Authentication by validating RADIUS attribute value

2006-07-07 Thread Hariharan R
--- Begin Message --- Hi all, I am using FreeRADIUS1.1.1 and Fedora directory server7.2 as the LDAP backend to store all the user information. I configured RADIUS to contact LDAP server for authenticate the user request. I have to implement the following requirement, For each user in

Authentication by validating RADIUS attribute value

2006-07-07 Thread HariHaran
Hi all, I am using FreeRADIUS1.1.1 and Fedora directory server7.2 as the LDAP backend to store all the user information. I configured RADIUS to contact LDAP server for authenticate the user request. I have to implement the following requirement, For each user in the LDAP server i will set

Questions about debug output

2006-07-07 Thread Paul Long
I have a few questions about the debug output from an ultimately successful EAP-TTLS-CHAP authentication. Consider this snippet: ... rad_recv: Access-Request packet from host 192.168.1.228:1045, id=210, length=166 User-Name = "anonymous" NAS-IP-Address = 192.168.1.228 Conn

Re: Radius + 802.1X

2006-07-07 Thread Alan DeKok
Emerson <[EMAIL PROTECTED]> wrote: > My freeradius work ok, and i put dhcp to work together, but not work, > anyone can answer this for me ? Ask on a DHCP list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radius + 802.1X

2006-07-07 Thread Emerson
Hi, i posted 2 messages with Radius + Dhcp and Radius with ip pool, but for this answers, i learn that radius don't have anithing with dhcp, and ip pool work with connections PPP. But I need to deliver ip's to my clients, they use wifi hardware 802.1X. Why i deliver ip's for them ? My freeradi

Re: rlm_sql variable substitution clarification

2006-07-07 Thread Guy Fraser
On Fri, 2006-07-07 at 14:18 -0400, Alan DeKok wrote: > Guy Fraser <[EMAIL PROTECTED]> wrote: > > The attributes are not named like they were in Cistron dictionaries. > > They all start with "X-". > > There's still a bug: > > Reply-Message = `%{Reply-Message:-x%{User-Password}x}` > > return

Re: rlm_sql variable substitution clarification

2006-07-07 Thread Alan DeKok
Guy Fraser <[EMAIL PROTECTED]> wrote: > The attributes are not named like they were in Cistron dictionaries. > They all start with "X-". There's still a bug: Reply-Message = `%{Reply-Message:-x%{User-Password}x}` returns "xbob" for the standard test of user "bob/bob". Patch is given bel

Re: rlm_sql variable substitution clarification

2006-07-07 Thread Guy Fraser
On Fri, 2006-07-07 at 11:19 -0600, Guy Fraser wrote: > On Fri, 2006-07-07 at 11:02 -0600, Guy Fraser wrote: > > I have run into an issue where we now have different types of > > NAS servers. I would like to use %{Connect-Info} if available > > or a string formatted from two attributes like : > > >

Re: rlm_sql variable substitution clarification

2006-07-07 Thread Guy Fraser
On Fri, 2006-07-07 at 11:02 -0600, Guy Fraser wrote: > I have run into an issue where we now have different types of > NAS servers. I would like to use %{Connect-Info} if available > or a string formatted from two attributes like : > > D%{Ascend-Data-Rate}_X%{Ascend-Xmit-Rate} > > This is how I t

rlm_sql variable substitution clarification

2006-07-07 Thread Guy Fraser
I have run into an issue where we now have different types of NAS servers. I would like to use %{Connect-Info} if available or a string formatted from two attributes like : D%{Ascend-Data-Rate}_X%{Ascend-Xmit-Rate} This is how I tried to do it : ConnectInfo_stop = \ '%{Connect-Info:-D%{Ascend-Da

Re: 802.1x authentication

2006-07-07 Thread Alan DeKok
"Jin Fan" <[EMAIL PROTECTED]> wrote: > To further describe my challenge, here is debugging output from > freeradius. One line says, "rlm_eap: Failed in EAP select". The *important* message is: > rlm_eap: EAP-NAK asked for EAP-Type/peap > rlm_eap: No such EAP type peap The client is asking

Re: Session Log

2006-07-07 Thread Alan DeKok
fvt3 <[EMAIL PROTECTED]> wrote: > Is there a session log in freeradius? I want to find > out who logged on and how much time they have until > there session is timeout. Is there such a thing? $ man radwho Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users

Re: Framed-IP-Address accounted in Hex

2006-07-07 Thread Alan DeKok
Graeme Hinchliffe <[EMAIL PROTECTED]> wrote: > these are hex values, not octal, and it seems to be an intermittent > thing. Dang. Those bugs are hard to track down. > Are dictionaries loaded each time a child is started? or just once > and then kept in memory? The server doesn't start a

Re: Standalone FreeRadius EAP-SIM Configuration Recipe?

