March 2008 - Freeradius-Users - lists.freeradius.org

A good Open Source Billing Program For Freeradius?
by Lance Buttars 23 Mar '08

23 Mar '08

I need to setup a hotspot with billing capabilities and was wondering if anyone had some recommendations.

6 6

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy and proxy(forward) request as PAP
by Ryan 22 Mar '08

22 Mar '08

Sorry for being not specific enough. Was thinking of understanding how it works and then figure out the configuration myself. Basically I need to terminate a request that uses EAP/PEAP on the main radius and proxy the request to an inner radius server for authentication using PAP. What will I need to configure in order to get it forwarded correctly? Thanks/Regards, Ryan Ryan wrote: > Just read through some of the messages available on proxy tunneling. > I'm currently using 2.0.2 and read through the examples on inner > tunnel which seems to be able to do what I need. Can someone help by > providing more details on how it actually works? PEAP authentication is really SSL + authentication inside of the SSL tunnel. So... the server handles authentication "outside" of the tunnel, and authentication "inside" of the tunnel as independent authentications. Do you have *specific* questions? Asking "how does it work" is rather open-ended. Alan DeKok.

2 1

Re: Problem Freeradius+Ipcop ProxyAdv with mysql
by vabbè 21 Mar '08

21 Mar '08

1 - The secret key is correct, it's same in server and NAS (radius123). 2 - The entry Auth-Type System is comment out already. Ivan Kalik wrote: > > 1. There is quite a clear warning in the debug. > > 2. Comment out the entry in users file setting Auth-Type System if you > are not using it. > > Ivan Kalik > Kalik Informatika ISP > > > Dana 18/3/2008, "vabbè" <emailpersonal(a)email.it> piše: > -- View this message in context: http://www.nabble.com/Problem-Freeradius%2BIpcop-ProxyAdv-with-mysql-tp1612… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

Hostapdradiusclient->-freeradiusproxy-X-freeradiusserver
by romain.raynaud＠orange-ftgroup.com 21 Mar '08

21 Mar '08

Hi! I have a problem to configure the freeradius 2.0.2 proxy to communicate with the freeradius 2.0.2 server. And I found nothing to help me neither on the web nor on the wiki. My architecture is this one : Hostapd radius client 10.193.11.212 -> 10.193.11.232 -> 10.193.11.166 freeradius server freeradius proxy I have no connection message between the proxy and the server and no proxied messages send from the radius proxy. ok all my requests are receive by the proxy Could you help me in my configuration or give me all the configuration files for example. thanks My configuration is this one: Server : Radiusd.conf Listen { type = auth ipaddr = 10.193.11.166 port = 1812 } Listen { type = acct ipaddr = 10.193.11.166 port = 1813 } proxy_requests = no Client.conf client 10.193.11.232/32 { secret = testing123 shortname = proxy } Proxy : Radiusd.conf Listen { type = auth ipaddr = 10.193.11.232 port = 1812 } Listen { type = acct ipaddr = 10.193.11.232 port = 1813 } Listen { type = proxy ipaddr = 10.193.11.232 port = 1814 } proxy_requests = yes Proxy.conf Home_server{ type = auth+acc ipaddr = 10.193.11.166 shortname = proxy secret = testing123 } Client.conf client 10.193.11.212/32 { secret = secret shortname = oaporg } Client : ok all my requests are receive by the proxy secret = secret shortname = oaporg nas ip addr = 10.193.11.212 proxy server = 10.193.11.232 Romain RAYNAUD

3 2

WPA_Supplicant re-authentication
by Arran Cudbard-Bell 21 Mar '08

21 Mar '08

Hi All, I know this isn't strictly a FreeRADIUS issue but many of the users of the list are involved in academia and so may have come across this with their linux users. wpa_Supplicant appears to work fine on wireless networks, but on wired networks it attempts to re-authenticate every 30 seconds.. I can't find the root cause for this; packet traces show no EAPOL activity prior to re-authentication and the supplicant itself reveals nothing in it's output or logs. The only possible explanation I can think of, is the out-of-order EAP-Notification packet the ProCurve NAS sends after the EAP-Success packet. Could this confuse the supplicant into thinking the session was ongoing, and then time out after 30 seconds and restart the authentication process ? It certainly breaks the EAP Spec.. It anyone else experiencing this with different NAS? Thanks, Arran

4 3

Re: Terminate EAP-PEAP client connection at FreeRadius Proxy and proxy(forward) request as PAP
by Ryan 21 Mar '08

21 Mar '08

Hi All, I'm having a problem trying to configure proxy from one radius to another. Users are connecting using 802.1x with EAP/PEAP. There are two groups of users, one group are authenticated on the main radius using local LDAP. However for the second group of users, they have to be authenticated via the radius proxy. The problem is the radius proxy does not have EAP configured and its not an option to reconfigure it with EAP. >From the threads, I found something similar in http://lists.freeradius.org/pipermail/freeradius-users/2008-February/069230… applies as well, will this applies to my situation as well? Thanks/Regards, Ryan

2 2

Freeradius with Nortel WSS 2300
by Mike Wing 21 Mar '08

21 Mar '08

Has anyone tried to use free radius to authenticate users via username/password to a Nortel wireless security switch 2300. I can get 802.1x working with a self-signed cert but want to be able to plain username/password authentication. Mike Wing IT Manager Anaheim Ducks Honda Center (714) 704-2549 phone (714) 704-2406 fax mwing(a)hondacenter.com

3 2

Hint. Need help
by Mikhail Novikov 21 Mar '08

21 Mar '08

Hello Please, what the hint should I add to hints file to remove Nas-Port-ID attribute Nas-Port-ID = GigabitEthernet 0/0/3.23203101:2321-121 and add PortID like this PortID = 2321-121 ? Thanks

2 1

rlm_sqlcounter + reset=never
by Tuc at T-B-O-H.NET 20 Mar '08

20 Mar '08

Hi, I'm using the "sqlcounter noresetcounter" which sets the reset to "never". When it sends back the reply, it ends up looking like : Your maximum never usage time has been reached Is there a way to change it short of just changing the line : snprintf(msg, sizeof(msg), "Your maximum %s usage time has been reached", data->reset); not to insert data->reset ? Thanks, Tuc

1 0

php resource application
by Charnjit Sidhu 20 Mar '08

20 Mar '08

Hi, I have a working client which authenticates with the radius server, I wanted to know if anyone has had experience of using a php/sql application called mrbs. I want the application to use radius authentication to authenticate users logging into this resource booking application, there are scripts provided for other forms of authentication (ie pam, ldap, smb) however wanted to know if anyone has created a php or any other kind of script to do this. It looks like I will need to add php script to authenticate but not sure what needs to go in it. Charnjit

4 4