- Freeradius-Users - lists.freeradius.org

Password Logging: Correction
by andre kip 14 Mar '06

14 Mar '06

hi! 1. how can I stop my freeradius server from logging entered passwords into the the accounting file? I would like to only have the following in my file this way: Packet-Type = Access-Request Wed Mar 1 15:05:04 2006 User-Name = "Me" ######no password logging!!### NAS-IP-Address = x.x.x.x NAS-Identifier = "ssh" NAS-Port = 424 NAS-Port-Type = Virtual Service-Type = Authenticate-Only Calling-Station-Id = : 2. Is there a way of stopping the server from outputing the user password on debug mode?? as in: rad_recv: Access-Request packet from host 10.0.10.11:1449, id=17, length=87 User-Name = "Me" ##NO User-Password##### NAS-IP-Address = x.x.x.x NAS-Identifier = "ssh" NAS-Port = 424 : 3. And finally is it possible to use enycrypted passwords in user file? e.g. Me Auth-Type := Crypt-Local, Crypt-Password == "098f6bcd4621d373cade4e832627b4f6" ......or something similar Thanks in Advance. Andy Trüffle ___________________________________________________________ Telefonate ohne weitere Kosten vom PC zum PC: http://messenger.yahoo.de

5 13

Problems with users file and DEFAULT authentication
by Jim Potter 14 Mar '06

14 Mar '06

1 0

radclient solaris 10
by dr 14 Mar '06

14 Mar '06

where can I find radclient for Solaris 10 (sparc) ?... thank you didier --------------------------------- Yahoo! Mail Use Photomail to share photos without annoying attachments.

1 0

About Monthly Time Limits
by Lisa Casey 13 Mar '06

13 Mar '06

Hi, We are an ISP. As many ISP's do these days, we outsource our dialup numbers to wholesalers such as Megapops, etc. but we maintain our own radius servers. The wholesaler proxies radius requests to us. The following is kind of hypothetical, but I need to know this in order to understand how all this works. I have monthly time limits set up in my Freeradius. When customers login, where exactly does the information come from that tells Freeradius "This customer is OK, he has not used up his time limit yet" or "Reject this customer, he has used up his limit for this month". Is this dependent on something in the radius config at the wholesalers end, or is this info taken from my db.monthly file? Another way of asking this question (in case I'm not making myself clear which is always a possibility) is: Does the wholesaler have to support monthly time limits or can I do it all from my end (whether or not the wholesaler supports such an attribute)? Any info about how this process works will probably help clear up my thinking. Thanks, Lisa Casey

4 4

Wireless Card - user authentication - Freeradius
by ora 13 Mar '06

13 Mar '06

Hi, I have a Linksys Wireless-G Access Point (WAP54G). I am trying to configure the Access Point in order to have a user authentication by using the MAC address of wireless adapter. So, I installed my freeradius in a linux 9.0 server. My question is: where I have to put the MAC address of wireless adapters??? Into the file ?clients.conf? of my RADIUS server or in the ?users? file?? Do you know the sintaxis? In the other hand, I must to modify the file ?radiusd.conf?? If you have any document concernig this configuration, I'll be glad of any comments or information. Best Regards Octavio RAMIREZ ROJAS

2 1

Re: D-link and freeradius
by Christoforos Ntantogian 13 Mar '06

13 Mar '06

> OK...what you wrote in the naslist file in the TYPE field ? > > IF it worked with your D-link access point then whats the point of the > NASlist file? excuse me but how i answer to a thread without creating a new thread? > > thanks you for anwering Dave.. > > ----- Original Message ----- > From: "Dave Huff" <dbhuff(a)yahoo.com> > To: <freeradius-users(a)lists.freeradius.org> > Cc: <ntantogian(a)di.uoa.gr> > Sent: Monday, March 13, 2006 6:06 PM > Subject: Re: D-link and freeradius > > >> >>> Date: Mon, 13 Mar 2006 12:58:49 +0200 >>> From: "Christoforos Ntantogian" <ntantogian(a)di.uoa.gr> >>> Subject: D-link and freeradius >>> To: <freeradius-users(a)lists.freeradius.org> >>> Message-ID: <002d01c6468d$1eda3db0$b06486c3@noc> >>> Content-Type: text/plain; charset="iso-8859-7" >> >>> Hello, >> >>> I am going to setup an 802.1X wireless authentication with EAP-MD5, >> EAP-TLS and EAP-SIM. >>> I would like to ask if freeradius supports the D-link wireless access >> points. The NAS list > that freeradius support doesnt include D-link >> products. I have a D-link 900+ access point. > How can i make it work >> with >> freeradius or i cant? >> >> I'm using FR with a Dlink 624. I did have to download the latest >> firmware >> from Dlink before it would work. >> >> Dave H >> >> >> >> >> >> -- >> No virus found in this incoming message. >> Checked by AVG Free Edition. >> Version: 7.1.375 / Virus Database: 268.2.1/279 - Release Date: 10/3/2006 >> >> >

