- Freeradius-Users - lists.freeradius.org

Authentication with username and passwd
by dark0s dark0s 13 Apr '06

13 Apr '06

Hello, I must to configure the authentication service with username and password only. Do I must to modify the /etc/raddb/users file? Regards, Saverio --------------------------------- Yahoo! Mail: gratis 1GB per i messaggi, antispam, antivirus, POP3

2 1

ldap+radius+wpa 802.1x authentication
by foreveruni＠clix.pt 13 Apr '06

13 Apr '06

Hi I've been trying to set up my freeradius with my ldap database(all users to authenticate) and I can't authenticate my wireless machines using my AP with EAP. all my config files can be found at http://nebioq.ath.cx:85/radius.tar.bz2 and my radiusd -X -A in http://nebioq.ath.cx:85/radiuslog.txt I've tried EAP-MD5 and EAP-TTLS I'm using the certs that came with freeradius because I'm unable to create new one's(an error about some library or something). I can associate to my AP(d-link DI-624) but then the EAP auth fails. My machine is a freeBSD machine(with the radiusd). Oh radtest: radtest forevertheuni mypassword t4 0 radiussecret Sending Access-Request of id 42 to 192.168.5.100 port 1812 User-Name = "forevertheuni" User-Password = "mypassword" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 rad_recv: Access-Accept packet from host 192.168.5.100:1812, id=42, length=20 Hope you folks can help me! Thanks for any help in advance. João Mamede

1 0

WiFi & Mac address authentication
by Guillaume 13 Apr '06

13 Apr '06

Hi guys! I recently install a freeradius for test purpose in a WiFi environement. But, i still a a problem, and I hope that you will be able to help me. The radius server version is: 1.0.4. I try to set a mac authentication and a certificates based authentication, but in the freeradius.cnf i dont find any entry for loading a list of authorised MAC address. Is there any option to create it, or i have to configure this mac address list on each APs? thanks for your replies. Guillaume

4 10

Freeradius 1.1.1 with openldap 2.0.X
by Rohaizam Abu Bakar 13 Apr '06

13 Apr '06

Tried to upgrade current machine with: FreeBSB 4.11 OpenLDAP 2.0.X Freeradius 1.0.4 To Freeradius 1.1.1 using ports But it tried to install openldap 2.2.X as well... I want to used existing openldap (2.0.X) It is possible to force freeradius ports installation to use existing openldap client? TQ --haizam

1 0

Question
by Chad Stanphill 13 Apr '06

13 Apr '06

I have been running Freeradius for a while but It can only use CHAP and for some reason I can not get PAP to work. I have the config set to the basic on most things. Can anyone help me figure out if I am missing something Thanks

5 6

Accessing REQUEST structure data outside FreeRADIUS module
by Nicolas Castel 13 Apr '06

13 Apr '06

Hello and thanks for replies I'm using FreeRADIUS v1.1.0. I'm developping some modules and I try to access auth_req structure (REQUEST) data from an external function (out of my module) and it fails. All works fine when accessing this data from the module itself but when i call an external function with the address of REQUEST, it doesn't work. Code which works /***********************************************************************/ static int wcp_lt_vms_authorize(void *pt_instance, REQUEST *pt_request) { VALUE_PAIR *lpt_value_pair = NULL; ... if ((lpt_value_pair = pairfind(pt_request->packet->vps, PW_USER_NAME)) == NULL ) { WCP_DEBUG("User-Name not found !"); } else { WCP_DEBUG("RADIUS attribute name %s, value: [%s]", lpt_value_pair->name, lpt_value_pair->strvalue); } ... } /***********************************************************************/ This works fine, when the server receive a request Tue Apr 11 16:05:03 2006 : wcp_lt_vms_authorize: RADIUS attribute name User-Name, value: [330001] The problem comes when doing the same thing but by calling a function. /***********************************************************************/ static int wcp_lt_vms_authorize(void *pt_instance, REQUEST *pt_request) { ... lib_com_filter_traffic(pt_request); ... } /***********************************************************************/ and in anotherfile, lib_com.c int lib_com_filter_traffic(REQUEST *pt_request) { VALUE_PAIR *lpt_value_pair = NULL; ... if ((lpt_value_pair = pairfind(pt_request->packet->vps, PW_USER_NAME)) == NULL ) { WCP_DEBUG("User-Name not found !"); } else { WCP_DEBUG("RADIUS attribute name %s, value: [%s]", lpt_value_pair->name, lpt_value_pair->strvalue); } /***********************************************************************/ This doesn't work. when receiving one request, FreeRADIUS takes a lot of processor time and then the server crashes. Tue Apr 11 17:00:30 2006 : Error: WARNING: Unresponsive child (id 3) for request 0 I don't understand why all works when accessing REQUEST data inside the module and not in the lib function. It's like the lib can't accessed to this memory. Any help would be appreciated.

