I'm trying to setup freeradius with ldap for use with a wireless network. I don't want to have to deal with tls and certificates if possible, I would just like for users to use their username and password to connect. The radius config for ldap is pretty easy, but I'm having a problem when trying to enable peap as my default eap type. I've done so in my eap.conf which I've included and a section of debug when trying to start radiusd. Appreciate any info. When trying to start radiusd: Module: Instantiated ldap (ldap) Module: Loaded eap eap: default_eap_type = "peap" eap: timer_expire = 60 eap: ignore_unknown_eap_types = no eap: cisco_accounting_username_bug = no rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first. radiusd.conf[10]: eap: Module instantiation failed. radiusd.conf[1939] Unknown module "eap". radiusd.conf[1886] Failed to parse authenticate section. eap.conf basically, everything else is commented out. eap { default_eap_type = peap peap { default_eap_type = mschapv2 } mschapv2 { } } -- Cody Jarrett IT Freedom cody.jarrett@itfreedom.com Office: 512.419.0070 Fax: 512.419.0080
Cody Jarrett wrote:
I'm trying to setup freeradius with ldap for use with a wireless network. I don't want to have to deal with tls and certificates if possible,
Then you won't be doing PEAP. It requires TLS and certificates. ...
rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first.
What is unclear about that message? It's telling you that you need TLS for PEAP to work. All of the howto's show that you have to configure TLS before PEAP. The comments in "eap.conf" say you have to configure TLS before PEAP. What's the problem? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
Alan Dekok wrote:
Cody Jarrett wrote:
I'm trying to setup freeradius with ldap for use with a wireless network. I don't want to have to deal with tls and certificates if possible,
Then you won't be doing PEAP. It requires TLS and certificates.
Is what I want possible then? And if so could you provide me with details on what its called or how its configured?
...
rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first.
What is unclear about that message? It's telling you that you need TLS for PEAP to work.
All of the howto's show that you have to configure TLS before PEAP. The comments in "eap.conf" say you have to configure TLS before PEAP.
What's the problem?
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Read provided instructions in eap.conf. Ivan Kalik Kalik Informatika ISP Dana 18/6/2007, "Cody Jarrett" <cody.jarrett@itfreedom.com> piše:
Alan Dekok wrote:
Cody Jarrett wrote:
I'm trying to setup freeradius with ldap for use with a wireless network. I don't want to have to deal with tls and certificates if possible,
Then you won't be doing PEAP. It requires TLS and certificates.
Is what I want possible then? And if so could you provide me with details on what its called or how its configured?
...
rlm_eap: Unable to load EAP-Type/peap, as EAP-Type/TLS is required first.
What is unclear about that message? It's telling you that you need TLS for PEAP to work.
All of the howto's show that you have to configure TLS before PEAP. The comments in "eap.conf" say you have to configure TLS before PEAP.
What's the problem?
Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have Freeradius installed on two opensuse 10.2 servers Running Freeradius 1.16 I am running radrelay on the two too keep the detail files in sync (New Setup) The combined detail work file is created on the two servers and each appear to write to it ok. But they aren't transferring with one another I am at a loss at what is wrong. I have tried several radrelay command line options with all giving me the same result heres my radrelay start commands --- Primary radrelay -a /var/log/radius/radacct/ -d /etc/raddb -n Secondary-Radius detail-combined --- Secondary radrelay -a /var/log/radius/radacct/ -d /etc/raddb -n Primary-Radius detail-combined ---
Jeff wrote: ...
The combined detail work file is created on the two servers and each appear to write to it ok.
But they aren't transferring with one another
What *are* they doing? You can run the radrelay *and* server in debugging mode, to see what is going on. If you're not doing that, you're not reading the documentation, and you won't be able to solve the problem. Alan DeKok.
I tried running both in debug, and basically only thing happening is the info is going into the combined file on the server that took the request but radrelay running in the debug mode on that same server about ever 50 seconds runs through its hoop, but never processes anything like it had nothing to do I have it pointed to where the combined file lives, etc ie example below but again its like when radrelay does its thing nothing happens but it counting through the threads 0-9 I believe it was. Nothing about grabbing the info that was just placed in the combined file work, etc Heres my latest command running the radrelay the starts represent the secret I dubbed out here(I am trying the direct approach to help rules out probelms reading something, ie secret files etc. The .53 server below is the server that i want to receive the updates for accouting I also have have tried sending results from accounting to this server with the same setup, and get the same results as I stated above. I have read the heck out of the radrelay documentation. Call me stupid, I know this 50 year old dude is missing something. radrelay -a /var/log/radius/radacct/ -r 74.218.65.153 -s **** detail-combined _____ From: Alan DeKok [mailto:aland@deployingradius.com] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Mon, 18 Jun 2007 11:03:28 -0400 Subject: Re: Freeeradius 1.16 and Radrelay Not updating Jeff wrote: ...
The combined detail work file is created on the two servers and each appear to write to it ok.
But they aren't transferring with one another
What *are* they doing? You can run the radrelay *and* server in debugging mode, to see what is going on. If you're not doing that, you're not reading the documentation, and you won't be able to solve the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
seconds runs through its hoop, but never processes anything like it had nothing to do
Do you mean: the server never gets anything? Then maybe radrelay is blocked on an intermediate firewall? If the packets get lost en-route, you have to look there... In any case, actually *sending* us the *debug output* instead of your verbal description of it helps a lot more. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
I finally got it working last night. I had to download 1.16 and complie it that way. Then things started working. For some reason using the version installed through yast something was amiss apparently. The same fix worked on both servers using OpenSuse 10.2 From: Stefan Winter [mailto:stefan.winter@restena.lu] To: FreeRadius users mailing list [mailto:freeradius-users@lists.freeradius.org] Sent: Tue, 19 Jun 2007 02:34:23 -0400 Subject: Re: Freeeradius 1.16 and Radrelay Not updating
seconds runs through its hoop, but never processes anything like it had nothing to do
Do you mean: the server never gets anything? Then maybe radrelay is blocked on an intermediate firewall? If the packets get lost en-route, you have to look there... In any case, actually *sending* us the *debug output* instead of your verbal description of it helps a lot more. Stefan -- Stefan WINTER Stiftung RESTENA - Réseau Téléinformatique de l'Education Nationale et de la Recherche Ingenieur Forschung & Entwicklung 6, rue Richard Coudenhove-Kalergi L-1359 Luxembourg E-Mail: stefan.winter@restena.lu Tel.: +352 424409-1 http://www.restena.lu Fax: +352 422473
participants (6)
-
Alan Dekok -
Alan DeKok
-
Cody Jarrett -
Jeff -
Stefan Winter -
tnt＠kalik.co.yu