- Freeradius-Users - lists.freeradius.org

New dictionary for huawei-3com
by Krzysztof Olędzki 20 Sep '07

20 Sep '07

Hello, 3Com is now also using #25506 (H3C - huawei-3com) vendor attribute in a new firmware (3.3.0) for 3c5500G switches. This patch adds appropriate dictionary and also moves hp to be properly sorted. Best regards, Krzysztof Olędzki diff -Nur freeradius-1.1.7-orig/share/dictionary freeradius-1.1.7/share/dictionary --- freeradius-1.1.7-orig/share/dictionary 2007-04-08 16:42:06.000000000 +0200 +++ freeradius-1.1.7/share/dictionary 2007-09-19 18:11:17.000000000 +0200 @@ -111,6 +111,8 @@ $INCLUDE dictionary.foundry $INCLUDE dictionary.gandalf $INCLUDE dictionary.gemtek +$INCLUDE dictionary.h3c +$INCLUDE dictionary.hp $INCLUDE dictionary.issanni $INCLUDE dictionary.itk $INCLUDE dictionary.ipunplugged @@ -119,7 +121,6 @@ $INCLUDE dictionary.livingston $INCLUDE dictionary.localweb $INCLUDE dictionary.lucent -$INCLUDE dictionary.hp $INCLUDE dictionary.microsoft $INCLUDE dictionary.mikrotik $INCLUDE dictionary.navini diff -Nur freeradius-1.1.7-orig/share/dictionary.h3c freeradius-1.1.7/share/dictionary.h3c --- freeradius-1.1.7-orig/share/dictionary.h3c 1970-01-01 01:00:00.000000000 +0100 +++ freeradius-1.1.7/share/dictionary.h3c 2007-09-19 18:14:58.000000000 +0200 @@ -0,0 +1,18 @@ +# -*- text -*- +# +# Dictionary for Huawei-3Com +# http://www.h3c.com +# +# $Id: dictionary.h3c,v 0.1 2007/09/19 18:10:00 ole Exp $ +# + +VENDOR H3C 25506 + +BEGIN-VENDOR H3C + +ATTRIBUTE H3C-Connect_Id 26 integer +ATTRIBUTE H3C-NAS-Startup-Timestamp 59 integer +ATTRIBUTE H3C-Ip-Host-Addr 60 string +ATTRIBUTE H3C-Product-ID 255 string + +END-VENDOR H3C

2 1

Problems of Radius service
by eakaphop 20 Sep '07

20 Sep '07

Now, I have 3 problems about freeradius in my radius server 1. If I enter service radiusd reload command in linux than freeradius process dead. 2. Sometime, I enter radtest command than no response from service (process was running in that time) 3. After I install mod_auth_radius to apache and configure complete but apache can't connect radius. ** Note I use Linux Fedora Core 6, Apache 2.2.4 and freeradius 1.1.7-3

2 1

proxy reply attribute
by Aren Chua 20 Sep '07

20 Sep '07

Hi, I do have a question about the proxy reply attribute. Where should i set/change the attribute like Session-Timeout and Idle-Timeout after the proxy authentication accepted? Thank you. Regards, Aren Chua _________________________________________________________________ Kick back and relax with hot games and cool activities at the Messenger Café. http://www.cafemessenger.com?ocid=TXT_TAGLM_SeptWLtagline

2 2

Do we like the same books?
by voipexpert 20 Sep '07

20 Sep '07

I just joined Shelfari to connect with other book lovers. Come see the books I love and see if we have any in common. Then pick my next book so I can keep on reading. Click below to join my group of friends on Shelfari! http://www.shelfari.com/Register.aspx?ActivityId=16229756&InvitationCode=da… voipexpert Shelfari is a free site that lets you share book ratings and reviews with friends and meet people who have similar tastes in books. It also lets you build an online bookshelf, join book clubs, and get good book recommendations from friends. You should check it out. -------- You have received this email because voipexpert (sunkara.raviprakash.feb14(a)gmail.com) directly invited you to join his/her community on Shelfari. It is against Shelfari's policies to invite people who you don't know directly. Follow this link (http://www.shelfari.com/actions/emailoptout.aspx?email=freeradius-users@lis…) to prevent future invitations to this address. If you believe you do not know this person, you may view (http://www.shelfari.com/voipexpert) his/her Shelfari page or report him/her in our feedback (http://www.shelfari.com/Feedback.aspx) section. Shelfari, 616 1st Ave #300, Seattle, WA 98104

