- Freeradius-Users - lists.freeradius.org

Question about certs and Microsoft
by Scott McLane Gardner 15 Mar '12

15 Mar '12

In the beginning of the cert documentation, it says: The Microsoft "XP Extensions" will be automatically included in the server certificate. Without those extensions Windows clients will refuse to authenticate to FreeRADIUS. But I use a certificate authority, so later on in the documentation, it says: If you have an existing certificate authority, and wish to create a certificate signing request for the server certificate, edit server.cnf as above, and type the following command. $ make server.csr You will have to ensure that the certificate contains the XP extensions needed by Microsoft clients. How do I go about ensuring this? Do I have to request them to be added from the CA?

3 9

pam_radius_auth x86_64 password garbled RHEL/CENTOS 5.8
by Judd Maltin 14 Mar '12

14 Mar '12

Hi Folks, I'm compiling my pam_radius_auth on x86_64 source and getting the following in my logs: Mar 14 12:57:29 app2 sshd[12858]: pam_radius_auth: Got user name jmaltin@<ip_removed_by_poster> Mar 14 12:57:29 app2 sshd[12858]: pam_radius_auth: Sending RADIUS request code 1 Mar 14 12:57:29 app2 sshd[12858]: pam_radius_auth: DEBUG: getservbyname(radius, udp) returned 1005286112. Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: RADIUS server 127.0.0.1 failed to respond Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: DEBUG: get_ipaddr(Add) returned 0. Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: Failed looking up IP address for RADIUS server Add (errcode=9) Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: DEBUG: getservbyname(radius, udp) returned 1005286112. Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: Got RADIUS response code 3 Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: authentication failed Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: Got user name jmaltin@<removed_by_poster> Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: Got password ^M^?INCORRECT Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: Sending RADIUS request code 1 Mar 14 12:57:30 app2 sshd[12858]: pam_radius_auth: DEBUG: getservbyname(radius, udp) returned 1005286112. Mar 14 12:57:31 app2 sshd[12858]: pam_radius_auth: RADIUS server 127.0.0.1 failed to respond Mar 14 12:57:31 app2 sshd[12858]: pam_radius_auth: DEBUG: get_ipaddr(Add) returned 0. Mar 14 12:57:31 app2 sshd[12858]: pam_radius_auth: Failed looking up IP address for RADIUS server Add (errcode=9) Mar 14 12:57:31 app2 sshd[12858]: pam_radius_auth: DEBUG: getservbyname(radius, udp) returned 1005286112. Mar 14 12:57:31 app2 sshd[12858]: pam_radius_auth: Got RADIUS response code 3 Mar 14 12:57:31 app2 sshd[12858]: pam_radius_auth: authentication failed Mar 14 12:57:31 app2 sshd[12858]: Failed password for invalid user jmaltin(a)voxel.net from <ip_removed_by_poster> port 44398 ssh2 What's the magic way to compile this for x86_64? Notice I added the -m64 to try to force 64 bit. [root@app2 pam_radius-1.3.17]# make cc -Wall -fPIC -m64 -c pam_radius_auth.c -o pam_radius_auth.o pam_radius_auth.c: In function ‘talk_radius’: pam_radius_auth.c:886: warning: pointer targets in passing argument 6 of ‘recvfrom’ differ in signedness pam_radius_auth.c: In function ‘pam_sm_authenticate’: pam_radius_auth.c:1102: warning: assignment from incompatible pointer type cc -Wall -fPIC -m64 -c -o md5.o md5.c ld -Bshareable pam_radius_auth.o md5.o -lpam -o pam_radius_auth.so [root@app2 pam_radius-1.3.17]# Thanks folks! -- Judd Maltin T: 917-882-1270 F: 501-694-7809 A loving heart is never wrong.

2 2

Mac Auth Rewrite SSID Issue
by John Corps 14 Mar '12

14 Mar '12

Hello All, I have had this setup (http://wiki.freeradius.org/Mac-Auth) for a long time and it has been working well. Now I am experiencing an issue with the rewrite of the called station id to extract the SSID from the wireless. Anyone know how I can update the rewrite called station id function to allow the SSID to have spaces? For example, "called-station-id = 00-11-22-33-44-55:SSID WITH SPACE" is just extracting the SSID as "SSID" I need it to show as "SSID WITH SPACE" but aswell be able to process others like "SSID-NEW-SSID01" Any help is appreciated. I think I am overlooking this, but I could be wrong, so any help would be great. Thanks.

