June 2005 - Freeradius-Users - lists.freeradius.org

Re: Authenticate to eDirectory
by Daniel Hesse 02 Jun '05

02 Jun '05

Does this only work with versions of eDirectory running on Linux or will it work with eDirectory on Netware 6.5 Daniel D. Hesse Technology Administrator Methodist Manor Retirement Community 712-732-1120 Ext.116 dhesse(a)mmrcsl.org >>> sbhowmick(a)novell.com 6/2/2005 12:05 AM >>> Hi, FreeRADIUS 1.0.2 has been integrated with eDirectory to support wireless authentication. See (http://www.novell.com/documentation/edir_radius/index.html) You can also use FreeRADIUS 0.9.3. That supports LDAP authentication to eDirectory. In this case you could try EAP-TTLS + PAP. http://lists.cistron.nl/pipermail/freeradius-users/2005-March/042093.html Hope this helps. Regards, -Sayantan >>>carnold5(a)nc.rr.com 06/01/05 12:35 pm >>> Hello all! I would like to know if anyone has gotten freeradius to work with eDirectory (LDAP)? We are using freeradius 0.93 (ships with sles9) and want our wireless users to authenticate to the eDirectory box. I changed the radiusd.config file at the ldap entry. Clients file has not been touched. It seems that i may need to "extend the schema" on the eDirectory box. Then include the supplied radiusxx.schema file in the slapd.conf file. Any help will be appreciated. Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

if statement in config file
by Edgars 02 Jun '05

02 Jun '05

Testing passwd files i've found out the following - the final decision whether to accept or not the user depends on the Username and password file. If i have another file where i'm cheching Realm and NAS-IP-Address attributes, then the RADIUS is discarding it although the name of this rlm_passwd is placed before the one checking the password. How should i proceed in this situation. Maybe there is some IF statement allowed in the radiusd.conf? So I could write: ------------ 1stpasswd if result_of (1stpasswd) = 1 then 2ndpasswd Edgars

1 0

Problem in compiling with Oracle (rlm_sql_oracle) support.
by Anindya K. Das 02 Jun '05

02 Jun '05

Hi All, I have freeradius-1.0.2 along with Oracle 8.1.6 and I am trying to compile with rlm_sql_oracle. I am giving the following command to start the configure process: ./configure --with-oracle-home-dir=/oracle/Orahome Where my ORACLE_HOME=/oracle/Orahome. However, during the compile process I can see this error in the configure script output. checking for oci.h... no configure: warning: oracle headers not found. Use --with-oracle-home-dir=<path>. configure: warning: sql submodule 'oracle' disabled When I search for oci.h, I can see it is there in /usr/include directory. Is there anything special that I need to do to Oracle or freeradius so that the rlm_sql_oracle to compile? I am compiling on RedHat Linux 8.0. Thanks for your time. Regards Andy

1 0

Patch for Redback dictionary
by Graeme Hinchliffe 02 Jun '05

02 Jun '05

Hiya I have made 2 patches for the redback dictionary. These bring the dictionary upto speed with the current code releases for Smart Edge and SMS platforms. It's 2 patches as I didn't realise there were additions to both SmartEdge AND SMS to be added until after I had done the SmartEdge additions. Just apply the patches in the order patch3 patch4. I have also sent these to patches(a)freeradius.org Anyone spots any problems please let me know. Enjoy -- ----- Graeme Hinchliffe (BSc) Core Systems Designer Zen Internet (http://www.zen.co.uk/) Direct: 0845 058 9074 Main : 0845 058 9000 Fax : 0845 058 9005

1 0

FreeRadius documentation
by James Flockton 02 Jun '05

02 Jun '05

All, Just wondering if anyone can point me towards to some good documentation for FreeRadius please? I'm wanting to build a box running Radius and using OpenLDAP for authentication detail i.e. user name, IP etc. Many thanks James -- mailto: james.flockton(a)gmail.com icq : 48613647 msn : v3ct0r(a)hotmail.com aim : llvectorll yahoo! : llvectorll

4 4

Token Card and Freeradius
by Lorel hardy 02 Jun '05

02 Jun '05

Hi all, I would like to test some solution with freeradius and token card but I don't find an howto anyway, is somebody know where I can find one ? What type of token card are U using which is most compatible ? thx .....

1 0

freeradius and max4000
by Dmitriy Milashenko 02 Jun '05

02 Jun '05

Hi, All. I try to use max4000 with freeradius-1.0.2_1 on my FreeBSD5.3 and I have a problem with ip address asigning. Postgresql table "radgroupreply" looks like: billing=# SELECT * FROM radgroupreply; id | groupname | attribute | op | value ----+-------------------------+-------------------+----+--------------------- 1 | dialup_time_gr | Service-Type | := | Framed-User 2 | dialup_time_gr | Framed-Protocol | := | PPP 3 | dialup_time_gr | Framed-IP-Address | := | 195.68.222.64+ 18 | dialup_time_gr | Framed-IP-Netmask | := | 255.255.255.255 When I try to connect using MAX4000, I get ip address = Framed-IP-Address+NAS-Port, but MAX4000 sends NAS-Port like 20102, so my ip address is 195.68.222.64+20102=195.69.44.198. In the same time I have analog modem pool, working with portslave that sends NAS-Port attribute in range 1-16. So the question is how to make MAX4000 send NAS-Port attribute with lower values or make freeradius to calculate ip in another way. I've heard that there is a patch for freeradius to work with MAX4000, if it is so, please tell me where can I get it. Thank you. -- Dmitriy mailto:jag_subs@ukr.net

2 1

radclient??
by Sylvain Clerc 02 Jun '05

02 Jun '05

I have to use radclient with another soft but I can't arrive to run it . When I do : radclient 192.168.1.1 auth secret nothing happens, it stays always empty. radtest works successful and depends of radclient, that's why I don't understand why radclient doesn't work. Is my syntax is wrong for radclient?? Thank you, Sylvain Clerc.

2 3

Re: Authenticate to eDirectory
by Sayantan Bhowmick 02 Jun '05

02 Jun '05

Hi, FreeRADIUS 1.0.2 has been integrated with eDirectory to support wireless authentication. See (http://www.novell.com/documentation/edir_radius/index.html) You can also use FreeRADIUS 0.9.3. That supports LDAP authentication to eDirectory. In this case you could try EAP-TTLS + PAP. http://lists.cistron.nl/pipermail/freeradius-users/2005-March/042093.html Hope this helps. Regards, -Sayantan >>>carnold5(a)nc.rr.com 06/01/05 12:35 pm >>> Hello all! I would like to know if anyone has gotten freeradius to work with eDirectory (LDAP)? We are using freeradius 0.93 (ships with sles9) and want our wireless users to authenticate to the eDirectory box. I changed the radiusd.config file at the ldap entry. Clients file has not been touched. It seems that i may need to "extend the schema" on the eDirectory box. Then include the supplied radiusxx.schema file in the slapd.conf file. Any help will be appreciated. Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Problem executing radiusd in freeBSD
by Dan Braun 01 Jun '05

01 Jun '05

I just finished doing a basic install of freeradius on freebsd. However, I am receiving a command not found message when trying to execute radiusd from the command line. I'm sure I am just overlooking something minuscule, but if someone could point me in the right direction I would greatly appreciate it. Thanks, Dan

2 1