AAA configuration for given attributes - need help please !!!
Hi, I am new to this AAA freeradius area, I need to configure the AAA radius server for following mentioned attributes according to the message, Access-req, Access-Accept, and Access-Challenge, and Access-Reject (pls see below). Also, I looked at the configuration files at radius server like clients.conf, users, radiusd.conf - I am not sure where this attributes to configure. Could any body help me getting started with this that would be highly appreciated. Also, please comment on the VSA attribute below - I am tryign to understand on section 5.26, RFC 2865 - but not sure where to start. Your help would be highly appreciated. Below the attributes : Access Request attributes User-Name User-Password NAS-IPAddress NAS-Port Service-Type State Vendor-Specific Session-Timeout NAS-Identifier Called-Station-ID Calling-Station-ID NAS-Port-Type EAP-Message Message-Authenticator Access-Challenge attributes Reply-Message State Session-Timeout EAP-Message Message-Authenticator Access-Accept attributes User-Name State Service-Type Session-Timeout EAP-Message VSA (Vendor Suitable Attributes) VSA ( ---) Message-Authenticator Access-Reject Attributes Reply-Message State Session-Timeout EAP-Message Message-Authenticator Thanks Rafi
"Rafiqul Ahsan" <rafiqul.ahsan@gmail.com> wrote:
I am new to this AAA freeradius area, I need to configure the AAA radius server for following mentioned attributes according to the message, Access-req, Access-Accept, and Access-Challenge, and Access-Reject (pls see below).
Configure the server to do... what, exactly? The question you're asking is the same as "how do I configure a web server to send bold text." The answer is "huh?" Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog
On Fri 15 Sep 2006 20:27, Alan DeKok wrote:
"Rafiqul Ahsan" <rafiqul.ahsan@gmail.com> wrote:
I am new to this AAA freeradius area, I need to configure the AAA radius server for following mentioned attributes according to the message, Access-req, Access-Accept, and Access-Challenge, and Access-Reject (pls see below).
Configure the server to do... what, exactly?
The question you're asking is the same as "how do I configure a web server to send bold text." The answer is "huh?"
Why do I have the nasty feeling that there is a university somewhere teaching AAA as a course.... -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
The answer to that is, user will be authenticated by sending RADIUS Access Req with EAP Message, Sever will respond to the client by RADIUS Access-Challenge, EAP-TTLS Tunnel will be established (TLS handshake protocol using EAP message), EAP Message Exchange will occure (EAP-TTLS MS-CHAP-v2 authentication or any other authentication), and Server will either send RADIUS Access-Accept, or Access-Reject. The attributes will be included in the messages - my question is how to find the particular radius file where we are going to configure these attributes ? I have seen client.conf, users and radiusd.conf - not finding much...because of my lack of experiance... Hope that clarify the problem. Thanks rafi On 9/15/06, Peter Nixon <listuser@peternixon.net> wrote:
On Fri 15 Sep 2006 20:27, Alan DeKok wrote:
"Rafiqul Ahsan" <rafiqul.ahsan@gmail.com> wrote:
I am new to this AAA freeradius area, I need to configure the AAA radius server for following mentioned attributes according to the message, Access-req, Access-Accept, and Access-Challenge, and Access-Reject (pls see below).
Configure the server to do... what, exactly?
The question you're asking is the same as "how do I configure a web server to send bold text." The answer is "huh?"
Why do I have the nasty feeling that there is a university somewhere teaching AAA as a course....
--
Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-- Rafiqul Ahsan 630-717-1698(h) 2120 Periwinkle Ln 630-689-1457(h) Naperville, IL 60540 847-812-6176(c)
Le Fri, Sep 15, 2006 at 08:42:37PM +0300, Peter Nixon ecrivait:
On Fri 15 Sep 2006 20:27, Alan DeKok wrote:
"Rafiqul Ahsan" <rafiqul.ahsan@gmail.com> wrote:
I am new to this AAA freeradius area, I need to configure the AAA radius server for following mentioned attributes according to the message, Access-req, Access-Accept, and Access-Challenge, and Access-Reject (pls see below).
Configure the server to do... what, exactly?
The question you're asking is the same as "how do I configure a web server to send bold text." The answer is "huh?"
Why do I have the nasty feeling that there is a university somewhere teaching AAA as a course....
The teacher is a realy bad one then... Regards, Fox.
participants (4)
-
Alan DeKok -
Francois-Xavier GAILLARD -
Peter Nixon -
Rafiqul Ahsan