- Freeradius-Users - lists.freeradius.org

Huntgroups how to?
by Unknown 02 Jun '06

02 Jun '06

Hello, i'm pretty new to the freeradius world, so please forgive me if i don't use the correct terms. Here is my situation: 1 AP with a freeradius auth backend used to gain access to the inner network. All works fine, i've setup both clients and server to use EAP-TLS. Now the question: I need to add one more AP and another user class, specifically: UserClass1 Users (Students) must be able to gain access through AP1 Only UserClass2 Users (Staff) must be able to gain access through both APs I think that i can accomplish this using huntgroups, forcing all requests coming from AP2 (Staff only) to auth through EAP-TLS AND mysql backend, maybe. I need not to change the actual enviroment, so I cannot redestribuite certs again nor order the users to use another auth method. Is there a Way ? Thank you all in advance, Pieces of code, howto, links and whatsoever are wellcome :) Thanks Again

2 2

peap authentication
by Kartthik Raghunathan 02 Jun '06

02 Jun '06

Am having a strange problem after my supplicant get authenticated to my active directory. My supplicant trying to get authenticated to active directory or validating identity every 60 mins, which disturbs wireless connection that bother me a lot. Is this normal or can i set the timer to authenticate every 120 mins or whatever timing i like. Am using dynamic WEP and it has been set to change the key every 6 hours. Any help will be really appreciated. Please help me. Thanks in advance !!! Kartthik -- _______________________________________________ Search for businesses by name, location, or phone number. -Lycos Yellow Pages http://r.lycos.com/r/yp_emailfooter/http://yellowpages.lycos.com/default.as…

1 0

RE: rlm_eap_mschapv2: out of memory
by Ryan Melendez 02 Jun '06

02 Jun '06

Thank You Alan, The microsoft dictionary was commented out in /usr/local/share/freeradius/dictionary. Ryan > -----Original Message----- > From: freeradius-users-bounces+rmelendez=wayport.net(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+rmelendez=wayport.net(a)lists.freeradius.org] On Behalf Of Alan > DeKok > Sent: Friday, June 02, 2006 10:16 AM > To: FreeRadius users mailing list > Subject: Re: rlm_eap_mschapv2: out of memory > > "Ryan Melendez" <rmelendez(a)wayport.net> wrote: > > Can someone please tell me how I might fix this? > > > ... > > rlm_eap_mschapv2: out of memory > > rlm_eap: Default EAP type mschapv2 failed in initiate > > From looking at the source, it happens when a call to pairmake() > fails. I'd guess that the MS-CHAP-Challenge attribute it's in your > dictionaries. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html

1 0

RE: Lawrence Billson has left Transurban
by King, Michael 02 Jun '06

02 Jun '06

You think if someone was going to be out of the office for 2 and a half years, He might Unsubscribe from his mailing lists. > -----Original Message----- > From: > freeradius-users-bounces+mking=bridgew.edu(a)lists.freeradius.or > g > [mailto:freeradius-users-bounces+mking=bridgew.edu@lists.freer > adius.org] On Behalf Of Lawrence Billson > Sent: Friday, June 02, 2006 4:24 AM > To: freeradius-users(a)lists.freeradius.org > Subject: Lawrence Billson has left Transurban > > > > > > I will be out of the office starting 02/06/2006 and will not > return until 12/12/2008. > > > Please send personal messages to lawrencebillson(a)yahoo.com.au. > > For all business related matters, please contact Jeremy > Forrester at jforrester(a)transurban.com.au. > > Cheers, > Lawrence > > > Privileged/Confidential information may be contained in this > message. If you are not the addressee indicated in this > message (or responsible for delivery of the message to such > person), you may not copy or deliver this message to anyone. > In such a case, you should destroy this message and kindly > notify the sender by reply e-mail or by telephone on (03) > 9612-6999 or +61 3 9612-6999. > > Please advise immediately if you or your employer does not > consent to Internet e-mail for messages of this kind. > > Opinions, conclusions and other information in this message > that do not relate to the official business of Transurban > Limited or any companies within the Transurban Group shall be > understood as neither given nor endorsed by them. > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

1 0

Authentication Method
by fvt3 02 Jun '06

02 Jun '06

Hi, I have questions concerning authentication method. Is it possible to force radius to authenticate off of ldap AND also from a local database? Example, say a user is connected to radius, first his user id/password will be authenticated against ldap and if the supplied credential is correct, force it to also authenticate against a local database. Second question, can you force radius to authenticate off of ldap or local database. I want the option to choose which method a user should be authenticated depending on their user id. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

rlm_eap_mschapv2: out of memory
by Ryan Melendez 02 Jun '06

02 Jun '06

Can someone please tell me how I might fix this? Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 20 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: out of memory rlm_eap: Default EAP type mschapv2 failed in initiate rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 20 modcall: leaving group authenticate (returns invalid) for request 20 auth: Failed to validate the user. 2.6.15-wpnmd.3.1 #1 SMP Wed Apr 12 04:50:31 GMT 2006 i686 GNU/Linux Thanks, Ryan

2 1

Sending multiple attributes from radius to the NAS
by vignesh 02 Jun '06

02 Jun '06

Hello all I have following doubts regarding access reply query 1. how do I send multiple attributes using the radreply E.g billing model, credit time etc 2. I have written a function in MySQL to return me the credit time. How do I include this function in my radreply query. Vignesh

1 0

Xsupplicant is receiving this Error Message
by Karthikeyan S 02 Jun '06

02 Jun '06

[STATE] Backend State : RECEIVE -> TIMEOUT [WARNING] Timeout waiting for the authenticator to begin the EAP conversation. This usually happens when the RADIUS server is misconfigured, the authenticator can't talk to the RADIUS server, or the username provided is invalid. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

RE: ip pool
by vertito 02 Jun '06

02 Jun '06

that simply means you need to call them from Accounting and Post-Auth module section of radius conf see more of Pool-Name attribute as well Hello Vertito, Thanks for your information.But I did not get the meaning of the attributes in the below sentence, dont forget to call them from conf and from attributes. I have configured these things in radiusd.conf. But I am not getting why it is requried,Because with out thses configuration I am able to do Authentication sucessfully. range-start = 192.168.1.1 range-stop = 192.168.1.200 netmask = 255.255.255.255 cache-size = 56 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 90 Regards, Basavaraja. -----Original Message----- From: vertito [mailto:mnisay@aim-consultants.com] Sent: Friday, June 02, 2006 11:07 AM To: 'Basavaraja.pv'; 'FreeRadius users mailing list' Subject: RE: ip pool range-start = 192.168.1.1 range-stop = 192.168.1.200 netmask = 255.255.255.255 cache-size = 56 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 90 dont forget to call them from conf and from attributes -----Original Message----- From: freeradius-users-bounces+mnisay=aim-consultants.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+mnisay=aim-consultants.com@lists.freeradius .org] On Behalf Of Basavaraja.pv Sent: Friday, June 02, 2006 10:00 AM To: freeradius-users(a)lists.freeradius.org Subject: ip pool Hello Sir, I went through the radiusd.conf file. I am not getting the exact purpose of the ippool main_pool{ rangesatrt = 192.168.1.1 rangestop = 192.168.3.254 } Please give me the working of the above code. Thanks and Regards, Basavaraja - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006 -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006

1 0

ip pool
by Basavaraja.pv 02 Jun '06

02 Jun '06

Hello Sir, I went through the radiusd.conf file. I am not getting the exact purpose of the ippool main_pool{ rangesatrt = 192.168.1.1 rangestop = 192.168.3.254 } Please give me the working of the above code. Thanks and Regards, Basavaraja

2 1