September 2011 - Freeradius-Devel - lists.freeradius.org

RADIUS client configuratio-1.1.6n steps
by vikraman.p36＠wipro.com 08 Sep '11

08 Sep '11

Hi , I have downloaded and installed RADIUS server -2.1.11 and RADIUS client-1.1.6. To run the server I used the command radiusd -X. Please let me know the configuration part for RADIUS client , run RADIUS client, in which file I need to specify the username ,password and secret password. Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

1 0

How to make sure that there is no undefined references to a module
by Ming-Ching Tiew 07 Sep '11

07 Sep '11

I am trying to develope a little module of my own, the modules compiles fine. But to make sure that my modules has no undefined references, I added this to the Makefile :- RLM_LDFLAGS = -Wl,--no-undefined I tried the idea on one of the simplest module which comes with the sources, rlm_exec, but after that the module then failed to compile, having lots of undefined references. eg :- :273: undefined reference to `radlog' :442: undefined reference to `radius_exec_program' Any advise how should I go about fixing this problem ?

3 2

RADIUS Disconnect request support in free radius client -1.1.6
by vikraman.p36＠wipro.com 07 Sep '11

07 Sep '11

Hi , I am looking into Free radius client (freeradius-client-1.1.6) library code for using in our project. Please let me know if the Free radius client supports processing of the disconnect request message from RADIUS server which is defined in the RFC 5176. Thanks, Vikraman Please do not print this email unless it is absolutely necessary. The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

2 1

How to send Permanent ID request in EAP-SIM method?
by lambertdev 06 Sep '11

06 Sep '11

Hello, As we know,EAP-SIM specifacation defines three kinds of identity.But when I read the source code of "rlm_eap_sim.c",freeradius only sends FULL_AUTH_ID_REQUEST. i.e.In function "eap_sim_sendstart",there is newvp = paircreate(ATTRIBUTE_EAP_SIM_BASE+PW_EAP_SIM_FULLAUTH_ID_REQ, PW_TYPE_OCTETS); For sending eap permanent id request to peer,I tried to modify this sentence to: newvp = paircreate(ATTRIBUTE_EAP_SIM_BASE+PW_EAP_SIM_PERMANENT_ID_REQ, PW_TYPE_OCTETS); and compiled it successfully. But when I tried to test the server,with the command below: radeapclient -x localhost auth testing123 <eapsim-in.txt the server will return: rad_recv: Access-Request packet from host 127.0.0.1 port 57914, id=86, length=89 User-Name = "232420100000015" NAS-IP-Address = 209.87.252.247 Message-Authenticator = 0x745c37803f66ee28ae1e5de97b4dbafc NAS-Port = 0 EAP-Message = 0x0255001401323332343230313030303030303135 # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "232420100000015", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 85 length 20 [eap] No EAP Start, assuming it's an on-going EAP conversation ++[eap] returns updated [files] users: Matched entry 232420100000015 at line 93 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group authenticate {...} [eap] EAP Identity [eap] processing type sim [eap] Underlying EAP-Type set EAP ID to 230 ++[eap] returns handled Sending Access-Challenge of id 86 to 127.0.0.1 port 57914 EAP-Message = 0x01e60014120a00000f020002000100000d010000 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x6548900d65ae82b9c8a9eb100d26724a Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Access-Request packet from host 127.0.0.1 port 57914, id=87, length=85 User-Name = "232420100000015" NAS-IP-Address = 209.87.252.247 Message-Authenticator = 0x9a0e653561af56be21543aec5da35963 NAS-Port = 0 State = 0x6548900d65ae82b9c8a9eb100d26724a # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "232420100000015", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [files] users: Matched entry 232420100000015 at line 93 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop Found Auth-Type = EAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group authenticate {...} [eap] ERROR: You set 'Auth-Type = EAP' for a request that does not contain an EAP-Message attribute! ++[eap] returns invalid Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /etc/freeradius/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> 232420100000015 attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated I wonder why did this happen?How should I do if I want send a PERMANENT_ID request to the server？Thank you！！ -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-send-Permanent-ID-request-in… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

1 0

Module exec and documentation not found or example
by dragoalato1988 02 Sep '11

02 Sep '11

hello, good day, I'm desperately trying to create my own authentication and Autorization. I realized that the module can be integrated rlm_exec scripts in which to place procedures. the problem is that I can find detailed documentation and some examples that I can afford to create my own scripts. some of you might be kind enough to give me a hand? thank you maurizio -- View this message in context: http://freeradius.1045715.n5.nabble.com/Module-exec-and-documentation-not-f… Sent from the FreeRadius - Dev mailing list archive at Nabble.com.

3 4