configure jradius (with free radius )
Hi, I have a question about setting up jradius with freeradius. jradius version: build from trunk free radius version: 2.1.12. The doc cjradius/freeradius/README says: - Configure FreeRADIUS with the rlm_jradius module. Below we show bits of the FreeRADIUS etc/raddb/radiusd.conf file. We are only showing the configurations for JRadius. modules { ... jradius { name = "example" # The "Requester" name (a single # JRadius server can have # multiple "applications") primary = "localhost" # Uses default port 1814 secondary = "192.168.0.1" # Fail-over server tertiary = "192.168.0.1:8002" # Fail-over server on port 8002 timeout = 1 # Connect Timeout onfail = NOOP # What to do if no JRadius # Server is found. Options are: # FAIL (default), OK, REJECT, NOOP } } authorize { ... jradius } post-auth { ... jradius I noticed authorize and post-auth sections are now moved into the files: /etc/raddb/sites-enabled/default /etc/raddb/sites-available/default should I update these two files instead? Thanks Jim
Never mind, sites-enabled/default is a symlink to site-available/default. Thanks Jim On Jan 12, 2015, at 3:08 PM, Jim Shi <hanmao_shi@apple.com> wrote:
Hi, I have a question about setting up jradius with freeradius.
jradius version: build from trunk free radius version: 2.1.12.
The doc cjradius/freeradius/README says:
- Configure FreeRADIUS with the rlm_jradius module. Below we show bits of the FreeRADIUS etc/raddb/radiusd.conf file. We are only showing the configurations for JRadius.
modules { ... jradius { name = "example" # The "Requester" name (a single # JRadius server can have # multiple "applications") primary = "localhost" # Uses default port 1814 secondary = "192.168.0.1" # Fail-over server tertiary = "192.168.0.1:8002" # Fail-over server on port 8002 timeout = 1 # Connect Timeout onfail = NOOP # What to do if no JRadius # Server is found. Options are: # FAIL (default), OK, REJECT, NOOP } }
authorize { ... jradius }
post-auth { ... jradius
I noticed authorize and post-auth sections are now moved into the files: /etc/raddb/sites-enabled/default /etc/raddb/sites-available/default
should I update these two files instead?
Thanks Jim
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have jradius build from trunk and free radius version 2.1.12 Anyone has successfully set up jradius with free radius? Any help is appreciated. Thanks Jim
Have you considered using version 3 with the REST module instead? -----Original Message----- From: Jim Shi [hanmao_shi@apple.com<mailto:hanmao_shi@apple.com>] Sent: Monday, January 12, 2015 11:29 PM GMT Standard Time To: FreeRadius users mailing list Subject: configure jradius (with free radius ) I have jradius build from trunk and free radius version 2.1.12 Anyone has successfully set up jradius with free radius? Any help is appreciated. Thanks Jim - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On 13 Jan 2015, at 14:06, adrian.p.smith@bt.com wrote:
Have you considered using version 3 with the REST module instead?
Especially as the jradius module has been removed from version 3 and won't be supported moving forwards. The rlm_rest module will convert the RADIUS request into JSON and send it over to a REST API endpoint of your choosing. The REST API can be implemented in any language, even java :) -Arran Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
Contributors welcome! :) https://github.com/coova/jradius/tree/master/freeradius On Tue, Jan 13, 2015 at 12:11 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 13 Jan 2015, at 14:06, adrian.p.smith@bt.com wrote:
Have you considered using version 3 with the REST module instead?
Especially as the jradius module has been removed from version 3 and won't be supported moving forwards.
The rlm_rest module will convert the RADIUS request into JSON and send it over to a REST API endpoint of your choosing.
The REST API can be implemented in any language, even java :)
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi David, I was able to set up free radius 2.1.12 with jradius. I tested PAP and it was a success. But PEAP is failing with ++[digest] returns noop [suffix] No '@' in User-Name = "test", looking up realm NULL [suffix] No such realm "NULL" ++[suffix] returns noop [eap] EAP packet type response id 6 length 80 [eap] Continuing tunnel setup. ++[eap] returns ok Found Auth-Type = EAP # Executing group from file /Users/jshi/freeradius/etc/raddb/sites-enabled/default +- entering group authenticate {...} [eap] Request found, released from the list [eap] EAP/peap [eap] processing type peap [peap] processing EAP-TLS [peap] eaptls_verify returned 7 [peap] Done initial handshake [peap] eaptls_process returned 7 [peap] EAPTLS_OK [peap] Session established. Decoding tunneled attributes. [peap] Peap state ? [peap] Identity - test [peap] Unhandled state in peap [eap] Handler failed in EAP/peap [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. Using Post-Auth-Type Reject # Executing group from file /Users/jshi/freeradius/etc/raddb/sites-enabled/default +- entering group REJECT {...} [attr_filter.access_reject] expand: %{User-Name} -> test attr_filter: Matched entry DEFAULT at line 11 ++[attr_filter.access_reject] returns updated Thanks Jim On Jan 13, 2015, at 12:42 PM, David Bird <dbird@google.com> wrote:
Contributors welcome! :)
https://github.com/coova/jradius/tree/master/freeradius
On Tue, Jan 13, 2015 at 12:11 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 13 Jan 2015, at 14:06, adrian.p.smith@bt.com wrote:
Have you considered using version 3 with the REST module instead?
Especially as the jradius module has been removed from version 3 and won't be supported moving forwards.
The rlm_rest module will convert the RADIUS request into JSON and send it over to a REST API endpoint of your choosing.
The REST API can be implemented in any language, even java :)
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi, David, I have a question on how to set up password for accounts in jradius. There is example that comes with jradius code: LocalUsersHandler.java. in it has the followings: switch (type) { case JRadiusServer.JRADIUS_authorize: { /* * We know the user, lets inform FreeRADIUS of the user's * password so that FreeRADIUS may perform the required * authentication checks. */ //ci.add(new Attr_AuthType(Attr_AuthType.Local)); // Auth locally ci.add(new Attr_UserPassword(u.password)); // FreeRADIUS 1.0 ci.add(new Attr_CleartextPassword(u.password)); // FreeRADIUS 2.0 } Looks setting clear text password works for PAP. But it does not work for CHAP, MSCHAP etc. How to set password for CHAP or MSCHAP? Any docs? Thanks Jim On Jan 13, 2015, at 12:42 PM, David Bird <dbird@google.com> wrote:
Contributors welcome! :)
https://github.com/coova/jradius/tree/master/freeradius
On Tue, Jan 13, 2015 at 12:11 AM, Arran Cudbard-Bell < a.cudbardb@freeradius.org> wrote:
On 13 Jan 2015, at 14:06, adrian.p.smith@bt.com wrote:
Have you considered using version 3 with the REST module instead?
Especially as the jradius module has been removed from version 3 and won't be supported moving forwards.
The rlm_rest module will convert the RADIUS request into JSON and send it over to a REST API endpoint of your choosing.
The REST API can be implemented in any language, even java :)
-Arran
Arran Cudbard-Bell <a.cudbardb@freeradius.org> FreeRADIUS development team
FD31 3077 42EC 7FCD 32FE 5EE2 56CF 27F9 30A8 CAA2
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
participants (4)
-
adrian.p.smith＠bt.com -
Arran Cudbard-Bell -
David Bird -
Jim Shi