May 2005 - Freeradius-Users - lists.freeradius.org

Please resend this message to Kim Jones'
by Kim 31 May '05

31 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

ADSL access server, freeradius and MULTI IP assignement
by Dario Maurich - CSINFO S.p.A. 31 May '05

31 May '05

Hi all. I'm trying to set up a fully operational adsl access router so i mean, I have a cisco 7200 as access server (NAS) and a freeradius. Everythings works fine (dynamic and one static IP assignement) exept for the multi IP assignement (so one starting IP and a netmask). In this case the clients authenticate but the IP is not assigned at all so they can't access Internet. What is the problem? This is my configuration parameters for /etc/raddb/xxxxxxx.users file: xxxxx Auth-Type := Local,User-Password == "adsl" #not working Framed-IP-Address = x.x.x.x, Framed-IP-Netmask = 255.255.255.248, Fall-Through = Yes, xxxxx Auth-Type := Local,User-Password == "adsl" #working well X-Ascend-Assign-IP-Pool = 3, Fall-Through = Yes, xxxxx Auth-Type := Local,User-Password == "adsl" #working well Framed-IP-Address = x.x.x.x, Fall-Through = Yes, I'm sorry but I'm not expert at all in freeradius software, I'm a very beginner, can you help me? Many thanks, Dario Maurich

1 0

Please resend this message to Kim Jones'
by Kim 31 May '05

31 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

3 2

Please resend this message to Kim Jones'
by Kim 31 May '05

31 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

upgrading freeRADIUS
by vicky 30 May '05

30 May '05

Hi list subscribers, hi list admins, I'm running a freeRADIUS server version 0.8.1 (I know it is ancient) and I want to upgrade it to the latest version available. I have been trying to find some kind of procedure to upgrading but with no success. Does anyone know how to (in a fairly simple way) safely upgrade? The safetyness is very crucial, I cant risk overwriting my old configuration. The old server is built with /configure --prefix=/opt/freeradius make su make install / Thanks to you all in advance and please notice that I'm not that of an expert on RADIUS... Keep up the good work! -- Vicky

1 0

Error: Discarding new request
by Andres 30 May '05

30 May '05

itprola Firmathis it is the error "Error: Discarding new request from client " as it is solved? Mon May 30 12:10:59 2005 : Auth: Login OK: [00301a0af0ea/00301a0af0ea] (from client 10.10.0.10 port 0) Mon May 30 12:13:07 2005 : Auth: Login OK: [tscitti@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 539 cli 00:30:1A:0A:F0:EA) Mon May 30 12:20:50 2005 : Error: Discarding new request from client 10.10.1.2:32845 - ID: 250 due to live request 1976 Mon May 30 12:20:56 2005 : Auth: Login OK: [catflorida@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 165 cli 00:30:1A:0A:FC:3C) Mon May 30 12:23:05 2005 : Auth: Login OK: [jfolgar@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 480 cli 00:30:1A:0A:FC:57) Mon May 30 12:25:00 2005 : Auth: Login OK: [mrodriguez@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 837 cli 00:30:1A:0A:FC:1F) Mon May 30 12:26:10 2005 : Error: Discarding new request from client 10.10.1.2:32845 - ID: 2 due to live request 1985 Mon May 30 12:26:17 2005 : Auth: Login OK: [catflorida@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 462 cli 00:30:1A:0A:FC:3C) Mon May 30 12:27:18 2005 : Auth: Login OK: [00301a0ae2f3/00301a0ae2f3] (from client 10.10.0.10 port 0) Mon May 30 12:34:29 2005 : Error: Discarding new request from client 10.10.1.2:32845 - ID: 5 due to live request 1990 Mon May 30 12:49:29 2005 : Auth: Login OK: [catflorida@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 489 cli 00:30:1A:0A:FC:3C) Mon May 30 12:51:55 2005 : Auth: Login OK: [jfolgar@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 527 cli 00:30:1A:0A:FC:57) Mon May 30 12:55:46 2005 : Auth: Login OK: [mrodriguez@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 617 cli 00:30:1A:0A:FC:1F) Mon May 30 12:56:08 2005 : Auth: Login OK: [narbulo@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 750 cli 00:30:1A:0A:F0:E5) Mon May 30 12:57:33 2005 : Error: Discarding new request from client 10.10.1.2:32846 - ID: 17 due to live request 2003 Mon May 30 12:58:43 2005 : Auth: Login OK: [00301a0afc68/00301a0afc68] (from client 10.10.0.10 port 0)

1 0

RE: How to? - use/configure winbind/ntlm_auth for Windowsauthentication
by DELORT Stephane 30 May '05

30 May '05

Hi Pete, look at the radiusd.conf file, there is a sample line for ntml_auth. "man ntml_auth" will give you details on the parameters. regards, Stéphane -----Message d'origine----- De : freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]De la part de Pete Flynt Envoyé : lundi 30 mai 2005 16:01 À : freeradius-users(a)lists.freeradius.org Objet : How to? - use/configure winbind/ntlm_auth for Windowsauthentication Hello, I'm trying to set up a FreeRadius solution for a Windows2k AD environnment. The FreeRadius-server is already running right. I can authenticate a testuser with Auth-Type := EAP (username and password stored as cleartext in the users file) Now I want to use FreeRadius to check username/password from the Active Directory Server when a user logs onto the computer. I checked the list already. Some say to use ntlm_auth and winbind, others LDAP, then samba... but nobody is able to explain how to get it working. Is it really as complicated? ntlm_auth seems very simple, returnig 1 if user/pwd is alright and 0 when not. But how can I test this from the command line? Where do I specify the address of the AD-server? When running ntlm_auth -- usage there are too much parameters that are unknown to me. Thanks in advance for any help! Pete _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Wireless Authentication
by Radius 30 May '05

