March 2006 - Freeradius-Users - lists.freeradius.org

Re: Machine Authecitation with PEAP
by james 09 Mar '06

09 Mar '06

> ------------------------------ > > Message: 6 > Date: Thu, 9 Mar 2006 13:17:48 -0500 > From: "King, Michael" <MKing(a)bridgew.edu> > Subject: Machine Authecitation with PEAP > > Has anyone gotten Machine Authentication with PEAP working? Yes > > radius_xlat: '/usr/bin/ntlm_auth --request-nt-key > --username=boy-it-tel-2528$ --domain=campus --challenge=8498683817c21d86 > --nt-response=c92c > 121419368a6b599e159c9ef21bbc4d98138946d6df29 ' > > Exec-Program: /usr/bin/ntlm_auth --request-nt-key > --username=boy-it-tel-2528$ --domain=campus --challenge=8498683817c21d86 > --nt-response=c92c1 > 21419368a6b599e159c9ef21bbc4d98138946d6df29 > > Exec-Program output: Logon failure (0xc000006d) > > Exec-Program-Wait: plaintext: Logon failure (0xc000006d) >From my experience this means the credentials the machine is sending are wrong or your version of samba is too old - get 3.0.21c (or at least 3.0.21a) Regards, James

1 0

Realm
by José Berenguer 09 Mar '06

09 Mar '06

Hello! If I want to assign a VLAN for group the syntax it would be: DEFAULT Ldap-Group == "STUDENT" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = "81" but if I want to assign VLAN for domain: DEFAULT Realm == aeiou.com Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = "99" it is this correct?? Thanks!!

1 0

freeradius - slow start
by Victor Melnichenko 09 Mar '06

09 Mar '06

I have some problem with my FreeRADIUS server: it's connect to the MySQL very slow :( What i do: 1. $ cd /usr/local/etc/rc.d/ && ./radiusd.sh restart Stopping radiusd. Waiting for PIDS: 30273. Starting radiusd. Thu Mar 9 17:51:52 2006 : Info: Starting - reading configuration files ... 2. In log file i see next: Thu Mar 9 17:51:52 2006 : Info: Core dumps are enabled. Thu Mar 9 17:51:52 2006 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Thu Mar 9 17:51:52 2006 : Info: rlm_sql (sql): Attempting to connect to radius@127.0.0.1:/radius Thu Mar 9 17:51:52 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Thu Mar 9 17:51:52 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Thu Mar 9 17:51:52 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Thu Mar 9 17:51:52 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Thu Mar 9 17:51:52 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Thu Mar 9 17:53:07 2006 : Info: Ready to process requests. Why FreeRADIUS connect to the MySQL at about 75 seconds? -- With Best Regards, Victor V. Melnichenko VVM7-UANIC

2 1

IP address assignment (rlm_ippool)
by Carlo Prestopino 09 Mar '06

09 Mar '06

I want freeRADIUS to assign IP address to authenticated users, so Ive done thefollowing configuration ippool main_pool { # range-start,range-stop: The start and end ip # addresses for the ip pool range-start = 81.174.17.35 range-stop = 81.174.17.63 ...... ...... # session-db: The main db file used to allocate ip's to clients session-db = ${raddbdir}/db.ippool # ip-index: Helper db index file used in multilink ip-index = ${raddbdir}/db.ipindex ...... } Once started, I get back an error from radiusd : rlm_ippool: Failed to open file /etc/raddb/db.ippool: Permission denied radiusd.conf[1468]: main_pool: Module instantiation failed. It seems that the problem is due lack of db.ippool file. I've tried to create it manually, but nothing changed. Is there a way to generate db.ippool file so rlm_ippool can work properly? Thank you in advance, Best Regards, Carlo

