October 2009 - Freeradius-Users - lists.freeradius.org

RE:
by INACIO ALVES 20 Oct '09

20 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? I think that the http://wiki.freeradius.org/SQL_HOWTO has a how-to out-of-date because I don't find the schema to the table usergroup. Third. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

3 2

IP address assignment for the authenticated users in Free radius
by Anoop C 20 Oct '09

20 Oct '09

Hi We are running EAP-TLS authentication for office users using WiFi network. This is a certificate based authentication and we are using Free RADIUS. I would like to know whether we can assign IP address dynamically to the users through FREE RADIUS server ie RADIUS server works as DHCP server. So after successful authentication Server should through an IP address which is configured against that particular MAC of the user in the server. Regards Anoop C Get your world in your inbox! Mail, widgets, documents, spreadsheets, organizer and much more with your Sifymail WIYI id! Log on to http://www.sify.com ********** DISCLAIMER ********** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If this is a forwarded message, the content of this E-MAIL may not have been sent with the authority of the Company. If you are not the intended recipient, an agent of the intended recipient or a person responsible for delivering the information to the named recipient, you are notified that any use, distribution, transmission, printing, copying or dissemination of this information in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at admin(a)sifycorp.com

2 1

Disconnect message in 2.1.7 release
by Vijay Badola 20 Oct '09

20 Oct '09

Hi, I have seen the Changelog of release freeradiusd-2.1.7. It says there is full support of 'CoA and Disconnect messages'. My question is: (i) Is it possible to send disconnect/COA message internally from code? (ii) If yes then how? (iii) If not then how can I send the disconnect message from outside? I have also seen your documents to send disconnect message using radclient(externally).but I have doubt how I will get trigger to send Disconnect/COA message if I am doing prepaid accounting. ,Regards Vijay Badola +919958995992(M) +911244200704(O)

2 1

RE: Check_item still wraps at 4gb
by Neville 19 Oct '09

19 Oct '09

Hi Marcel, Are you able to share your work around, because I have the same problem. Either on-list or direct email? Thx Nev

1 0

how to call an external script
by aangles 19 Oct '09

19 Oct '09

Hello, I want freeradius calls an external script and send to it the User-Name it gets from the NAS in an access-request radius packet. So I am using the echo module, I configure as: # # The name of the program to execute, and it's # arguments. Dynamic translation is done on this # field, so things like the following example will # work. # #program = "/bin/echo %{User-Name}" program = "/etc/raddb/xxxx.pl %{User-Name}" # # The attributes which are placed into the # environment variables for the program. And I add this module into the authorize section after the pap module. But it does not call the script. Another thing, if I call the script like the following, then the script is executed and takes myusername as an argument. With freeradius it should to automatically the same? # ./xxxx.pl %myusername Thanks a lot -- View this message in context: http://www.nabble.com/how-to-call-an-external-script-tp25961979p25961979.ht… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

RE: RE: ,
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? Third. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

1 0

RE: Freeradius-Users Digest, Vol 54, Issue 89
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? Third. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

1 0

AW: Freeradius-Users Digest, Vol 54, Issue 89
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? Second. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

