- Freeradius-Users - lists.freeradius.org

Dial-up admin
by Allan Borman 18 Aug '05

18 Aug '05

Hi All, I have freeradius operational on a new X86 dell server platform running LINUX ES. I am having issues with Dialup-admin and PHP. Has anyone installed this interface successfully on LINUX ES. Is there any docs on this. I have read the docs that comes with Dialup-admin. Any help is appreciated in advance. Best Regards, Allan Borman.

1 0

RadZap Still given (negative Port)
by Sarkis Gabriel 18 Aug '05

18 Aug '05

After installing the CVS although not the latest one as of today but it was suppose to have the fix for the Negative port. radwho -ZR -N 192.116.123.118 -u74347 User-Name = "74347" Acct-Session-Id = "80a0000d" Acct-Status-Type = Stop NAS-IP-Address = 192.116.123.118 NAS-Port = -2136997875 Service-type = Login-User Framed-IP-Address = 10.10.13.254 Acct-Session-Time = 21495 Calling-Station-Id = "00:11:43:79:E7:" radwho -r 74347,74347,shell,S2157969421,Tue 08:58,192.116.123.118,10.10.13.254 The difference now is that a simple radwho -r used to show the S-21... but now it doesnt and if you do a radwho -ZR................ it shows a negative port. Thanks SArky

2 2

about authentication with PAP
by Lee Bobby 18 Aug '05

18 Aug '05

hi,all, I wanna use PAP to authenticate the users.But I don't know how to change the radiusd.conf. Can any one help me? Bobby from Beijing.

1 0

Freeradius VLANID Question
by Armin Krämer 18 Aug '05

18 Aug '05

Hi, at the moment i´m planing to build a Network based out of 20 VLAN over 8 Nortel switches. Depending on the given Layout of the Network I need to add some PC´s to more than one Port based VLAN. Is it posible to give the VLAN ID over the Radius Server, and is it possible to send more than one VLAN ID for one Client to the Switch? Does this work? Armin

2 1

About nastype and Checkrad
by Felix Chang 18 Aug '05

18 Aug '05

Sorry.. just something very confuse. I am using a FreeBsd computer as my NAS, may I know what is the nastype for this NAS? Is it "other"? I know when the nastype is "other", the radius server won't call for the checkrad. Therefore, if I want to use the checkrad to check for the simultaneous-use, what should I do? Do I really need to modify the script in the checkrad?? Any reference on how to modify the script in the checkrad? I am seeking it for a long time already through the internet but nothing was found. It is not much information about the checkrad. Please knidly reply. Thanks! Regards Felix ___________________________________________________________ Yahoo! Messenger - NEW crystal clear PC to PC calling worldwide with voicemail http://uk.messenger.yahoo.com

2 1

PPTP VPN with MPPE problem
by wangyan 18 Aug '05

18 Aug '05

Hi, I have a problem about Cisco PPTP VPN with MPPE Authentication. I use FreeRadius 1.0.4 with MySQL 4.1.10. I want to establish a PPTP VPN authenticated by FreeRadius. The problem is when I use pix525(os6.34), I can establish the PPTP VPN with MPPE 128, MS-CHAP. But when I use cisco7204(12.2-29), I can only establish the PPTP VPN without MPPE, MS-CHAP. When I use cisco7204 local db for authentication, I can establish the PPTP VPN with MPPE 128, MS-CHAP. I use the same configuration on radius server. I think the problem is freeradius. But it is strange. Because FreeRadius support mppe key and the pix test succeed. ----7204 configuration---- interface Virtual-Template1 ip unnumbered FastEthernet1/0 peer default ip address pool test ppp encrypt mppe auto stateful ppp authentication ms-chap chap ----windowsxp vpn client---- MS-CHAP, maximum strength encryption. It displayed the encrytion type is not match. 7204 debug ppp mppe event 5:41:33: Vi1 MS-CHAP: O SUCCESS id 29 len 4 15:41:33: Vi1 MPPE: don't understand all options, NAK 15:41:33: Vi1 MPPE: RADIUS keying material missing Any one can help me?

