March 2007 - Freeradius-Users - lists.freeradius.org

multiple passwords for the same user
by Kenneth Penza 05 Mar '07

05 Mar '07

People, I am new to freeradius and I need to implement the following setup. User with username bob, has to two passwords pass1 and pass2. I want him to authenticate with either one of them, i.e. if he enters username bob and pass1 he is authenticated without the need to enter pass2. How can I implement this in freeradius. Thanks in advance for your help Kenneth ____________________________________________________________________________________ Never miss an email again! Yahoo! Toolbar alerts you the instant new Mail arrives. http://tools.search.yahoo.com/toolbar/features/mail/

2 3

Re: Radius & Client same server
by Abdul 05 Mar '07

05 Mar '07

HI, I am sure i do not have any other radius server running on the same machine. But when i checked the port 1812 and 1813 it is used by MVTS but i know well MVTS is client which will send info and receive info to radius using this port. Here is the out put of screen may be it will help to get issue. read_config_files: reading clients read_config_files: reading realms There appears to be another RADIUS server running on the authentication port 1812 [root@SP5081 root]# netstat -anp | grep 1812 udp 0 0 127.0.0.1:1812 0.0.0.0:* 876/mp_kerneld.x [root@SP5081 root]# netstat -anp | grep 1813 udp 0 0 127.0.0.1:1813 0.0.0.0:* 876/mp_kerneld.x [root@SP5081 root]# Where mp_kerneld.x is the kernel of MVTS. Regards --------------------------------- Expecting? Get great news right away with email Auto-Check. Try the Yahoo! Mail Beta.

2 1

bitrary dynamic Nas-Port
by mohamed sammir 05 Mar '07

05 Mar '07

Hello all, i have the same problem as in this mail in brife i use Cisco router and need to auth user over ppoe and i get the same NAS-Port for all users i am not expert in freeradius so can pleas someone help me use attr_rewrite to go over this probelm http://lists.freeradius.org/pipermail/freeradius-users/2004-March/029671.ht… Thanks --------------------------------- Any questions? Get answers on any topic at Yahoo! Answers. Try it now.

2 1

PIN generation
by funmilola david 05 Mar '07

05 Mar '07

hi all, I would like to use 16-digit PIN numbers for my username and password, am completely lost as to what to do. How do i implement this with freeradius thanks David freeradius-users-request(a)lists.freeradius.org wrote: Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. FR log (PD) 2. bitrary dynamic Nas-Port (mohamed sammir) 3. Radius & Client same server (Abdul) 4. RE: Radius & Client same server (Marwan Sultan) 5. Re: Radius & Client same server (Peter Nixon) 6. multiple passwords for the same user (Kenneth Penza) 7. Support of MSCHAPV2 over EAP-TTLS (awaneesh kumar) ---------------------------------------------------------------------- Message: 1 Date: Sun, 04 Mar 2007 12:39:33 +0000 From: PD Subject: FR log To: "FreeRadius users mailing list" Message-ID: Content-Type: text/plain; charset=ISO-8859-1 Dearl Folks, still continuing our previous box... FBSD 6.2 and FR install from ports my /usr/local/etc/raddb/radiusd.conf contain : . logdir=/var/log . logfile=${logdir}/radius.log . log_auth_badpass=yes log_auth_goodpass=yes . but.. our /var/log/radius.log only contain : Sat Mar 3 14:56:48 2007 : Info: Using deprecated naslist file. Support for this will go away soon. Sat Mar 3 14:56:48 2007 : Info: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Sat Mar 3 14:56:48 2007 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Sat Mar 3 14:56:48 2007 : Info: rlm_sql (sql): Attempting to connect to sentral@localhost:/sentral Sat Mar 3 14:56:48 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #0 Sat Mar 3 14:56:48 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #1 Sat Mar 3 14:56:48 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #2 Sat Mar 3 14:56:48 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Sat Mar 3 14:56:48 2007 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Sat Mar 3 14:56:48 2007 : Info: Ready to process requests. nothing else... The questions is... why I can not see all login with good and or bad pass on the above file ? TIA PD ------------------------------ Message: 2 Date: Sun, 4 Mar 2007 06:54:19 -0800 (PST) From: mohamed sammir Subject: bitrary dynamic Nas-Port To: freeradius-users(a)lists.freeradius.org Message-ID: <809154.28124.qm(a)web50208.mail.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" Hello all, i have the same problem as in this mail in brife i use Cisco router and need to auth user over ppoe and i get the same NAS-Port for all users i am not expert in freeradius so can pleas someone help me use attr_rewrite to go over this probelm http://lists.freeradius.org/pipermail/freeradius-users/2004-March/029671.ht… Thanks --------------------------------- Any questions? Get answers on any topic at Yahoo! Answers. Try it now.

