May 2007 - Freeradius-Users - lists.freeradius.org

Re: LDAP/RACF authentication error
by Marc Giuliani 14 May '07

14 May '07

Can anyone help me on this? > >Hello, > >I am try to set up authentication for Oracle 10g (on Solaris) --> Radius (on Solaris)--> LDAP (on Z/os) --> Racf (on z/os)... > >i was able to get past my last error however now I am getting a "no authentication method found" type of error. Can anyone assist me? > >I have checked that the secret password matches on the LDAP server, radius server and Oracle... > > > > >rad_recv: Access-Request packet from host 10.71.175.19:37544, id=178, length=47 > User-Name = "NBCTST1" > User-Password = "/\265P\251R\344>%P\2022\0144\0165p" > Processing the authorize section of radiusd.conf >modcall: entering group authorize for request 1 > modcall[authorize]: module "preprocess" returns ok for request 1 >radius_xlat: '/opt/local/var/log/radius/radacct/10.71.175.19/auth-detail-20070511' >rlm_detail: /opt/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /opt/local/var/log/radius/radacct/10.71.175.19/auth-detail-20070511 > modcall[authorize]: module "auth_log" returns ok for request 1 > modcall[authorize]: module "chap" returns noop for request 1 > modcall[authorize]: module "mschap" returns noop for request 1 > rlm_realm: No '@' in User-Name = "NBCTST1", skipping NULL due to config. > modcall[authorize]: module "suffix" returns noop for request 1 > rlm_eap: No EAP-Message, not doing EAP > modcall[authorize]: module "eap" returns noop for request 1 > modcall[authorize]: module "files" returns notfound for request 1 >rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. > modcall[authorize]: module "pap" returns noop for request 1 >modcall: leaving group authorize (returns ok) for request 1 >auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user >auth: Failed to validate the user. >Login incorrect: [NBCTST1//\265P\251R\344>%P\2022\0144\0165p] (from client test1 port 0) > WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! >Delaying request 1 for 1 seconds > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Re: Freeradius-Users Digest, Vol 25, Issue 56
by t.drollinger＠i-motion.de 14 May '07

14 May '07

Ich bin am 14. Mai nicht im Haus und kann Ihre Nachricht erst am Dienstag den 15. Mai bearbeiten. In dringenden Fällen wenden Sie sich bitte an Herrn René Böhm (E-Mail: r.boehm(a)i-motion.de) Mit freundlichen Grüßen Tobias Drollinger

1 0

PEAP authentication + LDAP attribute recovery
by Manuel Sánchez Cuenca 14 May '07

14 May '07

Hi all, It is possible to configure freeradius to authenticate users using PEAP and then, for authenticated users, return some RADIUS attributes recovered from a LDAP server, such as Session-Timeout or Framed-IP-Address?. And in that case, how can I configure it? Thanks in adavance -- ----------------------------- Manuel Sanchez Cuenca Departamento de Ingenieria de la Informacion y las Comunicaciones Facultad de Informatica. Universidad de Murcia Campus de Espinardo - 30080 Murcia (SPAIN) Tel.: +34-968-364644 Fax: +34-968-364151 email: msc(a)dif.um.es | manuelsc(a)um.es url: http://libra.inf.um.es/~lolo

2 1

PAM modules
by Ouahiba MACHANI 14 May '07

14 May '07

Hi, Did there anyone who developped a PAM module that operate with radius server? my question is : 1- How does that work ?does it only allow configuration of predefined methodes or could we also programme new PAM module for new/customized authentication methode such as OTP (One Time Password) authentication? 2- could we programme PAM that redirect multiplle authentication requests to different servers and make an "AND" of the received reponses ? 3- how does it work with radius? thanks in advance. Ouahiba.

2 1

free radius 1.1.6 -eap-tls authentication
by anoop_c＠sifycorp.com 14 May '07

14 May '07

Dear all I am using the same AP,same widows client and same root certificate for testing navis as well as free raduis .Root certificate is also installed. Is ther any clue in the debug message? anoop_c(a)sifycorp.com wrote: > Dear all > Thank you for the responses > I am using openssl tool for certificate generation.I have inclided the file xpextensions while generating certificates.The same certificates worked well with Navis radius server and windows xp as client.So this may not be the problem here Is it the SAME windows client, with the SAME root certificate, with the SAME access point, going to FreeRADIUS using the SAME certificate? If it really works for Navis using the same certificate, my guess is that your tests for FreeRADIUS are using a different Windows machine, without the root certificate installed. Alan DeKok.

2 1

Re: 1.1.6 with rlm_sqlippool: ip=[] len=0
by Guilherme Franco 12 May '07

12 May '07

> > Hello, > > Using Freeradius 1.1.6 on latest RHEL AS4 x64 with rlm_sqlippool, using > PostgreSQL > 8.2.1. > > After some hours operating, freeradius start to log lots of "Info: > rlm_sqlippool: ip=[] len=0". Running the allocate-find query directly > under > psql shows no problem. > > Issuing "service radiusd restart" solves the problem. I did a > cron.hourly job with this then. > > This was happening with 1.1.4 and I thought that 1.1.6 would correct this. > > Wasn't 1.1.6 supposed to work this out? > > Thanks. >

3 7

One day user account
by Aren Chua 12 May '07

12 May '07

Hi All, I would like to create a user account which only allow user to use for 1 day. Once the user has been authenticated, the time will be start counting and ended after 24 hours. Although the user didn’t fully used up their session time, radius still will reject user to login. Can any expert give me some suggestion on how to create this user account? Thanks Regards, Aren Chua _________________________________________________________________ Download Messenger. Start an i’m conversation. Support a cause. Join now. http://im.live.com/messenger/im/home/?source=TAGWL_MAY07

4 3

User-Name and Clear Text Password configurations
by Diameter K 12 May '07

12 May '07

Hi All, I want to send out Authentication Request message with only the "User-Name" and "Password". Moreover i want the password to be clear text. Is it possible to configure the free-radius server for just these requirements? I did configure the username and password in the "users" file but server seems to be looking for a encrypted password and is thus sending back a reject. Any way to configure a username and a clear text password? Thanks in advance, Shiv

2 1

MySQL Attirbute Order
by Frosty 12 May '07

12 May '07

I am creating a custom web interface for my work and just wanted to put forward a simple question. When inserting data into the radreply or radgroupreply tables, does the order of the attributes matter? All the attributes are present and correct, but would it matter if say, Frame type attributes came before or after the Tunnel attributes? -- View this message in context: http://www.nabble.com/MySQL-Attirbute-Order-tf3731417.html#a10444812 Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

SQL acconting
by Umar Draz 12 May '07

12 May '07

Dear Members! I have installed Freeradius with mysql running fine for web administration i have installed ARA but when I click on (online user) the page is always blank the same problem i also faced on (Dailup Admin). I manually checked mysql table (radacct) the table always empty. So please help me what should i do to check my online users. Regards, Umar Draz _________________________________________________________________ Catch suspicious messages before you open themwith Windows Live Hotmail. http://imagine-windowslive.com/hotmail/?locale=en-us&ocid=TXT_TAGHM_migrati…

2 1