- Freeradius-Users - lists.freeradius.org

The First Step
by Abel Monzon 17 Sep '06

17 Sep '06

Hello everyone, am new with freeradius, and I have install the freeradius, but, i have try this command: server:/etc/freeradius# radtest test test2 localhost 0 testing123 and this is the answer: Sending Access-Request of id 111 to 127.0.0.1:1812 User-Name = "test" User-Password = "test2" NAS-IP-Address = server NAS-Port = 0 Re-sending Access-Request of id 111 to 127.0.0.1:1812 User-Name = "test" User-Password = "w"\367\3468\213>\372\302:Nl/\241v\217" NAS-IP-Address = server NAS-Port = 0 rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=111, length=20 Where I configure the user-name and his passwd? Is in the file clients.conf? Thanx for all, Abel Monzon..

3 2

RE: Pattern Matching in users file
by Garber, Neal 16 Sep '06

16 Sep '06

> You can't use the Group attribute that way. It's for checking Unix >groups. You'll have to create another attribute for your local groups. Do I need to predefine the attribute name somewhere before I attempt to create it in the users file? >> Also, the Group attribute was added to %RAD_CHECK as opposed to >> %RAD_REQUEST (Group was not an attribute in the original request). > The "users" file is documented as behaving this way. Are you referring to the doc/processing_users_file? If so, perhaps I misunderstood the bullet within it that reads: - The check pairlist of the request is replaced by the tmpcheck pairlist (this is the same as: the check pairlist from the usersfile entry is appended to the pairlist of the request) The phrase in parentheses is what made me think I could add attributes to the request. Is this statement incorrect or am I interpreting it differently than the author intended? The first part of the bullet matches what you said and what I experienced. > If you want to add an attribute to the request, you have to use the >"hints" file. I don't think that will work for me because the hints file doc. states it adds attributes solely based upon prefix or suffix of the username. I want to add an attribute based upon the value of Cisco-AVPair. Am I misinterpreting the doc. for hints also? Thanks again for your help Alan.

2 1

Proxy.conf & clients.conf
by Cliff Hayes 16 Sep '06

16 Sep '06

Hello, I am a new FreeRADIUS user. The server is working for us. However, I am wondering why it won't start if I comment out the includes for clients.conf and proxy.conf. Even setting to debug level 3 doesn't tell me why. We are not proxying, and I have proxying turned off. Also, the clients file is almost completely commented out except for the 127.0.0.1 section, which the directions say should be commented out anyway after testing. Thanks in advance, Cliff

4 10

iODBC FreeTDS troubles
by Angelo Compagnucci 15 Sep '06

15 Sep '06

Hi to all! I have some trouble with debian stable, iODBC and FreeTDS to connect with a MS SQL server. I hate sql server but this is my first real job and i can't say no. This is my problem: freeradius says "sql_create_socket: SQLConnectfailed: [iODBC][Driver Manager]Data source name not found and no default driver specified. Driver could not be loaded" This is my /etc/odbc.ini [ODBC Data Sources] MSSQL = sql con connessione FreeTDS [MSSQL] Description = FreeTDS Freeradius MSSQL # Driver = {FreeTDS} Database = Radius_DB Driver = /usr/lib/odbc/libtdsodbc.so Setup = /usr/lib/odbc/libtdsS.so UID = wireles_admin PWD = *** Port = 1433 Server = 192.168.1.21 TDS Version = 8.0 [Default] Driver = /usr/lib/odbc/libtdsodbc.so Setup = /usr/lib/odbc/libtdsS.so When i try iodbctest "DSN=MSSQL;UID=wireless_admin;PWD=***" from command line everithing works well and i can query my db. If i try iodbctest "DSN=MSSQL" i have this error 1: SQLDriverConnect = [FreeTDS][SQL Server]Could not find UID parameter (0) SQLSTATE=IM007 1: ODBC_Connect = [FreeTDS][SQL Server]Could not find UID parameter (0) SQLSTATE=IM007 I have the ODBCINI set to /etc/odbc.ini Can anyone help me?

