virtual servers => 2 different user files
Hello list, I would like to use one freeradius for 2 different NAS-groups. Therefore I need two different users files, one for each instance. I tried to make the module configuration per virtual server, which seems not to be working. Does anybody has a trick to get this working? BR Uwe
Hello On Tue, Aug 25, 2009 at 08:29:49AM +0200, kisteorg google wrote:
Hello list,
I would like to use one freeradius for 2 different NAS-groups. Therefore I need two different users files, one for each instance. I tried to make the module configuration per virtual server, which seems not to be working.
Does anybody has a trick to get this working?
You can try to add named files {} section into modules/files configuration. For example files files-auth1 { ... } files files-auth2 { ... } files files-acct { ... } And You can use each module in authorize or preacct sections. For example server auth1 { authorize { ... files-auth1 ... } } server auth2 { authorize { ... files-auth2 ... } } server acct { preacct { ... files-acct ... } }
kisteorg google wrote:
I would like to use one freeradius for 2 different NAS-groups. Therefore I need two different users files, one for each instance. I tried to make the module configuration per virtual server, which seems not to be working.
You need to create two instances of the "files" module. Where it now has: files { ... } Replace that with: files foo { ... } files bar { ... } And point the "usersfile", etc. to different files in each one. Alan DeKok.
Hi, I have strange behavior on my freeradius. I try to make it ask for client certificate as part of EAP-TTLS authentication. I added the configuration EAP-TLS-Require-Client-Cert = Yes to users configuration file as control for my username. And got the following LOG TLS_accept: SSLv3 write server done A [ttls] TLS_accept: SSLv3 flush data [ttls] TLS_accept: Need to read more data: SSLv3 read client certificate However, the sniffing shows no client certificate sending and there is no cert request sent by the server You can see it below Thanks for your help.
Forgot to add the sniffing results earlier Hi, I have strange behavior on my freeradius. I try to make it ask for client certificate as part of EAP-TTLS authentication. I added the configuration EAP-TLS-Require-Client-Cert = Yes to users configuration file as control for my username. And got the following LOG TLS_accept: SSLv3 write server done A [ttls] TLS_accept: SSLv3 flush data [ttls] TLS_accept: Need to read more data: SSLv3 read client certificate However, the sniffing shows no client certificate sending and there is no cert request sent by the server You can see it below Thanks for your help. Radius Protocol Code: Access-challenge (11) Packet identifier: 0x2 (2) Length: 1090 Authenticator: 30C0590D2DA3E4BBA06A60E9956D6441 Attribute Value Pairs AVP: l=255 t=EAP-Message(79) Segment[1] AVP: l=255 t=EAP-Message(79) Segment[2] AVP: l=255 t=EAP-Message(79) Segment[3] AVP: l=255 t=EAP-Message(79) Segment[4] AVP: l=14 t=EAP-Message(79) Last Segment[5] EAP fragment Extensible Authentication Protocol Code: Request (1) Id: 3 Length: 1024 Type: EAP-TTLS [RFC5281] (21) Flags(0xC0): Length More TTLS version 0 Length: 3578 [EAP-TLS Fragments (3578 bytes): #14(1014), #16(1014), #18(1014), #20(536)] Secure Socket Layer TLSv1 Record Layer: Handshake Protocol: Server Hello TLSv1 Record Layer: Handshake Protocol: Certificate TLSv1 Record Layer: Handshake Protocol: Server Key Exchange TLSv1 Record Layer: Handshake Protocol: Server Hello Done AVP: l=18 t=Message-Authenticator(80): 3B8DD2F0E3AE6A6C08BA6B8CC5A12D8B AVP: l=18 t=State(24): A97FDCBBAB7CC99E1A7630EF1EB500F8 State: A97FDCBBAB7CC99E1A7630EF1EB500F8
Hello list,
I would like to use one freeradius for 2 different NAS-groups. Therefore I need two different users files, one for each instance. I tried to make the module configuration per virtual server, which seems not to be working.
Does anybody has a trick to get this working?
You can do this with the single users file by defining NAS groups in (sql)huntgroups. Then combine Huntgroup-Name with user entries. Ivan Kalik Kalik Informatika ISP
participants (5)
-
Alan DeKok -
George Koulyabin -
Ivan Kalik -
kisteorg google -
Yoni Levin