August 2008 - Freeradius-Users - lists.freeradius.org

Juniper and Nortel user access
by Ivan . 11 Aug '08

11 Aug '08

Hi I have a user setup in the /etc/freeradius/users file which can access Juniper routers, but I would like the same user to be able to access Nortel switches, but when I try and combine the user attributes authentication fails. This conf works for both devices:- test Auth-type:=Local, User-Password := "test" Juniper-Local-User-Name ="DEV" test2 Cleartext-Password := "test" Service-Type = Administrative-User When I try and combine auth fails for the Nortels. test Auth-type:=Local, User-Password := "test" Juniper-Local-User-Name ="DEV" Service-Type = Administrative-User cheers Ivan

4 6

Freeradius && Diffie-Hellman
by Sergio 10 Aug '08

10 Aug '08

Hi, Has anybody ever change the type of key exchange using eap-tls? eap.conf: ......... rsa_key_exchange = yes dh_key_exchange = no rsa_key_length =1024 dh_key_length....... ........... output of radiusd -X ........ Module: Instantiating eap-tls tls { rsa_key_exchange = yes dh_key_exchange = no rsa_key_length =1024 ........ } ........... Does it would be enough?

2 3

accounting method
by ramakuka 10 Aug '08

10 Aug '08

Hi, I just installed new Freeradius server (2.0.5) using LDAP and mysql for accounting and it's all working grate. I want to change the accounting method so instead of adding one accounting record with NULL at the acctstoptime field at accounting start I want it to be one record for accounting start with the code 1 and another record for stop with code 2. That way I can monitor user concurrency and so . I tried to google it and didn't found anything useful for this , is there anywhere I can read about this or anyone can help me here regarding this? Thanks in advance , Ram

3 2

Re: 2.0.5 on Solaris, openssl 0.9.8h ---> does support sha256 ?
by Rafiqul Ahsan 09 Aug '08

09 Aug '08

I have tested authentication works with my existing certs. When I load the new certs (sha256), and I see below error at "radiusd -X" I am using FreeeRadius 2.0.5, openssl 0.9.8h, OS Solaris. Is there any known patch for this to support advance encryption...I believe I saw somewhere in web that 1.1.7 has this patch, how about 2.0.5 ? Thanks for your thoughts, Rafi tls { rsa_key_exchange = yes dh_key_exchange = no rsa_key_length = 1024 dh_key_length = 1024 verify_depth = 2 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/wmxforum/xohm.com3.pvt.pe m" certificate_file = "/usr/local/etc/raddb/certs/wmxforum/xohm.com3.pem" CA_file = "/usr/local/etc/raddb/certs/wmaxforum/sam-cacert.pem" dh_file = "/usr/local/etc/raddb/certs/wmxforum/DH" random_file = "/usr/local/etc/raddb/certs/wmxforum/random" fragment_size = 1024 include_length = yes check_crl = no } rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory rlm_eap_tls: Error reading Trusted root CA list /usr/local/etc/raddb/certs/wmaxf orum/sam-cacert.pem rlm_eap: Failed to initialize type tls /usr/local/etc/raddb/eap.conf[3]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap ". /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticat e section. } } Errors initializing modules On 8/7/08, Rafiqul Ahsan <rafiqul.ahsan(a)gmail.com> wrote: > I changed the Makefile for random file creation step (as a fix for my > earlier posted error)... > > This is what I found at Makefile : > > random: > @if [ -e /dev/urandom ] ; then \ > dd if=/dev/urandom of=./random count=10 >/dev/null 2>&1; \ > else \ > date > ./random; \ > fi > > I Changed to ... > > random > date > ./random; > > That solved my earlier problem, and now my server is listening. > > Thanks, > Rafi > > > > > > > > On 8/7/08, Rafiqul Ahsan <rafiqul.ahsan(a)gmail.com> wrote: > > I see below error when I execute bootstrap > > > > bash-3.00# /usr/local/etc/raddb/certs/bootstrap > > ............................................... > > make: Nothing to be done for `ca'. > > make: Nothing to be done for `server'. > > make: `dh' is up to date. > > /bin/sh: test: argument expected > > make: *** [random] Error 1 > > > > On 8/7/08, Alan DeKok <aland(a)deployingradius.com> wrote: > > > Rafiqul Ahsan wrote: > > > > Thanks, I was able to build freeradius 2.0.5 on Solaris 10. However, > > > > server is not running, and I see below error when I run "radiusd -X". > > > > Here is the output. > > > ... > > > > make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" > > > > } > > > > Exec-Program output: > > > > > > It's trying to run the bootstrap command. It's not working. > > > > > > Run the bootstrap command by hand, and then re-start the server. > > > > > > Alan DeKok. > > > - > > > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > > > > > > > -- > > Rafiqul Ahsan > > > > > -- > Rafiqul Ahsan > -- Rafiqul Ahsan

2 3