Does anybody have any suggestions, could this be a bug ? Shall i try another version, its running on RHEL 7 Free radius version 3.0.1

From: freeradius-users-request@lists.freeradius.org Subject: Freeradius-Users Digest, Vol 113, Issue 128 To: freeradius-users@lists.freeradius.org Date: Mon, 29 Sep 2014 04:06:31 +0200

Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org

To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org

You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org

When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."

Today's Topics:

1. Re: How to send disconnect message to the NAS? (Alan DeKok) 2. Re: EAP and rlm_perl. Is it possible to build custom logic for VPN peers? (Oleksandr Yermolenko) 3. Re: EAP and rlm_perl. Is it possible to build custom logic for VPN peers? (Oleksandr Yermolenko) 4. version 2.2.5 repo (Rando Nakarmi) 5. Re: version 2.2.5 repo (Alan DeKok) 6. Re: EAP and rlm_perl. Is it possible to build custom logic for VPN peers? (Alan DeKok) 7. Re: Problem in Module Statistics in freeradius (Himanshu Pandey)

----------------------------------------------------------------------

Message: 1 Date: Sun, 28 Sep 2014 11:08:16 -0400 From: Alan DeKok <aland@deployingradius.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: Re: How to send disconnect message to the NAS? Message-ID: <54282460.1090603@deployingradius.com> Content-Type: text/plain; charset=ISO-8859-1

Xin wrote:

...

Thanks a lot for your reply, I have understood I can use update control section to control send or not. And one more question, what is the virtual server in home_server_pool section. Just find the server originate-coa.example.com section?

The behavior is documented in that file.

...

If this is right, can you tell me the usage of pre-proxy section? I have already understand the purpose of the post-proxy is to handle the COA/DM response.

Read the file. This is documented.

Alan DeKok.

------------------------------

Message: 2 Date: Sun, 28 Sep 2014 18:52:59 +0300 From: Oleksandr Yermolenko <aae@sumix.com> To: Alan DeKok <aland@deployingradius.com> Subject: Re: EAP and rlm_perl. Is it possible to build custom logic for VPN peers? Message-ID: <54282EDB.20904@sumix.com> Content-Type: text/plain; charset=utf-8; format=flowed

...

...

Is it possible to use any of EAP methods (I mean EAP-PEAP, EAP-TTLS or EAP-TLS ...) with rlm_perl. What does that mean? can I use authenticate, authorize, accounting hooks (or post_auth)? I looked at example.pl.

Just put "perl" in somewhere eap.conf file?

...

You can run the perl module when the server receives a packet. It doesn't matter whether the packet contains PAP, CHAP, MS-CHAP, or any EAP type.

What do you want to *do* in rlm_perl? Knowing that probably more useful, and will get you a better answer.

authenticate a lot of VPN clients (currently I can choose EAP method), keeping them in mysql or ldap. According their properties give a personal access to different local resources. Accounting: updating start/stop/alive messages. POD if it's possible for strongswan.

...

Alan DeKok.

------------------------------

Message: 3 Date: Sun, 28 Sep 2014 18:52:59 +0300 From: Oleksandr Yermolenko <aae@sumix.com> To: Alan DeKok <aland@deployingradius.com> Subject: Re: EAP and rlm_perl. Is it possible to build custom logic for VPN peers? Message-ID: <54282EDB.20904@sumix.com> Content-Type: text/plain; charset=utf-8; format=flowed

...

...

Is it possible to use any of EAP methods (I mean EAP-PEAP, EAP-TTLS or EAP-TLS ...) with rlm_perl. What does that mean? can I use authenticate, authorize, accounting hooks (or post_auth)? I looked at example.pl.

Just put "perl" in somewhere eap.conf file?

...

You can run the perl module when the server receives a packet. It doesn't matter whether the packet contains PAP, CHAP, MS-CHAP, or any EAP type.

What do you want to *do* in rlm_perl? Knowing that probably more useful, and will get you a better answer.

authenticate a lot of VPN clients (currently I can choose EAP method), keeping them in mysql or ldap. According their properties give a personal access to different local resources. Accounting: updating start/stop/alive messages. POD if it's possible for strongswan.

...

Alan DeKok.

------------------------------

Message: 4 Date: Sun, 28 Sep 2014 19:14:18 +0000 From: Rando Nakarmi <randonakarmi@gmail.com> To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Subject: version 2.2.5 repo Message-ID: <CAG+85v_XJ_v8cJGu-tMqi+eWNSsnME=7mZcv5yqAhB6d9K+_KA@mail.gmail.com> Content-Type: text/plain; charset="utf-8"

HI,

I see both in RHEL and epel , the freeradius version 2.1.12-4 is available but not the 2.2.5 which is the newest version on 2.x.x series.

I am used to do yum, where can I get version 2.2.5 in yum repo for RHEL base linux.

R