April 2011 - Freeradius-Users - lists.freeradius.org

Re: How to add RADIUS users under OU=People
by Thor Spruyt 13 Apr '11

13 Apr '11

Hi, Read http://wiki.freeradius.org/Rlm_ldap You might want to play with basedn and filter. Regards, Thor. ----- Original Message ----- From: "pradyumna dash" <pradyumna_dash123(a)yahoo.co.in> To: freeradius-users(a)lists.freeradius.org Sent: Tuesday, April 12, 2011 4:34:52 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: How to add RADIUS users under OU=People Hello, I need a help, What i want is instead of creating a OU called radius, i would like to add all radius users under OU=People, how to achieve this? I am not able to add a user with "objectclass:radiusprofile", I tried changing radius schema to AUX but no luck. Please have a look at my LDIF file. I am using SuSE 11 dn: uid=kris,ou=People,dc=example,dc=com uid: kris cn: kris objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount objectClass: uidObject objectClass: radiusprofile userPassword: {crypt}$2a$10$DXf3RUs5cQv/WYOgaeyv1uwvUJ.3ZfW3sr7sCr75/6/dw062c5YOe shadowLastChange: 15076 shadowMax: 99999 shadowWarning: 7 loginShell: /bin/bash uidNumber: 1003 gidNumber: 100 homeDirectory: /home/krisradiusServiceType: Framed-User radiusFramedProtocol: PPP radiusFramedIPNetmask: 255.255.255.0 radiusFramedRouting: None radiusGroupName: dial radiusGroupName: isdn radiusAuthType: LDAP Suggestions will be appreciated. /Neo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Radrealy and dynamic-sql-clients
by Etienne Pretorius 13 Apr '11

13 Apr '11

Hello List. I am using the dynamic-sql-clients example in my freeradius server. I am keying off the %{Packet-Src-IP-Address} of the NAS sending the packets to two separate virtual servers on the same host. The problem comes, when I wish to radrelay - I end up having to pick one or the other virtual server. I was just wandering if there was a way for me to proxy these packets to the correct virtual server based on the attributes in them, namely NAS-IP-Address? Perhaps to create another virtual server to handle those specific radrelay hosts and then proxy them... Kind Regards, Etienne Pretorius

2 1

Using user name from certificate.
by Mrinal K 13 Apr '11

13 Apr '11

Hello everyone, I have been trying to check some parameters for authentication which needs the CommonName from the certificate. I realise that the value I need to access is cn_str(from source code) but it is not available for processing from the configuration file. Will defining in dictionary help ? Excuse the ignorence of a new freeradius user. Regards, Mrinal -- -

2 1

Re: Authentication based on users and NAS
by Thor Spruyt 12 Apr '11

12 Apr '11

Hi, If you're going to use LDAP, then just add the Called-Station-Id to your search filter and add one or multiple attributes to match against in your LDAP entries. Regards, Thor. ----- Original Message ----- From: "Sergio Belkin" <sebelk(a)gmail.com> To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Sent: Tuesday, April 12, 2011 5:46:58 PM GMT +01:00 Amsterdam / Berlin / Bern / Rome / Stockholm / Vienna Subject: Authentication based on users and NAS Hi, It was easier than I thought, I simply had to add to /etc/raddb/users something like: steve Called-Station-Id == "00259c14066e",Cleartext-Password := "password" Still I had to solve 2 issues: The first one is that if I want steve to login through more than NAS I have to add one line like above per NAS. Is a nicer way to do it? The second one is that I don't know how to do it for Ldap users. Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

ldap and file authentication
by Marco Kalmbach 12 Apr '11

12 Apr '11

hi @all, is it possible to provide ldap authentication and users file authentication at the same time on a radius server? On my radius server the ldap authentication works fine, additional I want to provide users file authentication, so I commented out the following lines: -->radiusd.conf file { userfile = ${confdir}/users } ... authorize{ ... files ... } My users file: testuser Cleartext-Password := "XXX" When I want to login the user "testuser" the Debugscreen shows: Login incorrect: (rlm_ldap: User not found): [testuser] Are there any other options I have to set or isn´t it possible to authenticate users via ldap and users file at the same time? Thanks for your answers, greetings Klaus -- NEU: FreePhone - kostenlos mobil telefonieren und surfen! Jetzt informieren: http://www.gmx.net/de/go/freephone