1 0

RE:
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks to all, But, how I said, I don't need proxy, Then I have commented the line proxy proxy_requests = no #$INCLUDE proxy.conf See http://pastebin.com/m52c747e3 to my radiusd.conf Therefore, I don't know why the log is Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the request. Not performing PAP. Sun Oct 18 19:20:54 2009 : Info: ++[pap] returns noop Sun Oct 18 19:20:54 2009 : Info: WARNING: You set Proxy-To-Realm = LOCAL, but the realm does not exist! Cancelling invalid proxy request. Sun Oct 18 19:20:54 2009 : Info: WARNING: Please update your configuration, and remove 'Auth-Type = Local' Sun Oct 18 19:20:54 2009 : Info: WARNING: Use the PAP or CHAP modules instead. Sun Oct 18 19:20:54 2009 : Info: No User-Password or CHAP-Password attribute in the request. Sun Oct 18 19:20:54 2009 : Info: Cannot perform authentication. Sun Oct 18 19:20:54 2009 : Info: Failed to authenticate the user. Sun Oct 18 19:20:54 2009 : Auth: Login incorrect: [user] (from client wlan- alves-private-network port 0 via TLS tunnel)On my proxy.conf I have(even whithout use then, I don't alter this file) # DEFAULT EAP-Type == PEAP, Proxy-To-Realm := LOCAL # realm LOCAL { # If we do not specify a server pool, the realm is LOCAL, and # requests are not proxied to it. } Inácio Alves http://www.polluxweb.com/inacioalves/site --- freeradius-users-request(a)lists.freeradius.org <freeradius-users-request(a)lists.freeradius.org> schrieb am Mo, 19.10.2009: Message: 1 Date: Mon, 19 Oct 2009 00:54:39 +0000 (GMT) From: INACIO ALVES <inacioalves(a)yahoo.de> To: freeradius-users(a)lists.freeradius.org Message-ID: <370578.7811.qm(a)web27401.mail.ukl.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" I'm trying configure the freeRADIUS on my wireless network but i'm having problems. My scnario: Debian Lenny+MySQL5.0+freeRADIUS 2.1.7 clients ----- ((( AP ))) ____ [freeRADIUS server] When I execute the radiustest I get rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=168, length=20 and when I execute radclient I get Received response ID 146, code 2, length = 32 But when I try authenticate on my nootebook I get rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=168 My debug output is on address: http://pastebin.com/f7e47862f. My clients.conf is on: http://pastebin.com/f30e4955d And my users is on: http://pastebin.com/f5d958f63 This is my initial configuration. I want migrate to MySQL or PostgreSQL when the server is ready, I don't need proxy, and i need provide/revoke digital certificates to my clients. ------------------------------ Message: 7 Date: Mon, 19 Oct 2009 09:07:25 +0100 From: "nf-vale" <nf-vale(a)critical-links.com> Subject: Re: To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <200910190907.25443.nf-vale(a)critical-links.com> Content-Type: Text/Plain; charset="iso-8859-15" Check your proxy / realms configuration. The reason why it fails is described in the logs: Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the request. Not performing PAP. Sun Oct 18 19:20:54 2009 : Info: ++[pap] returns noop Sun Oct 18 19:20:54 2009 : Info: WARNING: You set Proxy-To-Realm = LOCAL, but the realm does not exist! Cancelling invalid proxy request. Sun Oct 18 19:20:54 2009 : Info: WARNING: Please update your configuration, and remove 'Auth-Type = Local' Sun Oct 18 19:20:54 2009 : Info: WARNING: Use the PAP or CHAP modules instead. Sun Oct 18 19:20:54 2009 : Info: No User-Password or CHAP-Password attribute in the request. Sun Oct 18 19:20:54 2009 : Info: Cannot perform authentication. Sun Oct 18 19:20:54 2009 : Info: Failed to authenticate the user. Sun Oct 18 19:20:54 2009 : Auth: Login incorrect: [user] (from client wlan- alves-private-network port 0 via TLS tunnel) Nelson Vale On Monday 19 October 2009 01:54:39 INACIO ALVES wrote: > I'm trying configure the freeRADIUS on my wireless network but i'm having > problems. > > > > My scnario: > > Debian Lenny+MySQL5.0+freeRADIUS 2.1.7 > > > > clients ----- ((( AP ))) ____ [freeRADIUS server] > > > > When I execute the radiustest I get > > rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=168, > length=20 > > > > and when I execute radclient I get > > Received response ID 146, code 2, length = 32 > > > > But when I try authenticate on my nootebook I get > rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=168 > > > > My debug output is on address: http://pastebin.com/f7e47862f. > > My clients.conf is on: http://pastebin.com/f30e4955d > > And my users is on: http://pastebin.com/f5d958f63 > > > > This is my initial configuration. I want migrate to MySQL or PostgreSQL > when the server is ready, I don't need proxy, and i need provide/revoke > digital certificates to my clients. > > In?cio Alves > http://www.polluxweb.com/inacioalves/site ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 54, Issue 86 ************************************************

