- Freeradius-Announce - lists.freeradius.org

Version 3.0.24 has been released
by Matthew Newton 29 Sep '21

29 Sep '21

Version 3.0.24 has now been released. Full release notes are on the web site: https://freeradius.org/release_notes/?br=3.0.x&re=3.0.24 This is mainly a bugfix release, with a few new features, for example: - More liberal SQL commands in rlm_sql_map - Dynamic loading of certificates via TLS-Session-Cert-File - Preliminary support for haproxy "PROXY" protocol - Generate more parse errors when we know the config is wrong - Update a few dictionaries The bugfixes include fixing some crashes, SQL query updates, and more. Packaging has been updated to add support for Debian 11 Bullseye. Download from all the usual places: https://packages.networkradius.com/ https://freeradius.org/releases/ ftp://ftp.freeradius.org/pub/freeradius/ https://github.com/FreeRADIUS/freeradius-server/releases/tag/release_3_0_24 The Network RADIUS packages and Docker images have all been built and are available now. -- Matthew

1 0

Salted SHA3 Support
by Rashad Hall 10 Feb '18

10 Feb '18

Currently running FreeRADIUS Version 3.0.15 and looking for confirmation of SHA3 support as I found this page ( https://freeradius.org/radiusd/man/rlm_pap.html) that has SHA3 listed, but when I run man rlm_pap I have significantly fewer options. Just wanted to confirm if support for SHA3 in FreeRADIUS is available yet? My "man rlm_pap" below. rlm_pap(5) FreeRADIUS Module rlm_pap(5) NAME rlm_pap - FreeRADIUS Module DESCRIPTION The rlm_pap module authenticates RADIUS Access-Request packets that contain a User-Password attribute. The module should also be listed last in the authorize section, so that it can set the Auth-Type attribute as appropriate. When a RADIUS packet contains a clear-text password in the form of a User-Password attribute, the rlm_pap module may be used for authentication. The module requires a "known good" password, which it uses to validate the password given in the RADIUS packet. That "known good" password must be supplied by another module (e.g. rlm_files, rlm_ldap, etc.), and is usually taken from a database. CONFIGURATION The only configuration item is: normalise The default is "yes". This means that the module will try to automatically detect passwords that are hex- or base64-encoded and decode them back to their binary representation. However, some clear text passwords may be erroneously converted. Setting this to "no" prevents that conversion. USAGE The module looks for the Password-With-Header control attribute to find the "known good" password. The attribute value comprises the header followed immediately by the password data. The header is given by the following table. Header Attribute Description ------ --------- ----------- {clear} Cleartext-Password clear-text passwords {cleartext} Cleartext-Password clear-text passwords {crypt} Crypt-Password Unix-style "crypt"ed passwords {md5} MD5-Password MD5 hashed passwords {base64_md5} MD5-Password MD5 hashed passwords {smd5} SMD5-Password MD5 hashed passwords, with a salt {sha} SHA-Password SHA1 hashed passwords SHA1-Password SHA1 hashed passwords {ssha} SSHA-Password SHA1 hashed passwords, with a salt SSHA1-Password SHA1 hashed passwords, with a salt {ssh2} SHA2-Password SHA2 hashed passwords {ssh256} SHA2-Password SHA2 hashed passwords {ssh512} SHA2-Password SHA2 hashed passwords {nt} NT-Password Windows NT hashed passwords {nthash} NT-Password Windows NT hashed passwords {x-nthash} NT-Password Windows NT hashed passwords {ns-mta-md5} NS-MTA-MD5-Password Netscape MTA MD5 hashed passwords {x- orcllmv} LM-Password Windows LANMAN hashed passwords {X- orclntv} LM-Password Windows LANMAN hashed passwords

1 1

Fwd: QUERY REGARDING PFX
by pavani 15 May '15

15 May '15

Hi , Does the certificates with pfx extension will work for Free radius.Whether the free radius supports certificates with pfx/PKCS#12 extensions in EAP-TLS mode??? Please give me the reply as soon as possible Thanks pavani

