January 2008 - Freeradius-Users - lists.freeradius.org

Unable to run radclient - libfreeradius-radius-2.0.0.so not found
by David W Bell 24 Jan '08

24 Jan '08

Trying to run radclient to test if I have things set up correctly and I get this. Only similar thing I could find on the net was libcrypt being missing which was pointed at being an incorrect installation of openLDAP (I think). I downloaded the src and compiled from there with ./configure, make and then make install. Any suggestions? belld@Trigger:~> sudo radclient --help radclient: error while loading shared libraries: libfreeradius-radius-2.0.1.so: cannot open shared object file: No such file or directory belld@Trigger:~> sudo find / -noleaf -name libfreeradius-radius-2.0.1.so /usr/local/lib/libfreeradius-radius-2.0.1.so /home/belld/src/freeradius-server-2.0.1/src/lib/.libs/libfreeradius-radius-2.0.1.so

3 2

authenticating with PIN only not username and password.
by Goke Aruna 23 Jan '08

23 Jan '08

hi all, Can someone give me an insigth into how a user can authenticate from hotspot with 10digit PIN number not username and password. Thanks goksie

5 6

rlm_chap Reply-Message on Access-Reject
by Spam Eater 23 Jan '08

23 Jan '08

Hello everyone, Can anyone tell me if it is possible to send the Reply-Message attribute in the Access-Reject packet when using rlm_chap? Or any other rlm_* by the way... Thank you.

