September 2005 - Freeradius-Users - lists.freeradius.org

reject some users from radius - ldap ?
by Frank Bonnet 07 Sep '05

07 Sep '05

Hello I use freeradius with ldap to manage wi-fi users ( thru chillispot ) everything works well but I would like to know if it is possible to exclude some users with radius ? My purpose is to forbid wi-fi access BUT let use the wired LAN access to the considered users. Thanks a lot. -- Cordialement/Regards Frank Bonnet

2 2

Encrypted passwords in the users file
by Miguel Angel Quiles 07 Sep '05

07 Sep '05

Hi, I've got a SUSE 9.3 with FreeRadius 1.0.2, and at the moment I have my user registered in the users file such as: username Auth-Type := Local, User-Password == "password" Service-Type = "Callback Framed", ... I would like to know how to encrypt the passwords. I would like to know if I need to install any package. Also, I would like to know how I can create this encrypted passwords. I hope somebody can help me. Thanks.

1 0

Re: Freeradius-Users Digest, Vol 5, Issue 17
by David Barker - 4D Internet Ltd 07 Sep '05

07 Sep '05

Please note that as of the 1st August 2005 my email address changed to dbarker(a)4dtechnologygroup.com. Your email has been forwarded onto my new address but please update your address book for future use. Thank you. David Barker 4D Internet Limited http://www.4dtechnologygroup.com

1 0

difference between Acct-Session-Id and Acct-Unique-Session-Id
by marc racal 07 Sep '05

07 Sep '05

what is the difference between Acct-Session-Id and Acct-Unique-Session-Id? thanks in advance. regards, marc -- Get Firefox! http://tinyurl.com/cocg2 The browser you can trust.

1 0

users who are listed in /usr/local/etc/raddb/users cannot authenticate.
by Drew Weaver 06 Sep '05

06 Sep '05

I have a number of users whom are listed in my /usr/local/etc/raddb/users file in this format: User1 password="4978" fall-through="1" user2 password="knjy500" fall-through="1" user3 password="8556" fall-through="1" user4 password="8556" fall-through="1" user5 password="rocky" fall-through="1" none of them are able to authenticate. These users are both listed in /usr/local/etc/raddb & in the local system's password file (for chap purposes) if I remove the listing from the users file they can authenticate via PAP. Thanks, -Drew

1 0

Digest and MD5
by Iandc Davies 06 Sep '05

06 Sep '05

All, For the Digest, the MD5 hashed response is, as far as I can make out, generated as follows :- A1 = H[Digest-User-Name:Realm:Password] A2 = H[Digest-Method:URI] KD1 = H[Hexdump(A1):Nonce] KD2 = H[KD1:Hexdump(A2)] KD = H[KD2] - - Which should match the final received Digest-Reponse element. Right... The question. All info apart from the Password come from the incoming VAS AVP packet. The Password seems to be sourced from a structure called REQUEST defined in libradius.h, in a specific pointer VALUE_PAIR element called config_items. Where and when does this element get populated and with data from where ? Ian Davies {02476 564662} Internal (x740 4662) IMS-SIPAC Software Development Engineer

2 1

DIGEST-MD5 and LDAP Backend
by Daniel Corbe 06 Sep '05

06 Sep '05

Hello, Would it even be possible to support this type of scenario? I'm passing a Digest auth request from my SIP server to my Radius server and then to my LDAP back-end. The only way I can get it to work is if I store the userPassword attribute on the LDAP server in plain text. Ideally I'd like to be able to store them in MD5 I'm looking to get some kind of rough idea of what may need to change about FreeRADIUS to facilitate this or even if it is possible at all. Thanks. -Daniel

2 1

Moving a freeradius installation
by bendowling＠lineone.net 06 Sep '05

06 Sep '05

Hi, I have built freeradius-1.04 from source and installed it to the default directories (for example, /usr/local/etc/raddb for the configuration files). I now wish to move the whole installation to /usr/radius so that it will be possible to tar the directory and copy it to other severs. I know I can configure which directories radusd uses in radiusd.conf, but is there any way to make radiusd look in /usr/radius/etc for radiusd.conf without rebuilding? If I do need to do a fresh build and install is there anyway of cleanly uninstalling what is currently there? Thanks in advance, Ben Dowling __________________________________________________________________ 1Mb Tiscali Broadband for £14.99. Offer ends 30th June 2005 http://www.tiscali.co.uk/products/broadband

2 1

Script to process authentications & accounting
by ricklim＠telus.net 06 Sep '05

06 Sep '05

Is there any information about using a script with freeradius to process authentications? TIA

3 2

Can't start freeradius - auth bind error
by NECTIS NetVoice Sales 06 Sep '05

06 Sep '05

Hi, can not start freeradius: Starting RADIUS server: Tue Sep 6 13:08:47 2005 : Info: Starting - reading configuration files ... auth bind: Address already in use [FAILED] What is it? Regards,

2 1