January 2006 - Freeradius-Users - lists.freeradius.org

"rlm_eap_tls" not found
by Mathieu Clément 15 Jan '06

15 Jan '06

Hello, Debian Sarge, Apache 1.3.33, (+ssl), libapache-mod-ssl installed, Freeradius, EAP-TLS, PEAP ................................................................................... # freeradius -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory radiusd.conf[9]: eap: Module instantiation failed. ...................................................................................................................... ==> Attached: /etc/freeradius/eap.conf, modified file, the "secrets" are simple because I prefer do a test before having the functionnal and definitive configuration. And just another question: what is the maxlenght of the secret ? Thank you in advance if you can solve my problem! Have fun with Freeradius ! Mathieu Clément

3 3

EAP-TLS proxy??
by Danai Chudthong 15 Jan '06

15 Jan '06

Hi all, I'm working in a university in Thailand. We use Freeradius for our wireless network. Currently, Each university have it own Freeradius and the authentication method is EAP-TLS. Is it possible to configure radius to proxy certificate so our student will be able to roam from their university to anothers by using certificate issued from their university? I tried to do it by myself but it's not working. Thank you very much Danai __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

How do you setup MD5 using Freeradius and MySQL?
by Frank Reiss 15 Jan '06

15 Jan '06

HI, Well I tested the MD5 authentication using the user file and that worked but I still can not figure out how to do it against the mysql database. Is there anyone out there that knows hot to set this up I would appreciate some HELP!! Frank Reiss

2 1

How to configure FreeRadius to proxy out a PoD packet to a NAS
by Suparna Kumar 14 Jan '06

14 Jan '06

Here is my situation.. 1. I am creating the PoD packet according to RFC 3799(using a radClient, or my custom program) 2. Sending the PoD Packets to FreeRadius (which port should I send it to, port 1812 reports "Unknown packet code 40" ) 3. I would like FreeRadius to proxy the PoD packets to the NAS in the PoD packet identified by the NAP-IP-ADDRESS Is this something that can be done in FreeRadius? If yes then how do I need to setup the proxy? Thanks Suparna

2 1

openLDAP vs.mySQL
by Carlo Prestopino 14 Jan '06

14 Jan '06

Hi all, this is a "theoretical" post. As written in the object: LDAP or mySQL in the backend for a remote access control system? I've seen that that for remote access control, e.g. Wi-Fi prepaid access solution, it is widely used freeRADIUS+captive portal+mySQL. There are several implementation of capitve portals, but they all do the same thing: act as NAS towards RADIUS providing AAA attributes. User data are stored in the backend in a database, but for usage characteristics this database should be a directory server (LDAP server); such a solution, in fact, requires features typical for a directory server: optimization for read operation, distributed model for storage of information, advanced search capabilities. So the best solution should be LDAP (openLDAP) for users' data and SQL (mySQL) for accounting data (these data are overwritten so number of write operations are almost equal to number of read operations). Despite this, I've seen that LDAP is not widely used. Is this for its complexity or are there deeper reasons that suggest to use SQL database for both (user data, accounting) purposes? Does anybody have links that might help to build a system made using this architecture? Regards, Carlo

5 10

set up consulting
by clark 14 Jan '06

14 Jan '06

I have some experience with Linux, but none with freeradius. I want to set up a freeradius server for mac address authentication. I am a wisp with over 200 customers. I would like to set up dialupadmin also. I have a Linux server running Fedora 4. I am willing to pay consulting fees to someone that can help. My email address is creid(a)gulfshorecomputers.com.

1 0

Info
by Amin Amer 13 Jan '06

13 Jan '06

Hi, i have a WISP, and i want to add a radius server so i could gain more security, and my APs supports radius. My question is: does the radius only works on linux?or does it work on windows too? i have a fedora core 2 working as a billing server, i don't want to mess it up. Please HELP!! Amin --------------------------------- Yahoo! Photos Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever.

1 0

info
by Amin Amer 13 Jan '06

13 Jan '06

Hi, i have a WISP, and i want to add a radius server so i could gain more security, and my APs supports radius. My question is: does the radius only works on linux?or does it work on windows too? i have a fedora core 2 working as a billing server, i don't want to mess it up. Please HELP!! Amin --------------------------------- Yahoo! Photos Got holiday prints? See all the ways to get quality prints in your hands ASAP.

1 0

Where are these "Client-IP-Address = 127.0.0.1" messages coming from?
by Matthew Schumacher 13 Jan '06

13 Jan '06

I'm getting accounting messages like these that seem to be coming from the loopback interface, but `tcpdump -i lo` doesn't see them so they are not coming from a local client. If they are not coming from a local client then how can I figure out where they are coming from? Thu Jan 12 07:19:58 2006 Acct-Status-Type = Stop NAS-IP-Address = x.x.x.x (legit nas IP) Acct-Delay-Time = 0 User-Name = "user" NAS-Port = 536936515 Acct-Session-Id = "0A000067" Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = x.x.x.x (legit Framed-IP-Address) Acct-Session-Time = 0 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Client-IP-Address = 127.0.0.1 Acct-Unique-Session-Id = "1cc41474b27ed376" Timestamp = 1137082798 Thu Jan 12 07:23:50 2006 Acct-Status-Type = Stop NAS-IP-Address = x.x.x.x (legit nas IP) Acct-Delay-Time = 0 User-Name = "anotheruser" NAS-Port = 268501111 Acct-Session-Id = "0D008123" Service-Type = Framed-User Framed-Protocol = PPP Framed-IP-Address = x.x.x.x (legit Framed-IP-Address) Acct-Session-Time = 0 Acct-Input-Octets = 0 Acct-Output-Octets = 0 Acct-Input-Packets = 0 Acct-Output-Packets = 0 Client-IP-Address = 127.0.0.1 Acct-Unique-Session-Id = "4ed0aac222580a10" Timestamp = 1137083030

4 11

help me
by trioka.dudi.p 13 Jan '06

13 Jan '06

Im newbie feeradius... error in madake 10.2 pls help my, configur in linux madrake thks oka

3 2