Re: How to desactivate freeradius to open the network ?
I use Freeradius on Debian with mac-based authentification along with a MySQL database containing the mac addresses (as Login & Password). I would like to open the network to everyone, so I wonder how to make freeradius to authorize any mac address to open the network ?
Why bother with radius at all. Just open the authentication on the NAS. Ivan Kalik Kalik Informatika ISP
Is there a way to configure FreeRADIUS to accept authentication requests from any AP. In other words, I don't want to have to pre-configure access points in the client.conf. Thank you, Bill
Is there a way to configure FreeRADIUS to accept authentication requests from any AP. In other words, I don't want to have to pre-configure access points in the client.conf.
No. You have to configure shared secret for radius to work. ipaddr accepts subnets as well. Ivan Kalik Kalik Informatika ISP
Yep - I think you'd need at least a couple lines in Clients.conf, but you don't have to configure a separate block for EVERY AP. -----Original Message----- From: freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell.com@lists.freeradius.or g] On Behalf Of Ivan Kalik Sent: Monday, August 31, 2009 4:57 PM To: FreeRadius users mailing list Subject: Re: process auth request from any AP
Is there a way to configure FreeRADIUS to accept authentication requests from any AP. In other words, I don't want to have to pre-configure access points in the client.conf.
No. You have to configure shared secret for radius to work. ipaddr accepts subnets as well. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html <font size="1"> <div style='border:none;border-bottom:double windowtext 2.25pt;padding:0in 0in 1.0pt 0in'> </div> "This email is intended to be reviewed by only the intended recipient and may contain information that is privileged and/or confidential. If you are not the intended recipient, you are hereby notified that any review, use, dissemination, disclosure or copying of this email and its attachments, if any, is strictly prohibited. If you have received this email in error, please immediately notify the sender by return email and delete this email from your system." </font>
On Tue, Sep 1, 2009 at 4:57 AM, Ivan Kalik<tnt@kalik.net> wrote:
Is there a way to configure FreeRADIUS to accept authentication requests from any AP. In other words, I don't want to have to pre-configure access points in the client.conf.
No. You have to configure shared secret for radius to work. ipaddr accepts subnets as well.
Would specifying 0.0.0.0/0 make it accept all client IPs, as long as shared secret is correct? -- Fajar
Hi,
Is there a way to configure FreeRADIUS to accept authentication requests from any AP. In other words, I don't want to have to pre-configure access points in the client.conf.
you can define a netmask to cover all clients - but without preconfiguring a shared secret on the NAS? nope...need a shared secret. alan
You have done the most hard part which is configuring the radius and keying in its IP into your AP so what is wrong with adding a key? if you share your thoughts with us we might find another suitable solution for your problem. I guess you would like to hijack other radius connections passing somehow through your radius server and return it back to its original destination, right? Regards Sameh Attia -- - Failure is not an option; it is a built-in feature in Windows. - The two basic principles of system administration: * For minor problems, reboot * For major problems, reinstall dc -e '603178305900664311156641389051003470569569613466992253686426210705237258P' On Tue, Sep 1, 2009 at 12:36 AM, William Rettig <WRettig@efji.com> wrote:
Is there a way to configure FreeRADIUS to accept authentication requests from any AP. In other words, I don't want to have to pre-configure access points in the client.conf.
Thank you,
Bill
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (6)
-
Alan Buxey -
Fajar A. Nugraha -
Gary Gatten -
Ivan Kalik -
Sameh Attia -
William Rettig