- Freeradius-Users - lists.freeradius.org

Re: Freeradius-1.1.3 + Mysql ?
by adreas Polyxronopoulos 12 Jan '07

12 Jan '07

Hi list, I have found the mysql-server package but i haven't found the mysql-dev package could you tell me which one specific because there are many thanks Adreas Polyxronopoulos ----- Original Message ---- From: "A.L.M.Buxey(a)lboro.ac.uk" <A.L.M.Buxey(a)lboro.ac.uk> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, 11 January, 2007 7:23:53 PM Subject: Re: Freeradius-1.1.3 + Mysql ? Hi, > Hi list, > > I have compiled freeradius-1.1.3 with out any configure option. I don't have mySql server on my pc (ubuntu 6.10) . If i would like to store accounting information in mySql , what i have to do? When i download mySql server package do i have to configure freeradius again or just configure radiusd.conf ? if you built from source you will need to build from source again - this is because when you ran ./configure, the automake script checks your compilation environment to see what libraries and headers you have - thus what feature-sets can be enabled. you will need to install the mysql-devel package to compile in support and install the mysql-server package to have the mysql server and utils to USE mysql alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ___________________________________________________________ What kind of emailer are you? Find out today - get a free analysis of your email personality. Take the quiz at the Yahoo! Mail Championship. http://uk.rd.yahoo.com/evt=44106/*http://mail.yahoo.net/uk

1 0

Auth Against AD without CHAP/PEAP
by Tim_Crouch＠uttyler.edu 11 Jan '07

11 Jan '07

Is it possible to use freeradius to authenticate against Active Directory without using CHAP or PEAP? I have found directions to do this with supplicants using peap etc. but I don't want to use supplicants. I am currently using freeradius to auth against LDAP with out a problem (for my wireless network). I have made changes in radiusd.conf (basically replacing my LDAP entries with the corresponding AD entry) to try to auth agains AD, but it does not look as if it can read the password. Is anyone else doing this? And if so, how? Thanks! Tim Crouch Systems Administrator Campus Computing Services University of Texas at Tyler 903-566-7476

2 1

automated response
by Baker 11 Jan '07

11 Jan '07

I will be out on medical leave from January 12th through February 18th. If you have questions please direct them to Isaac Force.

1 0

Freeradius on Sun Fire platforms
by gigrim＠infinito.it 11 Jan '07

11 Jan '07

Could anyone advise whether Freeradius can be run on the below SUN Hardware/Software platform list. Many thanks in advance for the support you can provide, your help is much appreciated. Sun Fire V210 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire V240 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire V440 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire V890 UltraSPARC IIIi / Solaris 10 &Java ES Sun Fire X4100 Linux RedHat Sun Fire X4200 Linux RedHat Best Regards Giuseppe Grimaldi

4 3

RE: Restrict Password from detail file , accounting
by Ellis, Scott 1 (N-Comptel Inc.) 11 Jan '07

11 Jan '07

Thanks....I am running 1.0.1.... Scott ... -----Original Message----- From: freeradius-users-bounces+scott.1.ellis=lmco.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+scott.1.ellis=lmco.com@lists.freeradius .org] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk Sent: Thursday, January 11, 2007 1:17 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Do you know what version was the first to introduce this feature? 1.1.2 Feature improvements * Allow tagged VSA's for Juniper. Closes bugs #367 and #368. * Allow Ascend "abinary" format to be specified as octets, (e.g. Ascend-Data-Filter = 0x010203...) * Added "cipher_list" configuration to the EAP-TLS module. See "eap.conf" and "man 1 cipher" for details. * Added "check_cert_issuer" configuration to the EAP-TLS module. See "eap.conf" for details. (closes: #346) * Added "suppress" configuration entry to rlm_detail, to suppress certain attributes (e.g. User-Password). This closes bug #359. * More dictionary updates * Write SSL errors to log file, rather than stderr. This closes bug #347. * Allow a core dump on uid change on Linux (closes: #361) > Is there any other solution for the older versions? not that i can think of straight off-hand,. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

RE: Restrict Password from detail file , accounting
by Ellis, Scott 1 (N-Comptel Inc.) 11 Jan '07

11 Jan '07

Do you know what version was the first to introduce this feature? Is there any other solution for the older versions? Thanks, Scott -----Original Message----- From: freeradius-users-bounces+scott.1.ellis=lmco.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+scott.1.ellis=lmco.com@lists.freeradius .org] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk Sent: Wednesday, January 10, 2007 3:10 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Is there a way to eliminate the password from being written to the > accounting log files? Either not in clear text or altogether? which accounting logs? with the recent versions of FreeRADIUS you can add the following to the last part of each detail logging stanza suppress { User-Password } usage of obfuscation is also recommended for, eg MySQL logging. simply replace the User-Password INSERT with the value of 'password' alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

