- Freeradius-Users - lists.freeradius.org

Not setting Auth-Type
by Roberto Rios 25 Aug '16

25 Aug '16

hello guys. I am configuring radius with ldap. The binding is succesfull, but when I try to radtest an existing user i get this error: (2) [logintime] = noop (2) WARNING: pap : No "known good" password found for the user. Not setting Auth-Type (2) WARNING: pap : Authentication will fail unless a "known good" password is available (2) [pap] = noop (2) } # authorize = ok (2) ERROR: No Auth-Type found: rejecting the user via Post-Auth-Type = Reject (2) Failed to authenticate the user ..with a rejected response. The user does exists in active directory. using : FreeRADIUS Version 3.0.4 radtest line: radtest xxxxxx1 xxxxxxx1 localhost 0 testing12 I keep reading not to set Auth-type and let the system do its thing. What am I missing? Thank you

3 5

LDAP / mschap Error
by Andreas Zwinzscher 25 Aug '16

25 Aug '16

Dear freeradius-users, I have got a problem with the implementation of the freeradius and ldap-authentication. I've running a freeradius version 2.2.8 and so far, everything is working well. Connetion to the AD works well. The ntlm_auth module also works if I do the test. But now the problem: The clients are using Windows 7 , 8.1 or 10. If I do a manual login with username/password the authentication works well. But if I activate the option to use the windows login informations, the authentication fails. I got an MSCHAP error. So I tried a few things to figure out where the problem is. radtest - t mschap username password localhost 0 testing123 This works very well. Ok...but the username comes with another format, if I do an authentication via Windows. So I tried following: radtest -t mschap DOMAIN//username password localhost 0 testing123 Well...this also works. I recieve an access-accept packet. So I studied the logs more in detail and found out, that the first letter of the username is case sensitive. So I did a new test: radtest -t mschap DOMAIN//Username password localhost 0 testing123 And here I got the same mschap-error as with the (automatic) windows authentication. If I do a check with wbinfo -u I see every username written in lower case letters only. I also checked if the freerad user has permissions on winbindd_priv. Everything should be allright here. The "with-ntdomain-hack = yes" option is also enabled. So I really got no idea where to look next. I have an almost identical setup running very well, also with windows-authentication. The only difference is that I use an older freeradius version here. I think it's 2.1.18. Would be great if someone got some tipps for me. Thanks. Andreas

4 7

Logs Help.
by Periko Support 23 Aug '16

23 Aug '16

Hi. We are running freeradius 2.2.x, very stable. We are a small WISP, our network is Mikrotik, Ubiquiti and FreeRADIUS under Centos 6.x. This post is related to FreeRADIUS, I want to understand some logs, I already enable some settings on radius.conf. stripped_names = yes auth = yes auth_badpass = yes a uth_goodpass = yes Radius is connected to MySQL. The other are default settings. I would like to get more debug info to troubleshoot but the log doesn't tell me to much. I have this log that Im trying to understand the meaning? Mon Aug 22 17:39:09 2016 : Auth: Login OK: [3988672839/<CHAP-Password>] (from client [RB951]-Torre port 2154824621 cli MAC-ADDRES) Mon Aug 22 17:39:09 2016 : Info: No Pool-Name defined (did hs-server1 cli MAC-ADDRES port 2154824621 user 3988672839) Mon Aug 22 18:06:43 2016 : Info: Released IP 10.10.10.26 (did hs-server1 cli MAC-ADDRES user 3988672839) Mon Aug 22 21:29:51 2016 : Auth: Login OK: [3988672839/<CHAP-Password>] (from client [RB951]-Torre port 2154824634 cli MAC-ADDRES) Mon Aug 22 21:29:51 2016 : Info: No Pool-Name defined (did hs-server1 cli MAC-ADDRES port 2154824634 user 3988672839) Mon Aug 22 21:44:50 2016 : Info: Released IP 10.10.10.26 (did hs-server1 cli MAC-ADDRES user 3988672839) Mon Aug 22 21:44:50 2016 : Info: Released IP 10.10.10.26 (did hs-server1 cli MAC-ADDRES user 34234234234) I understand that at 17:39:09 the user logins OK. But latter at 18:06:43 Release the IP??? What is the meaning of that log Released IP? How can I increase debug level without running radius in console? Our network is: Ubiquity Rocket M5 <----> NanoLOCOM5. On each client the dhcp is manage by each NanoLOCOM5, our NanoLOCO have static IP. I have around 20 users will be a lot of info. Thanks, any comment will be appreciated.

