- Freeradius-Users - lists.freeradius.org

Simultaneous-Use check MySQL
by David M. 17 Oct '05

17 Oct '05

Hi, I'm experiencing problems with Simultaneous-Use and MySQL. Due I have two freeradius servers, I cannot use for accounting radutmp because if a radius gets a stop packet and the start one went to the other radius the driver fails, so all accounting is based on MySQL. The MySQL queries that the radius perform are the followings (using standard sql.conf file with simul_count_query uncommented, the file is attached) 1- authorize_check_query (gets the Simultaneous-Use := 1) 2- authorize_group_check_query 3- authorize_reply_query 4- authorize_group_reply_query 5- simul_count_query 6- postauth_query 7- accounting_start_query 8- accounting_update_query (updates the radacct table with the IP address from the pool) If I try to connect with the same user and the previous conection still established, this is the sequence of queries: 1- authorize_check_query 2- authorize_group_check_query 3- authorize_reply_query 4- authorize_group_reply_query 5- simul_count_query **returns 1** 6- simul_verify_query 7- accounting stop query **performs a stop in the previously established session** 8- postauth_query 9- accounting_start_query 10- accounting_update_query (updates the radacct table with the IP address from the pool) I think either simul_verify_query is wrong or there is something wrong with sql.conf. I've attached it. If I change Simultaneous-Use := 0 the user cannot connect as I should behave and the logs reports "Auth: Multiple logins (max 0)" Freeradius and freeradius-mysql are etch/testing packages Debian official packages (version 1.0.4-2) Any help would be appreciated, thanks in advance -- David

3 5

Wireless Provisioning Service Protocol
by King, Michael 17 Oct '05

17 Oct '05

Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS? http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/p rotocol/portal_wireless_provisioning_service_protocol.asp It sounds really cool in theory. From: http://www.microsoft.com/downloads/details.aspx?FamilyId=9ADF7496-0D50-4 138-848E-9BC810B83C01&displaylang=en With WPS technology, new and existing customers can connect to your Wi-Fi network without manual configuration of the computer or network connection.

