- Freeradius-Users - lists.freeradius.org

Weird windows issue
by Joe Vieira 20 Jun '08

20 Jun '08

Hi, this is a weird one for ya'll. windows clients (xp sp2 and what not) can be configured to pass there credentials along to wireless when they authenticate to the computer(to the AD domain). that seems to work fine. then randomly it seems to stop working and their login seems to be wrong. ideas? Joe

2 1

DHCP and dynamic ip allocation from a pool
by Evgeniy Kozhuhovskiy 20 Jun '08

20 Jun '08

Does anybody already implemented dynamic allocation of ips from pool? Or any ideas? In fact, main problem in native rlm_sql_ippool is that "freeing" of ip is done via accounting section - and there is no analog of Stop packet in dhcp (but it can be simulated, using Lease-Time) -- With best regards, Evgeniy Kozhuhovskiy, Leader of Services team, Minsk State Phony Network, RUE Beltelecom.

2 4

help EAP-TNC
by fbernal＠um.es 20 Jun '08

20 Jun '08

Hi all, I'm working in setting up a basic scenario which involves 3 components: a client using Xsupplicant a AP making use of hostapd and a Radius server using FreeRadius ;). I'm trying to probe the EAP-TNC method but i have received this message from the FreeRadius server: rlm_eap: ERROR: EAP-TNC must be run inside of a TLS method. I've configured EAP-TLS and this method alone it is working properly. So when I put in configuration file --> default_eap_method = tnc FreeRadius shows the message before. I think that in some way TLS must be configured or something to transport EAP-TNC, ok? (is possible to do this?) is posible test EAP-TNC with the current version of FreeRadius? Regards, Fernando.

3 3

FreeRADIUS + DHCP
by Raja 20 Jun '08

20 Jun '08

Can someone point me in the right direction to configure FreeRADIUS with DHCP ? Tried editing sites-available/dhcp but still dhcp module does not get to load. Is there something need to be added to radiusd.conf ? Thanks Raja

3 5

Question regarding eapclient
by pallavi dharmadhikari 20 Jun '08

20 Jun '08

Hi I am trying to test the eapclient on Fedora. When I type this command radeapclient -x localhost 1812 testing, and started the freeradius server to accept the packets from eapclient, the eapclient window gets hanged and nothing happens. Other question that I have is that, if we have to write a EAP-MD5 client , do we need to modify the original server settings ? If yes, then what are they? Thanks in advance -- Regards Pal

2 3

FreeRADIUS 2.0.5 Debian dpkg-buildpackage error
by Giovanni Lovato 19 Jun '08

19 Jun '08

# dpkg-buildpackage -b -uc dpkg-buildpackage: source package is freeradius dpkg-buildpackage: source version is 2.0.5-0 dpkg-buildpackage: source changed by Alan DeKok <aland(a)freeradius.org> dpkg-buildpackage: host architecture i386 dpkg-buildpackage: source version without epoch 2.0.5-0 debian/rules clean dpatch deapply-all 02-dialupadmin-help not applied to ./ . 01-radiusd-to-freeradius not applied to ./ . rm -rf patch-stamp patch-stampT debian/patched dh_testdir dh_clean rm -f build-arch-stamp build-indep-stamp libltdl/stamp-h1 rm -f install-arch-stamp install-indep-stamp configure-stamp [ -f Make.inc ] && make distclean || true # The make clean forgets to remove this build directory [ -d src/modules/lib ] && rm -fr src/modules/lib || true # Put the original autotools files back in place [ -f config.sub.dist ] && rm config.sub && mv config.sub.dist config.sub || true [ -f config.guess.dist ] && rm config.guess && mv config.guess.dist config.guess || true debian/rules build test -d debian/patched || install -d debian/patched dpatch apply-all applying patch 01-radiusd-to-freeradius to ./ ... failed. make: *** [patch-stamp] Error 1

4 5

No authentication method (AUth Type) problem.
by Andy An 19 Jun '08

19 Jun '08

Hi: I am a new guy to deal with freeradius/wireless stuff. I use freeradius 2.0.5 with LDAP back end. If I test with radtest (localhost) or with NTRadPing (from another WINXP machine)it works fine(return Access-Accept). But if I test with MAC Airport as a client and Netgear WG 302 as a AP it fails again and agian no matter how I adjust the configuration file around (e.g. eap.conf, sites-eabled/ldap, radiusd.conf etc.) Thanks in advance for any help/clue/guide. P.S. -----------Mac client settings: 802.1x enabled with PEAP(outer identity: none) and TTLS(inner auth: mschapv2 outer identity: none) Security: WPA enterprise -----------Netgear WG302 settings: Security: WPA with radius Data encrypt: TKIP+AES Auth server port: 1812 Acc server port: 1813 ----------- the info cut from the radiusd.-X output: rlm_ldap: looking for reply items in directory... WARNING: No "known good" password was found in LDAP. Are you sure that the user is configured correctly? rlm_ldap: user andyan authorized to use remote access rlm_ldap: ldap_release_conn: Release Id: 0 ++[ldap] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns noop auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user *(It might be problematic from here)* auth: Failed to validate the user. TTLS: Got tunneled Access-Reject rlm_eap: Handler failed in EAP/ttls rlm_eap: Failed in EAP select ++[eap] returns invalid auth: Failed to validate the user. Found Post-Auth-Type Reject +- entering group REJECT expand: %{User-Name} -> andyan attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Sending Access-Reject of id 23 to 10.10.10.228 port 1059 EAP-Message = 0x04050004 Message-Authenticator = 0x00000000000000000000000000000000 Finished request 5. Going to the next request ----------------- --

4 3

LDAP PASSWORD HASH
by Eduardo Cavalcanti 19 Jun '08

19 Jun '08

I use freeradius 2.0.2 with PEAP and MSCHAPv2 for authentication. I want to authenticate on LDAP database, but these protocols only read clear-text or hashes of the passwords on LDAP database. My question is: how do I make hashes of the passwords stored on LDAP?? Can I use SHA-256 for hashing??? Grateful, Eduardo.

2 4

SQL failover
by Roy Kartadinata 19 Jun '08

19 Jun '08

Hello, We currently in a process of upgrading our current radius server to the most current one (thanks Alan) and I found a section on the wiki that talks about SQL failover. Interesting enough, our SQL servers are in master master mode so that it will replicate each other. Can I use the same setup for accounting as well or it will work just for authentication? Is there a page within the wiki or a document that explain what each line within the group being used for? Cheers, Roy Kartadinata Pocket Communications Email: rkartadinata(a)pocket.com Phone: 210-858-2559

2 1

how can i update radacct_old?
by Jose Maira Iranzo Marin 19 Jun '08

19 Jun '08

I need a radacct_old table mounthly update and clean radacct. Radacct_old, and radacct_summary are original table? No virus found in this outgoing message. Checked by AVG. Version: 7.5.524 / Virus Database: 270.4.0/1509 - Release Date: 19/06/2008 8:00

2 1