February 2008 - Freeradius-Users - lists.freeradius.org

RE: EAP-PEAP with LDAP for 802.1x authentication
by debug afone 25 Feb '08

25 Feb '08

Hello, I use FreeRadius with OpenLDAP to authenticate device using EAP-PEAP and it works fine. The only problem I had was the encrypted password in my LDAP database. I by-passed this problem using clear-text Password in LDAP Database and it works fine. You can also have a look at this : http://deployingradius.com/documents/protocols/compatibility.html Regards, Nicolas SOULEMAN. -----Message d'origine----- De : freeradius-users-bounces+debug=afone.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+debug=afone.com@lists.freeradius.org] De la part de freeradius-users-request(a)lists.freeradius.org Envoyé : lundi 25 février 2008 11:59 À : freeradius-users(a)lists.freeradius.org Objet : Freeradius-Users Digest, Vol 34, Issue 124 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. rlm_dbm can not work? (Hangjun He) 2. EAP-PEAP with LDAP for 802.1x authentication (Ryan) 3. Re: EAP-PEAP with LDAP for 802.1x authentication (Arjuna Scagnetto) 4. Re: rlm_dbm can not work? (A.L.M.Buxey(a)lboro.ac.uk) 5. Re: EAP-PEAP with LDAP for 802.1x authentication (Ivan Kalik) 6. Re: EAP-PEAP with LDAP for 802.1x authentication (Sergio Belkin) 7. radius users update after NAS downing (Zahra Bahar) 8. ldap configuration parameters in radiusd.conf file (Gopinath Reddy N) ---------------------------------------------------------------------- Message: 1 Date: Mon, 25 Feb 2008 11:15:38 +0800 (CST) From: Hangjun He <elmerhe(a)yahoo.com.cn> Subject: rlm_dbm can not work? To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <182021.24135.qm(a)web15107.mail.cnb.yahoo.com> Content-Type: text/plain; charset="gb2312" Hi, I am using freeRADIUS 1.1.6. I can not let rlm_dbm work. Result of rlm_dbm_cat: [root@Jack-Linux raddb]# pwd /usr/local/etc/raddb [root@Jack-Linux raddb]# rlm_dbm_cat -f users.db "hhe4" Cleartext-Password := "hhe123" Reply-Message = "Hello" "hhe123" Cleartext-Password := "hhe123" Reply-Message = "Hello" [root@Jack-Linux raddb]# [root@Jack-Linux raddb]# ls users.* users.db.dir users.db.pag [root@Jack-Linux raddb]# Debug message: Module: Loaded dbm dbm: usersfile = "/usr/local/etc/raddb/users.db" Module: Instantiated dbm (dbm) Listening on authentication *:1812 Listening on accounting *:1813 ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:1033, id=26, length=58 User-Name = "hhe123" User-Password = "hhe123" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 rlm_dbm: try open database file: /usr/local/etc/raddb/users.db rlm_dbm: Call parse_user: sm_parse_user.c: check for loops Add hhe123 to user list rlm_dbm: User <hhe123> not foud in database Remove hhe123 from user list sm_parse_user.c: check for loops Add DEFAULT to user list rlm_dbm: User <DEFAULT> not foud in database Remove DEFAULT from user list modcall[authorize]: module "dbm" returns notfound for request 0 modcall: leaving group authorize (returns noop) for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Sending Access-Reject of id 26 to 127.0.0.1 port 1033 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 26 with timestamp 47c220be Nothing to do. Sleeping until we see a request. John. --------------------------------- ???????????????????

1 0

radius users update after NAS downing
by Zahra Bahar 25 Feb '08

25 Feb '08

Hi, We have a freeradius server for accounting of AS5300 dial users. there is a problem: Some users stay in accounting list when AS is restarted, and they not go to stop then can't dial after that until admin makes them out of list . why this happen?

2 1

ldap configuration parameters in radiusd.conf file
by Gopinath Reddy N 25 Feb '08

25 Feb '08

Hi, Does any body has idea whether the below parameters are mandatory in radiusd.conf file ldap section. groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember==%{Ldap-UserDn})))" groupmembership_attribute = radiusGroupName Iam trying to see whether ldap group search functionality can be avoided using radiusd.conf file. Thanks in advance. regards -gnr

1 0

EAP-PEAP with LDAP for 802.1x authentication
by Ryan 25 Feb '08

25 Feb '08

Hi All, Understand that it is not possible to authenticate using EAP-PEAP against OpenLDAP due to encrypted password. Can someone advise on how exactly OpenLDAP needs be configured so that it can be used in EAP-PEAP? I found out from http://vuksan.com/linux/dot1x/802-1x-LDAP.html that to do so additional attributes needs to be added to LDAP. Is this the only way? Thanks/Regards, Ryan

