- Freeradius-Users - lists.freeradius.org

value of an attribute in a user
by Felix Antonio Díaz Riverón 07 May '10

07 May '10

Hello comunity, I hve a question When a user belong to two different grups and each grup hasth same attribute but with different value. to get that user value in this attribute? regards felix Participe en la 15 ConvenciÃ³n CientÃfica de IngenierÃa y Arquitectura, del 29 de noviembre al 3 de diciembre de 2010 La IngenierÃa y la Arquitectura por un Futuro Sustentable Palacio de Convenciones, La Habana, Cuba http://www.cujae.edu.cu/eventos/convencion

2 1

Link users to location for authentication
by Brent Wilkinson 07 May '10

07 May '10

Hello, Just starting to get into setting up a radius server with mysql and I am trying to figure out a couple things that I haven't been able to find answers to yet I am setting up a radius server to handle all my wireless hotspot locations. Each location will have unique username and passwords that shouldn't be shared with each other. Can someone point me to what I need to look at to determine how to setup a user that can only be used when it comes from a specific hotspot server. I am not sure if I should use nas or groups or both. Thanks Brent Wilkinson

3 2

What does a good example look like
by Huckle Berry 07 May '10

07 May '10

Hello again, I have a few questions that may or may not be related to each other. First, I know radtest works fine for testing the basic functions of freeradius (i.e. it will authenticate with no encryption) but I would like to know if radtest can be used to test authentication using one of the various types of encryptions and protocols. Question two has to do with said protocols. Is there a clear and concise page that will define all of the protocols (PEAP, EAP, TLS, TTLS, MSCHAP, MSCHAPv2, LEAP, WPA(1/2)-PSK, etc) how they differ from each other and what exactly happens during the authentication process. Illustrations would be nice. Question three: I have come to conclude that some protocols are the same thing with different names, can anyone clarify which protocols are the same or are at least compatible, and which are different? Lastly, what does a successful authentication look like for each type of protocol. What should I be looking for in my freeradius output, and what can I compare it too. Possibly if I saw where stuff was going haywire I could determine for myself what the issue is. ~Huckle Berry

3 3

is there a package named phpmysql
by dorra aa 07 May '10

07 May '10

Hi.i'm working now in the install of mysql for the radius.I found a file that tell me to do: sudo apt-get install mysql-server phpmysql vim-full But i got: E: Impossible de trouver le paquet phpmysql (that means impossible to found phpmysql) is there a package called like that; or the file is wrong?? thank _________________________________________________________________ Hotmail: Trusted email with Microsoft’s powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969

3 4

Sila Sujjinanont is out of the office.
by Sila Sujjinanont 06 May '10

06 May '10

I will be out of the office starting 06/05/2010 and will not return until 09/05/2010. I will respond to your message when I return.

1 0

Freeradius + mysql + openssl certificates?
by shirkavand 06 May '10

06 May '10

Hi, Can i use freeradius + mysql + ssl certficates at the same time for autenticating users...or this does not make sense? I am a bit confused if i have to use one of them(mysql or ssl certificates) for autentication purposes. I have read tutorials for using freeradius + mysql OR freeradius + ssl certificates. In "freeradius + mysql" tutorial explains how to make the autentication using mysql... so the passwords and users are all stored inside a mysql db. In the other hand the freeradius + ssl certificates explains how to make the autentication using a file called "users" that stores all the users and paswords. So i am wondering if i can not make the radius server autenticate users using the credential fino from the mysql Db and using certificates too..or if each one are different methods to use. Any ideas? Cheers

2 1

radiusd does not logging while debug
by kes-kes＠yandex.ru 06 May '10

06 May '10

Hi, FreeRadius. How to force radiusd -X to do logging to log file too? -- mailto:kes-kes@yandex.ru

4 3

bug in 'man radiusd'
by Коньков Евгений 06 May '10

06 May '10

Hi, FreeRadius. >> -X Debugging mode. Equivalent to -sfxx -l stdout but man does not descrite -l option at all. -- mailto:kes-kes@yandex.ru

2 1

plz help me: access-reject
by dorra aa 05 May '10

05 May '10

Hi. im used freeradius 2.1.8. Please can somebody give me an example of configuration of files to do na simple test with radiusd -X. because i'm testing now a local client and the result is reject. I modify onlu users and clients.conf.is that anought? 1/I add on Users: "sonia" Auth-Type := Local, User-Password == "salut" Reply-Message = "Hello, %u", Reply-Message = "are you fine, %u" I'm also trying another exemple: "sonia" Cleartext-Password := "salut" Reply-Message = "Hello, %u", Reply-Message += "are you fine, %u" 2/And i add on Clients.conf: client 127.0.0.1 { secret = testing123 # notre clé partagée shortname = class nastype = other } when i do this command, i have: pfe@pfe-laptop:~$ sudo radtest sonia salut 127.0.0.1:1812 1812 testing123 Sending Access-Request of id 11 to 127.0.0.1 port 1812 User-Name = "sonia" User-Password = "salut" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=11, length=20 3/The result of output radiusd -X is: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 38590, id=135, length=57 User-Name = "sonia" User-Password = "salut" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop [suffix] No '@' in User-Name = "sonia", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop ++[unix] returns notfound ++[files] returns noop ++[expiration] returns noop ++[logintime] returns noop [pap] WARNING! No "known good" password found for the user. Authentication may fail because of this. ++[pap] returns noop No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. Using Post-Auth-Type Reject +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> sonia attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Delaying reject of request 0 for 1 seconds Going to the next request Waking up in 0.9 seconds. Sending delayed reject for request 0 Sending Access-Reject of id 135 to 127.0.0.1 port 38590 Waking up in 4.9 seconds. Cleaning up request 0 ID 135 with timestamp +153 Ready to process requests. What is the problem please Can you help me whith a clear example tahnk you _________________________________________________________________ Hotmail: Trusted email with Microsoft’s powerful SPAM protection. https://signup.live.com/signup.aspx?id=60969

3 6

openssl
by ds14.kornel 05 May '10

05 May '10

hi I'm starting with linux and freeradius with peap configuration. I'm using debian lenny 2.6.26-2-686, when runnig freeradius -X (FreeRADIUS Version 2.0.4, for host i486-pc-linux-gnu, built on Sep 7 2008 at 23:35:34) i'm getting those errors Module: Instantiating eap eap { default_eap_type = "peap" timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no } Module: Linked to sub-module rlm_eap_md5 Module: Instantiating eap-md5* rlm_eap: Ignoring EAP-Type/tls because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/peap because we do not have OpenSSL support. rlm_eap: Ignoring EAP-Type/ttls because we do not have OpenSSL support.* Module: Linked to sub-module rlm_eap_mschapv2 Module: Instantiating eap-mschapv2 mschapv2 { with_ntdomain_hack = no } *rlm_eap: No such sub-type for default EAP type peap* /etc/freeradius/eap.conf[1]: Instantiation failed for module "eap" /etc/freeradius/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /etc/freeradius/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. } } *Errors initializing modules* how should i install openssl ?? only compilation by hand will work here ?? Can anybody give needed advice please? Thanks a lot for help! :) Kornel

6 8