1 0

Re: header intact
by pavani 15 May '15

15 May '15

On 05/15/2015 05:23 PM, freeradius-announce-confirm+f2720c291cda4045ec9a5f419fc2b543281ed1fe(a)lists.freeradius.org wrote: > Mailing list subscription confirmation notice for mailing list > Freeradius-Announce > > We have received a request from 203.196.161.90 for subscription of > your email address, "pavani.muthyala(a)redpinesignals.com", to the > freeradius-announce(a)lists.freeradius.org mailing list. To confirm > that you want to be added to this mailing list, simply reply to this > message, keeping the Subject: header intact. Or visit this web page: > > https://lists.freeradius.org/mailman/confirm/freeradius-announce/f2720c291c… > > > Or include the following line -- and only the following line -- in a > message to freeradius-announce-request(a)lists.freeradius.org: > > confirm f2720c291cda4045ec9a5f419fc2b543281ed1fe > > Note that simply sending a `reply' to this message should work from > most mail readers, since that usually leaves the Subject: line in the > right form (additional "Re:" text in the Subject: is okay). > > If you do not wish to be subscribed to this list, please simply > disregard this message. If you think you are being maliciously > subscribed to the list, or have any other questions, send them to > freeradius-announce-owner(a)lists.freeradius.org.

1 0

radius server needed
by mark ninci 27 Jan '14

27 Jan '14

I have three WIFI hotspots at hotels , and am currently paying a provider to host my hotspots on his radius server. I'd rather have my own radius server in house, so i can babysit it and keep it private. I have only little linux experience and therefore want to hire someone to install freeradius and setup a hotspot manager site. If there is anyone out there that can help, please reply at your convenience. I am located in the San Diego area.

1 0

accouting stop message disconnects the user after 2 mins.
by Kristen Eisenberg 13 Mar '12

13 Mar '12

I am facing a very unique problem with PDSN when a user gets connected with CDMA Broadband connection our PDSN sends a accounting stop message to vendor AAA server and disconnects the user just after 2 mins of connection. Kristen Eisenberg Billige Flüge Marketing GmbH Emanuelstr. 3, 10317 Berlin Deutschland Telefon: +49 (33) 5310967 Email: utebachmeier at gmail.com Site: http://flug.airego.de - Billige Flüge vergleichen

2 1

want to change one module in freeradius
by new conf 29 Apr '09

29 Apr '09

Dear all; If I have to change the module in FreeRadius that uses EAP-TLS to communicate with clients(to use it with other way then openSSL (ssl will generate keys and certficate seperately in another form) ).. the function I have to delete or change is-it *rlm_eap.c* ? thank you for help :)

1 0

About latest release of the current free-radius version
by Tamanna Afroze 21 Dec '08

21 Dec '08

Hello, Can you please give me some information about latest release of free-radius, whether it supports wimax's functionality or not. -- Thanks, Tamanna Afroze. Member,Research & Development. Commlinkinfotech Ltd. www.commlinkinfotech.com.

1 0

EAP SIM error
by Nayan Gjain 22 Oct '08

22 Oct '08

Hi I had configured the freeradius-server-2.1.0 for eap-sim and trying to test it with radeapclient utility, while testing the following error occurs in server -: "EAP SIM error can not initiate sim, no RAND1 attribute" can anyone help me thanks Warm Regards, NAYAN JAIN (280609) SE (Software Engineer - 50PE) Larsen & Toubro Infotech Ltd. www.Lntinfotech.com This Document is classified as: L&T Infotech Proprietary L&T Infotech Confidential L&T Infotech Internal Use Only L&T Infotech General Business This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

1 0

regarding f1, f2, f5 and other algorithms location in freeradius2.1.0 code
by Nayan Gjain 15 Oct '08

15 Oct '08

hi... can any one tell me about the location of f1,f2,f5 etc...algorithms in freeradius 2.1.0 source code pls help me..its urgnet Warm Regards, NAYAN JAIN (280609) SE (Software Engineer - 50PE) Larsen & Toubro Infotech Ltd. www.Lntinfotech.com This Document is classified as: L&T Infotech Proprietary L&T Infotech Confidential L&T Infotech Internal Use Only L&T Infotech General Business This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

1 0