March 2006 - Freeradius-Users - lists.freeradius.org

HOW TO ATTACH A USER TO A SPECIFIC MAC ADDRESS
by Aime 11 Mar '06

11 Mar '06

Hello, How do I define a user in users file so that the user can only be accepted from a given mac address ? In the following exemple , what must I replace <.....> with in the check items ? : user1 User-Password == passwd <.....> Thanks in advance. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

password rejected when CHAP is not used
by Alex M 10 Mar '06

10 Mar '06

When I do not use CHAP my password gets rejected, and when I do use it everything goes OK; but not all my NAS support chap! So what should I do to configure radius to support NAS that doesn't send CHAP passwords? THANKS!

1 0

CVS down
by Thor Spruyt 10 Mar '06

10 Mar '06

http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/ -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: thor.spruyt(a)telenet.be W: www.thor-spruyt.com www.salesguide.be www.telenethotspot.be

4 4

multiple constraints
by kimmi raikonen 10 Mar '06

10 Mar '06

Hello all! Maybe I heaven't read ehough, but here is question: Is it possible to have two "if" for one rule in users file: DEFAULT NAS-IP-Address == 192.168.2.5, NAS-Port-Id == 0, Proxy-To-Realm := 'bla' If not, how can I do it?? TIA --------------------------------- Yahoo! Mail Bring photos to life! New PhotoMail makes sharing a breeze.

2 1

HowTo FreeRadius on SME Server7
by Italo Morellato 10 Mar '06

10 Mar '06

How to install FreeRadius on SME Server7 (core CentOS)? RPM or different setting-up? Thanks on advance Italo Morellato WISP Admin.

1 0

net-snmp issues fix?
by A V 10 Mar '06

10 Mar '06

Hi, We are trying to get SNMP on freeradius working on Solaris 10. I saw the posting that the net-snmp fixes will be available in freeradius 1.1.1. When is this slated for? Any possibility we could have a patch with the fix earlier than the entire release? Thanks, -AV --------------------------------- Yahoo! Mail Bring photos to life! New PhotoMail makes sharing a breeze.

3 4

Re: freeradius auth logging (rlm_detail)
by Geoff Silver 10 Mar '06

10 Mar '06

You'll have to change rlm_detail. I created an rlm_syslog module which allows you to include some extra fields via xlat. I'm sure you could do something similar to rlm_detail. In my case, I added a char* logextra to the struct and then: if (inst->logextra != NULL) { radius_xlat(extra, sizeof(extra), inst->logextra, request, NULL) ; DEBUG2("rlm_syslog: %s expands to %s", inst->logextra, extra); splitstr = strtok(extra, ","); while (splitstr != NULL) { strcat(result, splitstr); strcat(result, divider); splitstr = strtok(NULL, ","); } } In my case I'm building a string (you'd want to fprintf(outfp,"")), but I just supply a logextra = "" option in the detail {} section of the config file, where the value can be any xlat-expandable attributes, eg. logextra = "NAS-IP-Address = %{NAS-IP-Address},Nas-Port = %{NAS-Port}" ???????, ?? ???????? wrote: > Hi! > Is it possible to log more detailed information about radius response packet for authorization? > At the moment it looks like: > > Packet-Type = Access-Accept > Wed Mar 8 10:25:57 2006 > Auth-Type = Accept > > But how can I know, for which request it has responsed? Can I log the "Authenticator"? (Both, in the request and in the response?) > > ------------------------------------------------------------------------------- > http://www.one.lv - Tavs mobilais e-pasts! > > Tagad lasi savu e-pastu ar mobilo telefonu - wap.one.lv! > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

