March 2006 - Freeradius-Users - lists.freeradius.org

Replying attribute value regarding a check-item or Hunt-group...
by Florian Prester 15 Mar '06

15 Mar '06

Hi, how can I achieve, that the radius-server is replying IP-address A, if comming from NAS A, and IP-address B, if comming from NAS B? Altough: IP A is stored in LDAP as IP-A and IP B is stored in LDAP as IP-B But unfortunately I do only have one Framed-IP-Address-attribute which should be mapped to either of above, depending of the NAS-IP. Any Ideas or further reading? Thank you! Regards Florian -- Dipl. Inf. Florian Prester Network Administration Regionales RechenZentrum Erlangen Universitaet Erlangen-Nuernberg Martensstr. 1 91052 Erlangen Germany Tel.: +499131 8527813

1 0

Howto reload raddb/users file?
by Chris Leavoy 15 Mar '06

15 Mar '06

How do I reload raddb/users file? Please embarrass me thoroughly by pointing out where this is documented. -- Chris

4 3

MAC/VLAN with HP Procurve
by Jim Potter 14 Mar '06

14 Mar '06

Hi all, Part 2 of my problems - has anyone got a radius server to hand out dynamic VLANs to an access point? I've got the following from various sites, but it doesn't seem to work (users file): 00-0e-35-31-5c-1b Auth-Type == Local,User-Password == "00-0e-35-31-5c-1b" Tunnel-Medium-Type = 802, Tunnel-Private-Group-ID = 20, Tunnel-Type = VLAN - this is meant to make the laptop with the given VLAN join to the network on vlan 20, but there is no sign of this working... any clues? cheers Jim Potter -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

4 3

unsubscribe
by Joseph Francis Medina Gonzalez 14 Mar '06

14 Mar '06

1 0

Password Logging: Correction
by andre kip 14 Mar '06

14 Mar '06

hi! 1. how can I stop my freeradius server from logging entered passwords into the the accounting file? I would like to only have the following in my file this way: Packet-Type = Access-Request Wed Mar 1 15:05:04 2006 User-Name = "Me" ######no password logging!!### NAS-IP-Address = x.x.x.x NAS-Identifier = "ssh" NAS-Port = 424 NAS-Port-Type = Virtual Service-Type = Authenticate-Only Calling-Station-Id = : 2. Is there a way of stopping the server from outputing the user password on debug mode?? as in: rad_recv: Access-Request packet from host 10.0.10.11:1449, id=17, length=87 User-Name = "Me" ##NO User-Password##### NAS-IP-Address = x.x.x.x NAS-Identifier = "ssh" NAS-Port = 424 : 3. And finally is it possible to use enycrypted passwords in user file? e.g. Me Auth-Type := Crypt-Local, Crypt-Password == "098f6bcd4621d373cade4e832627b4f6" ......or something similar Thanks in Advance. Andy Trüffle ___________________________________________________________ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de

5 13

Problems with users file and DEFAULT authentication
by Jim Potter 14 Mar '06

14 Mar '06

1 0

radclient solaris 10
by dr 14 Mar '06

14 Mar '06

where can I find radclient for Solaris 10 (sparc) ?... thank you didier --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments.

1 0

About Monthly Time Limits
by Lisa Casey 13 Mar '06

13 Mar '06

Hi, We are an ISP. As many ISP's do these days, we outsource our dialup numbers to wholesalers such as Megapops, etc. but we maintain our own radius servers. The wholesaler proxies radius requests to us. The following is kind of hypothetical, but I need to know this in order to understand how all this works. I have monthly time limits set up in my Freeradius. When customers login, where exactly does the information come from that tells Freeradius "This customer is OK, he has not used up his time limit yet" or "Reject this customer, he has used up his limit for this month". Is this dependent on something in the radius config at the wholesalers end, or is this info taken from my db.monthly file? Another way of asking this question (in case I'm not making myself clear which is always a possibility) is: Does the wholesaler have to support monthly time limits or can I do it all from my end (whether or not the wholesaler supports such an attribute)? Any info about how this process works will probably help clear up my thinking. Thanks, Lisa Casey

4 4

Wireless Card - user authentication - Freeradius
by ora 13 Mar '06

13 Mar '06

Hi, I have a Linksys Wireless-G Access Point (WAP54G). I am trying to configure the Access Point in order to have a user authentication by using the MAC address of wireless adapter. So, I installed my freeradius in a linux 9.0 server. My question is: where I have to put the MAC address of wireless adapters??? Into the file ?clients.conf? of my RADIUS server or in the ?users? file?? Do you know the sintaxis? In the other hand, I must to modify the file ?radiusd.conf?? If you have any document concernig this configuration, I'll be glad of any comments or information. Best Regards Octavio RAMIREZ ROJAS

2 1

Re: D-link and freeradius
by Christoforos Ntantogian 13 Mar '06

13 Mar '06

> OK...what you wrote in the naslist file in the TYPE field ? > > IF it worked with your D-link access point then whats the point of the > NASlist file? excuse me but how i answer to a thread without creating a new thread? > > thanks you for anwering Dave.. > > ----- Original Message ----- > From: "Dave Huff" <dbhuff(a)yahoo.com> > To: <freeradius-users(a)lists.freeradius.org> > Cc: <ntantogian(a)di.uoa.gr> > Sent: Monday, March 13, 2006 6:06 PM > Subject: Re: D-link and freeradius > > >> >>> Date: Mon, 13 Mar 2006 12:58:49 +0200 >>> From: "Christoforos Ntantogian" <ntantogian(a)di.uoa.gr> >>> Subject: D-link and freeradius >>> To: <freeradius-users(a)lists.freeradius.org> >>> Message-ID: <002d01c6468d$1eda3db0$b06486c3@noc> >>> Content-Type: text/plain; charset="iso-8859-7" >> >>> Hello, >> >>> I am going to setup an 802.1X wireless authentication with EAP-MD5, >> EAP-TLS and EAP-SIM. >>> I would like to ask if freeradius supports the D-link wireless access >> points. The NAS list > that freeradius support doesnt include D-link >> products. I have a D-link 900+ access point. > How can i make it work >> with >> freeradius or i cant? >> >> I'm using FR with a Dlink 624. I did have to download the latest >> firmware >> from Dlink before it would work. >> >> Dave H >> >> >> >> >> >> -- >> No virus found in this incoming message. >> Checked by AVG Free Edition. >> Version: 7.1.375 / Virus Database: 268.2.1/279 - Release Date: 10/3/2006 >> >> >

1 0