August 2011 - Freeradius-Users - lists.freeradius.org

Disable mysql dbm during freeradius installation
by Vasanth Ragavendran 03 Aug '11

03 Aug '11

Hi I am installing Freeradius and for my scenario i just need to authenticate from local files and there is no need for DBM or mysql or anything. how do i disable them during installation of freeradius. I tried using --disable-rlm-dbm and similar but it din't work out. How do i disable them from installing? Awaiting any help! Many thanks. Thanks and regards R.Vasanth Ragavendran.

4 4

Packet of Disconnect PHP
by mark fennema 03 Aug '11

03 Aug '11

Hello, I'm working on getting a hotspot set up, and I need the ability to have a user log themselves out, so that they can connect on another computer. I have it set up so that the user can enter their information and have it log them out, but it doesn't disconnect them from the router, so they can continue using the internet until they disconnect from the wireless, so I need to send a packet of disconnect. Is there a way to do this in php?

4 3

max users in radius
by ANGEL RICO GUZMAN 02 Aug '11

02 Aug '11

Hello all! I´m a begineer on radius. I will install radius on two systems : windows and linux ( each one in a separate network and different environments ). my question : How many concurrent users can be authenticated on radius? where can I see the radius restrictions ? Is there a academic version of radius? ( I work in an University ) Thanks in advance. Regards.

3 3

coova-chilli + freeradius + kerberos
by Massimiliano Tommasi 02 Aug '11

02 Aug '11

Hi All, is it possible to send the password from coova-chilli(for example) as CHAP or MSCHAPv2 format to authenticate the clients on Kerberos through FreeRADIUS? Is it possible to do it without plain-text password? Let me know, please. Max

2 1

[PATCH] Adding new attributes to the ERX dictionary
by Bjørn Mork 02 Aug '11

02 Aug '11

This should make it compatible with JUNOSe version 12.1.1 and JUNOS version 11.2. Signed-off-by: Bjørn Mork <bjorn(a)mork.no> --- share/dictionary.erx | 8 ++++++++ 1 files changed, 8 insertions(+), 0 deletions(-) diff --git a/share/dictionary.erx b/share/dictionary.erx index 93584d2..7b84f0c 100644 --- a/share/dictionary.erx +++ b/share/dictionary.erx @@ -11,6 +11,7 @@ # This dictionary applies to access services on Juniper JUNOS (M/MX) # based platforms as well as JUNOSe, although some of the attributes # have been given new names on JUNOS: +# http://www.juniper.net/techpubs/software/junos/junos112/radius-dictionary/u… # http://www.juniper.net/techpubs/en_US/junos10.3/topics/reference/general/aa… # # In this file, we keep the ERX prefix and the JUNOSe attribute names @@ -168,6 +169,7 @@ ATTRIBUTE ERX-MLD-No-Tracking-V1-Grps 105 integer ATTRIBUTE ERX-IPv6-Ingress-Policy-Name 106 string ATTRIBUTE ERX-IPv6-Egress-Policy-Name 107 string ATTRIBUTE ERX-CoS-Shaping-Pmt-Type 108 string +ATTRIBUTE ERX-DHCP-Guided-Relay-Server 109 ipaddr ATTRIBUTE ERX-Acc-Loop-Cir-Id 110 string ATTRIBUTE ERX-Acc-Aggr-Cir-Id-Bin 111 octets @@ -201,7 +203,9 @@ ATTRIBUTE ERX-Max-Clients-Per-Interface 143 integer ATTRIBUTE ERX-PPP-Monitor-Ingress-Only 144 integer ATTRIBUTE ERX-CoS-Scheduler-Pmt-Type 146 string +ATTRIBUTE ERX-Backup-Address-Pool 147 string +ATTRIBUTE ERX-ICR-Partition-Id 150 string ATTRIBUTE ERX-IPv6-Acct-Input-Octets 151 integer ATTRIBUTE ERX-IPv6-Acct-Output-Octets 152 integer ATTRIBUTE ERX-IPv6-Acct-Input-Packets 153 integer @@ -209,6 +213,10 @@ ATTRIBUTE ERX-IPv6-Acct-Output-Packets 154 integer ATTRIBUTE ERX-IPv6-Acct-Input-Gigawords 155 integer ATTRIBUTE ERX-IPv6-Acct-Output-Gigawords 156 integer ATTRIBUTE ERX-IPv6-NdRa-Pool-Name 157 string +ATTRIBUTE ERX-PppoE-Padn 158 string +ATTRIBUTE ERX-Dhcp-Option-82 159 octets +ATTRIBUTE ERX-Vlan-Map-Id 160 integer +ATTRIBUTE ERX-IPv6-Delegated-Pool-Name 161 string # -- 1.7.2.5

