- Freeradius-Users - lists.freeradius.org

Authentication Method
by fvt3 02 Jun '06

02 Jun '06

Hi, I have questions concerning authentication method. Is it possible to force radius to authenticate off of ldap AND also from a local database? Example, say a user is connected to radius, first his user id/password will be authenticated against ldap and if the supplied credential is correct, force it to also authenticate against a local database. Second question, can you force radius to authenticate off of ldap or local database. I want the option to choose which method a user should be authenticated depending on their user id. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

2 1

rlm_eap_mschapv2: out of memory
by Ryan Melendez 02 Jun '06

02 Jun '06

Can someone please tell me how I might fix this? Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 20 rlm_eap: EAP Identity rlm_eap: processing type mschapv2 rlm_eap_mschapv2: out of memory rlm_eap: Default EAP type mschapv2 failed in initiate rlm_eap: Failed in EAP select modcall[authenticate]: module "eap" returns invalid for request 20 modcall: leaving group authenticate (returns invalid) for request 20 auth: Failed to validate the user. 2.6.15-wpnmd.3.1 #1 SMP Wed Apr 12 04:50:31 GMT 2006 i686 GNU/Linux Thanks, Ryan

2 1

Sending multiple attributes from radius to the NAS
by vignesh 02 Jun '06

02 Jun '06

Hello all I have following doubts regarding access reply query 1. how do I send multiple attributes using the radreply E.g billing model, credit time etc 2. I have written a function in MySQL to return me the credit time. How do I include this function in my radreply query. Vignesh

1 0

Xsupplicant is receiving this Error Message
by Karthikeyan S 02 Jun '06

02 Jun '06

[STATE] Backend State : RECEIVE -> TIMEOUT [WARNING] Timeout waiting for the authenticator to begin the EAP conversation. This usually happens when the RADIUS server is misconfigured, the authenticator can't talk to the RADIUS server, or the username provided is invalid. __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

RE: ip pool
by vertito 02 Jun '06

02 Jun '06

that simply means you need to call them from Accounting and Post-Auth module section of radius conf see more of Pool-Name attribute as well Hello Vertito, Thanks for your information.But I did not get the meaning of the attributes in the below sentence, dont forget to call them from conf and from attributes. I have configured these things in radiusd.conf. But I am not getting why it is requried,Because with out thses configuration I am able to do Authentication sucessfully. range-start = 192.168.1.1 range-stop = 192.168.1.200 netmask = 255.255.255.255 cache-size = 56 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 90 Regards, Basavaraja. -----Original Message----- From: vertito [mailto:mnisay@aim-consultants.com] Sent: Friday, June 02, 2006 11:07 AM To: 'Basavaraja.pv'; 'FreeRadius users mailing list' Subject: RE: ip pool range-start = 192.168.1.1 range-stop = 192.168.1.200 netmask = 255.255.255.255 cache-size = 56 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes maximum-timeout = 90 dont forget to call them from conf and from attributes -----Original Message----- From: freeradius-users-bounces+mnisay=aim-consultants.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+mnisay=aim-consultants.com@lists.freeradius .org] On Behalf Of Basavaraja.pv Sent: Friday, June 02, 2006 10:00 AM To: freeradius-users(a)lists.freeradius.org Subject: ip pool Hello Sir, I went through the radiusd.conf file. I am not getting the exact purpose of the ippool main_pool{ rangesatrt = 192.168.1.1 rangestop = 192.168.3.254 } Please give me the working of the above code. Thanks and Regards, Basavaraja - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006 -- No virus found in this incoming message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006 -- No virus found in this outgoing message. Checked by AVG Free Edition. Version: 7.1.394 / Virus Database: 268.8.1/354 - Release Date: 6/1/2006

1 0

ip pool
by Basavaraja.pv 02 Jun '06

02 Jun '06

Hello Sir, I went through the radiusd.conf file. I am not getting the exact purpose of the ippool main_pool{ rangesatrt = 192.168.1.1 rangestop = 192.168.3.254 } Please give me the working of the above code. Thanks and Regards, Basavaraja

2 1

Lawrence Billson has left Transurban
by Lawrence Billson 02 Jun '06

02 Jun '06

I will be out of the office starting 02/06/2006 and will not return until 12/12/2008. Please send personal messages to lawrencebillson(a)yahoo.com.au. For all business related matters, please contact Jeremy Forrester at jforrester(a)transurban.com.au. Cheers, Lawrence Privileged/Confidential information may be contained in this message. If you are not the addressee indicated in this message (or responsible for delivery of the message to such person), you may not copy or deliver this message to anyone. In such a case, you should destroy this message and kindly notify the sender by reply e-mail or by telephone on (03) 9612-6999 or +61 3 9612-6999. Please advise immediately if you or your employer does not consent to Internet e-mail for messages of this kind. Opinions, conclusions and other information in this message that do not relate to the official business of Transurban Limited or any companies within the Transurban Group shall be understood as neither given nor endorsed by them.

1 0

suppressing outbound leg on ipipgw
by vignesh 02 Jun '06

02 Jun '06

hello all i am using cisco ipipgw and free radius. for a single call i get 2 records. one for each leg. now i want to supress one of the leg mostly outbound. i cant use gw-accounting suppress as both the legs are voip. i even tried voice class aaa accounting suppress outbound leg but still no luck any idea guys how can i do this. thanks in advance Vignesh

1 0

unresponsive / radiusd - X versus rc.radius start
by WI Cricket 01 Jun '06

01 Jun '06

Hello, I just joined the list. This is my first post. I tried to review the archives for something similar but I am not sure if I did find a way around it. First, is there a difference running FreeRadius using: rc.radiusd start versus radiusd -X Here is my set-up. I have two winXP supplicants using TLS for authentication and one W2K using TTLS-MS-CHAPv2. My FreeRadius is running on SuSE Linux 10 and my NAS is Linksys WRT54GS running 4.71 + HyperWRT + Thibor15c (this make not make any difference) Anyway, what is happening is that all the supplicants seem to work well using radiusd -X, however the freeRadius server seems unresponsive after a few hours of running it with rc.radiusd start. Please let me know if anyone sees an immediate issue with my setup or I can provide more information if need. I am running 1.1.2 of FreeRadius. Thank you all for your support and this great software.

1 0

RE: Server Specs
by King, Michael 01 Jun '06

01 Jun '06

> -----Original Message----- > > It's about 200-500 simultaneous authentications. > > What do you mean by that? Authentications per second? Yes. > > > I'm guessing 1ghz of cpu, 512MB of RAM, and 30gig of HD. > Suggestions, > > comments, criticisms? > > That should be lots. Cool.

1 0