October 2009 - Freeradius-Users - lists.freeradius.org

Re: Improving Auth-Rate
by kachin Agarwal 13 Oct '09

13 Oct '09

Hi, I m trying to improve the auth rate. the auth-rate i m getting now is 3 i.e number of mobile units that can authenticate per minute is 3. So how can i increase it to 5 or something? Which part of the code should i focus on? Thanx From cricket scores to your friends. Try the Yahoo! India Homepage! Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew

4 3

Re: Active Directory/freeradius/enterasys - combination
by Ivan Kalik 13 Oct '09

13 Oct '09

> Now I need a username/password auth against AD. > Ntlm-auth works very well. > > If I activate ldap in /etc/raddb/modules: > The server don't do ldap. > > What is my mistake ? > > First the server should do a ntlm-auth and then check an ldap-group in > AD. How does that ldap-group check look like and where is it? BTW I don't see ntlm-auth on that debug either. Ivan Kalik Kalik Informatika ISP

1 0

perl_rlm and differences FR 1 and 2
by David Jones 13 Oct '09

13 Oct '09

Thanks to some handy hints in here, I've had some success with rlm_perl. But (and there is always a but) I've been happily developing against 2.x but have just discovered I need to actually use 1.x because of RHEL. The rlm_perl link of both version 1 and version 2 points to the same documentation page, so I made the assumption that although theres much different under the covers of FR, by the time you get to perl its all hidden, and I could just take a perl script that works on V2 and run it on V1. But it doesn't. There seems to be different handling of the module return values, and of $RAD_CHECK{'Response-Packet-Type'} = "Access-Challenge". FR V1 seems quite unkeen to send out responses. So, and finally the question; Are there supposed to be differences in behaviour for rlm_perl between V1 and V2? Thanks, Davey.

3 2

acct_postgresql+auth_ldap
by José Johnny RANDRIAMAMPIONONA 13 Oct '09

13 Oct '09

Hi all, I d like to know if someone has already tried to do the accounting (only accounting) thing with postgres and authentication with OpenLdap? There is nothing on wiki ... I am wondering if I have to write some scripts to save the user id, his connection duration ect ...in postgres database.I want to implement the following situation: I don't care what my ldap_server ll return when a user sends a access request packet, but I want to save the name, passwd, the connection duration(so at this time I initialize the connection time which will be incremented until the disconnection time ). Your opinions will be very useful for me. -- JJohnny R Phone: +212663682554, +212533158575 National School of Applied Sciences ZIP 1818 TANGIER 90000 ---------Morocco ---------------

4 6

NAS ? What is the best option
by Marinko Tarlac 13 Oct '09

13 Oct '09

I know that this list is not connected with any hardware vendor but I see that every couple days someone cries here .... NAS problems... I use Mikrotik and I'm not satisfied (duplicated packets, does not support POD correctly , etc) Also, yesterday I see that Cisco can be pain in the a*** too :) So, dear friends... What is the best solution for ISP (PPPoE)?

3 2

Improving Auth-Rate..
by kachin Agarwal 13 Oct '09

13 Oct '09

hi, If i want to improve the auth-rate which part of the code should i focus on? Keep up with people you care about with Yahoo! India Mail. Learn how. http://in.overview.mail.yahoo.com/connectmore

2 1

returning an arbitrary attribute from LDAP
by Sam Hooker 13 Oct '09

13 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, I'm trying to ascertain how to have radiusd return an arbitrary attribute with each successful authentication. My radiusds are doing PEAP/MS-CHAPv2 against Kerberos for authn, and it seems like activating rlm_ldap for authz will cause "Auth-Type = LDAP" to enter my world, which I'm betting will break things. Also, I'm fuzzy as to where I'd do this sort of thing anyway; it seems that post-auth would be the place to start, but am uncertain. Any guidance you could offer (including pointers to existing mailing list threads or other docs) would be much appreciated. Cheers, - -sth sam hooker|sth@noiseplant.com|http://www.noiseplant.com "I have not failed, I've just found 10,000 ways that won't work." Thomas Edison -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version: 0.7.9) iEYEARECAAYFAkrTglwACgkQX8KByLv3aQ2jdgCgpmoEskDoJGeoN2+ySzKRUqK9 /RUAoMGhPZ651eOj3oXGBtSf8ihwcHWO =e5Qa -----END PGP SIGNATURE-----

2 1

Using another passwd file
by Madsen.Jan JMD 13 Oct '09

13 Oct '09

Hello Freeradius users I have a challange about using passwd file in freeradius. I'm running Debian 4.0 Kernel 2.6.18-5-486 I have installed FreeRADIUS Version 1.1.3, for host i486-pc-linux-gnu I have activated the following in radiusd.conf file passwd = /etc/passwd shadow = /etc/shadow This works great :) But since all my users are registered on a HP-UX server, that are running in untrusted inviroment, meaning that username and password are stored in /etc/passwd file I'm copying the passwd from the HP-UX server to my Debian 4.0 server. So now I'm chancing the radiusd.conf file to the following passwd = /etc/freeradius/passwd #shadow = /etc/shadow Now I'm NOT able to authenticate on my radius server. The passwd file from HP-UX looks like this pse:VE74Bof8KAnxo:131:20::/home/pse:/sbin/sh I even tried to work with the passwd module but without mutch luck. Can anyone help me here or give me a tip about how to make it work. Best regards Jan Madsen

1 0

802.1x EAP
by Devinder Singh 13 Oct '09

13 Oct '09

Hi Ivan I managed to install the certificates on XP machine and works filn. I had configured my AP IP addresss in radius Server and shared secret key.yesterday i can get an Ip address when i click on the SSID today i get limited network connectivity. I hse VLAN 3 on the SSID. It was working well yesterday morning. Please could you let me know if i need to configure anything on my AP. Thanks My radius and AP are on the same subnet 203.121.4.x -- Devinder

1 0

current status of other client features via SQL?
by Alan Buxey 12 Oct '09

12 Oct '09

hi, just a quick catch-up on using SQL for client configuration... what is the current status of support for 'require_message_authenticator', 'virtual_server' and 'coa_server' options being fed in via rlm_sql - I'm aware that theres ability to name virtual_server but what happens if the field is entry - does it go to the default virtual_server? what work is needed for these client options to be supported via SQL feed into clients list? thanks alan

2 1