6 9

Still problems with cert authentication XP
by Thuis Algemeen 16 Oct '05

16 Oct '05

Hi everybody, Ik still have a problem with validating the server certificate. See the RASTLS log below: ---------------------------- [1280] 17:19:40:078: EapTlsInvokeIdentityUI [1280] 17:19:40:078: GetCertInfo [1280] 17:19:40:156: FCheckSCardCertAndCanOpenSilentContext [1280] 17:19:40:156: FGetEKUUsage [1280] 17:19:40:156: Acquiring Context for Container Name: {226FADA0-66DE-4423-BFBF-448D710E1BF2}, ProvName: Microsoft Base Cryptographic Provider v1.0, ProvType 0x1 [1280] 17:19:40:156: FCheckTimeValidity [1280] 17:19:40:156: Add Selected Cert to List [1280] 17:19:40:156: FCheckSCardCertAndCanOpenSilentContext [1280] 17:19:40:156: FGetEKUUsage [1280] 17:19:40:156: Acquiring Context for Container Name: {F4FC41A8-ECDF-4B9A-A613-A457D74DDFF8}, ProvName: Microsoft Enhanced Cryptographic Provider v1.0, ProvType 0x1 [1280] 17:19:40:156: FCheckTimeValidity [1280] 17:19:40:171: Add Selected Cert to List [1280] 17:19:40:171: GroupCertificates [1280] 17:19:46:750: [1280] 17:19:46:750: EapTlsBegin(Jurgen Tessers) [1280] 17:19:46:750: State change to Initial [1280] 17:19:46:750: EapTlsBegin: Detected 8021X authentication [1280] 17:19:46:750: MaxTLSMessageLength is now 16384 [1280] 17:19:46:750: [1280] 17:19:46:750: EapTlsMakeMessage(jurgen tessers) [1280] 17:19:46:750: >> Received Request (Code: 1) packet: Id: 1, Length: 6, Type: 13, TLS blob length: 0. Flags: S [1280] 17:19:46:750: EapTlsCMakeMessage [1280] 17:19:46:750: EapTlsReset [1280] 17:19:46:750: State change to Initial [1280] 17:19:46:750: GetCredentials [1280] 17:19:46:750: Flag is Client and Store is Current User [1280] 17:19:46:750: GetCachedCredentials [1280] 17:19:46:750: FreeCachedCredentials [1280] 17:19:46:750: AssociatePinWithCertificate [1280] 17:19:46:750: The name in the certificate is: Jurgen Tessers [1280] 17:19:46:750: Will validate server cert [1280] 17:19:46:796: MakeReplyMessage [1280] 17:19:46:796: SecurityContextFunction [1280] 17:19:46:796: InitializeSecurityContext returned 0x90312 [1280] 17:19:46:796: State change to SentHello [1280] 17:19:46:796: BuildPacket [1280] 17:19:46:796: << Sending Response (Code: 2) packet: Id: 1, Length: 80, Type: 13, TLS blob length: 70. Flags: L [2408] 17:19:46:812: [2408] 17:19:46:812: EapTlsMakeMessage(jurgen tessers) [2408] 17:19:46:812: >> Received Request (Code: 1) packet: Id: 2, Length: 1030, Type: 13, TLS blob length: 1020. Flags: L [2408] 17:19:46:812: EapTlsCMakeMessage [2408] 17:19:46:812: MakeReplyMessage [2408] 17:19:46:812: Reallocating input TLS blob buffer [2408] 17:19:46:812: SecurityContextFunction [2408] 17:19:46:968: InitializeSecurityContext returned 0x80096004 [2408] 17:19:46:968: State change to RecdFinished. Error: 0x80096004 [2408] 17:19:46:968: BuildPacket [2408] 17:19:46:968: << Sending Response (Code: 2) packet: Id: 2, Length: 6, Type: 13, TLS blob length: 0. Flags: [2408] 17:19:46:968: [2408] 17:19:46:968: EapTlsMakeMessage(jurgen tessers) [2408] 17:19:46:968: >> Received Request (Code: 1) packet: Id: 3, Length: 10, Type: 13, TLS blob length: 0. Flags: L [2408] 17:19:46:968: EapTlsCMakeMessage [2408] 17:19:46:968: Unexpected code: 1 in state RecdFinished [3744] 17:20:17:015: EapTlsEnd [3744] 17:20:17:015: EapTlsEnd(jurgen tessers) [3744] 17:20:17:015: Auth failed so freeing cached creds. [3744] 17:20:17:015: FreeCachedCredentials [3744] 17:20:17:015: [3744] 17:20:17:015: EapTlsBegin(Jurgen Tessers) [3744] 17:20:17:015: State change to Initial [3744] 17:20:17:015: EapTlsBegin: Detected 8021X authentication [3744] 17:20:17:015: MaxTLSMessageLength is now 16384 [3744] 17:20:17:015: [3744] 17:20:17:015: EapTlsMakeMessage(jurgen tessers) [3744] 17:20:17:015: >> Received Request (Code: 