- Freeradius-Users - lists.freeradius.org

clint ip-address as broadcast address with mask
by DilipSimha.N.M 14 Feb '06

14 Feb '06

hi, why does FREERADIUS accept the client ip-address as: aaa.aaa.aaa.255/32 ??? (in clients.conf) this doesn't have any meaning as source address. what purpose does this serve? --DilipSimha

4 4

RE: Dynamic Routing
by Abdul Lateef 14 Feb '06

14 Feb '06

Hi all, I contact to my vendor they asked me to send some data in Cisco VSA(252) attribute. Here is full working example they provide me to send in AccessResponse packet: Cisco VSA(252): GWname/option//CalledID//CallerID/GWip:1720 I wanted to know how i can add these data in AccessResponse packet. I will appricate if anyone can point me ================== Hi All, I am running my perl file on AccessResponse for our VoIP Gatekeeper. I wanted to send carrier IP Address from database to the GK to route the call using h323-remote-address attribute. But i don't know what will be the fromat to set h323-remote-address value. Please advice me to add this attribute in my perl file. -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 ICQ: 276994704 MSN: abdulzu(a)hotmail.com GoogleTalk: lateef.np(a)gmail.com YM!: abdul_zu Doha Qatar http://www.hatif.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

RE: Freeradius-Users Digest, Vol 10, Issue 41
by singh.kuldeep＠wipro.com 14 Feb '06

14 Feb '06

Hi Guys I have installed Radius server on a Red Hat machine. Now I want to check the working of it. Could you please tell me how to proceed?? Regards Kuldeep -----Original Message----- From: freeradius-users-bounces+singh.kuldeep=wipro.com(a)lists.freeradius.org [mailto:freeradius-users-bounces+singh.kuldeep=wipro.com@lists.freeradiu s.org] On Behalf Of freeradius-users-request(a)lists.freeradius.org Sent: Saturday, February 11, 2006 4:34 PM To: freeradius-users(a)lists.freeradius.org Subject: Freeradius-Users Digest, Vol 10, Issue 41 Send Freeradius-Users mailing list submissions to freeradius-users(a)lists.freeradius.org To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request(a)lists.freeradius.org You can reach the person managing the list at freeradius-users-owner(a)lists.freeradius.org When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Re:problem with simultanous use...any idea (tommy garsia) ---------------------------------------------------------------------- Message: 1 Date: Sat, 11 Feb 2006 01:00:11 -0800 (PST) From: tommy garsia <tommy_garsia(a)yahoo.com> Subject: Re:problem with simultanous use...any idea To: FreeRadius users mailing list <freeradius-users(a)lists.freeradius.org> Message-ID: <20060211090011.88780.qmail(a)web54308.mail.yahoo.com> Content-Type: text/plain; charset="iso-8859-1" Thanks sean....it works great!! is there any way to limit user's bandwidth?? can i specify how many user's content/total bandwidth which can be downloaded? e.g....i give only 10 MB to user A... regards, Sean <sean(a)swarmhotspots.com> wrote: On Fri, 2006-02-10 at 11:15 +0100, freeradius-users-request(a)lists.freeradius.org wrote: > problem with simultanous use...any idea???tommy garsia > Hi guys... > > I've finished compile and install freeradius v1.1.0 with mysql...and > work great... > and i'm happy with it... > now i have a problem during the accounting.... > what should i do if i want to limit only one connection per one > user..?? > what should i do with my freeradius configuration? > > best regards, > > > tommy > Set simultaneous-use :=1 in radcheck and enable simultaneous use checking in sql.conf Regards, Sean http://swarmhotspots.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Dynamic Routing
by Abdul Lateef 14 Feb '06

14 Feb '06

Hi All, I am running my perl file on AccessResponse for our VoIP Gatekeeper. I wanted to send carrier IP Address from database to the GK to route the call using h323-remote-address attribute. But i don't know what will be the fromat to set h323-remote-address value. Please advice me to add this attribute in my perl file. -------- Yours, Abdul Lateef Computer Programmer HATIF COM Mob: +974 - 5405022 ICQ: 276994704 MSN: abdulzu(a)hotmail.com GoogleTalk: lateef.np(a)gmail.com YM!: abdul_zu Doha Qatar http://www.hatif.com __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

actions taken by FR server depending on the value returned by authenticate method
by Peter Manckok 14 Feb '06

14 Feb '06

Hy all, I have a pair of questions about the values returned by a module. I would like to know which are the actions taken by the FreeRadius server when the authenticate method returns with: - RLM_MODULE_FAIL or - RLM_MODULE_INVALID Is the FR server behavior the same for both cases? Does the FR server send an Access-Reject packet in those cases? Thank you very much Regards, Peter ______________________________________________ LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

2 1

--with-rlm-sql-lib-dir, --with-rlm-sql-include-dir (1.1.0)
by Ryan Melendez 14 Feb '06

