EAP success with MD5 authentication

Hi list , While working on EAP MD5 authentication, i have a little doubt. i hav confiured eap user with password in users file .. I m able to get Access Challenge from RADIUS. On sending Radius packet with EAP response (msg digest on id + passwd + challenge) , State

Re: Ldap Group Attribute radiusGroupName

The easiest (and desgined??) way would be to use the ldap configuration item: access_attr = dialupAccess and optionally # access_attr_used_for_allow = yes Read the rlm_ldap file in the doc directory of the source for instructions. regards, Mike Chan Min Wai wrote: Greeting, I've been

Newbie: Radius + Mysql

Hi GuysI am a newbie to RadiusCan i get any howto on Configuring Freeradius + Mysql.i need couple of features. 1. Download/Upload Bandwidth Control.Ascend-Data-Rate 2. Download/Upload Data Control ---1GB Restriction ( Need to Run a Script Before freeradius gives a

3D problem in queries - Quintum

debian 3.0 freeradius 1.0.1postgresql 7.3.5with quintum nas radius_xlat: 'SELECT * FROM radcheck( '1234', '1234', '192.168.0.25', '', 'Async', '', '', 'h323-ivr-out=3DACCESSCODE:00800112233')rlm_sql (sql): Reserving sql socket id: 0rlm_sql_postgresql: query: SELECT * FROMradcheck( '1234',

Re: 3D problem in queries - Quintum

Take a look at the safe-characters configuration item in sql.conf and the sql modules. The '=' in h323-ivr-out=ACCESSCODE:00800112233 is being encoded by rlm_sql before the record is inserted into the database... I don't use Postgres, so including '=' in the safe-characters, however, may have

error: rlm_radutmp: Logout entry for NAS ... port 0 has wrong ID

Hi, what does this log-message mean and what can I do about it: error: rlm_radutmp: Logout entry for NAS NAME port 0 has wrong ID thanks florian -- -- Dipl. Inf. Florian Prester Network Administration Regionales RechenZentrum Erlangen

freeradius +connect to postgresql server

I use freeradius-0.9.3 and postgresql 8.0.1 on slackware , I want to set freeradius to use database postgresql but I have a problem with --- When I set raddb/radiusd.conf to authorize{ preprocess suffix sql files noresetcounter } session{

Append realm to username but sorted by dnis

I use dnis to proxy to several radius servers for various clients. One of our clients would like a realm added to the end of their user's username when it is proxied to them. Basically I need to be able to attach a realm on the end of every user comming from a certain dnis before I proxy the

Install: Make command.

Hi i read a post on how to install Free Radius with an XP supplicant (link shown below). I am a newbie to Linux and radius so hopefully you can be patient. I am running the latest version of FreeBSD, Openssl (openssl-0.9.7-stable-SNAP-20050209), and FreeRadius (freeradius-snapshot-20050209). I

Re: Install: Make command.

On Tue, 15 Feb 2005 08:47:47 -0500, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Hi i read a post on how to install Free Radius with an XP supplicant (link shown below). I am a newbie to Linux and radius so hopefully you can be patient. I am running the latest version of FreeBSD, Openssl

Re: Install: Make command.

On Tuesday 15 February 2005 08:47, [EMAIL PROTECTED] wrote: Hi i read a post on how to install Free Radius with an XP supplicant (link shown below). I am a newbie to Linux and radius so hopefully you can be patient. I am running the latest version of FreeBSD, Openssl

Behavor and limit of the proxy freeradius server

Hello, I have setup Proxy Freeradius -- Primary Freeradius -- Secondary Freeradius Proxy Radius ask primary at first.When Primary Radius is down, Proxy freeradius don't call directly Secondary Freeradius, proxy freeradius just consider primary as dead. I must

Capture Authentication Sequence

Hi List, It is possible to configure freeradius like that, that all successful authetication will be captured in a file (with username and if it is possible also the pw or other informations)? Thanks for your help. Best regards, Daniel - List info/subscribe/unsubscribe? See

Re: Ldap Group Attribute radiusGroupName

Greeting, I've been trying to work out a way to disable unpaid users with a single disable radiusGroupName. But the doc and the resources is limited and I don't even see radiusGroupName in the log so I think it is not working with my configuration. I would like to know how to

Re: Capture Authentication Sequence

On Tue, 15 Feb 2005 [EMAIL PROTECTED] wrote: Hi List, It is possible to configure freeradius like that, that all successful authetication will be captured in a file (with username and if it is possible also the pw or other informations)? Thanks for your help. Best regards, Daniel

Freeradius question

Hi all I am using ser + mysql + freeradius. Access - Request : - rad_recv: Access-Request packet from host mydomain:port, id=126, length=199 User-Name = x Digest-Attributes = 0x0ac657867

Re: Pre-Proxy-Type, Post-Proxy-Type

Alan DeKok wrote: Please do not put pre-proxy code into the authorize section of a module. We will fix the server. The following patch will make the server run the modules in one of the {Pre,Post}-Proxy-Type stanzas. Index: src/include/modules.h

radwho

I'm using FR as proxy, and FR is giving IP's. First user connects just fine. I do radwho and i can see user on line with an IP from FR pool, but then another user sign in and it's like it pushes out the first one and he retakes his place. radwho shows only the new user with the same IP. Can

vlan + ldap

Hi all, I use freeradius 1.0.1 to authenticate wireless users with EAP-TTLS or PEAP against an LDAP backend. Now, I want to switch the users into a vlan by using an LDAP attribute named here 'title'. I put in the ldap.attrmap file : replyItem Tunnel-Private-Group-Id title And in