1) packet: Id: 2, Length: 6, Type: 13, TLS blob length: 0. Flags: S [3744] 17:20:17:015: EapTlsCMakeMessage [3744] 17:20:17:015: EapTlsReset [3744] 17:20:17:015: State change to Initial [3744] 17:20:17:015: GetCredentials [3744] 17:20:17:015: Flag is Client and Store is Current User [3744] 17:20:17:015: GetCachedCredentials [3744] 17:20:17:015: FreeCachedCredentials [3744] 17:20:17:015: AssociatePinWithCertificate [3744] 17:20:17:031: The name in the certificate is: Jurgen Tessers [3744] 17:20:17:031: Will validate server cert [3744] 17:20:17:031: MakeReplyMessage [3744] 17:20:17:031: SecurityContextFunction [3744] 17:20:17:031: InitializeSecurityContext returned 0x90312 [3744] 17:20:17:031: State change to SentHello [3744] 17:20:17:031: BuildPacket [3744] 17:20:17:031: << Sending Response (Code: 2) packet: Id: 2, Length: 80, Type: 13, TLS blob length: 70. Flags: L [1904] 17:20:17:046: [1904] 17:20:17:046: EapTlsMakeMessage(jurgen tessers) [1904] 17:20:17:046: >> Received Request (Code: 1) packet: Id: 3, Length: 1030, Type: 13, TLS blob length: 1020. Flags: L [1904] 17:20:17:046: EapTlsCMakeMessage [1904] 17:20:17:046: MakeReplyMessage [1904] 17:20:17:046: Reallocating input TLS blob buffer [1904] 17:20:17:046: SecurityContextFunction [1904] 17:20:17:062: InitializeSecurityContext returned 0x80096004 [1904] 17:20:17:062: State change to RecdFinished. Error: 0x80096004 [1904] 17:20:17:062: BuildPacket [1904] 17:20:17:062: << Sending Response (Code: 2) packet: Id: 3, Length: 6, Type: 13, TLS blob length: 0. Flags: [1904] 17:20:17:062: [1904] 17:20:17:062: EapTlsMakeMessage(jurgen tessers) [1904] 17:20:17:062: >> Received Request (Code: 1) packet: Id: 4, Length: 10, Type: 13, TLS blob length: 0. Flags: L [1904] 17:20:17:062: EapTlsCMakeMessage [1904] 17:20:17:062: Unexpected code: 1 in state RecdFinished [1904] 17:20:47:171: EapTlsEnd [1904] 17:20:47:171: EapTlsEnd(jurgen tessers) [1904] 17:20:47:171: Auth failed so freeing cached creds. [1904] 17:20:47:171: FreeCachedCredentials [1904] 17:20:47:171: [1904] 17:20:47:171: EapTlsBegin(Jurgen Tessers) [1904] 17:20:47:171: State change to Initial [1904] 17:20:47:171: EapTlsBegin: Detected 8021X authentication [1904] 17:20:47:171: MaxTLSMessageLength is now 16384 [1904] 17:20:47:171: [1904] 17:20:47:171: EapTlsMakeMessage(jurgen tessers) [1904] 17:20:47:171: >> Received Request (Code: 1) packet: Id: 2, Length: 6, Type: 13, TLS blob length: 0. Flags: S [1904] 17:20:47:171: EapTlsCMakeMessage [1904] 17:20:47:171: EapTlsReset [1904] 17:20:47:171: State change to Initial [1904] 17:20:47:171: GetCredentials [1904] 17:20:47:171: Flag is Client and Store is Current User [1904] 17:20:47:171: GetCachedCredentials [1904] 17:20:47:171: FreeCachedCredentials [1904] 17:20:47:187: AssociatePinWithCertificate [1904] 17:20:47:187: The name in the certificate is: Jurgen Tessers [1904] 17:20:47:187: Will validate server cert [1904] 17:20:47:187: MakeReplyMessage [1904] 17:20:47:187: SecurityContextFunction [1904] 17:20:47:187: InitializeSecurityContext returned 0x90312 [1904] 17:20:47:187: State change to SentHello [1904] 17:20:47:187: BuildPacket [1904] 17:20:47:187: << Sending Response (Code: 2) packet: Id: 2, Length: 80, Type: 13, TLS blob length: 70. Flags: L [1904] 17:20:47:203: [1904] 17:20:47:203: EapTlsMakeMessage(jurgen tessers) [1904] 17:20:47:203: >> Received Request (Code: 1) packet: Id: 3, Length: 1030, Type: 13, TLS blob length: 1020. Flags: L [1904] 17:20:47:203: EapTlsCMakeMessage [1904] 17:20:47:203: MakeReplyMessage [1904] 17:20:47:203: Reallocating input TLS blob buffer [1904] 17:20:47:203: SecurityContextFunction [1904] 17:20:47:203: InitializeSecurityContext returned 0x80096004 [1904] 17:20:47:203: State change to RecdFinished. Error: 0x80096004 [1904] 