Freeradius-1.1.3 + Mysql ?
by adreas Polyxronopoulos 11 Jan '07

11 Jan '07

Hi list, I have compiled freeradius-1.1.3 with out any configure option. I don't have mySql server on my pc (ubuntu 6.10) . If i would like to store accounting information in mySql , what i have to do? When i download mySql server package do i have to configure freeradius again or just configure radiusd.conf ? thanks... Adreas Polyxronopoulos ___________________________________________________________ New Yahoo! Mail is the ultimate force in competitive emailing. Find out more at the Yahoo! Mail Championships. Plus: play games and win prizes. http://uk.rd.yahoo.com/evt=44106/*http://mail.yahoo.net/uk

3 2

RE: Restrict Password from detail file , accounting
by Ellis, Scott 1 (N-Comptel Inc.) 11 Jan '07

11 Jan '07

Thanks. I will give it a try. -----Original Message----- From: freeradius-users-bounces+scott.1.ellis=lmco.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+scott.1.ellis=lmco.com@lists.freeradius .org] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk Sent: Wednesday, January 10, 2007 3:10 PM To: FreeRadius users mailing list Subject: Re: Restrict Password from detail file , accounting Hi, > Is there a way to eliminate the password from being written to the > accounting log files? Either not in clear text or altogether? which accounting logs? with the recent versions of FreeRADIUS you can add the following to the last part of each detail logging stanza suppress { User-Password } usage of obfuscation is also recommended for, eg MySQL logging. simply replace the User-Password INSERT with the value of 'password' alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Problems with radeapclient and EAP-SIM test files
by Ramm-Ericson, Johannes 11 Jan '07