3 3

[freeradius+mysql]new field of table
by gary 02 Aug '11

02 Aug '11

Hi to all Anybody give me some guideline? I would like to add new field in mysql table, how to configure freeradius recognize the field and fill out the correct value that I want? Best Regards Gary BROWAN COMMUNICATIONS INC. Tel:886-3-600-6899 ext.4842 Fax:886-3-597-2970 e-mail:gary.yang@browan.com

3 7

Machine Authentication
by Leonardo Drumond 01 Aug '11

01 Aug '11

Hi to All, I need configure Freeradius, with machine authentication (hosts) in LDAP database. Anybody have a tutorial ? Who can help me ? Thanks, Leonardo Leonardo José Drumond Analista de Suporte Seção de Infraestrutura de Tecnologia da Informação - SECITI Câmara Municipal de Belo Horizonte Tel.: 55-31-3555-1241/1135 <mailto:leodrumond@cmbh.mg.gov.br> leonardo.drumond(a)cmbh.mg.gov.br <http://www.cmbh.mg.gov.br> http://www.cmbh.mg.gov.br Esta mensagem, incluindo seus anexos, pode conter informacoes privilegiadas e/ou de carater confidencial, nao podendo ser retransmitida sem autorizacao do remetente. Se voce nao e o destinatario ou pessoa autorizada a recebe-la, informamos que o seu uso, divulgacao, copia ou arquivamento sao proibidos. Portanto, se você recebeu esta mensagem por engano, por favor, nos informe respondendo imediatamente a este e-mail e em seguida apague-a.

1 0

Security issues with 1.1.3 flatfile
by d.tom.schmitt＠L-3com.com 01 Aug '11

01 Aug '11

Currently running 1.1.3 on CentOS 5.x. I am currently using the flat file option and it works just fine as long as the permissions on the file are: 664 RW-RW-R- Record in the file looks like: Tom <tab> Auth-Type := Local, User-Password := "tompass" This allows everyone to read the file - not good security. If I change the permissions to 660 RW-RW---- then freeRADIUS will not restart. I started setting up freeRADIUS to use MySQL DB for access but I must have something setup incorrectly. I tried to follow the How-To but still must be missing something in the setup. I have inserted a record into DB=radius and TALBE=radcheck where: Id = selected by the MySQL as the next index number UserName = tom Attribute = 'Cleartext-Password' Op = ':=' Value = tompass is the password So my questions are: 1. Is there a way to just secure the flatfile permissions? 2. Is there a complete How-To for using MySQL with freeRADIUS? Thanks, Tom Schmitt Senior IT Staff - R&D L-3 Communication Systems West Phone (801) 594-3030 \\\\||//// \ ~ ~ / | @ @ | --oOo---(_)---oOo-- Have A Nice Day !

5 7

WiFI
by michel＠casa.co.cu 01 Aug '11

01 Aug '11

Hello I have three Linksys Wireless Routers: WRT160N WRT110 WRT360 - "Now I'm not sure of the model" With them, users connect to my network using WIFI using a password exchange. I would like to change this pattern, I wondered if configuration is possible to perform Authentication, Authorization and Accounting with Freeradius and if I can provide any documentation that details the way as it can get. Thanks Michel ---------------------------------------------- Webmail, servicio de correo electronico Casa de las Americas - La Habana, Cuba.

3 2