- Freeradius-Users - lists.freeradius.org

RE: Message 05389
by Maryanne＠Viagra.com 05 Nov '08

05 Nov '08

1 0

sqlippool symbol error
by Alexandre Chapellon 05 Nov '08

05 Nov '08

I have compiled and installed FR2.1.1 on ubuntu 8.04. FR starts correctly with no warning but when the server needs to process the sqlippool module FR crashes with the following: rlm_sql (myippool1): Reserving sql socket id: 4 [sqlippool1] expand: START TRANSACTION -> START TRANSACTION freeradius: symbol lookup error: /usr/lib/freeradius/rlm_sqlippool-2.1.1.so: undefined symbol: rlm_sql_query I use FR2.1.1 because it is supposed not to need linking against rlm_sql anymore.... What am I missing?

2 2

freeradius 2.1.1 with ubuntu server 8.04
by piston 05 Nov '08

05 Nov '08

Hi All I'm trying to building package, so how i got error during the process. I have no problem to build freeradius 2.1.0 package at this pc. Please assist. Below are the logs dpkg-buildpackage -b -uc dpkg-buildpackage: set CPPFLAGS to default value: dpkg-buildpackage: set CFLAGS to default value: -g -O2 dpkg-buildpackage: set CXXFLAGS to default value: -g -O2 dpkg-buildpackage: set FFLAGS to default value: -g -O2 dpkg-buildpackage: set LDFLAGS to default value: -Wl,-Bsymbolic-functions dpkg-buildpackage: source package freeradius dpkg-buildpackage: source version 2.1.1-0 dpkg-buildpackage: source changed by Alan DeKok <aland(a)freeradius.org> dpkg-buildpackage: host architecture i386 debian/rules clean dpatch deapply-all 02-dialupadmin-help not applied to ./ . attempting to revert failed patch 01-radiusd-to-freeradius from ./: md5sums match, proceeding ... done (neither success nor failure guaranteed) rm -rf patch-stamp patch-stampT debian/patched dh_testdir dh_clean rm -f build-arch-stamp build-indep-stamp libltdl/stamp-h1 rm -f install-arch-stamp install-indep-stamp configure-stamp [ -f Make.inc ] && make distclean || true # The make clean forgets to remove this build directory [ -d src/modules/lib ] && rm -fr src/modules/lib || true # Put the original autotools files back in place [ -f config.sub.dist ] && rm config.sub && mv config.sub.dist config.sub || true [ -f config.guess.dist ] && rm config.guess && mv config.guess.dist config.guess || true debian/rules build test -d debian/patched || install -d debian/patched dpatch apply-all applying patch 01-radiusd-to-freeradius to ./ ... failed. make: *** [patch-stamp] Error 1 dpkg-buildpackage: failure: debian/rules build gave error exit status 2 Thank you.

2 2

EAP - TLS Client Certification Stored Removable Media
by Aydın KOÇAK 05 Nov '08

05 Nov '08

Hello All; I have a question about EAP - TLS . How can I configure client certification stored from removable media (ex: usb memor, smartcard, etc..). I have already used EAP - TLS with client certification stored on Windows (cliet) but i need a solution that user can authenticate when insert his usb memory and logout when remove his usb memory ? My system running with EAP - TLS authentication and LDAP authorization and clients are use 802.1x ... Thank You For Your Relation, Aydin Kocak, TURKOM.

