- Freeradius-Users - lists.freeradius.org

802.1x EAP-PEAP log parsing
by gARetH baBB 14 Feb '06

14 Feb '06

Couldn't find any references to this exact problem, so apologises if it actually has been talked about before. I'm trying to parse the auth-detail log files for 802.1x EAP-PEAP and trying to consolidate the inner authentication (from 127.0.0.1) with the outer authentication (from the real NAS), so I can generate log reports which include the real (inner) user name and real (outer) IP etc. etc. There is no obvious way of doing this, apart from the not-that-ideal method of time stamp matching. Is there something which can be derived from State or EAP-Message to match authentications up ? Is there another method ?

3 2

CVS web interface down ?
by Craig Huckabee 14 Feb '06

14 Feb '06

Has anyone reported that the FreeRADIUS cvs web interface is down ? If this is a known issue I apologize, didn't find any posts on this list or the developers list. Thanks, Craig

2 1

RE: $INCLUDE dictionary.fortinet is missed in dictionary infreeradius-1.1.0
by Jonathan De Graeve 14 Feb '06

14 Feb '06

Can you also include the changes for the bay dictionary which I send 2weeks ago? Kind Regards, J. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst +32 15/50.52.98 jonathan.de.graeve(a)imelda.be --------- Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite --------- > -----Oorspronkelijk bericht----- > Van: freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org > [mailto:freeradius-users- > bounces+jonathan.de.graeve=imelda.be(a)lists.freeradius.org] Namens Alan > DeKok > Verzonden: dinsdag 14 februari 2006 1:19 > Aan: FreeRadius users mailing list > Onderwerp: Re: $INCLUDE dictionary.fortinet is missed in dictionary > infreeradius-1.1.0 > > "Richie Lee" <richielee_69(a)hotmail.com> wrote: > > Could you please add the line to dictionary file? > > It should be in 1.1.1. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html >

2 1

TLS error
by warp core 14 Feb '06

14 Feb '06

I get a TLS_accept error when the server reads the client certificate. All used certificates (client, server) were generated by the same CA (OpenSSL). What can it be wrong? Can someone show a log with a successful EAP-TLS authentication? from the freeRADIUS log------------------------------------------- TLS_accept: before/accept initialization TLS_accept: SSLv3 read client hello A TLS_accept: SSLv3 write server hello A TLS_accept: SSLv3 write certificate A TLS_accept: SSLv3 write key exchange A TLS_accept: SSLv3 write certificate request A TLS_accept: SSLv3 flush data TLS_accept:error in SSLv3 read client certificate A ------------------------------------------------------------------------------- The authentication goes on and terminates with the following: from the freeRADIUS log------------------------------------------- TLS Alert read:fatal:certificate unknown TLS_accept:failed in SSLv3 read client certificate A 5294:error:14094416:SSL routines:SSL3_READ_BYTES:sslv3 alert certificate unknown:s3_pkt.c:1052:SSL alert number 46 5294:error:140940E5:SSL routines:SSL3_READ_BYTES:ssl handshake failure:s3_pkt.c:837: rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails. rlm_eap_tls: BIO_read failed in a system call (-1), TLS session fails.

1 0

clint ip-address as broadcast address with mask
by DilipSimha.N.M 14 Feb '06

14 Feb '06

hi, why does FREERADIUS accept the client ip-address as: aaa.aaa.aaa.255/32 ??? (in clients.conf) this doesn't have any meaning as source address. what purpose does this serve? --DilipSimha

