Hello,
Hi All I m new to AAA things.I want how can I support RSA ACE/Server in freeradius. Can anyone has details How interaction is made between RADIUS and RSA/ACE-server?. in general scenario Rgds DArshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Hello,
many thanxs to u.This has helped me greatly. Some doubts i have : If I use My radius as proxy ,then this should based upon realm or something like that? And such configuration will not need to write Any s/w from my end? right? Rgds Darshak - Original Message - From: "Michael Lecuyer" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Tuesday, June 06, 2006 6:38 PM Subject: Re: Hello, It would be difficult to say how RADIUS would interact with the actual ACE server since it's a proprietary system. In 2002 I thought about going down this route and I'm summarizing from the 5 page SecurId integration document. You must write code that uses RSA's 'RSA Agent' software to communicate with the RSA ACE server. You must become a partner a a cost of ten thousand dollars for each product each year you provide the product(s). You must pay RSA twenty percent of your product's licensing fee. And you must have RSA certify it and may be required to provide a training program for RSA certification technicians. The sublicense agreement with RSA is incompatible with any open source software. The best thing to do is use FreeRadius as a proxy to the RSA RADIUS server. From a client's point of view the ACE RADIUS server may require a simple CHAP/PAP transaction or there may be challenges asking for more information. It depends on the RSA server configuration. darshak wrote: Hi All I m new to AAA things.I want how can I support RSA ACE/Server in freeradius. Can anyone has details How interaction is made between RADIUS and RSA/ACE-server?. in general scenario Rgds DArshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SecurID authentication
Thanxs David,This has been useful to me . Although proxy is best answer.I just wanna go in some details. If i own RSA ACE/server,then does it come with RSa Ace/client agent? Then what i need to do is write a code that talks with Freeradius and RSA ACE/client? Or I need not do it? Is this RSA/Ace server comes with client that talks to RADIUS? and I can be free from coding burden? Can u please explain How RADIUS <-->RSA/ACe server talk to each other?[if i not use proxy ] I have read that Lucent and SBR supports this RSA/ACE SecurID so how they actually support?Do they have coded extra or by proxy ? Thanxs again for your help Rgds Darshak - Original Message - From: "David Mitton" <[EMAIL PROTECTED]> To: Sent: Tuesday, June 06, 2006 10:23 PM Subject: RE: SecurID authentication Darshak, I'm not a legal representative, but Michael's response is for someone that wishes to sell or distribute(?) a product that uses the SecurID service While doing a RADIUS proxy to for the new RADIUS server may be the correct approach, if you are an owner of a SecurID server solution, you can certainly develop code to use your licensed server for whatever application you wish. The product offering includes an ACE Client SDK which gives you a C-language API for doing SecurID authentication. It would be fairly straight forward to develop your own Free RADIUS module, but there are details with New Pin assignment and Next Token mode that get messy. The server uses Access-Challenge for them. Also the new server includes EAP support for several methods. So proxy may still be the best path. David Mitton Software Development, RSA Security, Inc. PS: I urge all senders to use meaningful Subject lines, the original message was discarded by me on first pass as spam. - Original Message - From: "Michael Lecuyer" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Subject: Re: Hello, Date: Tue, 06 Jun 2006 09:08:16 -0400 It would be difficult to say how RADIUS would interact with the actual ACE server since it's a proprietary system. In 2002 I thought about going down this route and I'm summarizing from the 5 page SecurId integration document. You must write code that uses RSA's 'RSA Agent' software to communicate with the RSA ACE server. You must become a partner a a cost of ten thousand dollars for each product each year you provide the product(s). You must pay RSA twenty percent of your product's licensing fee. And you must have RSA certify it and may be required to provide a training program for RSA certification technicians. The sublicense agreement with RSA is incompatible with any open source software. The best thing to do is use FreeRadius as a proxy to the RSA RADIUS server. From a client's point of view the ACE RADIUS server may require a simple CHAP/PAP transaction or there may be challenges asking for more information. It depends on the RSA server configuration. darshak wrote: Hi All I m new to AAA things.I want how can I support RSA ACE/Server in freeradius. Can anyone has details How interaction is made between RADIUS and RSA/ACE-server?. in general scenario Rgds DArshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Peap/leap/wap
Does free radius support PEAP/LEAP 802.1x authentication? How can i configure it? - Original Message - From: "Michael Griego" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Tuesday, June 06, 2006 7:52 PM Subject: Re: PEAP authentication with freerad ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
[Fwd: IP Pool management]
Original Message Subject: IP Pool management From:[EMAIL PROTECTED] Date:Fri, July 21, 2006 10:16 am To: freeradius-users@lists.freeradius.org -- Hi, I am new to radius. I want to understand functionality of IP Pool management and 802.1x,means EAP,EAP-MD5,LEAP . How can I customize the same using free radius ? Thanxs to all Darshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
EAP utilities--urgent
hi, all I need some help from group. I want to start free radius that only has EAP utilities. no proxy,nothing else then diff.. eap types. Which files can i take from free radius that i can independently use for eap / wireless authentication. In short my free-radius has only files replated to eap no xtra. Rgds Darshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
SNMP traps
Hi all. I want to know how free radius supports SNMP trap events. Can any1 get me the info. Thanxs Darshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: SNMP traps
Hi, thanxs Alen Can u give some more details for this.From where can i find that.And how freeradius supports SNMP Rgds Darshak > [EMAIL PROTECTED] wrote: >> I want to know how free radius supports SNMP trap events. > > There is no documentation that mentions SNMP traps. > > FreeRADIUS doesn't support SNMP traps. > > Alan DeKok. > -- > http://deployingradius.com - The web site of the book > http://deployingradius.com/blog/ - The blog > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
programing RADIUS
Hi, All I want to learn how to programm a RADIUS protocol.Can anyone help me. I have read the RFC but, how to code it , I ahve no experience in that I just want to know simple programming. Thanxs all. Rgds Darshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
