March 2008 - Freeradius-Users - lists.freeradius.org

Error EAP
by Gustavo Chavelas 18 Mar '08

18 Mar '08

Hi to all. I'm installing freeradius-server-2.0.2.tar.gz,i was to configured it, but when I try to start radiusd -X, I have an error : rlm_eap: No such sub-type for default EAP type peap /usr/local/etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /usr/local/etc/raddb/radiusd.conf[1944]: Failed to find module "eap". /usr/local/etc/raddb/radiusd.conf[1891]: Errors parsing authenticate section. } } Errors initializing modules Im searching for solve this error, something have any suggest? Saludos cordiales,

3 2

Help me with proxying certain packets
by Dmytro O. Redchuk 18 Mar '08

18 Mar '08

Hello, i guess i need to do the following. I have a freeradius which proxies requests to two destinations -- one destination for packets with certain Called-Station-Id, and one default destination. And i wish to select some requests by other criteria (other than Called-Station-Id), which may change in general case. So, when some conditions occur, i need freeradius to proxy such a request to first, specific destination (not "default" one). So, something like this works in general case: users: --------------------- DEFAULT Called-Station-Id == "OKLMNPQ", Proxy-To-Realm := "specific" DEFAULT Proxy-To-Realm := "default" ---------------------------- I have tried to write a python module, which -- if those "specific" conditions occur -- updates User-Name (adds realm "@specific" to username) and sets (('Autz-Type', 'Specific'),) in return tuple and changed authorize section like this: radiusd.conf: -------------- authorize { ... files Autz-Type Specific { # to look into "users" once again: files } } ---------------------------- and users like this: users: --------------------- DEFAULT User-Name =~ "@specific", Proxy-To-Realm := "specific" ... ---------------------------- ... but this doesnt work as expected. I can see in "-X" output that my module changes User-Name, but this doesnt work however. So, how can i perform this? In a case when i need to write a module to catch those specific criteria? Can i set and use Autz-Type for this? I am not sure that i will use this in production, but would like to finish as an exercise at least, anyway. I have FreeRADIUS 1.1.7 with rlm_python. Thank you very much, -- Dmytro O. Redchuk

2 2

Re: Freeradius + openldap + 802.1x - Solved....
by Fabio Silva 18 Mar '08

18 Mar '08

Solved.... I can authenticate in radius with my ldap user account... But now... i would like to know.. if there is any way to check the Group that the user is. I would like to configure to accept all users from the group "Users". How can i do it? Regards. On Mon, Mar 17, 2008 at 4:50 PM, Fabio Silva <fssilva(a)gmail.com> wrote: > Hi all, does someone have a howto about how to configure it?? > > I have already read this link > http://wiki.freeradius.org/index.php/Rlm_ldap but i need some more > information... > > I know that i must use the radius schema, its already configured in my > slapd.conf i created a user with this ldif sample.. > dn: cn=test,ou=users,dc=radius,dc=local > objectClass: inetOrgPerson > objectclass: radiusprofile > objectClass: top > givenName: test > cn: teste > uid: test > > I configured the clients.conf with the network that i want to use.. > client 192.168.2.0/24 { > secret = secret123 > shortname = test > } > > What else is needed to configure it? > > Someone help me? > > Regards, > -- > Fabio S. Silva > Mail: fssilva(a)gmail.com > -- Fabio S. Silva Mail: fssilva(a)gmail.com

2 1

Freeradius Execute Script
by fvt3 18 Mar '08

18 Mar '08

I understand that it is possible to have Freeradius execute a script when a user authenticate. What I want to do is to be able to pass that user name and the client's ip address to the script. This is my setup, I have freeradius with mysql setup. radgroupreply table: testprogramExec-Program-Wait==/usr/local/etc/raddb/test.pl When user Joe authenticates with his credential, radius would look in mysql and execute the test.pl script. How can I pass the user name "joe" and client's ip address to the test.pl script? ____________________________________________________________________________________ Never miss a thing. Make Yahoo your home page. http://www.yahoo.com/r/hs

