- Freeradius-Users - lists.freeradius.org

Re: Re:Send information to the Radius Client
by Carlos Peñafiel 18 Apr '06

18 Apr '06

Hello again >why don't you use ldap for that?for the info. Because I really have to add only one more attribute. My client is a hostAp (working like a router), so the "new attribute" should be "amount of broadband" (I am trying to use QoS), and for only one attribute, I think (maybe I am wrong) that a LDAP is too much for my purpose. > Will the client understand those attributes, and do something with >them? If the client doesn't already say "send phone number in >attribute X", you'll have to modify it's source code to add that >feature. > Not yet. I was thinking about at the same time when the client receives the confirmation (the authentication), the RADIUS could send my-other-new-attribute ("amount of QoS"), because I guess I only need this attribute. > > I am not sure if I have to create a module (I do not know if it is > > necessary). But I do not know what files I must change. Can you help > > me? can you give an idea? > > The server contains documentation on how to configure it, and how to >send any attribute with any value to a client. Do you have a more >specific question? > Where can I get that information? I have been looking for it on the Internet and I did not find this information. Also, I was looking the man pages and I was thinking in the attributes in the dicctionary, but it said that the radius server never sends it to the client, so I declined that way. I will get any information or any idea which you all want to contribute. Thank you again.

1 0

Fwd: LDAP+EAP
by João Mamede 17 Apr '06

17 Apr '06

I have seen the output of radiusd -X -A It's in http://nebioq.ath.cx:85/radiuslog.txt I've made some other tries I don't if I'm closer or far away from goal. Run the server in debugging mode and read the output. ALL of it. Alan DeKok. ---------- Mensagem Reencaminhada ---------- Subject: LDAP+EAP Date: Segunda, 17 de Abril de 2006 20:54 From: João Mamede <foreveruni(a)clix.pt> To: freeradius-users(a)lists.freeradius.org Well noone gave me a hint about my config...so can someone send me your raddb dir(withouth the secrets and certs of course) of a freeradius+ldap+EAP to authenticate in an access point?I've read all the man's howto's everything I still can't understand why EAP is failing(radtest works ok for my ldap users) Best Regards João Mamede -------------------------------------------------------

2 1

LDAP+EAP
by João Mamede 17 Apr '06

17 Apr '06

Well noone gave me a hint about my config...so can someone send me your raddb dir(withouth the secrets and certs of course) of a freeradius+ldap+EAP to authenticate in an access point?I've read all the man's howto's everything I still can't understand why EAP is failing(radtest works ok for my ldap users) Best Regards João Mamede

2 1

non-number value in Acct-*-Octets
by magmike＠mail.ru 17 Apr '06

17 Apr '06

Hello, today my radius reveived very strange packet from pppd. Acct-Output-Octets was not number! accounting-Stop packet looks like follow: Wed Apr 12 04:27:39 2006 Acct-Session-Id = "443B9E03290F" User-Name = "user_name" Acct-Status-Type = Stop Service-Type = Framed-User Framed-Protocol = PPP Acct-Authentic = RADIUS Connect-Info = "10511" Acct-Session-Time = 36700 Acct-Output-Octets = Route-Appletalk-No Acct-Input-Octets = 42725588 Acct-Output-Packets = 539724 Acct-Input-Packets = 607374 Calling-Station-Id = "192.168.1.33" NAS-Port-Type = Async Framed-IP-Address = 10.0.0.9 NAS-IP-Address = 192.168.0.41 NAS-Port = 292 Acct-Delay-Time = 0 Client-IP-Address = 192.168.0.71 Timestamp = 1144794459 All previous "Interim-Update" packets for this sessions was right except last and "Stop" packets: Wed Apr 12 04:19:32 2006 Acct-Status-Type = Interim-Update Acct-Output-Octets = 74708441 Wed Apr 12 04:23:32 2006 Acct-Status-Type = Interim-Update Acct-Output-Octets = 74745120 Wed Apr 12 04:27:32 2006 Acct-Status-Type = Interim-Update Acct-Output-Octets = Route-Appletalk-No Wed Apr 12 04:27:39 2006 Acct-Status-Type = Stop Acct-Output-Octets = Route-Appletalk-No where are problem?