2 1

Accounting Cisco VSA attributes
by Caines, Max 09 Mar '06

09 Mar '06

Hi I'm using FreeRadius (0.9.3) with our Cisco wireless APs, and I'd like to save the SSID as part of the accounting record. It comes in as a Cisco-AVPair, as in the log below, so I've turned on cisco_vsa_hack. Because the attribute comes in as Cisco-AVPair = "ssid=name" I'm expecting to get a new attribute named "ssid". However, the preprocess module returns "noop" and the database field ends up blank, so I've got something wrong somewhere. I'd appreciate any assistance. I added this line to "dictionary.cisco" (99 wasn't used elsewhere): ATTRIBUTE ssid 99 string Cisco This is my accounting config: # Pre-accounting. Look for proxy realm in order of realms, then # acct_users file, then preprocess (hints file). preacct { acct_username preprocess suffix files } # Accounting. accounting { sql } And here's the log ("..." where edited): Script started on Thu Mar 09 12:32:16 2006 ccuh# /usr/local/sbin/radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Module: Loaded preprocess preprocess: huntgroups = "/usr/local/etc/raddb/huntgroups" preprocess: hints = "/usr/local/etc/raddb/hints" preprocess: with_ascend_hack = no preprocess: ascend_channels_per_line = 23 preprocess: with_ntdomain_hack = no preprocess: with_specialix_jetstream_hack = no preprocess: with_cisco_vsa_hack = yes Module: Instantiated preprocess (preprocess) Module: Loaded SQL ... sql: accounting_start_query = "INSERT into radacct (RadAcctId, AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay, SSID) values('', '%{Acct-Session-Id}', '%{Acct-Unique-Session-Id}', '%{SQL-User-Name}', '%{Realm}', '%{NAS-IP-Address}', '%{NAS-Port}', '%{NAS-Port-Type}', '%S', '0', '0', '%{Acct-Authentic}', '%{Connect-Info}', '', '0', '0', '%{Called-Station-Id}', '%{Calling-Station-Id}', '', '%{Service-Type}', '%{Framed-Protocol}', '%{Framed-IP-Address}', '%{Acct-Delay-Time}', '0', '%{ssid}')" sql: accounting_stop_query = "UPDATE radacct SET AcctStopTime = '%S', AcctSessionTime = '%{Acct-Session-Time}', AcctInputOctets = '%{Acct-Input-Octets}', AcctOutputOctets = '%{Acct-Output-Octets}', AcctTerminateCause = '%{Acct-Terminate-Cause}', AcctStopDelay = '%{Acct-Delay-Time}', ConnectInfo_stop = '%{Connect-Info}' WHERE AcctSessionId = '%{Acct-Session-Id}' AND UserName = '%{SQL-User-Name}' AND NASIPAddress = '%{NAS-IP-Address}' AND AcctStopTime = 0" ... rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to radius@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql (sql): Connected new DB handle, #0 ... Listening on IP address *, ports 1812/udp and 1813/udp. Ready to process requests. rad_recv: Accounting-Request packet from host 172.25.5.2:21654, id=108, length=332 Acct-Session-Id = "00025FB0" Called-Station-Id = "000d.6548.7960" Calling-Station-Id = "000f.6678.bd74" Cisco-AVPair = "ssid=wolfradiolan" Cisco-AVPair = "nas-location=unspecified" Cisco-AVPair = "vlan-id=37" Cisco-AVPair = "auth-algo-type=mac-address" Cisco-AVPair = "connect-progress=Call Up" Acct-Session-Time = 4273 Acct-Input-Octets = 2494074 Acct-Output-Octets = 25941153 Acct-Input-Packets = 18889 Acct-Output-Packets = 23258 Acct-Terminate-Cause = Lost-Carrier Cisco-AVPair = "disc-cause-ext=No Reason" User-Name = "000f6678bd74" Acct-Status-Type = Stop NAS-Port-Type = Wireless-802.11 Cisco-NAS-Port = "403" NAS-Port = 403 Service-Type = Framed-User NAS-IP-Address = 172.25.5.2 Acct-Delay-Time = 0 modcall: entering group preacct for request 0 radius_xlat: '\.' rlm_attr_rewrite: No match found for attribute User-Name with value '000f6678bd74' modcall[preacct]: module "acct_username" returns ok for request 0 modcall[preacct]: module "preprocess" returns noop for request 0 rlm_realm: No '@' in User-Name = "000f6678bd74", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 0 modcall[preacct]: module "files" returns noop for request 0 modcall: group preacct returns ok for request 0 modcall: entering group accounting for request 0 radius_xlat: '000f6678bd74' rlm_sql (sql): sql_set_user escaped user --> '000f6678bd74' radius_xlat: 'UPDATE radacct SET AcctStopTime = '2006-03-09 12:32:20', AcctSessionTime = '4273', AcctInputOctets = '2494074', AcctOutputOctets = '25941153', AcctTerminateCause = 'Lost-Carrier', AcctStopDelay = '0', ConnectInfo_stop = '' WHERE AcctSessionId = '00025FB0' AND UserName = '000f6678bd74' AND NASIPAddress = '172.25.5.2' AND AcctStopTime = 0' rlm_sql (sql): Reserving sql socket id: 31 rlm_sql (sql): Released sql socket id: 31 modcall[accounting]: module "sql" returns ok for request 0 modcall: group accounting returns ok for request 0 Sending Accounting-Response of id 108 to 172.25.5.2:21654 Finished request 0 ---------------------------------------- Max Caines IT Services, University of Wolverhampton Wolverhampton, West Midlands WV1 1SB Tel: 01902 322245 Fax: 01902 322699

