Re: FreeRadius and CoovaAP (Ivan Kalik)
Yes, That's exactly my point. CHAP will not work. We've been using the internal Chillispot captive portal on a WRT54GL running the CoovaAP firmware. Is there any way of using that internal captive portal but having it send PAP passwords instead of CHAP? It would be much easier for my configuration if that internal portal was being used rather than an external page. Thank you for the prompt response to my initial question. /Luc On Sat, Jun 21, 2008 at 12:39 PM, <freeradius-users-request@lists.freeradius.org> wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: FreeRadius and CoovaAP (Ivan Kalik) 2. Re: dhcp server (DHCPFlags feature) (Andrew Hood) 3. Re: freeradius assign duplicate ip address Error (Ivan Kalik) 4. Re: dhcp server (DHCPFlags feature) (A.L.M.Buxey@lboro.ac.uk) 5. Re: No Aoth Type problem again (Ivan Kalik) 6. Re: Freeradius-Users Digest, Vol 38, Issue 116 (Andy An) 7. When to use proxy Radius (Yago F. Hansen) 8. Re: Kicking off billing scipt in accounting block (Pete Kay) 9. Re: Kicking off billing scipt in accounting block (Alan DeKok)
----------------------------------------------------------------------
Message: 1 Date: Sat, 21 Jun 2008 16:33:37 +0100 From: "Ivan Kalik" <tnt@kalik.net> Subject: Re: FreeRadius and CoovaAP To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <UzBzZ63g.1214062417.4201120.tnt@kalik.co.yu> Content-Type: text/plain; charset=ISO-8859-2
You can't authenticate chap against ldap (AD). Use pap or mschap (ntlm_auth).
Ivan Kalik Kalik Informatika ISP
Dana 21/6/2008, "LGM" <lmazzella@gmail.com> pi?e:
Hello list,
Has anybody implemented CoovaAP with FreeRadius talking to LDAP (Win 2003 Active Directory)?
I've been attempting to configure CoovaAP to authenticate against Active Directory using FreeRadius binded to LDAP. The LDAP binding goes fine. I can also successfully authenticate a user with a radtest command from the local machine. I run into problems when I enter a username and password into the authentication page on my WRT54GL running CoovaAP. The password is passed to FreeRadius as CHAP. LDAP fails with the error "User-Password" is required for authentication. Cannot use "CHAP-Password" Is it possible for CoovaAP to pass usernames and passwords in a form that LDAP can authenticate? I've been considering editing the ChilliLibrary.js on the WRT54GL but that seems like a heavy handed (and likely ineffective) way of going about it. Any help/suggestions would be greatly appreciated. Thank you in advance.
/Luc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------
Message: 2 Date: Sun, 22 Jun 2008 02:01:22 +1000 From: Andrew Hood <freeradius@andyhood.net> Subject: Re: dhcp server (DHCPFlags feature) To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <485D25D2.40007@andyhood.net> Content-Type: text/plain; charset=us-ascii
Alan DeKok wrote:
Haralds Ulmanis wrote:
Just checked out from cvs .. and got compile error: ... /root/freeradius/radiusd/src/main/listen.c:309: undefined reference to `request_stats_reply'
Edit src/main/Makefile, and add "stats.c" to the SERVER_SRCS line.
It's in Makefile.in, but you probably didn't re-run "configure", and likely don't want to do that, either.
That sounds odd, assuming normal auto* practice. The top Makefile should contain a rule:
Makefile: Makefile.in
which would run "./config.status --recheck"
What platform and version of make was this?
-- REALITY.SYS not found: Universe halted.
------------------------------
Message: 3 Date: Sat, 21 Jun 2008 17:10:48 +0100 From: "Ivan Kalik" <tnt@kalik.net> Subject: Re: freeradius assign duplicate ip address Error To: freeradius-users@lists.freeradius.org Message-ID: <SEhNjjZn.1214064648.4062820.tnt@kalik.co.yu> Content-Type: text/plain; charset=ISO-8859-2
Can you produce a debug demonstrating this?
Ivan Kalik Kalik Informatika ISP
Dana 21/6/2008, "Deep Purple" <jinjusi@yahoo.co.kr> pi?e:
freeradius assign duplicate ip address , ??i using ippool module and file, for example user1 get the??172.16.1.30 and some times (not always ) user2 get the same??172.16.1.30 freeradius-1.1.7.tar.gz freeradius-client-1.1.5.tar.bz2 pptpd-1.3.3-1.fc5.i386.rpm Please Help me
________________________________________________________ 180??? ????????? ??????! ?????? - ?????? ?????? ???????????? ????????? ??????? ????????? ??????! ????????? ????????? ??????????????????. http://kr.content.mail.yahoo.com/cgland
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
------------------------------
Message: 4 Date: Sat, 21 Jun 2008 17:15:09 +0100 From: A.L.M.Buxey@lboro.ac.uk Subject: Re: dhcp server (DHCPFlags feature) To: FreeRadius users mailing list <freeradius-users@lists.freeradius.org> Message-ID: <20080621161509.GA23492@lboro.ac.uk> Content-Type: text/plain; charset=us-ascii
Hi,
That sounds odd, assuming normal auto* practice. The top Makefile should contain a rule:
Makefile: Makefile.in
which would run "./config.status --recheck"
aye - only the libltdl has such practice. that might explain things and the gotcha
alan
------------------------------
Message: 5 Date: Sat, 21 Jun 2008 17:18:28 +0100 From: "Ivan Kalik" <tnt@kalik.net> Subject: Re: No Aoth Type problem again To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <uzgQMku0.1214065108.6112610.tnt@kalik.co.yu> Content-Type: text/plain; charset=ISO-8859-2
So, for the sake of 'clean' configs I reinstalled freeRadius 2.0.5 (which I was running before btw..) and changed nothing except "default_eap_type = peap". To my amazement it ran perfectly! Then I turned MySQL auth on and it worked! After all these hours figuring out freeRadius and following HowToos, it now runs out of the box! Where there so many changes from 2.0.3 to 2.0.5?
