- Freeradius-Users - lists.freeradius.org

Load FR on boot with Ubuntu?
by David Peterson 24 Oct '11

24 Oct '11

Can someone show me how to load FR on boot in Ubuntu? David

4 5

Installation docu
by Andrej 24 Oct '11

24 Oct '11

Hi, Not sure whether this is the right list to be writing to (the website suggests it is), and I'm not following the suggested method (patch documentation, and post it here if I don't want to use git), but I wouldn't really know which document to patch with my suggestion. I wanted to (and eventually managed to) install freeradius 2.1.12 with a PostgreSQL backend. The existing docu, and the output of ./configure --help give no clues as to what's required. A run of ./configure w/o any parameters didn't pick up my postgres install (which has its headers and libs in fairly commonplace locations). Only grepping for -ril postgres I found configure options in the redhat.spec file, and using those radius built against Postgres just fine ... can this info either be added into the configure script, or the INSTALL document? Cheers, Andrej

4 7

Workload in freeradius‏ platform
by siguillaume 24 Oct '11

24 Oct '11

Hi, We have installed a new freeradius with four servers: 02 for authentification and 02 for Accounting. This plateform is for worked interactively with three Alcaltel BAS. After configuration, we try with one BAS, and it's work very well. But, when we add a second BAS, it's been very slowly. We remark a problem with performance. Thanks for you answered. Best regards, Guillaume Sigui -- View this message in context: http://freeradius.1045715.n5.nabble.com/Workload-in-freeradius-platform-tp4… Sent from the FreeRadius - User mailing list archive at Nabble.com.

7 18

Re: Installation docu
by Alan Buxey 23 Oct '11

23 Oct '11

Guess it depends on your distro and setup? ./configure worked fine here for full postgresql support... alan -- Message may be brief as it has been sent from my mobile

1 0

radius + ldap + ntlm
by Andreas Rudat 23 Oct '11

23 Oct '11

Hello, I understand it correctly, that I can't use peap + mschapv2 with ldap? Im realy confused atm, what I can realy use, everytime I think its fine, I found another unsecure thing :/ Thanks

3 5

Re: SSL error after updating cert
by Eric Geier 21 Oct '11

21 Oct '11

Thanks for the reply! Yes, the clients are set with correct time/date. That command didn't work. Did you mean openssl verify command? I ran that and both the old cert (still valid for a few days) and the new cert (already valid) shows correct domain but then says: error 20 at 0 depth lookup:unable to get local issuer certificate This may not be the problem since I get it with both old and new certs. Any other ideas? On Fri Oct 21 14:56:33 CDT 2011, James J J Hooper <jjj.hooper(a)bristol.ac.uk> wrote: > On 21/10/2011 20:44, Eric Geier wrote: >> Hi, I?m trying to update my server?s cert, but getting errors >> after applying it: >> >> Fri Oct 21 12:26:45 2011 : Error: TLS Alert >> read:fatal:certificate >> expired >> Fri Oct 21 12:26:45 2011 : Error: TLS_accept:failed in SSLv3 >> read client certificate A >> Fri Oct 21 12:26:45 2011 : Error: rlm_eap: SSL error >> error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert >> certificate expired >> Fri Oct 21 12:26:45 2011 : Error: rlm_eap_tls: SSL_read failed >> inside of TLS (-1), TLS session fails. >> >> Says expired but I?m using the new cert, which is a renewal from >> a >> third-party CA and using the same private key. I apply it by >> inserting the text of the .crt file into the server-cert.pem file >> in the certs folder. I think that?s all I have to do and restart >> freeradius? >> > > 1) Check the date on the client system is correct > > 2) do: > openssl -in /path/to/your/raddb/server-cert.pem -noout -text > and verify the properties of the cert you have. > > -James > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

2 1

SSL error after updating cert
by Eric Geier 21 Oct '11

21 Oct '11

Hi, I�m trying to update my server�s cert, but getting errors after applying it: Fri Oct 21 12:26:45 2011 : Error: TLS Alert read:fatal:certificate expired Fri Oct 21 12:26:45 2011 : Error: TLS_accept:failed in SSLv3 read client certificate A Fri Oct 21 12:26:45 2011 : Error: rlm_eap: SSL error error:14094415:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate expired Fri Oct 21 12:26:45 2011 : Error: rlm_eap_tls: SSL_read failed inside of TLS (-1), TLS session fails. Says expired but I�m using the new cert, which is a renewal from a third-party CA and using the same private key. I apply it by inserting the text of the .crt file into the server-cert.pem file in the certs folder. I think that�s all I have to do and restart freeradius? Any ideas? Thanks for your help!

2 1

Allow EAP-TLS based authentications only
by Panagiotis Georgopoulos 21 Oct '11

21 Oct '11

Hello all, I want to get my FR configuration to allow only EAP-TLS based authentications. Am I right in thinking that if I leave enabled only the EAP-TLS, the EAP-TTLS and PEAP parts in my eap.conf file, I would basically achieve what I want? In order words, essentially disable md5, leap, gtc, mschapv2 in the eap.conf. There should not be any need for me to touch the inner-tunnel or inner-eap, right? Thanks a lot, Panos

2 3

Radius + SAMBA PDC + LDAP
by Andreas Rudat 21 Oct '11

21 Oct '11

Hi, I'm using samba as pdc and ldap as user database. That all works fine. Now I want to use the ldap database for user auth. for radius. But when I'm looking here http://deployingradius.com/documents/configuration/active_directory.html and some other sources, I read everywhere the same. "Konfiguration of Kerberos" but why? I think it should also with ntlm only? And does this paper is the correct for me? Caus if I understand it correctly in that scenario they are using a MS AD? Thanks Andreas

2 2

Problems with radrelay
by tonimanel 21 Oct '11

21 Oct '11

Hi everybody, I had configured freeradius with mysql and writting in a second detail. This second file was readed by radrelay and accounting data was replicated between both servers. All worked fine. Now when I have tried to configure a second radrelay on the second server (that only recieved account data from the other server), first radrelay from the first server not works and all the system not works fine. The first server only writes in detail file if it is not launch with -n radrelay option. I think that it's very rare. Is it possible that radrelay works between two servers but only in one sense? What is happening? Regards, -- View this message in context: http://freeradius.1045715.n5.nabble.com/Problems-with-radrelay-tp4918721p49… Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 6