6 5

Re: Freeradius-Users Digest, Vol 43, Issue 17
by Kerry Tobin 05 Nov '08

05 Nov '08

OK, I think I'm another step closer now. I made the suggested change and there was no change in the logs. EAP still was not being done on the local machine and was failing on the proxy. However, I tried creating a second domain, set the original domain to go to LOCAL and the second domain to go to the proxy server. When I do that the proxy properly authenticates to Open Directory, step one. However, eventually I get a failure in rlm_eap again. modcall: entering group authenticate for request 8 rlm_eap: Request not found in the list rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request rlm_eap: Failed in handler Am I on to the beginning of a solution by using two domains or do I need to go back and then change something else? Kerry Tobin > > ------------------------------ > > Message: 7 > Date: Wed, 05 Nov 2008 00:07:50 +0100 > From: <tnt(a)kalik.net> > Subject: Re: Unable to authenticate to Open Directory > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: <OVuOqjFE.1225840070.2492580.tnt(a)kalik.net> > Content-Type: text/plain; charset=ISO-8859-2 > >> I think we're back to what I had been trying to do on my test >> machines >> now and still can't seem to get working. >> >> When I add "DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To- >> Realm := DOMAIN" to users of the first server (I believe that's the >> correct place to put it). I get "rlm_eap: Request is supposed to be >> proxied to Realm DOMAIN. Not doing EAP." on the first server and the >> proxy server still says " rlm_eap: Identity does not match User-Name, >> setting from EAP Identity." >> > > There is a setting proxy_tunneled_request_as_eap in peap section of > eap.conf. Change that to no. > > Ivan Kalik > Kalik Informatika ISP >

2 1

freeradius-1.0.5_EAP-TTLS_EAP-Tokencard auth failure for WPA.
by Prasad Parab 05 Nov '08

05 Nov '08

Dear All, My setup involves freeradius 1.0.5 as backend server with AP and wifi client authenticating using EAP-TTLS, EAP-Tokencard type. SEPUP: WIN XP (wifi client) <-------> AP <----------> freeradius-1.0.5 EAP-TTLS,EAP-Tokencard authenticator eap type = ttls. The result is auth failure. Using hostapd-0.5.9 as authenticator. Attached are the log and conf files. Anticipating your help. Regards Prasad

2 1

Re: user group problems, my logic or freeradius limitation
by Reynolds, Walter 05 Nov '08

05 Nov '08

sql is not something we have a lot of expertise in so was hoping there is some other way to be able to get this to work. Can I use unlang in some way to support the users with multiple group names? -- Walt Reynolds Principal Systems Security Development Engineer Information Technology Central Services University of Michigan (734) 615-9438 > > ------------------------------ > > Message: 5 > Date: Tue, 04 Nov 2008 17:35:58 +0100 > From: <tnt(a)kalik.net> > Subject: Re: user group problems, my logic or freeradius limitation > To: "FreeRadius users mailing list" > <freeradius-users(a)lists.freeradius.org> > Message-ID: <Ne2NeLhB.1225816558.0900920.tnt(a)kalik.net> > Content-Type: text/plain; charset=ISO-8859-2 > >> The first comment you gave mentioned to put the Etc-Group-Name in the > huntgroups file. This unfortunately does not work as it will only > accept system groups (and users do not have accounts for this system). >> >> This option does not scale if I am understanding you right. >> >> I would have to add a section for each user for every huntgroup. If >> I have 20 > administrators and 20 huntgroups I would have to create 400 entries > just for them. With the number of users I would have to deal with this would not scale. >> It seems like there should be a easy way to deal with users in more >> than one group. >> > > Use sql. > > Ivan Kalik > Kalik Informatika ISP >

2 1

Modifying AVPs when acting as a proxy
by Olli Salonen 05 Nov '08

05 Nov '08

Hello, I have a problem with my NAS and my current RADIUS server. The RADIUS server is responding with 2 vendor-specific AVPs, which my NAS is not able to understand. However, there are corresponding vendor-specific AVPs in my NAS as well. Could I install FreeRADIUS as a proxy between my current NAS and RADIUS server and have it somehow modify the answer I get from my current RADIUS, effectively acting as a translator between my two current nodes? Cheers, -olli

2 1

Re: Freeradius-Users Digest, Vol 43, Issue 17
by Rolando Tejada 05 Nov '08

05 Nov '08

hi, i would like to know if somebady can help me to configurate a cautive portal in monowall to autenticate user in freeradius.

2 1

freeradius-1.0.5_EAP-TTLS_MSCHAPv2 auth issue
by Prasad Parab 05 Nov '08

05 Nov '08

Hi all, Kindly help me with the issue involving freeradius-1.0.5 for EAP-TTLS_mschapv2 auth type. ** *SEPUP:* ** *WIN XP (wifi client) <-------> AP <----------> freeradius-1.0.5* *EAP-TTLS_mschapv2 authenticator eap type = ttls* Attached is the debug log and eap.conf file. *But with same setup EAP-TTLS with mschap works*. Pls advice if my eap.conf is wrong ?? Regards Prasad

2 4