- Freeradius-Users - lists.freeradius.org

RE: Freeradius - MySQL Update problem
by musoket＠mtn.co.ug 06 Aug '07

06 Aug '07

Hello Ivan, Mon, 06 Aug 2007 09:07:22 +0100, you wrote: >You need to stop the server (killall radiusd) and restart in debug mode >(radiusd -X). > >Ivan Kalik >Kalik Informatika ISP This is some of the debug output indicating an INSERT statement: modcall: entering group preacct for request 37 modcall[preacct]: module "preprocess" returns noop for request 37 rlm_acct_unique: Hashing 'NAS-Port = 0,Client-IP-Address = x.x.x.x,NAS-IP-Address = x.x.x.x,Acct-Session-Id = "0024B3B4",User-Name = "y.y.y.y"' rlm_acct_unique: Acct-Unique-Session-ID = "eb0fbc15b1bd7bca". modcall[preacct]: module "acct_unique" returns ok for request 37 rlm_realm: No '@' in User-Name = "y.y.y.y", looking up realm NULL rlm_realm: No such realm "NULL" modcall[preacct]: module "suffix" returns noop for request 37 modcall[preacct]: module "files" returns noop for request 37 modcall: leaving group preacct (returns ok) for request 37 Processing the accounting section of radiusd.conf modcall: entering group accounting for request 37 radius_xlat: '/var/log/radius/radacct/x.x.x.x/detail-20070806' rlm_detail: /var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /var/log/radius/radacct/x.x.x.x/detail-20070806 modcall[accounting]: module "detail" returns ok for request 37 modcall[accounting]: module "unix" returns ok for request 37 radius_xlat: '/var/log/radius/radutmp' radius_xlat: 'y.y.y.y' modcall[accounting]: module "radutmp" returns ok for request 37 radius_xlat: 'y.y.y.y' rlm_sql (sql): sql_set_user escaped user --> 'y.y.y.y' radius_xlat: 'INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, AcctSessionTime, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, AcctOutputOctets, CalledStationId, CallingStationId, AcctTerminateCause, ServiceType, FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('0024B3B4', 'eb0fbc15b1bd7bca', 'y.y.y.y', '', 'x.x.x.x', 'ISDN 0/-1:D:0', 'Async', '2007-08-06 13:29:27', '0', '0', '0', '', '', '0', '0', '25612345678', '', '', '', '', '', '10', '0')' rlm_sql (sql): Reserving sql socket id: 2 rlm_sql (sql): Released sql socket id: 2 modcall[accounting]: module "sql" returns ok for request 37 modcall: leaving group accounting (returns ok) for request 37 Sending Accounting-Response of id 46 to x.x.x.x port 1646 Finished request 37 I hope this helps. The h323-remote-address value should be entered under ServiceType and FramedIPAddress as per my setup in sql.conf. As you can see, a blank is being entered instead. I have changed the IP addresses to x.x.x.x and y.y.y.y. Regards Timothy

2 1

RE: Freeradius - MySQL Update problem
by musoket＠mtn.co.ug 06 Aug '07

06 Aug '07

Hi Ivan, Mon, 06 Aug 2007 09:07:22 +0100, you wrote: >You need to stop the server (killall radiusd) and restart in debug mode >(radiusd -X). > >Ivan Kalik >Kalik Informatika ISP I don't know if this is related to this problem but I get a lot of this in my radius log files: Mon Aug 6 13:19:34 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Mon Aug 6 13:19:38 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Mon Aug 6 13:19:41 2007 : Error: rlm_radutmp: Logout for NAS rotelkom_gateway port 0, but no Login record Mon Aug 6 13:19:57 2007 : Error: rlm_radutmp: Logout for NAS rotelkom_gateway port 0, but no Login record Mon Aug 6 13:20:05 2007 : Error: rlm_radutmp: Logout for NAS rotelkom_gateway port 0, but no Login record Mon Aug 6 13:20:08 2007 : Error: rlm_sql (sql) in sql_accounting: stop packet with zero session length. [user '85.31.48.5', nas '81.199.63.74'] Mon Aug 6 13:20:17 2007 : Error: rlm_radutmp: Logout for NAS rotelkom_gateway port 0, but no Login record Mon Aug 6 13:20:20 2007 : Error: rlm_radutmp: Logout for NAS rotelkom_gateway port 0, but no Login record Mon Aug 6 13:20:33 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Mon Aug 6 13:20:38 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Mon Aug 6 13:20:44 2007 : Error: rlm_radutmp: Logout for NAS rotelkom_gateway port 0, but no Login record Mon Aug 6 13:20:46 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Mon Aug 6 13:20:52 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Mon Aug 6 13:20:55 2007 : Error: rlm_radutmp: Logout entry for NAS rotelkom_gateway port 0 has wrong ID Timothy