2 1

Different sql servers for separated auth&acc
by c.schwarz＠funknetz.at 12 Apr '11

12 Apr '11

Hello, in a special setup we are using freeradius Version 1.1.3 (sql.conf v 1.41.2.2.2.2), on a debian x86 machine, which can't be upgraded to Version >2.0. I would like to check authorization against mysqldb1 and insert/update accounting in mysqldb2. Is it possible to use two independent mysql databases in Version 1.1.3? Thanks in advance, chris

2 1

Authentication based on users and NAS
by Sergio Belkin 12 Apr '11

12 Apr '11

Hi, It was easier than I thought, I simply had to add to /etc/raddb/users something like: steve Called-Station-Id == "00259c14066e",Cleartext-Password := "password" Still I had to solve 2 issues: The first one is that if I want steve to login through more than NAS I have to add one line like above per NAS. Is a nicer way to do it? The second one is that I don't know how to do it for Ldap users. Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org

1 0

How to add RADIUS users under OU=People
by pradyumna dash 12 Apr '11

12 Apr '11

Hello, I need a help, What i want is instead of creating a OU called radius, i would like to add all radius users under OU=People, how to achieve this? I am not able to add a user with "objectclass:radiusprofile", I tried changing radius schema to AUX but no luck. Please have a look at my LDIF file. I am using SuSE 11 dn: uid=kris,ou=People,dc=example,dc=com uid: kris cn: kris objectClass: account objectClass: posixAccount objectClass: top objectClass: shadowAccount objectClass: uidObject objectClass: radiusprofile userPassword: {crypt}$2a$10$DXf3RUs5cQv/WYOgaeyv1uwvUJ.3ZfW3sr7sCr75/6/dw062c5YOe shadowLastChange: 15076 shadowMax: 99999 shadowWarning: 7 loginShell: /bin/bash uidNumber: 1003 gidNumber: 100 homeDirectory: /home/krisradiusServiceType: Framed-User radiusFramedProtocol: PPP radiusFramedIPNetmask: 255.255.255.0 radiusFramedRouting: None radiusGroupName: dial radiusGroupName: isdn radiusAuthType: LDAP Suggestions will be appreciated. /Neo

1 0

freeradius, how to cooperate with a wireless AP( system is linux, openwrt)
by xuyu 12 Apr '11

12 Apr '11

Hi,I want to build a wireless network with radius server . server computer is ubuntu , wireless router is a linux system-openwrt.So i need to install something in the router,So what is it? Can somebody know something about it? please do me a favor.

2 1

Help me with Access-Challenge configuration
by GreenUA 12 Apr '11

12 Apr '11

I reviewed RFC and FAQ, but i can't fined sane info about configuration of freeRADIUS server (on Windows) to send access-challenge message on access-request. My configuration is (users.conf): test Auth-Type := Local, User-Password == "test" Service-Type = Login-User, Login-IP-Host = 192.99.98.119, Login-Service = Telnet, CS_Priv_Level = 2, Reply-Message = "Hello, %u. Wellcome from RADIUS. You are Administrator" For such configuration RADIUS server (receive access-request)checks Login + Pass and if they are correct sends "Reply-Message" with right "CS_Priv_Level" for Client (access-accept). But i need to validate one more parameter from client and sent for him access-challenge, and i don't know how to configure my RADIUS server to send "Access-challenge". Guys pls help me with the answer or if it's possible give me some link or manual in which i can fined the answer. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Help-me-with-Access-Challenge-confi… Sent from the FreeRadius - User mailing list archive at Nabble.com.

5 11