- Freeradius-Users - lists.freeradius.org

EAP-PEAP with LDAP for 802.1x authentication
by Ryan 25 Feb '08

25 Feb '08

Hi All, Understand that it is not possible to authenticate using EAP-PEAP against OpenLDAP due to encrypted password. Can someone advise on how exactly OpenLDAP needs be configured so that it can be used in EAP-PEAP? I found out from http://vuksan.com/linux/dot1x/802-1x-LDAP.html that to do so additional attributes needs to be added to LDAP. Is this the only way? Thanks/Regards, Ryan

4 3

Configuring radrelay using proxy.conf in v2.0.1
by Ryan 25 Feb '08

25 Feb '08

Upgraded to 2.0.2 and got the radrelay working using proxy.conf Ryan

1 0

Error LDAP module not available
by C A 24 Feb '08

24 Feb '08

Hi, I've compiled and installed the FreeRADIUS 2.0.0 version. Everything works OK, I can run the radtest example. The problem happens when I try to activate the LDAP module. After that when I run "radiusd -X" a get the error: .... /usr/local/etc/raddb/radiusd.conf[696]: Failed to link to module 'rlm_ldap': rlm_ldap.so: cannot open shared object file: No such file or directory /usr/local/etc/raddb/sites-enabled/default[135]: Failed to find module "ldap". /usr/local/etc/raddb/sites-enabled/default[34]: Errors parsing authorize section. } } Errors initializing modules ..... Then I issue the command "locate rlm_ldap" I don't get any files but those on src. What I've done wrong? Do I have to write any flag when compiling radius to activate/compile the LDAP Module? BR. Antares

3 3

Proxy RADIUS from MSCHAPv1 to MSCHAPv2
by Franco Pieressa 23 Feb '08

23 Feb '08

Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 <--> MSCHAPv2? To be more specific, is it possible to make the MS-CHAP-MPPE-Keys (v1) from then MS-MPPE-Send-Key (v2)? NAS --- (MSCHAPv1) --- Freeradius --- (MSCHAPv2) --- RADIUS server Thanks! _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

2 3

Unable to connect to data source
by johnson elangbam 23 Feb '08

23 Feb '08

hi, I am trying to connect Ms SQL with free radius, I've configure all the related packages like freeTDS and unixodbc , and both of the package work well when I test using "tsql" and "isql". But when I try to link with free radius, the following errors shows.Please tell what might be the proble for the following errors. rlm_sql (sql): Driver rlm_sql_unixodbc (module rlm_sql_unixodbc) loaded and linked rlm_sql (sql): Attempting to connect to adore@MSSQL:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_unixodbc #0 rlm_sql_unixodbc: SQL down 08001 [unixODBC][FreeTDS][SQL Server]Unable to connect to data source rlm_sql_unixodbc: Connection failed rlm_sql (sql): Failed to connect DB handle #0 rlm_sql (sql): starting 1 rlm_sql (sql): starting 2 rlm_sql (sql): starting 3 rlm_sql (sql): starting 4 rlm_sql (sql): Failed to connect to any SQL server. Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique With Regards Elangbam Johnson

1 0

2.0.2 RPM build on redhat 5
by Allen Tsao 23 Feb '08

23 Feb '08

Hi all, I just become a member of this mail list. After download the newest version 2.0.2 of freeradius, I try to build a RPM on redhat 5. I typed all the instructions in terms of the website, but I got an error which show some information about freeradius and freeradius-server. After google internet, I unzip the file freeradius-server-2.0.2.tar.gz, rename the directory name to freeradius-2.0.2, then tar it to freeradius-2.0.2.tar.gz. Also I changed the third line in freeradius.spec from Name: freeradius-server to Name: freeradius. and then run rpmbuild -bb freeradius.spec. I got error: gmake[6]: Entering directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules/rlm_acctlog' if [ "xrlm_acctlog" != "x" ]; then \ /usr/bin/libtool --mode=install /root/rpmbuild/BUILD/freeradius-2.0.2/install-sh -c -c \ rlm_acctlog.la /var/tmp/freeradius-root/usr/lib/rlm_acctlog.la || exit $?; \ rm -f /var/tmp/freeradius-root/usr/lib/rlm_acctlog-2.0.2.la; \ ln -s rlm_acctlog.la /var/tmp/freeradius-root/usr/lib/rlm_acctlog-2.0.2.la || exit $?; \ fi libtool: install: error: cannot install `rlm_acctlog.la' to a directory not ending in /usr/local/lib gmake[6]: *** [install] Error 1 gmake[6]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules/rlm_acctlog' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules' gmake[4]: *** [install] Error 2 gmake[4]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2' make: *** [install] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.21389 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21389 (%install) It will be appreciated if somebody can help me. Best, Allen

4 3

RE: February 85% OFF
by admin＠viagra.com 22 Feb '08

22 Feb '08

1 0

Mysql Crypt passwords
by Dustin Schuemann 22 Feb '08

22 Feb '08

I have my username and passwords stored in my database as encrypted. How can I get freeradius 1 to work with this passwords. Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann(a)supportdept.com

2 1

(no subject)
by Dustin Schuemann 22 Feb '08

22 Feb '08

I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect. Sending Access-Request of id 1 to 127.0.0.1 port 1812 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP State = 0x Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rad_recv: Access-Request packet from host 127.0.0.1:1814, id=1, length=197 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 Sending Access-Reject of id 1 to 205.208.202.130 port 33758 Sending Access-Reject of id 1 to 127.0.0.1 port 1814 Proxy-State = 0x32 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=1, length=23 Proxy-State = 0x32 Sending Access-Reject of id 2 to 205.208.202.130 port 33758 Attached is my radiusd .conf

4 8

rlm_ldap and large AD structure issue
by Capelle, Mark (PCMC-GB) 22 Feb '08

22 Feb '08

I have an issue since pointing FR to a point higher in my AD tree (which will return more objects). I get the following error in my FR logs when I try to authenticate a user: Fri Feb 22 10:37:14 2008 : Error: rlm_ldap: ldap_search() failed: Operations error If I point the LDAP module deeper down my AD structure everything works fine. At first I thought it was due to the number of results that AD returns when queried via LDAP, but I modified this and now it returns everything via an ldapsearch. If I run an ldapsearch against my AD tree using the "sAMAccountName = <username>" and the correct account info returned immediately, so it does not necessarily appear to be an ldapsearch issue but rather an issue with the way rlm_ldap uses it. PEAP via ntlm_auth does not have any issue with the tree size either. Has anyone else encountered this and found a solution? I am fighting like hell to not install the corporate standard Cisco ACS box at my site, but if I can't manage to get this working I may have to finally cave :-(. Regards, Mark Capelle

2 1