- Freeradius-Users - lists.freeradius.org

Restricting access to a NAS
by Laker Netman 24 Jan '06

24 Jan '06

I have a Cisco 3660 router configured for dialup AAA through FR (1.0.5) to access our LAN. I also have the login to the router itself, for admin, authenticating through FR (MySQL backend). The same DB is used for all auth, so currently anyone with a dialup account could also telnet into the router. This leaves only my 'enable' password to prevent problems. I want to configure FR to eliminate this ability for all but a select group of users (admins). There are other devices I would like to add to the list later. I've been looking at huntgroups as the solution, but was unsure how (or if) this could be handled via sql rather than the users file. Is anyone doing this and could provide a sample config layout? Thx, Laker __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

4 3

Using Freeradius and bind as a dynamic dns
by Willem Pretorius 24 Jan '06

24 Jan '06

Hi, Have anyone been able to use freeradius with mysql and a bind dns server to update a domain say "dynamic.com" everytime a user connects? I want to create a local ADSL dynamic dns service for all my adsl users, eg. if the login name is "companyX" with ip "165.146.165.78" I want to update the bind dns everytime a user connects, eg. "companyX.dynamic.com" Any Ideas? -- Regards Willem Pretorius I-Soft Internet Cape Town Tel: 0861-ISOFT-ADSL (021-421-2477) Fax: 0866 733 292 _/\\/¯¯¯¯¯¯\\/\\_

3 2

REPOST: Realms and users file.
by User for Free Radius mail list 24 Jan '06

24 Jan '06

I'm sure someone can give me a quick answer to this problem. I have one radius server that handles request in the form: username username(a)domain1.com username(a)domain2.net We this setup in our proxy.conf file: realm domain1.com { type = radius authhost = LOCAL accthost = LOCAL } realm domain2.net { type = radius authhost = server.domain2.net:1645 accthost = LOCAL secret = ********** } And uses the "users" file for local stuff.... Everything works fine except when the username at the realm domain2.net server matches a name in the "users" file on the domain1.com server. We have usernames on the domain1.com "users" file that reject: uername Auth-Type := Reject These users have DSL access but no phone line access and belong to the domain1.com server. But once in a while they will have the same username on each system. The result is domain2.net will Auth OK them but they cannot get on line because domain1.com will reject them because of the "users" file. How do I fix this problem? Thanks! Ken

1 0

NAS table
by Santiago Balaguer García 24 Jan '06

24 Jan '06

3 2

How to control connection to LDAP
by Tim_Crouch＠uttyler.edu 24 Jan '06

24 Jan '06

I have noticed that Radius connects to my LDAP server and maintains that connection open for many many hours for user lookups. Is there a way to have it connect only when a suer needs to authenticate? Are there pros/cons to doing something like that? Thanks! Tim Crouch Systems Administrator Campus Computing Services 903-566-7476

1 0

RE: Fw: Performance features of FreeRadius
by Marta Lajas 24 Jan '06

24 Jan '06

Hy Alan, I am interested in the following statement: > And unless you have a million users, performance of the server isn't > really an issue. FreeRADIUS can handle multiple hundreds of thousands > of users on a commodity PC without any problems. Why a million of users? Which are the problems that may appear? Are you refering to a million of users simultaneously connected to the FR server? Thanks and regards, Marta Rafael Roldán <rafael.roldan(a)panel.es> escribió: ----- Original Message ----- From: "Alan DeKok" To: "FreeRadius users mailing list" Sent: Friday, January 20, 2006 7:12 PM Subject: Re: Performance features of FreeRadius > Marta Lajas wrote: > > I would like to know where I can find information about the > > performance features of the FreeRadius product. > > As in how well it performs? That depends on your system and database. > > The short answer is that FreeRADIUS will always be faster than the > database you use to store user configuration. > > And unless you have a million users, performance of the server isn't > really an issue. FreeRADIUS can handle multiple hundreds of thousands > of users on a commodity PC without any problems. > > Alan DeKok. > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > --------------------------------- LLama Gratis a cualquier PC del Mundo. Llamadas a fijos y móviles desde 1 céntimo por minuto. http://es.voice.yahoo.com

2 1

How to log users in radutmp
by Torkel Mathisen 24 Jan '06

24 Jan '06

Hi I have a rather simple freeradius server. I run freeradius 1.0.5 on solaris 10 with PEAP/MS-CHAPv2 authentication through the users file. I want to see who's connected with radwho, but when I run that I only get: # radwho Radwho: Error reading /usr/local/var/log/radius/radutmp: No such file or directory I don't have that radutmp file. How do I get freeradius to log users in that file? Regards, Torkel

2 1

RFC3576
by Chris Knipe 24 Jan '06

24 Jan '06

Hi, Uhm, any support for RFC3576, added or planned? Regards, Chris.

2 1

IPPOOL PROBLE
by Rafael Roldán 24 Jan '06

24 Jan '06

Hy all, I installed FR 1.0.5 in a Solaris 8 machine: $ ./configure --localstatedir=/var --sysconfdir=/etc --with-openssl-libraries=/usr/local/ssl/lib --with-openssl-includes=/usr/local/ssl/include $ make # make install and all seemed to be OK. But when I tried to test the ippool module I obtained a segmentation fault when I run radiusd. .... Module: Loaded radutmp radutmp: filename = "/var/log/radius/radutmp" radutmp: username = "%{User-Name}" radutmp: case_sensitive = yes radutmp: check_with_nas = yes radutmp: perm = 384 radutmp: callerid = yes Module: Instantiated radutmp (radutmp) Segmentation Fault - core dumped In my rlm_ippool directory I have: # pwd .../freeradius-1.0.5/src/modules/rlm_ippool # ls acconfig.h config.log configure.in Makefile.in rlm_ippool_tool.c config.h config.status CVS rlm_ippool.c rlm_ippool_tool.pod config.h.in configure Makefile rlm_ippool_tool.8 # Has the rlm_ippool module compiled well? How can I resolve the problem? Thank you very much Rafa

2 2

Bug 314..
by Rohaizam Abu Bakar 24 Jan '06

24 Jan '06

Has bug 314 been fixed? Problem with rlm_otp on FreeBSD 6.0 thanks.. --haizam

3 3