2 2

Re: Freeradius-Users Digest, Vol 12, Issue 56 (Out Of Office)
by BRETT WEEAST 12 Apr '06

12 Apr '06

I will be out of the office Thu, April 13 through Fri, April 21. If you require assistance prior to April 24, email the Network Services Unit at: r035(a)gw.njsp.org >>> freeradius-users 04/12/06 17:12 >>> Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re: Freeradius, mysql, please help!!! (YvesDM) 2. Re: Question (YvesDM) 3. Re: Freeradius, mysql, please help!!! (Laker Netman) 4. Multiple Locations and configuring 2 different methods of Access (James) 5. Re: FreeRADIUS and SNMP (Kevin Bonner) 6. FreeRADIUS 1.1.1 Segmentation fault on Fedora 4 (Nikolas Thoman) 7. Question Regarding FreeRADIUS debug ----please help! (Silpa Akkina) ---------------------------------------------------------------------- Message: 1 Date: Wed, 12 Apr 2006 20:43:22 +0200 From: YvesDM <ydmlog(a)gmail.com> Subject: Re: Freeradius, mysql, please help!!! To: "FreeRadius users mailing list" <freeradius-users(a)lists.freeradius.org> Message-ID: <799e44b30604121143g1a162577uc05f667dacdaf21f(a)mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1" On 4/12/06, A.L.M.Buxey(a)lboro.ac.uk <A.L.M.Buxey(a)lboro.ac.uk> wrote: > > Hi, > > ummm. I'm not too certain here but wasnt the password you defined in the > mySQL database for john $1$bkW9WNor$tq5sRRiUcwOV4/fwk3CYM/ > if this is a crypted password then surely the attribute is Crypt-Password > rather than User-Password? > > alan > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > Correct, alan DeKok told me too. I changed it, but it didn't solve the problem. tnx yves

1 0

Question Regarding FreeRADIUS debug ----please help!
by Silpa Akkina 12 Apr '06

12 Apr '06

Hi....i am new to this group and joined just few minutes back. I had a question regarding how to view the milliseonds resolution in the RADIUS debug....i am trying to collect the output from the proxy radius server....i think all i can get is debug with seconds resolution...but for my project i have to take milli seconds readings....please help! > > Thanks, > Silpa http://akkinasilpa.blogspot.com --------------------------------- Yahoo! Messenger with Voice. PC-to-Phone calls for ridiculously low rates.

2 1

FreeRADIUS and SNMP
by DESETech - German P. Santillan 12 Apr '06

12 Apr '06

Hi: Somebody can help me with SNMP integration in FreeRADIUS? I configure FreeRADIUS with "--with-snmp" modificator In radiusd.conf I have these lines too: snmp = yes $INCLUDE ${confdir}/snmp.conf In snmp.conf I have 2 lines more smux_password = MyRegPass nmp_write_access = yes In my snmpd.conf i have this line Smuxpeer .1.3.6.1.4.1.3317.1.3.1 MyRegPass But... I can't obtain a valid response for OID 1.3.6.1.4.1.3317 Thanks in advance (and sorry for my English) Regards Germán P. Santillán Administrador de Redes Responsable Dpto. Técnico DESETech Argentina S.A. San Martín 133 - CP: B8000FIC Bahía Blanca - Argentina Tel/Fax: +54 (291) 456-5642 gsantillan(a)desetech.com.ar http://www.desetech.com.ar

3 2

RE: How do I set up simple AD integration?
by Burton, Steven 12 Apr '06

12 Apr '06

> -----Original Message----- > From: > freeradius-users-bounces+sburton=shepherd-construction.co.uk@l > ists.freer > adius.org > [mailto:freeradius-users-bounces+sburton=shepherd-construction > .co.uk@lis > ts.freeradius.org]On Behalf Of Alan DeKok > Sent: 11 April 2006 16:28 > To: FreeRadius users mailing list > Subject: Re: How do I set up simple AD integration? > > > "Burton, Steven" <sburton(a)shepherd-construction.co.uk> wrote: > > This stanza is a enclosed with the mschap section, still > nothing ventured.... > > I changed the line and unfolded it and ran radiusd -X. The first > > request didn't match anything usefull and was rejected by System. I > > tried again but ticked the box 'CHAP' on NTRadPing and got the > > output: > > You can't do CHAP to MS AD. It's impossible. > > Alan DeKok. My bad! I'd been staring at mschap all day and I saw chap and thought mschap. I still hope to get 802.1x working with FR before I'm told to stop wasting time and buy something :-) but after two and a half days (on and off) I'm no closer. Steve. ______________________________________________________________________ This email has been scanned by the MessageLabs Email Security System. For more information please visit http://www.messagelabs.com/email ______________________________________________________________________

3 2