail in
error,<br>
><br>
please notify the sender immediately and delete the<br>
> message.<br>
<br>
********************************************************************************************************************<br>
<br>
><br>
> -<br>
> List info/subscribe/unsubscribe? See<br>
> http://www.freeradius.org/list/users.html<br>
><br>
<br>
<br>
------------------------------<br>
<br>
- <br>
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html<br>
<br>
<br>
End of Freeradius-Users Digest, Vol 27, Issue 114<br>
*************************************************<br>
</font></tt>
<br><pre>
*****************************************************DISCLAIMER*****************************************************
This message and/or attachment(s) contained here are confidential, proprietary to HUGHES SYSTIQUE and its customers.
Contents may be privileged or otherwise protected by law. The information is solely intended for the entity it is
addressed to. If you are not the intended recipient of this message, it is strictly prohibited to read, forward,
print, retain, copy or disseminate this message or any part of it. If you have received this e-mail in error,
please notify the sender immediately and delete the message.
********************************************************************************************************************
</pre>