June 2005 - Freeradius-Users - lists.freeradius.org

MAC address authorization
by Vince Nguyen 10 Jun '05

10 Jun '05

Please help, I've installed Freeradius 0.9.3-1.1 to my Redhat Fedora Core 1 box, and would like to use it in conjunction with my Cisco AP1200 to simply allow authorized and registered MAC address to be on the network. Has someone done this and could show the way? Thanks, Vince __________________________________ Vince T Nguyen Systems Administrator <file://www.quantum.com> www.quantum.com <mailto:vince.nguyen@quantum.com> mailto:vince.nguyen@quantum.com 949/856.7809 (direct) 949/856.7799 (fax)

1 0

is it possible to only allow users with a valid host ip?
by gvdgiessen＠fastmail.fm 10 Jun '05

10 Jun '05

Hi, I wonder if I can restrict (vpn)login from users in combination with their login (host) ip address. cheers, Geer -- gvdgiessen(a)fastmail.fm -- http://www.fastmail.fm - And now for something completely different

4 3

File Users
by José Berenguer 10 Jun '05

10 Jun '05

Hello! Anyone can tell me where can I find some instructions about how to configure the "default LDAP-GROUP" option in the file USERS? Thanks. -- ********************************************************************** José Berenguer Giménez Área de Comunicaciones-Servicio de Informática UNIVERSIDAD DE ALMERÍA Crta. de Sacramento s/n, 04120 - Almería Tlf.: 950014014 E-mail: jose(a)ual.es **********************************************************************

2 1

LDAP basedn context
by Matt McFarlane 10 Jun '05

10 Jun '05

Is it possible to specify the basedn above where the users are actually located and have freeradius find the user in a subcontext? For instance if my ldap is setup as ou=users1,ou=loc1,o=org and ou=users2,ou=loc2,ou=o=org can I specify basedn="o=org" and find users in both users1 and users2? Thanks. Matt McFarlane

2 1

ATTRIB_NMC
by Guy verdegem 10 Jun '05

10 Jun '05

Hi, I installed freeRadius 1.0.2 on a solaris machine. But when starting the radiusd -x he comes up with following messages. "Starting - reading configuration files ... Errors reading dictionary: dict_init: /etc/raddb/dictionary.usr[55] invalid keyword "ATTRIB_NMC" Errors reading radiusd.conf" Does somebody has a solution for this. Thx Guy Verdegem

2 1

rlm_python example ?
by Schweizer Laurent 10 Jun '05

10 Jun '05

Hello, I try to use the rlm_python module but I don't know how I must specify in the radiusd.conf which python script is used. Where can I found an example of radiusd.conf with the python module? Laurent

2 1

picks up the same request twice
by vicky 10 Jun '05

10 Jun '05

Hello RADIUS-people! In my radius server I have a certain NAS defined in the clients.conf file as (example) : client 1.1.1.1{ shortname = one secret = oneone } and the same NAS in the proxy.conf file like this : realm one{ type = radius authhost = 1.1.1.1:1812 accthost = 1.1.1.1:1813 secret = oneone } This creates confusion because when receiving a request from this NAS, my radius server recognize it twice. One that is proxied and one that is "treated" locally (without striping of the realm). How can I solve this so that when the request should be proxied it is only proxied and when it should be treated locally it is only treated locally? I hope I made my question clear... Loads of thanks! -- Vicky

3 2

CHAP and FreeRadius
by Marek Gradzki 10 Jun '05

10 Jun '05

Hi there. I am new user of FreeRADIUS. I would like to know how to setup CHAP authorization from files (at the beginning) on FreeRADIUS. I am currently using 1.02 FreeRADIUS version on Solaris 2.8. Thanks for help. Marek Gradzki

2 1

problem with "#" in username
by Christian Seitz 10 Jun '05

10 Jun '05

Hi, I want to replace our old radius server with freeradius and it seems that freeradius has all the features we need - great work! We are using freeradius 1.0.2-4 from debian unstable with a PostgreSQL database for users and logging. My problem is that some of our usernames contain a "#", for example "test#in@realm". Freeradius receives this username and logs it to radius.log, but it logs "Auth: Login incorrect". When I turn on statement logging in PostgreSQL, I can see, that freeradius sends a select query to PostgreSQL with "test=23in@realm" as the username instead of "test#in@realm". When I change the username to "test=23in@realm" in the database table, I get "Auth: Login OK", although the client still sends "test#in@realm" as the username and freeradius logs "test#in@realm" in radius.log. Is this a bug in freeradius? Chris -- Christian Seitz <chris(a)in-berlin.de> http://www.in-berlin.de/ Individual Network Berlin e.V. PGP Fingerprint: A9 17 03 0D 36 AB 07 4E D0 1E C3 8E 3F B0 66 9A

3 4

Relocation Error
by Normando Marcolongo 10 Jun '05

10 Jun '05

Hi! I've the same error as in the thread http://lists.cistron.nl/pipermail/freeradius-users/2005-April/thread.html#4…: freeradius: relocation error: /usr/lib/perl/5.8/auto/IO/IO.so: undefined symbol: Perl_Tstack_sp_ptr nobody seemed to pinpoint the problem. I've Debian 3.1 and one perl installation. It seems, obviously, that when commenting out the perl module all works fine... Please any light on this would be appreciated. Thanks, Normando -- Normando Marcolongo | Micso s.r.l. via Tiburtina, 318 | I-65128 Pescara, Italy tel/fax (+39)08554105 | mob. (+39)3386296362

2 2