March 2006 - Freeradius-Users - lists.freeradius.org

RE: Network of NAS
by David Roze 09 Mar '06

09 Mar '06

Are you using version 1.1.0? I used other versions before but never tried to put the list of NAS in the database. Thanks David -----Original Message----- From: freeradius-users-bounces+droze=digiweb.ie(a)lists.freeradius.org [mailto:freeradius-users-bounces+droze=digiweb.ie@lists.freeradius.org] On Behalf Of Jonathan De Graeve Sent: 09 March 2006 13:21 To: FreeRadius users mailing list Subject: RE: Network of NAS It works with me J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst +32 15/50.52.98 jonathan.de.graeve(a)imelda.be --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite --------- > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens David > Roze > Verzonden: donderdag 9 maart 2006 13:36 > Aan: FreeRadius users mailing list > Onderwerp: Network of NAS > > Hi everyone, > > I have all my NAS in the same subnet and would like to add the whole > range in the list of NAS, not every single IP. > > It seems it works when doing this in clients.conf, but not in the Mysql > NAS table. > Is this a bug or have I done something wrong? > > Clients.conf: > client 10.230.0.0/24 { > secret = secret > shortname = test > } > > Id nasname shortname type ports secret > community > 7 10.230.0.0/24 10.230.0.0/24 cisco NULL secret NULL > > Thanks > David > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

login problems
by MHumphries＠delcomp.net 09 Mar '06

09 Mar '06

i am seeing problems with login in to the network using freeradius. the errors that i am seeing are duplicate entry errors. i have attached a copy of the radius.log file. i have cleared the database of all open sessions and that did not help. i am not sure what else to do. i also noticed that i am no longer seeing anything in the failed logins page on dialup admin. kinda wierd, but anyway here is the log if any one can help i would be eternally happy Thu Mar 9 08:55:30 2006 : Info: rlm_radutmp: Login entry for NAS 192.168.200.1 port 26 duplicate Thu Mar 9 08:55:31 2006 : Auth: Login OK: [alanpickl/*******] (from client DSNetPM2 port 32 cli 9067536316) Thu Mar 9 08:56:04 2006 : Info: rlm_radutmp: Login entry for NAS DSNetPM2 port 32 duplicate Michael J. Humphries Network Engineer Delcomp/SOFTEK 1431 N. 26th Street Escanaba, MI 49829 Phone: 906-786-3583, ext 39 Fax: 906-786-4300

1 0

RE: Network of NAS
by Jonathan De Graeve 09 Mar '06

09 Mar '06

It works with me J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst +32 15/50.52.98 jonathan.de.graeve(a)imelda.be --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite --------- > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens David > Roze > Verzonden: donderdag 9 maart 2006 13:36 > Aan: FreeRadius users mailing list > Onderwerp: Network of NAS > > Hi everyone, > > I have all my NAS in the same subnet and would like to add the whole > range in the list of NAS, not every single IP. > > It seems it works when doing this in clients.conf, but not in the Mysql > NAS table. > Is this a bug or have I done something wrong? > > Clients.conf: > client 10.230.0.0/24 { > secret = secret > shortname = test > } > > Id nasname shortname type ports secret > community > 7 10.230.0.0/24 10.230.0.0/24 cisco NULL secret NULL > > Thanks > David > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Network of NAS
by David Roze 09 Mar '06

09 Mar '06

Hi everyone, I have all my NAS in the same subnet and would like to add the whole range in the list of NAS, not every single IP. It seems it works when doing this in clients.conf, but not in the Mysql NAS table. Is this a bug or have I done something wrong? Clients.conf: client 10.230.0.0/24 { secret = secret shortname = test } Id nasname shortname type ports secret community 7 10.230.0.0/24 10.230.0.0/24 cisco NULL secret NULL Thanks David

1 0

post proxy problem
by VannMann32 . 09 Mar '06

09 Mar '06

Hi ! I'm trying to set up Freeradius (1.1.0) to proxy ms-chap-v2 and when I get the "accept" from ms-win2k3-ias server, then i want to assign a static ip address. Reading the doc/proxy file, i read that the user file is processed as usual after accept is received ms radius server. users : DEFAULT Service-Type == Framed-User, User-Name == "username" Framed-IP-Address = 192.168.1.100 Running radius in debug mode i alway get this : Error: Warning: Found 2 auth-types on request for user 'username@domain' Is it possible to assign a ip address after a ack (accept) is received from the proxy radius server ? If yes, anybody have a config example for me ?

2 4

RE: mysql 4.1.0 can not run normally in Freeradius 1.0.5
by yao guoxian 08 Mar '06

08 Mar '06

>Are you sure that you have compiled FR with mysql support ? >Recompile it >with sql_mysql driver and it should work. I am not family with FR. I just use ./configure make make install Howerver when I input : radiusd -X The same error appears. Is it the correct way to recompile FR? If not , will you please tell me the correct way?

1 0

accounting of MAC of the NAS
by Alex M 08 Mar '06

08 Mar '06

Hi I've noticed while running in debug mode, I can see the MAC of the NAS, but when I go to the Accounting logs (that are stored in MySQL) I don't see any place for MAC of the NAS, it only has the space for NAS IP. So is it possible to make freeradius to log the MAC address of the nas too? Thanks!

2 4

nas table in SQL backend
by trs 08 Mar '06

08 Mar '06

The SQL scripts have a comment for the nas table that says it isn't used by freeradius. Is this still the case? How is it populated otherwise?

2 3

Cert Generation Script
by Stephen Walsh 08 Mar '06

08 Mar '06

Apologies if this is off-topic, but for those that may need it, I've written a small bash script (called cascript) to extend the certificate generation script supplied with FR (CA.all). It was written as part of the EDUROAM project in Australia (http://www.eduroam.edu.au) and can be downloaded from http://www.eduroam.edu.au/tech.index.html Please feel free to test it and let me know (off list, of course) if you have any problems with it. many thanks Stephen Walsh s.walsh(a)signadou.acu.edu.au Client Support Officer (Technology) Australian Catholic University (Limited) PO Box 256, Dickson ACT 2602 Phone: +61 2 6209 1133 Fax: +61 2 6209 1179 Mobile: +61 419 496796 +++++++++++++++++++++++++++++++++++++++++++++++++ CRICOS Registration: 00004G, 00112C, 00873F, 00885B ABN 15 050 192 660 +++++++++++++++++++++++++++++++++++++++++++++++++

2 2

RE: eap don't work
by pelusa vali 08 Mar '06

08 Mar '06

first of all, thanks so much alan for your quick response >Hi, > > hi everybody, i have problems using freeradius 1.0.5, i cann't get it >works > > as i hope. well i installed freeradius in my server and tried to see if > > clients can authenticate, so first tried test over server, my ip is > > 192.168.10.1, i generate certificates to use TLS. > > > > this is my users file: > > > > "mec01" Auth-Type := EAP > >dont do this. just dont do this at all. read the docs. > excuse me, i read many tutorials and all of them says this is correct, so please could you refer me to right doc?? may be freeradius docs? exactly which? and again thanks for your answer. _________________________________________________________________ Charla con tus amigos en línea mediante MSN Messenger: http://messenger.latam.msn.com/

4 3