- Freeradius-Users - lists.freeradius.org

TNCC warning
by 翔李 29 Sep '07

29 Sep '07

Hi, I am sorry for my carelessness.Here is the running infor attachment. Thanks for your reply. --------------------------------- 雅虎邮箱，终生伙伴！ --------------------------------- @yahoo.cn 新域名、无限量，快来抢注！ # radiusd -x Starting - reading configuration files ... Using deprecated naslist file. Support for this will go away soon. Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Module: Loaded expr Module: Instantiated expr (expr) Module: Loaded PAP Module: Instantiated pap (pap) Module: Loaded CHAP Module: Instantiated chap (chap) Module: Loaded MS-CHAP Module: Instantiated mschap (mschap) Module: Loaded System Module: Instantiated unix (unix) Module: Loaded eap rlm_eap: Loaded and initialized type tnc rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Loaded and initialized type gtc rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Module: Loaded preprocess Module: Instantiated preprocess (preprocess) Module: Loaded realm Module: Instantiated realm (suffix) Module: Loaded files Module: Instantiated files (files) Module: Loaded Acct-Unique-Session-Id Module: Instantiated acct_unique (acct_unique) Module: Loaded detail Module: Instantiated detail (detail) Module: Loaded radutmp Module: Instantiated radutmp (radutmp) Initializing the thread pool... Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 25.20.227.141:1645, id=19, length=125 NAS-IP-Address = 25.20.227.141 NAS-Port = 50001 NAS-Port-Type = Ethernet User-Name = "Lumpy" Called-Station-Id = "00-15-62-BE-79-03" Calling-Station-Id = "00-15-58-7B-83-9D" Service-Type = Framed-User Framed-MTU = 1500 EAP-Message = 0x0200000a014c756d7079 Message-Authenticator = 0x1b8dac18a5669da950a5b9f024458a3d rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. rad_recv: Access-Request packet from host 25.20.227.141:1645, id=19, length=125 Sending Access-Reject of id 19 to 25.20.227.141 port 1645 EAP-Message = 0x04000004 Message-Authenticator = 0x00000000000000000000000000000000

2 3

Failed obtain IP address after authenticated using EAP-MD5
by Chiu Luk 29 Sep '07

29 Sep '07

Note: forwarded message attached. --------------------------------- Catch up on fall's hot new shows on Yahoo! TV. Watch previews, get listings, and more!

3 5

Re: [OpenSER-Users] Failed to compile openser with freeradius support
by Live Great 29 Sep '07

29 Sep '07

Hi, I have downloaded the software, but got an error: core:freeradius-client-1.1.5 # ./configure checking whether to enable maintainer-specific portions of Makefiles... no configure: error: cannot run /bin/bash ./config.sub core:freeradius-client-1.1.5 # What am I missing? Thanks SW ----- Original Message ---- From: Peter Nixon <listuser(a)peternixon.net> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Saturday, September 29, 2007 6:31:33 PM Subject: Re: [OpenSER-Users] Failed to compile openser with freeradius support http://wiki.freeradius.org/Radiusclient On Sat 29 Sep 2007, Live Great wrote: > Hi, where can I get freeradius-client? I searched the source in > freeradius, couldn't find it. > > Thanks > SW > > ----- Original Message ---- > From: ram <talk2ram(a)gmail.com> > To: Live Great <livegreat007(a)yahoo.com> > Cc: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org>; > users(a)openser.org Sent: Friday, September 28, 2007 11:09:17 PM > Subject: Re: [OpenSER-Users] Failed to compile openser with freeradius > support > > > > > On 9/28/07, Live Great <livegreat007(a)yahoo.com> wrote: > > > > HI, > > In FreeBSD 6.2, I got this error when I compiled openser with freeradius > support. > > ../../radius.h:36:32: freeradius-client.h > > : No such file or directory > > install freeradius client before compiling > > > > ram -- Peter Nixon http://peternixon.net/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Failed obtain IP address after authenticated using EAP-MD5
by Chiu Luk 29 Sep '07

29 Sep '07

After the supplicant authenticated successfully from the FreeRadius server, my notebook fails to obtain an IP address from the Access Point (router) and end up getting a 169.254.198.216 IP address. here is my setup : Supplicant = WIRE1x ( a windows port of Open 1x ) Authenticator = D-Link DIR-655 Router Authentication Server = FreeRadius the setup diagram of 3 components http://www.oniva.com/upload/1356/diagram.jpg capture of EAP-MD5 protcol successfully get authenticated http://www.oniva.com/upload/1356/success.jpg but after a while, the notebook fails to obtain an IP from the D-link wireless router and end up getting 169.254.198.216 IP address. the setup of 802.1x inside D-link wireless router is like the following http://www.oniva.com/upload/1356/dlink.jpg so is there anything is missing on the setup so my notebook cannot get IP address from Dlink wireless router after authenticated successfully? Thank you! --------------------------------- Take the Internet to Go: Yahoo!Go puts the Internet in your pocket: mail, news, photos & more.