2 1

Postgres SQL Alarm on duplicated record
by banga 18 Mar '08

18 Mar '08

Hello. Some times my NAS resend START record to RADIUS. The And I get the alarm messages like that , because the differences in this start record is only in Start time and radacct_acctuniqueid_key are always equal for such sessions. : Wed Mar 12 18:05:10 2008 : Error: rlm_sql (sql): Couldn't insert SQL accounting START record - ERROR: duplicate key violates unique constraint "radacct_acctuniqueid_key" But, in any case all such start records are put to database. How I cat stop put such duplicate records? -- View this message in context: http://www.nabble.com/Postgres-SQL-Alarm-on-duplicated-record-tp16046727p16… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

2.0.3 - sites-enabled/inner-tunnel and sites-available/inner-tunnel
by David Wood 18 Mar '08

18 Mar '08

Hi there, I'm working on updating the FreeBSD net/freeradius2 port to 2.0.3. As always, this makes me scrutinise the changes between versions. In 2.0.3, raddb/Makefile now creates a for sites-enabled/inner-tunnel. However, sites-available/inner-tunnel, the destination of that link, isn't installed because it has been omitted from the definition of FILES in raddb/Makefile. Is this a mistake? If sites-available/inner-tunnel has been mistakenly omitted from FILES in raddb/Makefile, what about sites-available/copy-acct-to-home-server, sites-available/proxy-inner-tunnel, sites-available/buffered-sql and sites-available/vmps? Should they all be in FILES as well? If there's a problem here, I'll patch it in the FreeBSD port in anticipation of a FreeRADIUS fix in 2.0.4. Best wishes, David -- David Wood david(a)wood2.org.uk

2 1

Help me please (about freeradius+openldap+nas)
by Koko Kurniawan 17 Mar '08

17 Mar '08

i have trouble in configuration RADIUS for wireless LAN. NAS ( access point) never send User-Password to my Radius server. Can you tell me why it could be happened?? i try to use default configuration ( from freeradius), but itś still not working. i will give you my radiusd.conf and log file from radius server. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

Freeradius + openldap + 802.1x
by Fabio Silva 17 Mar '08

17 Mar '08

Hi all, does someone have a howto about how to configure it?? I have already read this link http://wiki.freeradius.org/index.php/Rlm_ldap but i need some more information... I know that i must use the radius schema, its already configured in my slapd.conf i created a user with this ldif sample.. dn: cn=test,ou=users,dc=radius,dc=local objectClass: inetOrgPerson objectclass: radiusprofile objectClass: top givenName: test cn: teste uid: test I configured the clients.conf with the network that i want to use.. client 192.168.2.0/24 { secret = secret123 shortname = test } What else is needed to configure it? Someone help me? Regards, -- Fabio S. Silva Mail: fssilva(a)gmail.com

1 0

OT:securew2 problem with Vista
by Sergio Belkin 17 Mar '08

17 Mar '08

Hi, I was using with no problem securew2 3.3.3. on Windows XP but I have problems with laptops with Windows Vista, I installed the software and configured wireless network settings but login dialog box never appears, always the "fine" vista native box does it instead... Please, if someone is using this software and could get working Vista, tell me how you did it. Thanks in advance! -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

3 5

Rewriting Attributes with Freeradius
by mrhotstandby＠gmail.com 17 Mar '08

17 Mar '08

Hi there, i looked around and found nothing which really helped, so i'll ask you :) I want my freeradius to rewrite the vlan attributes for cetrain clients. Setup is like having all users in my ldap, with vlan etc. and all is working fine so far. Now i have an office which has other vlans due to an migration than the main office. Now i want my vlan IDs rewritten by freeradius for that office. >From what i have read, i can do it with rlm_perl or maybe with rlm_attr_rewrite, but i didn't found anything about how exactly... If someone could point me to a doc or so, would be really nice. Thanksalot! (especially for the freeradius itself :)

3 9