- Freeradius-Users - lists.freeradius.org

Statistic RADIUS
by Marco De Magistris 16 Jun '09

16 Jun '09

Hi all, In my Scenario FreeRadius is used as RADIUS PROXY. Is it possible with FreeRadius generating the statistics based on an Attribute? i.e The statistics based on NAS-Port-ID. Thanks in advance for your support. Regards Marco

3 2

Re: Free Radius users record samples for SmartEdge router subcriber authentication.
by Ivan Kalik 16 Jun '09

16 Jun '09

> I am trying a simple authenticate pppoe subscriber in radius server (v > 1.188.2.4.2.11) for subscribers coming through Redback SmartEdge 800 > router. As I am new to this I am looked for some examples for users > configuration on RADIUS but could not find. I have tried something out > but seems missing certain stuff: > > abc Auth-Type := Local, Password == "passwd" > Service-Type = Framed-User, > Framed-Protocol = PPP, > Bind_Auth_Context = RADIUS > > Thanks for refering me to some examples. Examples relevant to your freeradius version will be - in users file. That example looks seriously outdated. What needs to be returned to Redback - will be in Redback documentation. Ivan Kalik Kalik Informatika ISP

1 0

pseudo-newbie exec scripts and session-time
by Charles Gregory 16 Jun '09

16 Jun '09

Greetings! I've been cruising the archives and pages and don't quite see what I am looking for. I am hoping someone can point me to a nice simple HOWTO or MAN page for specifying an 'exec' script in radiusd.conf that will set the Session-Timeout and return it to the NAS. I'm thinking: Session-Timeout := %{exec:timecalc} Or something like that. Also, where exactly should this go in the 'authorize' section? I'm presuming at the end, but have found no examples.... Our dialups have a couple of diffrent time parameters, including a user-option file, so while I appreciate any info on the radius 'counter' function, I don't think it will meet all my needs. Hmmm. While I'm here, if I set Session-Timeout to ZERO, what will happen? Thanks in advance! - Charles

7 46

Failover fails in proxy.conf
by Santiago Balaguer García 16 Jun '09

16 Jun '09

Hi, I am using in my AAA servers the freeradius 2.1.3 version. I am configuring the failover for the myrealm.com in proxy.conf. For myrealm.com realm I have two AAA servers: 1.2.3.4 and 1.2.3.5 ############################################################ home_server primary_server { type = auth+acct ipaddr = 1.2.3.4 port = 1812 secret = mysecret require_message_authenticator = no response_window = 5 zombie_period = 60 revive_interval = 5 status_check = status-server check_interval = 60 num_answers_to_alive = 3 } home_server secondary_server { type = auth+acct ipaddr = 1.2.3.5 port = 1812 secret = mysecret require_message_authenticator = no response_window = 5 zombie_period = 60 revive_interval = 5 status_check = status-server check_interval = 60 num_answers_to_alive = 3 } home_server_pool roam_pool { type = fail-over home_server = primary_server home_server = secondary_server } realm myrealm.com { nostrip pool = roam_pool } ################################################# With the primary server everything works fine, but my problem is when I force to switch to fallover server (I switch off IP 1.2.3.4 machine) my freeradius server does not change to request 1.2.3.5 server. I try the fowoling configuration: ################################################3 home_server primary_server { ... } home_server secondary_server { ... } home_server_pool roam_pool { type = fail-over home_server = primary_server } realm myrealm.com { nostrip pool = roam_pool } home_server_pool roam_pool2 { type = fail-over home_server = secondary_server } realm myrealm.com { nostrip pool = roam_pool2 } ############################################3 With the same result --> does not work. Any suggestion? _________________________________________________________________ Nuevo Windows Live, un mundo lleno de posibilidades. Descúbrelo. http://www.microsoft.com/windows/windowslive/default.aspx

