- Freeradius-Users - lists.freeradius.org

Re: 2.0.5 on Solaris, openssl 0.9.8h ---> does support sha256 ?
by Rafiqul Ahsan 09 Aug '08

09 Aug '08

I have tested authentication works with my existing certs. When I load the new certs (sha256), and I see below error at "radiusd -X" I am using FreeeRadius 2.0.5, openssl 0.9.8h, OS Solaris. Is there any known patch for this to support advance encryption...I believe I saw somewhere in web that 1.1.7 has this patch, how about 2.0.5 ? Thanks for your thoughts, Rafi tls { rsa_key_exchange = yes dh_key_exchange = no rsa_key_length = 1024 dh_key_length = 1024 verify_depth = 2 pem_file_type = yes private_key_file = "/usr/local/etc/raddb/certs/wmxforum/xohm.com3.pvt.pe m" certificate_file = "/usr/local/etc/raddb/certs/wmxforum/xohm.com3.pem" CA_file = "/usr/local/etc/raddb/certs/wmaxforum/sam-cacert.pem" dh_file = "/usr/local/etc/raddb/certs/wmxforum/DH" random_file = "/usr/local/etc/raddb/certs/wmxforum/random" fragment_size = 1024 include_length = yes check_crl = no } rlm_eap: SSL error error:02001002:system library:fopen:No such file or directory rlm_eap_tls: Error reading Trusted root CA list /usr/local/etc/raddb/certs/wmaxf orum/sam-cacert.pem rlm_eap: Failed to initialize type tls /usr/local/etc/raddb/eap.conf[3]: Instantiation failed for module "eap" /usr/local/etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap ". /usr/local/etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticat e section. } } Errors initializing modules On 8/7/08, Rafiqul Ahsan <rafiqul.ahsan(a)gmail.com> wrote: > I changed the Makefile for random file creation step (as a fix for my > earlier posted error)... > > This is what I found at Makefile : > > random: > @if [ -e /dev/urandom ] ; then \ > dd if=/dev/urandom of=./random count=10 >/dev/null 2>&1; \ > else \ > date > ./random; \ > fi > > I Changed to ... > > random > date > ./random; > > That solved my earlier problem, and now my server is listening. > > Thanks, > Rafi > > > > > > > > On 8/7/08, Rafiqul Ahsan <rafiqul.ahsan(a)gmail.com> wrote: > > I see below error when I execute bootstrap > > > > bash-3.00# /usr/local/etc/raddb/certs/bootstrap > > ............................................... > > make: Nothing to be done for `ca'. > > make: Nothing to be done for `server'. > > make: `dh' is up to date. > > /bin/sh: test: argument expected > > make: *** [random] Error 1 > > > > On 8/7/08, Alan DeKok <aland(a)deployingradius.com> wrote: > > > Rafiqul Ahsan wrote: > > > > Thanks, I was able to build freeradius 2.0.5 on Solaris 10. However, > > > > server is not running, and I see below error when I run "radiusd -X". > > > > Here is the output. > > > ... > > > > make_cert_command = "/usr/local/etc/raddb/certs/bootstrap" > > > > } > > > > Exec-Program output: > > > > > > It's trying to run the bootstrap command. It's not working. > > > > > > Run the bootstrap command by hand, and then re-start the server. > > > > > > Alan DeKok. > > > - > > > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > > > > > > > > -- > > Rafiqul Ahsan > > > > > -- > Rafiqul Ahsan > -- Rafiqul Ahsan

2 3

Re: Multiple NAS
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0

Re: Freeradius SNMP support
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0

Re: Server not responding to requests
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0

