September 2013 - Freeradius-Users - lists.freeradius.org

eap-tls ignore client cert expiry check - crazy idea?
by ken.farrington 02 Sep '13

02 Sep '13

Hi All, Is there a way if I had 10 clients in my home lab and all the certs expire tomorrow, that rather than re-provide all the certs to my clients, I can frigg the radius server time, to still accpet them. Im guessing this is a no, but from what I see, the client cert is presented, and check against the server time. Would this be correct? Many thanks in advanced Ken Ken Farrington Director CCIE #12651 802 Limited International House, 221 Bow Road, London, E3 2SJ, United Kingdom Direct: +44 (0)7500 802802 ken.farrington(a)802.co.uk http://www.802.co.uk Disclaimer This e-mail may contain information that is confidential, privileged or otherwise protected from disclosure. If you are not an intended recipient of this e-mail, do not duplicate or redistribute it by any means. Please delete it and any attachments and notify the sender that you have received it in error. Any views or opinions presented are solely those of the author and do not necessarily represent those of 802 Limited or any subsidiary company of 802 Limited. This email may relate to or be sent from other members of the 802 Group. All rights reserved. 802 Limited. Registered in the UK. Company Number. 7962864.

1 1

Rlm_perl in func_authenticate
by Mehdi Ravanbakhsh 02 Sep '13

02 Sep '13

Hi All i have some problem in Understanding of capability of Rlm_perl in authenticate ... if i use this : DEFAULT Auth-Type = Perl Fall-Through = yes then all user authenticate be done with this Auth-Type ? So what is happen to PAP , CHAP module ? and what is the relation of all module in authenticate section ? thanks and best regards.

2 2

Fwd: radiusclient-ng in Debian
by Daniel Pocock 02 Sep '13

02 Sep '13

I just opened this report against radiusclient-ng in Debian (see below), can anybody else comment on the situation, in particular, for compatibility? Is there any urgency for Debian to update to the new client code? I think the wiki page referenced below is not up to date, it refers to a CVS repository but it appears that the client code is not in github Also, is anybody aware of C++ wrappers for this code or a C++ alternative? -------- Original Message -------- Subject: radiusclient-ng in Debian Date: Mon, 15 Jul 2013 14:41:54 +0200 From: Daniel Pocock <daniel(a)pocock.com.au> To: Debian Bug Tracking System <submit(a)bugs.debian.org> Package: libradiusclient-ng2 Version: 0.5.6-1.1 Severity: normal I've just read through the wiki at: http://wiki.freeradius.org/glossary/Radiusclient If I understand correctly, a) freeradius-client is the continuation of radiusclient-ng (which was the continuation of a previous project) b) it is not a fork of the previous projects c) it should be compatible (or almost compatible) with code that was built for radiusclient-ng d) it is NOT built from the main FreeRADIUS source tree or repository, it is built from a standalone repository Therefore, this leaves me feeling that Debian should drop the libradiusclient-ng2 package and distribute FreeRADIUS client instead and there will be no significant side-effects of doing so.

3 6

client code for long extended attributes?
by Daniel Pocock 02 Sep '13

02 Sep '13

Can anybody comment on which client code should be used for long extended attributes? I see that the freeradius-client project predates RFC 6929. Is there any module in the server project that provides a good example of using these long values from requests?

2 5

Freeradius2 and sqlite
by Nong NgocDung 01 Sep '13

01 Sep '13

I am installing freeradius on Openwrt. Freeradius2, freeradius2-mod-sql-sqlite and libsqlite3 have been installed. Now, I can create database but I don't know how to connect freeradius with sqlite database. Does anyone know how?

3 7