2 1

HTTP to Radius relay, possible?
by hkdio 09 Mar '06

09 Mar '06

I wanna know is it possible to have Http to radius translation feature The conecpt like that, when user login to server/firewall, server will send the radius request to radius server. Than Radius server will try to login a http page by basic authentication (eg: http://user:password@test.com) if success, it will reply certain string and radius will according to string to allow radius user can login or not. -- View this message in context: http://www.nabble.com/HTTP-to-Radius-relay%2C-possible--t1250643.html#a3313… Sent from the FreeRadius - User forum at Nabble.com.

3 2

NAS MAC VAriable
by Alex M 09 Mar '06

09 Mar '06

What is the variable for NAS MAC address, so that I can setup the rule fot mysql to log the MAC address of the NAS when the client sends request

2 1

Machine Authecitation with PEAP
by King, Michael 09 Mar '06

09 Mar '06

Has anyone gotten Machine Authentication with PEAP working? rad_recv: Access-Request packet from host 10.0.1.21:32768, id=2, length=342 User-Name = "host/boy-it-tel-2528.campus.bridgew.edu" Calling-Station-Id = "00-0B-7D-1B-B0-BA" Called-Station-Id = "00-0B-85-5F-66-E0:Wireless@BSC" NAS-Port = 29 NAS-IP-Address = 10.0.1.21 NAS-Identifier = "BUWISM2-1" Airespace-Wlan-Id = 1 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "4000" EAP-Message = 0x020900791900170301006ed6d5858d2d5e437d5127e2f91a69520faa2104d0573c0a1d 098dce6c763982b9a2b160a55541d1fcec125fb106c4668c 0d3d5b4facf2737febb2a5f98c4344d36b9c4fbcf52f2b6d3d613b79f6a123bf30d5e5bc 09d2cf2859aabada6c297a14d782995bce310f879a006e2c6ba0 State = 0x332bd4a26a3495ca8b876c3936b99a50 Message-Authenticator = 0x4fec0b430cc29964546aa3c9fee52d2c Processing the authorize section of radiusd.conf modcall: entering group authorize for request 40 modcall[authorize]: module "preprocess" returns ok for request 40 radius_xlat: '/var/log/freeradius/radacct/10.0.1.21/auth-detail-20060309' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/10.0.1.21/auth-detail-2 0060309 modcall[authorize]: module "auth_log" returns ok for request 40 modcall[authorize]: module "chap" returns noop for request 40 modcall[authorize]: module "mschap" returns noop for request 40 rlm_realm: No '@' in User-Name = "host/boy-it-tel-2528.campus.bridgew.edu", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 40 rlm_eap: EAP packet type response id 9 length 121 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 40 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 modcall[authorize]: module "files" returns ok for request 40 modcall: leaving group authorize (returns updated) for request 40 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 40 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake eaptls_process returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: EAP type mschapv2 rlm_eap_peap: Tunneled data is valid. PEAP: Got tunneled EAP-Message EAP-Message = 0x020900621a0209005d310575b329205687211101eef2ea1463b60000000000000000c9 2c121419368a6b599e159c9ef21bbc4d98138946d6df2900 686f73742f626f792d69742d74656c2d323532382e63616d7075732e627269646765772e 656475 PEAP: Setting User-Name to host/boy-it-tel-2528.campus.bridgew.edu PEAP: Adding old state with c0 be PEAP: Sending tunneled request EAP-Message = 0x020900621a0209005d310575b329205687211101eef2ea1463b60000000000000000c9 2c121419368a6b599e159c9ef21bbc4d98138946d6df2900 686f73742f626f792d69742d74656c2d323532382e63616d7075732e627269646765772e 656475 FreeRADIUS-Proxied-To = 127.0.0.1 User-Name = "host/boy-it-tel-2528.campus.bridgew.edu" State = 0xc0be9e82d71e93ec07c4074441377fb0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 40 modcall[authorize]: module "preprocess" returns ok for request 40 radius_xlat: '/var/log/freeradius/radacct/127.0.0.1/auth-detail-20060309' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/127.0.0.1/auth-detail-2 0060309 modcall[authorize]: module "auth_log" returns ok for request 40 modcall[authorize]: module "chap" returns noop for request 40 modcall[authorize]: module "mschap" returns noop for request 40 rlm_realm: No '@' in User-Name = "host/boy-it-tel-2528.campus.bridgew.edu", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 40 rlm_eap: EAP packet type response id 9 length 98 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 40 users: Matched entry DEFAULT at line 152 modcall[authorize]: module "files" returns ok for request 40 modcall: leaving group authorize (returns updated) for request 40 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 40 rlm_eap: Request found, released from the list rlm_eap: EAP/mschapv2 rlm_eap: processing type mschapv2 Processing the authenticate section of radiusd.conf modcall: entering group MS-CHAP for request 40 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for host/boy-it-tel-2528.campus.bridgew.edu