2 3

Accounting Module does not recognize shared secret
by Alex M 17 Apr '06

17 Apr '06

Hi I just found out that im getting error in accounting module. It say that shared secret is incorrect, but it was working fine for more then a week. Also im using DNS name in the NAS Name filed instead of ip address. Why am I getting this error? Here is the error message? rad_recv: Accounting-Request packet from host 192.168.0.10:61296, id=39, length=143 Received Accounting-Request packet from 192.168.0.10 with invalid signature! (Shared secret is incorrect.)

2 1

Send information to the Radius Client
by Carlos Peñafiel 17 Apr '06

17 Apr '06

Hello, I want to be able to send information (such a name, address, phone number ...) from the Radius Server to the Radius Client( I want to do that to a Host AP) after the Radius client has been authenticated. I am not sure if I have to create a module (I do not know if it is necessary). But I do not know what files I must change. Can you help me? can you give an idea? I am using freeradius-1.1.1 and the client is Hostap-0.4.8. Thank you a lot in advance.

2 1

RE: Problem with LDAP against Active Directory
by Caines, Max 17 Apr '06

17 Apr '06

Hi Dominique There appears to be something wrong with the search base definition for your LDAP search. It looks like you are using the "traditional" LDAP basename which goes "ou=mydepartment, o=mycompany, c=ch". Active Directory uses basenames that look like "dc=ad, dc=ch". Your LDAP server is returning "operations error", so I should look in its log file for more details. By the way, bear in mind that unless you use Microsoft IAS, you can only do RADIUS authentication against AD using PAP (i.e. users send passwords in cleartext), which isn't too secure. Max Caines > -----Original Message----- > From: > freeradius-users-bounces+max.caines=wlv.ac.uk(a)lists.freeradius.org > [mailto:freeradius-users-bounces+max.caines=wlv.ac.uk@lists.fr > eeradius.o > rg]On Behalf Of domjullier(a)rhone.ch > Sent: 03 April 2006 10:27 > To: freeradius-users(a)lists.freeradius.org > Subject: Problem with LDAP against Active Directory > > > Hi folks, > I want authenticate users from a WLAN with freeradius. The > Users are stored in the Active Directory of a Windows 2003 > Server. > > With some Tutorials from the Internet I have configured > freeradius to make that. > > Unfortunately the Authentication function not succesfully. > > Thats the output from FreeRadius during the Authentication: > > rad_recv: Access-Request packet from host > 192.168.210.15:4596, id=13, length=100 > NAS-Port-Type = Ethernet > Service-Type = Login-User > User-Name = "ldap" > User-Password = "ldap" > Called-Station-Id = "00:01:02:ad:64:f7" > Calling-Station-Id = "00:c0:49:54:b5:43" > NAS-Port = 1 > Mon Apr 3 11:12:08 2006 : Debug: Processing the > authorize section of radiusd.conf > Mon Apr 3 11:12:08 2006 : Debug: modcall: entering group > authorize for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling preprocess (rlm_preprocess) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > returned from preprocess (rlm_preprocess) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modcall[authorize]: > module "preprocess" returns ok for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling chap (rlm_chap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > returned from chap (rlm_chap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modcall[authorize]: > module "chap" returns noop for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling mschap (rlm_mschap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > returned from mschap (rlm_mschap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modcall[authorize]: > module "mschap" returns noop for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling suffix (rlm_realm) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: rlm_realm: No '@' in > User-Name = "ldap", looking up realm NULL > Mon Apr 3 11:12:08 2006 : Debug: rlm_realm: No such > realm "NULL" > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > returned from suffix (rlm_realm) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modcall[authorize]: > module "suffix" returns noop for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling eap (rlm_eap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: rlm_eap: No > EAP-Message, not doing EAP > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > returned from eap (rlm_eap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modcall[authorize]: > module "eap" returns noop for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling files (rlm_files) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > returned from files (rlm_files) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modcall[authorize]: > module "files" returns notfound for request 2 > Mon Apr 3 11:12:08 2006 : Debug: modsingle[authorize]: > calling ldap (rlm_ldap) for request 2 > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: - authorize > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: performing user > authorization for ldap > Mon Apr 3 11:12:08 2006 : Debug: radius_xlat: > '(uid=ldap)' > Mon Apr 3 11:12:08 2006 : Debug: radius_xlat: 'ou=Sion, > o=ad.ch' > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: ldap_get_conn: > Checking Id: 0 > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: ldap_get_conn: > Got Id: 0 > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: attempting LDAP > reconnection > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: closing > existing LDAP connection > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: (re)connect to > ad.ch:389, authentication 0 > Mon Apr 3 11:12:08 2006 : Debug: rlm_ldap: bind as / to > ad.ch:389 > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: waiting for > bind result ... > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: Bind was > successful > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: performing > search in ou=Sion, o=ad.ch, with filter (uid=ldap) > Mon Apr 3 11:12:18 2006 : Error: rlm_ldap: ldap_search() > failed: Operations error > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: search failed > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: > ldap_release_conn: Release Id: 0 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from ldap (rlm_ldap) for request 2 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "ldap" returns fail for request 2 > Mon Apr 3 11:12:18 2006 : Debug: modcall: group authorize > returns fail for request 2 > Mon Apr 3 11:12:18 2006 : Debug: Finished request 2 > Mon Apr 3 11:12:18 2006 : Debug: Going to the next request > Mon Apr 3 11:12:18 2006 : Debug: --- Walking the entire > request list --- > Mon Apr 3 11:12:18 2006 : Debug: Waking up in 6 seconds... > rad_recv: Access-Request packet from host > 192.168.210.15:4596, id=13, length=100 > Mon Apr 3 11:12:18 2006 : Debug: Discarding duplicate > request from client testnet:4596 - ID: 13 > Mon Apr 3 11:12:18 2006 : Debug: --- Walking the entire > request list --- > Mon Apr 3 11:12:18 2006 : Debug: Cleaning up request 2 ID > 13 with timestamp 4430e6e8 > Mon Apr 3 11:12:18 2006 : Debug: Nothing to do. Sleeping > until we see a request. > rad_recv: Access-Request packet from host > 192.168.210.15:4596, id=13, length=100 > NAS-Port-Type = Ethernet > Service-Type = Login-User > User-Name = "ldap" > User-Password = "ldap" > Called-Station-Id = "00:01:02:ad:64:f7" > Calling-Station-Id = "00:c0:49:54:b5:43" > NAS-Port = 1 > Mon Apr 3 11:12:18 2006 : Debug: Processing the > authorize section of radiusd.conf > Mon Apr 3 11:12:18 2006 : Debug: modcall: entering group > authorize for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling preprocess (rlm_preprocess) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from preprocess (rlm_preprocess) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "preprocess" returns ok for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling chap (rlm_chap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from chap (rlm_chap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "chap" returns noop for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling mschap (rlm_mschap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from mschap (rlm_mschap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "mschap" returns noop for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling suffix (rlm_realm) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: rlm_realm: No '@' in > User-Name = "ldap", looking up realm NULL > Mon Apr 3 11:12:18 2006 : Debug: rlm_realm: No such > realm "NULL" > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from suffix (rlm_realm) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "suffix" returns noop for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling eap (rlm_eap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: rlm_eap: No > EAP-Message, not doing EAP > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from eap (rlm_eap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "eap" returns noop for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling files (rlm_files) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > returned from files (rlm_files) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modcall[authorize]: > module "files" returns notfound for request 3 > Mon Apr 3 11:12:18 2006 : Debug: modsingle[authorize]: > calling ldap (rlm_ldap) for request 3 > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: - authorize > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: performing user > authorization for ldap > Mon Apr 3 11:12:18 2006 : Debug: radius_xlat: > '(uid=ldap)' > Mon Apr 3 11:12:18 2006 : Debug: radius_xlat: 'ou=Sion, > o=ad.ch' > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: ldap_get_conn: > Checking Id: 0 > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: ldap_get_conn: > Got Id: 0 > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: attempting LDAP > reconnection > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: closing > existing LDAP connection > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: (re)connect to > ad.ch:389, authentication 0 > Mon Apr 3 11:12:18 2006 : Debug: rlm_ldap: bind as / to > ad.ch:389 > Mon Apr 3 11:12:28 2006 : Debug: rlm_ldap: waiting for > bind result ... > Mon Apr 3 11:12:28 2006 : Debug: rlm_ldap: Bind was > successful > Mon Apr 3 11:12:28 2006 : Debug: rlm_ldap: performing > search in ou=Sion, o=ad.ch, with filter (uid=ldap) > Mon Apr 3 11:12:28 2006 : Error: rlm_ldap: ldap_search() > failed: Operations error > Mon Apr 3 11:12:28 2006 : Debug: rlm_ldap: search failed > Mon Apr 3 11:12:28 2006 : Debug: rlm_ldap: > ldap_release_conn: Release Id: 0 > Mon Apr 3 11:12:28 2006 : Debug: modsingle[authorize]: > returned from ldap (rlm_ldap) for request 3 > Mon Apr 3 11:12:28 2006 : Debug: modcall[authorize]: > module "ldap" returns fail for request 3 > Mon Apr 3 11:12:28 2006 : Debug: modcall: group authorize > returns fail for request 3 > Mon Apr 3 11:12:28 2006 : Debug: Finished request 3 > Mon Apr 3 11:12:28 2006 : Debug: Going to the next request > Mon Apr 3 11:12:28 2006 : Debug: --- Walking the entire > request list --- > Mon Apr 3 11:12:28 2006 : Debug: Waking up in 6 seconds... > Mon Apr 3 11:12:34 2006 : Debug: --- Walking the entire > request list --- > Mon Apr 3 11:12:34 2006 : Debug: Cleaning up request 3 ID > 13 with timestamp 4430e6f2 > Mon Apr 3 11:12:34 2006 : Debug: Nothing to do. Sleeping > until we see a request. > > Where can I fix the misstake which produce this error? > > greets > > dominique > > > > > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

