March 2010 - Freeradius-Users - lists.freeradius.org

vlan and freeradius
by omega bk 04 Mar '10

04 Mar '10

Hello, so i would like to redirect my winxp authenticated to VLAN1 and if not authenticated , this client must be in vlan2 i got a switch cisco so how to handla this with freeradius? thank u

7 14

special query for authentication
by mwarren 04 Mar '10

04 Mar '10

I am trying to setup something where I can have multiple NAS devices where users can roam. Some NAS devices people will be able to have the first level of service free(sponsored NAS). I need to be able to identify and authenticate people who sign up to the free service to only be allowed to use the free spots and not take their free account to a paid location. I am looking at several possibilities of maybe adding a field with say usage = free or paid as an example and I want the NAS-Identifier, WISPr-Location-ID or theMS-CHAP-Domain to equal the "free" or "paid". The query would be something like WHERE usage = ${MS-CHAP-Domain} .... but I cannot figure out where and how to do this. Can anyone help and if you have another idea please let me know. -- View this message in context: http://old.nabble.com/special-query-for-authentication-tp27776513p27776513.… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 3

Lost and confused
by jin jin 04 Mar '10

04 Mar '10

This is the first time that I'm trying to set up a freeRADIUS server (Ver 2.1.0) using Ubuntu 9.10 and I'm running into walls. I used the debug mode and this is the output Failed binding to socket: Address already in use /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812 I googled but the closest match was a bug which was fixed earlier on. I'm not really sure what the above meant either. Do I have to connect my freeRADIUS server to my ADSL router first before I run freeRADIUS in debug mode? I am sorry if I have asked a few dumb questions, thanks in advance to the people replying to me. Best regards, Jin New Email names for you! Get the Email name you've always wanted on the new @ymail and @rocketmail. Hurry before someone else does! http://mail.promotions.yahoo.com/newdomains/sg/

2 1

freeradius 1.1.8 hangs in rlm_perl on 64bit
by Olivier Bilodeau 04 Mar '10

04 Mar '10

Hi, We have been using freeradius 1.1.8 with a lot of success on a lot of our deployments. Lately we deployed a freeradius 1.1.8 on a 64 bit environment for the first time. On that setup we have been experiencing segfaults and hanging processes once a month maybe. When hanged, gdb points to line 1202 of rlm_perl.c: (gdb) bt #0 0x00002ac034f962e4 in __lll_lock_wait () from /lib64/libpthread.so.0 #1 0x00002ac034f91c3a in _L_lock_1034 () from /lib64/libpthread.so.0 #2 0x00002ac034f91afc in pthread_mutex_lock () from /lib64/libpthread.so.0 #3 0x00002ac038fa1063 in perl_detach (instance=<value optimized out>) at rlm_perl.c:1202 #4 0x00002ac03472aa96 in detach_modules () from /usr/sbin/radiusd #5 0x00002ac03472e5e3 in main () from /usr/sbin/radiusd Here's the line: /* * Wait until clone becomes idle */ MUTEX_LOCK(&handle->lock); Any ideas on what it could be? perl? freeradius? 64bit? our perl code? We haven't switched to 2.x because of day to day activity overload but that could be a good reason for us to do the learning necessary to switch. Thanks in advance, Cheers! -- Olivier Bilodeau obilodeau(a)inverse.ca :: +1.514.447.4918 *115 :: www.inverse.ca Inverse inc. :: Leaders behind SOGo (www.scalableogo.org) and PacketFence (www.packetfence.org)

2 1

Can a wpa_supplicant talk to a Free Radius server without a NAS in between?
by rchinnapu 04 Mar '10

04 Mar '10

Hi, My requirement is to test scalability of my Server software that hosts Free Radius Server. I want to see how many wpa supplicant requests it can handle via EAP-TLS. 1. Can a wpa_supplicant talk to a Free Radius server without a NAS in between? I just want to see how many requests my Free Radius server can handle simultaneously. But, is it even possible for the WPA supplicant to talk to the Free radius server without the NAS in between them? 2. Is there a free wpa supplicant (peer) that generates multiple separate sessions at the same time? Any help is appreciated. Thanks, rchinnapu. -- This e-mail and any of its attachments may contain proprietary information, which is privileged, confidential or subject to copyright belonging to Grid Net, Inc. This e-mail is intended solely for the use of the individual or entity to which it is addressed. If you are not the intended recipient, you are hereby notified that any dissemination, distribution, copying or action taken in relation to the contents of this e-mail is strictly prohibited and may be unlawful. If you have received this e-mail in error, please notify the sender immediately and permanently delete.