3 4

Freeradius + Ldap - Authorise OK but NO dynamic VLANs
by Matthew Pulis 23 Aug '16

23 Aug '16

Hi all, I am trying to have dynamic VLAN assignment on Freeradius based on LDAP. The connection between Freeradius and LDAP works fine. If I test with a user I get the Authorise packet but not the dynamic VLAN assignment. We will be testing using this LDAP user: # ttester, SeminaryAdmin, SeminaryOU, seminary.local dn: cn=ttester,cn=SeminaryAdmin,ou=SeminaryOU,dc=seminary,dc=local cn: ttester givenName: Test gidNumber: 505 homeDirectory: /home/users/ttester sn: Tester objectClass: inetOrgPerson objectClass: posixAccount objectClass: top uidNumber: 1002 uid: ttester This is the received reply: radius@daloradius:~$ radtest -x ttester openldap localhost 1812 testing456 Sending Access-Request of id 30 to 127.0.0.1 port 1812 User-Name = "ttester" User-Password = "openldap" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 Message-Authenticator = 0x00000000000000000000000000000000 rad_recv: Access-Accept packet from host 127.0.0.1 port 1812, id=30, length=20 Freeradius version: FreeRADIUS Version 2.1.12, for host x86_64-pc-linux-gnu, built on Feb 27 2015 at 12:38:34 This is an extract of the Freeradius debug: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 38281, id=59, length=77 User-Name = "ttester" User-Password = "openldap" NAS-IP-Address = 127.0.1.1 NAS-Port = 1812 Message-Authenticator = 0xbe303901f2b855fb146f2f1fda9cd3fd # Executing section authorize from file /etc/freeradius/sites-enabled/default +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop ++[digest] returns noop [suffix] No '@' in User-Name = "ttester", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] No EAP-Message, not doing EAP ++[eap] returns noop [ldap] performing user authorization for ttester [ldap] expand: %{Stripped-User-Name} -> [ldap] ... expanding second conditional [ldap] expand: %{User-Name} -> ttester [ldap] expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -> (uid=ttester) [ldap] expand: ou=SeminaryOU,dc=seminary,dc=local -> ou=SeminaryOU,dc=seminary,dc=local [ldap] ldap_get_conn: Checking Id: 0 [ldap] ldap_get_conn: Got Id: 0 [ldap] attempting LDAP reconnection [ldap] (re)connect to seminary.local:389, authentication 0 [ldap] bind as cn=admin,dc=seminary,dc=local/FalseBINDINGPASS to seminary.local:389 [ldap] waiting for bind result ... [ldap] Bind was successful * [ldap] performing search in ou=SeminaryOU,dc=seminary,dc=local, with filter (uid=ttester)* [ldap] No default NMAS login sequence [ldap] looking for check items in directory... [ldap] userPassword -> Password-With-Header == "{SSHA}T4sU9zSLN/Auop+ImthH4nLyLG/rPU0R" [ldap] looking for reply items in directory... [ldap] user ttester authorized to use remote access [ldap] ldap_release_conn: Release Id: 0 ++[ldap] returns ok ++[expiration] returns noop ++[logintime] returns noop ++[pap] returns updated Found Auth-Type = PAP # Executing group from file /etc/freeradius/sites-enabled/default +- entering group PAP {...} [pap] login attempt with password "openldap" [pap] Using SSHA encryption. [pap] Normalizing SSHA1-Password from base64 encoding [pap] User authenticated successfully ++[pap] returns ok Login OK: [ttester] (from client localhost port 1812) # Executing section post-auth from file /etc/freeradius/sites-enabled/default +- entering group post-auth {...} ++[exec] returns noop Sending Access-Accept of id 59 to 127.0.0.1 port 38281 Finished request 0. Going to the next request Waking up in 4.9 seconds. Cleaning up request 0 ID 59 with timestamp +5 Ready to process requests. In any tutorials I am following this line: [ldap] performing search in ou=SeminaryOU,dc=seminary,dc=local, with filter (uid=ttester) .... should have the filter but in mine this is not coming. I am following this tutorial mainly: https://system-eng.blogspot.com.mt/2015/12/setting-up-freeradius-in-debian-… My config files: /etc/freeradius/modules/ldap : http://paste.ubuntu.com/23060929/ /etc/freeradius/sites-available/inner-tunnel : http://paste.ubuntu.com/23060930/ /etc/freeradius/sites-available/default : http://paste.ubuntu.com/23060931/ /etc/freeradius/users : http://paste.ubuntu.com/23060935/ Any idea where I should start looking at the problem please? Thanks and best regards Matthew Matthew Pulis web: www.matthewpulis.info mob: +356 79539404

