- Freeradius-Devel - lists.freeradius.org

Urgent!!!! Help Required in decrypting 802.1x PEAP traffic
by Harsha gowda 02 Jun '09

02 Jun '09

Hi, I am trying to decrypt the 802.11 traffic, To decrypt the data i have to derive "Pairwise Master Key " can any one help me derive PMK for attached *Cap file* * http://www.sendspace.com/file/ztuulp* And *PrivateKey* file is *http://www.sendspace.com/file/w8bd9t* I am not clear when is EAP-TLS is started and how to decrypt the text inside tunnel. Please help me derivePK what i have read is PMK=TLS-PRF (Master Key, ”Client EAP encryption “ I clientHello.random I serverHello.random) can any one explain with example for the above PrivateKey and the cap file. what will be my PMK ?. Are client random and server random encrypted or they are in plane text And how to extract Master Key from .pem file Thanks a lot Regards Harsha

3 4

GIT Log for 2009-06-01 23:33 GMT
by aland＠deployingradius.com 01 Jun '09

01 Jun '09

commit 24ff8ec1cb2e81190dd9ae175e1faecc583a648c Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue Jun 2 00:07:01 2009 +0200 Copy the User-Name by value The previous method treated the User-Name as a string, and parsed it to create the User-Name for the reply. However... if that happens, it SHOULD print the User-Name to a string, and then parse that. That way things like 'FOO\tbar' will get escaped to 'FOO\\tbar', and therefore parsed properly. Or, we could just copy the contents verbatim, which is what we did src/modules/rlm_eap/rlm_eap.c | 5 ++++- 1 files changed, 4 insertions(+), 1 deletions(-)

1 0

Building a radius test tool
by Vinit Karandikar 01 Jun '09

01 Jun '09

Hello folks, I'm new to Free Radius and would like to use it to build a test tool for testing a AAA server. I'd like the test tool to simulate (say) 10 network elements that talk to a AAA server - using threads on different ports that are controlled by the main thread. Some of these will initiate traffic to the AAA server (like the one simulating the PDSN). Others will receive traffic and talk back to the AAA server (like the one simulating the Pre-paid Server). I'm sure I'm not going to find something like this in the wild. So I'm planning to write code to do the above. I was wondering if there are bits of code that I can shamelessly pilfer from or use as a starting point. Any tips are plenty welcome... Thanks in advance to all, -Vinit

1 0

function to extract eap
by new conf 01 Jun '09

01 Jun '09

hello, please, could someone help to know witch function in freeradius responsible to extract eap message from radius message?? please, I have not enough time to search it from my self, that's why I send you this e-mail! thank you a lot!

1 0

GIT Log for 2009-05-30 23:33 GMT
by aland＠deployingradius.com 30 May '09

30 May '09

commit 0afecf2d9627bae41393d398ee04f4dd2e6b11b7 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Sat May 30 09:40:05 2009 +0200 Suppress more ping check none If the home server is zombie, and status_check=none, don't ping it src/main/event.c | 3 ++- 1 files changed, 2 insertions(+), 1 deletions(-)

1 0

usage of command "radclient"
by yiyongyun 29 May '09

29 May '09

Hi all: I want to use command of "radclient" to send some packets and I saw the help of "radclient", but I can not understand the following sentence. -f file File to read the attribute/value pairs from. If this is not specified, they are read from stdin. This option can be specified multiple times, in which case packets are sent in order by file, and within each file, by first packet to last packet. A blank line separates logical packets within a file. Now I'm using "radclient -f /root/radPtDt/Packet_AUTH.txt -r 1 *.*.*.*:1812 auth *****" to send packet, the content of Packet_AUTH.txt is show as below: NAS-Identifier = "*****" User-Password = "*****" NAS-IP-Address = *.*.*.* Framed-IP-Address = *.*.*.* NAS-Port-Id = "*****" NAS-Port-Type = ***** User-Name = "*****" NAS-Port = 0 And now I want to send two Access-Request packets, then I edited the Packet_AUTH.txt as below: NAS-Identifier = "*****" User-Password = "123456" NAS-IP-Address = *.*.*.* Framed-IP-Address = *.*.*.* NAS-Port-Id = "*****" NAS-Port-Type = ***** User-Name = "111111" NAS-Port = 0 NAS-Identifier = "*****" User-Password = "123456" NAS-IP-Address = *.*.*.* Framed-IP-Address = *.*.*.* NAS-Port-Id = "*****" NAS-Port-Type = ***** User-Name = "222222" NAS-Port = 0 Then I used then "radclient -f /root/radPtDt/Packet_AUTH.txt -r 1 *.*.*.*:1812 auth *****" to send packets, but error "radclient: XNo token read where we expected an attribute name" has happened. So, at present, I can only execute the radclient twice to send to packets. And I want to know how to execute the radclient once to send more packets? best regards yiyongyun