2 1

Re: Freeradius-Users Digest, Vol 28, Issue 15
by Michael Ziemann 06 Aug '07

06 Aug '07

freeradius-users-request(a)lists.freeradius.org schrieb: > Send Freeradius-Users mailing list submissions to > freeradius-users(a)lists.freeradius.org > > To subscribe or unsubscribe via the World Wide Web, visit > http://lists.freeradius.org/mailman/listinfo/freeradius-users > or, via email, send a message with subject or body 'help' to > freeradius-users-request(a)lists.freeradius.org > > You can reach the person managing the list at > freeradius-users-owner(a)lists.freeradius.org > > When replying, please edit your Subject line so it is more specific > than "Re: Contents of Freeradius-Users digest..." > > > Today's Topics: > > 1. Re: MySQL db parameters (Stefan Winter) > 2. Re: MySQL db parameters (tnt(a)kalik.co.yu) > > > ---------------------------------------------------------------------- > > Message: 1 > Date: Mon, 6 Aug 2007 11:46:01 +0200 > From: Stefan Winter <stefan.winter(a)restena.lu> > Subject: Re: MySQL db parameters > To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> > Message-ID: <200708061146.01225.stefan.winter(a)restena.lu> > Content-Type: text/plain; charset="utf-8" > > >> The "parameters" are RADIUS attributes, as defined in the various RFCs >> about RADIUS. Which ones to use depends on what you want to do. >> > > BTW, a list is on > > http://www.freeradius.org/rfc/attributes.html > > Stefan > > thanks, that's it ... yes, the world is soooo small... i really was surprised to get an answer from a guy living 5km away :-) Michael

