December 2007 - Freeradius-Users - lists.freeradius.org

freeradius + OpenWrt
by Sergio Belkin 26 Dec '07

26 Dec '07

Hi, I want to know is someone is using freeradius with APs with OpenWRT installed. I'd like to hear experiences about it. Thanks in advance. -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 1

Mysql error
by Pablo Lucchetti 25 Dec '07

25 Dec '07

Hi, I've an error with mysql, I think is php mysql client. I did upgrade to php5 but the erros remains the same. Mysql is Ver 14.12 Distrib 5.0.32, for pc-linux-gnu (i486) using readline 5.2 rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked rlm_sql (sql): Attempting to connect to root@localhost:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_mysql #0 rlm_sql_mysql: Starting connect to MySQL server for #0 rlm_sql_mysql: Couldn't connect socket to MySQL server root@localhost:radius rlm_sql_mysql: Mysql error 'Client does not support authentication protocol requested by server; consider upgrading MySQL client' rlm_sql (sql): Failed to connect DB handle #0 rlm_sql (sql): starting 1 rlm_sql (sql): starting 2 rlm_sql (sql): starting 3 rlm_sql (sql): starting 4 rlm_sql (sql): Failed to connect to any SQL server. Module: Instantiated sql (sql) Module: Loaded Acct-Unique-Session-Id acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-Address, NAS-Port" Module: Instantiated acct_unique (acct_unique) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. Any help? Thanks in advance Pablo

5 17

User with ntdomain authenticate with freeRADIUS + AD
by Hangjun He 24 Dec '07

24 Dec '07

Hi, freeRADIUS version 1.1.6. When I use DOMAIN\user format, Can work. When I use user@DOMAIN format, Can not work. Why? Thanks! John --------------------------------- 雅虎邮箱传递新年祝福，个性贺卡送亲朋！

2 1

Looking for feedback
by Geoffroy ARNOUD 23 Dec '07

23 Dec '07

Hi all, First I apologize, because the question I am about to ask is not directly linked to FreeRADIUS. I am a FreeRADIUS user, and I am looking for feedback regarding the NAS all of you use. Actually, I am looking for a NAS, able to manage access for several Wifi hotspot (> 500 hotspots, > 5000 users). The NAS would be the gateway, restricting user to access Internet, by redirecting users' traffic to a Web portal. EAP must alos be supported transparently (the NAS would act as a RADIUS proxy, between APs and FreeRADIUS, but would open the connection transparently). I took a look at Coova, but it seems to me that it is not adpated for a centralized solution, where each hotspot has its own DHCP server. All options are opened for me (opensource or manufacturer), so don't hesitate to reply to me (directly, because this list is not the purpose of my request). Any feedback woul be appreciated. Many thanks Daniel

3 4

RE: freeradius and active directory
by Josh Howlett 23 Dec '07

23 Dec '07

> Using Ntlm_auth from the samba server is not an option. I > want to access the AD with the ldap protocol for > compatibility reasons. You can't. > Next, I want to place the logged on > user is a specific VLAN. So I have to retrieve the user's > vlan from the AD. Is there any way to configure freeradius to > do so? Yes, see the docs. > Can you please provide me with the necessary steps to accomplish this? Ditto. josh. JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxfordshire. OX11 0SG

3 4

Error building rpm
by Jim McIver 22 Dec '07

22 Dec '07

I'm a newbie. I'm trying to build the FreeRadius 1.1.7 rpm for SLES 10 OES so I can interface the Radius with Netware 6.5 eDirectory. I ran rpmbuild -ba SPEC/freeradius.spec and added all the dependencies and ran the command again. It goes along for a while and now I get: Checking for unpackaged file(s): /usr/lib/rpm/check-files /var/tmp/freeradius-1.1.7-build error: Installed (but unpackaged) file(s) found: /etc/raddb/postgresqlippool.conf RPM build errors: Installed (but unpackaged) file(s) found: /etc/raddb/postgresqlippool.conf Any thoughts, or is there an easier way? Thx, -Jim McIver

2 2

Re: reply from home server
by Дмитрий 21 Dec '07

21 Dec '07

> Sure! Send us patch! > > Alan DeKok. In file src/main/request_list.c string 1105 will be: client_name(request->proxy->dst_ipaddr), and string 1106 will be: request->packet->dst_port); Please, send it in cvs. Thanks! Сысоев Дмитрий Александрович Сетевой администратор Отдел информационных технологий ЗАО ''Ульяновская Сотовая Связь'' Тел.: +7 (901) 947 17 31 Моб.: +7 (901) 947 02 71 Факс: +7 (8422) 43 51 99

3 3

Unknown CA
by Gaurav Bandekar 21 Dec '07

21 Dec '07

Hi, I have configured the radius server to authenticate EAP-PEAP-MSCHAPv2 I have followed the steps mentioned in the following link. http://wiki.freeradius.org/WPA_HOWTO But the client is not able to authenticate. I am attaching the radiusd log. The log shows a Unknown CA error. Can anyone help??? Thanks & Regards Gaurav

1 0

How to configure RADIUS server to test EAP-SIM
by Raghavendra. S 21 Dec '07

21 Dec '07

Hi All, I want to use RADIUS server to test EAP-SIM. I would like to know how to configure eap.conf, users, radiusd.conf and clients.conf to support EAP-SIM. Also plz let me know if I have to configure some more files. Actually I want to test wpa supplicant for EAP-SIM. So I need to configure RADIUS server. I am working on snapshot of freeradius, that is * freeradius-snapshot-20051130*. radiusd(after) version-1.1.0. -- Regards & Thanks Raghavendra. S

3 4

Re: freeradius and active directory
by Kenneth Marshall 20 Dec '07

20 Dec '07

On Thu, Dec 20, 2007 at 09:44:25PM +0100, Rutger Beyen wrote: > Hello, > I'm very glad I found a list like this. I hope some of you can help me with > this problem. > > I want to set up a project with 802.1X, so users accessing my cisco switch > first have to log on. I found out that I could use freeradius for this. But > what I want to do is verify if the credentials entered by the user (on a > WinXP) are correct, by checking with the Active Directory on a > Win2003Server. Using Ntlm_auth from the samba server is not an option. I > want to access the AD with the ldap protocol for compatibility reasons. > Next, I want to place the logged on user is a specific VLAN. So I have to > retrieve the user's vlan from the AD. Is there any way to configure > freeradius to do so? I would like to base the vlan on the OU of the person > in the AD. > Can you please provide me with the necessary steps to accomplish this? > > > Thank you very much, > Rutger Rutger, I think that if you do not use ntlm_auth, you will need a 3rd party supplicant for the Windows boxes. You probably will need to use ntlm_auth and also bind to AD using the LDAP protocol to lookup the OU/VLAN. Ken

1 0