3 4

Access Challenge in freeRadius server
by kpani 16 Jun '09

16 Jun '09

Hi, I am new to freeRadius server. I am trying to authorize the ssh and telnet login users of my Redhat Linux machine using freeRadius server. I am able to test Access-Accept and Access-Reject with right and wrong credentials respectively by configuring the file '/etc/pam.d/sshd' with entry pam_radius_auth.so. But I do not know how to achieve and test the Access-Challenge concept. I mean what type of input will result in Access Challenge (I know it happens when we provide partial login information but not sure how to achieve with login in real time)? Please help me with some solutions in achieving Access Challenge. Thanks in advance. Regards, Dhandapani -- View this message in context: http://www.nabble.com/Access-Challenge-in-freeRadius-server-tp24025860p2402… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 7

Re: SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate
by john 16 Jun '09

16 Jun '09

On Sat, Jun 13, 2009 at 7:08 AM, Ivan Kalik<tnt(a)kalik.net> wrote: >> I used the Makefile to generate the certs. I then exported ca.der and >> client.p12 and installed them on the XP box. Did I get the wrong >> files? > > No, those are correct files. Is ca OK but you get errors for client > certificate? Try using included Makefile (rename old Makefile to > Makefile.old and this one to Makefile). It will create client certificates > signed by the ca certificate. > > Ivan Kalik > Kalik Informatika ISP Hi Ivan, The makefile you sent me allowd me to generate a correct client.p12 which cleared up the error reported by windows. Thanks very much. So it looks like windows may prefer personal certs signed by the CA rather than the server? I can sucessfully use the client cert with the "Smart Card or other Certificate" options on Windows XP/SP3 (which uses EAP-TLS I believe). However it didn't fix my issue with trying to use a cert and PEAP or TTLS. So I am stumped still on that one. Any other ideas? Thanks for your help! John

2 3

Problems with Cisco switch and authorization.
by Jeff Davis 15 Jun '09

15 Jun '09

Sorry - I'm a n00b to this project. Trying to get OpenLDAP-based authentication working (well the auth DOES work) but cannot seem to get authorization working. Googling has so far failed me. Perhaps someone on this list can clue me in... users file has the following: DEFAULT Service-Type == NAS-Prompt-User Service-Type := NAS-Prompt-User, Cisco-AVPair += "shell:priv-lvl=15" -- Jefferson K Davis Technology & Information Systems Manager Standard School District 1200 North Chester Ave Bakersfield, CA 93308 USA 661.392.2110 ext 120

4 7

mod_auth_radius
by Thomas Noppe 15 Jun '09

15 Jun '09

Hi, Has anyone compiled the mod_auth_radius module for apache 2.x on windows? Wheren can I download the binary? Kind regards --------------------------------------------------------------------------------------------- Thomas Noppe Dienst Informatiesystemen - S&O thomas.noppe(a)uzleuven.be<mailto:thomas.noppe@uzleuven.be> +32 16 34 79 87 +32 16 34 78 01 UZ Leuven | campus Gasthuisberg | Herestraat 49 | B - 3000 Leuven | www.uzleuven.be<http://www.uzleuven.be>

1 0

Freeradius and Alvarion
by Jairos Jackson 15 Jun '09

15 Jun '09

Hi, I have a problem with MAC Authentication on an Alvarion Wimax base station. I use freeradius 1.1.7 with Radius Manager 3.6. Currently I am running pppoe authentication with a Mikrotik router at the backend of the Alvarion Wimax and its working fine but I need to change to MAC authentication. I have not done MAC authentication before. Thank you in advance..

4 9

Cleartext password between NAS and Radius Server
by kpani 15 Jun '09

15 Jun '09

Hi, I am using PAP for radius authentication. I have a general question here. When we use PAP for user authentication, the password will be passed from user to NAS(radius client) as cleartext password. But how it is transmitted from NAS to Radius server. 1) As clear text password? or 2) The password is encrypted using the secret keyword(used in both radius client & server) and decrypted using secret key in server. Please correct me. I am seeing different answers in web pages. Regards, Dhandapani -- View this message in context: http://www.nabble.com/Cleartext-password-between-NAS-and-Radius-Server-tp24… Sent from the FreeRadius - User mailing list archive at Nabble.com.

2 1