3 2

Odd device PPP connections to my Cisco
by michael＠tradepage.co.za 23 Jan '08

23 Jan '08

Good Day all, I wonder anybody has come across something like this before, I have a device which establishes two PPP links to my cisco router. Now 1 PPP link works 100% and the other not, I switched debugging on the cisco and this is what I got: I apologise for posting on this list, but im guessing anybody that has seen this kind of thing would be on this list. It seems to be rejecting ever authentication protocol? Any ideas? Jan 23 19:48:20 10.201.203.251 3992: Jan 23 19:48:04.873 utc: ppp283 LCP: TIMEout: State REQsent Jan 23 19:48:20 10.201.203.251 3993: Jan 23 19:48:04.873 utc: ppp283 LCP: O CONFREQ [REQsent] id 7 len 24 Jan 23 19:48:20 10.201.203.251 3994: Jan 23 19:48:04.873 utc: ppp283 LCP: MRU 1352 (0x01040548) Jan 23 19:48:20 10.201.203.251 3995: Jan 23 19:48:04.873 utc: ppp283 LCP: ACCM 0x00000000 (0x020600000000) Jan 23 19:48:20 10.201.203.251 3996: Jan 23 19:48:04.873 utc: ppp283 LCP: AuthProto PAP (0x0304C023) Jan 23 19:48:20 10.201.203.251 3997: Jan 23 19:48:04.873 utc: ppp283 LCP: MagicNumber 0x0B478259 (0x05060B478259) Jan 23 19:48:20 10.201.203.251 3998: Jan 23 19:48:04.901 utc: Vi2.26 PPP: I pkt type 0x0021, datagramsize 59 link[ip] Jan 23 19:48:20 10.201.203.251 3999: Jan 23 19:48:05.017 utc: Vi2.26 PPP: I pkt type 0x0021, datagramsize 59 link[ip] Jan 23 19:48:20 10.201.203.251 4000: Jan 23 19:48:05.033 utc: ppp283 LCP: I CONFREQ [REQsent] id 3 len 8 Jan 23 19:48:20 10.201.203.251 4001: Jan 23 19:48:05.033 utc: ppp283 LCP: MRU 1500 (0x010405DC) Jan 23 19:48:20 10.201.203.251 4002: Jan 23 19:48:05.037 utc: ppp283 LCP: O CONFACK [REQsent] id 3 len 8 Jan 23 19:48:20 10.201.203.251 4003: Jan 23 19:48:05.037 utc: ppp283 LCP: MRU 1500 (0x010405DC) Jan 23 19:48:20 10.201.203.251 4004: Jan 23 19:48:05.037 utc: ppp283 LCP: I CONFREJ [ACKsent] id 7 len 20 Jan 23 19:48:20 10.201.203.251 4005: Jan 23 19:48:05.037 utc: ppp283 LCP: ACCM 0x00000000 (0x020600000000) Jan 23 19:48:20 10.201.203.251 4006: Jan 23 19:48:05.037 utc: ppp283 LCP: AuthProto PAP (0x0304C023) Jan 23 19:48:20 10.201.203.251 4007: Jan 23 19:48:05.037 utc: ppp283 LCP: MagicNumber 0x0B478259 (0x05060B478259) Jan 23 19:48:20 10.201.203.251 4008: Jan 23 19:48:05.037 utc: ppp283 LCP: O CONFREQ [ACKsent] id 8 len 13 Jan 23 19:48:20 10.201.203.251 4009: Jan 23 19:48:05.037 utc: ppp283 LCP: MRU 1352 (0x01040548) Jan 23 19:48:20 10.201.203.251 4010: Jan 23 19:48:05.037 utc: ppp283 LCP: AuthProto CHAP (0x0305C22305) Jan 23 19:48:20 10.201.203.251 4011: Jan 23 19:48:05.073 utc: ppp283 LCP: I CONFREJ [ACKsent] id 8 len 9 Jan 23 19:48:20 10.201.203.251 4012: Jan 23 19:48:05.073 utc: ppp283 LCP: AuthProto CHAP (0x0305C22305) Jan 23 19:48:20 10.201.203.251 4013: Jan 23 19:48:05.073 utc: ppp283 LCP: O CONFREQ [ACKsent] id 9 len 12 Jan 23 19:48:20 10.201.203.251 4014: Jan 23 19:48:05.073 utc: ppp283 LCP: MRU 1352 (0x01040548) Jan 23 19:48:20 10.201.203.251 4015: Jan 23 19:48:05.073 utc: ppp283 LCP: AuthProto EAP (0x0304C227) Jan 23 19:48:20 10.201.203.251 4016: Jan 23 19:48:05.113 utc: ppp283 LCP: I CONFREJ [ACKsent] id 9 len 8 Jan 23 19:48:20 10.201.203.251 4017: Jan 23 19:48:05.113 utc: ppp283 LCP: AuthProto EAP (0x0304C227) Jan 23 19:48:20 10.201.203.251 4018: Jan 23 19:48:05.113 utc: ppp283 LCP: O CONFREQ [ACKsent] id 10 len 13 Jan 23 19:48:20 10.201.203.251 4019: Jan 23 19:48:05.113 utc: ppp283 LCP: MRU 1352 (0x01040548) Jan 23 19:48:20 10.201.203.251 4020: Jan 23 19:48:05.113 utc: ppp283 LCP: AuthProto MS-CHAP (0x0305C22380) Jan 23 19:48:20 10.201.203.251 4021: Jan 23 19:48:05.165 utc: ppp283 LCP: I CONFREJ [ACKsent] id 10 len 9 Jan 23 19:48:20 10.201.203.251 4022: Jan 23 19:48:05.165 utc: ppp283 LCP: AuthProto MS-CHAP (0x0305C22380) Jan 23 19:48:21 10.201.203.251 4023: Jan 23 19:48:05.165 utc: ppp283 LCP: O TERMREQ [ACKsent] id 11 len 4 Jan 23 19:48:21 10.201.203.251 4024: Jan 23 19:48:05.193 utc: ppp283 LCP: I TERMACK [TERMsent] id 4 len 4

2 1

Patch for rlm_ldap to use mozilla sdk (e.g. on Solaris)
by Markus Moeller 23 Jan '08

23 Jan '08

Find attached a patch to use the mozilla sdk instead of openldap for rlm_ldap. Use -DHAVE_LDAPSSL_ADVCLIENTAUTH_INIT and change ldap_r to ldap in configure. Markus

1 0

Re: Re: Authentication Problem with EAP-PEAP
by debug afone 23 Jan '08

23 Jan '08

Hi Arran, Thanks for your response. How What can I do to match User-Name attribute and EAP Identity ? Regards, Nicolas.