2 1

Not everything is getting logged via Radius - very odd
by Patrick M. 29 Sep '07

29 Sep '07

Hi all, First time poster here - go easy on me :) We use freeradius for our O1 dialup customers, as well as our SuperNews customers. Our freeradius server authenticates via LDAP. We had a customer come in today mentioning they could not log in to their dialup account, so I went to the logs and did some testing. I tried logging in with his username and I received the invalid login. So I then tried another username, and was able to authenticate just fine, however I did not see anything in the logs to indicate a successful or unsuccessful login. I am running freeradius 1.0.1-3.RHEL4.5 on CentOS 4.5. I'm not sure what will be useful to provide you, since freeradius has so many configs. Please excuse me as radius is still a bit greek to me. Please let me know what will help you help me troubleshoot, and I will be more than happy to provide. Thanks in advance! Patrick

3 2

Re: [OpenSER-Users] Failed to compile openser with freeradius support
by Live Great 29 Sep '07

29 Sep '07

Hi, where can I get freeradius-client? I searched the source in freeradius, couldn't find it. Thanks SW ----- Original Message ---- From: ram <talk2ram(a)gmail.com> To: Live Great <livegreat007(a)yahoo.com> Cc: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org>; users(a)openser.org Sent: Friday, September 28, 2007 11:09:17 PM Subject: Re: [OpenSER-Users] Failed to compile openser with freeradius support On 9/28/07, Live Great <livegreat007(a)yahoo.com> wrote: HI, In FreeBSD 6.2, I got this error when I compiled openser with freeradius support. ../../radius.h:36:32: freeradius-client.h : No such file or directory install freeradius client before compiling ram

3 2

TNCC warning
by 翔李 29 Sep '07

29 Sep '07

Hi, I built TNC-Client and NAA-TNCS according to the steps introducing in "How To build TNC-Client including IMCHostScanner" and "How To build TNCS including IMVHostScanner" respectively.Then I run TNCC.exe to connect to the PDP server(run by executing command radius -X) but it warns that authentication may fail.The warning info is "rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this." The whole running info is appended to this mail. Would you please tell me why the warning occured and how to solve the problem? Thank you very much. --------------------------------- @yahoo.cn 新域名、无限量，快来抢注！

2 2

Re: [OpenSER-Users] Failed to compile openser with freeradius support
by Live Great 29 Sep '07

29 Sep '07

I found that I have already had radiusclient installed. I may be try out the way from what Norman said. Thanks Sam ----- Original Message ---- From: "tnt(a)kalik.co.yu" <tnt(a)kalik.co.yu> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Saturday, September 29, 2007 9:41:10 AM Subject: Re: [OpenSER-Users] Failed to compile openser with freeradius support Try radiusclient. Ivan Kalik Kalik Informatika ISP Dana 28/9/2007, "Live Great" <livegreat007(a)yahoo.com> piše: >Hi, where can I get freeradius-client? I searched the source in freeradius, couldn't find it. > >Thanks >SW > >----- Original Message ---- >From: ram <talk2ram(a)gmail.com> >To: Live Great <livegreat007(a)yahoo.com> >Cc: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org>; users(a)openser.org >Sent: Friday, September 28, 2007 11:09:17 PM >Subject: Re: [OpenSER-Users] Failed to compile openser with freeradius support > > > > >On 9/28/07, Live Great <livegreat007(a)yahoo.com> wrote: > > > >HI, > >In FreeBSD 6.2, I got this error when I compiled openser with freeradius support. > >../../radius..h:36:32: freeradius-client.h >: No such file or directory > > > > > > > >install freeradius client before compiling > > > >ram > > > > > > > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

regarding Error: rlm_ldap
by David Stubblefield 28 Sep '07

28 Sep '07

Greetings, New to FreeRadius. I got it up and running and the basics seem to be running ok (FreeRadius version v1.1.3 Running on CentOS 5) but I'm seeing the following errors in the log and am hoping someone can shed some light or point me in the right direction. I've googled and looked around the mailing list archives but only see references to this area in posts that deal with other seemingly non-related errors. Wed Sep 26 03:53:09 2007 : Error: rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to allow Wed Sep 26 03:53:09 2007 : Error: rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to demand Wed Sep 26 03:53:09 2007 : Error: rlm_ldap: could not set LDAP_OPT_X_TLS_REQUIRE_CERT option to XXX Thanks in advance for any and all help! -Stubbs

1 0

Re: EAP (PEAP) problem with MS Win XP
by WAYNE VANDERMERWE 28 Sep '07

28 Sep '07

When i use Cleartext-Password I get the same resaults from the DEBUG been Login incorrect: [53986067/<no User-Password attribute>] (from client elhc-network port 0 cli 00-0F-CB-FA-D4-63) What I have tryed is change the settings in "EAP MSCHAPv2 Properties to not use my windows login name and password" and this connects when i supply the same user name and password as indicated in the user.conf file. I see there is a command called radeapclient. Can anyone give me help with this to test EAP like the radtest command? Try with JRadius Simulator: http://jradius.net/wiki/index.php/JRadiusSimulator And why have you commented out Cleartext-Password and entered User-Password? Ivan Kalik Kalik Informatika ISP

2 1