August 2007 - Freeradius-Users - lists.freeradius.org

access only particular website through RADIUS
by zamshed 31 Aug '07

31 Aug '07

dear Friends. I am a very new user of RADIUS. how can I configure this RADIUS for a particular USER,such as when that USER login with RADIUS,then that user only get PERMIT to access a fixed WEBSITE only,the rest others will b BLOCKED for that particular USER. Can I do that with this RADIUS server?

6 5

Query regarding Free Radius Testing
by Pelluru Sujatha 31 Aug '07

31 Aug '07

Hi, I have installed free radius 1.1.6 and started testing. But every time when I send an Access-Request message, Access-Reject msg is received indicating "Invalid Password". The error looks like this. rad_recv: Access-Request packet from host 127.0.0.1:32769, id=157, length=59 User-Name = "sujatha" User-Password = "test123" NAS-IP-Address = 255.255.255.255 NAS-Port = 1812 rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. rlm_unix: [sujatha]: invalid password rad_recv: Access-Request packet from host 127.0.0.1:32769, id=157, length=59 Sending Access-Reject of id 157 to 127.0.0.1 port 32769 Can I know the reason. Regards, Pelluru Sujatha | Software Engineer | Tech Mahindra 9/7 Opp. Christ College,Hosur Road,Bangalore * Office: 080-41159800 | Extn:2137 | Cell: Email: sujathap(a)techmahindra.com www.techmahindra.com <http://www.techmahindra.com/> Pelluru Sujatha | Software Engineer | Tech Mahindra 9/7 Opp. Christ College,Hosur Road,Bangalore * Office: 080-41159800 | Extn:2137 | Cell: Email: sujathap(a)techmahindra.com www.techmahindra.com <http://www.techmahindra.com/> ============================================================================================================================ Disclaimer: This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review the policy at <a href="http://www.techmahindra.com/Disclaimer.html">http://www.techmahindra.com/Disclaimer.html</a> externally and <a href="http://tim.techmahindra.com/Disclaimer.html">http://tim.techmahindra.com/Disclaimer.html</a> internally within Tech Mahindra. ============================================================================================================================

2 1

How do you make 'rlm_sql_postgresql' driver connect to Postgresql on different Ports
by justice obrey 30 Aug '07

30 Aug '07

I have setup freeradius and Postgresql for authentication and accounting purposes. With Postgresql running on the default port 5432, the system works. If I change the port on which Postgresql runs to say 5490, how do I get the driver 'rlm_sql_postgresql' to connect to postgresql on the new port of 5490? Thank you for your help. --------------------------------- Choose the right car based on your needs. Check out Yahoo! Autos new Car Finder tool.

1 0

Freeradius and Quintum help plz
by Pretty Woman 30 Aug '07

30 Aug '07

Hello, I need to configure freeradius to make accounting with Quintum. Where do I start ? What do I need to know in order to do that ? I already installed and tested version 1.1.7 and have a mysql or pgsql server but I dont know what steps to take yet. What structure should the tables in the database have in order to work with radius ? How do I include dictionary.quintum ? (as I read that it's needed) Is it enough to set this parameters in postgresql.conf ? server = ... login = ... password = ... radius_db = ... Thanks ____________________________________________________________________________________ Be a better Globetrotter. Get better travel answers from someone who knows. Yahoo! Answers - Check it out. http://answers.yahoo.com/dir/?link=list&sid=396545469

3 6

Problem with older wireless network drivers.&In-Reply-To=
by Richard Elder 30 Aug '07

30 Aug '07

I have more info.. I turned on debugging on the Radius Server and this is what I saw.. EAP-Message = 0x03030004 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4432dbd90b6b53254567784c2809c028 rad_recv: Access-Request packet from host 10.0.x.x:1645, id=195, length=147 User-Name = "test" Framed-MTU = 1400 Called-Station-Id = "0011.925e.9170" Calling-Station-Id = "0012.cf4f.1471" Service-Type = Login-User Message-Authenticator = 0x692f16e735g754a853180379a493551 EAP-Message = 0x01020010110100067886e374f19bec88 NAS-Port-Type = Wireless-802.11 NAS-Port = 1144 State = 0x4432dbd90b6b5345675504c2809c028 NAS-IP-Address = 10.0.x.x NAS-Identifier = "ap2" rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request rad_recv: Access-Request packet from host 10.0.254.61:1645, id=195, length=147 Sending Access-Reject of id 195 to 10.0.x.xport 1645 But then I use a newer wireless NIC, and it works perfectly.. I was using freeradius 1.1.4, but then put on 1.1.7 and still the same results. I have no idea why it is doing that for some of the older drivers, and not all. I looked also for time out periods, and have tried to increase them, but no such luck. Its driving me bonkers! Thanks for any help! Rick Confidentiality Notice: The information contained in this e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information, or Protected Health Information as such term is defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Any unauthorized review, use, disclosure, copying or distribution is prohibited and may be unlawful. If you believe you have received this e-mail in error, please contact the sender by reply e-mail and delete all copies of the original message, including attachments.

