Binding FreeRadius to the DHCP Server

2006-07-24 Thread Elie Hani
Hi;   I want to bind the FreeRadius to the DHCP, is there a way to do that?   Thanks Elie   - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: verifying "/" exists in User-Password field

2006-07-24 Thread Phil Mayers
Geoff Silver wrote: If so, this works for me: user User-Password=~".*/.*", Some-Stuff := whatever Cool. So is there an easy way to combine that with the dynamic hint I'm already creating, since I'm already applying a hint? If I change my hint to: DEFAULT User-Name =~ "^(.*)$", Us

Re: verifying "/" exists in User-Password field

2006-07-24 Thread Geoff Silver
Phil Mayers wrote: Geoff Silver wrote: # Cisco NAS doing username/password authentication, proxied to another bob Huntgroup-Name=="Office", Hint==Port-1645, Proxy-To-Realm:=UAS Connect-Info="OFFICE_ACCESS" I take it these are PAP requests? Yep If not, it can't be done. If so, this wor

Re: ATTRIBUTE has invalid number (larger than 255)

2006-07-24 Thread Alan DeKok
"Steven Stanek" <[EMAIL PROTECTED]> wrote: > I am a FreeRadius newbie. I have installed FreeRADIUS Version 1.1.2. I was > able to install without any errors. But when I start the server I get an odd > message about a dictionary file (see below. I have a Solaris machine running > -> SunOS aureb01f 5

ATTRIBUTE has invalid number (larger than 255)

2006-07-24 Thread Steven Stanek
Hi, I am a FreeRadius newbie. I have installed FreeRADIUS Version 1.1.2. I was able to install without any errors. But when I start the server I get an odd message about a dictionary file (see below. I have a Solaris machine running -> SunOS aureb01f 5.8 Generic_117000-03 sun4u sparc SUNW,Ultra-60.

Re: verifying "/" exists in User-Password field

2006-07-24 Thread Phil Mayers
Geoff Silver wrote: # Cisco NAS doing username/password authentication, proxied to another bob Huntgroup-Name=="Office", Hint==Port-1645, Proxy-To-Realm:=UAS Connect-Info="OFFICE_ACCESS" I take it these are PAP requests? If not, it can't be done. If so, this works for me: user User-Passw

Re: verifying "/" exists in User-Password field

2006-07-24 Thread Phil Mayers
Geoff Silver wrote: # Cisco NAS doing username/password authentication, proxied to another bob Huntgroup-Name=="Office", Hint==Port-1645, Proxy-To-Realm:=UAS Connect-Info="OFFICE_ACCESS" I take it these are PAP requests? If not, it can't be done. If so, this works for me: user User-Passw

verifying "/" exists in User-Password field

2006-07-24 Thread Geoff Silver
I'm running FreeRadius 1.1 on two different ports, allowing slightly different auth methods on each port. On one of the ports, I would like to verify that the password sent contains a slash ("/") before attempting to authenticate the user. Why, you might ask? Well because on that port I'm act

Re: AW: Since 2 Month noone any idea how to do this ? Stripping Username Question *important*

2006-07-24 Thread Phil Mayers
Armin Krämer wrote: Okay i tried a little and my result is now that my attr_rewirite looks like: search_string = "(host/)" replace_string = "" That works to delete the "host/" part. But i need a "$" appended to the User-Name. How can i do this? You should use the mschap module and a vers

Re: Why doesn't := "Always match?"

2006-07-24 Thread Phil Mayers
George C. Kaplan wrote: Phil Mayers wrote: I'll try to give an example. Suppose you had two entries, using '==' for the same user: plong Auth-Type = Local, User-Password == "126" plong Auth-Type = Local, User-Password == "123" Then, if 'plong' supplies the password "123", the 'files' mod

Re: Why doesn't := "Always match?"

2006-07-24 Thread George C. Kaplan
Phil Mayers wrote: >> I'll try to give an example. Suppose you had two entries, using '==' >> for the same user: >> >> plong Auth-Type = Local, User-Password == "126" >> >> plong Auth-Type = Local, User-Password == "123" >> >> Then, if 'plong' supplies the password "123", the 'files' module >>

internet users based on time+ath

2006-07-24 Thread Marwan Sultan
Hello people, I'm On FreeBSD 6.1R its acting as a internet gateway for a comlex of 30 appartments. the internet to this box is connected thro a dsl and its up/running, Well, We want to bill whoever sharing our internet connection on a monthly bases so basically, I want to release int

AW: Since 2 Month noone any idea how to do this ? Stripping Username Question *important*

2006-07-24 Thread Armin Krämer
Okay i tried a little and my result is now that my attr_rewirite looks like: search_string = "(host/)" replace_string = "" That works to delete the "host/" part. But i need a "$" appended to the User-Name. How can i do this? Mit freundlichen Grüßen Armin -Ursprüngliche Nachricht---

i don't know radius security function. help me please!

2006-07-24 Thread 나종현
  Sorry, I don't speak english.     tell me functoin about FreeRadius 1.1.2 , please       Add Group Function  -> is or isn't ? -> if is , How to configure?   Add User Function  -> is or isn't ? -> if is , How to configure?   Security Level Function  -> is or isn't ? -> if is , How to configure?  

EAP-TTLS MD5 hashed Passwords in MySQL Database for WPA-802.1x auth

2006-07-24 Thread Christian Poessinger
Hello, I'm trying to setup a System to authenticate WLAN users via EAP-TTLS with md5 crypted passwords, stored in a sql database. I'm using MySQL as the Backend and it works great when the passwords are stored in cleartext or UNIX crypt. When i convert the password from crypt to md5 and change pa

Re: AW: Since 2 Month noone any idea how to do this ? Stripping Username Question *important*

2006-07-24 Thread Phil Mayers
James J J Hooper wrote: In your LDAP section of radiusd.conf, replace this: %{Stripped-User-Name:-%{User-Name}} with this: %{Stripped-User-Name:-%{mschap:User-Name}} Regards, James Sorry, what i suggested may only work in the mschap section, not in the LDAP bit... :( No, it should work

Re: Why doesn't := "Always match?"

2006-07-24 Thread Phil Mayers
I'll try to give an example. Suppose you had two entries, using '==' for the same user: plong Auth-Type = Local, User-Password == "126" plong Auth-Type = Local, User-Password == "123" Then, if 'plong' supplies the password "123", the 'files' module (which processes the 'users' file) will

Re: Why doesn't := "Always match?"

2006-07-24 Thread Phil Mayers
Paul Long wrote: Basically, := is a "force set" operator. In a "check" item, it sets a check/config pair. So "Always matches a check item" just means that a check will be performed and says nothing about the outcome of that check? check items == config items. config items == attribute/valu

LDAP macAddress attribute for MAC-Address filters

2006-07-24 Thread luigi natalino
Hi, I need to implement MAC-Address filters,every user may have multiple MAC-Address. I'm using freeradius with openldap. Can i use ldap macAddress attribute to make this filters? How does Radius understand this attribute? Are request same modifications to ldap.attrmap, and if so what are the m

Removing tunnel attributes only for specific NAS

2006-07-24 Thread Ignacio Siles
  Hello,   I am trying to implement a Nomadix AG-5000 public NAS in a in a network with an existing FreeRADIUS server. The environment is as follows:   -  The customer wants nomadix to make public authentication (with captive portal and PAP) for guest users, and employees who c