Hello,

Hi All I m new to AAA things.I want how can I support RSA ACE/Server in freeradius. Can anyone has details How interaction is made between RADIUS and RSA/ACE-server?. in general scenario Rgds DArshak - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Storing in SQL, Procedure call

Hi, I'm using freeradius with freetds and unixodbc. I am having an issue using a procedure call to insert to a Microsoft SQL Server. When I try to use the procedure call 'exec', I see the following errors: radius_xlat: 'exec ***rlm_sql (sql): Reserving sql socket id: 8query: exec ***

Re: public secret and public radius server. Is it secure?

Hi, In my project, I don't own the hotspots, and don't know about the hotspots ISPs. The hotspots communicate to the radius server though the internet. I would suggest using another method to get a secure connection to the hotspot. Maybe IPSec. this is again an example where a RadSec

Problem with Freeradius 1.1.2 OpenLDAP 2.3.20

Hello everyone, I am trying to make Freeradius 1.1.2 work with OpenLDAP2.3.20 (I was previously able to make it work perfectly with MySQL). When I try to configure and compile Freeradius without any options, I receive a Segmentation Fault. When I try to configure it with --

Re: Freeradius-Users Digest, Vol 14, Issue 19

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius 1.1.2 rlm_unix on AMD 64

Hi all. I have a big problem woth freeradius and i need to fix it ASAP ! If someone can help me ... I'm using freeradius for a long time without any problem, but with the v1.1.2, i can't do anything ! When i want to start it, i'm always getting the message : Module: Instantiated pam (pam)

Re: public secret and public radius server. Is it secure?

Stefan Winter wrote: Hi, In my project, I don't own the hotspots, and don't know about the hotspots ISPs. The hotspots communicate to the radius server though the internet. I would suggest using another method to get a secure connection to the hotspot.

Mikrotik Simultaneous Use

Hi, I have more than twenty Mikrotik RouterBoard, all device calling same freeradius server... now.. can I use "Simultaneous Use:=1" for check if a user is connected or not from another device? Thanks in advance.. Italo Morellato - List info/subscribe/unsubscribe? See

LDAP-Authentication based on CHAP

Hello, despite the FAQ- Entry How do I make CHAP work with LDAP?: can anybody tell us if its basically possible to run a chap-Auth against an LDAP? I know, that a specific LDAP-Service must be able to retrieve a user-Pwd and often it cant, cause of the storage of the pwd as one-directioned

Re: LDAP-Authentication based on CHAP

On Tue, 6 Jun 2006, Rainer Brinkmann wrote: Hello, despite the FAQ- Entry How do I make CHAP work with LDAP?: can anybody tell us if its basically possible to run a chap-Auth against an LDAP? I know, that a specific LDAP-Service must be able to retrieve a user-Pwd and often it cant, cause

Re: RP-pppoe

the attribute does not work with the GPL version of rp-pppoe --- Mordor Networks [EMAIL PROTECTED] wrote: Hello list! I wonder if someone used the RP-Upstream-Speed-Limit and RP-Downstream-Speed-Limit ATTRIBUTES from roaring pangiun rp-pppoe with mysql , if so can someone please tell me

OpenSSL weirdness

Hi there I'm currently trying to compile freeradius v1.1.2 and I'm having some trouble getting openssl to link in. Version 1.0.5 compiles fine using the same configure flags. My configure line is: ./configure --with-openssl-libraries=/usr/local/openssl

Re: Freeradius-Users Digest, Vol 14, Issue 20

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius-Users Digest, Vol 14, Issue 21

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with Freeradius 1.1.2 OpenLDAP 2.3.20

En réponse à Nicolas Martin : checking for ldap_init in -lldap_r ... no checking for ldap.h ... no configure: warning : silently not building rlm_ldap configure: warning : FAILURE : rlm_ldap requires libldap_r ldap.h I am sure my paths are correct, I am sure I have the file ldap.h in my

Re: Storing in SQL, Procedure call

Im using the same setup for access to some ancient Sybase and it works fine. However, the query doesn't use EXEC ... it's plain : accounting_stop_query = sp_my_stored_procedure_name '%{SQL-User-Name}','%{Realm}', I did have problems with freetds 0.62.3, tho, so I installed 0.63 and

Re: Problem with Freeradius 1.1.2 OpenLDAP 2.3.20

Please look for error messages in src/modules/rlm_ldap/config.log -- Nicolas Baradakis The two main errors I can find are: /usr/bin/ld: cannot find -lldap_r collect2: ld returned 1 exit status configure: failed program was: #line 974 configure #include confdefs.h (3 times) and In

SSL error using MS-CHAPv2 - new in 1.1.2

Hi, I logged in via PEAP after a brand-new upgrade to 1.1.2 today, and saw a new error message (everything worked fine though): Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) Error: rlm_eap: SSL error

