- Freeradius-Users - lists.freeradius.org

How to set share secret in binary value?
by CS Clemson 08 Sep '18

08 Sep '18

Hi, I want to set a binary value (a hashed value) in database or clients.conf. How can I set it? I found all examples are using ascii string. Thanks in advance. John Valt.

2 1

About configuration and high availability
by Marcos Renato da Silva Junior 07 Sep '18

07 Sep '18

Hi, I created a testing environment based on two Raspberry Pi (attached diagram), in my tests it has worked well, following the documentation I changed the configuration filesthe least possible, as I have a file server (Samba) and to maintain compatibility with Windows my Openldap has the userPassword, sambaLMPassword and sambaNTPassword attributes (managed by Smbldap-tools), allowing the operation of PEAP/MSCHAPV2, PEAP/GTC and TTLS/PAP, on high availability I am using Corosync / Pacemaker, it works but this is the best way to do things ? Thansk, Marcos Renato. */etc/freeradius/3.0/mods-available/ldap :* ldap { server = 'rasp4.acme.lab' identity = 'cn=admin,dc=acme,dc=lab' password = password base_dn = 'dc=acme,dc=lab' ... ... ... tls { start_tls = yes ca_file = ${certdir}/cacert.pem require_cert = 'demand' } */etc/freeradius/3.0/mods-available/ldap :* update { control:NT-Password := 'sambaNTPassword' control:LM-Password := 'sambaLMPassword' */etc/freeradius/3.0/clients.conf :* client ap1 { ipaddr = 192.168.0.1 secret = password } */etc/freeradius/3.0/radiusd.conf :* log { auth = yes ... ... ... proxy_requests = no #$INCLUDE proxy.conf diagram.jpg -- Marcos Renato da Silva Junior Universidade Estadual Paulista - Unesp Faculdade de Engenharia de Ilha Solteira - FEIS Departamento de Engenharia Elétrica 15385-000 - Ilha Solteira/SP (18) 3743-1164

2 1

help with filtering user names and mac
by lesterpl＠infomed.sld.cu 07 Sep '18

07 Sep '18

Hi, I have a perl script authenticating my users via pop3 and it works fine but I do not want to authenticate all the users of the server. I have a list with the users that I want to authenticate and I would like to know if I can filter them before going on to authenticate with their respective mac. please some idea I was seeing usernames filtres in polici.d filter. ideas or suggestions thousands of thanks Lester ---------------------------------------------------------------- This message was sent using IMP, the Internet Messaging Program. -- Este mensaje le ha llegado mediante el servicio de correo electronico que ofrece Infomed para respaldar el cumplimiento de las misiones del Sistema Nacional de Salud. La persona que envia este correo asume el compromiso de usar el servicio a tales fines y cumplir con las regulaciones establecidas Infomed: http://www.sld.cu/

2 1

Re: SQL Query Examples for FreeRadius
by me＠erikthiart.com 06 Sep '18

06 Sep '18

> All of this data should be in an SQL database. You can use normal SQL queries to find this information. > > The schema for FreeRADIUS is well documented. Hello Alan, thanks for replying to my e-mail. First time I am using an email list, I hope this reply-to attempt works as intended... I understand what you are saying, I think my question should’ve been more clear, I am looking for go to queries that the veterans reply on, in my case I had to bump my head when my online users query did not return the data I thought, example my query was: SELECT username FROM radacct WHERE acctstoptime IS NULL Being completely new to freeradius I thought this would work (the logic in my mind checked out), turns out there is a ton of garbage sessions that never closed, mikrotik got shutdown unexpectedly or for whatever other reason, point is if there was a documented collection of SQL queries freeradius users generally rely on, I could have avoided a bit of my time being wasted. So to put it into context what I would like to do is create a page with useful queries, crowdsourced from the freeradius community to help new commers like myself and those after me. I hope this explains it a bit better? PS: You need to read this email from the perspective of me being completely new to this, I am a windows user :P

3 3

How group works in Radius
by Somanath Mishra 06 Sep '18

06 Sep '18

Hi All, We are using Freeradius3. So basic authentication,authorization, accounting is working. We created group in radgroupcheck. On Register user we are storing username with group in radusergroup. So still we are not getting groupname in radacct table. So in debug we found radius only not sending groupname when it is giving input to radacct. We need group for users . Can anyone explain me on how it works for group? Thanks in advance.