with NT-Password radius_xlat: Running registered xlat function of module mschap for string 'User-Name' radius_xlat: Running registered xlat function of module mschap for string 'NT-Domain' radius_xlat: Running registered xlat function of module mschap for string 'Challenge' mschap2: 31 radius_xlat: Running registered xlat function of module mschap for string 'NT-Response' radius_xlat: '/usr/bin/ntlm_auth --request-nt-key --username=boy-it-tel-2528$ --domain=campus --challenge=8498683817c21d86 --nt-response=c92c 121419368a6b599e159c9ef21bbc4d98138946d6df29 ' Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=boy-it-tel-2528$ --domain=campus --challenge=8498683817c21d86 --nt-response=c92c1 21419368a6b599e159c9ef21bbc4d98138946d6df29 Exec-Program output: Logon failure (0xc000006d) Exec-Program-Wait: plaintext: Logon failure (0xc000006d) Exec-Program: returned: 1 rlm_mschap: External script failed. rlm_mschap: FAILED: MS-CHAP2-Response is incorrect modcall[authenticate]: module "mschap" returns reject for request 40 modcall: leaving group MS-CHAP (returns reject) for request 40 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns reject for request 40 modcall: leaving group authenticate (returns reject) for request 40 auth: Failed to validate the user. Login incorrect: [host/boy-it-tel-2528.campus.bridgew.edu] (from client localhost port 0) PEAP: Got tunneled reply RADIUS code 3 MS-CHAP-Error = "\tE=691 R=1" EAP-Message = 0x04090004 Message-Authenticator = 0x00000000000000000000000000000000 PEAP: Processing from tunneled session code 0x8159120 3 MS-CHAP-Error = "\tE=691 R=1" EAP-Message = 0x04090004 Message-Authenticator = 0x00000000000000000000000000000000 PEAP: Tunneled authentication was rejected. rlm_eap_peap: FAILURE modcall[authenticate]: module "eap" returns handled for request 40 modcall: leaving group authenticate (returns handled) for request 40 Sending Access-Challenge of id 2 to 10.0.1.21 port 32768 Framed-IP-Address = 255.255.255.254 Framed-MTU = 576 Service-Type = Framed-User EAP-Message = 0x010a00261900170301001b2b70132064acd535306c54d37e22679711096bbe69821ed0 d2af6e Message-Authenticator = 0x00000000000000000000000000000000 State = 0xe08ef92e3bc5a82f8011159dff79c57f Finished request 40 Going to the next request Waking up in 6 seconds... rad_recv: Access-Request packet from host 10.0.1.21:32768, id=3, length=259 User-Name = "host/boy-it-tel-2528.campus.bridgew.edu" Calling-Station-Id = "00-0B-7D-1B-B0-BA" Called-Station-Id = "00-0B-85-5F-66-E0:Wireless@BSC" NAS-Port = 29 NAS-IP-Address = 10.0.1.21 NAS-Identifier = "BUWISM2-1" Airespace-Wlan-Id = 1 Service-Type = Framed-User Framed-MTU = 1300 NAS-Port-Type = Wireless-802.11 Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = "4000" EAP-Message = 0x020a00261900170301001b59c0444996b63b6d1b27e0dff445c27caccb8c1f8d17fe91 0776d1 State = 0xe08ef92e3bc5a82f8011159dff79c57f Message-Authenticator = 0x0fccb825852b2ffc878a6a3a2cf5d31a Processing the authorize section of radiusd.conf modcall: entering group authorize for request 41 modcall[authorize]: module "preprocess" returns ok for request 41 radius_xlat: '/var/log/freeradius/radacct/10.0.1.21/auth-detail-20060309' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/10.0.1.21/auth-detail-2 0060309 modcall[authorize]: module "auth_log" returns ok for request 41 modcall[authorize]: module "chap" returns noop for request 41 modcall[authorize]: module "mschap" returns noop for request 41 rlm_realm: No '@' in User-Name = "host/boy-it-tel-2528.campus.bridgew.edu", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 41 rlm_eap: EAP packet type response id 10 length 38 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 41 users: Matched entry DEFAULT at line 152 users: Matched entry DEFAULT at line 171 modcall[authorize]: module "files" returns ok for request 41 modcall: leaving group authorize (returns updated) for request 41 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 41 rlm_eap: Request found, released from the list rlm_eap: EAP/peap rlm_eap: processing type peap rlm_eap_peap: Authenticate rlm_eap_tls: processing TLS eaptls_verify returned 7 rlm_eap_tls: Done initial handshake eaptls_process returned 7 rlm_eap_peap: EAPTLS_OK rlm_eap_peap: Session established. Decoding tunneled attributes. rlm_eap_peap: Received EAP-TLV response. rlm_eap_peap: Tunneled data is valid. rlm_eap_peap: Had sent TLV failure. User was rejcted rejected earlier in this session. rlm_eap: Handler failed in EAP/peap rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 41 modcall: leaving group authenticate (returns invalid) for request 41 auth: Failed to validate the user. Login incorrect: [host/boy-it-tel-2528.campus.bridgew.edu] (from client private-network-1 port 29 cli 00-0B-7D-1B-B0-BA) Delaying request 41 for 1 seconds Finished request 41

