- Freeradius-Users - lists.freeradius.org

freeradius-1.1.1 with ldap credential caching
by bright spark 22 Jun '06

22 Jun '06

Hi, Any one know does freeradius-1.1.1 support ldap credential caching? If so, how do i configure it ? Please reply me. Thanks, Andulo Patel

1 0

Alvarion Accounting with free radius
by Robert Dukes 21 Jun '06

21 Jun '06

I am writing to see if anyone on the list is using Alvarion breezeAcess radios with free radius for accounting? If can you give me a helping hand, I am trying to get freeradius to understand what the radios is sending and have it mapped the attributes to the right sql fields. I can send some debug data if needed . We are in Russia working on a project for schools kids and the orphanges and we need ot account trafice with our network of Alvarion radios !!!! -- Robert Dukes

1 0

PEAP Auth
by Scott Hughes 21 Jun '06

21 Jun '06

Hello, I am attempting to use the latest Debian build with Freeradius and cannot seem to get PEAP/TLS/TTLS to work. I have even gone as far as reloading the box fresh and installing the sources of OpenSSL and then Freeradius. I still get the same error message on startup regarding no file for TLS. I have searched the Debian site, the Freeradius site, and the web in general and cannot seem to find out how to fix this. Does anyone know? Thanks.

1 0

post-proxy
by Axel Seguin 21 Jun '06

21 Jun '06

Hi, What i would like to do is send an attribute in the radius answer but only for proxied request. When the reply comes back from a distant radius server, I would like to add something like : Filter-ID = "Enterasys:version=1:policy=test". But i want to add this only for proxied users which means i cannot use (I suppose) the users file. is there a way to do it? Thank you.

1 0

Client Freeradius !!!
by Emerson 21 Jun '06

21 Jun '06

Hi, i had a problem with auth in my freeradius, i used a pci wireless airlink 802.11 b/g, authing with wpa/tkip/tls, but not work. The error "no user/password atribute" appear to me. I try to change my pci wireless to Dlink Dwl-Ag530 authing with wpa/tkip/ttls and WORK. But i need to TLS working because this pci Dlink it's too expensive, and airlink not support TTLS. Anyone Can help-me or give-me another solution....... Thank's A Lot........ Emerson

2 1

Eap/TLS Problem !!
by Emerson 21 Jun '06

21 Jun '06

Dear Freeradius user's, a cuple days i have a problem with my radius server, i can not authenticate clients. Freeradius 1.1.1 with Eap/TLS + MYSQL running in slack 10.1 My radius client is a wl5460-AP and i use a pci wireless to auth in ap linked in my radius. But now, my pci wireless link in AP, but nothing passes trought, "ping" not work for any local. I try to execute freeradius in debug mode (radiusd -X), it only show this messages in loop. I can not understand this errors..... Anyone Can Help-me, i need this Radius Server Working.....Thak's to all...... Emerson ***************************************************** rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 75 modcall: leaving group authenticate (returns handled) for request 75 Sending Access-Challenge of id 174 to 10.254.0.254 port 2053 Framed-Compression := Van-Jacobson-TCP-IP Framed-Protocol := PPP Service-Type := Framed-User Framed-MTU := 1500 EAP-Message = 0x014c00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0xbdef72a1d8e3188e972218ab20f569f1 Finished request 75 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 74 ID 173 with timestamp 4497f091 Waking up in 5 seconds... rad_recv: Access-Request packet from host 10.254.0.254:2053, id=175, length=191 User-Name = "usuario1" NAS-IP-Address = 10.254.0.254 NAS-Port = 0 Called-Station-Id = "004f62087474" Calling-Station-Id = "0014a53c478d" NAS-Identifier = "Realtek Access Point. 8181" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Service-Type = Framed-User Connect-Info = "CONNECT 11Mbps 802.11b" EAP-Message = 0x024c000d017573756172696f31 State = 0xbdef72a1d8e3188e972218ab20f569f1 Message-Authenticator = 0x75c255ea144b5d1a2864236a85e01e83 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 76 modcall[authorize]: module "preprocess" returns ok for request 76 rlm_eap: EAP packet type response id 76 length 13 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 76 radius_xlat: 'usuario1' rlm_sql (sql): sql_set_user escaped user --> 'usuario1' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radcheck WHERE Username = 'usuario1' ORDER BY id' rlm_sql (sql): Reserving sql socket id: 3 radius_xlat: 'SELECT radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupcheck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE usergroup.Username = 'usuario1' AND usergroup.GroupName = radgroupcheck.GroupName ORDER BY radgroupcheck.id' radius_xlat: 'SELECT id, UserName, Attribute, Value, op FROM radreply WHERE Username = 'usuario1' ORDER BY id' radius_xlat: 'SELECT radgroupreply.id,radgroupreply.GroupName,radgroupreply.Attribute,radgroupreply.Value,radgroupreply.op FROM radgroupreply,usergroup WHERE usergroup.Username = 'usuario1' AND usergroup.GroupName = radgroupreply.GroupName ORDER BY radgroupreply.id' rlm_sql (sql): Released sql socket id: 3 modcall[authorize]: module "sql" returns ok for request 76 modcall: leaving group authorize (returns updated) for request 76 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 76 rlm_eap: EAP Identity rlm_eap: processing type tls rlm_eap_tls: Requiring client certificate rlm_eap_tls: Initiate rlm_eap_tls: Start returned 1 modcall[authenticate]: module "eap" returns handled for request 76 modcall: leaving group authenticate (returns handled) for request 76 Sending Access-Challenge of id 175 to 10.254.0.254 port 2053 Framed-Compression := Van-Jacobson-TCP-IP Framed-Protocol := PPP Service-Type := Framed-User Framed-MTU := 1500 EAP-Message = 0x014d00060d20 Message-Authenticator = 0x00000000000000000000000000000000 State = 0x8576b5091495b6b611506711da5f4530 Finished request 76 Going to the next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Cleaning up request 75 ID 174 with timestamp 4497f096 Waking up in 5 seconds...

