- Freeradius-Users - lists.freeradius.org

External module in c++
by Guillermo Rodriguez Navarrete 06 Oct '06

06 Oct '06

Hello every body, I only have a simple question to the mailing. Can I program an external module in c++.???? thanks Best Regards. Guillermo Rodriguez

1 0

Proxy PEAP-EAP-MSCHAPv2 as MSCHAPv2
by david chew 06 Oct '06

06 Oct '06

Hi, I am trying to set up Freeradius to proxy PEAP/EAP-MSCHAPv2 request as MSCHAPv2 and know that some of you were able to set up this cofiguration successfully i.e. http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg22903.… http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg16192.… and others. I have tried the examples in those postings as well as suggestions from other postings without any success. I have started with the default config and turned on the debug option. However, looking at the debug output yet I couldn't quite figure out what went wrong. What I got so far is as follow: 1) Send a PEAP/MSCHAPv2 request using Linux's Xsupplicant or Mac client to the proxy radius 2) Proxy radius terminated EAP locally and proxied request (MSCHAPv2 minus EAP) to home radius 3) Home radius responded with an access-accept packet to proxy radius 4) Proxy Radius sent access-reject to client. See error output below. Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Request not found in the list Tue Oct 3 20:10:37 2006 : Error: rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Failed in handler I am running Freeradius 1.1.3 and have attached below my configuration files and an excerpt of the debug output hoping that the mistake would look obvious to some of you and that you could provide some helpful pointers or links. Thanks a lot for your help. -David For the outer identity, I have set it to use 'Anonymous' and the inner identity, I have set it to use 'peapuser(a)abc.net' radiusd.conf modules { pap { encryption_scheme = crypt } chap { authtype = CHAP } pam { pam_auth = radiusd } $INCLUDE ${confdir}/eap.conf mschap { authtype = MS-CHAP use_mppe = yes require_encryption = yes require_strong = yes } realm IPASS { format = prefix delimiter = "/" ignore_default = no ignore_null = no } # 'username@realm' # realm suffix { format = suffix delimiter = "@" ignore_default = no ignore_null = no } ... } authorize { preprocess chap mschap suffix eap files } authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } Auth-Type MS-CHAP { mschap } eap } preacct { preprocess acct_unique suffix files } accounting { detail radutmp } session { radutmp } post-auth { } pre-proxy { } post-proxy { eap } eap.conf eap { default_eap_type = peap timer_expire = 60 ignore_unknown_eap_types = no cisco_accounting_username_bug = no md5 { } leap { } gtc { auth_type = PAP } tls { private_key_password = wireless private_key_file = ${raddbdir}/certs/host.key certificate_file = ${raddbdir}/certs/host.crt CA_file = ${raddbdir}/certs/ca-root.crt dh_file = ${raddbdir}/certs/dh random_file = /dev/urandom } ttls { default_eap_type = md5 copy_request_to_tunnel = yes use_tunneled_reply = yes } peap { default_eap_type = mschapv2 copy_request_to_tunnel = yes use_tunneled_reply = yes proxy_tunneled_request_as_eap = no # Note: If I set proxy_tunneled_request_as_eap = yes (proxying the request as eap-mschapv2) # I was able to connect successfully } mschapv2 { } } proxy.conf realm LOCAL { type = radius authhost = LOCAL accthost = LOCAL } realm NULL { type = radius authhost = LOCAL accthost = LOCAL } realm abc.net { type = radius authhost = 199.186.1.2:1645 accthost = 199.186.1.2:1646 secret = wireless nostrip } users: DEFAULT FreeRADIUS-Proxied-To == 127.0.0.1, Proxy-To-Realm := "abc.net" Debug output (excerpt starting when the home radius replied with an access accept) see attached files for the complete output. Tue Oct 3 20:10:37 2006 : Sending Access-Request of id 30 to 199.186.1.2 port 1645 User-Name = "peapuser(a)abc.net" NAS-IP-Address = 192.168.2.3 NAS-Identifier = "SJC=s=-=s=QE" NAS-Port-Type = "Wireless - IEEE 802.11" NAS-Port = 472 Called-Station-Id = "00-0D-97-00-48-01:AAA" Calling-Station-Id = "00-16-CB-B9-D7-41" Acct-Session-Id = "2LkFMyhUNqa+" Connect-Info = "CONNECT 11Mbps 802.11b" Service-Type = Framed-User MS-CHAP-Challenge = 