1 0

MySQL db parameters
by Michael Ziemann 06 Aug '07

06 Aug '07

Hi people! thanks for answering and solving my problems with the mysql database... I importet the sql-file into the database an it worked ... ;-) But now another question... Which type of parameters can I insert in the MySQL db for freeradius? example in radreply or radgroupreply, like Framed-IP-Address, Framed-Routing or Idle-Timeout etc. ... Is there somewhere a list??? I inserted for example: mysql> select * from usergroup; +----+---------------+-------------+ | id | UserName | GroupName | +----+---------------+-------------+ | 1 | fredf | dynamic | | 2 | barney | static | | 2 | dialrouter | netdial | +----+---------------+-------------+ 3 rows in set (0.00 sec) mysql> select * from radcheck; +----+----------------+----------------+--------------+------+ | id | UserName | Attribute | Value | Op | +----+----------------+----------------+--------------+------+ | 1 | fredf | Password | wilma | == | | 2 | barney | Password | betty | == | | 2 | dialrouter | Password | dialup | == | +----+----------------+----------------+--------------+------+ 3 rows in set (0.02 sec) mysql> select * from radgroupcheck; +----+-------------+----------------+---------------+------+ | id | GroupName | Attribute | Value | Op | +----+-------------+----------------+---------------+------+ | 1 | dynamic | Auth-Type | Local | := | | 2 | static | Auth-Type | Local | := | | 3 | netdial | Auth-Type | Local | := | +----+-------------+----------------+---------------+------+ 3 rows in set (0.01 sec) mysql> select * from radreply; +----+------------+-------------------+---------------------------------+------+ | id | UserName | Attribute | Value | Op | +----+------------+-------------------+---------------------------------+------+ | 1 | barney | Framed-IP-Address | 1.2.3.4 | := | | 2 | dialrouter | Framed-IP-Address | 2.3.4.1 | := | | 3 | dialrouter | Framed-IP-Netmask | 255.255.255.255 | := | | 4 | dialrouter | Framed-Routing | Broadcast-Listen | := | | 5 | dialrouter | Framed-Route | 2.3.4.0 255.255.255.248 | := | | 6 | dialrouter | Idle-Timeout | 900 | := | +----+------------+-------------------+---------------------------------+------+ 6 rows in set (0.01 sec) mysql> select * from radgroupreply; +----+--------------+-----------------------+------------------------+------+ | id | GroupName | Attribute | Value | Op | +----+--------------+-----------------------+------------------------+------+ | 34 | dynamic | Framed-Compression | Van-Jacobsen-TCP-IP | := | | 33 | dynamic | Framed-Protocol | PPP | := | | 32 | dynamic | Service-Type | Framed-User | := | | 35 | dynamic | Framed-MTU | 1500 | := | | 37 | static | Framed-Protocol | PPP | := | | 38 | static | Service-Type | Framed-User | := | | 39 | static | Framed-Compression | Van-Jacobsen-TCP-IP | := | | 41 | netdial | Service-Type | Framed-User | := | | 42 | netdial | Framed-Protocol | PPP | := | +----+--------------+-----------------------+------------------------+------+ 12 rows in set (0.01 sec) thanks Michael Ziemann

3 3

RE: Freeradius - MySQL Update problem
by musoket＠mtn.co.ug 06 Aug '07

06 Aug '07

Hello Ivan, Thu, 02 Aug 2007 12:21:02 +0100, you wrote: >Send us the log (radiusd -X) with your accounting request. Lets see if >this query gets executed. > >Ivan Kalik >Kalik Informatika ISP The output of radiusd -X is thus: mail:~ # radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /etc/raddb/proxy.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/snmp.conf Config: including file: /etc/raddb/eap.conf Config: including file: /etc/raddb/sql.conf main: prefix = "/usr" main: localstatedir = "/var" main: logdir = "/var/log/radius" main: libdir = "/usr/lib/freeradius" main: radacctdir = "/var/log/radius/radacct" main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 1645 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/var/run/radiusd/radiusd.pid" main: bind_address = 192.168.2.2 IP address [192.168.2.2] main: user = "radiusd" main: group = "radiusd" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist read_config_files: reading clients read_config_files: reading realms There appears to be another RADIUS server running on the authentication port 1645 This however doesn't seem to give information as to whether the query is actually executed. What command would give me this kind of debug information? Thanks and regards Timothy.

2 1

Re: EAP-MD5client"rlm_eap_md5 : Password is required for EAP-MD5 Authentication...
by rick norman 06 Aug '07

