- Freeradius-Users - lists.freeradius.org

Help: Installation of FreeRadius 1.0.4 on Solaris 10
by Jaspreet Brar 23 Jun '05

23 Jun '05

Hi All, I would really appriciate, if you would kindly help me out. I'm trying to install FreeRadius-1.0.4(downloaded from freeradius.org) on Solaris OS 10 (SPARC) as below: /usr/local/src/freeradius-1.0.4# ./configure /usr/local/src/freeradius-1.0.4# make /usr/local/src/freeradius-1.0.4# make install But I'm getting errors while installing it: #./configure No error while running configure. #make I get the following error: ***Error Code 2 The following command caused the error: /usr/sfw/bin/gmake WHAT_TO_MAKE=all common make: Fatal error: Command failed for target 'all' #make install ***Error Code 2 The following command caused the error: /usr/sfw/bin/gmake WHAT_TO_MAKE=install common make: Fatal error: Command failed for target 'install' Thanks, Jas ____________________________________________________ Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football http://football.fantasysports.yahoo.com

2 1

local mac-address auth and peap proxying
by B. Tolka 23 Jun '05

23 Jun '05

Hello All, I have mac address auth such as the example below in my users file 00097c78dd2d Auth-Type := Local, User-Password == 00097c78dd2d Tunnel-Type:1=13, Tunnel-Medium-Type:1=6, Tunnel-Private-Group-Id:1=23 I would like to add the ability to proxy peap request to another radius server I have tried using DEFAULT Auth-Type:= EAP, Proxy-To-Realm := realm name , Fall-Through=yes before the mac address in my users files. Is there anyway to make both authentication types work?? Thanks Bryan

1 0

what's the diffrence bettwen radauth and radaliasauth?
by zhangyue 23 Jun '05

23 Jun '05

I have made freeradius 1.0.4 wroks well with mysql, I want freeradius to be the gnugk's authenticatior.I am failed to set RadAuth type , but RadAliasAuth can work. I want to know :what's the diffrence bettwen radauth and radaliasauth? In mysql database, what I stored is string( I mean , not digital id ),am I should (and have to) use RadAliasAuth type? the ip phone software what I used is SJPHONE 1.5 free! it will get the message: Registration rejected : gatekeeper security denial! in gnugk's , I got this: RADAUTH RadAuth RRQ auth failed: tokens not found! freeradius is silence, no package was sent to it! whatever, give me your advise, thanks a lot! 　　　　　　　　　　　　　　 zhangyue 　　　　　　　　　　　　　　　　　　　　　　　　　　　　2005-06-23

1 0

Authenticating with CallingStationId only
by Patrik Backentoft 23 Jun '05

23 Jun '05

Hello, We have set up a FreeRADIUS for authenticating GPRS-users. However, we would like to authenticate based on CallingStationId only, i.e. not ask users to enter either user-name or password on a Mobile Station level. We are connected to a NAS sending us "void/void" if user/pw is not entered, and of course, the NAS sends the CallingStationId. For a number of practical reasons, we would like to use the CallingStationId when authenticating. My questions are: is this possible at all, i.e. not entering user name and password and only use CallingStationId? A few hints on where to modify, in order to avoid having the request rejected due to no user-name as is the case now. Thanks in advance, Patrik Backentoft

2 2

Re: Version 1.0.4 Upgrading
by Abdul Lateef 23 Jun '05

23 Jun '05

Hello, Thanx guys for good advise, Now i will start to upgrade from 1.0.2 to 1.0.4. Thank You Abdul Lateef Tel : 974-5405022 YM! abdul_zu ____________________________________________________ Yahoo! Sports Rekindle the Rivalries. Sign up for Fantasy Football http://football.fantasysports.yahoo.com

1 0

Issue with increasing the number of ACL's in users file
by Niall Browne 23 Jun '05

23 Jun '05

Hi I am having a problem with an apparent limit on ACL's on my freeradius servers. I have been running this servers for a number of years, and have always had the number of ACL's on the users file below 52, and have never had any problems. I noticed as soon as I increased the ACL's above 52 it appeared to authenticate in the logs, however the auth connection through Cisco VPN simply continued to try to authenticate and nothing happened. As soon as I removed the ACL's below 52 and restarted it works fine. I dumped the logs /usr/local/freeradius/sbin/radiusd -p 1647 -sfxxyz -l stdout When I then auth'd and viewed the stdout logs, they are identical for <52 and then >52 (when compared). The only difference is that the ACL's after the magic 52 mark do not show in the stout, and this causes my timeout to fail. When I revert to <52 I can see the last ACL's and all works fine. I have checked through the configs including radiusd.conf however I cannot find a hard coded limitation on ACL's anywhere. Is anyone aware of how to resolve this ? Thanks in advance, Niall

1 0

Huntgroups-Problem (bug or feature ?)
by Lutz Petersen 22 Jun '05

22 Jun '05

We have the following szenario, in which i got a problem: We use huntgroups to allocate different types of dialins (isdn, dsl, and so on). So we have a huntgroups File which looks similar to this: xDSL NAS-IP-Address == 1.1.1.1 xDSL NAS-IP-Address == 1.1.1.2 xDSL NAS-IP-Address == 1.1.1.3 Wireless-802.11 NAS-IP-Address == 1.1.2.1 Wireless-802.11 NAS-IP-Address == 1.1.2.2 Wireless-802.11 NAS-IP-Address == 1.1.2.3 and so on. Access is huntgroup based, and via Calling-Station-Id or NAS-Port-Type attributes and so on. Now, we tried to make special groups for admin access on different servers. So we added some groups like AdminA NAS-IP-Address == 1.1.1.1 AdminA NAS-IP-Address == 1.1.2.1 AdminB NAS-IP-Address == 1.1.1.3 AdminB NAS-IP-Address == 1.1.2.3 and so on. Reason was to get a radius based way which admin (group) will be allowed to get access on which NAS (additional to other restrictions). Now, it doesn't work. As I checked out, it doesn't work when an ip address of a NAS was within the huntgroups file earlier for another group. So my question: is it ok not to build different huntgroups which contains in some cases servers with the same ip address ? Or other questioned - why ? That would be a nice feature. Ok, not an daily configuration scheme, but it would help to do some access restriction things.

2 2

Re: rlm_exec
by Doug Hardie 22 Jun '05

22 Jun '05

I have 2 exec-prog-wait modules that I am converting to rlms. The process fork time is very significant for both because of the various startup things that have to be done. By making them rlm's that is done infrequently. One of them is for authorization and the other for accounting. i have already created the accounting rlm and it seems to work fine. The question I have is should I add the authorization code to that rlm or create a separate rlm? There is virtually no commonality between them. Both are fairly complex so intermingling them in the same source file will make it fairly difficult to read/maintain. Are there any performance differences to having 2 rlm's vs one?

2 1

propy peap requests
by B. Tolka 22 Jun '05

22 Jun '05

I am trying to setup freeradius to forward peap requests to another radius server. I have the proxy.conf setup with the address to the other server. I really do not want this server to do anything but proxy to the other server. Can someone help with the configuration. I am using Fedora Core 4 any help would be appreciated. Bryan

2 1

Version 1.0.4 Upgrading
by Abdul Lateef 22 Jun '05

22 Jun '05

Hello, Currently i am using i have 1.0.2 version running on my linux box. I made plan to upgrade it with the letest Version 1.0.4. I have a small question about the 1.0.2 configuration files. How i should upgrade it. Is configuration files will be also upgraded or it will be not effected? Thnak You __________________________________________________ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail.yahoo.com

3 2