- Freeradius-Users - lists.freeradius.org

Proxy RADIUS from MSCHAPv1 to MSCHAPv2
by Franco Pieressa 23 Feb '08

23 Feb '08

Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 <--> MSCHAPv2? To be more specific, is it possible to make the MS-CHAP-MPPE-Keys (v1) from then MS-MPPE-Send-Key (v2)? NAS --- (MSCHAPv1) --- Freeradius --- (MSCHAPv2) --- RADIUS server Thanks! _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/

2 3

Unable to connect to data source
by johnson elangbam 23 Feb '08

23 Feb '08

hi, I am trying to connect Ms SQL with free radius, I've configure all the related packages like freeTDS and unixodbc , and both of the package work well when I test using "tsql" and "isql". But when I try to link with free radius, the following errors shows.Please tell what might be the proble for the following errors. rlm_sql (sql): Driver rlm_sql_unixodbc (module rlm_sql_unixodbc) loaded and linked rlm_sql (sql): Attempting to connect to adore@MSSQL:/radius rlm_sql (sql): starting 0 rlm_sql (sql): Attempting to connect rlm_sql_unixodbc #0 rlm_sql_unixodbc: SQL down 08001 [unixODBC][FreeTDS][SQL Server]Unable to connect to data source rlm_sql_unixodbc: Connection failed rlm_sql (sql): Failed to connect DB handle #0 rlm_sql (sql): starting 1 rlm_sql (sql): starting 2 rlm_sql (sql): starting 3 rlm_sql (sql): starting 4 rlm_sql (sql): Failed to connect to any SQL server. Module: Checking preacct {...} for more modules to load Module: Linked to module rlm_acct_unique Module: Instantiating acct_unique With Regards Elangbam Johnson

1 0

2.0.2 RPM build on redhat 5
by Allen Tsao 23 Feb '08

23 Feb '08

Hi all, I just become a member of this mail list. After download the newest version 2.0.2 of freeradius, I try to build a RPM on redhat 5. I typed all the instructions in terms of the website, but I got an error which show some information about freeradius and freeradius-server. After google internet, I unzip the file freeradius-server-2.0.2.tar.gz, rename the directory name to freeradius-2.0.2, then tar it to freeradius-2.0.2.tar.gz. Also I changed the third line in freeradius.spec from Name: freeradius-server to Name: freeradius. and then run rpmbuild -bb freeradius.spec. I got error: gmake[6]: Entering directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules/rlm_acctlog' if [ "xrlm_acctlog" != "x" ]; then \ /usr/bin/libtool --mode=install /root/rpmbuild/BUILD/freeradius-2.0.2/install-sh -c -c \ rlm_acctlog.la /var/tmp/freeradius-root/usr/lib/rlm_acctlog.la || exit $?; \ rm -f /var/tmp/freeradius-root/usr/lib/rlm_acctlog-2.0.2.la; \ ln -s rlm_acctlog.la /var/tmp/freeradius-root/usr/lib/rlm_acctlog-2.0.2.la || exit $?; \ fi libtool: install: error: cannot install `rlm_acctlog.la' to a directory not ending in /usr/local/lib gmake[6]: *** [install] Error 1 gmake[6]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules/rlm_acctlog' gmake[5]: *** [common] Error 2 gmake[5]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules' gmake[4]: *** [install] Error 2 gmake[4]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src/modules' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/root/rpmbuild/BUILD/freeradius-2.0.2' make: *** [install] Error 2 error: Bad exit status from /var/tmp/rpm-tmp.21389 (%install) RPM build errors: Bad exit status from /var/tmp/rpm-tmp.21389 (%install) It will be appreciated if somebody can help me. Best, Allen

4 3

RE: February 85% OFF
by admin＠viagra.com 22 Feb '08

22 Feb '08

1 0

Mysql Crypt passwords
by Dustin Schuemann 22 Feb '08

22 Feb '08

I have my username and passwords stored in my database as encrypted. How can I get freeradius 1 to work with this passwords. Dustin Schuemann . Network Engineer . . . . . . . . . . . . . . . . . . . . . . . . . . AMS/The Support Dept 400 Ann St NW Suite 102 Grand Rapids, MI 49504 p. 616.235.0725 ext. 7007 e. schuemann(a)supportdept.com

