November 2008 - Freeradius-Users - lists.freeradius.org

Re: authenticating to an Windows AD
by Mike Diggins 18 Nov '08

18 Nov '08

I should have mentioned it's FreeRadius 2.1.1. -Mike On Tue, 18 Nov 2008, Mike Diggins wrote: > > Folks, I have freeradius running on a fedora linux box. I want to use it for > authentication from an Apache web server using the radius interface. That > part is working, and I'm able to authenticate web users only if they have a > local account on the freeradius server. > > I want freeradius to authenticate against a Windows Active Directory. I > installed Samba and am running Winbind, and wbinfo/ntlm_auth both are able to > authenticate from the command line assuming I give it a valid username and > password. What module in freeradius do I use to authenticate through Winbind? > Could someone point me in the right direction please. > > -Mike > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

3 4

Re: FreeRADIUS + OpenLDAP + MSCHAPv2
by Tim Gustafson 18 Nov '08

18 Nov '08

Ok, I've upgraded to FreeRADIUS 2.0.5 on a FreeBSD box (the FreeBSD ports is more up-to-date than the CentOS Yum repositories apparently). However, upon reading the documentation in modules/ldap, I see this: # However, LDAP can be used for authentication ONLY when the # Access-Request packet contains a clear-text User-Password # attribute. LDAP authentication will NOT work for any other # authentication method. # # This means that LDAP servers don't understand EAP. If you # force "Auth-Type = LDAP", and then send the server a # request containing EAP authentication, then authentication # WILL NOT WORK. So, does this mean that you can't do MSCHAPv2 against an LDAP server, or am I missing something again? Tim Gustafson SOE Webmaster UC Santa Cruz tjg(a)soe.ucsc.edu 831-459-5354

3 2

authenticating to an Windows AD
by Mike Diggins 18 Nov '08

18 Nov '08

Folks, I have freeradius running on a fedora linux box. I want to use it for authentication from an Apache web server using the radius interface. That part is working, and I'm able to authenticate web users only if they have a local account on the freeradius server. I want freeradius to authenticate against a Windows Active Directory. I installed Samba and am running Winbind, and wbinfo/ntlm_auth both are able to authenticate from the command line assuming I give it a valid username and password. What module in freeradius do I use to authenticate through Winbind? Could someone point me in the right direction please. -Mike

1 0

Test Radius Client supporting PEAP-EAP MD5
by Queenie de Melo 18 Nov '08

18 Nov '08

Hi, Can anyone suggest a test radius client supporting PEAP with EAP MD5 ? I have tried JRadius Simuator , RadiusTest n others but could not get the option of PEAP with EAP MD5. Incase anyone has come across, please let me know. Warm regards Queenie

2 1

free RADIUS server + return class attribute
by Vinay 18 Nov '08

18 Nov '08

hi there, I want to configure the freeRADIUS server to return the CLASS attribute in the ACCESS-ACCEPT message,. I tried adding the attribute for a user in users file : vinay Auth-type:=CHAP,User-Password="vinay",Class="Admin" The attribute is parsed. But when i try to connect with a RADIUS client, the freeRADIUS server crashes. What is the correct method of passing attributes from RADIUS server to the RADIUS Client? Thanks Vinay

2 1

oracle
by Alexandre Chapellon 17 Nov '08

17 Nov '08

Does anyone already used oracle stored proc as auth queries? Is it known to worl or known not to work? regards

2 2

stored procedures
by Alexandre Chapellon 17 Nov '08

17 Nov '08

Hello, I need to authenticate dial-in users against an sql DB, and to use a stored procedure to do so (there is a lot of condition to treat before returning authentications data).* What is the format the stored procedure can send data to freeradius? Is there any place where it is documented? thx

1 0

Just wondering - are you using several groups for a user?
by liran tal 17 Nov '08

17 Nov '08

Hey everyone, It's obvious that the structure of the tables allows to assign a user to several groups though I would like to ask you to the nature of why would you need to do that? Why is it not possible for you to put all attributes in that one group and assign the user to it? Regards, Liran.

2 1

krb Authenication & ldap Authorization
by Lisa Besko 17 Nov '08

17 Nov '08

I just want to double check that I can do what I need to do. I need to use radius to AUTHENTICATE users and then once they are authenticated have it pass it over to and LDAP server for Authorization, I believe this is possible with radius but if anyone has any experience with this or good links for setting it up I would appreciate it. Thanks, LB

2 2

Freeradius and old ACC/Ericsson Tigris
by Ian Harper 17 Nov '08

17 Nov '08

I am upgrading an old machine to a newer version of FreeRadius and i am having a few problems. on old system the user file was similar to: user1 Password="whatever" user2 Password="kdkdkd" etc I hae ried to copy this idea over to the new version along with the old dictionaries but its not working, it reports everything is ok but when we dial in to authenticate using radiusd -X we get messages reporting No authenticate method (Auth-Type) config found for the request, what should I set it to ? also if I try a radtest using same username/password, it reports unknown attribute User-Password. Anyone help me with this ? Thanks Ian

2 2