4 32

Child is hung for request # in component session module
by Roman 23 Aug '16

23 Aug '16

Hi, Thanks for freeradius! I was googling and fight with this issue for the last 23 hours. My setup is: Mikrotik as PPPoE server and Debian Jessie 8.5 with Freeradius 2.2.5. Also tested with Debian Wheezy 7.11 and Freeradius 2.1.12. I use radutmp for Simultaneous-Use = 1 control and store users in users file. Don't plan to switch to SQL, as this setup won't grow that large. checkrad working fine on both setups (I use mikrotik_snmp method) So it asks Mikrotik by SNMP if there are virtual interfaces with usernames and reports if user allowed to login. The problem starts with stale sessions. We know, that accounting runs over udp and we could lose some logoff packets, but it should not be an issue, when checkrad does it's job. So if there is a session in radius server (radwho shows loged in user) and no session on PPPoE server, Freeradius just hangs and shows it in logs pretty honestly: ed Jul 13 01:41:02 2016 : Info: WARNING: Child is hung for request 17 in component session module . Wed Jul 13 01:41:02 2016 : Debug: Waking up in 0.1 seconds. Wed Jul 13 01:41:02 2016 : Info: WARNING: Child is hung for request 16 in component session module . Wed Jul 13 01:41:02 2016 : Debug: Waking up in 0.9 seconds. Wed Jul 13 01:41:03 2016 : Error: Discarding duplicate request from client cli-ter1-lo0 port 38676 - ID: 115 due to unfinished request 18 Wed Jul 13 01:41:03 2016 : Debug: Waking up in 0.3 seconds. Wed Jul 13 01:41:03 2016 : Info: WARNING: Child is hung for request 15 in component session module . Wed Jul 13 01:41:03 2016 : Debug: Waking up in 0.3 seconds. Nothing more interesting in logs. If I run server in debug mode, it just freezes on this step: Wed Jul 13 01:54:44 2016 : Info: # Executing section authorize from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group authorize { Wed Jul 13 01:54:44 2016 : Info: ++[preprocess] = ok Wed Jul 13 01:54:44 2016 : Info: [chap] Setting 'Auth-Type := CHAP' Wed Jul 13 01:54:44 2016 : Info: ++[chap] = ok Wed Jul 13 01:54:44 2016 : Info: ++[mschap] = noop Wed Jul 13 01:54:44 2016 : Info: [suffix] No '@' in User-Name = "tt23kswp17", looking up realm NULL Wed Jul 13 01:54:44 2016 : Info: [suffix] No such realm "NULL" Wed Jul 13 01:54:44 2016 : Info: ++[suffix] = noop Wed Jul 13 01:54:44 2016 : Info: [files] users: Matched entry tt23kswp17 at line 106 Wed Jul 13 01:54:44 2016 : Info: ++[files] = ok Wed Jul 13 01:54:44 2016 : Info: ++[expiration] = noop Wed Jul 13 01:54:44 2016 : Info: ++[logintime] = noop Wed Jul 13 01:54:44 2016 : Info: +} # group authorize = ok Wed Jul 13 01:54:44 2016 : Info: Found Auth-Type = CHAP Wed Jul 13 01:54:44 2016 : Info: # Executing group from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group CHAP { Wed Jul 13 01:54:44 2016 : Info: [chap] login attempt by "tt23kswp17" with CHAP password Wed Jul 13 01:54:44 2016 : Info: [chap] Using clear text password "secret" for user tt23kswp17 authentication. Wed Jul 13 01:54:44 2016 : Info: [chap] chap user tt23kswp17 authenticated succesfully Wed Jul 13 01:54:44 2016 : Info: ++[chap] = ok Wed Jul 13 01:54:44 2016 : Info: +} # group CHAP = ok Wed Jul 13 01:54:44 2016 : Info: # Executing section session from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group session { Wed Jul 13 01:54:44 2016 : Info: [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp Wed Jul 13 01:54:44 2016 : Info: [radutmp] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:54:44 2016 : Info: # Executing section preacct from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group preacct { Wed Jul 13 01:54:44 2016 : Info: ++[preprocess] = ok Wed Jul 13 01:54:44 2016 : Info: [acct_unique] WARNING: Attribute NAS-Identifier was not found in request, unique ID MAY be inconsistent Wed Jul 13 01:54:44 2016 : Info: [acct_unique] Hashing 'NAS-Port = 15728739,,NAS-IP-Address = my.ip,Acct-Session-Id = "81300063",User-Name = "tt23kswp17"' Wed Jul 13 01:54:44 2016 : Info: [acct_unique] Acct-Unique-Session-ID = "5cddac4e2d445dcf". Wed Jul 13 01:54:44 2016 : Info: ++[acct_unique] = ok Wed Jul 13 01:54:44 2016 : Info: [suffix] No '@' in User-Name = "tt23kswp17", looking up realm NULL Wed Jul 13 01:54:44 2016 : Info: [suffix] No such realm "NULL" Wed Jul 13 01:54:44 2016 : Info: ++[suffix] = noop Wed Jul 13 01:54:44 2016 : Info: ++[files] = noop Wed Jul 13 01:54:44 2016 : Info: +} # group preacct = ok Wed Jul 13 01:54:44 2016 : Info: # Executing section accounting from file /etc/freeradius/sites-enabled/default Wed Jul 13 01:54:44 2016 : Info: +group accounting { Wed Jul 13 01:54:44 2016 : Info: [detail] expand: %{Packet-Src-IP-Address} -> my.ip Wed Jul 13 01:54:44 2016 : Info: [detail] expand: /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d -> /var/log/freeradius/radacct/my.ip/detail-20160713 Wed Jul 13 01:54:44 2016 : Info: [detail] /var/log/freeradius/radacct/%{%{Packet-Src-IP-Address}:-%{Packet-Src-IPv6-Address}}/detail-%Y%m%d expands to /var/log/freeradius/radacct/my.ip/detail-20160713 Wed Jul 13 01:54:44 2016 : Info: [detail] expand: %t -> Wed Jul 13 01:54:44 2016 Wed Jul 13 01:54:44 2016 : Info: ++[detail] = ok and if i look at logs after some time, I get this: Wed Jul 13 01:42:29 2016 : Info: [radutmp] expand: /var/log/freeradius/radutmp -> /var/log/freeradius/radutmp Wed Jul 13 01:42:29 2016 : Info: [radutmp] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:42:29 2016 : Info: ++[radutmp] = ok Wed Jul 13 01:42:29 2016 : Info: [sradutmp] expand: /var/log/freeradius/sradutmp -> /var/log/freeradius/sradutmp Wed Jul 13 01:42:29 2016 : Info: [sradutmp] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:42:29 2016 : Info: ++[sradutmp] = ok Wed Jul 13 01:42:29 2016 : Info: ++[exec] = noop Wed Jul 13 01:42:29 2016 : Info: [attr_filter.accounting_response] expand: %{User-Name} -> tt23kswp17 Wed Jul 13 01:42:29 2016 : Debug: attr_filter: Matched entry DEFAULT at line 12 Wed Jul 13 01:42:29 2016 : Info: ++[attr_filter.accounting_response] = updated Wed Jul 13 01:42:29 2016 : Info: +} # group accounting = updated Wed Jul 13 01:42:29 2016 : Info: Finished request 1. Wed Jul 13 01:42:29 2016 : Debug: Going to the next request Wed Jul 13 01:42:29 2016 : Debug: Thread 7 waiting to be assigned a request Wed Jul 13 01:42:30 2016 : Info: Cleaning up request 1 ID 137 with timestamp +2 Wed Jul 13 01:42:30 2016 : Debug: Waking up in 3.9 seconds. Wed Jul 13 01:42:34 2016 : Info: Cleaning up request 0 ID 136 with timestamp +2 Wed Jul 13 01:42:34 2016 : Info: Ready to process requests. Wed Jul 13 01:54:21 2016 : Info: Ready to process requests. Wed Jul 13 01:54:21 2016 : Info: Signalled to terminate Wed Jul 13 01:54:21 2016 : Info: Exiting normally. Wed Jul 13 01:54:21 2016 : Debug: Thread 9 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 9 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 10 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 10 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 6 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 6 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 5 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 5 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 4 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 4 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 3 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 3 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 2 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 2 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 1 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 1 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 8 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 8 exiting... Wed Jul 13 01:54:21 2016 : Debug: Thread 7 got semaphore Wed Jul 13 01:54:21 2016 : Debug: Thread 7 exiting... Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 1 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 2 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 3 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 4 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 5 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 6 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 7 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 8 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 9 Wed Jul 13 01:54:21 2016 : Debug: Deleting thread 10 And none of users are able to login, I even can't radzap session. I have to delete the radutmp file and radacc directory and start Freeradius over to get ovet this. Any ideas? I've ran out of them. -- Best regards, Roman.

