- Freeradius-Users - lists.freeradius.org

The new spud, needs beginner advice, assistance and posibly service.
by Stephen Baker 02 Feb '07

02 Feb '07

I have to set up a Freeradius server ASAP (in less then a week.) I have a basic install of Debian running (using the term loosely.) But then there is this ubuntu 6.10 install CD on my desk calling my name. As a total newbie to Linux what is the best OS flavor to use for Freeradius? Then what is the best path from empty hard drive to working Freeradius server? Is there a list of document for instance? Can someone provide a pre-built image of a server that I could have up and running in 20 minutes? Is there a person how can configure the server for me, say over the weekend? end

2 1

Questions about latest CVS
by 高嵩 02 Feb '07

02 Feb '07

Hi,all I just installed the radiusd on CVS successfully. There are two questions: Does the radiusd server listen on IPv6 address by default?How to use the radclient in Ipv6 ? Regards

3 2

Help, more
by Stephen Baker 02 Feb '07

02 Feb '07

Note was sent to list (freeradius-users(a)lists.freeradius.org) by mistake intended to send to daemon (freeradius-users-request(a)lists.freeradius.org) Thanks to 1. Re: help (Gaddis, Jeremy L.) 3. Re: help (Peter Nixon)

1 0

How to add check item (Pool-Name) from Exec-Program-Wait script?
by Mindaugas 02 Feb '07

02 Feb '07

Hello, I want to use two ippools. That's no problem of course. But which IP pool to assign I can decide only in Exec-Program-Wait script. Now I have the following lines in users file: DEFAULT Auth-Type := Accept Exec-Program-Wait = "/etc/raddb/authclient" authclient script checks text file, connects to MySQL and Oracle and then it can say - use ippool1 or ippool2. But how to set Pool-Name check item? As far as I understand if authclient would write "Pool-Name:=ipool1" to stdout then that would be reply not check item!? So how could I tell from the script which ippool to use? I feel that that somehow should be possible since ippool is post-auth thing. :) Thanks, Mindaugas

2 3

RE: Expert Help Required
by Josh Howlett 02 Feb '07

02 Feb '07

> Hi Guys, > > Currently i am using cistron radius This is the FreeRADIUS list; you might have more luck at the Cistron list :-) Josh.

1 0

Expert Help Required
by Sekhar 02 Feb '07

02 Feb '07

Hi Guys, Currently i am using cistron radius with the following configuration for user test Auth-Type = Local, Password = "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 1.2.3.3, Cisco-AVPair = "ip:route= 1.2.3.4 255.255.255.240" Now i want to configure one more route path for this user using Cisco-AVPair = "ip:route= example as follows test Auth-Type = Local, Password = "test" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 1.2.3.3, Cisco-AVPair = "ip:route= 1.2.3.4 255.255.255.240" Cisco-AVPair = "ip:route=1.2.4.4 255.255.255.252 " When i try to restart cistron radius it will stop the process because it will not accept two ip routes with two different rage one is /30 and other one is /29. Could some one help me how to add two ip routes for one single user. Thanks for your help --------------------------------- Don't pick lemons. See all the new 2007 cars at Yahoo! Autos.

1 0

Switching users into VLAN
by Michal Prochazka 02 Feb '07

02 Feb '07

Hello, I can't get this scenario to work: On one NAS I need to set for all users which are proxied to be switched into particular VLAN except list of my local users who have to have VLAN ID blank. I tried below minimalistic testing configuration but no user have assigned the VLAN id. huntgroup: ap_scb NAS-IP-Address == xxx.xxx.xxx.xxx users: DEFAULT Huntgroup-Name == "ap_scb" Tunnel-Type = VLAN, Tunnel-Private-Group-Id = 133, Tunnel-Medium-Type = IEEE-802 radiusd.conf (relevant part): # Post-Authentication post-auth { reply_log } pre-proxy { pre_proxy_log } post-proxy { post_proxy_log attr_filter } Thanks in advance, Michal P. -- Michal Prochazka // michalp(a)ics.muni.cz Supercomputing Center Brno Institute of Computer Science Masaryk University Botanicka 68a, 60200 Brno, CZ CESNET z.s.p.o. Zikova 4, 16200 Praha 6, CZ

1 0

RE: The EAP Saga continues.
by Josh Howlett 02 Feb '07

02 Feb '07

> If you choose to use EAP-PEAP/MS-CHAPv2 you need 4 items: > > 1. A server certificate, signed by a Cert Authority "serverCA" ...not forgetting the relevant OID extensions peculiar to EAP-PEAP :-) Josh.

1 0

redundant LDAP server with free-radius
by sumi thra 02 Feb '07

02 Feb '07

Hi All, 1. When i configure the free-radius to use redundant ldap, the radius server contacts the secondary ldap server first. My config file options are: authorize { ... .... redundant{ ldap_primary ldap_secondary } .. } authenticate { .. .. Auth-Type LDAP { redundant { ldap_primary ldap_secondary } } } #unix eap } ldap ldap_primary { ;; .. } ldap ldap_secondary { .... ... } 2. My users file has : DEFAULT LDAP-Group := "groupname1" some vendor specific attributes follows.. DEFAULT LDAP-Group := "groupname2" ..... Do i need to specify it as ldap_primary-LDAP-Group := "groupname1" ldap_secondary-LDAP-Group := "groupname1" ?? or the previous define itself will work ?? Its very urgent. Please reply me if you have any idea. Thanks in advance. Regards, Sumi.

4 12

failed login accounting with dialup admin
by kemas 02 Feb '07

02 Feb '07

I have a small accounting problem with freeradius and dialup admin which I can't find a way to solve it. I've set freeradius to authenticate EAP-TLS, I want to log people who failed to authenticate to mysql with rlm_sql, which will show in dialup admin failed login page. I put in radiusd.con post-auth section the sql module: Post-Auth-Type REJECT { #insert-module-name-here sql } the post-auth query in sql.conf: postauth_query = "INSERT into ${postauth_table} (id, user, pass, reply, date) values ('', '%{User-Name}', '%{User-Password:-Chap- Password}', '%{reply:Packet-Type}', NOW())" the sql query runs well, it put the failed login to the radpostauth table but the dialup admin failed login page is searching to the radacct table for the failed user which will never find it. am I doing the right way to put the sql module inside the post-auth? or should I put it in other section? I don't want to change the postauth_query but is there any way to add another query to put the data to radacct table? thanks in advance

5 5