0x69e38b9d3be5408dc1740b695350adc6 MS-CHAP2-Response = 0x066ff5f8d276b161dc41b283b74961fde2760000000000000000ee7baf48902aedad5b6c47209b1d2794992879f402 d3eac4 Proxy-State = 0x313534 Tue Oct 3 20:10:37 2006 : Debug: Waking up in 2 seconds... Tue Oct 3 20:10:37 2006 : rad_recv: Access-Accept packet from host 199.186.1.2:1645, id=30, length=184 Tue Oct 3 20:10:37 2006 : Debug: proxy: de-allocating c6b903f6:1645 30 MS-CHAP2-Success = 0x06533d46313445394339363839414443393932343130324542383245334434423741443046384231313436 MS-MPPE-Recv-Key = 0xb6de1db8e81dfea9e7d51b6120a6a2e0 MS-MPPE-Send-Key = 0xa2db97000b60f3715d2068a05f0eb1dd MS-MPPE-Encryption-Policy = 0x00000002 MS-MPPE-Encryption-Types = 0x00000006 Proxy-State = 0x313534 Tue Oct 3 20:10:37 2006 : Debug: Processing the post-proxy section of radiusd.conf Tue Oct 3 20:10:37 2006 : Debug: modcall: entering group post-proxy for request 250 Tue Oct 3 20:10:37 2006 : Debug: modsingle[post-proxy]: calling eap (rlm_eap) for request 250 (0) Tue Oct 3 20:10:37 2006 : Debug: PEAP: Passing reply from proxy back into the tunnel. Tue Oct 3 20:10:37 2006 : Debug: PEAP: Passing reply back for EAP-MS-CHAP-V2 16c490 2 Tue Oct 3 20:10:37 2006 : Debug: Processing the post-proxy section of radiusd.conf Tue Oct 3 20:10:37 2006 : Debug: modcall: entering group post-proxy for request 250 Tue Oct 3 20:10:37 2006 : Debug: modsingle[post-proxy]: calling eap (rlm_eap) for request 250 (2) Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_mschapv2: Passing reply from proxy back into the tunnel 16c490 2. Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_mschapv2: Authentication succeeded. Tue Oct 3 20:10:37 2006 : Debug: MSCHAP Success Tue Oct 3 20:10:37 2006 : Debug: modsingle[post-proxy]: ok returned from eap (rlm_eap) for request 250 Tue Oct 3 20:10:37 2006 : Debug: modcall[post-proxy]: module "eap" returns ok for request 250 Tue Oct 3 20:10:37 2006 : Debug: modcall: leaving group post-proxy (returns ok) for request 250 Tue Oct 3 20:10:37 2006 : Debug: POST-PROXY 2 Tue Oct 3 20:10:37 2006 : Debug: POST-AUTH 2 Tue Oct 3 20:10:37 2006 : Debug: PEAP: Got reply 11 Tue Oct 3 20:10:37 2006 : Debug: PEAP: Got tunneled Access-Challenge Tue Oct 3 20:10:37 2006 : Debug: Saving tunneled attributes for later Tue Oct 3 20:10:37 2006 : Debug: PEAP: Reply was handled Tue Oct 3 20:10:37 2006 : Debug: modsingle[post-proxy]: ok returned from eap (rlm_eap) for request 250 Tue Oct 3 20:10:37 2006 : Debug: modcall[post-proxy]: module "eap" returns ok for request 250 Tue Oct 3 20:10:37 2006 : Debug: modcall: leaving group post-proxy (returns ok) for request 250 Tue Oct 3 20:10:37 2006 : Sending Access-Challenge of id 154 to 192.168.2.3 port 11061 EAP-Message = 0x0107004e19001703010043a102f2b10f2cc23294968cce980785e16f478376f3363f7e260a4151a06470265144600e5157f3 3a11db17f9532985d72bc321a6b264092151734087a050065f761093 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x29916516b9091aa773a614b242bf1cbb Tue Oct 3 20:10:37 2006 : Debug: Finished request 250 Tue Oct 3 20:10:37 2006 : Debug: Going to the next request Tue Oct 3 20:10:37 2006 : Debug: Waking up in 2 seconds... Tue Oct 3 20:10:37 2006 : rad_recv: Access-Request packet from host 192.168.2.3:11061, id=155, length=230 NAS-IP-Address = 192.168.2.3 NAS-Identifier = "SJC=s=-=s=QE" NAS-Port-Type = "Wireless - IEEE 802.11" NAS-Port = 472 Called-Station-Id = "00-0D-97-00-48-01:AAA" Calling-Station-Id = "00-16-CB-B9-D7-41" Acct-Session-Id = "2LkFMyhUNqa+" Connect-Info = "CONNECT 11Mbps 802.11b" User-Name = "anonymous" State = 0x29916516b9091aa773a614b242bf1cbb Service-Type = Framed-User EAP-Message = 0x02070021190017030100168d386231a769e270b8e6a25148612d4e941daab20a5e Message-Authenticator = 0x99c11169be9162c0de5982800e2a0b64 Tue Oct 3 20:10:37 2006 : Debug: Processing the authorize section of radiusd.conf Tue Oct 3 20:10:37 2006 : Debug: modcall: entering group authorize for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: ok returned from preprocess (rlm_preprocess) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "preprocess" returns ok for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: noop returned from chap (rlm_chap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "chap" returns