Question about : authorize / authenticate / users

I try to do PEAP-MSChapv2 with an LDAP server (It works quite good). I want to know if this two methods are equivalent : First Method : (Works fine) radiusd.conf file : authorize { #files eap ldap } authenticate { Auth-Type LDAP { Ldap

Re: EAP success with MD5 authentication

Madhu Dubey [EMAIL PROTECTED] wrote: But as per RFC 2869, response to Access challenge should contain User password as the user-response. If the NAS supports challenge/response, receipt of a valid There is no such text in RFC 2869. I think you're referring to RFC 2865. On

Re: Behavor and limit of the proxy freeradius server

delrieu.nans [EMAIL PROTECTED] wrote: Proxy Radius ask primary at first.When Primary Radius is down, Proxy freeradius don't call directly Secondary Freeradius, proxy freeradius just consider primary as dead. Yes. I must make a second request with radtest and then proxy freeradius call

Re: Freeradius question

Alex [EMAIL PROTECTED] wrote: I am trying to verify username with password through mysql table radcheck. The problem is what i want to verify another attribute like Sip-Uri-User. I add this attribute in radcheck table Sip-Uri-User := value(somenumber) And for some reason it's not working.

Re: vlan + ldap

REMY Lionel [EMAIL PROTECTED] wrote: I use freeradius 1.0.1 to authenticate wireless users with EAP-TTLS or PEAP against an LDAP backend. No. LDAP is a database, not an authentication server. LDAP supplies a clear-text password, and FreeRADIUS does EAP authentication. It works... but

Re: Question about : authorize / authenticate / users

Nicolas Audureau [EMAIL PROTECTED] wrote: I try to do PEAP-MSChapv2 with an LDAP server (It works quite good). I want to know if this two methods are equivalent : First Method : (Works fine) ... Second Method : (Doesn't seem to work) Then they're not equivalent. authorize { files

variable problem

In part of my ldap config section, I obtain the gid with an ldap lookup, then use my ${gid} variable in the groupmembership_filter. Up until recently I had simply been using %{User-Name}, but now have the need to use the check for Stripped-User-Name before using User-Name. That works in

MSCHAP V2 local ntlm_auth

Hi List, I'm posting this in case anyone has a similar problem. I am using FreeRadius to provide 802.1x authentication to Windows XP clients. I am using PEAP / MSCHAP V2 and ntlm_auth which connects to an Active Directory backend. The problem I had was that I could not add local

Re: RADIUS and PPPoE

okay, have those, cant find any tutorials. any advice ? cheers On Mon, 14 Feb 2005 11:28:58 -0800 (PST), Julius Igugu [EMAIL PROTECTED] wrote: Roaring Penguin PPPoE Colin O'Keeffe [EMAIL PROTECTED] wrote: I want a software one for linux. thanks for the help On Mon, 14

Re: variable problem

The %{Stripped-User-Name... is being set in the suffix portion of the authorize section so I added one in front of where I was doing the ldap uid checking re: In radiusd.conf I put authorize { preprocess auth_log $INCLUDE ${raddbdir}/radiusd.my.authorize chap

Re: variable problem

my apologies I answered before reading the question. It looks like there is a character that is terminating the search in radiusd.my.modules ldap uid_check { server = ldap ... access_attr = uid

Authentication against an Oracle view

Title: Authentication against an Oracle view I am currently looking into setting up freeRADIUS 1.0.1 in our corporate environment. Currently we are using Funk's Steel-Belted RADIUS server and utilize the ability to authenticate against a Oracle user database (a view). Is there anyway (a

Inactive Account and MySql

Hello All, I have just started to notice a problem maybe someone out their has seen something similar to this problem. A User logs out of the system, if you do a Radwho you will not see the user as an active Client but if you go into dialupadmin it will be shown as the user being active

rlm_perl module

Hello! I've got a question: can be rlm_perl module compiled staticly? Due compilation on linking step I've got: undefined symbol boot_DynaLoader Best regards, Serg - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Which month abbreviations are used in the radius.log file

I am writing a script to process the radius.log file (freeRADIUS 1.01). I need to know the month abbreviations are used for March - December. I have Jan Feb Any ideas??? Brock - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Ldap Group Attribute radiusGroupName

Hello, Seem to be something is missing somewhere. I've follow the same way. But there is still no sight og LDAP-Group in the log. Below is the log. Dustin Doris wrote: ldap_howto.txt in the doc directory tells you how, not sure how outdated that is by now, I will be rewriting it sometime this

Re: EAP success with MD5 authentication

Thanx Alan for correcting me .. I had mistakenly written 2869.. Its actually RFC 2865.. i didnt know that The text in RRC 2865 is not referring to EAP, it's referring to systems like X9.9 token cards. The problem i posted is solved finally !! In sending Response Radius packets, NAS do not

Re: !!!

! fnasirov wrote: Hello ! Huawei A8010 Expert Access Server [ http://www.futurewei.com/itemsdetail.asp?catid=6dt=productsid=68 ] patch for checkrad located at ftp://rd.ranetka.ru/pub/checkrad/checkrad.patch . That SNMP oids test for dial-up clients, but no