- Freeradius-Users - lists.freeradius.org

DHCP Option 282
by Дмитрий Симоненко 23 Feb '15

23 Feb '15

How to get rid of DHCP-Inform requests (option 252..... WPAD)??? what add to the dictionary.dhcp and radiusd.conf??? Help please!!! __________________________ С уважением, Симоненко Д.В.

1 0

User file Includes and DEFAULT section.
by Marc Beaumont 23 Feb '15

23 Feb '15

Hi, I'm taking over admin of a bunch of freeradius servers and I'm trying to simplify the users definition file. >From the documentation I can see that you can specify a file to include using the $INCLUDE statement, but I wanted to know if it's possible to include a directory that just has files in and those are automatically included? Also I attempting to specify a DEFAULT section and move all common user entry lines there. Should the DEFAULT section be at the top of the users file or at the bottom as it doesn't seem to work correctly. My DEFAULT section has passthrough set. Marc Scanned by MailDefender - managed email security from intY - www.maildefender.net

2 1

Implementating Ldap userPassword in crypt/sha password with eap ttls mschapv2 /eap peap mschapv2
by Sautron Nick 23 Feb '15

23 Feb '15

Hello everyone, I installed freeradius 2.2.6, and I try to Implement an ldap server, however this ldap password server are "crypt" and "SHA". My question is: Would it be possible to implemente ldap with word passes into crypt/sha, with authentication method EAP TTLS mschapv2 / EAP peap mschapv2 ? Thank you for your answer and enlighten me on this. Best Regards

3 3

Implementing EAP-AKA in FreeRadius 2.2.6 + hostapd
by Landau, Nir 22 Feb '15

22 Feb '15

Hi, I know this subject may have been asked before but I didn't get the answer I was looking for so I will ask again thoroughly. All the basic facts: - I have installed FreeRadius version 2.2.6 including the rlm_sim and rlm_sim_files modules - I have successfully connected a mobile phone through EAP-SIM and it worked perfectly - I have generated the hostapd libeap.so library - I have generated quintlets for the aka auth - I have read the file raddb/experimental.conf file So after laying down all the things I have done I want to understand how to connect with the EAP-AKA. I understand that the code that runs is not part of FreeRadius and that is why we need the libeap file What I don't understand is the configuration I need to make in the FreeRadius and how everything is connected. What exactly do I need to do? (A step by step instructions would be great). Thank you very much Nir This electronic message may contain proprietary and confidential information of Verint Systems Inc., its affiliates and/or subsidiaries. The information is intended to be for the use of the individual(s) or entity(ies) named above. If you are not the intended recipient (or authorized to receive this e-mail for the intended recipient), you may not use, copy, disclose or distribute to anyone this message or any information contained in this message. If you have received this electronic message in error, please notify us by replying to this e-mail.

2 1

Freeradius reply to mikrotik for limitation bandwidth
by Jellf Nainggolan 22 Feb '15

22 Feb '15

Helo, I have a server freeradius for authentication users DHCP on my network. connection and dhcp server control by the mikrotik. now i can set IP for client base on freeradius reply. but i have a issue how to control users bandwidth. can we push mikrotik to create profiling for users with avp reply from radius? Thanks

2 1

I would like to get some referrals on a start point into FreeRadius.
by Eliezer Croitoru 21 Feb '15

21 Feb '15

Hey, My name is Eliezer Croitoru and I was interested in FreeRadius since long ago but never had the chance to get some guidance about the right path with it. I must say that most of my experience years are with PC and just now started with more advanced setups. I wanted to integrate squid with FreeRadius in some setup but unsure where and how would be the right starter point. I have seen setups with LDAP and it from a reason seems a bit complicated to my eyes since I do not have enough knowledge about it. So in general I am looking for recommendations about the right path to learn. Thanks, Eliezer

1 0

FreeRadius LDAP Simultaneous-Use more than 1
by Reilly, Paul 21 Feb '15

21 Feb '15

So after some configuration I was to make Freeradius work with MS AD using groups to modify vlan-id and everything seemed to be working great. I tested Simultaneous-Use with the following configuration and it was working but when I switch it to ":= 2" it fails to stop users after the second login. It stops users correctly if I set it to 1 but fails on two. I can see the user logins using radwho but it only ever shows 1 login. Do I have to use Mysql to use Simultaneous-Use if the value is greater than 1? /etc/freeradius/users DEFAULT Ldap-Group == "MS-AD-GROUP",Simultaneous-Use := 2 (works if set to 1) Fall-Through = NO From Paul Reilly

2 6

Re: questions about module rlm_perl
by hak＠cooper.edu 21 Feb '15

21 Feb '15

Thanks for the reply! The documentation for rlm_perl is a little light. If the desire is to deprecate the Check list, Perl's glob wildcarding mechanism can be used to equate the two. Such as Perl code *RAD_CHECK=*RAD_CONFIG. It has been a long time since I did Perl/C interface code, but there should be an easy way to do this from C in rlm_perl.c that links the two so they are the same actual hash. So to summarize: the variable RAD_CHECK is read/write, but when one writes to it from inside the Perl code, the effect is actually to modify/set name-value pairs in the CONFIG list?

2 1

WPA2 Enterprise with Windows 7
by HCC Lists 20 Feb '15

20 Feb '15

Hello I am being thrown into a project head first and trying to get up to speed. From what I have read I need to have a certificate for using WPA2 Enterprise. I would prefer not having to go to each machine spread geographically around a fairly wide area to install a CA certificate. Is it possible to use a purchased certificate so that Windows 7 recognizes it and will connect? I think I only need one certificate for the RADIUS server, but still unsure. Does it work with multiple SSID's from different AP's? What about redundant RADIUS servers? Do I need a certificate for each? I have googled and not seen anything definitive for these questions. I will continue to search, but hopefully someone who has this sort of setup working can answer those questions and I can carry on with getting it setup. Thanks Michael

4 4

questions about module rlm_perl
by hak＠cooper.edu 20 Feb '15

20 Feb '15

Working with version 2.2.6, two questions about rlm_perl, perhaps these belong on the developers list? 1: Why is this module unable to set items on the CONFIG list? Looking in the source code rlm_perl.c at function rlmperl_call, the hashes RAD_REPLY,RAD_CHECK,RAD_CONFIG,RAD_REQUEST,RAD_REQUEST_PROXY and RAD_REQUEST_PROXY_REPLY are all pre-loaded with the value pairs from the corresponding lists before the perl subroutine (e.g. authorize) is called. After the subroutine returns, all of these hashes are examined and the values put back into the radiusd value pairs, except RAD_CONFIG. I have worked around it, but why can't this module do this? 2: The detach subroutine is a placebo. It doesn't get called during SIGHUP processing because in main/modules.c, before reloading a module, the code checks to see if the RLM_TYPE_HUP_SAFE flag is set. rlm_perl.c does not set this flag. There are some sketchy areas of the perl_detach function so maybe this didn't work or caused crashes? Again, I can work around it but it would have been nice to hook SIGHUP and take certain actions, e.g. suppose your Perl module has additional config stuff that needs to be reloaded.

3 2