April 2007 - Freeradius-Users - lists.freeradius.org

Attributes
by Shawn Mitchell 02 Apr '07

02 Apr '07

Ok, I've looked through the doc's, tried several different things, but I'm not able to figure this out. In my clients.conf file, I have listed several clients. But some of them, I need to pass some attributes that are not needed/wanted on others. Where can I say "If client is 'x', then also send these attributes to users being authenticated..."? Thanks in advance!

3 4

Re: Freeradius-Users Digest, Vol 24, Issue 2
by Arran Cudbard-Bell 01 Apr '07

01 Apr '07

>> Does anyone have a draft list of which clients actually support the >> Reply-Message and by which methods they can recieve them? >> > > All clients will accept it. Very few will do anything useful with it. > > >> The reason why I ask , it during initial tests (using chap) the built in >> windows CHAP supplicant would display the reply-messages being sent back >> from the server. >> Now we've moved on from CHAP to using EAP and the windows supplicant no >> longer displays the messages. >> > > Yes. > > >> Am I right in assuming that with EAP attributes from the access-accept >> packet only get to the NAS and that the NAS will strip out of the EAP >> message >> and pass it on to the supplicant and thats all the supplicant will ever get? >> > > Yes. > > >> In which case, although the Reply-Message attribute is also supported in >> PoD the client will never actually recieve it when using EAP ? >> > > Yes. > > Alan DeKok. > Ahh, Thanks for clearing that up ! Don't suppose EAP supports encoding the equivalent of a Reply-Message ? P.S Well done for understanding my poorly punctuated morning ramblings :) Arran

1 0

Multipls IP Pools
by Azher Amin 01 Apr '07

01 Apr '07

Hi, I have different Wireless Access Points across the students campus. Each of them support Radius Authentication for users. My question is: Based on Client (i.e. AP) IP address, can i assign different ip pools to them ?? Plz suggest. Regards -Azher -- This message has been scanned for viruses and dangerous content by MailScanner, and is believed to be clean.

2 1

Reply-Message in various clients & EAP vs CHAP.
by Arran Cudbard-Bell 01 Apr '07

01 Apr '07

Hi, Does anyone have a draft list of which clients actually support the Reply-Message and by which methods they can recieve them? The reason why I ask , it during initial tests (using chap) the built in windows CHAP supplicant would display the reply-messages being sent back from the server. Now we've moved on from CHAP to using EAP and the windows supplicant no longer displays the messages. Am I right in assuming that with EAP attributes from the access-accept packet only get to the NAS and that the NAS will strip out of the EAP message and pass it on to the supplicant and thats all the supplicant will ever get? In which case, although the Reply-Message attribute is also supported in PoD the client will never actually recieve it when using EAP ? Thanks, Arran

2 1

Anyone using dd-wrt for AP?
by Ian Truelsen 01 Apr '07

01 Apr '07

I am trying to set up dd-wrt to use freeradius for authentication with EAP-TLS, however, I have run into a problem: there doesn't seem to be an option under the WPA encryption system for entering the freeradius secret. If anyone has got this working, can you let me know the where and how? The dd-wrt forums have been pretty silent on the issue. -- Ian Truelsen s/v Sting Email: ian.truelsen(a)gmail.com AIM: ihtruelsen MSN: ihtruelsen(a)hotmail.com Google Talk: ian.truelsen(a)gmail.com

2 3