2 1

AW: Freeradius-Users Digest, Vol 54, Issue 86
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks to all, But, how I said, I don't need proxy, Then I have commented the line proxy proxy_requests = no #$INCLUDE proxy.conf See http://pastebin.com/m52c747e3 to my radiusd.conf Therefore, I don't know why the log is Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the request. Not performing PAP. Sun Oct 18 19:20:54 2009 : Info: ++[pap] returns noop Sun Oct 18 19:20:54 2009 : Info: WARNING: You set Proxy-To-Realm = LOCAL, but the realm does not exist! Cancelling invalid proxy request. Sun Oct 18 19:20:54 2009 : Info: WARNING: Please update your configuration, and remove 'Auth-Type = Local' Sun Oct 18 19:20:54 2009 : Info: WARNING: Use the PAP or CHAP modules instead. Sun Oct 18 19:20:54 2009 : Info: No User-Password or CHAP-Password attribute in the request. Sun Oct 18 19:20:54 2009 : Info: Cannot perform authentication. Sun Oct 18 19:20:54 2009 : Info: Failed to authenticate the user. Sun Oct 18 19:20:54 2009 : Auth: Login incorrect: [user] (from client wlan- alves-private-network port 0 via TLS tunnel)On my proxy.conf I have(even whithout use then, I don't alter this file) # DEFAULT EAP-Type == PEAP, Proxy-To-Realm := LOCAL # realm LOCAL { # If we do not specify a server pool, the realm is LOCAL, and # requests are not proxied to it. } Inácio Alves http://www.polluxweb.com/inacioalves/site --- freeradius-users-request(a)lists.freeradius.org <freeradius-users-request(a)lists.freeradius.org> schrieb am Mo, 19.10.2009: Message: 1 Date: Mon, 19 Oct 2009 00:54:39 +0000 (GMT) From: INACIO ALVES <inacioalves(a)yahoo.de> To: freeradius-users(a)lists.freeradius.org Message-ID: <370578.7811.qm(a)web27401.mail.ukl.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" I'm trying configure the freeRADIUS on my wireless network but i'm having problems. My scnario: Debian Lenny+MySQL5.0+freeRADIUS 2.1.7 clients ----- ((( AP ))) ____ [freeRADIUS server] When I execute the radiustest I get rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=168, length=20 and when I execute radclient I get Received response ID 146, code 2, length = 32 But when I try authenticate on my nootebook I get rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=168 My debug output is on address: http://pastebin.com/f7e47862f. My clients.conf is on: http://pastebin.com/f30e4955d And my users is on: http://pastebin.com/f5d958f63 This is my initial configuration. I want migrate to MySQL or PostgreSQL when the server is ready, I don't need proxy, and i need provide/revoke digital certificates to my clients. ------------------------------ Message: 7 Date: Mon, 19 Oct 2009 09:07:25 +0100 From: "nf-vale" <nf-vale(a)critical-links.com> Subject: Re: To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <200910190907.25443.nf-vale(a)critical-links.com> Content-Type: Text/Plain; charset="iso-8859-15" Check your proxy / realms configuration. The reason why it fails is described in the logs: Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the request. Not performing PAP. Sun Oct 18 19:20:54 2009 : Info: ++[pap] returns noop Sun Oct 18 19:20:54 2009 : Info: WARNING: You set Proxy-To-Realm = LOCAL, but the realm does not exist! Cancelling invalid proxy request. Sun Oct 18 19:20:54 2009 : Info: WARNING: Please update your configuration, and remove 'Auth-Type = Local' Sun Oct 18 19:20:54 2009 : Info: WARNING: Use the PAP or CHAP modules instead. Sun Oct 18 19:20:54 2009 : Info: No User-Password or CHAP-Password attribute in the request. Sun Oct 18 19:20:54 2009 : Info: Cannot perform authentication. Sun Oct 18 19:20:54 2009 : Info: Failed to authenticate the user. Sun Oct 18 19:20:54 2009 : Auth: Login incorrect: [user] (from client wlan- alves-private-network port 0 via TLS tunnel) Nelson Vale On Monday 19 October 2009 01:54:39 INACIO ALVES wrote: > I'm trying configure the freeRADIUS on my wireless network but i'm having > problems. > > > > My scnario: > > Debian Lenny+MySQL5.0+freeRADIUS 2.1.7 > > > > clients ----- ((( AP ))) ____ [freeRADIUS server] > > > > When I execute the radiustest I get > > rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=168, > length=20 > > > > and when I execute radclient I get > > Received response ID 146, code 2, length = 32 > > > > But when I try authenticate on my nootebook I get > rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=168 > > > > My debug output is on address: http://pastebin.com/f7e47862f. > > My clients.conf is on: http://pastebin.com/f30e4955d > > And my users is on: http://pastebin.com/f5d958f63 > > > > This is my initial configuration. I want migrate to MySQL or PostgreSQL > when the server is ready, I don't need proxy, and i need provide/revoke > digital certificates to my clients. > > In?cio Alves > http://www.polluxweb.com/inacioalves/site ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 54, Issue 86 ************************************************

1 0