Not really. Only significant thing that changed there was that inner-tunnel config file was copied to the place it was suposed to be (you had to do-it-yourself in previous version - oversight).
Ivan Kalik Kalik Informatika ISP
------------------------------
Message: 6 Date: Sat, 21 Jun 2008 09:24:13 -0700 From: Andy An <andyan@eciad.ca> Subject: Re: Freeradius-Users Digest, Vol 38, Issue 116 To: freeradius-users@lists.freeradius.org Message-ID: <485D2B2D.3080509@eciad.ca> Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Hi Jelle: Thanks for your good news. I will try to reinstall the freeradius 2.0.5 again next Monday (hope to have the same luck). Really really a great appreciate for both Alan and Ivan for your helps. Andy
freeradius-users-request@lists.freeradius.org wrote:
Send Freeradius-Users mailing list submissions to freeradius-users@lists.freeradius.org
To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to freeradius-users-request@lists.freeradius.org
You can reach the person managing the list at freeradius-users-owner@lists.freeradius.org
When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..."
Today's Topics:
1. Re: No Aoth Type problem again (Jelle Langbroek) 2. Problem in connecting to switch on telnet (Guk Viktor) 3. Re: Kicking off billing scipt in accounting block (Pete Kay) 4. radacct/radutmp out of sync (Tuc at T-B-O-H.NET) 5. FreeRadius and CoovaAP (LGM) 6. Re: radacct/radutmp out of sync (Alan DeKok) 7. Re: Kicking off billing scipt in accounting block (Alan DeKok)
----------------------------------------------------------------------
Message: 1 Date: Sat, 21 Jun 2008 12:23:15 +0200 From: "Jelle Langbroek" <jml@orkz.net> Subject: Re: No Aoth Type problem again To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <7796c3f70806210323w22d3617s7a8995523637cef1@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1"
So, for the sake of 'clean' configs I reinstalled freeRadius 2.0.5 (which I was running before btw..) and changed nothing except "default_eap_type = peap". To my amazement it ran perfectly! Then I turned MySQL auth on and it worked! After all these hours figuring out freeRadius and following HowToos, it now runs out of the box! Where there so many changes from 2.0.3 to 2.0.5?
Anyway, thanks for all the help Alan and Ivan!
Jelle
2008/6/20 Alan DeKok <aland@deployingradius.com>:
------------------------------
Message: 7 Date: Sat, 21 Jun 2008 17:21:47 +0100 From: "Yago F. Hansen" <sti@soportec.com> Subject: When to use proxy Radius To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <000801c8d3ba$e84409d0$c901a8c0@BAREBONE> Content-Type: text/plain; format=flowed; charset="iso-8859-1"; reply-type=original
Hi everybody:
I am going to planify a new infrastructure with FreeRadius. I would like to ask to you, whats the rule to planify the use of proxy servers for the size in users or the size in use or the redundancy?
Thank you from now
------------------------------
Message: 8 Date: Sun, 22 Jun 2008 00:21:50 +0800 From: "Pete Kay" <petedao@gmail.com> Subject: Re: Kicking off billing scipt in accounting block To: "FreeRadius users mailing list" <freeradius-users@lists.freeradius.org> Message-ID: <7aa8bd9d0806210921kbeeb05aq60790713e8a6a805@mail.gmail.com> Content-Type: text/plain; charset="iso-8859-1"
Hi Alan,
I have tried the following: accounting{
sql
exec /etc/billing/bill }
But it still does not work. I checked the unlang, but it does not give me much hint.... Could you give some suggestions how I can get the billing script to run?
Thanks, Pete
Is there any way of using that internal captive portal but having it send PAP passwords instead of CHAP?
You should ask that on the Chillispot list. I am sure there is a setting to make portal use pap instead of chap. Ivan Kalik Kalik Informatika ISP
Can anybody answer me why do I find in some linux distributions radiusd as command and in others freeradius? Same thing for config files directory /etc/raddb in some and /etc/freeradius in others? Thank you everybody.
participants (4)
-
Alan DeKok -
Ivan Kalik -
LGM -
Yago F. Hansen