Re: Hello,

It would be difficult to say how RADIUS would interact with the actual ACE server since it's a proprietary system. In 2002 I thought about going down this route and I'm summarizing from the 5 page SecurId integration document. You must write code that uses RSA's 'RSA Agent' software to

Re: SSL error using MS-CHAPv2 - new in 1.1.2

Despite this Error the Authentification works well ? because I've got the same error but LDAP authentification fail and I don't know if it's due to that client certificate error ? Thomas Hahusseau2006/6/6, Stefan Winter [EMAIL PROTECTED]: Hi,I logged in via PEAP after a brand-new upgrade to 1.1.2

Re: SSL error using MS-CHAPv2 - new in 1.1.2

Hi, Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) Info: rlm_eap_mschapv2: Issuing Challenge Auth: Login OK: [EMAIL PROTECTED] (from client

Re: Freeradius-Users Digest, Vol 14, Issue 22

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Hello,

many thanxs to u.This has helped me greatly. Some doubts i have : If I use My radius as proxy ,then this should based upon realm or something like that? And such configuration will not need to write Any s/w from my end? right? Rgds Darshak - Original Message - From: Michael

Re: Hello,

Am Dienstag, 6. Juni 2006 15:56 schrieb darshak: many thanxs to u.This has helped me greatly. Some doubts i have : If I use My radius as proxy ,then this should based upon realm or something like that? And such configuration will not need to write Any s/w from my end? right? If you

Re: PEAP authentication with freerad ?

I assume by PEAP, you mean the most-often-seen PEAP/EAP-MSCHAPv2. In this case, MD5 is not involved anywhere. The passwords are hashed differently. As such, you must either have an NT hashed password (which is actually a unicode-encoded MD4 hash of the password) or a cleartext password

Re: Freeradius-Users Digest, Vol 14, Issue 22

On Tuesday 06 June 2006 09:39, Gilbert Lo wrote: I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo Great! When you return, you should have someone fix your auto-responder so we don't see these annoying messages. At least

Re: PEAP authentication with freerad ?

Yes i use PEAP/MsChapv2 , and password in OpenLDAP are stocked in clear mode , but there is a really strange eror while I try an autothentication via EAP-PEAP (MSCHAPv2) here is the output of Freeradius : lm_ldap: checking if remote access for test is allowed by uid rlm_ldap: looking for check

Re: Freeradius-Users Digest, Vol 14, Issue 23

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SSL error using MS-CHAPv2 - new in 1.1.2

Stefan Winter [EMAIL PROTECTED] wrote: I logged in via PEAP after a brand-new upgrade to 1.1.2 today, and saw a new error message (everything worked fine though): Error: TLS_accept:error in SSLv3 read client certificate A Error: rlm_eap: SSL error error::lib(0):func(0):reason(0)

Re: PEAP authentication with freerad ?

thomas hahusseau [EMAIL PROTECTED] wrote: modcall: entering group Auth-Type for request 6 rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. This means that the server has no clear-text password. i.e.

Re: public secret and public radius server. Is it secure?

Stefan Winter [EMAIL PROTECTED] wrote: this is again an example where a RadSec extension would come in extremely handy. Short wrapup: RadSec establishes connections via TCP and TLS and transports the RADIUS payload over it, so clients can be identified by their TLS certificate; IPs and

Re: freeradius 1.1.2 rlm_unix on AMD 64

MaKKrO [EMAIL PROTECTED] wrote: radiusd.conf[604] Failed to link to module 'rlm_unix': /usr/lib64/rlm_unix.a: invalid ELF header Build the server with shared library support. Why do some modules work, and others fail? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: OpenSSL weirdness

Mick Tait [EMAIL PROTECTED] wrote: I've pasted the entire output from configure at the end of the email in case it helps, but the important bits would seem to be these: checking for DH_new in -lcrypto... (cached) yes checking for SSL_new in -lssl... (cached) no See config.log for reasons

Re: Problem with Freeradius 1.1.2 OpenLDAP 2.3.20

Nicolas Martin [EMAIL PROTECTED] wrote: In file included from .../ldap.h:30 .../lber.h:29:24: lber_types.h: no such file or directory ... It is true that I don't have any lber_types.h file The LDAP headers are telling you they need that lber_types.h. If you don't have it, then nothing you

RE: SecurID authentication

Darshak, I'm not a legal representative, but Michael's response is for someone that wishes to sell or distribute(?) a product that uses the SecurID service While doing a RADIUS proxy to for the new RADIUS server may be the correct approach, if you are an owner of a SecurID server

Problem building the rlm_mysql module

I am having a problem building the rlm_mysql module. Can someone tell me what im doing wrong here? Please help. OS: RedHat Enterprise 3 WS - Clean install Hardware: Sunfire 20z AMD-64bit Mysql Package: MySQL-client-standard-5.0.22-0.rhel3.x86_64.rpm

Re: OpenSSL weirdness

Alan DeKok wrote: Mick Tait [EMAIL PROTECTED] wrote: I've pasted the entire output from configure at the end of the email in case it helps, but the important bits would seem to be these: checking for DH_new in -lcrypto... (cached) yes checking for SSL_new in -lssl... (cached) no

Re: PEAP authentication with freerad ?

Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module preprocess returns ok for request 0 radius_xlat: '/var/log/freeradius/radacct/192.168.0.5/auth-detail-20060606' rlm_detail: /var/log/freeradius/radacct/%{Client-IP-Address

Re: Freeradius-Users Digest, Vol 14, Issue 24

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Storing in SQL, Procedure call

I tried both suggestions and still no luck. Any other suggestion on how to get a Stored Procedure to work with FreeRadius, unixODBC/FreeTDS and Microsoft SQL Server 2000? For some reason when trying to call a Stored Procedure rlm_sql module is trying to perform a query rather then the procedure

Re: Freeradius-Users Digest, Vol 14, Issue 25

I am on holiday between June 5 to June 9. I will return to my office on June 12. See you soon. Thanks, Gilbert Lo helpdesk at St. George's School - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PEAP authentication with freerad ?

thomas hahusseau [EMAIL PROTECTED] wrote: First : If I uncomment eap in authorize section of radiusd.conf : Which you MUST do, or EAP doesn't work. rlm_eap_peap: Had sent TLV failure, rejecting. sigh Why are you insisting on looking at only a portion of the debug output? Look

Re: OpenSSL weirdness

Mick Tait [EMAIL PROTECTED] wrote: Thanks for the response. I did look through this file and every other file I could find that might shed some light on this. Unfortunately I found nothing that made any sense to me as regards this issue. Rather than paste them here and increase the amount

postgresql and freeradius (dialupadmin)

Hello I've got freeradius running with postgresql backend but since I can't get (IMHO correctly configured) dialupadmin running I'm not even sure it runs ok. My apache2 says something like: [notice] child pid 27829 exit signal Segmentation fault (11) and postgres daemon: could not accesp SSL

Re: OpenSSL weirdness

Alan DeKok wrote: Mick Tait [EMAIL PROTECTED] wrote: Thanks for the response. I did look through this file and every other file I could find that might shed some light on this. Unfortunately I found nothing that made any sense to me as regards this issue. Rather than paste them here and

RE: postgresql and freeradius (dialupadmin)

I would say it is rather an apache2 problem. Update it to the latest version and be sure that your apache2+php+postgres works before you start dialupadmin. Regards, Edvin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Krzysztof Matusik Sent:

Re: OpenSSL weirdness

Alan DeKok wrote: The config.log file looks like most of the content has been removed. i.e. when it says checking for X, it should then contain lines running gcc, etc. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Thats odd to say the

session tracking

I have read over the docs but haven't found a clear way to turn off session tracking. I just want the radius server to give an Accept or Reject for user auth (which I have working with mysql) and not track the session (start/stop records etc...) Thanks Jeremy - List info/subscribe/unsubscribe?

RE: session tracking

Hi, session tracking is called - accounting ! the last A in AAA ;) Just empty the accounting { } part in your radiusd.conf file. If your NAS sends accounting info - turn it off ! Regards, Edvin -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Jeremy

Re: SecurID authentication

Thanxs David,This has been useful to me . Although proxy is best answer.I just wanna go in some details. If i own RSA ACE/server,then does it come with RSa Ace/client agent? Then what i need to do is write a code that talks with Freeradius and RSA ACE/client? Or I need not do it? Is this

Peap/leap/wap

Does free radius support PEAP/LEAP 802.1x authentication? How can i configure it? - Original Message - From: Michael Griego [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, June 06, 2006 7:52 PM Subject: Re: PEAP authentication

Re: freeradius 1.1.2 rlm_unix on AMD 64

OK, but how I can do that ??? Thanks -- View this message in context: http://www.nabble.com/freeradius-1.1.2---rlm_unix-on-AMD-64-t1740156.html#a4745504 Sent from the FreeRadius - User forum at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Exec-Program and length of arguments

Hi. If I add to users file this: bob Auth-Type := Local, User-Password == bob Reply-Message = Hello, %u, Exec-Program = /home/engineer/acrad.pl User-Name=%{User-Name} Service-Type=%{Service-Type} Acct-Status-Type=%{Acct-Status-Type} Acct-Session-Id=%{Acct-Session-Id}