2 1

(no subject)
by Dustin Schuemann 22 Feb '08

22 Feb '08

I am trying to setup freeradius 1. I have chap authentication working with mysql but pap authentication will not work with mysql. This is what I receive from the nas when someone trys to connect. Sending Access-Request of id 1 to 127.0.0.1 port 1812 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP State = 0x Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rad_recv: Access-Request packet from host 127.0.0.1:1814, id=1, length=197 User-Name = "johndstuder" User-Password = "i\374\304U\017\026\264\027:\367PU\262\t\356" NAS-IP-Address = 205.208.132.2 NAS-Identifier = "SouthfieldMI.TNT.01.sisna.com" NAS-Port = 4810 NAS-Port-Type = Async Service-Type = Framed-User Framed-Protocol = PPP Calling-Station-Id = "2312387271" Called-Station-Id = "2317820869" Acct-Session-Id = "485914041" Ascend-Data-Rate = 24000 Ascend-Xmit-Rate = 50667 Attr-102 = 0x6931 Vendor-6969-Attr-69 = 0x6931 Vendor-6969-Attr-71 = 0x34 Proxy-State = 0x32 rlm_sql (sql): Reserving sql socket id: 1 rlm_sql (sql): Released sql socket id: 1 Sending Access-Reject of id 1 to 205.208.202.130 port 33758 Sending Access-Reject of id 1 to 127.0.0.1 port 1814 Proxy-State = 0x32 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=1, length=23 Proxy-State = 0x32 Sending Access-Reject of id 2 to 205.208.202.130 port 33758 Attached is my radiusd .conf

4 8

rlm_ldap and large AD structure issue
by Capelle, Mark (PCMC-GB) 22 Feb '08

22 Feb '08

I have an issue since pointing FR to a point higher in my AD tree (which will return more objects). I get the following error in my FR logs when I try to authenticate a user: Fri Feb 22 10:37:14 2008 : Error: rlm_ldap: ldap_search() failed: Operations error If I point the LDAP module deeper down my AD structure everything works fine. At first I thought it was due to the number of results that AD returns when queried via LDAP, but I modified this and now it returns everything via an ldapsearch. If I run an ldapsearch against my AD tree using the "sAMAccountName = <username>" and the correct account info returned immediately, so it does not necessarily appear to be an ldapsearch issue but rather an issue with the way rlm_ldap uses it. PEAP via ntlm_auth does not have any issue with the tree size either. Has anyone else encountered this and found a solution? I am fighting like hell to not install the corporate standard Cisco ACS box at my site, but if I can't manage to get this working I may have to finally cave :-(. Regards, Mark Capelle

2 1

Freeradius 1.1.7 and LDAP
by Mike O'Connor 22 Feb '08

22 Feb '08

Hi Guys I have a small issue with freeradius and ldap, its authenticating as 'access accept' customers which have placed a space at the beginning of there user name. This then causes there accounting data not to match and so we do not account for there data. This this a bug or a setting I have incorrectly set ? Mike

2 1

WRT54 and freradius with client-station-id
by Rob 22 Feb '08

22 Feb '08

Hi Can anybody force freeradius to work with Linksys WRT54G with combinantion of /user/password/macaddress? Combination user/password works OK but there is no Client-station-id in packet Access-request. Can anybody help?

2 1

avoiding ldap group search
by Gopinath Reddy N 22 Feb '08

22 Feb '08

Hi, Presently my system is configured in such a way that freeradius checks whether user is present in ldap server and then it searches to find the user group in ldap. Is there a way I can avoid this? Basically I want to see if a user is present in Ldap server if he is present I will go ahead and authorize him instead of finding his group etc. My ldap configuration in radiusd.conf at present is: ldap ldap_primary { server = 157.235.205.31 port = 389 identity = "cn=Administrator,cn=Users,dc=xyt,dc=dyx,dc=com" password = temppass basedn = cn=Users,dc=xyt,dc=dyx,dc=com filter = "(sAMAccountName=%{Stripped-User-Name:-%{User-Name}})" start_tls = no access_attr = "dialupacces" dictionary_mapping = ${raddbdir}/ldap.attrmap ldap_connections_number = 5 password_attribute = UserPassword groupname_attribute = cn groupmembership_filter = "(|(&(objectClass=group)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames)(uniquemember==%{Ldap-UserDn})))" groupmembership_attribute = radiusGroupName timeout = 4 timelimit = 3 net_timeout = 5 access_attr_used_for_allow = no } Iam using radius server 1.1.6 version. Thanks in advance -gnr

1 0