noop for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: noop returned from mschap (rlm_mschap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "mschap" returns noop for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: No '@' in User-Name = "anonymous", looking up realm NULL Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Found realm "NULL" Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Adding Stripped-User-Name = "anonymous" Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Proxying request from user anonymous to realm NULL Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Adding Realm = "NULL" Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Authentication realm is LOCAL. Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: noop returned from suffix (rlm_realm) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "suffix" returns noop for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: EAP packet type response id 7 length 33 Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: No EAP Start, assuming it's an on-going EAP conversation Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: updated returned from eap (rlm_eap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "eap" returns updated for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling files (rlm_files) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: users: 'anonymous' matched entry "DEFAULT" at line 129 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: ok returned from files (rlm_files) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "files" returns ok for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall: leaving group authorize (returns updated) for request 251 Tue Oct 3 20:10:37 2006 : Debug: rad_check_password: Found Auth-Type EAP Tue Oct 3 20:10:37 2006 : Debug: auth: type "EAP" Tue Oct 3 20:10:37 2006 : Debug: Processing the authenticate section of radiusd.conf Tue Oct 3 20:10:37 2006 : Debug: modcall: entering group authenticate for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Request found, released from the list Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: EAP/peap Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: processing type peap Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_peap: Authenticate Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_tls: processing TLS Tue Oct 3 20:10:37 2006 : Debug: eaptls_verify returned 7 Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_tls: Done initial handshake Tue Oct 3 20:10:37 2006 : Debug: eaptls_process returned 7 Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_peap: EAPTLS_OK Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_peap: Session established. Decoding tunneled attributes. Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_peap: EAP type mschapv2 Tue Oct 3 20:10:37 2006 : Debug: rlm_eap_peap: Tunneled data is valid. Tue Oct 3 20:10:37 2006 : Debug: PEAP: Setting User-Name to peapuser(a)abc.net Tue Oct 3 20:10:37 2006 : Debug: PEAP: Adding old state with bc 97 Tue Oct 3 20:10:37 2006 : Debug: Processing the authorize section of radiusd.conf Tue Oct 3 20:10:37 2006 : Debug: modcall: entering group authorize for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling preprocess (rlm_preprocess) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: ok returned from preprocess (rlm_preprocess) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "preprocess" returns ok for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling chap (rlm_chap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: noop returned from chap (rlm_chap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "chap" returns noop for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling mschap (rlm_mschap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: noop returned from mschap (rlm_mschap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "mschap" returns noop for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling suffix (rlm_realm) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Looking up realm "abc.net" for User-Name = "peapuser(a)abc.net" Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Found realm "abc.net" Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Proxying request from user peapuser to realm abc.net Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Adding Realm = "abc.net" Tue Oct 3 20:10:37 2006 : Debug: rlm_realm: Preparing to proxy authentication request to realm "abc.net" Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: updated returned from suffix (rlm_realm) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "suffix" returns updated for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling eap (rlm_eap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Request is supposed to be proxied to Realm abc.net. Not doing EAP. Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: noop returned from eap (rlm_eap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "eap" returns noop for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: calling files (rlm_files) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: users: 'peapuser(a)abc.net' matched entry "DEFAULT" at line 129 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authorize]: ok returned from files (rlm_files) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authorize]: module "files" returns ok for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall: leaving group authorize (returns updated) for request 251 Tue Oct 3 20:10:37 2006 : Debug: PEAP: Calling authenticate in order to initiate t/unneled EAP session. Tue Oct 3 20:10:37 2006 : Debug: Processing the authenticate section of radiusd.conf Tue Oct 3 20:10:37 2006 : Debug: modcall: entering group authenticate for request 251 Tue Oct 3 20:10:37 2006 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 251 (0) Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Request not found in the list Tue Oct 3 20:10:37 2006 : Error: rlm_eap: Either EAP-request timed out OR EAP-response to an unknown EAP-request Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Failed in handler Tue Oct 3 20:10:37 2006 : Debug: modsingle[authenticate]: invalid returned from eap (rlm_eap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authenticate]: module "eap" returns invalid for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall: leaving group authenticate (returns invalid) for request 251 Tue Oct 3 20:10:37 2006 : Debug: PEAP: Can't handle the return code 4 Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Handler failed in EAP/peap Tue Oct 3 20:10:37 2006 : Debug: rlm_eap: Failed in EAP select Tue Oct 3 20:10:37 2006 : Debug: modsingle[authenticate]: invalid returned from eap (rlm_eap) for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall[authenticate]: module "eap" returns invalid for request 251 Tue Oct 3 20:10:37 2006 : Debug: modcall: leaving group authenticate (returns invalid) for request 251 Tue Oct 3 20:10:37 2006 : Debug: auth: Failed to validate the user. Tue Oct 3 20:10:37 2006 : Debug: Delaying request 251 for 1 seconds Tue Oct 3 20:10:37 2006 : Debug: Finished request 251 Tue Oct 3 20:10:37 2006 : Debug: Going to the next request Tue Oct 3 20:10:37 2006 : Debug: Waking up in 2 seconds... Tue Oct 3 20:10:39 2006 : Debug: --- Walking the entire request list --- Tue Oct 3 20:10:39 2006 : Debug: Cleaning up request 244 ID 148 with timestamp 4522fbf9 Tue Oct 3 20:10:39 2006 : Debug: Cleaning up request 245 ID 149 with timestamp 4522fbf9 Tue Oct 3 20:10:39 2006 : Debug: Cleaning up request 246 ID 150 with timestamp 4522fbf9 Tue Oct 3 20:10:39 2006 : Debug: Cleaning up request 247 ID 151 with timestamp 4522fbf9 Tue Oct 3 20:10:39 2006 : Sending Access-Reject of id 155 to 192.168.2.3 port 11061 EAP-Message = 0x04070004 Message-Authenticator = 0x00000000000000000000000000000000 Tue Oct 3 20:10:39 2006 : Debug: Waking up in 4 seconds... Tue Oct 3 20:10:43 2006 : Debug: --- Walking the entire request list --- Tue Oct 3 20:10:43 2006 : Debug: Cleaning up request 248 ID 152 with timestamp 4522fbfd Tue Oct 3 20:10:43 2006 : Debug: Cleaning up request 249 ID 153 with timestamp 4522fbfd Tue Oct 3 20:10:43 2006 : Debug: Cleaning up request 250 ID 154 with timestamp 4522fbfd Tue Oct 3 20:10:43 2006 : Debug: Cleaning up request 251 ID 155 with timestamp 4522fbfd Tue Oct 3 20:10:43 2006 : Debug: Nothing to do. Sleeping until we see a request.