1 0

Re: D-link and freeradius
by Dave Huff 13 Mar '06

13 Mar '06

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 > Date: Mon, 13 Mar 2006 12:58:49 +0200 > From: "Christoforos Ntantogian" <ntantogian(a)di.uoa.gr> > Subject: D-link and freeradius > To: <freeradius-users(a)lists.freeradius.org> > Message-ID: <002d01c6468d$1eda3db0$b06486c3@noc> > Content-Type: text/plain; charset="iso-8859-7" > Hello, > I am going to setup an 802.1X wireless authentication with EAP-MD5, EAP-TLS and EAP-SIM. > I would like to ask if freeradius supports the D-link wireless access points. The NAS list > that freeradius support doesnt include D-link products. I have a D-link 900+ access point. > How can i make it work with freeradius or i cant? I'm using FR with a Dlink 624. I did have to download the latest firmware from Dlink before it would work. Dave H -----BEGIN PGP SIGNATURE----- Version: PGP Desktop 9.0.5 (Build 5050) iQEVAwUBRBWYpiKWt8bugsEpAQiToAgAlX84Z+D2YHOUl+ZfYr25dUx3xYCKcJjY P+aEnUimIv1gpOCpU73DpgH+1LJP1ecdA/n1W9cBlf84Tu95pn0Hhj4JpVVqkhUh wBeemR+bdxBgMEVdLGoORQITtDXOgyp6rAx+oEa8KFMQEZm+VuEbSz4WNWawZ7o8 fse5qr7M9F+QRZJHZ1CQ9eafW/iBl3l8EMQN4mFibi/0M21NlZawqo4ymHey2mCQ 5ICQ2SrMKLMtdSnGKjZjiAw9EgV4OXsu3G7Ts5+R5IjetmHNmiv2fVK33Br2ycLT D3rdPpojdCwnvvbLQMU2B/NOOac3gH22ap41odNzaM3MStWljh1S0g== =N4A9 -----END PGP SIGNATURE-----

1 0

Expiration Dates
by Atkins, Dwane P 13 Mar '06

13 Mar '06

I was not sure if this got to mailing list or not. I have done some research and could not find where you can enter start and stop dates through freeradius. Is there a way that I can input the start and stop time for user as far as in like an expiration date? Let say you are a contractor and need access for the 5 duty days you are in town. Can I put a config in that says, start on the 1st, end on the 5th? Thanks for all you inputs. Truly helpful. Dwane

2 1

D-link and freeradius
by Christoforos Ntantogian 13 Mar '06

13 Mar '06

Hello, I am going to setup an 802.1X wireless authentication with EAP-MD5, EAP-TLS and EAP-SIM. I would like to ask if freeradius supports the D-link wireless access points. The NAS list that freeradius support doesnt include D-link products. I have a D-link 900+ access point. How can i make it work with freeradius or i cant? ---------------------------------------------------------------- Christoforos Ntantogian PhD student Communications Networks Laboratory Department of Informatics & Telecommunications University of Athens Panepistimioupolis, Ilisia, PC 15784 Athens, Greece Tel: +30 210 7275402 Fax: +30 210 7275601 E-mail: ntantogian(a)di.uoa.gr Home page: http://cnl.di.uoa.gr/ ----------------------------------------------------------------

1 0

Ignoring request from unknown client 1.2.3.4.:****
by yao guoxian 13 Mar '06

13 Mar '06

Having installed Mysql4.0, I recompile Freeradius 1.0.5. It seems Freeradius and Mysql works well when I enter : radiusd -X. However, when I use the 'UserName' and 'Password' in the 'radcheck' table to test , I get the following output from Radius Server: rad_recv: Access-Request packet from host 202.117.49.26:3978, id=12, length=47 Ignoring request from unknown client 202.117.49.26:3978 --- Walking the entire request list --- Any suggestions?

2 1