- Freeradius-Users - lists.freeradius.org

Fw: Logging authentication
by MHumphries＠delcomp.net 01 Jul '05

01 Jul '05

i was having problems with logging both good and bad logins and so i upgraded to Freeradius 1.0.4 but am still not seeing anything in radius.log i can send my config files if someone can help me i would be very grateful Michael J. Humphries Network Engineer Delcomp/SOFTEK 1431 N. 26th Street Escanaba, MI 49829 Phone: 906-786-3583, ext 39 Fax: 906-786-4300

1 0

RE: dialup_admin problem
by Rashad Rustamoff 01 Jul '05

01 Jul '05

Check mysql logs. If mysql server refuses connection by any reason you will see it in logs. Standard location of mysql logs in mysql data directory. Normal operations are logged in file your_machine_name.log, errors in your_machine_name.err.

1 0

using freeradius and chillispot
by yuniva wati 01 Jul '05

01 Jul '05

hello, I want to ask about using freeradius and chillispot in one PC. there is need to configure the freeradius to using chillispot?? thanks for your attention --------------------------------- Discover Yahoo! Have fun online with music videos, cool games, IM & more. Check it out!

1 0

dialup_admin problem
by Okka Radius 01 Jul '05

01 Jul '05

I've changed the following ... sql_server: 127.0.0.1 ( don't work ) sql_server: 1.2.3.4 ( where it is a substitute for the real ip address ) If I look at the fields below .... sql_type: mysql ( is the default ) and if I use that then get this error when clicking on statistics on the dialup admin homepage < Could not connect to the SQL database > If I change the string to sql_type: mysq ( another string ) and use that then I get the error when clicking on statistucs on the dialup admin homepage < Could not include SQL library functions. Aborting > I reckon the problem is something in the connection string because as mentioned connecting to mysql through a client works perfectly , its only the web interface that refuses to connect to the db with freeradius running no matter what the syntax , suggestions ?

1 0

Re: Freeradius-Users Digest, Vol 3, Issue 2 (Away from the office)
by Robert Wills 01 Jul '05

01 Jul '05

1 0

RE: dialup_admin problem
by Rashad Rustamoff 01 Jul '05

01 Jul '05

You must point to actual IP address (or FQDN) of machine where mysql server running. To do this edit this line in admin.conf: sql_server: fully.qualified.domain.name.of.server If your web server running in the same machine where mysql server is running: sql_server: 127.0.0.1 >I am using Freeradius version 1.04 that comes with its own version of >dialup_admin. >I've successfully got Freeradius to authenticate using MYSQL as a backend. > >My problem is in getting dialup_admin to read the database when I access my >radius server on the web. > > ># ># can be one of mysql,pg where: ># mysq: MySQL database (port 3306) ># pg: PostgreSQL database (port 5432) ># >sql_type: mysql >#sql_type: mysq >sql_server: fully.qualified.domain.name.of.server >sql_port: 3306

1 0

join!
by Yam Biz 01 Jul '05

01 Jul '05

__________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

1 0

Re: EAP problem
by Graham, Robert 01 Jul '05

01 Jul '05

> No. Messages in the past few days have said you can't get passwords >from AD. It's impossible. > You have to use ntlm_auth. See radiusd.conf > Alan DeKok. This still doesn't make any since. I have ntlm_auth enable, and it is working fine autheniticating our vpn users using ms-chap.

2 1

Re: EAP problem
by Graham, Robert 30 Jun '05

30 Jun '05

I'm I correct to state that the "password_attribute = userPassword" in the ldap section causes ldap to retrieve the user's password out Active Directory? and if so, what I am doing wrong. The only thing that I can thing of is the mapping in the ldap.attrmap file which I have below: checkItem $GENERIC$ radiusCheckItem replyItem $GENERIC$ radiusReplyItem checkItem Auth-Type radiusAuthType checkItem Simultaneous-Use radiusSimultaneousUse checkItem Called-Station-Id radiusCalledStationId checkItem Calling-Station-Id radiusCallingStationId checkItem LM-Password sambaLMPassword checkItem NT-Password sambaNTPassword checkItem SMB-Account-CTRL-TEXT sambaAcctFlags checkItem Expiration radiusExpiration replyItem Service-Type radiusServiceType replyItem Framed-Protocol radiusFramedProtocol replyItem Framed-IP-Address radiusFramedIPAddress replyItem Framed-IP-Netmask radiusFramedIPNetmask replyItem Framed-Route radiusFramedRoute replyItem Framed-Routing radiusFramedRouting replyItem Filter-Id radiusFilterId replyItem Framed-MTU radiusFramedMTU replyItem Framed-Compression radiusFramedCompression replyItem Login-IP-Host radiusLoginIPHost replyItem Login-Service radiusLoginService replyItem Login-TCP-Port radiusLoginTCPPort replyItem Callback-Number radiusCallbackNumber replyItem Callback-Id radiusCallbackId replyItem Framed-IPX-Network radiusFramedIPXNetwork replyItem Class radiusClass replyItem Session-Timeout radiusSessionTimeout replyItem Idle-Timeout radiusIdleTimeout replyItem Termination-Action radiusTerminationAction replyItem Login-LAT-Service radiusLoginLATService replyItem Login-LAT-Node radiusLoginLATNode Or I'm I completely off base? -Robert

2 1

Attribute and Message Editing
by Tahseen Hussain 30 Jun '05

30 Jun '05

Hi Everybody, Is it possilbe to avoid attribute editing and message editing by using EAP-TTLS or EAP-PEAP in a proxy environment? As far as I understton, In EAP-TTLS a tunnel is formed between a user and the TTLS server, now this TTLS server will forward the request to the proxy and proxy to the home radius server. So the threat here is from proxy, which can falsely edit attribute and messages. For example if home radius sever sends Accept-accept packet , it is possible that a proxy can change the same packet to Access-Reject (wantedly), so that the user will not be able to access visited network. Thanks in advance, Tahseen

2 1