- Freeradius-Users - lists.freeradius.org

Kreberos module config
by John T. Guthrie 14 Mar '07

14 Mar '07

Hello all, I was just looking through the Kerberos code in rlm_krb5.c, and I found this little code snippet: static CONF_PARSER module_config[] = { { "keytab", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,keytab), NULL, NULL }, { "service_principal", PW_TYPE_STRING_PTR, offsetof(rlm_krb5_t,service_princ), NULL, NULL }, { NULL, -1, 0, NULL, NULL } }; Does this mean that the kerberos module can be configured with both a keytab and a service principal? (In which case, is the default service principal the string "host"?) Thanks. -- John Guthrie guthrie(a)counterexample.org

2 3

Operators "+=" don�t work !!!
by Internet-Wifi Operador 14 Mar '07

14 Mar '07

I have a s sqlcounter Like Max-All-Session until 2 or 3 weeks ago when I did use this with '+=' operator it work prefect because add some time to the user. 2 or 3 days ago it stop to work Somebody any Idea? Fabián _________________________________________________________________ Get a FREE Web site, company branded e-mail and more from Microsoft Office Live! http://clk.atdmt.com/MRT/go/mcrssaub0050001411mrt/direct/01/

1 0

freeradius with mssql performance
by satish patel 13 Mar '07

13 Mar '07

Dear guys anybody idea of freeradius with MSSQL compatibliy or performance issue ......which is best of method with radius MySql or MSSQL which one is best for radius performance $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 1

Re: EAP-TTLS outer identity & accounting
by Sam Schultz 13 Mar '07

13 Mar '07

On Tue, 13 Mar 2007 11:58:51 -0500 Alan DeKok <aland(a)deployingradius.com> wrote: >Sam Schultz wrote: >> I'm currently using EAP-TTLS & PAP (via SecureW2) to authorize & >> authenticate wireless clients against specific realms. Users are >> able to authorize & authenticate properly, but the username in >> incoming accounting replies come in as 'anonymous@<realmname>'. > > You can set "User-Name" in the Access-Accept, and the NAS should > use that in Accounting-Requests. > This should be solvable by adding something like 'User-Name = %{User-Name}' to the DEFAULT entries in the users file, correct? >> I had this spitting out proper accounting information before, >> and haven't changed any configuration options since putting it >> into production. The only conclusions I can come up with are: >> >> 1) The access points are buggy (3com OfficeConnects) > > No. > >> 2) FreeRADIUS doesn't keep track of connections properly -- >either >> because it doesn't bother to replace anonymous entries with >the >> previously seen identity for the given ID, or I haven't >> configured it to do so. > > No. > > The problem is that the supplicant is sending "anonymous@..." as >the >User-Name. > > Alan DeKok. >-- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html -- Click for free info on online degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S7YhBAO0BOTJUnxxWHHvlnY0O/

2 1

EAP-TTLS outer identity & accounting
by Sam Schultz 13 Mar '07

13 Mar '07

I'm currently using EAP-TTLS & PAP (via SecureW2) to authorize & authenticate wireless clients against specific realms. Users are able to authorize & authenticate properly, but the username in incoming accounting replies come in as 'anonymous@<realmname>'. I had this spitting out proper accounting information before, and haven't changed any configuration options since putting it into production. The only conclusions I can come up with are: 1) The access points are buggy (3com OfficeConnects) 2) FreeRADIUS doesn't keep track of connections properly -- either because it doesn't bother to replace anonymous entries with the previously seen identity for the given ID, or I haven't configured it to do so. I would be inclined to think it was the latter, except that the configuration was working properly previously, and the Accounting-Request packet itself contains anonymous@realm instead of the actual authenticated user. Anyone have any suggestions, or can anyone at least point me to any documentation on this? Click for free info on online masters degrees and make $150K/ year http://tagline.hushmail.com/fc/CAaCXv1S74pwqkZuxyoxY1QhnF9TgBDK/

2 1

pptp + vpn + freeradius Acct-Status-Type Alive
by "Jóhann B. Guðmundsson" 13 Mar '07

13 Mar '07

Is it possible to enable Acct-Status-Type Alive for pptp vpn? If so how.. Best regards Jóhann B.

2 3

PPTP Vpn Client & Static route
by Gabriele Moroni 13 Mar '07

13 Mar '07

Hi all, I have a quesiton... I use freeradius v1.1.5 to authenticate pptp vpn users. Someone know what's the best way to destribute a list of route to insert on the clients routing table ? I have WinXp SP2 Clients and also MAC OSX Tnx for an answer Bye Gabriele ----------------------------------- Gabriele Moroni Universita` della Svizzera italiana Servizi informatici / TI-EDU Galleria 2 CH-6928 Manno (Switzerland) Tel: +41 58 666 66 54 E-mail: gmoroni(a)ti-edu.ch

1 0

Help with freeradius 1.1.5
by adreas polyxronopoulos 13 Mar '07

13 Mar '07

Hi list , I have ubuntu 6.06 LAM and i compile freeradius-1.1.5 . In compilation everthing was ok. But whe i ranning freeradius : radiusd -X i get the following output : can anyone help me ? I don't understand what's happening. root@apolyxronolamp@dyndns:~# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = "/usr/local" main: localstatedir = "/usr/local/var" main: logdir = "/usr/local/var/log/radius" main: libdir = "/usr/local/lib" main: radacctdir = "/usr/local/var/log/radius/radacct" main: hostname_lookups = no main: snmp = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = "/usr/local/var/log/radius/radius.log" main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = "/usr/local/var/run/radiusd/radiusd.pid" main: user = "(null)" main: group = "(null)" main: usercollide = no main: lower_user = "no" main: lower_pass = "no" main: nospace_user = "no" main: nospace_pass = "no" main: checkrad = "/usr/local/sbin/checkrad" main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** double free or corruption (fasttop): 0x80104ee8 *** Aborted ___________________________________________________________ All new Yahoo! Mail "The new Interface is stunning in its simplicity and ease of use." - PC Magazine http://uk.docs.yahoo.com/nowyoucan.html

3 8

checkrad or sql base simultaneous-use
by satish patel 13 Mar '07

13 Mar '07

anyone help me please I have many problem for simultaneous login user problem i have freeradius-1.1.0 with MSSQL with cisco VPDN configuration i dont know why simultaneous not working with checkrad script can u explain me i have confusen in radwho and checkrad command so checkrad command use radwho output ???? and what is sql base simultenoues detection if i enable sql in /etc/radb/radius.conf in session part like :- Session { # radtump sql } what is the radutmp and sql if i use radutmp then checkrad call by radius or not i have confuseion in checkrad and sql base simultenous use can u explain me $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 3

Mikrotik access and authentication with radius for the hotspot service
by Elie Hani 13 Mar '07

13 Mar '07

Hi; I am configuring a hotspot server on mikrotik, but I want the authentication to be done with the freeradius server and not locally on the hotspot server. So is there any way to configure this? Thanks Elie Hani

2 1