30 May '05

Does anyone have any links or on-line examples that show how to use FreeRadius to do 802.1x authentication? Thanks Bob Ross

5 4

Re: users file and User-Password..
by Alan DeKok 30 May '05

30 May '05

Rok Papez <rok.papez(a)arnes.si> wrote: > I beg to differ... the users file is one of the things in freeradius that > are not confusing :). It appears to be simple, but your question about User-Password shows the limitations & problems of the "users" file. > What is supposed to replace the users file ? rlm_policy, or something similar. Yes, it is a little bit more complicated than the "users" file, but it's MUCH clearer as to what it's doing, and why. > For example I use users file to do: ... We will NOT remove functionality from the server in future releases. We MAY change how you configure that functionality. Alan DeKok.

2 1

Please resend this message to Kim Jones'
by Kim 30 May '05

30 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

radiusclient
by s s 30 May '05

30 May '05

i want to build up a dial up authenticating system. So i downloaded freeradius1.0.2.tar from freeradius.org. Then i wanted to build a radiusclient using jradiusclient API. I wanted to use a PC as radius client. anybody has any idea of how to build it using API. If someone has done it then please reply. also if other alternatives are present then please post your suggestions. thank you __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Please resend this message to Kim Jones'
by Kim 30 May '05

30 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

Re: Wireless Authentication
by Sayantan Bhowmick 30 May '05

30 May '05

Hi, Try http://tldp.org/HOWTO/html_single/8021X-HOWTO/ . -Sayantan >>> radius(a)kingmanaz.net 05/29/05 10:32 PM >>> Does anyone have any links or on-line examples that show how to use FreeRadius to do 802.1x authentication? Thanks Bob Ross - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

No Detail Logs
by Radius 29 May '05

29 May '05

I'm sure I missed a setting or something. We changed providers as well as our IP address's 4 days ago. Ever Since we did, no detail logs are being created by FreeRadius 9.3 Everyone can get logged in and realms are working fine, just no detail log. Any Ideas? Thanks Bob Ross

2 4

Please resend this message to Kim Jones'
by Kim 29 May '05

29 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

Please resend this message to Kim Jones'
by Kim 28 May '05

28 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

Re: pam_radius_auth on AIX 5L
by David LePage 28 May '05

28 May '05

Let me answer my own question.. 4 days later I found that my problem was within the default "ld" statements in the Makefile. I found a command that will compile the module successfully on AIX 5L: Download the Linux Toolset for AIX, then: To build pam_radius: - change to the md5.h file. Change line 18 from: #define uint32 u_int32_t to #define uint32 uint32_t - in md5.c, insert to line 38 (before any #include lines) #define __sparc - in pam_radius_auth.h, line 60, insert after the comment section but before "#ifdef sun": #define sun Modify the Makefile Find this line: pam_radius_auth.so: pam_radius_auth.o md5.o ld Bshareable pam_radius_auth.o md5.o lpam o pam_radius_auth.so And replace with: pam_radius_auth.so: pam_radius_auth.o md5.o ld -o pam_radius_auth.so pam_radius_auth.o md5.o -bexpall -bM:SRE -bnoentry -lc That seemed to do it. It now works on AIX 5L after creating a pam.conf and installing SSHD with the "--with-pam" option enabled. D --- David LePage <dwlepage(a)yahoo.com> wrote: > Has anyone ever successfully compiled pam_radius_auth on AIX 5L using > the > default Makefile and options? I have both GCC and CC compilers, and cant > seem to get the compile side options correct for this platform. Does > anyone have a Makefile they can share for this platform that might help > - > or instructions on modifying the source files to get it to compile on > this > platform? > > Thanks, > > D > > > __________________________________________________ > Do You Yahoo!? > Tired of spam? Yahoo! Mail has the best spam protection around > http://mail.yahoo.com > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Re: sequence
by Alan DeKok 27 May '05

27 May '05

Edgars <edzix19(a)inbox.lv> wrote: > But is it possible to have a chain of authentication modules, each > performing its own task on the request, for example, rlm_passwd to > modify the client's request (based on username, insert some > additional attributes there), That's not authentication. And the passwd module already does that in the "authorize" section. > then one more rlm_passwd to check plain-text passwords, and then > rlm_users to compose the reply? Composing the reply can go into the "post-auth" section. I don't understand why you want to put everything into the "authenticate" section. Please read the server docs to see what the various sections do, and how they're called. Alan DeKok.

1 0

Re: users file and User-Password..
by Alan DeKok 27 May '05

27 May '05

Anthony Hinsinger <anthony.hinsinger(a)univ-pau.fr> wrote: > How can we do all theses kind of things w/o the files modules and its > users file ?? Via replacement functionality. If people like the "users" file so much, maybe there's a requirement for an intermediate module between "users" and "policy". Alan DeKok.

1 0