4 11

help with getting freeradius working with ldap..
by Jason Welsh 23 Aug '16

23 Aug '16

Im trying to migrate freeradius from an older server running freeradius 2.1.6. The new server is running from rpms installed on my centos 7 server. freeradius-3.0.4-6.el7.x86_64 freeradius-ldap-3.0.4-6.el7.x86_64 and Im trying to start up the freeradius server and in the logs i see Sun Aug 21 16:05:55 2016 : Info: Loaded virtual server <default> Sun Aug 21 16:05:55 2016 : Error: /etc/raddb/sites-enabled/default[489]: Failed to find "ldap" in the "modules" section. Sun Aug 21 16:05:55 2016 : Error: /etc/raddb/sites-enabled/default[489]: Failed to parse "ldap" entry. Sun Aug 21 16:05:55 2016 : Error: Failed to load virtual server default [root@newjed mods-enabled]$pwd /etc/raddb/mods-enabled [root@newjed mods-enabled]$ls -al ldap lrwxrwxrwx 1 root root 22 Aug 21 21:28 ldap -> ../mods-available/ldap [root@newjed mods-enabled]$ what else to check? Jason --

3 4

FreeRADIUS - The authentication server is unresponsive.
by NavinS Luthor 22 Aug '16

22 Aug '16

Hello FreeRADIUS experts, hope you are all well! Not sure where or what did i configure wrong, most thing are in default but still facing "The authentication server is unresponsive" error. I've complied step by step what i did in below docs, please help advice me where im wrong. Step by step: https://docs.google.com/document/d/1FE0Db4OacQjbCk_2ba QQ9WsOEDChDK6uomW3kJGgxtA/edit?usp=sharing Any and all help is much appreciated.

3 7

Problem with dailycounter
by Frederic Fichter 21 Aug '16

21 Aug '16

Hello all, Can't understand why my dailycounter is always empty ? See message below "dailycounter: No integer found in result string """ The radacct table in MySQL is correctly updated. My freeradius is : radiusd: FreeRADIUS Version 3.0.11, for host armv7l-unknown-linux-gnu, built on Jul 15 2016 at 22:02:47 What additional information should I give here ? Here's an extract of freeradius debug : (5) dailycounter: EXPAND %{User-Name} (5) dailycounter: --> test01 (5) dailycounter: SQL-User-Name set to 'test01' rlm_sql (sql): Reserved connection (11) (5) dailycounter: Executing select query: SELECT SUM(acctsessiontime - GREATEST((1471730400 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username = 'test01' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1471730400' (5) dailycounter: NULL value in first column of result rlm_sql (sql): Released connection (11) (5) dailycounter: EXPAND %{sql:SELECT SUM(acctsessiontime - GREATEST((1471730400 - UNIX_TIMESTAMP(acctstarttime)), 0)) FROM radacct WHERE username = '%{User-Name}' AND UNIX_TIMESTAMP(acctstarttime) + acctsessiontime > '1471730400'} (5) dailycounter: --> (5) dailycounter: No integer found in result string "". May be first session, setting counter to 0 (5) dailycounter: Allowing user, &control:Max-Daily-Session value (3600) is greater than counter value (0) (5) dailycounter: Setting &reply:Session-Timeout value to 3600 (5) [dailycounter] = ok (5) [expiration] = noop Thanks much for your help ;) Best, Fred

2 4

RadPerf running in another server.
by Jim 19 Aug '16

19 Aug '16

Hello, I'm currently running FreeRADIUS 3.0.4 on a CentOS server and I wanted to use RadPerf for testing. Since I cannot install RadPerf in CentOS, I installed RadPerf in a separate Ubuntu 14.04 server, my question is: which is better for RadPerf installation? on the same server where FreeRADIUS was installed or different server?

4 4

Allowing clients with dynamic IP address
by Anuruddha Premalal 19 Aug '16

19 Aug '16

Hi All, Is it possible to host free-radius in Amazon cloud with a static DNS and connect clients (access points) who doesn't have a static IP address only with the secret?. I went through the clients.conf file and wasn't able to find information on that. If this doesn't support out of the box, is there any extension point which could validate some thing like below and allow any ip address with the proper secret to get authenticate.(something similar to the extensions of python module) client myexternalclient { ipaddr = 0.0.0.0 secret = testing123 } I understand this is going to allow a huge security whole. Do you guys have any better suggestions to use an externally hosted radius server without a static ip address assigned to the access point? Thanks, -- *Anuruddha Premalala (MIEEE)Mobile : +94717213122E-mail : anuruddhapremalal(a)gmail.com <anuruddhapremalal(a)gmail.com>web : www.anuruddha.org <http://www.anuruddha.org>Sri Lanka.*

2 1