4 3

RE: SSL Problem???
by DeYoung, Brandon 18 Aug '05

18 Aug '05

I manged to fix this. Something was whackinated in my certificate generation process. Followed howto here: http://www.alphacore.net/contrib/nantes-wireless/eap-tls-HOWTO.html And all works well, even with XP SP2. ~Brandon -----Original Message----- From: DeYoung, Brandon Sent: Wednesday, August 17, 2005 12:38 PM To: 'FreeRadius users mailing list' Subject: RE: SSL Problem??? Thanks for the response Alan, My clients are WinXP SP2 boxes. I have several hundred of these which had been working fine for the last 6 months...until my server blew up. In fact I had more problems getting this setup to work with SP1 and made it a policy for everyone to put SP2 on before I would configure wireless for them. Any other thoughts/workarounds? ~Brandon -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Jamie Crawford Sent: Wednesday, August 17, 2005 12:22 PM To: freeradius-users(a)lists.freeradius.org; aland(a)ox.org Subject: Re: SSL Problem??? In the statement "Odds are they're XP SP2 boxes, where MS broke EAP" what exactly is broken. Will XP SP2 not work with PEAP? thanks, jamie Jamie Crawford, MCSE RHCT Network Analyst I Information Services Central Missouri State University Warrensburg, MO 64093 Phone:6605434357 Email:CRAWFORD@CMSU1.CMSU.EDU >>> aland(a)ox.org 08/17/05 2:10 PM >>> "DeYoung, Brandon" <Brandon.DeYoung(a)am.sony.com> wrote: > I *believe* this snippet from my debug output shows the problem: > > ----snip----- > eaptls_process returned 3 > TLS_accept:error in SSLv3 read client certificate A > rlm_eap_peap: EAPTLS_SUCCESS > -----snip------ > > This would *seem* to indicate a problem with my certificate generation. No, because it returns success. SSL is looking for a client certificate, and PEAP doesn't need one. SSL is then "helpful", and prints out error messages. The rest of your debug log shows that the client just stops talking to the server. Odds are they're XP SP2 boxes, where MS broke EAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Hotspot snmp problem
by Robin 17 Aug '05

17 Aug '05

Hello, A couple of us at work have been playing with a hotspot controller (Internet Subscriber Server II ISS-4000) using freeradius and mysql for authentication. We are having problems with checkrad (totally to do with the AP not being nice). I'm not sure what is the best way to handle this. I can snmpwalk the device however the output does not appear to have information regarding logins. The manufacturer does not respond to queries so I'm hoping someone else may have worked with this device. Any help is appreciated, Robin

2 8

RE: SSL Problem???
by DeYoung, Brandon 17 Aug '05

17 Aug '05

Thanks for the response Alan, My clients are WinXP SP2 boxes. I have several hundred of these which had been working fine for the last 6 months...until my server blew up. In fact I had more problems getting this setup to work with SP1 and made it a policy for everyone to put SP2 on before I would configure wireless for them. Any other thoughts/workarounds? ~Brandon -----Original Message----- From: freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org] On Behalf Of Jamie Crawford Sent: Wednesday, August 17, 2005 12:22 PM To: freeradius-users(a)lists.freeradius.org; aland(a)ox.org Subject: Re: SSL Problem??? In the statement "Odds are they're XP SP2 boxes, where MS broke EAP" what exactly is broken. Will XP SP2 not work with PEAP? thanks, jamie Jamie Crawford, MCSE RHCT Network Analyst I Information Services Central Missouri State University Warrensburg, MO 64093 Phone:6605434357 Email:CRAWFORD@CMSU1.CMSU.EDU >>> aland(a)ox.org 08/17/05 2:10 PM >>> "DeYoung, Brandon" <Brandon.DeYoung(a)am.sony.com> wrote: > I *believe* this snippet from my debug output shows the problem: > > ----snip----- > eaptls_process returned 3 > TLS_accept:error in SSLv3 read client certificate A > rlm_eap_peap: EAPTLS_SUCCESS > -----snip------ > > This would *seem* to indicate a problem with my certificate generation. No, because it returns success. SSL is looking for a client certificate, and PEAP doesn't need one. SSL is then "helpful", and prints out error messages. The rest of your debug log shows that the client just stops talking to the server. Odds are they're XP SP2 boxes, where MS broke EAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Re: SSL Problem???
by Jamie Crawford 17 Aug '05

17 Aug '05

In the statement "Odds are they're XP SP2 boxes, where MS broke EAP" what exactly is broken. Will XP SP2 not work with PEAP? thanks, jamie Jamie Crawford, MCSE RHCT Network Analyst I Information Services Central Missouri State University Warrensburg, MO 64093 Phone:6605434357 Email:CRAWFORD@CMSU1.CMSU.EDU >>> aland(a)ox.org 08/17/05 2:10 PM >>> "DeYoung, Brandon" <Brandon.DeYoung(a)am.sony.com> wrote: > I *believe* this snippet from my debug output shows the problem: > > ----snip----- > eaptls_process returned 3 > TLS_accept:error in SSLv3 read client certificate A > rlm_eap_peap: EAPTLS_SUCCESS > -----snip------ > > This would *seem* to indicate a problem with my certificate generation. No, because it returns success. SSL is looking for a client certificate, and PEAP doesn't need one. SSL is then "helpful", and prints out error messages. The rest of your debug log shows that the client just stops talking to the server. Odds are they're XP SP2 boxes, where MS broke EAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 1