- Freeradius-Users - lists.freeradius.org

Ola lista!
by Marcao Nacional 27 Dec '06

27 Dec '06

Ola lista, Gostaria de saber se tem algume brasileiro nessa lista! _________________________________________________________________ Insta-le já o Windows Live Messenger. A nova geração do messenger. http://get.live.com/messenger/overview

1 0

Can't compile modules rlm_eap_peap and rlm_eap_tls
by adreas Polyxronopoulos 27 Dec '06

27 Dec '06

Hi everybody , I am trying to set up freeradius-1.1.3 and to support PEAP/MSCHAPV2 i need to compile 2 modules which aren't build with ./configure ,make , make install. These modules are rlm_eap_peap and rlm_eap_tls in /usr/local/src/freeradius-1.1.3/src/modules/rlm_eap/types/ directory. Then i do : root@apolyxrono2:/usr/local/src/freeradius-1.1.3/src/modules/rlm_eap/types/rlm_eap_peap# ./configure and the output is: checking for OpenSSL support... no configure: WARNING: silently not building rlm_eap_peap. configure: WARNING: FAILURE: rlm_eap_peap requires: OpenSSL. configure: creating ./config.status config.status: creating Makefile config.status: creating config.h config.status: config.h is unchanged I have installed libssl0.9.8 , libssl-dev and openssl . Can anyone help me because i don't have a lot of time !!! thanks Adreas Polyxronopoulos Send instant messages to your online friends http://uk.messenger.yahoo.com ___________________________________________________________ Try the all-new Yahoo! Mail. "The New Version is radically easier to use" – The Wall Street Journal http://uk.docs.yahoo.com/nowyoucan.html

2 1

RE: proxy authentication
by Dubi Lego 27 Dec '06

27 Dec '06

I will clarify my question. Is it possible to forward all AAA messages including replies to another server which will only listen to messages and won't be active. -----Original Message----- From: freeradius-users-bounces+dlego=allot.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+dlego=allot.com@lists.freeradius.org] On Behalf Of Alan DeKok Sent: Tuesday, December 26, 2006 6:48 PM To: FreeRadius users mailing list Subject: Re: proxy authentication Dubi Lego wrote: > Is it possible to proxy all authentication messages to specific remote > server including replies (Access-Reject, Access-Accept)? What do you mean by that? Proxying normally involves forwarding client requests to another server, and returning replies from that server back to the client. What you seem to be asking for is something else entirely. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

automated response
by Olaf Becker 27 Dec '06

27 Dec '06

I am currently out of the office and will return January 2.

1 0

problem with NT-Password and LDAP
by Ana Gallardo Gómez 27 Dec '06

27 Dec '06

Hello, my problem is, i have a Freeradius server that retrieves the authentication information from an OpenLDAP server; in this server the NT-Password atributte has 252 characters (32 characters from NT-hash + white spaces), and the NT-Password generated in ms-chap has 32 characters. How can I remove the white spaces from NT-Password in the ldap module?Debug information:...rlm_ldap: performing search in ou=xxx,dc=xxx,dc=xxx, with filter (cn=xxxx) rlm_ldap: Added password xxx in check items rlm_ldap: looking for check items in directory... rlm_ldap: Adding ntPassword as NT-Password, value 06B11E3D941021E1A5C51C6868F2F0E6 & op=21...After that "LOGIN INCORRECT".Sorry for my english.Thank you very much. _________________________________________________________________ ¡Ya está aquí Windows Live Spaces! Ahora podrás crear fácilmente tu propio sitio Web. http://spaces.live.com/signup.aspx

2 1

Re: Questions from a totally ignorant n00b
by Gene Mosley 26 Dec '06

26 Dec '06

Alan, I read the FAQ section which you posted (http://wiki.freeradius.org/index.php/FAQ#How_do_I_deny_access_to_a_specific…) It talks about denying access to a specific user, or a group of users - which is not what I need. I need to deny access to specific IP addresses - not specific users. Anyone from any IP address should be able to authenticate (which is the default) - but nobody should be able to authenticate from specific IP addresses. If I have servers: 10.11.12.1 10.11.12.2 10.11.12.3 10.11.12.4 Then Bob should be able to authenticate from all of them - UNLESS for some reason I wanted to block authentication from 10.11.12.4 - then what would I need to do in order to make it so that anyone trying to authenticate from 10.11.12.4 would be rejected (again, based on the IP address, not their user name or group)? ----- Original Message ---- From: Alan DeKok <aland(a)deployingradius.com> To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Sent: Thursday, December 21, 2006 3:22:12 PM Subject: Re: Questions from a totally ignorant n00b Gene Mosley wrote: > > What I am looking for is to allow a user ("bob") to authenticate > from any system he uses UNLESS that system is blocked from authenticating. Perhaps you could try reading the FAQ entry I pointed to earlier. It tells you how to do exactly that. > It seems that AIX RADIUS cannot do this - can FreeRADIUS? Have you been reading my responses? > Can FreeRADIUS be configured to allow/disallow authentication based > on the source IP address that the user is coming from and NOT the user > account itself (allowing "bob" to authenticate from "server1" which is > not 'banned', but not allowing "bob" to authenticate from "server2" > which is 'banned')? > And, if so - how? Go read my messages, and the FAQ entry I posted? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

proxy authentication
by Dubi Lego 26 Dec '06

26 Dec '06

Hi all, Is it possible to proxy all authentication messages to specific remote server including replies (Access-Reject, Access-Accept)?

