- Freeradius-Users - lists.freeradius.org

PEAP Configuration
by Juan Daniel Moreno 16 Aug '05

16 Aug '05

Hello, I am trying to configure PEAP protocol with my freeRadius 1.0.4. I have already configured PAP, CHAP, MS-CHAP v1, MS-CHAP v2, EAP-md5, LEAP but I really don't understand the documentations about it. Can anybody help me? Thanks a lot. JUAN DANIEL MORENO

2 1

Require NAS dependant radius return attributes
by Ben Thompson 16 Aug '05

16 Aug '05

Hi I have a problem which I want to find out if I can solve using FreeRADIUS. I am setting up an 802.1x based network where I want to use RADIUS assigned VLAN's. I have succesfully tested this with Cisco wireless access point's and FreeRADIUS 1.0.1 using a users file like this :- >>>snip>>> test3999 NT-Password := "35C8397B2320E568467904861A2AF40F" Tunnel-Private-Group-ID:1 = 3999, Fall-Through = Yes test4025 NT-Password := "35C8397B2320E568467904861A2AF40F" Tunnel-Private-Group-ID:1 = 4025, Fall-Through = Yes DEFAULT Tunnel-Type:1 = VLAN, Tunnel-Medium-Type:1 = IEEE-802 >>>snip>>> The trouble is I need to assign different VLAN's to users depending which access point they connect from. What I would like to know is if it is possible to use Huntgroups to look up the VLAN id based on something like the IP address of the access point? Example: Let's say I have two access points called AP1 and AP2. If a user connects to AP1, I want the RADIUS server to look up from somewhere what is the correct VLAN to assign to people using AP1 and return the correct attributes to suit. If the same user connects to AP2 I want the VLAN id to be the correct one for AP2 which may be different to AP1. Any advice would be appreciated, Ben Thompson

2 1

radius_pam integraion with rsa securid technology
by mukherji rakesh 16 Aug '05

16 Aug '05

Dear All I am urgently looking for your help to integrate pam_radius module with my RSA securid server.I am implementing rsa two factor authentication technolgy for my client but getting trouble while installing in linux 9 as rsa has no client software for this upgraded version of Linux.They recomended to use radius_pam module but I am not able to configure it.I have enabled radius server in my rsa server but clients like linux9 is not able to talk with it.I have no idea of the things... So please help me regarding the same. Thanks and regards, Rakesh Mukherjee From:India ( english only ) --------------------------------- Check out Yahoo! India Rakhi Special for Rakhi shopping, contests and lots more. http://in.promos.yahoo.com/rakhi/index.html

1 0

Freeradius with 64-bit Suse Linux 9.3
by dantem.werbung＠web.de 16 Aug '05

16 Aug '05

I tried to install freeradius-1.0.2-5.2.x86_64 at a Suse Linux 9.3 64-bit server, but the radtest doesn't run. I started the radtest and NOTHING happend. Then I installed freeradius-1.0.2-5.2.i586 at a Suse Linux 9.3 32-bit server and it runs without any problems. I also tried to install Freeradius 1.0.4 at the 64-bit server, but it doesn't work as well. I want to install the server to connect from an access-point (SMG SMC2870W) with an easy account manager to see, who connected how long to the internet. Can you please help me to install freeradius at the 64-bit server with an easy manager (e.g. a web-based manager like DialUp Admin). Thanks Daniel _________________________________________________________________________ Mit der Gruppen-SMS von WEB.DE FreeMail können Sie eine SMS an alle Freunde gleichzeitig schicken: http://freemail.web.de/features/?mc=021179

1 0

pam-radius module installation help
by mukherji rakesh 16 Aug '05

16 Aug '05

Dear all, can any one please provide me the guide / steps to install pam_radius module to integrate with RSA Securid technology? I am installing this to implement with my RSA/ACE server but could not do.My linux 9 client can not authenmticate with my RSA server where I have enabled radius server. I am looking for your help. Regards, Rakesh Mukherjee Send instant messages to your online friends http://in.messenger.yahoo.com

1 0

SIGHUP bug to radiusd
by Craig Hancock 15 Aug '05

15 Aug '05

Hello all I am not sure if this is the appropriate list or I should be posting this to devel, but I think there is a bug in freeradius. Last week I discovered when running the command /etc/init.d/radiusd reload the radiusd process stoped accepting request, but still ran and nothing is reported in the logs as to an error or a problem. The init script reload option from what I can tell does a SIGHUP of the running radiusd process. After running strace on the process id I attempted to test my radius server by stopping and starting the process and then doing a reload randomly. That seemed to work ok so next test was to stop the process and run it again, but then attempt to authenticate to it a few times. Each authentication request was successful so while the process was running I attempted to run the init script with the reload command and what outputted to my screen was 'Segementation Fault errors'. I haven't had the oppurtunity to dig down and look at what its Seg Faulting on, but wanted to see if anyone else has experienced this problem. My testing was done on the prebuilt rpm package that is supplied by redhat version 1.0.1-2.RHEL4 as well as the stable version of freeradius version 1.0.4. Our radius server in question provides AAA service for VPN, and wireless users. Please let me know if I need to provide any further information. If this is not the appropriate list I apologize -- ****************************************************** Craig T. Hancock Systems Engineer, Infrastructure Services Office of Information Technology University of Notre Dame ******************************************************

