Hi all, What do I need to do for use eap2 module? I want to use GPSK or PSK. Can anybody help me with the configuration? Thanks.
Alan DeKok wrote:
Fernando wrote:
Hi all,
What do I need to do for use eap2 module? I want to use GPSK or PSK.
Can anybody help me with the configuration?
Read raddb/experimental.conf. There is NO other documentation.
Thanks, and... what is the hostap's version needed to use the extra modules? and... how to build the libeap.so, any ideas?
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan DeKok wrote:
Fernando wrote:
Thanks, and... what is the hostap's version needed to use the extra modules? and... how to build the libeap.so, any ideas?
Perhaps you could try reading raddb/experimental.conf.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Yes, I read the file but it only says that the module libeap.so is needed. I don't know how build it :(. I've downloaded the hosapd 0.6.1 but there is no way to obtain the library. So can you provide me with some tips to build libeap.so? Thanks, Fernando.
Fernando wrote:
Yes, I read the file but it only says that the module libeap.so is needed. I don't know how build it :(. I've downloaded the hosapd 0.6.1 but there is no way to obtain the library. So can you provide me with some tips to build libeap.so?
Edit the Makefiles that refer to libeap.a, and add a libeap.so target. This module IS experimental. It DOES require some Unix compiler skills to get working. You MAY get this to work more easily in a later version of hostapd. It MAY include support for building libeap.so. But I haven't tried. Alan DeKok.
Alan DeKok wrote:
Fernando wrote:
Yes, I read the file but it only says that the module libeap.so is needed. I don't know how build it :(. I've downloaded the hosapd 0.6.1 but there is no way to obtain the library. So can you provide me with some tips to build libeap.so?
Edit the Makefiles that refer to libeap.a, and add a libeap.so target.
This module IS experimental. It DOES require some Unix compiler skills to get working.
You MAY get this to work more easily in a later version of hostapd. It MAY include support for building libeap.so. But I haven't tried.
Thanks for the tips. I have obtained libeap.so and I have compiled rlm_eap2. But now for using the eap2 module must it be configured in some place?... radiusd.conf or eap.conf... include experimental.conf in radiusd.conf... I have been trying some things without result... can you help me with the configuration? Thanks, Fernando.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi all, Alan you can ignore the message before. But, what is the information needed to put in LD_PRELOAD? Thanks. Fernando wrote:
Alan DeKok wrote:
Fernando wrote:
Yes, I read the file but it only says that the module libeap.so is needed. I don't know how build it :(. I've downloaded the hosapd 0.6.1 but there is no way to obtain the library. So can you provide me with some tips to build libeap.so?
Edit the Makefiles that refer to libeap.a, and add a libeap.so target.
This module IS experimental. It DOES require some Unix compiler skills to get working.
You MAY get this to work more easily in a later version of hostapd. It MAY include support for building libeap.so. But I haven't tried.
Thanks for the tips. I have obtained libeap.so and I have compiled rlm_eap2. But now for using the eap2 module must it be configured in some place?... radiusd.conf or eap.conf... include experimental.conf in radiusd.conf... I have been trying some things without result... can you help me with the configuration?
Thanks, Fernando.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Fernando wrote:
Alan you can ignore the message before.
But, what is the information needed to put in LD_PRELOAD?
Whatever is needed to get the dynamic linker to load the libraries from where you installed them. It's your system... you can read the "man" page for the linker. You can remember where you installed the libraries. This list isn't the place to learn Unix development. Alan DeKok.
Alan DeKok wrote:
Fernando wrote:
Alan you can ignore the message before.
But, what is the information needed to put in LD_PRELOAD?
Whatever is needed to get the dynamic linker to load the libraries from where you installed them.