3 3

Virtual Server and Ldap-Group
by Robin Gruyters 23 Jan '08

23 Jan '08

Hi ya, Today I have installed the *new* Freeradius 2.0 release and tested the virtual server setup. I was just wondering what will be the best solution to check on LDAP Groups. (Ldap-Group) Check them (as before) in the users file, or somewhere in the virtual server configuration with a switch/case statement. .. switch "%{control:Ldap-Group}" { case "WebUsers" { update reply { NS-User-Group = WebUsers } } case "MailUsers" { update reply { NS-User-Group = MailUsers } } case ... { } } ... Kind regards, -- Robin Gruyters Network and Security Engineer Betronic Nederland B.V. I: http://yirdis.com I: http://betronic.nl P: +31 (0)20 5659191 F: +31 (0)20 5659190

2 1

Re: NAS list update without restarting radius server.
by Andy Smith 23 Jan '08

23 Jan '08

Hi, well the previous info regarding this only being read at startup was specific to data in SQL, so I suppose a kill -HUP should work. But I haven't tested it :P, maybe someone else on the list can tell us, otherwise give it a go by manually updating the clients.conf and try a kill -HUP, cheers Andy. ----- Original Message ----- From: "Pawel Cieplinski" <pawel(a)parkandmarine.com> To: "'A.smith'" <a.smith(a)ukgrid.net> Sent: Wednesday, January 23, 2008 2:02 PM Subject: RE: NAS list update without restarting radius server. > >> >> Hey Pawel, >> >> why not have a script read the contents of the NAS table >> and update the freeradius clients.conf text file with the >> data, then configure freeradius to use the clients.conf file >> rather than MySQL for the secrets data? You could have it run >> every minute or so??? >> >> cheers Andy. >> > > Ok Andy but is radiusd not readind clients.conf on start ? Like data from > SQL ? > > Pawel > >> ________________________________________________ >> Message sent using UK Grid Webmail 2.7.9 >> >> >> >> >> -- >> No virus found in this incoming message. >> Checked by AVG Free Edition. >> Version: 7.5.516 / Virus Database: 269.19.9/1238 - Release >> Date: 22/01/2008 20:12 >> >> > > > > -- > No virus found in this incoming message. > Checked by AVG Free Edition. > Version: 7.5.516 / Virus Database: 269.19.9/1239 - Release Date: > 23/01/2008 10:24 > >

3 2

Re: NAS list update without restarting radius server.
by A.smith 23 Jan '08

23 Jan '08

Hey Pawel, why not have a script read the contents of the NAS table and update the freeradius clients.conf text file with the data, then configure freeradius to use the clients.conf file rather than MySQL for the secrets data? You could have it run every minute or so??? cheers Andy. ________________________________________________ Message sent using UK Grid Webmail 2.7.9

1 0

RE: multiple access credential
by Rakesh Jha 23 Jan '08

23 Jan '08

unsubscribe -----Original Message----- From: freeradius-users-bounces+rakesh=burgan.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+rakesh=burgan.com@lists.freeradius.org] On Behalf Of Thierry CHICH Sent: Wednesday, January 23, 2008 1:44 PM To: FreeRadius users mailing list Subject: Re: multiple access credential Le mercredi 23 janvier 2008, arjuna(a)ts.infn.it a écrit : > this is the problem: > > I need different kind of authentication against a Ldap dir, better with > the same username (userid,uid). > For instance, the mail attribute ? You just have to change the filter in the ldap configuration > May i use the huntgroup file to make freeradius look for different fields > into the ldap dir? > > for example: > > ou=People Your example is not very clear, I think. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Attention: Any non-official business related views, opinions and other information presented in this electronic mail are solely those of the sender/author. Burgan Bank does not endorse or accept responsibility for their opinions. If you are not the addressed indicated in this mail or responsible for delivering this message to the intended, you should delete this message and notify the sender immediately. ------------------------------------------------------- Burgan Bank S.A.K www.burgan.com

1 0