- Freeradius-Users - lists.freeradius.org

Certificate types supported on freeradius EAP-TLS
by John 23 Oct '08

23 Oct '08

hi, I am using freeradius 1.1.6. I want to know which certificate format can be supported on EAP-TLS module? Does it support .pfx format? Thanks. John. --------------------------------- 雅虎邮箱，您的终生邮箱！

3 3

Redback attributes
by Alexandre Chapellon 22 Oct '08

22 Oct '08

Hello, I have redback NASes for bringing up DSL connections. I would like to make the RedBack boxes bring connection down for a user once he has reached his total amount of traffic allowed (UP+DOWN). Does anyone using redback devices (or not!) knows how to achive this? I tried sending the Session-Traffic-Limit to the boxes, but it didn't seemed to change anything! Does anyone knows what this attribute is for? regards

1 0

mysql erros
by Alexandre J. Correa - Onda Internet 22 Oct '08

22 Oct '08

Hello, what these erros means ? Tue Oct 21 23:45:56 2008 : Info: rlm_sql_mysql: Starting connect to MySQL server for #21 Tue Oct 21 23:45:58 2008 : Error: WARNING: Unresponsive child (id 2945448848) for request 27153 Tue Oct 21 23:45:58 2008 : Error: WARNING: Unresponsive child (id 2937060240) for request 27154 Tue Oct 21 23:45:58 2008 : Error: WARNING: Unresponsive child (id 2928671632) for request 27155 Tue Oct 21 23:45:58 2008 : Error: WARNING: Unresponsive child (id 3030645648) for request 27156 Tue Oct 21 23:46:00 2008 : Error: WARNING: Unresponsive child (id 2970614672) for request 27157 Tue Oct 21 23:46:01 2008 : Info: rlm_sql_mysql: Starting connect to MySQL server for #20 Tue Oct 21 23:46:11 2008 : Info: rlm_sql_mysql: Starting connect to MySQL server for #26 Tue Oct 21 23:46:15 2008 : Info: rlm_sql_mysql: Starting connect to MySQL server for #25 Tue Oct 21 23:46:16 2008 : Info: rlm_sql_mysql: Starting connect to MySQL server for #23 Tue Oct 21 23:46:20 2008 : Info: rlm_sql_mysql: Starting connect to MySQL server for #24 thanks ! -- Sds. Alexandre Jeronimo Correa Onda Internet - http://www.ondainternet.com.br OPinguim Hosting - http://www.opinguim.net Linux User ID #142329 UNOTEL S/A - http://www.unotel.com.br

3 2

MAC authentification
by Frederik.Niedernolte＠Bertelsmann.de 22 Oct '08

22 Oct '08

I want to use freeRADIUS for a global MAC authentification but I cannot find any tutorials for that. What must I do realize it? Thanks in advance. Best regards, F. Niedernolte

8 13

Windows CE domain
by scott woodard 22 Oct '08

22 Oct '08

Hi, Free Radius 2.1 It is working just fine on Windows XP and Windows Mobile. However Windows CE is asking for a username and domain. On Windows XP and Mobile it is just asking for username and password. Here is the output from radiusd -x -X Wed Oct 22 06:56:19 2008 : Debug: ++[preprocess] returns ok Wed Oct 22 06:56:19 2008 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 1 Wed Oct 22 06:56:19 2008 : Debug: modsingle[authorize]: returned from chap (rlm_chap) for request 1 Wed Oct 22 06:56:19 2008 : Debug: ++[chap] returns noop Wed Oct 22 06:56:19 2008 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 1 Wed Oct 22 06:56:19 2008 : Debug: modsingle[authorize]: returned from mschap (rlm_mschap) for request 1 Wed Oct 22 06:56:19 2008 : Debug: ++[mschap] returns noop Wed Oct 22 06:56:19 2008 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 1 Wed Oct 22 06:56:19 2008 : Debug: rlm_realm: No '@' in User-Name = "barcode\gun1", looking up realm NULL Wed Oct 22 06:56:19 2008 : Debug: rlm_realm: No such realm "NULL" Wed Oct 22 06:56:19 2008 : Debug: modsingle[authorize]: returned from suffix (rlm_realm) for request 1 Any suggestions? Thanks

