September 2008 - Freeradius-Users - lists.freeradius.org

Python Module with IPPOOL module
by Michael da Silva Pereira 11 Sep '08

11 Sep '08

Hi there, I'm not sure if anybody has been able to do this, Haven't found much on the web for the Python with freeradius, but I'm trying to allocate a IP Pool to a specific set of users with a Python module. Now I know the Pool-Name is a check item and not a Reply Item, but can I do this from Python or is just not possible? The python handles my Auth, Acct, etc.. However I'm trying to drop different users into different IP-Pools depending on criteria in a database. So I'm unable to do this from users files and such... Any ideas? Thanks, Michael da Silva Pereira

2 1

Password attrib problem
by Yawar Hadi 11 Sep '08

11 Sep '08

hi all, i have a little problem with user-password attrib. i get the usr password as plain-text in my authorize function of rlm_sql module .when get it from request...... but i want to get it from request in accounting function of rlm_Sql module. its encrypted why........ char *pass[25]; pass =request->password->strvalue; printf("password is : %s",pass); on console its shows like #password is : ?0t\364\237 have any one deal with this problem.plz share your experience with me to overcome this issur. thanks in advance. -- Best regards Yawar Hadi Noshahi QAU Islamabad (+92-0300-5504798)

2 5

Problems with the authentication TLS
by Martin Silvero 11 Sep '08

11 Sep '08

ok, ready! my problem now is the certificates. when I create, the problem is dont can created the user certificate, reading the howto of wiki in the page ( http://freeradius.org/doc/EAPTLS.pdf ). i have this: [root@radius certs]# make client.pem openssl ca -batch -keyfile server.key -cert server.crt -in client.csr -key `grep output_password server.cnf | sed 's/.*=//;s/^ *//'` -out client.crt -extensions xpclient_ext -extfile xpextensions -config ./client.cnf Using configuration from ./client.cnf unable to load CA private key 23294:error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt:evp_enc.c:461: 23294:error:0906A065:PEM routines:PEM_do_header:bad decrypt:pem_lib.c:425: make: *** [client.crt] Error 1 then the user certificates dont created.... somewhere now exactly which thw certificates of the last version im install in user pc? this? --> ca.der and client.key? why is the extension of certificates than used for the users? thanks!! -- -- Silvero Martin

2 1

Freeradius eap extension
by Fernando 11 Sep '08

11 Sep '08

Hi all, I have some cuestions development related. First one: can eap-ttls method carry inside any eap method? if not... can eap-ttls be extended to do it? Second one: with the actual release, Is it possible to develop a new eap-method that carries inside an undetermined number of eap methods? Regards, Fernando.

2 1

: Re: Cisco VPN Server 3000 + Radius + LDAP = heeelp!!
by Osvaldo Campos M. - Administrador Red STI 10 Sep '08

10 Sep '08

Sorry!!!... faded format when sending the earlier mail -- Osvaldo H. Campos Molina Administrador de Red STI - Univ. de Chile

1 0

RADIUS Administration interface
by Alan DeKok 10 Sep '08

10 Sep '08

I've added a RADIUS administration interface to the latest git tree. It's experimental (i.e. VERY), and has little authentication or authorization. It's purpose is to test the concepts, and to see if it's what users want. Server configuration: raddb/sites-available/control-socket Client: radmin You get a prompt, and not much else. Typing "help" gets you some information: radmin> help hup [module] - sends a HUP signal to the server, or optionally to one module terminate - terminates the server, and causes it to exit show <command> - do sub-command of show set <command> - do sub-command of set You can HUP the server, ask it to stop, see the configuration of a module, show the list of loaded modules. As an interesting note, you can also *change* parts of the configuration of a running system. And then hup *just* one module, rather than the whole server. And then maybe the server crashes. :) Don't use this in production. Once it's a little more developed, we'll add features like "authentication" of the users on the administration interface. And "command authorization". Alan DeKok.

7 11

Making each virtual server have their own sql.conf file
by Nataniel Klug 10 Sep '08

10 Sep '08

Hello all, Here I am again. I need to make that every virtual server I have running look for it's data on different mysql database and tables. For this I need to set up each virtual server too look into it's own sql.conf... I could not find any doc about this. PS.: Why even if a client gets reject from the server the still sends reply like this: Sending Access-Reject of id 138 to 127.0.0.1 port 44881 Mikrotik-Rate-Limit = "100k/200k 200k/400k 80k/160k 180/180 8 60k/120k" Waiting for some tips... -- Att, NATANIEL KLUG nata(a)cnett.com.br LEIA O DIA-A-DIA DO NATA http://nataklug.blogspot.com/ Cyber Nett - Internet Banda Larga www.cnett.com.br (42) 3635-2957 Rua Diogo Pinto, 1046, Centro Laranjeiras do Sul - PR Brasil - 85301-290 "... também os sábios possuem coração tangível e podem, por vezes, usar da ciência como meio de demonstrar impressões sentimentais de que muitos não os julgam suscetíveis." Visconde de Taunay

2 1

Wiki Login
by Kirk Wallace 10 Sep '08

10 Sep '08

This page: http://wiki.freeradius.org/Special:Userlogin indicates that an account can be created, but I don't see a link or instructions on how to do that. Could someone please point me to this information? Kirk

1 0

AD Username sensitivity
by Charlie B 10 Sep '08

10 Sep '08

Hello, I just wanted to ask how you guys are dealing with the seemingly case sensitive nature of AD 2003 (Pre-Windows 2000 Username) with radius? Are you guys using a different attribute instead of sAMAccount or a module to lowercase/initial caps the username? Running: freeradius-krb5-2.0.5-2.fc9.i386 freeradius-ldap-2.0.5-2.fc9.i386 freeradius-2.0.5-2.fc9.i386 freeradius-utils-2.0.5-2.fc9.i386 freeradius-libs-2.0.5-2.fc9.i386 samba-common-3.2.1-0.18.fc9.i386 samba-3.2.1-0.18.fc9.i386 samba-winbind-3.2.1-0.18.fc9.i386 samba-client-3.2.1-0.18.fc9.i386 Everything works great except when a user tries to validate with a username case not exactly that of AD. I also realize this is much more a AD issue but I can't find any information as to what I need to change in GP or registry to correct this behavior. A link or your comments would be greatly appreciated. Thanks

1 0

Out of memory problem
by Jean Carlos Oliveira Guandalini 10 Sep '08

10 Sep '08

Hello, I am using the version 1.1.7 with authentication / accounting in mysql (rlm_sql). The problem is that the use of memory increasing until it is exhausted: dmesg messages: Out of Memory: Killed process 28272 (radiusd). Out of Memory: Killed process 1149 (radiusd). Out of Memory: Killed process 1155 (radiusd). The problem can only be solved restarting or reloading the radiusd. After restarting, the use of memory back to normal. It is a bug in version? Kernel problem ??? (kernel version is 2.6.15) Thanks Sorry for my english

2 1