Yes, it's works now, but I cann't execute any method... I'm trying eap-md5 but nothing happens. I put in authentication section (eap2) I remove eap module and I add experimentation.conf to radiusd.conf do I need do anything more? Thank you very much, Fernando. Here the request... Ready to process requests. rad_recv: Access-Request packet from host 192.168.1.5 port 32771, id=0, length=174 User-Name = "fernando" NAS-IP-Address = 127.0.0.1 NAS-Identifier = "fernando.atica.um.es" NAS-Port = 0 Called-Station-Id = "00-40-96-B2-13-4E:test" Calling-Station-Id = "00-13-F7-23-FB-E3" Framed-MTU = 1400 NAS-Port-Type = Wireless-802.11 Connect-Info = "CONNECT 0Mbps 802.11" EAP-Message = 0x02c6000d016665726e616e646f Message-Authenticator = 0x702236655925bc2e878dce8dba4dad53 +- entering group authorize ++[preprocess] returns ok ++[chap] returns noop ++[mschap] returns noop rlm_realm: No '@' in User-Name = "fernando", looking up realm NULL rlm_realm: No such realm "NULL" ++[suffix] returns noop ++[unix] returns updated users: Matched entry fernando at line 1 ++[files] returns ok ++[expiration] returns noop ++[logintime] returns noop rlm_pap: No clear-text password in the request. Not performing PAP. ++[pap] returns noop auth: No User-Password or CHAP-Password attribute in the request auth: Failed to validate the user. Login incorrect: [fernando/<no User-Password attribute>] (from client 192.168.1.5 port 0 cli 00-13-F7-23-FB-E3)
It's your system... you can read the "man" page for the linker. You can remember where you installed the libraries.
This list isn't the place to learn Unix development.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Fernando wrote:
Yes, it's works now, but I cann't execute any method... I'm trying eap-md5 but nothing happens. I put in authentication section (eap2) I remove eap module and I add experimentation.conf to radiusd.conf do I need do anything more?
You deleted "eap", but didn't add "eap2". Please familiarize yourself with the configuration files before editing them. Alan DeKok.
Alan DeKok wrote:
Fernando wrote:
Yes, it's works now, but I cann't execute any method... I'm trying eap-md5 but nothing happens. I put in authentication section (eap2) I remove eap module and I add experimentation.conf to radiusd.conf do I need do anything more?
You deleted "eap", but didn't add "eap2".
Yes, I added eap2 in authentication section, see this... Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_eap2 Module: Instantiating eap2 eap2 { timer_expire = 60 cisco_accounting_username_bug = no } but there isn't eap method showed. see my eap2 module... eap2 { md5 { } } I added eap2 to the radiusd.conf too and I added a user in users file. Do I need to do anything else? My objective is to test EAP-GSPK but before I want to test EAP-MD5. Thanks, Fernando.
Please familiarize yourself with the configuration files before editing them.
Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Fernando wrote:
Alan DeKok wrote:
You deleted "eap", but didn't add "eap2".
Yes, I added eap2 in authentication section, see this...
Are you really sure you know what you're doing?
Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_eap2 Module: Instantiating eap2 eap2 { timer_expire = 60 cisco_accounting_username_bug = no
These are not configuration items for the "eap2" module. Why did you add them?
I added eap2 to the radiusd.conf too and I added a user in users file.
Do I need to do anything else?
Yes:
Please familiarize yourself with the configuration files before editing them.
Alan DeKok.
Alan DeKok wrote:
Fernando wrote:
Alan DeKok wrote:
You deleted "eap", but didn't add "eap2".
Yes, I added eap2 in authentication section, see this...
Are you really sure you know what you're doing?
Module: Checking authenticate {...} for more modules to load Module: Linked to module rlm_eap2 Module: Instantiating eap2 eap2 { timer_expire = 60 cisco_accounting_username_bug = no
These are not configuration items for the "eap2" module. Why did you add them?
I added eap2 to the radiusd.conf too and I added a user in users file.
Do I need to do anything else?
Ok, thanks for your time :) I was missing AN IMPORTANT thing in the users file, it was making me crazy "AUTH-TYPE := EAP2" I forgot it. Now EAP-MD5 using EAP2 works properly. Thanks a lot :), If you want some kind of guide for configuring EAP2 properly for the rest of the freeradius's user let me know and I'll provide it to you.
Yes:
Please familiarize yourself with the configuration files before editing them.
Alan DeKok.
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (2)
-
Alan DeKok -
Fernando