- Freeradius-Users - lists.freeradius.org

Inserting Authentication Packet Attribute at Post-Auth Packet
by Erico Augusto 14 May '07

14 May '07

Hi, is it possible to insert an authentication attribute(from auth packet) to post-auth packet? - I'd like to insert the Authentication Packet : Calling-Station-Id:<User-MAC> at post-auth packet ... Thanks, Erico. __________________________________________________ Fale com seus amigos de graça com o novo Yahoo! Messenger http://br.messenger.yahoo.com/

1 0

External script problem
by Sándor Szabó 14 May '07

14 May '07

Hi! I have the following problem. I use FreeRadius v1.1.6 on an Ubuntu Edgy Linux I'd like to use authentication and accounting with an external PHP script. I think the radius server is configured well. The radius server send the request to the script, I can read it through the $_ENV variable, but there is the problem. In the request I have more than one 'Digest-Attributes' fields and in the $_ENV variable I see only the last one, because in the array the 'DIGEST_ATTRIBUTES' key's values overwrite each other. How can solve this? Thanks. Regards, Sandor

2 1

Re: LDAP/RACF authentication error
by Marc Giuliani 14 May '07

14 May '07

Can anyone help me on this? > >Hello, > >I am try to set up authentication for Oracle 10g (on Solaris) --> Radius (on Solaris)--> LDAP (on Z/os) --> Racf (on z/os)... > >i was able to get past my last error however now I am getting a "no authentication method found" type of error. Can anyone assist me? > >I have checked that the secret password matches on the LDAP server, radius server and Oracle... > > > > >rad_recv: Access-Request packet from host 10.71.175.19:37544, id=178, length=47 > User-Name = "NBCTST1" > User-Password = "/\265P\251R\344>%P\2022\0144\0165p" > Processing the authorize section of radiusd.conf >modcall: entering group authorize for request 1 > modcall[authorize]: module "preprocess" returns ok for request 1 >radius_xlat: '/opt/local/var/log/radius/radacct/10.71.175.19/auth-detail-20070511' >rlm_detail: /opt/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /opt/local/var/log/radius/radacct/10.71.175.19/auth-detail-20070511 > modcall[authorize]: module "auth_log" returns ok for request 1 > modcall[authorize]: module "chap" returns noop for request 1 > modcall[authorize]: module "mschap" returns noop for request 1 > rlm_realm: No '@' in User-Name = "NBCTST1", skipping NULL due to config. > modcall[authorize]: module "suffix" returns noop for request 1 > rlm_eap: No EAP-Message, not doing EAP > modcall[authorize]: module "eap" returns noop for request 1 > modcall[authorize]: module "files" returns notfound for request 1 >rlm_pap: WARNING! No "known good" password found for the user. Authentication may fail because of this. > modcall[authorize]: module "pap" returns noop for request 1 >modcall: leaving group authorize (returns ok) for request 1 >auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user >auth: Failed to validate the user. >Login incorrect: [NBCTST1//\265P\251R\344>%P\2022\0144\0165p] (from client test1 port 0) > WARNING: Unprintable characters in the password. ? Double-check the shared secret on the server and the NAS! >Delaying request 1 for 1 seconds > >- >List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Re: Freeradius-Users Digest, Vol 25, Issue 56
by t.drollinger＠i-motion.de 14 May '07

14 May '07

Ich bin am 14. Mai nicht im Haus und kann Ihre Nachricht erst am Dienstag den 15. Mai bearbeiten. In dringenden Fällen wenden Sie sich bitte an Herrn René Böhm (E-Mail: r.boehm(a)i-motion.de) Mit freundlichen Grüßen Tobias Drollinger

1 0

PEAP authentication + LDAP attribute recovery
by Manuel Sánchez Cuenca 14 May '07

14 May '07

Hi all, It is possible to configure freeradius to authenticate users using PEAP and then, for authenticated users, return some RADIUS attributes recovered from a LDAP server, such as Session-Timeout or Framed-IP-Address?. And in that case, how can I configure it? Thanks in adavance -- ----------------------------- Manuel Sanchez Cuenca Departamento de Ingenieria de la Informacion y las Comunicaciones Facultad de Informatica. Universidad de Murcia Campus de Espinardo - 30080 Murcia (SPAIN) Tel.: +34-968-364644 Fax: +34-968-364151 email: msc(a)dif.um.es | manuelsc(a)um.es url: http://libra.inf.um.es/~lolo

2 1

PAM modules
by Ouahiba MACHANI 14 May '07

14 May '07

Hi, Did there anyone who developped a PAM module that operate with radius server? my question is : 1- How does that work ?does it only allow configuration of predefined methodes or could we also programme new PAM module for new/customized authentication methode such as OTP (One Time Password) authentication? 2- could we programme PAM that redirect multiplle authentication requests to different servers and make an "AND" of the received reponses ? 3- how does it work with radius? thanks in advance. Ouahiba.

2 1

free radius 1.1.6 -eap-tls authentication
by anoop_c＠sifycorp.com 14 May '07

14 May '07

Dear all I am using the same AP,same widows client and same root certificate for testing navis as well as free raduis .Root certificate is also installed. Is ther any clue in the debug message? anoop_c(a)sifycorp.com wrote: > Dear all > Thank you for the responses > I am using openssl tool for certificate generation.I have inclided the file xpextensions while generating certificates.The same certificates worked well with Navis radius server and windows xp as client.So this may not be the problem here Is it the SAME windows client, with the SAME root certificate, with the SAME access point, going to FreeRADIUS using the SAME certificate? If it really works for Navis using the same certificate, my guess is that your tests for FreeRADIUS are using a different Windows machine, without the root certificate installed. Alan DeKok.

2 1

Re: 1.1.6 with rlm_sqlippool: ip=[] len=0
by Guilherme Franco 12 May '07

12 May '07

> > Hello, > > Using Freeradius 1.1.6 on latest RHEL AS4 x64 with rlm_sqlippool, using > PostgreSQL > 8.2.1. > > After some hours operating, freeradius start to log lots of "Info: > rlm_sqlippool: ip=[] len=0". Running the allocate-find query directly > under > psql shows no problem. > > Issuing "service radiusd restart" solves the problem. I did a > cron.hourly job with this then. > > This was happening with 1.1.4 and I thought that 1.1.6 would correct this. > > Wasn't 1.1.6 supposed to work this out? > > Thanks. >

3 7

One day user account
by Aren Chua 12 May '07

12 May '07

Hi All, I would like to create a user account which only allow user to use for 1 day. Once the user has been authenticated, the time will be start counting and ended after 24 hours. Although the user didn’t fully used up their session time, radius still will reject user to login. Can any expert give me some suggestion on how to create this user account? Thanks Regards, Aren Chua _________________________________________________________________ Download Messenger. Start an i’m conversation. Support a cause. Join now. http://im.live.com/messenger/im/home/?source=TAGWL_MAY07

4 3

User-Name and Clear Text Password configurations
by Diameter K 12 May '07

12 May '07

Hi All, I want to send out Authentication Request message with only the "User-Name" and "Password". Moreover i want the password to be clear text. Is it possible to configure the free-radius server for just these requirements? I did configure the username and password in the "users" file but server seems to be looking for a encrypted password and is thus sending back a reject. Any way to configure a username and a clear text password? Thanks in advance, Shiv

2 1