February 2008 - Freeradius-Users - lists.freeradius.org

freeradius for windows + mssql problem
by rodolfor 30 Oct '08

30 Oct '08

Hi all. I have installed freeradius for windows (www.freeradius.net) and it works well. Now I want to connect the service to an mssql database in the same machine. The error I receive (starting in debug mode) is (using mssql.conf): rlm_sql (sql): Could not link driver rlm_sql_unixodbc: No such file or directory rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the search path of your system's ld. radiusd.conf[10]: sql: Module instantiation failed. Could someone help me ? thanks -- View this message in context: http://www.nabble.com/freeradius-for-windows-%2B-mssql-problem-tf3731743.ht… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 2

RE: Pattern Matching in users file
by Garber, Neal 01 Aug '08

01 Aug '08

> You can use the "hints" file to do what you want. It does *not* say > you can only use prefix & suffix matching. I was referring to the following in the sample hints file: # Matching can take place with the the Prefix and Suffix # attributes, just like in the "users" file. # These attributes operate ONLY on the username, though. And this in the doc/README file: Customize the /etc/raddb/hints file. This file is used to give users a different login type based on a prefix/suffix of their loginname. For example, logging in as "user" may result in a rlogin session to a Unix system, and logging in as "Puser" could start a PPP session. Is there another document that describes matching on other attributes and how to add new attributes to the request. I think these paragraphs need updating. Are you saying I can do this in hints: DEFAULT Cisco-AVPair == "", My-Group := "RadioIP-MAU" DEFAULT Cisco-AVPair == "ssid=(.*)", My-Group := "Wireless %{1}" DEFAULT My-Group := "Unknown source" That is, does hints work just like the users file, except it adds any new attributes to the request? If so, this is exactly what I need! If the syntax or usage is off, can you correct me. Thanks Alan.

4 4

Thank you and Diameter question
by Raj Patel 30 May '08

30 May '08

Hi People First thank you, I been reading this mailing list for some time and I found it great source of help I want to share some info with you and than ask a question We are slowly moving here into Java and starting to have Diameter requirements I found OpenBloX Java Diameter a great source of help (i think its GPL)and it seems to meet our requirements (* http://sourceforge.net/projects/openblox/**) * as anyone else been using it, I will be happy for some feedback I guess this is the right place for a feedback with so many AAA gurus around J so sorry again for my post Thanks In advance RP

4 4

Re: SNMP error
by Alan DeKok 20 May '08

20 May '08

Edvin Seferovic wrote: > I am also curious about the answer on this question ! Are there any plans to > implement AgentX protocol into freeradius project? No plans. At this point, the only plans for 2.0 are minor feature improvements and bug fixes. I plan on spending time working on the book, unless otherwise motivated. Alan DeKok.

3 5

Re: rlm_opendirectory (FR 2.0.0)
by Steven Simon 12 Apr '08

12 Apr '08

I build it by adding rlm_opendirectory to the ./src/modules/stable file. Then, run: make distclean ./configure <stuff> etc… Everything you need should be on the desktop OS. Let me know if that is not the case. If you are on desktop, you'll probably want to set up a service access list. The magic group name that gets set up by the admin tools is: com.apple.access_radius. - Steven On Jan 22, 2008, at 7:54 AM, freeradius-users-request(a)lists.freeradius.org wrote: > From: Info <info(a)sparkmediagroup.com> > Date: January 22, 2008 7:50:57 AM PST > To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org > > > Subject: rlm_opendirectory (FR 2.0.0) > Reply-To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org > > > > > Hello all, > > Quick Qs about the experimental rlm_opendirectory module: > > * Has anyone built in this module successfully? > > * Is it possible to add this in without the other experimental > modules and, if so, what is the proper flag? (Note, I've tried on > separate runs --with-rlm_opendirectory, --enable-rlm_opendirectory, > and --with-modules="rlm_opendirectory" seemingly to no avail.) > > * Does the module need to be built against a server version of the > Framework or should I be able to build this from the libraries on > any os x workstation? > > Cheers, > > Jim

14 31

eap_tnc.c source not stricly C
by Andrew Hood 10 Apr '08

10 Apr '08

I know good style says newbies should lurk before posting, but anyway: Is freeradius supposed to be C89? src/modules/rlm_eap/types/rlm_eap_tnc/eap_tnc.c Is full of C++ comments and C99isms. -- REALITY.SYS not found: Universe halted.

3 4

Consuming card code
by Juraj Bilic 27 Mar '08

27 Mar '08

Im using freeradius-1.1.7 on my remote unix machine and developing on my client .net application. By now i succesfully made authorization and start/stop accounting request/responses (packet send/recieve logic). With radiusManager3 i generated card series, services .. Can i implement user login, consuming of card codes, etc. with only packets (acct) or im missing some crucial points? I hope that i (user, client) can make an behaviour of communicating with freeradius every 10sec and consuming 10sec of currently selected card code. thank you for your time, Juraj ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

6 10

upgrade broke the users file - being read only partially - FR1.1.7 to FR2.0.2
by Agent Smith 07 Mar '08

07 Mar '08

Note: forwarded message attached. ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

5 8

Freeradius authentication agains Domino
by Christoffer Dahl Petersen 06 Mar '08

06 Mar '08

Hi! I have a Domino (6.5.4FP3) ldap which I would like to use as a backend for freeradius. My clients (winxp) uses eap-mschapv2, would it be possible for freeradius to match the password from the domino with the one supplied by the client? If it ain't possible what would it take to achieve it? I'm sorry if the question has been asked too many times, but I can't find a answer on the net or in this list.... Thanks -CP

3 4

Reject user from SQL-DB
by JB 04 Mar '08

04 Mar '08

Hi, I'm afraid I'm currently not seeing the wood for the trees, please help me out. ;-) I'm using stored procedures in MySQL to query for check and reply items for users. I don't need (or want) user groups so there's always a positive Fall-Through attribute returned. There are quite a few possibilities why a user can get rejected: Wrong login, banned from this location, generally blocked, session time/ timespan exceeded and so on... As a result of the information gathered in these stored procedures I know whether the user may connect or not. My question: What attributes do I have to return from MySQL to reject this user??? Am I getting my wires crossed? Thanks a lot! JB

2 10