Hi Alan thanks for your prompt reply. can you tell me how to modify chillispot to work with EAP-TLS. my radius server, Router and Xsupplicant all are supporting EAP-TLS. deepak On 3/20/07, Alan DeKok <aland@deployingradius.com> wrote:

deepak kumar wrote: ...

...

but even after client authentication from certificate. the router(chillispot) prompts for a username and password and then does authentication using UAM. Please tell me why this is asking for login name password after client certificate validation.

Because chillispot is configured to do that. It's not a RADIUS problem.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi I am using freeradius 1.1 on linux suse 10.1. I have implemented EAP-TTLS, EAP-TLS and UAM. I want to know is there any way to know by which method user is authenticated. I mean if user is authenticated using UAM, EAP-TLS or EAP-TTLS. is there any attribute whose value we can store in radius database tables. there are two attributes Digest-Algorithm and EAP-Message , but I dont know how to put their values in radius tables. thanks deepak

Thanks. I have used EAP-Type variable and stored its value in radacct table. but in all the cases(UAM,EAP-TLS, EAP-TTLS) the value for EAP-Type was null. i was expecting it to return TLS or TTLS in case of these methods. is it because of chilli.conf(which is notconfigured for WPA). or I missed something. thanks deepak On 3/23/07, Alan DeKok <aland@deployingradius.com> wrote:

deepak kumar wrote:

...

Hi I am using freeradius 1.1 on linux suse 10.1. I have implemented EAP-TTLS, EAP-TLS and UAM. I want to know is there any way to know by which method user is authenticated. I mean if user is authenticated using UAM, EAP-TLS or EAP-TTLS. is there any attribute whose value we can store in radius database tables. there are two attributes Digest-Algorithm and EAP-Message , but I dont know how to put their values in radius tables.

You should use EAP-Type, which is an attribute generated by the server that tells you the name of the EAP type being used.

And to store attributes in the table, see doc/variables.txt.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Thanks I have implemented EAP-TTLS , stored EAP-Type value in radpostauth table and able to connect to internet without UAM. Once a user is authenticated through EAP-TTLS , his details are put in radpostauth table and he is allowed to acess internet without UAM,but his accounting information is not stored in radacct table. how to store accounting information in radacct, in case of EAP-TTLS. deepak On 3/27/07, Alan DeKok <aland@deployingradius.com> wrote:

deepak kumar wrote:

...

Thanks. I have used EAP-Type variable and stored its value in radacct table.

Ah. That's different.

You can't store EAP-Type during accounting, because there is no EAP type in the accounting packets.

You CAN store it in the DB during authentication, but it has to be during a "post-auth" section.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Alan. Is there any way in freeradius, where freeradius server can invoke a java program in response to some event. eg if some user is logged out , this event should be propagated to java prog or to some other component. On 3/29/07, Alan DeKok <aland@deployingradius.com> wrote:

deepak kumar wrote:

...

Thanks I have implemented EAP-TTLS , stored EAP-Type value in radpostauth table and able to connect to internet without UAM. Once a user is authenticated through EAP-TTLS , his details are put in radpostauth table and he is allowed to acess internet without UAM,but his accounting information is not stored in radacct table. how to store accounting information in radacct, in case of EAP-TTLS.

This is in the FAQ.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hi Alan I am trying to implement EAP-SIM using freeradius. which versions of freeradius provide support for that. I am using Win XP sp2 as supplicant, castelnet AP and freeradius 1.1 on suse linux 10.1 what additional hardware and software do i require? is there any how to on net for implementing EAP-SIM thanks deepak On 4/5/07, Alan DeKok <aland@deployingradius.com> wrote:

deepak kumar wrote:

...

Is there any way in freeradius, where freeradius server can invoke a java program in response to some event. eg if some user is logged out , this event should be propagated to java prog or to some other component.

jradius.

Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html