March 2007 - Freeradius-Users - lists.freeradius.org

Access-Challenge with Avaya
by Romain Mercier 14 Mar '07

14 Mar '07

Hello ! I am having troubles with Avaya P334T switch. I am trying to authenticate users directly connected to ports of the switch. I have configured the switch well I think because the acces-request is sent to the radius but then the radius send an access-challenge to the switch and nothing is done after. There is no answer of the switch and the user cannot access the network but it is not rejected by the radius. I think the problem come from the switch because authentication on a wireless access-point connected on this switch works fine. Did anybody encounter the same problem? Any idea? Thanks for your help ----- Romain Mercier - Technicien réseau et sécurité Université d'Angers - CRI Service Systèmes & Réseaux 40 rue de Rennes 49035 Angers Cedex - France

2 3

Attributes of a realm
by Santiago Balaguer García 14 Mar '07

14 Mar '07

1 0

Kreberos module config
by John T. Guthrie 13 Mar '07

13 Mar '07

Hello all, I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet: static CONF_PARSER module_config[] = { { "keytab", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL, NULL }, { "service_principal", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,service_princ), NULL, NULL }, { NULL, -1, 0, NULL, NULL } }; Does this mean that the kerberos module can be configured with both a keytab and a service principal? (In which case, is the default service principal the string "host"?) Thanks. -- John Guthrie guthrie(a)counterexample.org

2 3

Operators "+=" don�t work !!!
by Internet-Wifi Operador 13 Mar '07

13 Mar '07

I have a s sqlcounter Like Max-All-Session until 2 or 3 weeks ago when I did use this with '+=' operator it work prefect because add some time to the user. 2 or 3 days ago it stop to work Somebody any Idea? Fabián _________________________________________________________________ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/

1 0

freeradius with mssql performance
by satish patel 13 Mar '07

13 Mar '07

Dear guys anybody idea of freeradius with MSSQL compatibliy or performance issue ......which is best of method with radius MySql or MSSQL which one is best for radius performance $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 1

Re: EAP-TTLS outer identity & accounting
by Sam Schultz 13 Mar '07

13 Mar '07

On Tue, 13 Mar 2007 11:58:51 -0500 Alan DeKok <aland(a)deployingradius.com> wrote: >Sam Schultz wrote: >> I'm currently using EAP-TTLS & PAP (via SecureW2) to authorize & >> authenticate wireless clients against specific realms. Users are >> able to authorize & authenticate properly, but the username in >> incoming accounting replies come in as 'anonymous@<realmname>'. > > You can set "User-Name" in the Access-Accept, and the NAS should > use that in Accounting-Requests. > This should be solvable by adding something like 'User-Name = %{User-Name}' to the DEFAULT entries in the users file, correct? >> I had this spitting out proper accounting information before, >> and haven't changed any configuration options since putting it >> into production. The only conclusions I can come up with are: >> >> 1) The access points are buggy (3com OfficeConnects) > > No. > >> 2) FreeRADIUS doesn't keep track of connections properly -- >either >> because it doesn't bother to replace anonymous entries with >the >> previously seen identity for the given ID, or I haven't >> configured it to do so. > > No. > > The problem is that the supplicant is sending "anonymous@..." as >the >User-Name. > > Alan DeKok. >-- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html -- Click for free info on online degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S7YhBAO0BOTJUnxxWHHvlnY0O/

2 1

EAP-TTLS outer identity & accounting
by Sam Schultz 13 Mar '07

13 Mar '07

I'm currently using EAP-TTLS & PAP (via SecureW2) to authorize & authenticate wireless clients against specific realms. Users are able to authorize & authenticate properly, but the username in incoming accounting replies come in as 'anonymous@<realmname>'. I had this spitting out proper accounting information before, and haven't changed any configuration options since putting it into production. The only conclusions I can come up with are: 1) The access points are buggy (3com OfficeConnects) 2) FreeRADIUS doesn't keep track of connections properly -- either because it doesn't bother to replace anonymous entries with the previously seen identity for the given ID, or I haven't configured it to do so. I would be inclined to think it was the latter, except that the configuration was working properly previously, and the Accounting-Request packet itself contains anonymous@realm instead of the actual authenticated user. Anyone have any suggestions, or can anyone at least point me to any documentation on this? Click for free info on online masters degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S74pwqkZuxyoxY1QhnF9TgBDK/

2 1

pptp + vpn + freeradius Acct-Status-Type Alive
by "Jóhann B. Guðmundsson" 13 Mar '07

13 Mar '07

Is it possible to enable Acct-Status-Type Alive for pptp vpn? If so how.. Best regards Jóhann B.

2 3

PPTP Vpn Client & Static route
by Gabriele Moroni 13 Mar '07

13 Mar '07

Hi all, I have a quesiton... I use freeradius v1.1.5 to authenticate pptp vpn users. Someone know what's the best way to destribute a list of route to insert on the clients routing table ? I have WinXp SP2 Clients and also MAC OSX Tnx for an answer Bye Gabriele ----------------------------------- Gabriele Moroni Universita` della Svizzera italiana Servizi informatici / TI-EDU Galleria 2 CH-6928 Manno (Switzerland) Tel: +41 58 666 66 54 E-mail: gmoroni(a)ti-edu.ch

1 0

Help with freeradius 1.1.5
by adreas polyxronopoulos 13 Mar '07

13 Mar '07

Hi list , I have ubuntu 6.06 LAM and i compile freeradius-1.1.5 . In compilation everthing was ok. But whe i ranning freeradius : radiusd -X i get the following output : can anyone help me ? I don't understand what's happening. root@apolyxronolamp@dyndns:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** double free or corruption (fasttop): 0x80104ee8 *** Aborted ___________________________________________________________ All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine http://uk.docs.yahoo.com/nowyoucan.html

3 8