06 Aug '07

> ----- Original Message ----- > From: tnt(a)kalik.co.yu > To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> > Subject: Re: EAP-MD5client"rlm_eap_md5 : Password is required for EAP-MD5 Authentication... > Date: Mon, 06 Aug 2007 00:39:26 +0100 > > > Use cleartext password: > > con_d Cleartext-Password:="con_d" > Okay, I tried Cleartext-Password as well as ==. Still fails. Following is the new complete output from radiusd -X for this session. -------------------------------------------------------------------------------- rad_recv: Access-Request packet from host 127.0.0.1:57360, id=184, length=63 User-Name = "con_d" NAS-Identifier = "rick" Message-Authenticator = 0x5f4c08498fcee5d8497d0a1ec083a4d0 EAP-Message = 0x0200000a01636f6e5f64 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "con_d", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 0 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry con_d at line 138 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type md5 rlm_eap_md5: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group authenticate (returns handled) for request 0 Sending Access-Challenge of id 184 to 127.0.0.1 port 57360 EAP-Message = 0x010100160410e18639eeac9b901b1e0bd3444aca06f2 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x6b43db4b270e35f227bf224ccd168b04 Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:57360, id=185, length=93 User-Name = "con_d" NAS-Identifier = "rick" State = 0x6b43db4b270e35f227bf224ccd168b04 Message-Authenticator = 0xca15f35d9c82f222c56e62e34928f6f1 EAP-Message = 0x02010016041037ab0f881c1fa98e477b0a5ad546b160 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "con_d", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: EAP packet type response id 1 length 22 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry con_d at line 138 modcall[authorize]: module "files" returns ok for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/md5 rlm_eap: processing type md5 rlm_eap_md5: User-Password is required for EAP-MD5 authentication rlm_eap: Handler failed in EAP/md5 rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 1 modcall: leaving group authenticate (returns invalid) for request 1 auth: Failed to validate the user. Delaying request 1 for 1 seconds Finished request 1 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 184 with timestamp 46b647b8 Sending Access-Reject of id 185 to 127.0.0.1 port 57360 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Cleaning up request 1 ID 185 with timestamp 46b647b8 Nothing to do. Sleeping until we see a request. -- _______________________________________________ Get your free email from http://bsdmail.com

2 1

Re: EAP-MD5 client"rlm_eap_md5 : Password is required for EAP-MD5 Authentication...
by rick norman 05 Aug '07

05 Aug '07

The users entry is simply con_d User-Password == "con_d" Following is the complete output from radiusd -X for this session. -------------------------------------------------------------------------- rad_recv: Access-Request packet from host 127.0.0.1:57462, id=177, length=63 User-Name = "con_d" NAS-Identifier = "rick" Message-Authenticator = 0x41a96ed8d52b06609f0494aad2d72ec3 EAP-Message = 0x0200000a01636f6e5f64 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "con_d", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 0 length 10 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry con_d at line 138 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type md5 rlm_eap_md5: Issuing Challenge modcall[authenticate]: module "eap" returns handled for request 0 modcall: leaving group authenticate (returns handled) for request 0 Sending Access-Challenge of id 177 to 127.0.0.1 port 57462 EAP-Message = 0x010100160410a131cb5c1dfa691706698917cca1d605 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x18e8cdd7c4ac2d196d1ef47984a6d93d Finished request 0 Going to the next request --- Walking the entire request list --- Waking up in 6 seconds... rad_recv: Access-Request packet from host 127.0.0.1:57462, id=178, length=93 User-Name = "con_d" NAS-Identifier = "rick" State = 0x18e8cdd7c4ac2d196d1ef47984a6d93d Message-Authenticator = 0x1e22731000e713b820036170372aa1aa EAP-Message = 0x020100160410c1ee4a2cc4f49f6bb16d640ad87ccf1a Processing the authorize section of radiusd.conf modcall: entering group authorize for request 1 modcall[authorize]: module "preprocess" returns ok for request 1 modcall[authorize]: module "chap" returns noop for request 1 modcall[authorize]: module "mschap" returns noop for request 1 rlm_realm: No '@' in User-Name = "con_d", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 1 rlm_eap: EAP packet type response id 1 length 22 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 1 users: Matched entry con_d at line 138 modcall[authorize]: module "files" returns ok for request 1 modcall: leaving group authorize (returns updated) for request 1 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 1 rlm_eap: Request found, released from the list rlm_eap: EAP/md5 rlm_eap: processing type md5 rlm_eap: Freeing handler modcall[authenticate]: module "eap" returns reject for request 1 modcall: leaving group authenticate (returns reject) for request 1 auth: Failed to validate the user. Delaying request 1 for 1 seconds Finished request 1 Going to the next request Waking up in 6 seconds... --- Walking the entire request list --- Cleaning up request 0 ID 177 with timestamp 46b63f47 Sending Access-Reject of id 178 to 127.0.0.1 port 57462 EAP-Message = 0x04010004 Message-Authenticator = 0x00000000000000000000000000000000 Cleaning up request 1 ID 178 with timestamp 46b63f47 Nothing to do. Sleeping until we see a request. -- _______________________________________________ Get your free email from http://bsdmail.com