2006-07-07 Thread Alan DeKok
"Duncan Glendinning" <[EMAIL PROTECTED]> wrote: > I'm attempting to configure FreeRadius to use EAP-SIM, in a standalone > fashion (i.e., the GSM tuples are stored locally). Does a 'recipe' exist to > appropriately FreeRadius to do so? Not really, sorry. Alan DeKok. - List info/subscribe/un

Re: Radius ip pool

2006-07-07 Thread Paul Long
FWIW, I had a problem in this area, too. Bottom line: DHCP follows authentication. I'm a newbie and just got FreeRADIUS to authenticate my wifi phone for the first time last night. Yay! Prior to that, I noticed that my phone wasn't getting an IP address through DHCP and thought that that might

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-07 Thread Stefan Winter
Hi, > I'm very impressed. I installed this and all of my complaints and > concerns are answered! Now, i'm assuming and hoping the linux wpa > supplicant also supports this... Sure thing :-) It's Free Open Source Software after all :-) > > Uh. You should consider that you will have _no_ link-laye

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-07 Thread John Allman
Stefan Winter wrote: >> I'm searching through my dell wireless wlan card utility and i'm pretty sure >> i can't hide it. Are dell breaking any rfcs or other standards that i can >> take them up on? > > No. It's optional. If Dell doesn't do it, bad luck. But you can always > install > a supplica

Error: rlm_sql_mysql: MYSQL Error

2006-07-07 Thread jayesh
Hi all, I am using freeradius 1.1.0. The backend is mysql 5.0.22 which is located on a different server on the same network. My configuration is as follows: I am doing some stress testing to benchmark my infrastructure. I use SIPp for the same. The SIPp sends the calls to cisco gateway, th

RE: 802.1x authentication

2006-07-07 Thread Jin Fan
Hi, all: To further describe my challenge, here is debugging output from freeradius. One line says, "rlm_eap: Failed in EAP select". I must have set up eap wrong. Could anyone help me out here? Btw, in the following example, user "TRPZEDU\\jfan" tries to authenticate through 802.1x. Thank

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-07 Thread Stefan Winter
> "Most supplicants". So there's a chance that a supplicant might not do > so? Yes. It's implementation-specific. The Win XP built-in supplicant for example does not do it. > Is the Identity in the EAP-Message in the first packet always the > same as the User-name i see in all packets? Yes, t

RE: FW: mpd+freeradius+AD

2006-07-07 Thread Егоров Сергей
Thank you so much Nikos! -Original Message- From: Nikos Vassiliadis [mailto:[EMAIL PROTECTED] Sent: Friday, June 30, 2006 4:57 PM To: freeradius-users@lists.freeradius.org Cc: Егоров Сергей Subject: Re: FW: mpd+freeradius+AD On Friday 30 June 2006 11:57, Егоров Сергей wrote: > Ok, this

Session Log

2006-07-07 Thread fvt3
Is there a session log in freeradius? I want to find out who logged on and how much time they have until there session is timeout. Is there such a thing? __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam protection around http://mail

Re: Radius ip pool

2006-07-07 Thread Stefan Winter
Hi, (please respond to the list, not me privately. Others may have the same question) > yes, my clients using 802.1X. > I make a DHCP Server together with freeradius, but he don't deliver ip's. > I want to know if the radius have any configuration for this, to work > with a DHCP server. In fact

Standalone FreeRadius EAP-SIM Configuration Recipe?

2006-07-07 Thread Duncan Glendinning
Hello,   I’m attempting to configure FreeRadius to use EAP-SIM, in a standalone fashion (i.e., the GSM tuples are stored locally).  Does a ‘recipe’ exist to appropriately FreeRadius to do so?  It appears that the documentation is not complete, and I haven’t found reference to such a confi

Re: EAP-TTLS/PAP -> LDAP for WPA2

2006-07-07 Thread John Allman
Stefan Winter wrote: > > The thing about anonymous outer identity is that it doesn't matter what you > put in there. If your real name is "iamcool" and your password > is "evencooler" you can happily send "foobar" as Identity. Authentication > will only depend on what's inside the tunneled PAP r

Re: Framed-IP-Address accounted in Hex

2006-07-07 Thread Graeme Hinchliffe
On 6 Jul 2006, at 22:20, Alan DeKok wrote: Graeme Hinchliffe <[EMAIL PROTECTED]> wrote: What would cause FreeRADIUS to output in this manner, we have summized that if it sees a none ASCII byte in the field it would convert the whole field into a hex representation to stop trying to write binar

Re: Username in MySQL with regexp

2006-07-07 Thread christian meutes
DEFAULT, just like in the "users" file. Alan DeKok. What do i have to set for further reply-item settings in the User-Name column? I have more than one Username which should be checked against a regexp and then should reply individual items. Sorry but i dont understand you answer :-( Ch