4 3

Configuring radrelay using proxy.conf in v2.0.1
by Ryan 24 Feb '08

24 Feb '08

Upgraded to 2.0.2 and got the radrelay working using proxy.conf Ryan

1 0

Error LDAP module not available
by C A 24 Feb '08

24 Feb '08

Hi, I've compiled and installed the FreeRADIUS 2.0.0 version. Everything works OK, I can run the radtest example. The problem happens when I try to activate the LDAP module. After that when I run "radiusd -X" a get the error: .... /usr/local/etc/raddb/radiusd.conf[696]: Failed to link to module 'rlm_ldap': rlm_ldap.so: cannot open shared object file: No such file or directory /usr/local/etc/raddb/sites-enabled/default[135]: Failed to find module "ldap". /usr/local/etc/raddb/sites-enabled/default[34]: Errors parsing authorize section. } } Errors initializing modules ..... Then I issue the command "locate rlm_ldap" I don't get any files but those on src. What I've done wrong? Do I have to write any flag when compiling radius to activate/compile the LDAP Module? BR. Antares

3 3

Proxy RADIUS from MSCHAPv1 to MSCHAPv2
by Franco Pieressa 23 Feb '08

23 Feb '08

Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 <--> MSCHAPv2? To be more specific, is it possible to make the MS-CHAP-MPPE-Keys (v1) from then MS-MPPE-Send-Key (v2)? NAS --- (MSCHAPv1) --- Freeradius --- (MSCHAPv2) --- RADIUS server Thanks! _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

2 3

Unable to connect to data source
by johnson elangbam 23 Feb '08

23 Feb '08

hi, I am trying to connect Ms SQL with free radius, I've configure all the related packages like freeTDS and unixodbc , and both of the package work well when I test using "tsql" and "isql". But when I try to link with free radius, the following errors shows.Please tell what might be the proble for the following errors. rlm_sql (sql): Driver rlm_sql_unixodbc (module rlm_sql_unixodbc) loaded and linked rlm_sql (sql): Attempting to connect to adore@MSSQL:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_unixodbc #0 rlm_sql_unixodbc: SQL down 08001 [unixODBC][FreeTDS][SQL Server]Unable to connect to data source rlm_sql_unixodbc: Connection failed rlm_sql (sql): Failed to connect DB handle #0 rlm_sql (sql): starting 1 rlm_sql (sql): starting 2 rlm_sql (sql): starting 3 rlm_sql (sql): starting 4 rlm_sql (sql): Failed to connect to any SQL server. Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique With Regards Elangbam Johnson

1 0

2.0.2 RPM build on redhat 5
by Allen Tsao 23 Feb '08

23 Feb '08

Hi all, I just become a member of this mail list. After download the newest version 2.0.2 of freeradius, I try to build a RPM on redhat 5. I typed all the instructions in terms of the website, but I got an error which show some information about freeradius and freeradius-server. After google internet, I unzip the file freeradius-server-2.0.2.tar.gz, rename the directory name to freeradius-2.0.2, then tar it to freeradius-2.0.2.tar.gz. Also I changed the third line in freeradius.spec from Name: freeradius-server to Name: freeradius. and then run rpmbuild -bb freeradius.spec. I got error: gmake[6]: Entering directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules/rlm_acctlog' if [ "xrlm_acctlog" != "x" ]; then \ /usr/bin/libtool --mode=install /root/rpmbuild/BUILD/freeradius-2.0.2/install-sh -c -c \ rlm_acctlog.la /var/tmp/freeradius-root/usr/lib/rlm_acctlog.la || exit $?; \ rm -f /var/tmp/freeradius-root/usr/lib/rlm_acctlog-2.0.2.la; \ ln -s rlm_acctlog.la /var/tmp/freeradius-root/usr/lib/rlm_acctlog-2.0.2.la || exit $?; \ fi libtool: install: error: cannot install `rlm_acctlog.la' to a directory not ending in /usr/local/lib gmake[6]: *** [install] Error 1 gmake[6]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules/rlm_acctlog' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules' gmake[4]: *** [install] Error 2 gmake[4]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2' make: *** [install] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.21389 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21389 (%install) It will be appreciated if somebody can help me. Best, Allen

4 3

RE: February 85% OFF
by admin＠viagra.com 22 Feb '08

22 Feb '08

1 0