4 4

Dialup admin error
by Michael J Humphries 03 Mar '10

03 Mar '10

We had to reboot the Radius server and ever since then I am getting the following error when I try to edit someones account in Dialup admin Warning: import_request_variables() [function.import-request-variables]: Numeric key detected - possible security hazard. in /usr/local/dialup_admin/conf/config.php3 on line 8 Any ideas Thank you for choosing -- Michael J Humphries Penstar Office Center, Suite 101 1431 N. 26th Street Escanaba, MI 49829 Phone: 906.786.3583 ext. 139 Fax: 906.786.4300 E-Mail: mhumphries(a)dstech.us www.dstech.us

2 2

Re: Can a wpa_supplicant talk to a Free Radius server without a NAS in between?
by R C 03 Mar '10

03 Mar '10

Thank you very much for you response Alan. Here is my requirement in more detail: I want to test the scalability of my server software. This server software and a Free Radius Server sit on the same linux box. I want to see how many client requests the Radius server can handle via EAP-TLS. And, in turn, I know how my server software can handle these requests simultaneously. We are looking at sending 100,000 wpa supplicant requests simultaneously to the free radius server. 1. Considering the limitation of the resources, I was thinking about how i can get so many (100,000) wpa supplicant sessions up and running at the same time. Do you have any input on this? 2. When you say "Just run 5-6 processes at the same time.", can one interface be used to send out multiple simultaneous wpa supplicant requests? If yes, how many wpa client sessions can i generate on 1 interface? 3. Can you please tell me how good WPA supplicant and Hostapd fit this test with FreeRadius Server? 4. Are they good for scalability testing or should I look out for other open source wpa supplicants/NASs? 5. Do you know of any other supplicants and AP that might do the work for me or are known to do a better job in scalability tests like this? Thank you very much for your time. Regards, RC. ________________________________ From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Tue, March 2, 2010 12:25:42 AM Subject: Re: Can a wpa_supplicant talk to a Free Radius server without a NAS in between? rchinnapu wrote: > My requirement is to test scalability of my Server software that hosts > Free Radius Server. I want to see how many wpa supplicant requests it > can handle via EAP-TLS. > > 1. Can a wpa_supplicant talk to a Free Radius server without a NAS in > between? I just want to see how many requests my Free Radius server can > handle simultaneously. But, is it even possible for the WPA supplicant > to talk to the Free radius server without the NAS in between them? See eapol_test. It's included with wpa_supplicant. http://deployingradius.com/ for complete instructions on building && using it with EAP. > 2. Is there a free wpa supplicant (peer) that generates multiple > separate sessions at the same time? No. Just run 5-6 processes at the same time. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

3 5

Hardware NAT
by Коньков Евгений 03 Mar '10

03 Mar '10

Hello, FreeRadius. GE Intelligent Platforms - 10GE. Does FreeBSD support that? -- Коньков mailto:kes-kes@yandex.ru

2 1

Wiki
by Doug Hardie 03 Mar '10

03 Mar '10

A week ago I tried to update the wiki to correct an interpretation error that was pointed out by one of the freeradius users. I can log into the wiki fine, but even though the save says the update was saved, it is not. I then posted the necessary change here and nothing has happened. Has the wiki become road kill?

4 5

Multiple Home Server for authentication
by Rosario Lumia 03 Mar '10

03 Mar '10

Hi to all. I'm tryng to use Freeradius 2.x for managing a complex architecture. I use the 802.1x standard for wireless authentication. I need to authenticate users that have passwords in different authentication server whit different protocol (TTLS/PAP or PEAP/MSCHAPv2) and i'd want to proxy the requests tryng to authenticate in first auth server and more if the auth fails. Can I get this feature simply listing home servers in home_server_pool module in proxy.conf file? Thanks to all Regards. -- Rosario L.

2 2