2 3

Status Access from detail authentication log
by Sergio Belkin 22 Oct '08

22 Oct '08

How can I know the status access (reject or accept) reading detail auth_log, for example the following sample say me nothing about it: (Of course I can read on ${logdir}/radius.log, but I'd want to read both status and detail...) thanks in advance Fri Aug 22 10:57:44 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0200000e01616e6f6e796d6f7573 Message-Authenticator = 0xae788ba007234884dd1d8bd7ecdff771 Fri Aug 22 10:57:44 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0200000e01616e6f6e796d6f7573 Message-Authenticator = 0xda7f4592324f0f212a30c0acda749bb5 Fri Aug 22 10:58:02 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000e01616e6f6e796d6f7573 Message-Authenticator = 0xe2a7de1d4638038263aab02f2c178e0d Fri Aug 22 10:58:02 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 State = 0x18884817188a5dcb0bc882eaac65b2e0 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0202003c158000000032160301002d010000290301db97e02140c59157bde3685dd107ffe7d1c657ae7e32604645a150c86764ed0c000002000a0100 Message-Authenticator = 0x0395ed4d6ea9ed5f3e67edec7ae4db83 Fri Aug 22 10:58:02 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 State = 0x18884817198b5dcb0bc882eaac65b2e0 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020300061500 Message-Authenticator = 0x66565a8f0aad2725f06817b72d0332f9 Fri Aug 22 10:58:02 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 State = 0x188848171a8c5dcb0bc882eaac65b2e0 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020400061500 Message-Authenticator = 0x391d76eeb7d448bf14a4786b4814d884 Fri Aug 22 10:58:02 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 State = 0x188848171b8d5dcb0bc882eaac65b2e0 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x020500061500 Message-Authenticator = 0x5f951a3937db91d6966a1ad58c7ddbbc Fri Aug 22 10:58:03 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 State = 0x188848171c8e5dcb0bc882eaac65b2e0 NAS-Port-Type = Wireless-802.11 EAP-Message = 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 EAP-Message = 0x49fdf75cc2723f5e6d5815767523a938649edf0ab353ed0d1403010001011603010028d9cf2d07fed18da16f8cfd47a88ad057740e328603dfb12ed6c26b04020cadea66b3fbf7292a25b4 Message-Authenticator = 0x473d475abd749b8881d1ba7f955c6997 Fri Aug 22 10:58:03 2008 Packet-Type = Access-Request User-Name = "anonymous" NAS-IP-Address = 192.168.134.204 Called-Station-Id = "001d7edc22f4" Calling-Station-Id = "0016447e5a79" NAS-Identifier = "001d7edc22f4" NAS-Port = 29 Framed-MTU = 1400 State = 0x188848171d8f5dcb0bc882eaac65b2e0 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0207004f1580000000451703010040bb5dbf55827b2cf722b2ac8309afa04e839f6cc432524a60e4130a25fca5246f1644df960e7e5109e4d728cd1a0e16f53c9741917a95497c068e8cbace5d2ea6 Message-Authenticator = 0xb254f4b7fa9e4b6a8010d27210310955 Fri Aug 22 10:58:03 2008 Packet-Type = Access-Request User-Name = "ngalan" FreeRADIUS-Proxied-To = 127.0.0.1 NAS-IP-Address = 111.111.111.111 -- -- Open Kairos http://www.openkairos.com Watch More TV http://sebelk.blogspot.com Sergio Belkin -

2 1

Freeradius Groups and Linux Users
by Samuel TAILLET 22 Oct '08

22 Oct '08

Hello, I have 2 small questions for the ML: 1) when using the auth radius under Linux, I'm still require to create the account on the machine? because I can't do otherwise if it does not work. 2) I can't make groups, such bob has the rights to log on Linux, Ted on Linux, Unix and Fred on The Switch is it possible? Thank you in advance and a + + PS : excuse me for my English level

3 4

Extra fields in accounting
by Jonathan Gazeley 22 Oct '08

22 Oct '08

I have a FreeRadius server, which is running two virtual servers that process requests from different wireless SSIDs. They are set to do accounting to a MySQL database. What I'd like to know is how to add an extra field to say which virtual server the request came from, so I can query on this field when I analyse my accounting records. Is there an easy way of doing this? Cheers, Jonathan ---------------------------- Jonathan Gazeley Systems Support Specialist ResNet | Wireless & VPN Team Information Services University of Bristol ----------------------------

2 2

EAP-AKA server RAND error
by Mohammad Belgaumkar 22 Oct '08

22 Oct '08

Hi I have configured freeradius for EAP AKA by applying the patch. I m using radeapclient to test it. Below is my configuration for server in raddb/users file DEFAULT Auth-Type := EAP, EAP-Type := AKA EAP-Sim-AUTN=0xa0a0a0a0a0a0a0a0a0a0a0a0a0a0a0a0 EAP-Aka-IK=0xb0b0b0b0b0b0b0b0b0b0b0b0b0b0b0b0 EAP-Aka-CK=0xc0c0c0c0c0c0c0c0c0c0c0c0c0c0c0c0 EAP-Sim-RES=0xd0d0d0d0d0d0d0d0d0d0d0d0d0d0d0d0 EAP-Sim-RAND=0xe0e0e0e0e0e0e0e0e0e0e0e0e0e0e0e0 Bu i get this "eap-aka can not find EAP-Sim-RAND" error in server Please help Regards Mohammad Arif Belgaumkar L&T Infotech Ltd, Whitefield, Bangalore - 66 Ph - 91-80-66242424 extn 2018 www.Lntinfotech.com ( ) L&T Infotech General Business (+) L&T Infotech Internal Use ( ) L&T Infotech Confidential ( ) L&T Infotech Proprietary Larsen & Toubro Infotech Ltd. www.Lntinfotech.com This Document is classified as: |------| | [X] | |------|L&T Infotech Proprietary |------| | [ ] | |------|L&T Infotech Confidential |------| | [ ] | |------| L&T Infotech Internal Use Only |------| | [ ] | |------|L&T Infotech General Business This Email may contain confidential or privileged information for the intended recipient (s) If you are not the intended recipient, please do not use or disseminate the information, notify the sender and delete it from your system. ______________________________________________________________________

1 0

Error in the negotiations certificates
by Martin Silvero 22 Oct '08

22 Oct '08

I mean, what I want to achieve is to use tls with certificates for the PC's that want to connect AP of entry, this creates certificates with the following reference: https://lists.freeradius.org/pipermail/freeradius-users/2008-October/msg005… license = certificates for tls , sorry my english (is very bad). then my problem is certificates? but i try many opcion and nothing. I created the certificates according to the README file, then tried and nothing, then did the same thing, but I created a bundle : "cat ca.pem server.pem > cabundle.pem" and convert in the cabundle. der, then import client.p12 and cabundle.der to the laptop, then try and get the last error that you showed.

2 1