- Freeradius-Users - lists.freeradius.org

Re: Users cant connect Freeradius 2.0.2
by Gustavo Chavelas 03 Apr '08

03 Apr '08

Hi. I have the same problem and it's very strange. In other server I have CentOS 5 with freeradius-1.1.3-1.2.el5 (rpm) and its working without problem. My WindowsXP and WindowsCE clients connect fine. But I need to upgrade my version why my Windows VISTA clients can't connect. I'm installing the 2.0.3 version of freeradius but with a TARBALL file. I'm configuring the freeradius as old version, I don't copy the configurations files, I configure again the files. But when I to run radiusd -X my clients not connect. Sends an error of authentification. Someone know why? ------------------------------ Message: 8 Date: Wed, 2 Apr 2008 19:05:47 +0100 From: A.L.M.Buxey(a)lboro.ac.uk Subject: Re: Users cant connect Freeradius 2.0.2 To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20080402180547.GB2566(a)lboro.ac.uk> Content-Type: text/plain; charset=us-ascii Hi, > Firstly, i have to install a new server and my freeradius 2.0.2 it's running > now. > Bur I have a new problem. > > With last version, my freeradius work fine, but with this new version, the > users can't connect. > > I'm attaching the raddiusd -X so, you've just installed 2.0.2 (why not 2.0.3???) - and your old version was working. what was your old version? did you just use the same config files? alan ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 36, Issue 15 ************************************************

2 1

Re: radius server cannot handle external request
by xia sihua 03 Apr '08

03 Apr '08

> Hi, > > > I have installed the latest freeradius server (version: 2.0.3) on my > > Fedora Core 5 i386 PC. Now it can work ok when I use "radtest test test > > localhost 0 testing123" to test local user from local. And under debug mode > > "radiusd -X" the server can print out relevant handle info. However, > > Configure another machine as a RADIUS client and send out request, and the > > server is silent, and stop "Ready to process requests.". That means the > > server cannot handle external radius request. > > default FC5 install? edit /etc/sysconfig/iptables then > 'service iptables restart' you'll need to allow UDP 1812 and 1813 > from the client address. not a freeradius problem. Yes, I use default configuration. The firewall discard the radius packet. After adding the rule allowing radius udp packet coming in, the server can handle the message. Thanks for you and Ivan Kalik. > > alan > -- Best regards！ walter *************************************** Nothing is impossible! ***************************************

1 0

RE: Hints & Huntgroups [SEC=UNCLASSIFIED] (Ranner, Frank MR)
by Dean Smith 03 Apr '08

03 Apr '08

Thanks Frank I'd tried two instances of preprocess but couldn't get it to work. I'll do some reading and try again. I have got the huntgroup now set in the Hints file though so immediate problem solved Thanks again Dean ------------------------------ Message: 4 Date: Thu, 3 Apr 2008 11:06:17 +1100 From: "Ranner, Frank MR" <Frank.Ranner(a)defence.gov.au> Subject: RE: Hints & Huntgroups [SEC=UNCLASSIFIED] To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Hints is processed first, then Huntgroups. You can set up 2 instances of preprocess, process huntgroups in the first instance and hints in the second. You can also set the Huntgroup item in hints as the result of an sql or ldap lookup. Once the huntgroup variable exists, further huntgroup sections exit immediately. Regards, Frank Ranner

1 0

Module-Success-Message / Module-Failure-Message
by Arran Cudbard-Bell 03 Apr '08

03 Apr '08

Hi, I noticed Module-Success-Message / Module-Failure-Message were listed in the internal dictionary .... Are they legacy attributes ? They don't seem to be being populated. Be really nice if they were populate with the nice new shiny Login OK / Login Fail messages... Login OK: [ac221/***** (from client hp-e-engg1-1-dev-8021x-sw1.net.susx.ac.uk port 1 cli 0080c8396796) -- Arran Cudbard-Bell (A.Cudbard-Bell(a)sussex.ac.uk) Authentication, Authorisation and Accounting Officer Infrastructure Services | ENG1 E1-1-08 University Of Sussex, Brighton EXT:01273 873900 | INT: 3900

2 1

Re: freeradius_2.0.3+mysql
by SANDY KALUGDAN 03 Apr '08

03 Apr '08

I'm using chillispot + freeradius_2.0.3 + mysql ----- Original Message ---- From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, April 3, 2008 15:03:14 Subject: Re: freeradius_2.0.3+mysql SANDY KALUGDAN wrote: > why is my config always using Auth-type := CHAP???? Are you alway sending it CHAP requests? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Send instant messages to your online friends http://uk.messenger.yahoo.com