17:20:47:203: BuildPacket [1904] 17:20:47:203: << Sending Response (Code: 2) packet: Id: 3, Length: 6, Type: 13, TLS blob length: 0. Flags: [1904] 17:20:47:218: [1904] 17:20:47:218: EapTlsMakeMessage(jurgen tessers) [1904] 17:20:47:218: >> Received Request (Code: 1) packet: Id: 4, Length: 10, Type: 13, TLS blob length: 0. Flags: L [1904] 17:20:47:218: EapTlsCMakeMessage [1904] 17:20:47:218: Unexpected code: 1 in state RecdFinished [1904] 17:21:17:375: EapTlsEnd [1904] 17:21:17:375: EapTlsEnd(jurgen tessers) [1904] 17:21:17:375: Auth failed so freeing cached creds. [1904] 17:21:17:375: FreeCachedCredentials [1904] 17:21:17:375: [1904] 17:21:17:375: EapTlsBegin(Jurgen Tessers) [1904] 17:21:17:375: State change to Initial [1904] 17:21:17:375: EapTlsBegin: Detected 8021X authentication [1904] 17:21:17:375: MaxTLSMessageLength is now 16384 [1904] 17:21:17:375: [1904] 17:21:17:375: EapTlsMakeMessage(jurgen tessers) [1904] 17:21:17:375: >> Received Request (Code: 1) packet: Id: 2, Length: 6, Type: 13, TLS blob length: 0. Flags: S [1904] 17:21:17:375: EapTlsCMakeMessage [1904] 17:21:17:375: EapTlsReset [1904] 17:21:17:375: State change to Initial [1904] 17:21:17:375: GetCredentials [1904] 17:21:17:375: Flag is Client and Store is Current User [1904] 17:21:17:375: GetCachedCredentials [1904] 17:21:17:375: FreeCachedCredentials [1904] 17:21:17:390: AssociatePinWithCertificate [1904] 17:21:17:390: The name in the certificate is: Jurgen Tessers [1904] 17:21:17:390: Will validate server cert [1904] 17:21:17:390: MakeReplyMessage [1904] 17:21:17:390: SecurityContextFunction [1904] 17:21:17:390: InitializeSecurityContext returned 0x90312 [1904] 17:21:17:390: State change to SentHello [1904] 17:21:17:390: BuildPacket [1904] 17:21:17:390: << Sending Response (Code: 2) packet: Id: 2, Length: 80, Type: 13, TLS blob length: 70. Flags: L [1904] 17:21:17:406: [1904] 17:21:17:406: EapTlsMakeMessage(jurgen tessers) [1904] 17:21:17:406: >> Received Request (Code: 1) packet: Id: 3, Length: 1030, Type: 13, TLS blob length: 1020. Flags: L [1904] 17:21:17:406: EapTlsCMakeMessage [1904] 17:21:17:406: MakeReplyMessage [1904] 17:21:17:406: Reallocating input TLS blob buffer [1904] 17:21:17:406: SecurityContextFunction [1904] 17:21:17:406: InitializeSecurityContext returned 0x80096004 [1904] 17:21:17:406: State change to RecdFinished. Error: 0x80096004 [1904] 17:21:17:406: BuildPacket [1904] 17:21:17:406: << Sending Response (Code: 2) packet: Id: 3, Length: 6, Type: 13, TLS blob length: 0. Flags: [1904] 17:21:17:421: [1904] 17:21:17:421: EapTlsMakeMessage(jurgen tessers) [1904] 17:21:17:421: >> Received Request (Code: 1) packet: Id: 4, Length: 10, Type: 13, TLS blob length: 0. Flags: L [1904] 17:21:17:421: EapTlsCMakeMessage [1904] 17:21:17:421: Unexpected code: 1 in state RecdFinished [1904] 17:21:47:546: EapTlsEnd [1904] 17:21:47:546: EapTlsEnd(jurgen tessers) [1904] 17:21:47:546: Auth failed so freeing cached creds. [1904] 17:21:47:546: FreeCachedCredentials [1904] 17:21:47:546: [1904] 17:21:47:546: EapTlsBegin(Jurgen Tessers) [1904] 17:21:47:546: State change to Initial [1904] 17:21:47:546: EapTlsBegin: Detected 8021X authentication [1904] 17:21:47:546: MaxTLSMessageLength is now 16384 [1904] 17:21:47:546: [1904] 17:21:47:546: EapTlsMakeMessage(jurgen tessers) [1904] 17:21:47:546: >> Received Request (Code: 1) packet: Id: 2, Length: 6, Type: 13, TLS blob length: 0. Flags: S [1904] 17:21:47:546: EapTlsCMakeMessage [1904] 17:21:47:546: EapTlsReset [1904] 17:21:47:546: State change to Initial [1904] 17:21:47:546: GetCredentials [1904] 17:21:47:546: Flag is Client and Store is Current User [1904] 17:21:47:546: GetCachedCredentials [1904] 17:21:47:546: FreeCachedCredentials [1904] 17:21:47:562: AssociatePinWithCertificate [1904] 17:21:47:562: The name in the certificate is: Jurgen Tessers [1904] 17:21:47:562: Will validate server cert [1904] 17:21:47:562: MakeReplyMessage [1904] 17:21:47:562: SecurityContextFunction [1904] 17:21:47:562: InitializeSecurityContext returned 0x90312 [1904] 17:21:47:562: State change to SentHello [1904] 17:21:47:562: BuildPacket [1904] 17:21:47:562: << Sending Response (Code: 2) packet: Id: 2, Length: 80, Type: 13, TLS blob length: 70. Flags: L [1904] 17:21:47:578: [1904] 17:21:47:578: EapTlsMakeMessage(jurgen tessers) [1904] 17:21:47:578: >> Received Request (Code: 1) packet: Id: 3, Length: 1030, Type: 13, TLS blob length: 1020. Flags: L [1904] 17:21:47:578: EapTlsCMakeMessage [1904] 17:21:47:578: MakeReplyMessage [1904] 17:21:47:578: Reallocating input TLS blob buffer [1904] 17:21:47:578: SecurityContextFunction [1904] 17:21:47:578: InitializeSecurityContext returned 0x80096004 [1904] 17:21:47:578: State change to RecdFinished. Error: 0x80096004 [1904] 17:21:47:578: BuildPacket [1904] 17:21:47:578: << Sending Response (Code: 2) packet: Id: 3, Length: 6, Type: 13, TLS blob length: 0. Flags: [1904] 17:21:47:593: [1904] 17:21:47:593: EapTlsMakeMessage(jurgen tessers) [1904] 17:21:47:593: >> Received Request (Code: 1) packet: Id: 4, Length: 10, Type: 13, TLS blob length: 0. Flags: L [1904] 17:21:47:593: EapTlsCMakeMessage [1904] 17:21:47:593: Unexpected code: 1 in state RecdFinished [1904] 17:22:17:593: EapTlsEnd [1904] 17:22:17:593: EapTlsEnd(jurgen tessers) [1904] 17:22:17:593: Auth failed so freeing cached creds. [1904] 17:22:17:593: FreeCachedCredentials [1904] 17:22:17:593: [1904] 17:22:17:593: EapTlsBegin(Jurgen Tessers) [1904] 17:22:17:593: State change to Initial [1904] 17:22:17:593: EapTlsBegin: Detected 8021X authentication [1904] 17:22:17:593: MaxTLSMessageLength is now 16384 [1904] 17:22:17:593: [1904] 17:22:17:593: EapTlsMakeMessage(jurgen tessers) [1904] 17:22:17:593: >> Received Request (Code: 1) packet: Id: 2, Length: 6, Type: 13, TLS blob length: 0. Flags: S [1904] 17:22:17:593: EapTlsCMakeMessage [1904] 17:22:17:593: EapTlsReset [1904] 17:22:17:593: State change to Initial [1904] 17:22:17:593: GetCredentials [1904] 17:22:17:593: Flag is Client and Store is Current User [1904] 17:22:17:593: GetCachedCredentials [1904] 17:22:17:593: FreeCachedCredentials [1904] 17:22:17:609: AssociatePinWithCertificate [1904] 17:22:17:609: The name in the certificate is: Jurgen Tessers [1904] 17:22:17:609: Will validate server cert [1904] 17:22:17:609: MakeReplyMessage [1904] 17:22:17:609: SecurityContextFunction [1904] 17:22:17:609: InitializeSecurityContext returned 0x90312 [1904] 17:22:17:609: State change to SentHello [1904] 17:22:17:609: BuildPacket [1904] 17:22:17:609: << Sending Response (Code: 2) packet: Id: 2, Length: 80, Type: 13, TLS blob length: 70. Flags: L [1904] 17:22:17:625: [1904] 17:22:17:625: EapTlsMakeMessage(jurgen tessers) [1904] 17:22:17:625: >> Received Request (Code: 1) packet: Id: 3, Length: 1030, Type: 13, TLS blob length: 1020. Flags: L [1904] 17:22:17:625: EapTlsCMakeMessage [1904] 17:22:17:625: MakeReplyMessage [1904] 17:22:17:625: Reallocating input TLS blob buffer [1904] 17:22:17:625: SecurityContextFunction [1904] 17:22:17:625: InitializeSecurityContext returned 0x80096004 [1904] 17:22:17:625: State change to RecdFinished. Error: 0x80096004 [1904] 17:22:17:625: BuildPacket [1904] 17:22:17:625: << Sending Response (Code: 2) packet: Id: 3, Length: 6, Type: 13, TLS blob length: 0. Flags: [1904] 17:22:17:640: [1904] 17:22:17:640: EapTlsMakeMessage(jurgen tessers) [1904] 17:22:17:640: >> Received Request (Code: 1) packet: Id: 4, Length: 10, Type: 13, TLS blob length: 0. Flags: L [1904] 17:22:17:640: EapTlsCMakeMessage [1904] 17:22:17:640: Unexpected code: 1 in state RecdFinished

