Proxy with TLS

Hi, I'm very newbie to Freeradius. I'm try to use TLS whit to freeradius server. I've a firewall FW that talk locally (over LAN) with the freeradius A. Then freeradius A proxies the request to a remote (over WAN) freeradius B. The system works great and I'm able to authenticate user on firewall

Question about freeradius and Cisco VoIP router

Hello AllI am writing a C program as an external program for freeradius to handle authentication requests recieved from a Cisco VoIP router.How can I pack attribute-value pairs and send them to the router? I can determine the attribute-value pairs transmitted by the router through environment varia

Re: Proxy with TLS

hi i just want to know what is the operating system u instaled free radius on?is  it linux red hat? thanks  On 9/5/06, Gabriele Chervatin <[EMAIL PROTECTED]> wrote: Hi, I'm very newbie to Freeradius.I'm try to use TLS whit to freeradius server.I've a firewall FW that talk locally (over LAN) with t

radclient not able to send salted encrypted VSA's?

Hi, I'm using freeradius version 1.3. I need to send CoA requests to a Juniper-ERX containing salted VSA "ERX-LI-Action=enable". radclient says it is unable to "salt" this vp's. If someone could help extending radclient or tell me another way how to send salted CoA requests I'd appreciate. Here's

Re: Problems getting eap-mschapv2 working.

I tested this morning, and now have it working.  Previously I just had the mschapv2 outside of the peap section and it didn't work.However, I added the mschap stanza to the modules stanza outside of eap.  I also added mschap to authorize and authenticate stanzas.  Not sure if this was needed, so no

Mysql connection with SSL

Hi, I'd like to know if there is a way to securing access to a Mysql server from freeradius. I found this thread with a patch enabling SSL connections: http://lists.freeradius.org/mailman/htdig/freeradius-users/2005-March/042059.html Have things progressed since then? Fabio - List info/su

Problem in accounting with sql counter module max-all-session

Hi, I have setup freeradius 1.1.2 in FreeBSD 6.0 with mysql support. I have setup user in radcheck table as follows; 1403 | test01 | | || Max-All-Session | := | 1500| The user test001 is allowed to login total for 25hrs. After finishing 25hrs if the user r

Re: WPA/RADIUS Problems

Hi Loukas, Loukas Kalenderidis schrieb: I'm happy to follow your advice, if you give me some that isn't just "configure stuff dude". FreeRadius is very confusing and the docs do not explain everything in a manner, a beginner can understand. That was my problem. I found this HowTo very us

Lost values

Hi there, I've got the next config file: radiusd.conf - modules { exec my_auth { wait = yes program = "/home/myself/my_auth.sh %{NAS-IP-Address} %{Calling-Station-ID} %{User-Name}" input_pairs = request output_pairs = reply } ... instantiate { exec m

rlm_sql functionality

Hi, I am trying to do something with rlm_sql (driver: mysql) that does not seem to work as stated in the documentation. Consider this database: mysql> select * from radcheck; | id | UserName | Attribute | op | Value | | 1 | nar2 | Password | == | test | mysql> select * from radreply;

RE: Failed Logins

> -Original Message- > It looks like a memory corruption issue. Either there's a > bug in the server, or there's bad RAM in the system. Any suggestions on how to test memory on a Debian box remotely? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Failed Logins

"King, Michael" <[EMAIL PROTECTED]> wrote: > Any suggestions on how to test memory on a Debian box remotely? Google for memory test utilities. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/uns

Re: Lost values

"Jack Daniels" <[EMAIL PROTECTED]> wrote: > So, my question is, why, at some point, i lose the values of > %{NAS-IP-Address} and %{Calling-Station-ID}? ... i.e. the NAS never sends them to the server. > I'd like to know also if there is a way to "ignore" a request for my script. > In this cas

RE: monitoring freeradius with snmp

Title: RE: monitoring freeradius with snmp Ok - thanks I have noticed the following from the output from configure checking for asn1.h,snmp.h,snmp_impl.h... no how can I get configure to look at the directory with these header files in. I'm running Solaris 2.8 Thanks Regards Andy