1 0

Re: freeradius_2.0.3+mysql
by SANDY KALUGDAN 03 Apr '08

03 Apr '08

I don't know. It just says that my authentication is being done thru CHAP ----- Original Message ---- From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, April 3, 2008 15:03:14 Subject: Re: freeradius_2.0.3+mysql SANDY KALUGDAN wrote: > why is my config always using Auth-type := CHAP???? Are you alway sending it CHAP requests? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Send instant messages to your online friends http://uk.messenger.yahoo.com

1 0

Re: freeradius_2.0.3+mysql
by SANDY KALUGDAN 03 Apr '08

03 Apr '08

why is my config always using Auth-type := CHAP???? ----- Original Message ---- From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, April 3, 2008 13:17:36 Subject: Re: freeradius_2.0.3+mysql SANDY KALUGDAN wrote: > thanks for replying. > for testing purposes, i've use 's' as the password. > SQL password for user sandy is really 's' (a) you didn't type "s" as the user's password on the client (b) the client is broken, and does not do CHAP properly (c) the code in FreeRADIUS is broken, and does not do CHAP properly. There are few other options. Perhaps try a longer password. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Send instant messages to your online friends http://uk.messenger.yahoo.com

3 2

Failed to insert event, freeradius 2.0.3
by Mikhail Novikov 03 Apr '08

03 Apr '08

Hi, I got this message and freeradius stoped work: Rejecting request 0 due to lack of any response from home server 192.168.0.10 port 1812 There was no response configured: rejecting request 0 Finished request 0. [event.c:969] Failed to insert event How can I fix that?

3 2

Re: freeradius_2.0.3+mysql
by SANDY KALUGDAN 03 Apr '08

03 Apr '08

I'll try to test it using a longer password. doing the radtest my configuration works but when I try to login using the normal way, it is not authenticating. ----- Original Message ---- From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, April 3, 2008 13:17:36 Subject: Re: freeradius_2.0.3+mysql SANDY KALUGDAN wrote: > thanks for replying. > for testing purposes, i've use 's' as the password. > SQL password for user sandy is really 's' (a) you didn't type "s" as the user's password on the client (b) the client is broken, and does not do CHAP properly (c) the code in FreeRADIUS is broken, and does not do CHAP properly. There are few other options. Perhaps try a longer password. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Send instant messages to your online friends http://uk.messenger.yahoo.com

1 0

Freeradius, EAP-PEAP, LDAP and users file...
by Marco Gaiarin 03 Apr '08

03 Apr '08

[i'm not subscribed to this list, so, please, put me on CC] I've just setup a 'test installation' of freeradius in a debian etch box (using freeradius with 1.1.3 recompiled by me to support EAP-TLS). In my environments there's ever a LDAP server that serve, among other thinks, also a samba3 server using standard stuff (smbldap-tools, ...). Clearly my users are mostly (ahem, totally ;( ) windows XPsp2. Firstly i've setup all the stuff using winbind/ntlm_auth to do the MS-CHAP auth, but because i know that in LDAP the NT-Password hare simply stored, and looking at the (deprecated) /etc/smbpasswd module with the aid of some google, i've finally reached a good (for me) working point: ldap module extract NT-Password and give it to mschap module for authentication, with the bonus of group filtering, all in LDAP (i've disabled 'unix')... The strange, the only strangeness i've found, are that i was forced to insert an explicitly 'deny' rule in users file, eg my users are: DEFAULT Service-Type == Framed-User, Ldap-Group == "ced" DEFAULT Service-Type == Framed-User, Ldap-Group == "diramm" DEFAULT Service-Type == Framed-User, Ldap-Group == "ricerca" DEFAULT Service-Type == Framed-User, Ldap-Group == "*", Auth-Type := Reject Reply-Message = "Gruppo non autorizzato" if i remove the last entry, user got authenticated. But users file was 'no match, no party'? What i'm missing? Thanks. -- dott. Marco Gaiarin GNUPG Key ID: 240A3D66 Associazione ``La Nostra Famiglia'' http://www.sv.lnf.it/ Polo FVG - Via della Bontà, 7 - 33078 - San Vito al Tagliamento (PN) marco.gaiarin(at)sv.lnf.it tel +39-0434-842711 fax +39-0434-842797

4 7