1 0

Proxy server config with PAP or CHAP
by Amit Jain 20 Sep '07

20 Sep '07

Dear All, I am trying to configure the following. User -> Access Point -> Free Radius Server(acting as proxy server) -> Radius Server Now the above configuration works when I have PAP as authentication method. Now I need to have EAP MD5 auth between user and free radius server and PAP or CHAP between free radius server and Radius server. Please let me know, what I need to configure. Please reply soon as it is urgent... thanks for the help in advance. Regards, Amit Jain

2 3

EAP testing without AP?
by ST Wong (ITSC) 20 Sep '07

20 Sep '07

Hi all, I'm new to EAP and want to setup freeradius with EAP-TTLS support. After some struggling with 802.1x doc and terms, the radiusd is up. However, as my testing AP is not ready now, I've no way to test my setup. I wonder if it's possible to test the authentication server<->authenticator<->supplicant setup under an 'simulated' environment without AP since I only want to test the authentication setting. Would anyone please help? Thanks in advance. /ST Wong

3 5

Freeradius and Windows Vista
by Neal Bullins 19 Sep '07

19 Sep '07

I am running FR version 1.1.7 along with OpenSSL 0.9.8c on Debian. Authentication from XP works flawlessly and from what I have been able to tell from, with these versions I should be able to have Vista do PEAP/MSChapv2 authentication via Freeradius. However, it still seems that Vista stops the authentication process before the ntlm_auth call is made. Am I missing something obvious here? Thanks.

3 2

Limit users traffic quota via radius
by Anonymous 19 Sep '07

19 Sep '07

Hi, I'm trying to close the connection of a pre-paid mobile user, after he reached a limited amount of traffic (ie. 100 megabytes), the network device is a Cisco router. I've found may way to rate-limit the traffic bandwidth but not one to do this. Is radius the correct way to achieve this goal? It'all about vsa? Thanks all, Massimiliano

6 7

Re: Configuring FreeRADIUS to use ntlm_auth
by charles＠copel.com 19 Sep '07

19 Sep '07

Alan: Great ... you have reason ... My NAS was configured to send only PAP request. I reconfigured it to accept MS-CHAP and my FreeRadius works well. Best Regards. Charles. Alan DeKok <aland(a)deployingradius.com> Enviado Por: freeradius-users-bounces(a)lists.freeradius.org 17/09/2007 16:28 Favor responder a FreeRadius users mailing list Para: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> cc: cco: Charles Alcantara Borba/COPEL Assunto: Re: Configuring FreeRADIUS to use ntlm_auth charles(a)copel.com wrote: > 3) Configuring FreeRADIUS to use ntlm_auth for MS-CHAP > -> It didn´t work ... I don´t know what is wrong ... My output > FreeRadius presents the same messages that previously: You're not sending it an MS-CHAP request. Perhaps that's part of the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Esta mensagem e seus anexos foram verificados por software anti-vírus. Recomenda-se que não sejam abertos e/ou executados anexos de mensagens de conteúdo ou remetente duvidoso.

1 0

RE: Freeradius and Windows Vista
by Josh Howlett 19 Sep '07

19 Sep '07

Make sure you're using a recent version of samba. Many distros still shib with older versions that won't work. josh. > -----Original Message----- > From: freeradius-users-bounces(a)lists.freeradius.org > [mailto:freeradius-users-bounces@lists.freeradius.org] On > Behalf Of Alan DeKok > Sent: 19 September 2007 17:09 > To: FreeRadius users mailing list > Subject: Re: Freeradius and Windows Vista > > Neal Bullins wrote: > > I am running FR version 1.1.7 along with OpenSSL 0.9.8c on Debian. > > Authentication from XP works flawlessly and from what I > have been able > > to tell from, with these versions I should be able to have Vista do > > PEAP/MSChapv2 authentication via Freeradius. However, it > still seems > > that Vista stops the authentication process before the > ntlm_auth call > > is made. Am I missing something obvious here? > > Nope. Vista *should* work, other people have it working > with similar configurations. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > JANET(UK) is a trading name of The JNT Association, a company limited by guarantee which is registered in England under No. 2881024 and whose Registered Office is at Lumen House, Library Avenue, Harwell Science and Innovation Campus, Didcot, Oxon OX11 0SG

1 0