Permissions Re:
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0

Freeradius SNMP support
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0

RE: Server not responding to requests
by Yoho, Cindy 09 Aug '08

09 Aug '08

Alan, iptables -L -n output shows Chain INPUT (policy ACCEPT) target prot opt source destination Chain OUTPUT (policy ACCEPT) target prot opt source destination Chain FORWARD (policy ACCEPT) target prot opt source destination tcpdump shows nothing when I am trying to connect. However, ifconfig shows eth0 has the wrong IP address. It looks like it grabbed a DHCP address from my Windows DHCP server. When I look at eth0 connection properties on the task bar it shows 172.16.3.4. In /etc/hosts, under System Administration Network Configuration, and on my DNS server, it is 172.16.1.15. How do I stop it from using the wrong address? I see in docs there is a file called /var/lib/dhclient/eth0-leases which contains the bad config info. Orion, client file is correct, for the 172.16.1.15 address, anyway. :-\ Greg, server is not multihomed, but multi-ip addresses do appear to be the problem. Hi, > Hi All, > > I have freeradius 1.1.7 running on RHEL 5. radtest works with a local > user setup, and also with authentication via Active Directory. > However, anything outside the radius server host does not get a reply. > I have configured a Multitech MA820 and also tried ntradping, and both > get the same results - "Could not receive a response from server" is > the message when I use ntradping, and "Server did not respond in a > timely manner" is the response when I try to connect from the Multitech. > > Is there some setting I need to check to make sure external access is > enabled? iptables? your host is firewalled and therefore FR doesnt see the packet at all? tcpdump -eqntl -i eth0 port 1812 (if eth0 is your NIC) then do some stuff. do you see anything? iptables -L -n are there entries? if so, ensure there are 1812/1813/1814 UDP entries too! alan ------------------------------ Message: 2 Date: Tue, 5 Aug 2008 19:17:40 +0200 From: orion <meshkruaj(a)gmail.com> Subject: Re: Server not responding to requests To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <6e3e383b0808051017t128c3b53qfee7fad6b0558679(a)mail.gmail.com> Content-Type: text/plain; charset=ISO-8859-1 take a look at client file. there you can specify which clients ( IP addresses ) are allowed . add the public ip of your outside clients/nas. 2008/8/5 Yoho, Cindy <Cyoho(a)umpublishing.org>: > Hi All, > > I have freeradius 1.1.7 running on RHEL 5. radtest works with a local > user setup, and also with authentication via Active Directory. > However, anything outside the radius server host does not get a reply. > I have configured a Multitech MA820 and also tried ntradping, and both > get the same results - "Could not receive a response from server" is > the message when I use ntradping, and "Server did not respond in a > timely manner" is the response when I try to connect from the > Multitech. > > Is there some setting I need to check to make sure external access is > enabled? > > > Thanks in advance ~ > > Cindy Yoho > Systems Engineer > United Methodist Publishing House > Nashville, TN > > > > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

3 3

Re: 2.0.5 on Solaris, openssl 0.9.8h ---> does support sha256 ?
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0

(no subject)
by Ahmet DÜLGAR 09 Aug '08

09 Aug '08

hi i am new at freeradius i installed opensuse11 and install freeradius 2 0 5 using yast i want to use freeradius for wpa engription but this error appear when start radiusd -X thanks for reply good work Generating a 2048 bit RSA private key. .......................................+++ ....................................................................................................+++ unable to write 'random state' writing new private key to 'ca.key' ca.key: Permission denied 3948:error:0200100D:system library:fopen:Permission denied:bss_file.c:352:fopen('ca.key','w') 3948:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:354: make: *** [ca.pem] Error 1 Exec-Program output: openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Exec-Program-Wait: plaintext: openssl req -new -x509 -keyout ca.key -out ca.pem -config ./ca.cnf Exec-Program: returned: 2 rlm_eap: Failed to initialize type tls /etc/raddb/eap.conf[17]: Instantiation failed for module "eap" /etc/raddb/sites-enabled/inner-tunnel[223]: Failed to find module "eap". /etc/raddb/sites-enabled/inner-tunnel[176]: Errors parsing authenticate section. } } _________________________________________________________________ Gelen kutunuzda hiç yer kalmamasından bıktınız mı? Windows Live Hotmail şimdi size 5GB ÜCRETSİZ depolama alanı sunuyor! Ücretsiz Windows Live Hotmail hesabınızı buradan alın! http://get.live.com/mail/overview

2 1

(no subject)
by patrice.oliver＠ch-beaune.fr 09 Aug '08

09 Aug '08

Bonjour, je suis actuellement en cong�s pour 3 semaines. Je suis de retour le 1er septembre 2008. En cas d'urgence, vous pouvez contacter Monsieur Tixier au 03 80 24 44 27 ou la maintenance informatique au 03 80 24 45 84. Cordialement.

1 0