2 1

(no subject)
by Frost, Benjamin M. 05 Aug '07

05 Aug '07

Hello again, I have the newest version of freeradius up and running. I am using rlm_perl and have setup to use Username and password. I was wondering if it's possible to initiate a challenge/response in order to prompt for another piece of data. Example. Domain Username / Domain password and then come back with a request for a one-time password. I tried to return 11; even though it's not listed as a viable return value. Any idea on if this is possible? Thanks, Ben Confidentiality Notice: This message, and any attachments, may contain information that is confidential, privileged, and/or protected from disclosure under state and federal laws that deal with the privacy and security of medical information. If you received this message in error or through inappropriate means, please reply to this message to notify the Sender that the message was received by you in error, and then permanently delete this message from all storage media, without forwarding or retaining a copy.

2 1

"Conditional" LDAP Profile
by CJ 05 Aug '07

05 Aug '07

Using 1.1.6 out of FreeBSD ports (no 1.1.7 yet). Looking to use LDAP-stored attributes conditionally based on hints: I start here in hints: DEFAULT Prefix == "static:", Strip-User-Name = Yes Hint = "STATIC", Service-Type = Framed-User, Framed-Protocol = PPP DEFAULT Service-Type = Framed-User, Framed-Protocol = PPP That works fine. Then we go to users: DEFAULT Auth-Type = LDAP Fall-Through = 1 DEFAULT Service-Type == Framed-User Framed-IP-Address = 255.255.255.254, Framed-MTU = 576, Service-Type = Framed-User, Fall-Through = Yes DEFAULT Framed-Protocol == PPP Framed-Protocol = PPP, Framed-Compression = Van-Jacobson-TCP-IP, Fall-Through = Yes DEFAULT Hint == "STATIC", User-Profile := `uid=%u,ou=dialup,ou=radius,domain=example.com,dc=example,dc=com` Reply-Message = `%u` It appears that my User-Profile := `DN` does not go through radius_xlat and my %u variable in the check item is never expanded. Is this expected behavior? If I hard-code the DN with the user-name instead of %u it works great, but won't solve my problem. I got the idea from the rlm_ldap doc: ...it can be set through the hints file in the authorize section: DEFAULT Ldap-UserDN := `uid=%{User- Name},ou=people,dc=company,dc=com` Any thoughts or guidance or clarity on LDAP profile usage appreciated.

2 1

Re: EAP-MD5 client "rlm_eap_md5 : Password is required for EAP-MD5 Authentication"
by rick norman 05 Aug '07

05 Aug '07

> ----- Original Message ----- > From: "Arran Cudbard-Bell" <A.Cudbard-Bell(a)sussex.ac.uk> > To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> > Subject: Re: EAP-MD5 client "rlm_eap_md5 : Password is required for EAP-MD5 Authentication" > Date: Sun, 05 Aug 2007 19:48:09 +0100 > > > rick norman wrote: > > Hi, > > I'm building a radiusd client using libradius and trying to get > > eap-md5 authentication > > working. My code sends a radius request with a user name, and an > > eap message with > > the username. > > I receive a challenge from radiusd. I return the challenge > > response, md5(id,passwd,challenge), and radius state variable > > but time out waiting for authentication. > > The output from radiusd indicates "rlm_eap_md5 : Password is > > required for EAP-MD5 Authentication". > > When I add the password to the users file, I no longer receive > > the challenge and timeout earlier. Where is radiusd supposed to > > get the passwd, and in what format ? > > > > > Cleartext for md5 challenge, and from any authentication source you wish > ... sql , ldap , users file. I don't follow. Where does the cleartext go ? I tried including the password in the radius user password type. The eap-md5 response is md5 hash. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > -- _______________________________________________ Get your free email from http://bsdmail.com

3 2