- Freeradius-Users - lists.freeradius.org

RE:
by INACIO ALVES 20 Oct '09

20 Oct '09

Thanks Santiago and Ivan, The schema of the database is in the source of instalation and I have create my database in MySQL. I think that lack documentation to work with freeRADIUS. The new version 2.x is very different from early 1.x. So, how I said in the last post, the HOW_TO about SQL is out-of-date. The tables has name/schema changed. But I will have success. Finally. About the DHCP: How I said, my AP ignores the configurations that I set on users file, even if I disable the DHCP server in the AP. If I configure a DHCP server on my freeRADIUS server, I need atach MACxIP or if I set the configurations in the users file this informations will to the client? Again thanks to all, Inácio Alves http://www.polluxweb.com/inacioalves/site

2 1

Ldap search and AD operations error
by Leighton Man 20 Oct '09

20 Oct '09

Hi All, Following everyone's help our eduroam system is up and running by the target date - Many thanks, particularly to Alan and Ivan. I'm now trying to configure it *properly* I have, in the ldap module configuration: chase_referrals = yes rebind = yes I'm running version 2.1.6 on Solaris doing lookups against Active Directory. I get, in the debug: rlm_ldap: Bind was successful rlm_ldap: performing search in dc=ad, dc=hud, dc=ac, dc=uk, with filter (sAMAccountName=mytestusername) rlm_ldap: ldap_search() failed: Operations error rlm_ldap::ldap_groupcmp: search failed Has anyone got latest information on what causes this or how to fix it. I have a workaround but it's not ideal. I assume trying to get more helpful information out of Microsoft AD is pretty futile but has anyone any clues as to what "operations error" realy means? The workaround is to specify a container in the search but as the number of possible containers for a search increases things rapidly begin to get out of hand ..... Regards, Leighton --- This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail and remove it from your system. If the content of this e-mail does not relate to the business of the University of Huddersfield, then we do not endorse it and will accept no liability.

3 3

Re: IP address assignment for the authenticated users in Free
by Anoop C 20 Oct '09

20 Oct '09

Alan Thanks for the quick reply. I would like to have one more clarification. Can we use IP addrss as Attribute value pair so that the RADIUS server throws IPs dynamically to users after authentication. Regards Anoop Anoop C wrote: > Hi > We are running EAP-TLS authentication for office users using WiFi > network. This is a certificate based authentication and we are using Free > RADIUS. > I would like to know whether we can assign IP address dynamically to the > users through FREE RADIUS server ie RADIUS server works as DHCP server. For WiFi authentication, you need a DHCP server. Sending IP addresses to the NAS in a RADIUS packet won't work. > So > after successful authentication Server should through an IP address which is > configured against that particular MAC of the user in the server. No. You need a DHCP server. You can configure FreeRADIUS to be a DHCP server, but that involves creating a DHCP configuration, not a RADIUS configuration. Alan DeKok. Get your world in your inbox! Mail, widgets, documents, spreadsheets, organizer and much more with your Sifymail WIYI id! Log on to http://www.sify.com ********** DISCLAIMER ********** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If this is a forwarded message, the content of this E-MAIL may not have been sent with the authority of the Company. If you are not the intended recipient, an agent of the intended recipient or a person responsible for delivering the information to the named recipient, you are notified that any use, distribution, transmission, printing, copying or dissemination of this information in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at admin(a)sifycorp.com

2 1

RE:
by INACIO ALVES 20 Oct '09

20 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? I think that the http://wiki.freeradius.org/SQL_HOWTO has a how-to out-of-date because I don't find the schema to the table usergroup. Third. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

3 2

IP address assignment for the authenticated users in Free radius
by Anoop C 20 Oct '09

20 Oct '09

Hi We are running EAP-TLS authentication for office users using WiFi network. This is a certificate based authentication and we are using Free RADIUS. I would like to know whether we can assign IP address dynamically to the users through FREE RADIUS server ie RADIUS server works as DHCP server. So after successful authentication Server should through an IP address which is configured against that particular MAC of the user in the server. Regards Anoop C Get your world in your inbox! Mail, widgets, documents, spreadsheets, organizer and much more with your Sifymail WIYI id! Log on to http://www.sify.com ********** DISCLAIMER ********** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If this is a forwarded message, the content of this E-MAIL may not have been sent with the authority of the Company. If you are not the intended recipient, an agent of the intended recipient or a person responsible for delivering the information to the named recipient, you are notified that any use, distribution, transmission, printing, copying or dissemination of this information in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at admin(a)sifycorp.com

2 1

Disconnect message in 2.1.7 release
by Vijay Badola 20 Oct '09

20 Oct '09

Hi, I have seen the Changelog of release freeradiusd-2.1.7. It says there is full support of 'CoA and Disconnect messages'. My question is: (i) Is it possible to send disconnect/COA message internally from code? (ii) If yes then how? (iii) If not then how can I send the disconnect message from outside? I have also seen your documents to send disconnect message using radclient(externally).but I have doubt how I will get trigger to send Disconnect/COA message if I am doing prepaid accounting. ,Regards Vijay Badola +919958995992(M) +911244200704(O)

2 1

RE: Check_item still wraps at 4gb
by Neville 19 Oct '09

19 Oct '09

Hi Marcel, Are you able to share your work around, because I have the same problem. Either on-list or direct email? Thx Nev

1 0

how to call an external script
by aangles 19 Oct '09

19 Oct '09

Hello, I want freeradius calls an external script and send to it the User-Name it gets from the NAS in an access-request radius packet. So I am using the echo module, I configure as: # # The name of the program to execute, and it's # arguments. Dynamic translation is done on this # field, so things like the following example will # work. # #program = "/bin/echo %{User-Name}" program = "/etc/raddb/xxxx.pl %{User-Name}" # # The attributes which are placed into the # environment variables for the program. And I add this module into the authorize section after the pap module. But it does not call the script. Another thing, if I call the script like the following, then the script is executed and takes myusername as an argument. With freeradius it should to automatically the same? # ./xxxx.pl %myusername Thanks a lot -- View this message in context: http://www.nabble.com/how-to-call-an-external-script-tp25961979p25961979.ht… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1

RE: RE: ,
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? Third. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

1 0

RE: Freeradius-Users Digest, Vol 54, Issue 89
by INACIO ALVES 19 Oct '09

19 Oct '09

Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? Third. I set the Framed-IP-Address := 192.168.2.253, Framed-IP-Netmask = 255.255.255.0 to my user, but I don't receive this IP on my machine. I disable the DHCP on my AP and continue not receive this configuration. I need install a DHCP server on my server and close MACxIP to send this configurations to my machine? No more, thanks again. Inácio Alves http://www.polluxweb.com/inacioalves/site

1 0