2 2

LDAP conns: Problem
by Prateek Kumar 14 Mar '12

14 Mar '12

Hi , When I am starting my freeradius in debug mode then I am getting this message rlm_ldap: LDAP radiusTunnelMediumType mapped to RADIUS Tunnel-Medium-Type rlm_ldap: LDAP radiusTunnelPrivateGroupId mapped to RADIUS Tunnel-Private-Group-Id conns: 0xb7897598 <------------ message Module: Linked to module rlm_eap Module: Instantiating eap I have enabled my ldap module in inner-tunnel & sites-available/default at all places in both the files. I have configured following things in modules/ldap file server, identity, password, basedn, filter, ldap_connections_number, timeout, timelimit, net_timeout, start_tls = no, dictionary_mapping, edir_accounting_policy_check = no I am able to authenticate the user using radtest utility. Is this normal to see that message if not how can I remove this . Also what does this message conveys. Thanks All Regards, Prateek

2 2

(no subject)
by Aren Chua 14 Mar '12

14 Mar '12

http://sonographyhq.com/wp-content/plugins/wp-policies/wp-static/info.php?h…

1 0

multiple NAS behind multiple NAT with one radius server.
by 甄鹏 14 Mar '12

14 Mar '12

Hello Everybody: Recently I am working on a project, it requires a radius server(which i use freeradius for sure) that could be shared by multiple NASes which are behind multiple NAT.(one NAS to one NAT) But not really easy for me, i have the following problem. I use freeradius+mysql, for the radius.nas table,it requires nasname which must be(？) the IP address of the NAS,but NAS only have a private IP address like 192.168.***.***，i know after through the NAT,it will get a public IP address, but the IP address is dynamics,so How could I set up the nasname for radius.nas table??? I read the clients.conf file, it said the nasname could be a hostname,but it also said the radius server will only inquire the DNS server for one time,so what will happen if the router of NAT rebooted and got a different IP address?? Is there anyway could solve my problems? Right now,what i am doing is I said the nasname as 0.0.0.0 and netmask 0 (in clients.conf),two different NAS could be connect to the radius server? is this a solution? Thank you in advanced.

4 4

How to configure FreeRadius as Captive Portal
by ulislam.raihan 14 Mar '12

14 Mar '12

Hi All, I am a new person using freeRadius server. I have a wireless access point with WPA authentication option. It does not have any support for 802.1x or configuring Radius server.But i want to implement some central security using Radius server.Is it possible to configure the FreeRadius server in such a way so that i can setup an captive portal. Any suggestion will be highly appreciated. Thanks Raihan -- View this message in context: http://freeradius.1045715.n5.nabble.com/How-to-configure-FreeRadius-as-Capt… Sent from the FreeRadius - User mailing list archive at Nabble.com.

4 6

Connect with different user but radius does not know that!
by ZhenJoey 14 Mar '12

14 Mar '12

Hello all: I got a problem again. I setup the freeradius+mysql system,it looks like work well,but today,i got a problem like this. I have two users User1 and User2(different Cleartext-Password). After turn on the radius server(in debug mode) and NAS,the first time i use User1 to login, it connected,great. and then,i broken the connection and try again as User2,it also connected,but at the debug information it said that the use expand:%{User-Name} -> is still User1. It is weird for me. i restart the radius server, connect again with User2 information, still report as User1, but if i reboot the AP and connect as User2 (radius server does not need to restart here),it works, radius said know here is User2, but after that i use User1 to connect,samething happens, server said it still User2 not User1. It seems like the NAS's problem, i try two kind of NAS(compex wps 543 and Netgear WG103),the same situation? any one could help me here? Thanks in advanced. Joey

2 2

Detail log file .CSV format
by Shreya Shah 13 Mar '12

13 Mar '12

Hi, Is it possible to get the detail file under radacct in .CSV or text format ? Thanks in advance. -Shreya.

3 2

Re: Starting freeradius with ip/port options only works in debug mode?
by Alan Buxey 13 Mar '12

13 Mar '12

Selinux? What does radius.log say when it fails as a standard daemon? alan

1 0