1 0

configure with eap-tls without openssl
by new conf 28 May '09

28 May '09

dear all, please can someone tell me if it is possible te compile freeradius with eap tls without openssl because I'll use other certificates (.pem) to load?! and other process using an opnessl in another place?! I you have suggestions, thank you to help me.. On Thu, May 14, 2009 at 1:33 AM, aland <aland(a)deployingradius.com> wrote: > commit c8f57f3d5d688b9c3ac0b04c68a2fe00c677de87 > Author: Alan T. DeKok <aland(a)freeradius.org> > Date: Wed May 13 08:52:09 2009 +0200 > > More typos > > Files changed: > scripts/radwatch.in | 4 ++-- > 1 files changed, 2 insertions(+), 2 deletions(-) > > ====================================================================== > commit 5138e7691c78ae2f674a82a5e077666c4109b0fd > Author: Alan T. DeKok <aland(a)freeradius.org> > Date: Wed May 13 08:51:53 2009 +0200 > > Corrected typo in last commit > > Files changed: > share/dictionary.cisco | 4 ++-- > 1 files changed, 2 insertions(+), 2 deletions(-) > > ====================================================================== > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/devel.html >

3 7

GIT Log for 2009-05-27 23:33 GMT
by aland＠deployingradius.com 27 May '09

27 May '09

commit ce74f6ea63217b8bd73404ed871bd00ddd7dd1be Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 27 14:02:54 2009 +0200 Fixe typo Files changed: src/lib/radius.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 65ecf28b3dfda782cc16f29b1c96577e161f1739 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Wed May 27 12:06:47 2009 +0200 Read all of the packet using MSG_PEEK for dynamic clients Files changed: src/lib/radius.c | 8 +++++++- src/main/listen.c | 23 +++-------------------- 2 files changed, 10 insertions(+), 21 deletions(-) ======================================================================

1 0

compile error with Ruby
by A.L.M.Buxey＠lboro.ac.uk 27 May '09

27 May '09

hi, just a quick heads up. noted the following issue with freeradius 2.1.6 when compiling. no Ruby installed - configure script WARNs and doesnt try including Ruby support only Ruby tools installed - configure thinks all is okay - make then fails because ruby.h is not present Ruby development package installed - configure says all is okay and make works (ie ruby-devel must be installed (as expected!) but if the system has only the Ruby binary installed then configure stage thinks its okay to build in Ruby support. not a show stopper because development has to be flagged on the congigure line (?) but a little quirky - i cant recall any other modules that think its all okay if just the runtime binary is present (eg openssl) alan

3 3

GIT Log for 2009-05-26 23:33 GMT
by aland＠deployingradius.com 26 May '09

26 May '09

commit 50bc8c34edca47f23a6841891e6e20ad838163e8 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue May 26 16:30:30 2009 +0200 Fix typo in last commit Files changed: src/modules/frs_coa/frs_coa.c | 2 +- 1 files changed, 1 insertions(+), 1 deletions(-) ====================================================================== commit 9ebcaf9e3b7acbb6ab1f0bbc8aa0e9b0cdab0f17 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue May 26 16:13:07 2009 +0200 Manual merge of ec4ce9e Files changed: src/modules/frs_coa/frs_coa.c | 12 +++++++++++- 1 files changed, 11 insertions(+), 1 deletions(-) ====================================================================== commit dd45b1111a346d9d1d446fab4751142ca512cc52 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue May 26 15:00:41 2009 +0200 Don't walk over empty trees Files changed: src/lib/rbtree.c | 2 ++ 1 files changed, 2 insertions(+), 0 deletions(-) ====================================================================== commit b8ed9f70a7198f74942b17119d5a0719cd2f3d6e Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue May 26 10:56:11 2009 +0200 "perl -MExtUtils::Embed -e ldopts" LIES to us So... check if the lying liar is lying. If so, complain, and refuse to build the module. i.e. it says "Use -lperl to link!" But there's no "libperl.so" on the system. And the upstream developers don't see a problem with Perl lying to the applications. This means that we have to check for liars, and to work around bugs in other peoples software Files changed: src/modules/rlm_perl/configure | 58 +++++++++++++++++++++++++++++++++++- src/modules/rlm_perl/configure.in | 10 ++++++ 2 files changed, 66 insertions(+), 2 deletions(-) ====================================================================== commit 64fec63f92c2308186d4d4f48603527a26b0682d Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue May 26 10:44:35 2009 +0200 Look for <ruby.h>, and refuse to build without it Files changed: src/modules/rlm_ruby/configure | 203 +++++++++++++++++++++++++++++++++++++ src/modules/rlm_ruby/configure.in | 5 + 2 files changed, 208 insertions(+), 0 deletions(-) ====================================================================== commit ba1e5966bfc8f2f49d9c7695b8c5fd8ba80ff2f5 Author: Alan T. DeKok <aland(a)freeradius.org> Date: Tue May 26 10:41:30 2009 +0200 Fixed typo in recv/send coa Files changed: src/modules/rlm_ruby/rlm_ruby.c | 4 ++-- 1 files changed, 2 insertions(+), 2 deletions(-) ======================================================================

1 0