- Freeradius-Users - lists.freeradius.org

RE: ldap huntgroups and groups
by alan walters 31 May '05

31 May '05

Continuing with huntgroups and groups. I followed the most recent instructions below. The client uses the default group below. I see the reply message come through in the request But the request gets access accept instead of access reject????? > > ######################################################################## > # > ### default ldap group does not succeed > ######################################################################## > ## > > DEFAULT Auth-Type := Reject > Reply-Message = "sorry you are not allowed to dial in here" > The reply message should go on the second line on this one. Reply message is not a check item. Also, technically, you don't need Simultaneous User, since they are being rejected this session will never be added. Your user was found in a group, however, it should have been rejected since you have fall-though = 1 (yes). It should have fallen through to the default reject line. Note: This is probably not what you want, because all users will be rejected when you fix the Reject line. I would change Fall-Through = no (0), to all your Ldap-Group entries above it. Move the Reply-Message to the second line. DEFAULT Auth-Type := Reject Reply-Message = "You cannot dial in here"

1 0

upgrading freeRADIUS
by vicky 31 May '05

31 May '05

Hi list subscribers, hi list admins, (again) I'm running a freeRADIUS server version 0.8.1 (I know it is ancient) and I want to upgrade it to the latest version available. I have been trying to find some kind of procedure to upgrading but with no success. Does anyone know how to (in a fairly simple way) safely upgrade? The safetyness is very crucial, I cant risk overwriting my old configuration. The old server is built with #configure --prefix=/opt/freeradius #make #su #make install Thanks to you all in advance and please notice that I'm not that of an expert on RADIUS... Keep up the good work! -- Vicky

1 0

Please resend this message to Kim Jones'
by Kim 31 May '05

31 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

ADSL access server, freeradius and MULTI IP assignement
by Dario Maurich - CSINFO S.p.A. 31 May '05

31 May '05

Hi all. I'm trying to set up a fully operational adsl access router so i mean, I have a cisco 7200 as access server (NAS) and a freeradius. Everythings works fine (dynamic and one static IP assignement) exept for the multi IP assignement (so one starting IP and a netmask). In this case the clients authenticate but the IP is not assigned at all so they can't access Internet. What is the problem? This is my configuration parameters for /etc/raddb/xxxxxxx.users file: xxxxx Auth-Type := Local,User-Password == "adsl" #not working Framed-IP-Address = x.x.x.x, Framed-IP-Netmask = 255.255.255.248, Fall-Through = Yes, xxxxx Auth-Type := Local,User-Password == "adsl" #working well X-Ascend-Assign-IP-Pool = 3, Fall-Through = Yes, xxxxx Auth-Type := Local,User-Password == "adsl" #working well Framed-IP-Address = x.x.x.x, Fall-Through = Yes, I'm sorry but I'm not expert at all in freeradius software, I'm a very beginner, can you help me? Many thanks, Dario Maurich

1 0

Please resend this message to Kim Jones'
by Kim 31 May '05

31 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

3 2

Please resend this message to Kim Jones'
by Kim 31 May '05

31 May '05

Please resend this message to Kim Jones' new email address. Thank You. kim(a)omegatechinc.com

1 0

upgrading freeRADIUS
by vicky 30 May '05

30 May '05

Hi list subscribers, hi list admins, I'm running a freeRADIUS server version 0.8.1 (I know it is ancient) and I want to upgrade it to the latest version available. I have been trying to find some kind of procedure to upgrading but with no success. Does anyone know how to (in a fairly simple way) safely upgrade? The safetyness is very crucial, I cant risk overwriting my old configuration. The old server is built with /configure --prefix=/opt/freeradius make su make install / Thanks to you all in advance and please notice that I'm not that of an expert on RADIUS... Keep up the good work! -- Vicky