2 1

IPV6 support
by sujata.gaddemane＠wipro.com 06 Oct '06

06 Oct '06

Hi, I am using FreeRADIUS 2.0.0 ; $Date: 2006/08/15 20:46:48 Will this server work on a host configured with IPV6 address and clients will still be able to authenticate using this server? I am currently not able to use this radius server. Using tcpdump I could see the radius packets reaching the server, but the packet is not reaching the radiusd daemon. Do I need to do any configuration changes for the same? Should I use some other version? Thanks, Sujata The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

4 4

RE: IPV6 support
by sujata.gaddemane＠wipro.com 06 Oct '06

06 Oct '06

Hi, Thanks for the help. Now radiusd is receiving the packets. But it is ignoring the packat saying it is from unknow client. rad_recv: Access-Request packet from host 2001:888:1941::3 port 30407, id=101, length=88 Ignoring request from unknown client 2001:888:1941::3 port 30407 I have following entry in the clients.conf file client 2001:888:1941::3 { secret = sharedsecret shortname = mps_daz_1 } Thanks in advance. Regards, Sujata >-----Original Message----- >From: >freeradius-users-bounces+sujata.gaddemane=wipro.com(a)lists.freer >adius.org >[mailto:freeradius-users-bounces+sujata.gaddemane=wipro.com@lis >ts.freeradius.org] On Behalf Of A.L.M.Buxey(a)lboro.ac.uk >Sent: Friday, October 06, 2006 1:34 AM >To: FreeRadius users mailing list >Subject: Re: IPV6 support > > >Hi, > >> >> Hi, >> >> I am using FreeRADIUS 2.0.0 ; $Date: 2006/08/15 20:46:48 >> >> Will this server work on a host configured with IPV6 address and >> clients will still be >> able to authenticate using this server? >> >> I am currently not able to use this radius server. Using >tcpdump I >> could see the radius packets reaching the server, >> but the packet is not reaching the radiusd daemon. >> >> Do I need to do any configuration changes for the same? Should I >> use some other version? > > >you need to configure your freeradius radiusd.conf to use IPv6. > >eg > >listen { > ipv6addr = ::1 # any. ::1 == localhost > port = 0 > type = auth ># interface = eth0 >} > >PLEASE read the example radiusd.conf in raddb for more info - >for example, one freeradius daemon CANNOT run ipv4 and ipv6 at >the same time (currently) and ALSO there is a bug. :: >(listen on any address) causes a segmentation fault. ::1 >(listen localhost only) works fine - I'm _supposing_ that >setting the systems IPv6 address as the >value would work, but I dont have any remote tools to test >against. its not like IPv6 is going anywhere anyway........ ;-) > >you can tell its working (as much as it currently does) by >looking att he debug logs when you run 'radiusd -X'...you >should see something like > > main: port = 1812 > listen: type = "auth" > listen: ipv6addr = ::1 IPv6 address [::1] > listen: port = 0 > >and see the listening process using 'netstat' tool (for example) > >alan >- >List info/subscribe/unsubscribe? See >http://www.freeradius.org/list/users.html > The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments. WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus transmitted by this email. www.wipro.com

