Hi, I have installed version 2.1.4 of FreeRadius server and I am trying to configure digest authentication for HTTP (not SIP) as per RFC 5090. In searching through the archives/wiki, I found one message from Alan stating that dictionary.rfc5090 is disabled by default because it's not supported by the server, and another message saying that "there are patches but they are not included in the main stream yet". Are the patches available for download anywhere? I haven't been able to find them (I don't mind if they are alpha quality). Another thing is that I can't even get FreeRadius to decode the digest attributes. If I $INCLUDE dictionary.rfc5090 in the master dictionary file, I get the following error at startup: 'including dictionary file /usr/local/etc/raddb/dictionary Errors reading dictionary: dict_init: /usr/local/share/freeradius/dictionary.freeradius.internal[93]: dict_init: /usr/local/share/freeradius/dictionary.freeradius.internal[93]:' I understand that the attributes are not supported yet, but I'm not sure why just including the dictionary file causes a fatal error while loading the configuration. BTW, I noticed that the list of custom attributes in the dictionary.fortinet file is out of date. Here is an updated list: ATTRIBUTE Fortinet-Group-Name 1 string ATTRIBUTE Fortinet-Client-IP-Address 2 ipaddr ATTRIBUTE Fortinet-Vdom-Name 3 string ATTRIBUTE Fortinet-Client-IPv6-Address 4 octets ATTRIBUTE Fortinet-Interface-Name 5 string ATTRIBUTE Fortinet-Access-Profile 6 string Andrew _________________________________________________________________ Internet Explorer 8 helps keep your personal info safe. http://go.microsoft.com/?linkid=9655581
I posted a message yesterday asking about the patch for HTTP digest authentication (RFC 5090). I subsequently found a link to a patch for 4590 (an older version of 5090) listed on the RFC compliance page on the wiki. However, the link points to a bug entry on bugs.freeradius.org, which is currently down for the count. Does anyone have a copy of this patch they can send me? Andrew _________________________________________________________________ Share photos with friends on Windows Live Messenger http://go.microsoft.com/?linkid=9650734
participants (1)
-
Andrew Krywaniuk