January 2006 - Freeradius-Users - lists.freeradius.org

Accounting status type
by Priscilla B 31 Jan '06

31 Jan '06

Hi, just short question. Where should I put the acct-status-type? is it in users file? Many thanks Priscilla __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

rlm_perl
by Chris Knipe 31 Jan '06

31 Jan '06

Hi, Is there any way to get rlm_perl to work with binary code, instead of source? I currently have a perl script executing via rlm_perl that does some fancy stuff in authentication and accounting. Due to popular demand, I now have 3rd parties interested in this code, but I don't feel it is secure enough to provide these vendors with the open source perl code. I don't believe I can accomplish with rlm_exec what I do in rlm_perl, so I'm kinda hoping that someone would have a solution here for me that would allow rlm_perl (or a similar module perhaps), to execute compiled code. Hope I make sense, and that someone can shed some light and pointers for me. Thanks, Chris.

4 4

Stop current session.
by ujin 31 Jan '06

31 Jan '06

How to disconnect on SNMP current session on NAS if the user it is authorized and to be on-line. I think it it is possible to make 1. To use rlm_perl and in parameter acounting will specify a script which to disconnect on snmp session. Whether and there are still variants?

1 0

why encryption schemes for pap
by DilipSimha.N.M 31 Jan '06

31 Jan '06

hi, why are encryption schemes for pap required? it is supposed to be clear-text under all circumstances right??? we can see in radiusd.conf.. # PAP module to authenticate users based on their stored password # # Supports multiple encryption schemes # clear: Clear text # crypt: Unix crypt # md5: MD5 ecnryption # sha1: SHA1 encryption. # DEFAULT: crypt pap { encryption_scheme = crypt } so why is this required?? --DilipSimha

2 1

problems with encryption_scheme in radiusd.conf file
by DilipSimha.N.M 31 Jan '06

31 Jan '06

hi, in the radiusd.conf file... under modules/pap encryption_scheme variable can be set to any value, and has no effect!!! what is it used for??? i tried.... encryption_scheme=clear and put in users file: netd Crypt-Password = 12NKz5XM5JeKI Service-Type = Framed-User but this also works!!!! how can encryption-scheme=clear allow crypt passwords??? (so if it supports all methods, then what is the need of this variable?) --DilipSimha

2 1

Radius acct info to SQUID
by Shain Lee 31 Jan '06

31 Jan '06

Hello , Can we parse , radius accounting information to a proxy directly ? please help Thank you, Shaine. --------------------------------- Win a BlackBerry device from O2 with Yahoo!. Enter now.

1 0

Calling-Station-Id in EAP/PEAP ??
by Norbert Grochal 30 Jan '06

30 Jan '06

Hi! Is it possible to use verification of Calling-Station-Id in EAP/PEAP ? My users file: foo Auth-Type := EAP, User-Password == "mypass", Calling-Station-Id == "0123456789ab" and I have an error: rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Tunneled data is valid. rlm_eap_peap: Had sent TLV failure, rejecting. rlm_eap: Handler failed in EAP/peap rlm_eap: Failed in EAP select When I use := insteed of == in Calling-Station-Id == "anything" then freeradius always authorize me, so I think it doesn't chceck it... -- Norboro

3 3

Dialupadmin and Mysql 5.0.18
by Paolo Pellicori 30 Jan '06

30 Jan '06

Hi, Questions: I have upgrade mysql from ver 4 to 5.0.18 but dialupadmin it does not work more: ( how I can resolve? Regards

2 1

What firewall ports are requited for freeradius to work properly?
by Frank Reiss 30 Jan '06

30 Jan '06

Hi All, I have a Freeradius server on one system and an Apache web server on a second system. I also have a Cisco Pics Firewall installed I need to establish communications through the pics firewall and need to know the ports that mod_auth_radius and radius need to work properly. I do have ssh and ssl setup on both systems. I know that for FreeRadius to work you need to open up the firewall port 1812 and if you are using ssl you heed port 433 also opened. Is there any other ports that will be needed to be opened up for FreeRadius to work? Thank you, Frank Reiss

2 1

PEAP Machine Auth without NTLM or LDAP
by Jérémy Cluzel 30 Jan '06

30 Jan '06

Hello, I want to do machine auth with PEAP for my laptop before windows logon. I managed to do it with "ntlm_auth" before, but this time, I've another problem, there is no PDC. So, is it possible to use the "users" file instead like this: "computer_name" User-Password == "" (As far as I remember it was impossible...) Any suggestions ? Regards, Jeremy Cluzel

4 6