1 0

RE: Network of NAS
by Jonathan De Graeve 09 Mar '06

09 Mar '06

Using 1.0.5 J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 Jonathan.de.graeve(a)imelda.be > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens David > Roze > Verzonden: donderdag 9 maart 2006 18:43 > Aan: FreeRadius users mailing list > Onderwerp: RE: Network of NAS > > Are you using version 1.1.0? > I used other versions before but never tried to put the list of NAS in > the database. > Thanks > > David > > > > > -----Original Message----- > From: freeradius-users-bounces+droze=digiweb.ie(a)lists.freeradius.org > [mailto:freeradius-users-bounces+droze=digiweb.ie@lists.freeradius.org] > On Behalf Of Jonathan De Graeve > Sent: 09 March 2006 13:21 > To: FreeRadius users mailing list > Subject: RE: Network of NAS > > It works with me > > J. > > -- > Jonathan De Graeve > Network/System Administrator > Imelda vzw > Informatica Dienst > +32 15/50.52.98 > jonathan.de.graeve(a)imelda.be > > --------- > Always read the manual for the correct way to do things because the > number of incorrect ways to do things is almost infinite > --------- > > > -----Oorspronkelijk bericht----- > > Van: freeradius-users- > > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > > [mailto:freeradius-users- > > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens > David > > Roze > > Verzonden: donderdag 9 maart 2006 13:36 > > Aan: FreeRadius users mailing list > > Onderwerp: Network of NAS > > > > Hi everyone, > > > > I have all my NAS in the same subnet and would like to add the whole > > range in the list of NAS, not every single IP. > > > > It seems it works when doing this in clients.conf, but not in the > Mysql > > NAS table. > > Is this a bug or have I done something wrong? > > > > Clients.conf: > > client 10.230.0.0/24 { > > secret = secret > > shortname = test > > } > > > > Id nasname shortname type ports secret > > community > > 7 10.230.0.0/24 10.230.0.0/24 cisco NULL secret NULL > > > > Thanks > > David > > > > > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Accounting
by Santiago Balaguer García 09 Mar '06

09 Mar '06

Hi, I do proxy RADIUS correctly. so a radius account can be connected by different NAS'es. Each NAS is owned by a Hotspot Operator. I have different costs of roaming service depending on the Hotspot Operator. How can I controll the NAS of a hotspot Operator (not is valid the nasipaddress) ? How can I include the 'WISPr Operator' or 'WISPr Location' attribute in my Request? An I supposed that these attributes are not supported by radacct table. Is it true?? _________________________________________________________________ Horóscopo, tarot, numerología... Escucha lo que te dicen los astros. http://astrocentro.msn.es/

1 0