1 0

Error: Discarding new request
by Andres 30 May '05

30 May '05

itprola Firmathis it is the error "Error: Discarding new request from client " as it is solved? Mon May 30 12:10:59 2005 : Auth: Login OK: [00301a0af0ea/00301a0af0ea] (from client 10.10.0.10 port 0) Mon May 30 12:13:07 2005 : Auth: Login OK: [tscitti@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 539 cli 00:30:1A:0A:F0:EA) Mon May 30 12:20:50 2005 : Error: Discarding new request from client 10.10.1.2:32845 - ID: 250 due to live request 1976 Mon May 30 12:20:56 2005 : Auth: Login OK: [catflorida@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 165 cli 00:30:1A:0A:FC:3C) Mon May 30 12:23:05 2005 : Auth: Login OK: [jfolgar@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 480 cli 00:30:1A:0A:FC:57) Mon May 30 12:25:00 2005 : Auth: Login OK: [mrodriguez@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 837 cli 00:30:1A:0A:FC:1F) Mon May 30 12:26:10 2005 : Error: Discarding new request from client 10.10.1.2:32845 - ID: 2 due to live request 1985 Mon May 30 12:26:17 2005 : Auth: Login OK: [catflorida@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 462 cli 00:30:1A:0A:FC:3C) Mon May 30 12:27:18 2005 : Auth: Login OK: [00301a0ae2f3/00301a0ae2f3] (from client 10.10.0.10 port 0) Mon May 30 12:34:29 2005 : Error: Discarding new request from client 10.10.1.2:32845 - ID: 5 due to live request 1990 Mon May 30 12:49:29 2005 : Auth: Login OK: [catflorida@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 489 cli 00:30:1A:0A:FC:3C) Mon May 30 12:51:55 2005 : Auth: Login OK: [jfolgar@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 527 cli 00:30:1A:0A:FC:57) Mon May 30 12:55:46 2005 : Auth: Login OK: [mrodriguez@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 617 cli 00:30:1A:0A:FC:1F) Mon May 30 12:56:08 2005 : Auth: Login OK: [narbulo@vivaonline/<CHAP-Password>] (from client 10.10.1.2 port 750 cli 00:30:1A:0A:F0:E5) Mon May 30 12:57:33 2005 : Error: Discarding new request from client 10.10.1.2:32846 - ID: 17 due to live request 2003 Mon May 30 12:58:43 2005 : Auth: Login OK: [00301a0afc68/00301a0afc68] (from client 10.10.0.10 port 0)

1 0

RE: How to? - use/configure winbind/ntlm_auth for Windowsauthentication
by DELORT Stephane 30 May '05

30 May '05

Hi Pete, look at the radiusd.conf file, there is a sample line for ntml_auth. "man ntml_auth" will give you details on the parameters. regards, Stéphane -----Message d'origine----- De : freeradius-users-bounces(a)lists.freeradius.org [mailto:freeradius-users-bounces@lists.freeradius.org]De la part de Pete Flynt Envoyé : lundi 30 mai 2005 16:01 À : freeradius-users(a)lists.freeradius.org Objet : How to? - use/configure winbind/ntlm_auth for Windowsauthentication Hello, I'm trying to set up a FreeRadius solution for a Windows2k AD environnment. The FreeRadius-server is already running right. I can authenticate a testuser with Auth-Type := EAP (username and password stored as cleartext in the users file) Now I want to use FreeRadius to check username/password from the Active Directory Server when a user logs onto the computer. I checked the list already. Some say to use ntlm_auth and winbind, others LDAP, then samba... but nobody is able to explain how to get it working. Is it really as complicated? ntlm_auth seems very simple, returnig 1 if user/pwd is alright and 0 when not. But how can I test this from the command line? Where do I specify the address of the AD-server? When running ntlm_auth -- usage there are too much parameters that are unknown to me. Thanks in advance for any help! Pete _________________________________________________________________ Express yourself instantly with MSN Messenger! Download today it's FREE! http://messenger.msn.click-url.com/go/onm00200471ave/direct/01/ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1 0

Wireless Authentication
by Radius 30 May '05

30 May '05

Does anyone have any links or on-line examples that show how to use FreeRadius to do 802.1x authentication? Thanks Bob Ross

5 4