1 0

Freeradius LDAP problem
by George Beitis 30 Aug '07

30 Aug '07

Hi everyone I have a problem. I set up freeradius to use a local ldap server to authenticate a user. When i say authenticate i mean check if the user is there, check their password, and accept or reject them. When i do such an authentication i get a message from freeradius saying that user is authorised successfully but when it goes to the authentication section it uses a unix module, fails and rejects the user. I tried commenting in the post auth ldap section, and commented it out again but nothing. Does the authorized successfully part mean the user is there but cant compare the passwords or something?

3 4

RE: How to get FreeRadius 2.0 running?
by Jack Daniels 30 Aug '07

30 Aug '07

Nevermind, I just downloaded FreeRadius 2.0 pre2, and it runs flawlessly.ThanksJD> Date: Tue, 28 Aug 2007 09:04:02 +0200> From: aland(a)deployingradius.com> To: freeradius-users(a)lists.freeradius.org> Subject: Re: How to get FreeRadius 2.0 running?> > Jack Daniels wrote:> > No, I'm not trying to run it with 1.1.x files. I've downloaded the> > latest snapshot in a brand new computer, which has only the LBS.> > Hmm... OK.> > > In previous versions, when I compiled FreeRadius, it was 100%> > functional, obviously I needed to configure it to meet my needs, but at> > least, it had a sample configuration which worked out-of-the-box.> > When I tried the same with this release, > > No. 2.0 hasn't been released. You're running from CVS head, which> may not even build on a daily basis.> > > I got the error previously> > shown, and still can't get it to work, even if I modify the default> > configuration in the sites-enabled directory or the listen sections in> > the radiusd.conf file. I've tried some things, and I feel that the> > solution to this problem is really simple, but I haven't found it yet.> > Can you post the *full* debug log. It will contain more information> about the problem than the one-line error you posted.> > Alan DeKok.> -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

1 0

Freeradius logging to ms-sql
by Norbert Wegener 30 Aug '07

30 Aug '07

freeradius 1.1.7 is known to support stored procedures in mysql, a feature, that we use. I may have the need, to do accounting/logging to a MS-SQL database. Does freeradius support stored procedures also in MS-SQL? As I did not find information about the in the documentation, I should conclude, there is no support. Correct? Norbert Wegener

1 0

Assertionfailed trouble again
by Janne Peltonen 30 Aug '07

30 Aug '07

Hi! I had a problem with radius choking on a failed assertion (probably sth to do with high load on the server, that is, the physical computer, not the radius server). As recommended (https://lists.freeradius.org/pipermail/freeradius-users/2007-August/065179.…) I upgraded to version 1.1.7, and the problem went away. Now, yesterday I added a second realm into proxy.conf (I used to have only the NULL realm). Last night: --/var/log/radius/radius.log-- Wed Aug 29 04:01:39 2007 : Error: Assertion failed in request_list.c, line 355 --end sample-- And the server snuffed. Any ideas? --Janne Peltonen -- Janne Peltonen <janne.peltonen(a)helsinki.fi>

2 4

Problem with older wireless network drivers.&In-Reply-To=
by Richard Elder 30 Aug '07

30 Aug '07

I have more info.. I turned on debugging on the Radius Server and this is what I saw.. EAP-Message = 0x03030004 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x4432dbd90b6b53254567784c2809c028 rad_recv: Access-Request packet from host 10.0.x.x:1645, id=195, length=147 User-Name = "test" Framed-MTU = 1400 Called-Station-Id = "0011.925e.9170" Calling-Station-Id = "0012.cf4f.1471" Service-Type = Login-User Message-Authenticator = 0x692f16e735g754a853180379a493551 EAP-Message = 0x01020010110100067886e374f19bec88 NAS-Port-Type = Wireless-802.11 NAS-Port = 1144 State = 0x4432dbd90b6b5345675504c2809c028 NAS-IP-Address = 10.0.x.x NAS-Identifier = "ap2" rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request rad_recv: Access-Request packet from host 10.0.254.61:1645, id=195, length=147 Sending Access-Reject of id 195 to 10.0.x.xport 1645 But then I use a newer wireless NIC, and it works perfectly.. I was using freeradius 1.1.4, but then put on 1.1.7 and still the same results. I have no idea why it is doing that for some of the older drivers, and not all. I looked also for time out periods, and have tried to increase them, but no such luck. Its driving me bonkers! Thanks for any help! Rick Confidentiality Notice: The information contained in this e-mail message, including any attachments, is for the sole use of the intended recipient(s) and may contain confidential and privileged information, or Protected Health Information as such term is defined under the Health Insurance Portability and Accountability Act of 1996 (HIPAA). Any unauthorized review, use, disclosure, copying or distribution is prohibited and may be unlawful. If you believe you have received this e-mail in error, please contact the sender by reply e-mail and delete all copies of the original message, including attachments.

2 1