April 2011 - Freeradius-Users - lists.freeradius.org

how to generate certificate with xpextension for PEAP on FreeRAdius
by syharash 07 Apr '11

07 Apr '11

Hi, Can somebody tell me, how to include the OID's while generating the client and root certificates. These instructions are in the xpextensions file, it says # Add this to the PKCS#7 keybag attributes holding the client's private key # for machine authentication. How does one do this? Please help. # # File containing the OID's required for Windows. # # http://support.microsoft.com/kb/814394/en-us # [ xpclient_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.2 [ xpserver_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 # # Add this to the PKCS#7 keybag attributes holding the client's private key # for machine authentication. # # the presence of this OID tells Windows XP that the cert is intended # for use by the computer itself, and not by an end-user. # # The other solution is to use Microsoft's web certificate server # to generate these certs. # # 1.3.6.1.4.1.311.17.2 -- View this message in context: http://freeradius.1045715.n5.nabble.com/how-to-generate-certificate-with-xp… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

how to proxy a request with the specified local port to remote server?
by 魏景鹏 07 Apr '11

07 Apr '11

Dear All, I know that we can proxy a request with the specified ip-address if multiple ip hosted, the problem is can we proxy a request with the specified local port? I've configured listen {type=proxy...} in radiusd.conf, but freeradius proxy the request with a random port. What should I do? Best Regards WeiJingPeng

2 1

Is it possible to write proxy information into database other than proxy.conf?
by 魏景鹏 07 Apr '11

07 Apr '11

many thx WeiJingPeng

2 1

Is it possible to write client information into database other than clients.conf in default virtual server?
by 魏景鹏 07 Apr '11

07 Apr '11

Dear All, I know a little about dynamic client, it may be used in virtual server; But just as the mentioned subject, is it possible to write client information into database other than clients.conf in default virtual server? thx all WeiJingPeng

2 1

how to update proxy-request
by 魏景鹏 07 Apr '11

07 Apr '11

Dear folks, how to update proxy-update list in the section pre-proxy? I've tried following lines in pre-proxy section, but nothing happend: update proxy-update { User-Name = "abcdefg" } many thx WeiJingPeng

2 2

I need help and some advice !!!
by striderblue 06 Apr '11

06 Apr '11

about IPv6 on freeradius v.2.1.test9 for ubuntu so this version is support IPv6 right? but I try to test local with IPv6 ::1 it response like this : http://freeradius.1045715.n5.nabble.com/file/n4167834/0bcb3b1056e7d9151be5f… radclient: Failed to find ip address for host ::1: success but radtest ipv4 worked!!! ---------------------------------------------------------------------- at clients.conf I config : client localhost { ipaddr = 127.0.0.1 ipv6addr = :: secret = testing } client ::1 { secret = testing123 shortname = localhost } ---------------------------------------------------------------------- at radiusd.conf I config : listen { type = auth ipaddr = * ipv6addr = :: port = 0 } listen { ipaddr = * ipv6addr = :: port = 0 type = acct } ---------------------------------------------------------------------- so where I missed and do wrong config ? please help thank you very much. golf -- View this message in context: http://freeradius.1045715.n5.nabble.com/I-need-help-and-some-advice-tp41678… Sent from the FreeRadius - User mailing list archive at Nabble.com.

7 9

pam radius auth
by Rtz Poknat 06 Apr '11

06 Apr '11

how can i configure pam radius auth http://freeradius.org/pam_radius_auth/ to send accouting updates to the radius server? like every 1 minute pls help

2 1

radutmp
by Rtz Poknat 05 Apr '11

05 Apr '11

hello, radutmp shows blank... pls help me

1 0

How to assign vlan / manage different user groups
by Götz Reinicke - IT-Koordinator 05 Apr '11

05 Apr '11

Hi, may be someone can point me into the right direction: we do have a new wlan - freeradius - ldap setup and want to assign two main usergroups to two main wlans. Each wlan has an own vlan. We use cisco switches and APs and got a wlan controller. So far we do have different SSIDs and all users can access both WLANs with their username/password stored in our ldap. Now we'd like students only to be able to access the students WLAN and employees to access there WLAN. My question: Where is the point to start to configure such a setup? I think, somewhere there must be some sort of check if the user assceesing the e.g. student wlan is in the primary posixgroup student. Or do I have to 'send' the VLAN ID to the network devices? Thanks for any hint and best regards Götz Reinicke -- Götz Reinicke IT-Koordinator Tel. +49 7141 969 420 Fax +49 7141 969 55 420 E-Mail goetz.reinicke(a)filmakademie.de Filmakademie Baden-Württemberg GmbH Akademiehof 10 71638 Ludwigsburg www.filmakademie.de Eintragung Amtsgericht Stuttgart HRB 205016 Vorsitzende des Aufsichtsrats: Prof. Dr. Claudia Hübner Geschäftsführer: Prof. Thomas Schadt

2 2

bug
by Rtz Poknat 05 Apr '11

05 Apr '11

hello. I deleted an entry in the database , yet it returns,, and session time is 59000 seconds. i check the openvpn server but no user is connected and it is continously updating the last update in sql table. also, even if i turn off the NAS,, the entry still updates by itself.. (a ghost??) can anyone point out what other factors might causing this update? what files? pls help thanks

3 2