2 1

rlm_smb & mschap
by Craig Hancock 15 Aug '05

15 Aug '05

Can rlm_smb be used to authenticate PEAP 8021X sessions? If so in your configuration file do you have to comment out the mschap section of radiusd.conf file? Also in the eap.conf file do you have to change the section peap section for default_eap_type = mschap to smb? Thanks -- ****************************************************** Craig T. Hancock Systems Engineer, Infrastructure Services Office of Information Technology University of Notre Dame ******************************************************

2 1

Radius Client for PPP on Fedora 4
by Ravi Verma 15 Aug '05

15 Aug '05

Dear Friends: I have an Openswan+L2TP installation on Fedora 4 which allows Windows XP/2000 clients to connect by way of L2TP/IPSEC. I want to setup Radius authintication for the Windows clients and I have setup a Free radius server. I need help with setting up L2TP to connect to the Freeradius server. I cannot find the shared library radius.so which I can call from the ppp options file. Is there a How-To document for configuring Radius client for ppp on Fedora 4? I appreciate your help. Kind regards. Ravi Verma Chief Executive Officer Telecommand Software and Services 2210 Plaza Drive, Ste 150 Rocklin, CA 95765 Phone: 9167053261, 866-220-RAVI (Toll-free) Fax: 9169142008 www.telecommand.com

1 0

Configuration item "User-Password" is required for authentication problem
by Tomáš Komárek 15 Aug '05

15 Aug '05

Hello, I have got a problem considering the authentization. This is the output of the FreeRADIUS: Ready to process requests. rad_recv: Access-Request packet from host 81.0.240.10:32811, id=38, length=190 NAS-Identifier = "komoush.com" Digest-Attributes = 0x030a5245474953544552 Digest-Attributes = 0x06054d4435 Digest-Attributes = 0x022a66396461343039396363373137396236623839303762663136373939623361646430356531653962 Digest-Attributes = 0x0a0674657374 User-Name = "test(a)komoush.com" Digest-Attributes = 0x04117369703a38312e302e3234302e3130 Digest-Response = "7e973dfa60fb8540814e44587ac5de1d" Digest-Attributes = 0x010d6b6f6d6f7573682e636f6d rlm_digest: Converting Digest-Attributes to something sane... Digest-Method = "REGISTER" Digest-Algorithm = "MD5" Digest-Nonce = "f9da4099cc7179b6b8907bf16799b3add05e1e9b" Digest-User-Name = "test" Digest-URI = "sip:81.0.240.10" Digest-Realm = "komoush.com" rlm_digest: Adding Auth-Type = DIGEST rlm_digest: Configuration item "User-Password" is required for authentication. rad_recv: Access-Request packet from host 81.0.240.10:32811, id=38, length=190 Sending Access-Reject of id 38 to 81.0.240.10:32811 The problem is probably in the line: rlm_digest: Configuration item "User-Password" is required for authentication. Can anybody help me how to overcome this problem??? Thanks a lot in advance. Tomas

2 1

FreeRADIUS 1.0.4 can't compile on Solaris 10
by Wei Chiang 15 Aug '05

15 Aug '05

Greetings everybody. There's this problem that has me completely stumped despite several late night attempts to solve it, so any help would be gratefully appreciated. ;-) I'm trying to compile FreeRADIUS 1.0.4 on a Solaris 10 machine. The initial "./configure" seems to have completed without too much fuss. The problem is that when I try "make all" the following error message is given after it tries to compile: ************************* snip **************************************** gmake[1]: Entering directory `/export/home/tmp/freeradius-1.0.4' Making all in libltdl... gmake[2]: Entering directory `/export/home/tmp/freeradius-1.0.4/libltdl' /bin/sh ./libtool --mode=link gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5 -Wall -D_GNU_SOURCE -DNDEBUG -o libltdl.la -rpath /usr/local/lib -no-undefined -version-info 4:0:1 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl rm -fr .libs/libltdl.la .libs/libltdl.* .libs/libltdl.* /usr/ccs/bin/ld -G -z defs -h libltdl.so.3 -o .libs/libltdl.so.3.1.0 ltdl.lo -ldl -lnsl -lresolv -lsocket -lposix4 -lpthread -lcrypto -lssl -lc ld: fatal: library -lcrypto: not found ld: fatal: library -lssl: not found ld: fatal: File processing errors. No output written to .libs/libltdl.so.3.1.0 gmake[2]: *** [libltdl.la] Error 1 gmake[2]: Leaving directory `/export/home/tmp/freeradius-1.0.4/libltdl' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/export/home/tmp/freeradius-1.0.4' *** Error code 2 The following command caused the error: /usr/sfw/bin/gmake WHAT_TO_MAKE=all common make: Fatal error: Command failed for target `all' ************************* snip **************************************** The really strange part is that "./configure" seems to actually find the libcrypto and libssl libraries: ************************* snip **************************************** checking for openssl/ssl.h... yes checking for DH_new in -lcrypto... yes checking for SSL_new in -lssl... yes ************************* snip **************************************** I did the following command line tests and got the following results: #ld -lcrypto ld: fatal: library -lcrypto: not found ld: fatal: File processing errors. No output written to a.out #ld -lssl ld: fatal: library -lssl: not found ld: fatal: File processing errors. No output written to a.out I think the libraries are already in the correct path: #crle Configuration file [version 4]: /var/ld/ld.config Default Library Path (ELF): /lib:/usr/lib:/usr/local/lib:/usr/sfw/lib Trusted Directories (ELF): /lib/secure:/usr/lib/secure (system default) Command line: crle -c /var/ld/ld.config -l /lib:/usr/lib:/usr/local/lib:/usr/sfw/lib Does anyone know how to solve this problem? Let me know if I've left out any information. Thanks again!

2 1