February 2009 - Freeradius-Users - lists.freeradius.org

User account lockout
by SDamron 03 Feb '09

03 Feb '09

Is there a way using what ever method to lock out accounts after several bad login attempts? TIA, Damron

2 2

radius web managment
by Mr Little Crazzy 03 Feb '09

03 Feb '09

Someone has installed dialup admin or daloradius ?? I have installed diaul up admin , but my problem is that not list the user conecct. Which is the best ?? and someone has an install guide for install each of one _________________________________________________________________ Adelántate a tu futuro. Ingresa ahora a MSN Astrología http://astrologia.latam.msn.com/msnlatam/

8 11

Variable for Secret in Request?
by Eric Geier 03 Feb '09

03 Feb '09

Is there a Variable for the shared secret used in the request packets? Thanks, Eric.

2 1

None
by А Гауэрт 03 Feb '09

03 Feb '09

I'm new at this and I was wondering if anyone can help me out configuring free radius for mac address authentication I need to install a server for mac address authentication, without certificates. I have switch clients and I need authenticate users on these switches for mac (only). It's about 10 000 users on 200 switches in network. The problem is that same switches returns for user: User-Name = "002179a516be" and another switches the same user in reverse!!! format: User-Name = "eb-61-5a-79-12-00" Should I configure different Users for that? Thanks

3 2

CERTIFICATE problem
by Cristian Novac 03 Feb '09

03 Feb '09

Hello, I'm trying to do a TLS auth, and I get an error after user sending his cert; Could someone please take a look at the log error, maybe it tels you more than I understand from it. Thank you! ps: the cert that is doing problems is a wimax device certificate.

2 1

OTP autentication to a mobile phone (sometimes called mobile TAN/mTAN)
by Verlag Neue Stadt 03 Feb '09

03 Feb '09

Hello, we would like to have captive users(authentication portal) authenticated with a one time password (OTP). After entering the user-account at the captive login page, preferably a/the RADIUS server should send the unique autentication number (sometimes called mobile TAN/mTAN or OTP) to the users mobile phone in order to gant access. Is something like that possible with freeradius? Thank's for any feedback. John

2 1

Certificate Provisioning for EAP-TLS Networks
by Matt Causey 03 Feb '09

03 Feb '09

I am running FreeRadius at my company on a WLAN - using SSL key material issued by our internal certificate authority. All is well. However a pretty big limitation of this security architecture is of course getting the SSL key material onto the devices. In our case - the devices are SIP phones with no wired ethernet connection. I know there are other sites with similar issues. I would like to hear some ideas on what folks are doing to manage SSL key material on devices. This would include initial key provisioning and re-keying when certs expire. Presently ours expire every 90 days. Thoughts? -- Matt

4 6

chap authentication and freeradius
by gf fg 02 Feb '09

02 Feb '09

Hi Freeradius users! I have installed Freeradius and diualup admin and mysql I configurated the both ! I have an an aplication called vyatta. I am trying that this vyatta validate the users with the freeradius I configurated in the admin.conf with chap and clear-password and i set that the password are store in clear in the database too. But when i try to login with a user that uses chap authentiation! the freeradius told me that need claer password! what is worng ??? Someone can help me to configurate Freeradius , dialup admin and mysql with chap authentication ?? _________________________________________________________________ Permanece actualizado con MSN Noticias. Clic aquí http://noticias.cl.msn.com/

4 17

invalid Message-Authenticator! (Shared secret is incorrect.)
by Hegedus Gabor 02 Feb '09

02 Feb '09

Hi I have a problem: I get this message *invalid Message-Authenticator! (Shared secret is incorrect.) * But I checked the key and it equals. What is the problem? clients.conf: client 192.168.1.10 { secret = test shortname=blablabla } thx

4 7

IP-Assignment with sqlippool based on nas-ip-address
by Sebastian Heil 02 Feb '09

02 Feb '09

Hello, we are using freeradius 2.1.1 on suse linux enterprise server 10. We have different Network Access Servers, which are located in different locations. The users, which login to this NAS, will be assigned an ip-address by the sqlippool-module. I read a lot of the documentation and tried a lot of different things, but i don't know, how to configure the sqlippool-module to assign an ipaddress based on the nas, on the which the users logs in. So for example, if the users logs in on nas1, he will get an ip out of the pool 10.1.1.1 - 10.1.10.255, if he logs in on nas2, he will get an ip out of the pool 10.200.1.1 - 10.200.10.255. The authentication information and the ippoolinformation will be stored in mysql. Can you give me an example where i have to configure this? Thanks. Sebastian -- Psssst! Schon vom neuen GMX MultiMessenger gehört? Der kann`s mit allen: http://www.gmx.net/de/go/multimessenger

3 19