- Freeradius-Users - lists.freeradius.org

Freeradius 1.1.7 and LDAP
by Mike O'Connor 22 Feb '08

22 Feb '08

Hi Guys I have a small issue with freeradius and ldap, its authenticating as 'access accept' customers which have placed a space at the beginning of there user name. This then causes there accounting data not to match and so we do not account for there data. This this a bug or a setting I have incorrectly set ? Mike

2 1

WRT54 and freradius with client-station-id
by Rob 22 Feb '08

22 Feb '08

Hi Can anybody force freeradius to work with Linksys WRT54G with combinantion of /user/password/macaddress? Combination user/password works OK but there is no Client-station-id in packet Access-request. Can anybody help?

2 1

avoiding ldap group search
by Gopinath Reddy N 22 Feb '08

22 Feb '08

Hi, Presently my system is configured in such a way that freeradius checks whether user is present in ldap server and then it searches to find the user group in ldap. Is there a way I can avoid this? Basically I want to see if a user is present in Ldap server if he is present I will go ahead and authorize him instead of finding his group etc. My ldap configuration in radiusd.conf at present is: ldap ldap_primary { server = 157.235.205.31 port = 389 identity = "cn=Administrator,cn=Users,dc=xyt,dc=dyx,dc=com" password = temppass basedn = cn=Users,dc=xyt,dc=dyx,dc=com filter = "(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" start_tls = no access_attr = "dialupacces" dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 password_attribute = UserPassword groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember==%{Ldap-UserDn})))" groupmembership_attribute = radiusGroupName timeout = 4 timelimit = 3 net_timeout = 5 access_attr_used_for_allow = no } Iam using radius server 1.1.6 version. Thanks in advance -gnr

1 0

eap authentication and cpu utilization
by Norbert Wegener 21 Feb '08

21 Feb '08

Simple authentication with login/password can be handled in large numbers with a recent cpu and freeradius. . EAP authentication on the other hand requires a great amount of cpu processing. Therefore I have a simple(?) question: Did someone already calcute the theoretically maximum number of eap authentications per second, that a recent x86 cpu is able to handle? Or did someone some practical research on that issue? Norbert Wegener

3 8

migrating from files to ldap
by Stieven.Struyf＠komatsu.eu 21 Feb '08

21 Feb '08

I am looking to migrate from text files to an ldap directory. What is the best/easiest way to do this: -setup ldap, copy all data to the ldap from the start -setup ldap and gradually migrate (is it possible to have part of the clients in flat files and others in ldap?) "This e-mail is property of the company and is supposed to contain only professional content. The company can at all times consult the content of this e-mail and the reply to this e-mail. By replying to this e-mail, you confirm your explicit agreement with the preceding." "Deze e-mail is het eigendom van de Vennootschap en wordt verondersteld enkel beroepsmatige informatie te bevatten. De Vennootschap kan ten allen tijden de inhoud van deze e-mail en van het antwoord daarop raadplegen. Door het beantwoorden van deze e-mail bevestigt U uitdrukkelijk uw akkoord met het voorafgaande."

1 0

howto freeradius with ldap
by Nikolay G. Petrov 20 Feb '08

20 Feb '08

I read a included document about freeradius to ldap, but I a forigner and difficult undersand content. Can we suggest a any content with example, how can I use group to ldap? Thanks!

2 1

Cisco AV-PAIRS
by David W Bell 20 Feb '08

20 Feb '08

Hi there. My Saga continues.... I have freeRADIUS working with openLDAP and can log into CISCO kit and pass the priv-level from the raddb/users file. Is there any way that this information can be passed from the openLDAP user details instead? I am looking to do a single-signon system and it seems a little awkward to have to change a password (as is required in the users file) in 2 locations. Thanks David

5 12

dynamic tagged and untagged vlan assignment
by Stieven.Struyf＠komatsu.eu 20 Feb '08

20 Feb '08

All, Currently i use this configuration to assign clients an ip after successfull authentication (mac authentication): user User-Password == "password" Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-id = "20" This works, but now we are deploying a cisco iptel solution. The phones need to be in a tagged vlan instead of an untagged. Can i make this distinction based on radius attributes? regards, Stieven Struyf M.I.S. Division - System Operations Komatsu Europe International NV Mechelsesteenweg 586 B-1800 Vilvoorde Stieven.Struyf(a)komatsu.eu Tel. +32 (0)2 2552551 "The question of whether a computer can think is no more interesting than the question of whether a submarine can swim." -- E. W. Dijkstra "This e-mail is property of the company and is supposed to contain only professional content. The company can at all times consult the content of this e-mail and the reply to this e-mail. By replying to this e-mail, you confirm your explicit agreement with the preceding." "Deze e-mail is het eigendom van de Vennootschap en wordt verondersteld enkel beroepsmatige informatie te bevatten. De Vennootschap kan ten allen tijden de inhoud van deze e-mail en van het antwoord daarop raadplegen. Door het beantwoorden van deze e-mail bevestigt U uitdrukkelijk uw akkoord met het voorafgaande."

3 4

Pharmacy mall: discount pric!
by freeradius-users＠list.xs4all.nl 20 Feb '08

20 Feb '08

1 0

Regex Ldap Group
by Rohaizam Abu Bakar 20 Feb '08

20 Feb '08

FR: 1.1.2 Openldap 2.3.X I tried to do regex match in Ldap-Group. From below users file, The "NAS-Identifier" regex works OK but for Ldap-Group match, it's not working as below DEBUG log. value to match (jarService = Y5-IPOH, NAS-Identifier=Y5-IPOH) Users file ======= NAS-Identifier =~ "Y5", ldapmain1-Ldap-Group =~ "Y5", Autz-Type := Y5 radiusd.conf ========= ldap ldapmain1 { .............. groupname_attribute = jarService groupmembership_filter = "(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectclass=radiusprofile))" } Debug: ===== rlm_ldap: performing search in ou=CUSTOMER,ou=People,dc=xxxxx,dc=xx, with filter (&(jarService=Y5)(&(uid=bacang)(objectclass=radiusprofile))) rlm_ldap: object not found or got ambiguous search result --haizam

3 3