1 0

Re: undefined reference 'md4_calc' compile error...
by Andrew Teixeira 16 Oct '05

16 Oct '05

I came across error while trying to compile freeradius-1.0.5 today and was looking for a solution. I found a message on the list from September 12 that no one responded to, so I looked into the problem a little further and found a solution (at least for that section of the compile). The problem is in the Makefile for rlm_mschap in that it doesn't include the md4.o object file when it compiles smbencrypt.c. Therefore, I created the following patch to solve this problem: --- src/modules/rlm_mschap/Makefile 2004-06-02 12:17:07.000000000 -0400 +++ src/modules/rlm_mschap/Makefile.new 2005-10-14 10:47:53.000000000 -0400 @@ -14,7 +14,7 @@ $(DYNAMIC_OBJS): $(HEADERS) smbencrypt: smbencrypt.o smbdes.o $(HEADERS) - $(CC) -I../../include $(LDFLAGS) -o smbencrypt smbencrypt.o smbdes.o ..\ /../lib/libradius.a + $(CC) -I../../include $(LDFLAGS) -o smbencrypt smbencrypt.o smbdes.o ..\ /../lib/libradius.a ../../lib/md4.o smbencrypt-install: $(INSTALL) -d -m 755 $(R)$(bindir) I still have some further problems compiling, but this stopped the 'md4_calc' compile error.

2 3

Re: Login incorrect
by Andrea Bencini 16 Oct '05

16 Oct '05

> > In the Colubris I put "andreabencini" password. > > Did you tell the server that was the correct password? > > > Sat Oct 15 17:10:10 2005 : Info: rlm_eap_md5: User-Password is required for > > EAP-MD5 authentication > > Sat Oct 15 17:10:10 2005 : Debug: rlm_eap: Handler failed in EAP/md5 > > Nope. > > Alan DeKok. Alan I don't understand what you are saying. Could you explain to me with more detail? Thank Andrea

2 1

Re: clients.conf problem
by dev_null 16 Oct '05

16 Oct '05

Strange, I don't know why it won't work to me. Ok. Never mind. Thanks ----- Original Message Follows ----- > I've tested that config, and ones with 500K clients. They all work > for me. > > Alan DeKok. > -- Naručite svoj XXLadsl - instalacija i modem i dalje za samo 1 kn! Postanite i vi korisnik ultra brzog Interneta! http://www.iskon.biz/xxladsl

3 2

Rejecting auth requests
by Tim O'Donovan 15 Oct '05

15 Oct '05

Hi, Does anyone know of a simple way to invoke an Access-Reject for a user at the authenticate stage? Without changing the stored password. I have tried altering the 'op' to != and all manner of other combinations from within the rad_check table without success. We would just like to be able to ban/unban a user with a single SQL update statement. Kind regards, Tim O'Donovan