4 4

RE: Dynamic Routing
by Abdul Lateef 14 Feb '06

14 Feb '06

Hi all, I contact to my vendor they asked me to send some data in Cisco VSA(252) attribute. Here is full working example they provide me to send in AccessResponse packet: Cisco VSA(252): GWname/option//CalledID//CallerID/GWip:1720 I wanted to know how i can add these data in AccessResponse packet. I will appricate if anyone can point me ================== Hi All, I am running my perl file on AccessResponse for our VoIP Gatekeeper. I wanted to send carrier IP Address from database to the GK to route the call using h323-remote-address attribute. But i don't know what will be the fromat to set h323-remote-address value. Please advice me to add this attribute in my perl file. -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 ICQ: 276994704 MSN: abdulzu(a)hotmail.com GoogleTalk: lateef.np(a)gmail.com YM!: abdul_zu Doha Qatar http://www.hatif.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

RE: Freeradius-Users Digest, Vol 10, Issue 41
by singh.kuldeep＠wipro.com 14 Feb '06

14 Feb '06

Hi Guys I have installed Radius server on a Red Hat machine. Now I want to check the working of it. Could you please tell me how to proceed?? Regards Kuldeep -----Original Message----- From: freeradius-users-bounces+singh.kuldeep=wipro.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+singh.kuldeep=wipro.com@lists.freeradiu s.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Saturday, February 11, 2006 4:34 PM To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 10, Issue 41 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re:problem with simultanous use...any idea (tommy garsia) ---------------------------------------------------------------------- Message: 1 Date: Sat, 11 Feb 2006 01:00:11 -0800 (PST) From: tommy garsia <tommy_garsia(a)yahoo.com> Subject: Re:problem with simultanous use...any idea To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20060211090011.88780.qmail(a)web54308.mail.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" Thanks sean....it works great!! is there any way to limit user's bandwidth?? can i specify how many user's content/total bandwidth which can be downloaded? e.g....i give only 10 MB to user A... regards, Sean <sean(a)swarmhotspots.com> wrote: On Fri, 2006-02-10 at 11:15 +0100, freeradius-users-request(a)lists.freeradius.org wrote: > problem with simultanous use...any idea???tommy garsia > Hi guys... > > I've finished compile and install freeradius v1.1.0 with mysql...and > work great... > and i'm happy with it... > now i have a problem during the accounting.... > what should i do if i want to limit only one connection per one > user..?? > what should i do with my freeradius configuration? > > best regards, > > > tommy > Set simultaneous-use :=1 in radcheck and enable simultaneous use checking in sql.conf Regards, Sean http://swarmhotspots.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Dynamic Routing
by Abdul Lateef 14 Feb '06

14 Feb '06

Hi All, I am running my perl file on AccessResponse for our VoIP Gatekeeper. I wanted to send carrier IP Address from database to the GK to route the call using h323-remote-address attribute. But i don't know what will be the fromat to set h323-remote-address value. Please advice me to add this attribute in my perl file. -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 ICQ: 276994704 MSN: abdulzu(a)hotmail.com GoogleTalk: lateef.np(a)gmail.com YM!: abdul_zu Doha Qatar http://www.hatif.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

actions taken by FR server depending on the value returned by authenticate method
by Peter Manckok 14 Feb '06

14 Feb '06

Hy all, I have a pair of questions about the values returned by a module. I would like to know which are the actions taken by the FreeRadius server when the authenticate method returns with: - RLM_MODULE_FAIL or - RLM_MODULE_INVALID Is the FR server behavior the same for both cases? Does the FR server send an Access-Reject packet in those cases? Thank you very much Regards, Peter ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

2 1

--with-rlm-sql-lib-dir, --with-rlm-sql-include-dir (1.1.0)
by Ryan Melendez 14 Feb '06

14 Feb '06

Hello, Is it possible to specify multiple lib and include directories with a ./configure option? Can I specify different directories via ./configure for the runtime linker? (i.e ld-R/path/) I've tried these options, but it hasn't worked: 1) Double Options --with-rlm-sql-lib-dir=/path/is/good --with-rlm-sql-lib-dir=/path/is/also/good 2)colon-separated list of directories --with-rlm-sql-lib-dir=/path/is/good:/path/is/also/good I'm using 1.1.0. I appreciate you time. Thanks, Ryan

2 1