1 0

Error from first execution
by Asep Samsul 05 Mar '07

05 Mar '07

Hello All, I've already installed freereadius-1.1.4 with Linux Slackware 10.2. but when i'd try to run... radiusd: error while loading shared libraries: libradius-1.1.4.so: cannot open shared object file: No such file or directory so , my lib PATH is ok : root@radius:~# locate libradius-1.1.4.so /usr/local/lib/libradius-1.1.4.so what is the problem. if i tried install version 1.1.2, that is ok, no problem. Please help me... Thanks ASL

1 0

Radius & Client same server
by Abdul 04 Mar '07

04 Mar '07

Hi all, Can we put radius and client on the same machine? I installed MVTS demo and with freeradius all configured well but when i am starting radius i am getting the following error message There appears to be another RADIUS server running on the authentication port 1812 So just i want to be sure if client and radius can be installed on same server, or is there any special configuration for this. Regards Abdul --------------------------------- Be a PS3 game guru. Get your game face on with the latest PS3 news and previews at Yahoo! Games.

3 2

vista support
by Ramazan Ulker 04 Mar '07

04 Mar '07

Hi Peap, tls and eap-md5 work well for xp clients but peap and eap-md5 fail for vista client for version 1.1.3. Freeradius 1.1.4 version was released for vista support. But I couldn't update to this release from package manager programs(smart, aptitude, yast etc.). Updating and pasting configuration files are easy however installing it from source could be problematic. Is there a patch for working system or will this version soon be updated from linux distrubutions? Best regards

4 6

Re: wrong user name is stored in mysql radacct table
by Zeli Kartzman 02 Mar '07

02 Mar '07

i was thinking the NAS had something to do with it. is there any way i can get the NAS to send me the correct user name? we are using cisco aironet for access points running IOS 12.3. or is there any other way to get the correct user name into the table? thanks bz ------------------------------ Message: 4 Date: Fri, 02 Mar 2007 09:48:08 +0100 From: Alan DeKok <aland(a)deployingradius.com> Subject: Re: wrong user name is stored in mysql radacct table To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <45E7E4C8.9030103(a)deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1 Zeli Kartzman wrote: > we are running freeradius-1.0.5-1.2 and mysql-5.0.27-1.fc5 > when i look at the radacct table in the mysql database i see there are a > number of entries with a non-existent user. i.e. > D4JM4P61\\Kimberly Higgins That is the name sent in the outer TLS tunnel. > when i look at the radius.log file i see that the correct user name > appears and then the wrong one. why is the wrong one being stored in the > database? Because that's the name the user is sending in order to login. It's not like FreeRADIUS invents random names, and logs them to SQL. Everything happens because of information the NAS sends in a packet. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog ------------------------------

1 0

Tempory Varibles
by Ben Butler 02 Mar '07

02 Mar '07

Hi, I am successfully using the hints file to manipulate the User-Name of a subset of users by matching on their realm name. The hints file allows be to drop these User-Names back to a single common name and to authorize with. What I want to be able to do now, is to store a copy of the original User-Name value in a varible so that I can subsiquently use this in the postauth SQL logging and record the original value rather than the value altered by hints. What would be the best way of doing this? I just want to drop the value into a tempory varible really. Kind Regards Ben

4 4

radius process die
by satish patel 02 Mar '07

02 Mar '07

Dear guys I have faceing some problem when i installed latest version of freeradius on RHEL and i start radiusd process after few min my radiusd process die and killed so why this happend and what is the best option to start radiusd ??? #radiusd --help <-- how to start radiusd daemon Satish Patel --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 1