3 3

Login incorrect
by Andrea Bencini 15 Oct '05

15 Oct '05

I install FC4 with FreeRadius-1.0.4 and I have Colubris Network CN3000. My Colubris dasn't login (the messages, clients.conf and users configurations are below) In the Colubris I put "andreabencini" password. -------------------------------- MESSAGES . . . Sat Oct 15 17:10:10 2005 : Debug: Waking up in 31 seconds... Sat Oct 15 17:10:10 2005 : Debug: Thread 4 got semaphore Sat Oct 15 17:10:10 2005 : Debug: Thread 4 handling request 3, (1 handled so far) Acct-Session-Id = "67de5136" NAS-Port = 0 NAS-Port-Type = Wireless-802.11 User-Name = "L005-00076" Calling-Station-Id = "00-02-2D-A6-01-E9" Called-Station-Id = "00-03-52-00-0D-E8" Framed-IP-Address = 10.100.0.37 EAP-Message = 0x02c1002004109013bf17eda858f4a4bcb624e2b5f09e4c3030352d3030303736 State = 0x3fc4e80ba3884fe8c338f3da57f4b36f NAS-Identifier = "L005-00076" NAS-IP-Address = 10.100.0.37 Framed-MTU = 1496 Connect-Info = "HTTPS" Service-Type = Administrative-User Message-Authenticator = 0x92496a7f16273b8a17e589ca0527f580 Sat Oct 15 17:10:10 2005 : Debug: Processing the authorize section of radiusd.conf Sat Oct 15 17:10:10 2005 : Debug: modcall: entering group authorize for request 3 . . . Sat Oct 15 17:10:10 2005 : Debug: rad_check_password: Found Auth-Type EAP Sat Oct 15 17:10:10 2005 : Debug: auth: type "EAP" Sat Oct 15 17:10:10 2005 : Debug: Processing the authenticate section of radiusd.conf Sat Oct 15 17:10:10 2005 : Debug: modcall: entering group authenticate for request 3 Sat Oct 15 17:10:10 2005 : Debug: modsingle[authenticate]: calling eap (rlm_eap) for request 3 Sat Oct 15 17:10:10 2005 : Debug: rlm_eap: Request found, released from the list Sat Oct 15 17:10:10 2005 : Debug: rlm_eap: EAP/md5 Sat Oct 15 17:10:10 2005 : Debug: rlm_eap: processing type md5 Sat Oct 15 17:10:10 2005 : Info: rlm_eap_md5: User-Password is required for EAP-MD5 authentication Sat Oct 15 17:10:10 2005 : Debug: rlm_eap: Handler failed in EAP/md5 Sat Oct 15 17:10:10 2005 : Debug: rlm_eap: Failed in EAP select Sat Oct 15 17:10:10 2005 : Debug: modsingle[authenticate]: returned from eap (rlm_eap) for request 3 Sat Oct 15 17:10:10 2005 : Debug: modcall[authenticate]: module "eap" returns invalid for request 3 Sat Oct 15 17:10:10 2005 : Debug: modcall: group authenticate returns invalid for request 3 Sat Oct 15 17:10:10 2005 : Debug: auth: Failed to validate the user. Sat Oct 15 17:10:10 2005 : Auth: Login incorrect: [L005-00076/<no User-Password attribute>] (from client miarete-privata port 0 cli 00-02-2D-A6-01-E9) Sat Oct 15 17:10:10 2005 : Debug: Delaying request 3 for 1 seconds Sat Oct 15 17:10:10 2005 : Debug: Finished request 3 Sat Oct 15 17:10:10 2005 : Debug: Going to the next request CLIENTS.CONF client 10.100.0.37 { secret = andreabencini shortname = miarete-privata } USERS L005-0076 User-Password == "andreabencini" -------------------------------- Can you help me thank Andrea

2 1

auditing / biling users
by Infusino, Michael - ADP Dataphile 15 Oct '05

15 Oct '05

Hello, Would anyone have an idea on how to record the time the user logs in and more importantly the time the user logs off/disconnects from the system. I would prefer the information to be logged in the radius log file specified in the radiusd.conf. I am using the password/nis file for authentication. Thanks michael _ This message and any attachments are intended only for the use of the addressee and may contain information that is privileged and confidential. If the reader of the message is not the intended recipient or an authorized representative of the intended recipient, you are hereby notified that any dissemination of this communication is strictly prohibited. If you have received this communication in error, please notify us immediately by e-mail and delete the message and any attachments from your system.

1 0

FreeRadius/PEAP
by James Taylor 15 Oct '05

15 Oct '05

Hi, I am trying to secure my wireless connections using PEAP-TLS MSChapv2 to authenticate users against my Linux /etc/shadow; /etc/password/; and /etc/group files. I would like to use PAM but UNIX will work too. I do not want to use the USERS file as it stores passwords in clear text and that is what we are trying to avoid. All my tests conclude that this functionality will not work. I am able to Auth just fine using the USERS file with a username and password. Any info or direction would be greatly appreciated. Thank you James

6 9