2 1

Reset sql counter
by Bishal 24 Dec '06

24 Dec '06

Is it possible to reset the sql counter manually or by any scripts in freeradius?

2 1

radius+mysql weird problem
by Jorge Minassian - Comintec 23 Dec '06

23 Dec '06

Hello all !, After upgrading Fedora from FC2 to FC4, I got what is described below from log (radiusd -X) If I query database manually, I get all info about users (all users are correctly on DB), but radius still says "No matching entry in the database ...". If using "files", it works OK. I tried to downgrade DB (from 4.1 to 3.23), also reinstal freeradius from rpm or compiled by me, but problem persists. Have someone any ad about this ?. I will apreciate any help to troubleshoot this problem !. Thank you very much, Jorge. ---- Ready to process requests. rad_recv: Access-Request packet from host localhost:56607, id=27, length=55 User-Name = "000" User-Password = "1234" NAS-IP-Address = 255.255.255.255 NAS-Port = 1 modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 rlm_realm: No '@' in User-Name = "000", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 radius_xlat: '000' rlm_sql (sql): sql_set_user escaped user --> '000' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '000' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 4 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = '000' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id,UserName,Attribute,Value,op FROM radreply WHERE Username = '000' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = '000' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): No matching entry in the database for request from user [000] rlm_sql (sql): Released sql socket id: 4 modcall[authorize]: module "sql" returns notfound for request 0 modcall: group authorize returns ok for request 0 auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. Login incorrect: [000/1234] (from client gabriel port 1) Sending Access-Reject of id 27 to localhost:56607 Finished request 0 Going to the next request

2 2

dialup admin coding - help required
by Cory Robson 22 Dec '06

22 Dec '06

Ok I have tried and tried to get this to work how I want but obviously need more sleep, not being a code genius and trying to learn this mix and mash is confusing enough. Anyway this is my code for my failed login page, my sql query does parse all information into the array ok but I just cannot seem to get it to output on screen. Any way here is what I have so far anyone able to assist in showing me where I'm going wrong. <?php require('../conf/config.php3'); ?> <html> <?php if (is_file("../lib/sql/drivers/$config[sql_type]/functions.php3")) include_once("../lib/sql/drivers/$config[sql_type]/functions.php3"); else{ echo <<<EOM <title>Failed logins</title> <link rel="stylesheet" href="style.css"> </head> <body bgcolor="#80a040" background="images/greenlines1.gif" link="black" alink="black"> <center> <b>Could not include SQL library functions. Aborting</b> </body> </html> EOM; exit(); } $now = time(); $start = $now - ($last*60); $now_str = date($config[sql_full_date_format],$now); $prev_str = date($config[sql_full_date_format],$start); ?> <head> <title>Failed Logins</title> <link rel="stylesheet" href="style.css"> </head> <body bgcolor="#80a040" background="images/greenlines1.gif" link="black" alink="black"> <center> <table border=0 width=550 cellpadding=0 cellspacing=0> <tr valign=top> <td align=center><img src="images/title2.gif"></td> </tr> </table> <table border=0 width=400 cellpadding=0 cellspacing=2> </table> <br> <table border=0 width=840 cellpadding=1 cellspacing=1> <tr valign=top> <td width=65%></td> <td bgcolor="black" width=35%> <table border=0 width=100% cellpadding=2 cellspacing=0> <tr bgcolor="#907030" align=right valign=top><th> <font color="white">Failed Logins</font>  </th></tr> </table> </td></tr> <tr bgcolor="black" valign=top><td colspan=2> <table border=0 width=100% cellpadding=12 cellspacing=0 bgcolor="#ffffd0" valign=top> <tr><td> <?php echo <<<EOM EOM; ?> <p> <table border=1 bordercolordark=#ffffe0 bordercolorlight=#000000 width=100% cellpadding=2 cellspacing=0 bgcolor="#ffffe0" valign=top> <tr bgcolor="#d0ddb0"> <th>#</th><th>login</th><th>Password</th><th>Time</th><th>Terminate cause</th><th>Caller ID</th> </tr> <?php $link = @da_sql_pconnect($config); $search = @da_sql_query($link,$config, "SELECT id, user,pass,reply,date,callingid FROM radpostauth ORDER BY date;"); $num = 0; *// Here is where my array collects the records - This is working *// while( $row = @da_sql_fetch_array($search,$config) ){ $num++; $acct_login = $row[user]; $acct_password = $row[pass]; $acct_terminate_cause = $row[reply]; $acct_time = $row[date]; $acct_callingid = $row[callingid]; } ?> *// Here is my screen output, obviously I need to loop through the array and output the lines but just can't figure it out. *// <tr align=center bgcolor="white"> <td>$num</td> <td>$acct_login</td> <td>$acct_password</td> <td>$acct_time</td> <td>$acct_terminate_cause</td> <td>$acct_callingid</td> </tr> </table> </td></tr><tr><td> </td></tr> </table></td></tr></form> </table> </tr> </table> </body> </html>

3 2