1 0

RE: FreeRADIUS user Survey
by Edward.Shih＠rcc.edu 05 Oct '06

05 Oct '06

Don't know why it shows me - Sorry but this survey is no longer available. -----Original Message----- From: freeradius-users-bounces+edward.shih=rcc.edu(a)lists.freeradius.org [mailto:freeradius-users-bounces+edward.shih=rcc.edu@lists.freeradius.or g] On Behalf Of Alan DeKok Sent: Thursday, October 05, 2006 11:39 AM To: FreeRadius users mailing list Subject: FreeRADIUS user Survey In order to better understand the needs of people using FreeRADIUS, I've set up a survey with 12 questions. The goal is to understand who's using FreeRADIUS, how they're using it, and what the users needs are. The page is: http://gs-survey.com/s.asp?s=1651 Please take a few minutes to fill out the survey, and I'll be posting a summary of the responses here. I expect to have a few more surveys after this one, to be able to target future development. Thanks for your efforts in supporting FreeRADIUS. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1

MYSQL
by Abel Monzon 05 Oct '06

05 Oct '06

Hello, I need know when compile my freeradius to support mysql, at the time of ./configure or make? And what is the sintax.. Tanx for all, Abel

2 1

Nortel Shasta BSN
by Keith Woodworth 05 Oct '06

05 Oct '06

Anyone using a Nortel Shasta with FreeRadius? I'd like to cutover the PPPoE customers on the Shasta from an old Livingston radius server to our FR server. Thanks, Keith

1 0

W2K doesn't ask FreeRadius with EAP
by Alexandros Gougousoudis 05 Oct '06

05 Oct '06

Hi, I got a very strange problem and I don't know where to look else. Maybe one of you have an idea what could be wrong. I've setup (with a lot of the lists help) a Freeradius server, based on certificated, doing a machine authentification over our linksys switch as AP. The clients are using EAP-TLS and for the most clients it works. But there are two W2K clients which doesn't want to register over radius, the radius server even doesn't get a request. I took a freshinstall W2K with SP4, put on all updated, put on IE6 and the necessary certs and registry patch, started the wireless service, configured network settings, rebooted. If I connect the networkcable to secured ethernet port I get in Windows "Couldn't logon to the network" (in german). I have 2 other W2K machine working without a problem (even on the same Switch port). I had a Realtek NIC in that PC, put on new drivers, no effect. Put in an older 3com NIC, no effect. It's like the AP doesn't forward the request to the Freeradius server. With other W2K no problem, with XP no problem with this AP. Something I could do, beside throw the pc out of the window? TIA Alex -- ServiceCenter IT - Alexandros Gougousoudis (Leiter) Gemeinsame Einrichtung der Kunsthochschule Berlin-Weissensee, Hochschule für Musik "Hanns Eisler" und der Hochschule für Schauspielkunst "Ernst Busch". Tel.: 030 / 477 05 - 444 * Fax.: 030 / 477 05 - 445

1 1

Accepting any login attempt
by John Williams 05 Oct '06

05 Oct '06

I need our radius servers to accept any login attempt regardless of what the username is or the password. Is there a way of doing this? I know I can set our radius to accept any password sent but the user has to exist. We are taking over the users from a company that has gone bust. We can have the telco point radius authentication for the dial numbers the users dial into to a temporary radius server we have put online. We have no idea what usernames or passwords the users will be using until we have time to email them and get replies back. So for now we want them to continue service and have move them to our own dial numbers with valid usernames/passwords when we contact them. Thanks in advance. John -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.0.407 / Virus Database: 268.12.12/461 - Release Date: 02/10/2006

5 8

Freeradius users
by Adrian Acuna 05 Oct '06

05 Oct '06

Hello Everybody: In my new job they want to implement Radius for PPP connection. I have installed Freeradius-1.1.3. The instalation messages show that everything is OK. But I really don't know how create new users and test it. I need something like directions to create accounts and raise the connection. I have reviewed a lot of web pages but I found only PPP dial server information. I will appreciate your help and support! Adrian Acuna -- View this message in context: http://www.nabble.com/Freeradius-users-tf2352581.html#a6552012 Sent from the FreeRadius - User mailing list archive at Nabble.com.

3 2