- Freeradius-Users - lists.freeradius.org

Re:Re: bitrary dynamic Nas-Port
by MSamir 08 Mar '07

08 Mar '07

msammir wrote: > Hello all, > i have the same problem as in this mail in brife > i use Cisco router and need to auth user over ppoe and i get the same > //NAS-Port// for all users > i am not expert in freeradius so can pleas someone help me use > attr_rewrite to go over this probelm > You want to re-write NAS port to what, exactly? > Alan DeKok. i want to re-write Nas-Port to be something Unique like Calling-Station-Id as i use PPPOE th scenario of my probelm in IPPool as i get the same NAS-Port for all user radius give the all the same IP. Ip_pool keys of the combination of nasip/nasport to determine the UNIQUE user and as my NAS send over a not unique nasport for each user. radius see them all as one user and give them all the same IP if u have othere idea than re-write Nas-Port it will be great. Thanks --------------------------------- Never miss an email again! Yahoo! Toolbar alerts you the instant new Mail arrives. Check it out.

2 5

radiusd can't close user open session in sql
by satish patel 08 Mar '07

08 Mar '07

dear all i have some problem i have configured simulteneous-use attributes in sql but some time network disconnect or any problem user got disconnect but his session still open in sql databases so that next time when he try he got error your are still login means simulteneous-use attribute not allow to that user this is my problem caz i am wireless ISP and i have many time network problem so user disconnect accidently so is there any feature which is clear last session in SQL database ??? $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

1 0

OATH Support?
by Andreas Anderson 08 Mar '07

08 Mar '07

Hi, is there OATH Support in freeradius to use tokens like http://www.aladdin.com/etoken/otp.asp?lid=eToken_OTP&lpos=products_menu#NG-… ? Are there any other supported OTP tokens? I read somewhere that Cryptocard is supported; but i never could get it to work nor find the tools to extract the DES key from the *.tok file Regards, Andreas _________________________________________________________________ Find the coolest online games @ http://xtramsn.co.nz/gaming

2 1

radius doesn't start up correct
by Jan Lausch 08 Mar '07

08 Mar '07

Hi, I'm so sorry to bother you again but this time I really can't figure out what's happening. when I try to start freeradius manually, it just stops in the middle of reading the config files: /usr/local/etc/raddb# radiusd -f Tue Mar 6 19:31:28 2007 : Info: Starting - reading configuration files ... ...and nothing happens any more, it just hangs. If I try -x or -xx, I end up with a segfault, so this is no help: rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Segmentation fault I also tried starting via radwatch and it realizes something isn't right and restarts radiusd every 15 secs. I have it configured for use with mysql and have the database populated, but I guess it doesn't even connect... Is the hanging caused by the same problem as the segfault? What could that be? Any help qould be appreciated, thanks. Jan

6 10

freeradius User session is open but user not login
by satish patel 08 Mar '07

08 Mar '07

Dear I have faceing this problem since log time i have cisco VPDN and user login on cisco and authenticate from freeradius-1.1.4 i have configure simultenous-use attribute for multilogin privention but some time when user session open in radius databases ( i am useing MSSQL ) then user try for login and he / she got error regarding already login and authentication deny also i have set Idle-Timeout = 600 but still face same problem how to crear opened session in mssql database ??? $ cat ~/satish/url.txt System administrator ( Data Center ) please visit this site http://linux.tulipit.com --------------------------------- Heres a new way to find what you're looking for - Yahoo! Answers

2 2

SIP/RADIUS/Kerberos authentication
by John T. Guthrie 08 Mar '07

08 Mar '07

Hello all, I am trying to set up an Asterisk SIP server. I would like this server to be able to authenticate against our RADIUS server. However, the RADIUS server authenticates against our Kerberos server by default. Is there any way to make this work given that most SIP clients seem to use the digest authentication method? Thanks. -- John Guthrie guthrie(a)counterexample.org

2 1

Q perl-interface documentation?
by Jochen Schäfer 08 Mar '07

08 Mar '07

Dear All, is there any documentation outside how the perl.rlm is implemented in freeradius? I'm special interested in how to get external parameters like check-items, reply-items, user-name, user-password into the perl program. And how to script valid return codes and return strings. Thanks in advance! Jochen

2 3

Re: wrong user name is stored in mysql radacct table
by Zeli Kartzman 08 Mar '07

08 Mar '07

>Message: 2 >Date: Wed, 07 Mar 2007 14:28:07 +0100 >From: Alan DeKok <aland(a)deployingradius.com> >Subject: Re: wrong user name is stored in mysql radacct table >To: FreeRadius users mailing list > <freeradius-users(a)lists.freeradius.org> >Message-ID: <45EEBDE7.7010509(a)deployingradius.com> >Content-Type: text/plain; charset=ISO-8859-1 > >Zeli Kartzman wrote: >> so what you're saying is that effectively a user can get around the >> simultaneous user limit and login as many times as they want -- all >>they >> have to do is type a new outside identity each time and as long as >>the >> tunneled PEAP identity is correct they will be allowed to login? > > If you configure it that way, yes. > > The server *can* be configured to enforce simultaneous login limits >no >matter what the users type into the outer session. The docs don't >describe how to do this, but they DO describe how to tie the inner & >outer sessions together, and also how to enforce simultaneous login. > can you give me a pointer to which docs to look at? thanks bz

1 1

CHAP Modification
by ChristosH 07 Mar '07

07 Mar '07

I'm trying to edit the way the CHAP module fetches passwords before hasing them due to a limitation in 2 different types of hardware we have. One set of devices takes a HEX password stored on the device, converts it to binary, and then calculates the MD5 CHAP challenge to send to the server. The other set of devices just takes the HEX password and calculates the MD5 as if it were a string. I can distinguish which device is which when I'm adding passwords to my database (by adding a prefix 0x to let me know it's going from HEX -> BIN or whatnot) because the password is fixed at 32 characters, but definately not which device is which at run time. I guess what I'm trying to do is find where in the CHAP encoding module is the password attribute accessed/read and then passed (I'm guessing as an arguement) to be hashed. I think I could possibly do my funky math in mind there by checking the length of the password or the first two letters, and then converting to binary as needed or just passing it through. My problem is where exactly is this password CHAP challege code? I'm sifting through the radius.c file but can't seem to find anything. I'm comfortable writing some stuff with C and reading more complex things, so I don't think that will be a barrier. When I change it, will it require me to recompile everything every time I want to check? I'm using Fedora Core 6, Freerad 1.1.4, and MySql 5.0. -- View this message in context: http://www.nabble.com/CHAP-Modification-tf3284565.html#a9136389 Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 12

NAS Table in SQL
by ChristosH 07 Mar '07

07 Mar '07

Does subnetting in the NAS table work when using SQL? If I wanted to allow any address from my internal network, 111.111.%.% for example, can I store the nasname as 111.111.0.0/16 like I do in the users table? Or does it have to be in the form 255.255.0.0? -- View this message in context: http://www.nabble.com/NAS-Table-in-SQL-tf3364456.html#a9360616 Sent from the FreeRadius - User mailing list archive at Nabble.com.

1 0