October 2018 - Freeradius-Users - lists.freeradius.org

how to allow only AD domain members
by Walter Laub 02 Oct '18

02 Oct '18

Hi, I configured to authenticate (via winbindd) against AD. It works, but it is possible to authenticate as well on non-AD-member devices with an AD user. Is it possible to authenticate only with the mandatory criteria "AD membership"? Thank you. Regards, Wlater

2 1

smstop with Cisco Wireless
by Paul Aviles 01 Oct '18

01 Oct '18

Hello, I am new to the community and was wondering if anyone has manage to configure freeradius with a Cisco 5508 or 2504 controller for guest authentication with smstop. The goal is to provide a static wep2 password and force the users to enter their cell number where they will receive an sms message for 2 factor authentication. If the number matches, then the user will be authenticated. I currently have regular freeradius and a 2504 working, but missing the smstop/capture/validate part. Anyone with something similar out there? Regards, Paul

2 1

Config FreeRadius (3.0.16) to work with SQL: The Guide is outdated - please helps
by james.ngobui＠gmail.com 01 Oct '18

01 Oct '18

Hello everyone, Recently, I implemented freeradius for our home office. I was able to use the method of editing the user file to add user to authorize them using our network. Now I would like to use mySQL with phpMyAdmin to control and manage other users. So I installed Lamp Stack from here: https://www.digitalocean.com/community/tutorials/how-to-install-linux-apache -mysql-php-lamp-stack-ubuntu-18-04 which basically install Apache server, SQL server and PHP server. I have all 3 up and run OK. Anyway, after that I follow the Guide here to setup the mySQL https://wiki.freeradius.org/guide/SQL-HOWTO-for-freeradius-3.x-on-Debian-Ubu ntu After I finished installing the freeradius-mysql module and created the "radius" database, it shows up in the phpMyAdmin windows. I was excited. However, further more in the Guide, I found a lot of difference/discrepancies in term of file names, location of the files like sql (not sure if sql.conf?). It seems that the Guide is now outdated and pending for update to catch up with the new version of Freeradius file organization As a result, when I attempt to use SQL to authorize the users, the server keeps rejecting my username/password I run radtest and it says "No reply from server" Could someone please instruct me how to start from the scratch again with a proper file's names, locations of each required files, what to edit, etc..? I thank you very much indeed for your support. Again, thanks James --- This email has been checked for viruses by AVG. https://www.avg.com

7 15

pass_all_vps option for rlm_python
by work vlpl 01 Oct '18

01 Oct '18

Hello, I found the not described option `pass_all_vps` for rlm_python module. Is this option intended only for testing? I am asking because neither https://wiki.freeradius.org/modules/Rlm_python page, neither default python config files from `.../raddb/mods-available` does not say anything about this options. I am -- Vladimir

4 7

Multiple keytabs on Kerberos
by LAUDREN Olivier 01 Oct '18

01 Oct '18

Hello, Is there a way to use more than 1 keytab and SPN in a FreeRADIUS configuration (I mean on the same FreeRADIUS server)? If so, how to do it? Thank you. Ce message contient des informations confidentielles à l'intention exclusive du destinataire. Il ne peut être utilisé, divulgué ou copié de quelconque façon que ce soit par une personne autre que le destinataire désigné. Si vous n'êtes pas le destinataire désigné, merci de contacter l'expéditeur et d'effacer ce message. L'expéditeur de ce message n'est pas mandaté à représenter le Parlement européen. Dès lors, ce message ne constitue pas nécessairement le point de vue officiel du Parlement européen, ni un engagement juridique opposable à ce dernier. This message contains confidential information intended solely for the attention of the named addressee. It may not be used, disclosed or copied in any way whatsoever by anyone else than the intended addressee. If you are not the intended addressee, please contact the sender and delete this message. The sender of this message is not authorized to represent the European Parliament and therefore this message does not necessarily reflect the official position of the European Parliament and is not legally binding upon it.

2 2