- Freeradius-Users - lists.freeradius.org

error on log radius
by Alisson 13 Oct '09

13 Oct '09

i get this message Info: rlm_sql (sql): received Acct On/Off packet -- Att. Alisson F. Gonçalves Sistemas de Informação - UFGD

2 2

FreeRadius, Cisco WLC, configuration
by Aziz, Jalil 13 Oct '09

13 Oct '09

Hello all, I need help with FreeRadius and Cisco's WLC. Anyone ever did this deployment before? Please help. Regards, Jalil

2 1

Authenticating access via caller-id or username/password
by John Ward 13 Oct '09

13 Oct '09

Good Day, I've an interesting question. I currently authenticate users via caller-id for a static ip delivery system. I have had to change the "sql_user_name" to the "calling-station-id" attribute so that i can match the entries to so called usernames in the MYSQL database This is working and works well as the username for authentication ends up being the caller id. I now have to authenticate users based on username and password in one instance and solely calling-station-id in another. the config i use in the "files" to authenticate a user on caller id is as follows: DEFAULT Calling-Station-ID =="1234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.21 DEFAULT Calling-Station-ID =="2234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.22 DEFAULT Calling-Station-ID =="3234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.23 DEFAULT Calling-Station-ID =="4234567890", Auth-Type := Accept Framed-IP-Address = 155.22.0.24 the DEFAULT section has the framing types etc set. How would i now do this in the MYSQL database as there is no way of tying the "username" to anything ? Regards John

2 2

Re: Improving Auth-Rate
by kachin Agarwal 13 Oct '09

13 Oct '09

Hi, I m trying to improve the auth rate. the auth-rate i m getting now is 3 i.e number of mobile units that can authenticate per minute is 3. So how can i increase it to 5 or something? Which part of the code should i focus on? Thanx From cricket scores to your friends. Try the Yahoo! India Homepage! Try the new Yahoo! India Homepage. Click here. http://in.yahoo.com/trynew

4 3

Re: Active Directory/freeradius/enterasys - combination
by Ivan Kalik 13 Oct '09

13 Oct '09

> Now I need a username/password auth against AD. > Ntlm-auth works very well. > > If I activate ldap in /etc/raddb/modules: > The server don't do ldap. > > What is my mistake ? > > First the server should do a ntlm-auth and then check an ldap-group in > AD. How does that ldap-group check look like and where is it? BTW I don't see ntlm-auth on that debug either. Ivan Kalik Kalik Informatika ISP

1 0

perl_rlm and differences FR 1 and 2
by David Jones 13 Oct '09

13 Oct '09

Thanks to some handy hints in here, I've had some success with rlm_perl. But (and there is always a but) I've been happily developing against 2.x but have just discovered I need to actually use 1.x because of RHEL. The rlm_perl link of both version 1 and version 2 points to the same documentation page, so I made the assumption that although theres much different under the covers of FR, by the time you get to perl its all hidden, and I could just take a perl script that works on V2 and run it on V1. But it doesn't. There seems to be different handling of the module return values, and of $RAD_CHECK{'Response-Packet-Type'} = "Access-Challenge". FR V1 seems quite unkeen to send out responses. So, and finally the question; Are there supposed to be differences in behaviour for rlm_perl between V1 and V2? Thanks, Davey.

3 2

acct_postgresql+auth_ldap
by José Johnny RANDRIAMAMPIONONA 13 Oct '09

13 Oct '09

Hi all, I d like to know if someone has already tried to do the accounting (only accounting) thing with postgres and authentication with OpenLdap? There is nothing on wiki ... I am wondering if I have to write some scripts to save the user id, his connection duration ect ...in postgres database.I want to implement the following situation: I don't care what my ldap_server ll return when a user sends a access request packet, but I want to save the name, passwd, the connection duration(so at this time I initialize the connection time which will be incremented until the disconnection time ). Your opinions will be very useful for me. -- JJohnny R Phone: +212663682554, +212533158575 National School of Applied Sciences ZIP 1818 TANGIER 90000 ---------Morocco ---------------

4 6

NAS ? What is the best option
by Marinko Tarlac 13 Oct '09

13 Oct '09

I know that this list is not connected with any hardware vendor but I see that every couple days someone cries here .... NAS problems... I use Mikrotik and I'm not satisfied (duplicated packets, does not support POD correctly , etc) Also, yesterday I see that Cisco can be pain in the a*** too :) So, dear friends... What is the best solution for ISP (PPPoE)?

3 2

Improving Auth-Rate..
by kachin Agarwal 13 Oct '09

13 Oct '09

hi, If i want to improve the auth-rate which part of the code should i focus on? Keep up with people you care about with Yahoo! India Mail. Learn how. http://in.overview.mail.yahoo.com/connectmore

2 1

returning an arbitrary attribute from LDAP
by Sam Hooker 13 Oct '09

13 Oct '09

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi folks, I'm trying to ascertain how to have radiusd return an arbitrary attribute with each successful authentication. My radiusds are doing PEAP/MS-CHAPv2 against Kerberos for authn, and it seems like activating rlm_ldap for authz will cause "Auth-Type = LDAP" to enter my world, which I'm betting will break things. Also, I'm fuzzy as to where I'd do this sort of thing anyway; it seems that post-auth would be the place to start, but am uncertain. Any guidance you could offer (including pointers to existing mailing list threads or other docs) would be much appreciated. Cheers, - -sth sam hooker|sth@noiseplant.com|http://www.noiseplant.com "I have not failed, I've just found 10,000 ways that won't work." Thomas Edison -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.8 (Darwin) Comment: Use GnuPG with Firefox : http://getfiregpg.org (Version: 0.7.9) iEYEARECAAYFAkrTglwACgkQX8KByLv3aQ2jdgCgpmoEskDoJGeoN2+ySzKRUqK9 /RUAoMGhPZ651eOj3oXGBtSf8ihwcHWO =e5Qa -----END PGP SIGNATURE-----

2 1