3 2

Segmentation fault
by pinakee 21 Jun '06

21 Jun '06

Hi, Whenever I try to run radeapclient as the following: radeapclient -x localhost auth testing123 <req.txt I get a segmentation fault. Following is req.txt: User-Name = "bob" EAP-MD5-Password = "hello" NAS-IP-Address = 192.168.150.33 EAP-Code = Response EAP-Id = 210 EAP-Type-Identity = "bob" Message-Authenticator = 0x00 NAS-Port=0 Can someone let me know the reason and how to fix this? Thanks, Pinakee Biswas Chief Solution Architect XIUS (A Megasoft LTD division) Ph: 9949495958 (M)

1 0

Fwd: Filter attributes when proxying
by Martin Zuziak 20 Jun '06

20 Jun '06

Hello all I didn't get any response the first time I sent this so I'm trying again. Any chance of having such a feature implemented? Sincerely, Martin Zuziak <zuziak(a)math.ku.dk> PS: Don't worry, if I don't get any answer this time, I'll shut up :) ----- Forwarded message from Martin Zuziak <zuziak(a)math.ku.dk> ----- Date: Thu, 1 Jun 2006 10:34:19 +0200 From: Martin Zuziak <zuziak(a)math.ku.dk> To: freeradius-users(a)lists.freeradius.org Subject: Filter attributes when proxying Hello all Is it possible to (easily) remove single attributes sent or received when proxying? I know it can be done with attr_filter but if you only want to remove a single attribute while leaving the rest untouched, you need pass rules for every other attribute. It doesn't look like attr_rewrite can remove attributes. Am I wrong? Otherwise I think this would be a nice feature to implement. The attr_filter module can easily (I think) be changed to include a variable to control whether or not passing rules are needed to allow an attribute. Currently attributes are only allowed if they don't fail any rules in attrs and pass at least one rule: if (fail == 0 && pass > 0) This could be changed to something like if (fail == 0 && (pass > 0 || allow_no_match)) where a variable in the attrs file could control if passing rules are required. Sincerely, Martin Zuziak <zuziak(a)math.ku.dk> - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ----- End forwarded message -----

2 3

RE: freeradius-mysql rpm
by Jin Fan 20 Jun '06

20 Jun '06

Please read below. -----Original Message----- From: freeradius-users-bounces+jfan=cwlab.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+jfan=cwlab.com@lists.freeradius.org] On Behalf Of Abul Monsur Mannan Sent: Monday, June 19, 2006 10:29 AM To: FreeRadius users mailing list Subject: Re: freeradius-mysql rpm First of all Thank U Jin Fan very much for the detail email. Can U clarify something more ! 1. Where(path) u unzip the rpm file ? You can unzip the rpm anywhere you want. I unzipped it in WINDOW using 7-zip, then scp. Lol. 2. Would u please tell me about ur advice" Then load the first file " - load means what ? copy or move ? Yes, you COPY the file to /usr/lib/ directory. Please light on me . On 6/19/06, Jin Fan <jfan(a)cwlab.com> wrote: > I am using an older version of freeradius 1.0.2 and Fedora 4. > > My way to solve the missing rlm_sql_mysql.so problem is the following. > > 1. I download the freeradius-mysql rpm package from this website. > http://rpmfind.net/linux/RPM/fedora/updates/1/i386/freeradius-mysql-0. > 9. > 3-1.1.i386.html > > 2. Then I used 7-Zip to extract rlm_sql_mysql.so from the rpm. There > are two files in the rpm, rlm_sql_mysql-1.0.2.so and rlm_sql_mysql.so. > The second file is the link file to the first file. > > 3. Then load the first file into /use/lib/ folder, which contains all > the link library files. Make a link to the file and name it > rlm_sql_mysql.so. You also need to use chmod command to change the > file permission. > > 4. Restart freeradius server and it might run. > > You might need to find the correct rpm package for your system. > > Jin Fan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

4 3

mpd+freeradius+AD
by Егоров Сергей 20 Jun '06

20 Jun '06

Hi all! I have completed setup of mpd+freeradius+AD 2003. Now my users authenticating from Active Directory, if they are members of specific group. But I still have some questions: 1. How to make a different timeouts for different groups in AD 2. How to appoint special IP for special users 3. How to restrict users to access only to defined IP in my network

1 0