- Freeradius-Users - lists.freeradius.org

eap-ttls with ldap
by Angelica Delgado 20 Nov '11

20 Nov '11

We want to configure eap-ttls with freeradius. Currently, we have freeradius with ldap authentication. The ldap that we are using is Active Directory. We want to know if there is good site that we can follow to implement eap ttls with ldap authentication. Thanks. Angela

4 14

2.1.10 crashes on debian/arm
by Wegener, Norbert 20 Nov '11

20 Nov '11

radius crashes sometimes on arm architecture. Version is: radiusd: FreeRADIUS Version 2.1.10, for host armv5tel-unknown-linux-gnu, built on Nov 20 2011 at 17:41:56 >From gdb output: Maybe this is the reason?(around line 550) #1 0x00034428 in radius_do_cmp (request=0x14b9b98, modreturn=<value optimized out>, depth=<value optimized out>, ptr=<value optimized out>, evaluate_it=Cannot access memory at address 0x630 ) at evaluate.c:528 The complete gdb output is a bit longer and can be found at: http://www.wegener-net.de/freeradius/radius-crash-gdb.txt With best regards, ________________________________ Norbert Wegener Atos IT Solutions and Services AIS MS NC PSU SDC Bruchstraße 5 45883 Gelsenkirchen, Germany Tel.: +49 (209) 94565716 Fax: +49 (201) 8165581284 mailto:norbert.wegener@atos.net Atos IT Solutions and Services GmbH; Geschäftsführung: Winfried Holz, Christian Oecking, Rainer-Christian Koppitz; Vorsitzender des Aufsichtsrats: Charles Dehelly; Sitz der Gesellschaft: München, Deutschland; Registergericht: München, HRB 184933.

4 5

Radius Billing System
by Dom 20 Nov '11

20 Nov '11

I was wondering if there was a open source billing system available to manage our DSL customers and automatically populate radius users file that anyone could suggest to me. Thanks, Domenic

4 3

getting sometimes TLS error
by Andreas Rudat 19 Nov '11

19 Nov '11

Hi, I get the error from time to time, I use one self signed cert for alle clients and some times I get this error from one ubuntu client, do you have any idea? so self+signed cert + mschapv2 TLS Alert read:fatal:bad certificate Sat Nov 19 18:52:30 2011 : Error: TLS_accept:failed in SSLv3 read client certificate A Sat Nov 19 18:52:30 2011 : Error: rlm_eap: SSL error error:14094412:SSL routines:SSL3_READ_BYTES:sslv3 alert bad certificate Sat Nov 19 18:52:30 2011 : Error: SSL: SSL_read failed inside of TLS (-1), TLS session fails. Sat Nov 19 18:52:30 2011 : Debug: TLS receive handshake failed during operation its not the password problem, how I said, the same cert works fine on two different machines, windows + linux the other got archlinux and xp running Thanks

1 2

temporary url-redirect
by Student University 19 Nov '11

19 Nov '11

Hi , anyone have configure freeradius attribute for temporary url-redirect every 1 hour , regards Lily ,,,

2 1

Radius + SambaPDC + "offline" login
by Andreas Rudat 19 Nov '11

19 Nov '11

Hi, perhaps it is the wrong mailing list but I try it :) my samba pdc is running in a different subnet than my radius clients. So, samba ist running x.x.15.x and my Wlan+Radius users using x.x.16.x I use wins instead of dns. I joined with my client the domain successfully, but if I try to login I get the msg "domain not reachable", sure, because I'm not online at that moment, but is there anyway to be that? Thanks.

2 1

Hiding "secret" used in for PAM authentication
by Gregory Machin 19 Nov '11

19 Nov '11

Hi. We are using using PAM to authenticate users against Freeradius, an that is working well. The problem is that the users are 3rd party developers and some need root access. The issue we have is that the radius secret is stored in clear text file. How can this be hidden so that is can be misused ? Is there a document on hardening Freeradius ? Thanks G

2 1

Deleting user accounts in windows xp
by Andreas Rudat 19 Nov '11

19 Nov '11

Hi, hope anyone knows that, if I connect successfully with an xp client, I have never again to put in my login data, so windows has to save my login stuff anywhere but where? I would like to delete my login data. Thanks Andreas

2 2

Radius Over a NAT
by Esdras Caleb Oliveira Silva 18 Nov '11

18 Nov '11

My APs are all over a NAT and the radius server is outside this nat. How i configure the clients.conf to acept the conections from the APs? -- "Não se VAI à Igreja. Se É Igreja<http://www.youtube.com/watch?v=ifnJtkAnBq4> ."

4 5

Can I disable user certificate? Can I generate new one?
by asdf zxcv 18 Nov '11

18 Nov '11

Hi, Here's the case: Let's assume we have configured freeradius to use EAP/TLS. CA and server certificates are created, users recieved their .p12 keys and server certs. Now everyone (that has theese files of course) can access our wireless network. 1) What if - for some reason - I want to disallow certain user from having access? He already has the files he needs installed on his machine. I can set Expiration attribute, but is there any other way? 2) What if I need to generate a new certificate for the same user? Let's say someone gained access to his computer and stole the certificate and the key? Can I generate a new certificate for the same user and disable the old one he had? Regards, Peter

3 2