6 10

Re:Send information to the Radius Client
by foreveruni＠clix.pt 17 Apr '06

17 Apr '06

why don't you use ldap for that?for the info. On Monday 17 April 2006 11:07, freeradius-users-request(a)lists.freeradius.org wrote: > Message: 2 > Date: Mon, 17 Apr 2006 04:46:28 +0200 > From: Carlos Pe?afiel <carpeher(a)hotmail.com> > Subject: Send information to the Radius Client > To: freeradius-users(a)lists.freeradius.org > Message-ID: <BAY105-F28D6D76241DE735F8F067DD5C70(a)phx.gbl> > Content-Type: text/plain; charset=iso-8859-1; format=flowed > > Hello, > > I want to be able to send information (such a name, address, phone > number ...) from the Radius Server to the Radius Client( I want to do that > to a Host AP) after the Radius client has been authenticated. I am not sure > if I have to create a module (I do not know if it is necessary). But I do > not know what files I must change. Can you help me? can you give an idea? > > I am using freeradius-1.1.1 and the client is Hostap-0.4.8. > > Thank you a lot in advance.

1 0

Re: WinXP with Ipsec Framed-Route config problem
by Dag Bodin 16 Apr '06

16 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0

Re: Problem with Cisco-AVPair
by Dag Bodin 16 Apr '06

16 Apr '06

Jag är bortrest några dagar och kan inte kontrollera min mail, återkom efter den 24/4 eller kontakta kontoret på info(a)mediateknik.com eller +46-612-717780 Im out of office until April 24, contact office: info(a)mediateknik.com or +46-612-717780

1 0