- Freeradius-Users - lists.freeradius.org

make install - File format not recognized
by Christopher Cover 11 Jun '05

11 Jun '05

Hi! I've recently downloaded and compiled freeradius-1.0.3 on CentOS release 3.4 on i386 platform. (CentOS is about the same as RedHat and Fedora). My configure command was this: ./configure --localstatedir=/var --sysconfdir=/etc --with-gnu-ld --without-sasl --enable-ucd-snmp-compatibility Here's what I get at the end of 'make install' /usr/local/src/radius/freeradius-1.0.3/install-sh -c -m 755 -s radwho /usr/local/bin strip: /usr/local/bin/#inst.31097#: File format not recognized gmake[4]: *** [install] Error 1 gmake[4]: Leaving directory `/usr/local/src/radius/freeradius-1.0.3/src/main' gmake[3]: *** [common] Error 2 gmake[3]: Leaving directory `/usr/local/src/radius/freeradius-1.0.3/src' gmake[2]: *** [install] Error 2 gmake[2]: Leaving directory `/usr/local/src/radius/freeradius-1.0.3/src' gmake[1]: *** [common] Error 2 gmake[1]: Leaving directory `/usr/local/src/radius/freeradius-1.0.3' make: *** [install] Error 2 Does anyone have a clue about this? Thanks! Chris

2 1

Netscreen authentication on freeradius
by Shrikant Agashe 11 Jun '05

11 Jun '05

Hi Radius ppls I'm trying to use free radius for Netscreen authentication I'm using FreeRADIUS Version 0.8.1. Can some pl help on this. Here is output on radius console ------------------------------------------------------------------------------ rad_recv: Access-Request packet from host XXX.XXX.XXX.XXX:2269, id=0, length=50 User-Name = "test" User-Password = "test" NAS-IP-Address = XXX.XXX.XXX.XXX modcall: entering group authorize modcall[authorize]: module "preprocess" returns ok rlm_chap: Could not find proper Chap-Password attribute in request modcall[authorize]: module "chap" returns noop modcall[authorize]: module "mschap" returns notfound rlm_realm: No '@' in User-Name = "usr4", looking up realm NULL rlm_realm: No such realm NULL modcall[authorize]: module "suffix" returns noop users: Matched usr4 at 83 modcall[authorize]: module "files" returns ok modcall: group authorize returns ok rad_check_password: Found Auth-Type System auth: type "System" modcall: entering group authenticate modcall[authenticate]: module "unix" returns ok modcall: group authenticate returns ok Sending Access-Accept of id 0 to XXX.XXX.XXX.XXX:2269 Finished request 0 Going to the next request --- Walking the entire request list --- ------------------------------------------------------------------------------ cheers Shrikant __________________________________ Discover Yahoo! Have fun online with music videos, cool games, IM and more. Check it out! http://discover.yahoo.com/online.html

2 1

AW: MAC address authorization
by Andre Herkenrath 11 Jun '05

11 Jun '05

Hi, I´ve done this with access-points from extremenetworks. There it went this way: You have to create users in the usersfile in the folowing way: Username: MAC-Adress Password: Mac-Adress That´s all Maybe Cisco does it the same way (Cisco never had a good idea, only a goog bank account) Regards André ________________________________________ Von: Vince Nguyen [mailto:Vince.Nguyen@quantum.com] Gesendet: Samstag, 11. Juni 2005 01:16 An: freeradius-users(a)lists.freeradius.org Betreff: MAC address authorization Please help, I've installed Freeradius 0.9.3-1.1 to my Redhat Fedora Core 1 box, and would like to use it in conjunction with my Cisco AP1200 to simply allow authorized and registered MAC address to be on the network. Has someone done this and could show the way? Thanks, Vince __________________________________ Vince T Nguyen Systems Administrator www.quantum.com mailto:vince.nguyen@quantum.com 949/856.7809 (direct) 949/856.7799 (fax)

1 0

MAC address authorization
by Vince Nguyen 10 Jun '05

10 Jun '05

Please help, I've installed Freeradius 0.9.3-1.1 to my Redhat Fedora Core 1 box, and would like to use it in conjunction with my Cisco AP1200 to simply allow authorized and registered MAC address to be on the network. Has someone done this and could show the way? Thanks, Vince __________________________________ Vince T Nguyen Systems Administrator <file://www.quantum.com> www.quantum.com <mailto:vince.nguyen@quantum.com> mailto:vince.nguyen@quantum.com 949/856.7809 (direct) 949/856.7799 (fax)

1 0

is it possible to only allow users with a valid host ip?
by gvdgiessen＠fastmail.fm 10 Jun '05

10 Jun '05

Hi, I wonder if I can restrict (vpn)login from users in combination with their login (host) ip address. cheers, Geer -- gvdgiessen(a)fastmail.fm -- http://www.fastmail.fm - And now for something completely different

4 3

File Users
by José Berenguer 10 Jun '05

10 Jun '05

Hello! Anyone can tell me where can I find some instructions about how to configure the "default LDAP-GROUP" option in the file USERS? Thanks. -- ********************************************************************** José Berenguer Giménez Área de Comunicaciones-Servicio de Informática UNIVERSIDAD DE ALMERÍA Crta. de Sacramento s/n, 04120 - Almería Tlf.: 950014014 E-mail: jose(a)ual.es **********************************************************************

2 1

LDAP basedn context
by Matt McFarlane 10 Jun '05

10 Jun '05

Is it possible to specify the basedn above where the users are actually located and have freeradius find the user in a subcontext? For instance if my ldap is setup as ou=users1,ou=loc1,o=org and ou=users2,ou=loc2,ou=o=org can I specify basedn="o=org" and find users in both users1 and users2? Thanks. Matt McFarlane

2 1

ATTRIB_NMC
by Guy verdegem 10 Jun '05

10 Jun '05

Hi, I installed freeRadius 1.0.2 on a solaris machine. But when starting the radiusd -x he comes up with following messages. "Starting - reading configuration files ... Errors reading dictionary: dict_init: /etc/raddb/dictionary.usr[55] invalid keyword "ATTRIB_NMC" Errors reading radiusd.conf" Does somebody has a solution for this. Thx Guy Verdegem

2 1

rlm_python example ?
by Schweizer Laurent 10 Jun '05

10 Jun '05

Hello, I try to use the rlm_python module but I don't know how I must specify in the radiusd.conf which python script is used. Where can I found an example of radiusd.conf with the python module? Laurent

2 1

picks up the same request twice
by vicky 10 Jun '05

10 Jun '05

Hello RADIUS-people! In my radius server I have a certain NAS defined in the clients.conf file as (example) : client 1.1.1.1{ shortname = one secret = oneone } and the same NAS in the proxy.conf file like this : realm one{ type = radius authhost = 1.1.1.1:1812 accthost = 1.1.1.1:1813 secret = oneone } This creates confusion because when receiving a request from this NAS, my radius server recognize it twice. One that is proxied and one that is "treated" locally (without striping of the realm). How can I solve this so that when the request should be proxied it is only proxied and when it should be treated locally it is only treated locally? I hope I made my question clear... Loads of thanks! -- Vicky

3 2