1 0

VSA in Local User Profile
by A. K. 15 Sep '06

15 Sep '06

User profile is as follows: "test" Auth-Type := Local, User-Password == "test" Idle-Timeout = 300, Session-Timeout = 1560, Acct-Interim-Interval = 600, Account-Info = "QU;8000;4000;D;8000;4000", Reply-Message = Authenticated, Cisco-Account-Info = Axxx All attributes are returned in the Access-Accept message except for: Account-Info = "QU;8000;4000;D;8000;4000" Am I violating some sort of syntax restriction?

2 3

Pattern Matching in users file
by Garber, Neal 15 Sep '06

15 Sep '06

I have the following entry in my users file: DEFAULT Cisco-AVPair =~ "ssid=(.*)", Group := "%{1}" I added a perl module after files in my authorize section and data::dumper'ed %RAD_REQUEST, %RAD_CHECK and %RAD_CONFIG for debugging purposes. The Cisco-AVPair value in the request is "ssid=EE-Corp". I would expect that the value of Group would be "EE-Corp". Instead, the value of Group was "(.*)". I tried using backticks around the %{1}. I tried "=" as opposed to ":=". Also, the Group attribute was added to %RAD_CHECK as opposed to %RAD_REQUEST (Group was not an attribute in the original request). This prevented me from using module checkval to test it. I ended up using the attr_rewrite module to change Cisco-AVPair so it could be tested by checkval.. So, if it's supported, what is the syntax for regex pattern matching and substitution in the users file? Also, if it's possible, what is the syntax to create a new request attribute in the users file? Thank you for creating/supporting/maintaining the best and most flexible Radius server.

2 1

RE: AAA configuration for given attributes - need help please !!!
by Garber, Neal 15 Sep '06

15 Sep '06

> EAP Message Exchange will occure (EAP-TTLS MS-CHAP-v2 authentication or any other authentication What are you planning to use for authentication? No one else can decide for you! > Hope that clarify the problem. It's still not clear exactly what you are trying to accomplish. Instead of describing the workings of the RADIUS protocol, describe what you are trying to do.

1 0

AAA configuration for given attributes - need help please !!!
by Rafiqul Ahsan 15 Sep '06

15 Sep '06

Hi, I am new to this AAA freeradius area, I need to configure the AAA radius server for following mentioned attributes according to the message, Access-req, Access-Accept, and Access-Challenge, and Access-Reject (pls see below). Also, I looked at the configuration files at radius server like clients.conf, users, radiusd.conf - I am not sure where this attributes to configure. Could any body help me getting started with this that would be highly appreciated. Also, please comment on the VSA attribute below - I am tryign to understand on section 5.26, RFC 2865 - but not sure where to start. Your help would be highly appreciated. Below the attributes : Access Request attributes User-Name User-Password NAS-IPAddress NAS-Port Service-Type State Vendor-Specific Session-Timeout NAS-Identifier Called-Station-ID Calling-Station-ID NAS-Port-Type EAP-Message Message-Authenticator Access-Challenge attributes Reply-Message State Session-Timeout EAP-Message Message-Authenticator Access-Accept attributes User-Name State Service-Type Session-Timeout EAP-Message VSA (Vendor Suitable Attributes) VSA ( ---) Message-Authenticator Access-Reject Attributes Reply-Message State Session-Timeout EAP-Message Message-Authenticator Thanks Rafi

4 4

Cisco AP1200 - Freeradius - LDAP configuration
by Tho Nguyen 15 Sep '06

15 Sep '06

Hello Everyone, I am trying to configure Cisco AP1200, FreeRadius, and LDAP. I use EAP Authentication. I tried many ways, but it didn't go anywhere. If any of you have good configuration or have documents to show me how to set it up, please let me know. Thanks very much in advance. Tho Nguyen

2 2

Attribute Operators
by Cliff Hayes 15 Sep '06

15 Sep '06

Hello everyone, Does anyone know of a good reference site for the attribute operators (:=, ==, +=) that shows what each means? I can't find them anywhere. I even bought the book Radius by Jonathan Hassell. Not there either. Thanks in advance, Cliff

5 8