Re: Freeradius-Users Digest, Vol 160, Issue 18

16 Aug 2018

      Hi ,

I tried doing the wget method in the link which you gave . But I am not
able to see the "archive" directory in that path.
I am using the github account (cisco specific)
Please let me know how I can get the access for that file

Thanks,
Arun

On Mon, Aug 13, 2018 at 3:30 PM <
freeradius-users-request@lists.freeradius.org> wrote:
...
Send Freeradius-Users mailing list submissions to
        freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit
        http://lists.freeradius.org/mailman/listinfo/freeradius-users
or, via email, send a message with subject or body 'help' to
        freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at
        freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific
than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. "Suite B TLS cipher suite" support (elmerhe)
   2. RE: Freeradius-Users Digest, Vol 160, Issue 16
      (WAGHORN, Jason (NHS BORDERS))
   3. Re: Filtering out Proxy-State in COA to fix broken Cisco NAS
      (Fraser McGlinn)
----------------------------------------------------------------------
Message: 1
Date: Mon, 13 Aug 2018 14:13:47 +0800
From: "elmerhe" <elmerhe@aliyun.com>
To: "freeRADIUS" <freeradius-users@lists.freeradius.org>
Subject: "Suite B TLS cipher suite" support
Message-ID: <8dc3d6ec-70d8-40a4-a678-b30ec918500e.elmerhe@aliyun.com>
Content-Type: text/plain; charset="UTF-8"
Hi Freeradius experts,
I want to know if freeRADIUS supports "Suite B TLS cipher suite" which is
required by WPA3-enterprise.  If yes, any specific configuration is needed?
Thanks,
John.
------------------------------
Message: 2
Date: Mon, 13 Aug 2018 07:21:44 +0000
From: "WAGHORN, Jason (NHS BORDERS)" <j.waghorn1@nhs.net>
To: FreeRadius users mailing list
        <freeradius-users@lists.freeradius.org>
Subject: RE: Freeradius-Users Digest, Vol 160, Issue 16
Message-ID: <4ed9474f7f044be5b3e178da3b3bb936@NH-SLPEX176.AD1.NHS.NET>
Content-Type: text/plain; charset="utf-8"
...
From: Freeradius-Users [mailto:freeradius-users-bounces+j.waghorn1=
nhs.net@lists.freeradius.org] On Behalf Of Arun NP
...
Hi ,
I am doing a yum install  & it is supposed to bring the latest version rt
?
. Please let me know how I can get the version which you are using
(3.0.17)
. I am using centos 7 does the version which you mentioned exist for the
same ?  please inform me
http://networkradius.com/freeradius-packages/ or compile it yourself
using the instructions in the Wiki
https://wiki.freeradius.org/building/RHEL%20and%20Centos
Jason Waghorn
Senior Infrastructure Engineer
NHS Borders | IT Services | Huntlyburn Terrace | Borders General Hospital
| Melrose | TD6 9BS
N direct: 01896 827 760 |  ext: 27760 | email:j.waghorn1@nhs.net |@
mobile: 0747 100 5116
********************************************************************************************************************
This message may contain confidential information. If you are not the
intended recipient please inform the
sender that you have received the message in error before deleting it.
Please do not disclose, copy or distribute information in this e-mail or
take any action in relation to its contents. To do so is strictly
prohibited and may be unlawful. Thank you for your co-operation.
NHSmail is the secure email and directory service available for all NHS
staff in England and Scotland. NHSmail is approved for exchanging patient
data and other sensitive information with NHSmail and other accredited
email services.
For more information and to find out how you can switch,
https://portal.nhs.net/help/joiningnhsmail
------------------------------
Message: 3
Date: Mon, 13 Aug 2018 17:56:26 +1000
From: Fraser McGlinn <fraser@frizianz.com>
To: freeradius-users@lists.freeradius.org
Subject: Re: Filtering out Proxy-State in COA to fix broken Cisco NAS
Message-ID: <2660278386ca44f737aaed0528fae149@frizianz.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Thanks Alan, that helps a lot. Great info in that draft RFC.
On 2018-08-10 22:12, Alan DeKok wrote:
...
On Aug 8, 2018, at 9:19 PM, Fraser McGlinn <fraser@frizianz.com> wrote:
...
Trying to get COA proxying working with a Cisco NAS. Unfortunately
they have a broken implementation where if Proxy-State is in the
request it drops it.
That's based on a naive reading of RFC 5176.  Happily, my new draft
clarifies this.  It should be an RFC this year:
https://tools.ietf.org/html/draft-ietf-radext-coa-proxy-03
...
I dug and found this old thread
http://lists.freeradius.org/pipermail/freeradius-users/2012-April/060456.htm...
...
implying that we can filter out Proxy-State in attr_filter, however
i've had some issues getting this working. Although this was relevant
to freeradius 2x, i'm running 3.0.16.
Any other ways to achieve this? Hoping someone can point me in the
right direction.
You can delete the Proxy-State attribute in the "pre-proxy" section:
pre-proxy {
      ...
      update proxy-request {
              Proxy-State !* ANY
      }
      ...
}
Hope that helps.
Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
------------------------------
Subject: Digest Footer
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
------------------------------
End of Freeradius-Users Digest, Vol 160, Issue 18
*************************************************

Arun NP

tags

participants (1)