14 Feb '06

Hello, Is it possible to specify multiple lib and include directories with a ./configure option? Can I specify different directories via ./configure for the runtime linker? (i.e ld-R/path/) I've tried these options, but it hasn't worked: 1) Double Options --with-rlm-sql-lib-dir=/path/is/good --with-rlm-sql-lib-dir=/path/is/also/good 2)colon-separated list of directories --with-rlm-sql-lib-dir=/path/is/good:/path/is/also/good I'm using 1.1.0. I appreciate you time. Thanks, Ryan

2 1

eaptls certificate question
by Norbert Wegener 14 Feb '06

14 Feb '06

My radius does an eaptls 802.1x authentication with looking into AD to get group information and finally consulting the users file, to assign the correct vlan. This works without problems. When I configure another certificate_file/private_key_file in eap.conf, the authentication process does not succeed. The obvious difference between the working and the not working configuration is, that in the bad case, the certificate is issued by an intermediate ca, not by the root ca. May this chaining have negative influence on the configuration? If this is not the case, maybe another reason may be found in radiusd -AX's lengthy output: http://www.wegener-net.de/fr/typescript Thanks Norbert Wegener

3 4

$INCLUDE dictionary.fortinet is missed in dictionary in freeradius-1.1.0
by Richie Lee 14 Feb '06

14 Feb '06

I requested to add dictionary.fortinet to Freeradius last September. (please search the thread according to author's name richie). The file has been added into freeradius-1.1.0.tar.gz, but the dictionary file under /usr/local/share/freeradius doesn't include the line of "$INCLUDE dictionary.fortinet". So a fortinet user has to add the line manually when using freeradius. Could you please add the line to dictionary file? Thanks Richie _________________________________________________________________ Take charge with a pop-up guard built on patented Microsoft® SmartScreen Technology http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=ht… Start enjoying all the benefits of MSN® Premium right now and get the first two months FREE*.

2 1

RADIUS relocation error
by John Metcalfe 13 Feb '06

13 Feb '06

Hello: We are using FreeRADIUS version 1.1.02 with OpenSSL version 0.9.6g. The client supplicant is WinXP SP2 with WPA TKIP, PEAP and EAP MS-CHAP v2 configured. The NAS is a Symbol WS5100 WLAN switch configured to use RADIUS, TKIP and PEAP. We configured RADIUS and it starts (in debug mode) and we are able login to the server with test client software using raduser and shared secret password. On the XP client we are able to enter credentials (raduser and shared secret) and the Symbol switch receives and forwards the request to the RADIUS server with the following error in the switch log file: "failed 802.1x authentication for BSS " Then RADIUS server stops with the following error: radiusd: relocation error: /usr/lib/freeradius/rlm_eap_tls-1.0.2.so: undefined symbol: SSL_set_msg_callback Last week Alan said: You have two versions of OpenSSL installed on your system. One that you used to build FreeRADIUS, and another that your dynamic linker finds at run-time. The versions are incompatible. Are there anny other causes for the relocation message above? Also, how can we ensure we don't have two versions? Any advice is greatly appreciated. Thank you! Here is the startup. rad_recv: Access-Request packet from host 10.203.10.51:10666, id=222, length=140 User-Name = "raduser" NAS-IP-Address = Called-Station-Id = Calling-Station-Id = NAS-Identifier = NAS-Port = 29 Framed-MTU = 1000 NAS-Port-Type = Wireless-802.11 EAP-Message = 0x0201000c0172616475736572 Message-Authenticator = 0x46b0bbaca854130635f0fca5647e9a45 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "raduser", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: EAP packet type response id 1 length 12 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation modcall[authorize]: module "eap" returns updated for request 0 users: Matched entry raduser at line 90 modcall[authorize]: module "files" returns ok for request 0 modcall: leaving group authorize (returns updated) for request 0 rad_check_password: Found Auth-Type EAP auth: type "EAP" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_eap: EAP Identity rlm_eap: processing type tls radiusd: relocation error: /usr/local/lib/rlm_eap_tls-1.1.0.so: undefined symbol: SSL_set_msg_callback John Metcalfe, Jr. IT Specialist - AIS IBM Business Consulting Services, Public Sector Telephone: 240-396-5305 email: metcalfej(a)us.ibm.com

2 1

Thanks Alan
by Sean 13 Feb '06

13 Feb '06

On Mon, 2006-02-13 at 19:58 +0100, freeradius-users-request(a)lists.freeradius.org wrote: > Phil Mayers <p.mayers(a)imperial.ac.uk> wrote: > > Alan, in case anyone hasn't said it recently - you do an excellent > job > > maintaining this project under difficult conditions. You have my and > I > > suspect many other peoples sincere gratitude, and I can only hope > it's > > as rewarding for you as it is helpful for us. > > Thanks. > > FreeRADIUS is being used as part of the core product in at least 3 > startups I know of, and possibly as many as 5. It's at the point now > where it's getting me more professional attention than my other work > activities. > > Alan DeKok. Alan, I'd like to add my thanks also. FreeRadius is at the core of swarmhotspots.com and I'm amazed at the help and support that is available from you and the open source community. The best way to show your appreciation is to contribute something back. Regards, Sean http://swarmhotspots.com

2 1