March 2007 - Freeradius-Users - lists.freeradius.org

802.1x->radius VLAN assignment
by Ryan Kramer 08 Mar '07

08 Mar '07

Hello! I am working on implementing freeradius with an aruba Wifi controller connected to freeradius, which then talks to AD. (The linux box is on the AD domain) Anyway, we need to pull the vlan identifier through from an AD group, but it appears FreeRadius does not pull that through the request field. Anyone have any thoughts? We know this is possible through the Microsoft radius solution, but are having a tough time of it without using that instead. Thanks! Ryan Kramer

2 1

Simple EAP flow support!
by Diameter K 08 Mar '07

08 Mar '07

Hi All, I want to configure free-radius to handle a simple EAP described below. 1. Radius receives a IDENTITY message. The IDENTITY message contains a encrypted certificate. 2. The server decrypts and validates the Certificate and send out a EAP-Success or EAP-Failure. Is there any way i can configure freeradius to achieve this flow or would i have to modify the code. As i understand the standard flows are much more complicated(with challenge), which i dont want. Thanks & Regards, Shiv

3 3

Re:Re: bitrary dynamic Nas-Port
by MSamir 08 Mar '07

08 Mar '07

msammir wrote: > Hello all, > i have the same problem as in this mail in brife > i use Cisco router and need to auth user over ppoe and i get the same > //NAS-Port// for all users > i am not expert in freeradius so can pleas someone help me use > attr_rewrite to go over this probelm > You want to re-write NAS port to what, exactly? > Alan DeKok. i want to re-write Nas-Port to be something Unique like Calling-Station-Id as i use PPPOE th scenario of my probelm in IPPool as i get the same NAS-Port for all user radius give the all the same IP. Ip_pool keys of the combination of nasip/nasport to determine the UNIQUE user and as my NAS send over a not unique nasport for each user. radius see them all as one user and give them all the same IP if u have othere idea than re-write Nas-Port it will be great. Thanks --------------------------------- Never miss an email again! Yahoo! Toolbar alerts you the instant new Mail arrives. Check it out.

2 5

radiusd can't close user open session in sql
by satish patel 08 Mar '07

08 Mar '07

dear all i have some problem i have configured simulteneous-use attributes in sql but some time network disconnect or any problem user got disconnect but his session still open in sql databases so that next time when he try he got error your are still login means simulteneous-use attribute not allow to that user this is my problem caz i am wireless ISP and i have many time network problem so user disconnect accidently so is there any feature which is clear last session in SQL database ??? $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

OATH Support?
by Andreas Anderson 08 Mar '07

08 Mar '07

Hi, is there OATH Support in freeradius to use tokens like http://www.aladdin.com/etoken/otp.asp?lid=eToken_OTP&lpos=products_menu#NG-… ? Are there any other supported OTP tokens? I read somewhere that Cryptocard is supported; but i never could get it to work nor find the tools to extract the DES key from the *.tok file Regards, Andreas _________________________________________________________________ Find the coolest online games @ http://xtramsn.co.nz/gaming

2 1

radius doesn't start up correct
by Jan Lausch 08 Mar '07

08 Mar '07

Hi, I'm so sorry to bother you again but this time I really can't figure out what's happening. when I try to start freeradius manually, it just stops in the middle of reading the config files: /usr/local/etc/raddb# radiusd -f Tue Mar 6 19:31:28 2007 : Info: Starting - reading configuration files ... ...and nothing happens any more, it just hangs. If I try -x or -xx, I end up with a segfault, so this is no help: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Segmentation fault I also tried starting via radwatch and it realizes something isn't right and restarts radiusd every 15 secs. I have it configured for use with mysql and have the database populated, but I guess it doesn't even connect... Is the hanging caused by the same problem as the segfault? What could that be? Any help qould be appreciated, thanks. Jan

6 10

freeradius User session is open but user not login
by satish patel 08 Mar '07

08 Mar '07

Dear I have faceing this problem since log time i have cisco VPDN and user login on cisco and authenticate from freeradius-1.1.4 i have configure simultenous-use attribute for multilogin privention but some time when user session open in radius databases ( i am useing MSSQL ) then user try for login and he / she got error regarding already login and authentication deny also i have set Idle-Timeout = 600 but still face same problem how to crear opened session in mssql database ??? $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 2

SIP/RADIUS/Kerberos authentication
by John T. Guthrie 08 Mar '07

08 Mar '07

Hello all, I am trying to set up an Asterisk SIP server. I would like this server to be able to authenticate against our RADIUS server. However, the RADIUS server authenticates against our Kerberos server by default. Is there any way to make this work given that most SIP clients seem to use the digest authentication method? Thanks. -- John Guthrie guthrie(a)counterexample.org

2 1

Q perl-interface documentation?
by Jochen Schäfer 08 Mar '07

08 Mar '07

Dear All, is there any documentation outside how the perl.rlm is implemented in freeradius? I'm special interested in how to get external parameters like check-items, reply-items, user-name, user-password into the perl program. And how to script valid return codes and return strings. Thanks in advance! Jochen

2 3

Re: wrong user name is stored in mysql radacct table
by Zeli Kartzman 07 Mar '07

07 Mar '07

>Message: 2 >Date: Wed, 07 Mar 2007 14:28:07 +0100 >From: Alan DeKok <aland(a)deployingradius.com> >Subject: Re: wrong user name is stored in mysql radacct table >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <45EEBDE7.7010509(a)deployingradius.com> >Content-Type: text/plain; charset=ISO-8859-1 > >Zeli Kartzman wrote: >> so what you're saying is that effectively a user can get around the >> simultaneous user limit and login as many times as they want -- all >>they >> have to do is type a new outside identity each time and as long as >>the >> tunneled PEAP identity is correct they will be allowed to login? > > If you configure it that way, yes. > > The server *can* be configured to enforce simultaneous login limits >no >matter what the users type into the outer session. The docs don't >describe how to do this, but they DO describe how to tie the inner & >outer sessions together, and also how to enforce simultaneous login. > can you give me a pointer to which docs to look at? thanks bz

1 1