11 Jan '07

Hi Freeradius users, Does anyone have any input on why radeapclient is core-dumping when running one of the EAP-SIM tests? Freeradius v.1.1.4 OS : Suse Enterprise Linux 10 (kernel 2.6.16.21-0.8-smp) TIA, Johannes R-E rad01:/opt/freeradius/src/freeradius-1.1.4/src/tests/eapsim-03 # /opt/freeradius/current/bin/radeapclient -x localhost auth testing123 < eapsim-in.txt +++> About to send encoded packet: User-Name = "eapsim" NAS-IP-Address = 255.255.255.255 EAP-Code = Response EAP-Type-Identity = "eapsim" Message-Authenticator = 0x30 NAS-Port = 0 EAP-Sim-Rand1 = 0xabcd1234abcd1234abcd1234abcd1234 EAP-Sim-Rand2 = 0xbcd1234abcd1234abcd1234abcd1234a EAP-Sim-Rand3 = 0xcd1234abcd1234abcd1234abcd1234ab EAP-Sim-SRES1 = 0x1234abcd EAP-Sim-SRES2 = 0x234abcd1 EAP-Sim-SRES3 = 0x34abcd12 EAP-Sim-KC1 = 0x0011223344556677 EAP-Sim-KC2 = 0x1021324354657687 EAP-Sim-KC3 = 0x30415263748596a7 *** glibc detected *** /opt/freeradius/current/bin/radeapclient: munmap_chunk(): invalid pointer: 0x08120c24 *** ======= Backtrace: ========= /lib/libc.so.6[0xb7cb0911] /opt/freeradius/1.1.4/lib/libeap-1.1.4.so(eap_basic_compose+0x29f)[0xb7f 6815f] /opt/freeradius/1.1.4/lib/libeap-1.1.4.so(map_eap_types+0x113)[0xb7f682a 3] /opt/freeradius/current/bin/radeapclient[0x8049e02] /opt/freeradius/current/bin/radeapclient[0x804b537] /lib/libc.so.6(__libc_start_main+0xdc)[0xb7c6287c] /opt/freeradius/current/bin/radeapclient[0x8049521] ======= Memory map: ======== 08048000-0804d000 r-xp 00000000 fd:02 7413 /opt/freeradius/1.1.4/bin/radeapclient 0804d000-0804e000 rw-p 00004000 fd:02 7413 /opt/freeradius/1.1.4/bin/radeapclient 0804e000-08137000 rw-p 0804e000 00:00 0 [heap] b7c08000-b7c3d000 r--s 00000000 fd:00 94469 /var/run/nscd/dbJr1wJV (deleted) b7c3d000-b7c45000 r-xp 00000000 fd:00 12475 /lib/libnss_files-2.4.so b7c45000-b7c47000 rw-p 00007000 fd:00 12475 /lib/libnss_files-2.4.so b7c47000-b7c49000 rw-p b7c47000 00:00 0 b7c49000-b7c4b000 r-xp 00000000 fd:00 12464 /lib/libdl-2.4.so b7c4b000-b7c4d000 rw-p 00001000 fd:00 12464 /lib/libdl-2.4.so b7c4d000-b7d66000 r-xp 00000000 fd:00 12458 /lib/libc-2.4.so b7d66000-b7d68000 r--p 00118000 fd:00 12458 /lib/libc-2.4.so b7d68000-b7d6a000 rw-p 0011a000 fd:00 12458 /lib/libc-2.4.so b7d6a000-b7d6d000 rw-p b7d6a000 00:00 0 b7d6d000-b7e7c000 r-xp 00000000 fd:00 34638 /usr/lib/libcrypto.so.0.9.8 b7e7c000-b7e90000 rw-p 0010f000 fd:00 34638 /usr/lib/libcrypto.so.0.9.8 b7e90000-b7e93000 rw-p b7e90000 00:00 0 b7e93000-b7ecc000 r-xp 00000000 fd:00 34639 /usr/lib/libssl.so.0.9.8 b7ecc000-b7ed0000 rw-p 00038000 fd:00 34639 /usr/lib/libssl.so.0.9.8 b7ed0000-b7ee0000 r-xp 00000000 fd:00 12484 /lib/libpthread-2.4.so b7ee0000-b7ee2000 rw-p 0000f000 fd:00 12484 /lib/libpthread-2.4.so b7ee2000-b7ee4000 rw-p b7ee2000 00:00 0 b7ee4000-b7ef3000 r-xp 00000000 fd:00 12486 /lib/libresolv-2.4.so b7ef3000-b7ef5000 rw-p 0000e000 fd:00 12486 /lib/libresolv-2.4.so b7ef5000-b7ef8000 rw-p b7ef5000 00:00 0 b7ef8000-b7f09000 r-xp 00000000 fd:00 12469 /lib/libnsl-2.4.so b7f09000-b7f0b000 rw-p 00010000 fd:00 12469 /lib/libnsl-2.4.so b7f0b000-b7f0d000 rw-p b7f0b000 00:00 0 b7f0d000-b7f16000 r-xp 00000000 fd:00 12462 /lib/libcrypt-2.4.so b7f16000-b7f19000 rw-p 00008000 fd:00 12462 /lib/libcrypt-2.4.so b7f19000-b7f40000 rw-p b7f19000 00:00 0 b7f42000-b7f4c000 r-xp 00000000 fd:00 16331 /lib/libgcc_s.so.1 b7f4c000-b7f4d000 rw-p 00009000 fd:00 16331 /lib/libgcc_s.so.1 b7f4d000-b7f4f000 rw-p b7f4d000 00:00 0 b7f4f000-b7f64000 r-xp 00000000 fd:02 7297 /opt/freeradius/1.1.4/lib/libradius-1.1.4.so b7f64000-b7f65000 rw-p 00014000 fd:02 7297 /opt/freeradius/1.1.4/lib/libradius-1.1.4.so b7f65000-b7f66000 rw-p b7f65000 00:00 0 b7f66000-b7f6d000 r-xp 00000000 fd:02 7359 /opt/freeradius/1.1.4/lib/libeap-1.1.4.so b7f6d000-b7f6e000 rw-p 00006000 fd:02 7359 /opt/freeradius/1.1.4/lib/libeap-1.1.4.so b7f6e000-b7f6f000 rw-p b7f6e000 00:00 0 b7f6f000-b7f89000 r-xp 00000000 fd:00 12451 /lib/ld-2.4.so b7f89000-b7f8b000 rw-p 00019000 fd:00 12451 /lib/ld-2.4.so bf94a000-bf960000 rw-p bf94a000 00:00 0 [stack] ffffe000-fffff000 ---p 00000000 00:00 0 [vdso] Aborted rad01:/opt/freeradius/src/freeradius-1.1.4/src/tests/eapsim-03 #

2 1

Cisco AS5300 POD Packets
by Cory Robson 11 Jan '07

11 Jan '07

I have seen a few different posts on this and am seeking clarification. Does the latest version of radclient support POD for the cisco's. I have seen a patch written in 2003 that said its been added but nothing further?

3 3