3 5

Unable to start radiusd v 3.0.17
by Burn Zero 06 Sep '18

06 Sep '18

Hi, I am unable to start radiusd. I get the below error "tls: Failed changing permissions on /var/run/radiusd: Operation not permitted" I went and checked that radiusd doesn't create directory /var/run/radiusd while starting. Even if I manually create, it gets deleted. How I do solve this? Thank you.

2 1

Freeradius shut down if LDAP fails
by Udhay Ravi 05 Sep '18

05 Sep '18

Hi, I am running freeradius with LDAP as backend authentication. My docker container if started, if the LDAP bind fails, the freeradius never starts. But if the container is UP and running, if the LDAP reachability fails, freeradius continues to stay UP. Is it possible to force kill freeradius if LDAP reachability fails ? -Udhay

2 1

SQL Query Examples for FreeRadius
by me＠erikthiart.com 05 Sep '18

05 Sep '18

Hello, I hope someone would be so kind as to give me a heads up to some sample queries that users have found useful over the years, stuff I might not think of or know possible. Examples would be: Get current online users Get the average session time or average session time per username. Get the total data usage per nas Total users connected to a nas in a specific date range And other queries you find useful. This will help me and future radius users.

2 1

Mac OSx reconnecting after waking from sleep
by Byron Jeffery 05 Sep '18

05 Sep '18

Hi All We have been having an almost random issues from various staff members of when their macbook fails to reconnect to our WPA2 Enterprise wifi network (freeradius with eap-peap authenticating against AD) after waking from sleep whilst on battery power with the wifi looking like it is constantly searching. Simply turning the wifi off and on again reconnects almost instantaneously, which leaves me ruling out the availability of the Radius server as the issue. Also, when the macbook is connected to its charger, we never see the issue. We have seen this issue across differing access point vendors which has left us scratching our heads. I know I am probably asking in the wrong place, but apart from very little information on the Internet, I have no way to determine if this is somewhat normal anticipated behaviour with macbooks and because it is so random, replicating the issue is almost fruitless to attempt to work out the fault. I am hoping that someone here has experienced the same issue or may be able to provide guidance and if I am asking in the wrong place, please let me know. - Kind Regards - Byron Jeffery -

3 6

Username substitution via LDAP call possible?
by Pedranti, Brian 04 Sep '18

04 Sep '18

Hello all, I am very new to Freeraduis, but, was doing a bunch of searching and I am coming up empty.... I would like to use Freeradius as a RADIUS proxy. I need a layer between our VMWare Horizon View system and Duo for 2-factor. Unfortunately, our users login with their UPN, which is not kept on our Duo instance. We also cannot use aliasing in the Duo system. So, we need it to take in an UPN (always an email address), and perform a LDAP lookup and then pass the users' CN or samAccountName on to our Duo authproxy RADIUS module. The server can run on Linux or Windows. Am I dreaming? Is this remotely doable? :) Thanks, Brian =============================== Brian Pedranti | Server Manager Information Technology Department | Harvard T.H. Chan School of Public Health 90 Smith St. Rm 212 | Boston, MA 02120 o: 617-998-6909 Join the conversation: News<http://www.hsph.harvard.edu/news> | Twitter<http://twitter.com/HarvardHSPH> | Facebook<http://www.facebook.com/harvardpublichealth> | LinkedIn<http://www.linkedin.com/edu/school?id=20305&trk=tyah> <http://www.linkedin.com/edu/school?id=20305&trk=tyah> | YouTube<http://www.youtube.com/user/HarvardPublicHealth> [Harvard T.H. Chan School of Public Health]<http://www.hsph.harvard.edu/>

2 1