- Freeradius-Users - lists.freeradius.org

EAP-TLS Fast Reconnect?
by michael able 16 Jan '07

16 Jan '07

Hi all, i'm trying to test the Fast-Reauthentication Method of EAP-TLS. i tried it with wpa_supplicant - hostapd, but then found out the the authentication server of hostapd doesn't support Fast-Reauthentication. so right now i'm running wpa_supplicant - hostapd - freeradius 1.1.3. eap-tls is working, but not Fast-Reauthentication. I found no entry in the config-files to switch it on or off. Does Freeradius 1.1.3 support Fast-Reauthentication of EAP-TLS? greetings, michael.

2 1

Stale session problem
by Cory Robson 16 Jan '07

16 Jan '07

My upstream (comindico/Soul) do not allow me to query the nas's via any method SNMP or finger. What happens is I get a dropped packet occasionally which may be a disconnect but of course I never receive it full, hence the user is still shown as online on the SQL backend. Has anyone written a script or event process to monitor the update packets against the users apparently online and in the event that no update is received in a 20 min period (my updates are every 15 mins from the NAS) create a close session event? Or if you have an alternative solution please let me know. Thanks Cory

4 5

Compile freeradius + debian + rlm_eap_tls
by Rafał Kamiński 16 Jan '07

16 Jan '07

Hello, I have freeradius on debian etch but without rlm_eap_tls. How i can compile new freeradius-1.1.4 witch rlm_eap_tls ? Sorry for easy question, but i'm new one in that. BR, Rafal Kaminski

2 1

RE: Using MySQL and assigning IP-Addressesbased onCalling-Station-ID
by Ackbar Joolia 16 Jan '07

16 Jan '07

Thanks Phil, I will try that. What is the CVS code you are referring to? Al Sent: 15 January 2007 18:28 To: FreeRadius users mailing list Subject: Re: Using MySQL and assigning IP-Addressesbased onCalling-Station-ID Ackbar Joolia wrote: > Phil, Thanks for your reply. I didn’t know about the Fall-Through. > > I have got a list of static addresses, which I will need to assign > through the Framed-IP-Address attribute. > > This is what I am trying to do: When I receive requests, they all > come with the same username and password, but with different > Calling-Station-ID. I have to authenticate and differentiate on the > calling-station-id, and then assign static IP-Address to these users, > based on the calling-station-id. Ah. > > I know it sounds simple, but I can't get it to work or am not getting > the logic right. Can you advise please? You won't be able to do that on the current SQL code. Since the SQL groups are all "squashed together" and you're using the same user. > > My model has to work in the way described above i.e. same username > and password, and assigning Framed-IP-Address based on the > calling-station-id, in MySql. You could try the CVS code - it should work as you expect. Set the user-password on the "radcheck" table, then have a group per station with a single check item of calling-station-id, and a single reply item of framed-ip-address If you can't upgrade, you could possibly re-write the username to the calling-station-id in the hints file, then put the calling-station-id as the username in radcheck, and the framed-ip-address in radreply. I know you said it "has to" be in mysql, but you should also investigate the rlm_passwd module (which does not do what it sounds like). It ought to be trivial to dump the SQL to a file of the form: calling-station-id:framed-ip-address ...and set it on the reply. See "man rlm_passwd" - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html *** Email COnfidentiality Notice *** This message is private and confidential.If you have received this in error, please notify us and remove it from your system. Contact info(a)bglobalmetering.com -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.5.432 / Virus Database: 268.16.10/624 - Release Date: 12/01/2007 14:04 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.5.432 / Virus Database: 268.16.10/624 - Release Date: 12/01/2007 14:04

1 0

Patch to 3Com-User-Access-Level
by Alexandre Soares 16 Jan '07

16 Jan '07

Hi All, I found in other msgs fill changes applied in /usr/local/src/freeradius- 1.1.4/src/lib/valuepair.c (showed below), but the 3Com-User-Access-Level attibute still sending wrong. Thanks for all, but if anyone have any suggestion please send me. case PW_TYPE_INTEGER: /* * Note that ALL integers are unsigned! */ vp->lvalue = (uint32_t) strtoul(value, &p, 10); if (!*p) { vp->length = 4; break; } /* * Look for the named value for the given * attribute. */ if ((dval = dict_valbyname(vp->attribute, value)) == NULL) { librad_log("Unknown value %s for attribute %s", value, vp->name); return NULL; } vp->lvalue = dval->value; vp->length = 4; break; case PW_TYPE_DATE

1 0

Dialup Admin NAS List
by Cory Robson 16 Jan '07

16 Jan '07

I'm hoping someone may be able to assist in modifying the user_finger.php script to retrieve the list of NAS's for the online users from radacct table. Basically instead of reading the text file and cycling through them to add the breakdown of NAS's I want to use something like select DISTINCT NASIPAddress from radacct add them to an array and use the php gethostbyaddr() function to retrieve the true hostname to sort them by I don't need any of the snmp or NAS type or number of lines left as my upstream does not allow me to connect to verify the information anyway . This should just be a quick change for someone more talented than I to remove the existing loop and replace it with the relevant sql loop instead. Anyone ?

2 3

Daylight savings dialup admin
by Cory Robson 16 Jan '07

16 Jan '07

I'm having several problems still with the php scripting not display my current date time correctly. The system time is correct and mysql timestamps are correct both the console and mysql show the correct time and date showing the true daylight savings adjustment however the user_admin and user_finger page does not show this counters show the customer online time incorrect by an hour Any coders know how I can get php to show the correct time adjustment automatically? Thanks

1 1

New Thread: EAP for Cisco AP.
by Evan Vittitow 15 Jan '07

15 Jan '07

The next stage of Radius is using it to secure my Wireless network. I'm fairly sure EAP-TLS is Certificate based, and EAP-MD5 has to do with using an MD5 Has as a "Shared Secret" But, I don't completely understand PEAP, and how it relates to MS-CHAP v2. I want to try to use PEAP to secure my network. Here is my current eap.conf eap { default_eap_type = peap timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no md5 { } leap { } gtc { auth_type = PAP } tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem certificate_file = ${raddbdir}/certs/cert-srv.pem CA_file = ${raddbdir}/certs/demoCA/cacert.pem dh_file = ${raddbdir}/certs/dh random_file = /dev/urandom } peap { default_eap_type = mschapv2 } mschapv2 { } } I have eap in authenticate and authorize. What else do I need to do, and are there more dictionaries.

3 6

Is there something available that is comparable to typical release notes for freeradius?
by Ellis, Scott 1 (N-Comptel Inc.) 15 Jan '07

15 Jan '07

I am running Redhat version 3.0 with Freeradius 1.0.1 bundled. I would like to upgrade to Freeradius 1.1.4. Is their documentation available (installation requirements) that I could review that would specify if Freeradius 1.1.4 will run under Redhat version 3.0, etc? Basically, release notes for Freeradius. Thanks, Scott

4 3

Dialup admin help
by Greg Hartung 15 Jan '07

15 Jan '07

I have had FreeRadius and Mysql have been authenticating users for months but now I am trying to get dialup admin working for the first time. The main page loads fine. "Find User" does load a search page but won't return any users and "Show Groups" loads a header with no groups. The rest of the menu items are either a blank white or blank green screen. I am using Mysql and I have configured user,pwd, dbname, etc. in admin.conf and I have run the 4 "create table" scripts. Does it log anywhere? How do I tell if it's hitting the db? Or what should I try next? Thanks! Greg

3 6