RE: Welcome to the Pls Reply me --- urgent need
by HariHaran 10 Mar '06

10 Mar '06

Hai All, Can any one pls help me to resolve the below problem. I have beed using the Free Radius for a long time and using its Authentication and accounting services. I wanted to configure my Free Radius with Fedora Directory server to do the authentication.As we knowthat Free radius normally does the authentication against /etc/users file.If we specify the Auth-Type as LDAP it will do the authentication against Directory Server. I have configured Fedora Directory server with Free Radius successfully. And made the changes at /etc/users and /etc/radiusd.conf file to support the LDAP authentication(with Fedora Directory Server).It is working fine. The problems are, 1)I am not able to locate what is happening between Fedora DS and Radius. 2)How to test whether Fedora DS accepting the RADIUS attributes are not 3)How to add RADIUS Attributes and user defined to the Fedora DS. Pls let me know the details.Pls urgent. ----- Regards, Hariharan R --- On Fri 03/10, freeradius-users-request(a)lists.freeradius.org < freeradius-users-request(a)lists.freeradius.org > wrote: From: freeradius-users-request(a)lists.freeradius.org [mailto: freeradius-users-request(a)lists.freeradius.org] To: hariharanr(a)myway.com Date: Fri, 10 Mar 2006 06:47:40 +0100 Subject: Welcome to the "Freeradius-Users" mailing list (Digest mode) Welcome to the Freeradius-Users(a)lists.freeradius.org mailing list!To post to this list, send your email to: freeradius-users(a)lists.freeradius.orgGeneral information about the mailing list is at: http://lists.freeradius.org/mailman/listinfo/freeradius-usersIf you ever want to unsubscribe or change your options (eg, switch toor from digest mode, change your password, etc.), visit yoursubscription page at: http://lists.freeradius.org/mailman/options/freeradius-users/hariharanr%40m… can also make such adjustments via email by sending a message to: Freeradius-Users-request(a)lists.freeradius.orgwith the word `help' in the subject or body (don't include thequotes), and you will get back a message with instructions.You must know your password to change your options (including changingthe password, itself) or to unsubscribe. It is: hariharanNormally, Mailman will remind you of your lists.freeradius.org mailinglist passwords once every month, although you can disable this if youprefer. This reminder will also include instructions on how tounsubscribe or change your account options. There is also a button onyour options page that will email your current password to you. _______________________________________________ No banners. No pop-ups. No kidding. Make My Way your home on the Web - http://www.myway.com

2 1

Encrypted passwords
by Vishwanath Srikant Pattanshetti 10 Mar '06

10 Mar '06

Hello All I am using Freeradius1.1.0 with Oracle 10 in my project for user authentication. I need to store encrypted passwords in the database - I would be using Java code to access the database for this purpose. However, I will be sending the password in clear text, to the jradius api to form the access request. This may sound strange, but its true. Is there any way, I can support, such a scenario? - ie. Can I instruct FreeRadius to execute some code(java preferably) before comparing the passwords?? Can some one please point me to some documentation? Or advise me, so that I can go ahead in this regard. Thanks in advance. -Vishwa.

2 1

RE: Freeradius-Users Digest, Vol 11, Issue 39
by Atkins, Dwane P 10 Mar '06

10 Mar '06

Thanks for all the input. I have one more question. Is there a way that I can input the start and stop time for user as far as in like an expiration date? Let say you are a contractor and need access for the 5 duty days you are in town. Can I put a config in that says, start on the 1st, end on the 5th? Thanks for all you inputs. Truly helpful. Dwane -----Original Message----- From: freeradius-users-bounces+atkinsd=uthscsa.edu(a)lists.freeradius.org [mailto:freeradius-users-bounces+atkinsd=uthscsa.edu@lists.freeradius.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Friday, March 10, 2006 5:36 AM To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 11, Issue 39 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. RE: freeradius newbie (mnisay) 2. RE: perl scripts (mnisay) 3. Re: Reload on freeradius 1.1.0 (Andr? Lemos) 4. Re: Reload on freeradius 1.1.0 (Andr? Lemos) 5. Re: Reload on freeradius 1.1.0 (Andr? Lemos) 6. Re: Reload on freeradius 1.1.0 (Andr? Lemos) ---------------------------------------------------------------------- Message: 1 Date: Fri, 10 Mar 2006 11:25:30 +0100 From: "mnisay" <mnisay(a)aim-consultants.com> Subject: RE: freeradius newbie To: "'FreeRadius users mailing list'" <freeradius-users(a)lists.freeradius.org> Message-ID: <01c101c6442c$f5b90130$14c9ffd5@billgates> Content-Type: text/plain; charset="windows-1250" how about 1. Is there a good document that I can follow that will give me step-by-step instructions to install freeradius on Fedora 4? I would even do FreeBSD if need be but I am more familiar with the FC 4 processes. yum install freeradius 2. Is there a GUI front-end that will allow us to https into the FreeRadius Server and make changes to the mysql database? google for phpmyadmin and dialupadmin 3. Where would I find the debug documents that I read about when I execute the radtest executable? man radrest -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.375 / Virus Database: 268.2.1/278 - Release Date: 3/9/2006

1 0