Re: WPA/RADIUS Problems

Alexandros Gougousoudis <[EMAIL PROTECTED]> wrote: > FreeRadius is very confusing and the docs do not explain everything in a > manner, a beginner can understand. They (and the main web page) point to EAP howto's on the main web site, which include screenshots for configuring Windows for wirele

Re: Proxy with TLS

"Gabriele Chervatin" <[EMAIL PROTECTED]> wrote: > Then freeradius A proxies the request to a remote (over WAN) > freeradius B. The system works great and I'm able to authenticate user > on firewall FW by freeradius B (which is the only who have the user > accounts). That's pretty standard. > No

Re: Question about freeradius and Cisco VoIP router

"Ali Majdzadeh" <[EMAIL PROTECTED]> wrote: > I am writing a C program as an external program for freeradius to handle > authentication requests recieved from a Cisco VoIP router. > How can I pack attribute-value pairs and send them to the router? scripts/exec-program-wait Just print the attr

Re: radclient not able to send salted encrypted VSA's?

Birchmeier Raphael <[EMAIL PROTECTED]> wrote: > I'm using freeradius version 1.3. I need to send CoA > requests to a Juniper-ERX containing salted VSA > "ERX-LI-Action=enable". Does Juniper document that as being possible? > If someone could help extending radclient or tell me > another way how

Re: Proxy with TLS

2006/9/5, Alan DeKok <[EMAIL PROTECTED]>: Tahnks for yuor reply RADIUS doesn't work that way. EAP-TLS runs inside of RADIUS, not the other way around. Sorry but I'don't unterstand what yuo mean. If you want security between the two machines, run ipsec, or some other VPN system. Right

RE: Failed Logins

24 hrs later, Different radius server. (on a different box, this one is RedHat) FreeRadius 1.1.3 Same problem, throwing the same Error. Tue Sep 5 13:24:33 2006 : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) Tue Sep 5 13:24:33 2006 : Error: TLS Alert write:fatal:bad record

How to restrict pppoe users on nas-port-id

I'm using FreeRADIUS Version 1.0.4 with Dialup_admin and mysql and I would like to know if anyone can direct me in the right place to find out how to restrict pppoe users from logging in from multiple NAS port IDs. I would like to restrict them to logging on to only a specific set of port IDs th

Re: rlm_perl and accounting

Is this in the CVS head, yet? -jc Alan DeKok wrote: Peter Nixon <[EMAIL PROTECTED]> wrote: That would seem like th logical way to do it, and would certainly make the perl code clearer.. Ok. Unless Boian Jordanov has concerns, I'll commit a patch in a few days. Alan DeKok. -- http://d

Re: rlm_perl and accounting

Justin Church <[EMAIL PROTECTED]> wrote: > Is this in the CVS head, yet? Yes. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: monitoring freeradius with snmp

Hi, > Ok - thanks > > I have noticed the following from the output from configure > > checking for asn1.h,snmp.h,snmp_impl.h... no > > > how can I get configure to look at the directory with these header files in. ./configure --help note the CPPFLAGS option. why are your proper SNMP includ

Re: Failed Logins

"King, Michael" <[EMAIL PROTECTED]> wrote: > 24 hrs later, Different radius server. (on a different box, this one is > RedHat) FreeRadius 1.1.3 > Same problem, throwing the same Error. This may be related: https://www.aet.tu-cottbus.de/pipermail/postfix_tls/2002/000353.html ... It ends up tha

Enable Syslog

Can we send radius log to a syslog? If so, how can I accomplish this. I am using the latest freeradius version.. I try changing logdir=syslog but not successful... Thanks in advance.. __ Do You Yahoo!? Tired of spam? Yahoo! Mail has the best spam

Radius Installation

I’m going to start by saying that I’m new to radius.   I’ve gotten as far as installing version 1.1.3.  Are there any scripts to add users, and how do I configure the web interface?   Nico Gazzano Network & Systems Admin MIS Choice Inc. 1699 Wall ST Suite 602 Mount Prospect, IL 60

Free Radius make error with Sol10

Hi,   Following error I am getting when i try to make the free radius on Solaris 10. I am following direction as stated from link http://wiki.freeradius.org/index.php/Build   I installed following packages as suggested in the above link : libgcc-3.3-sol10-sparc-local.gz openssl-0.9.8b-sol10-sparc-

Re: Radius Installation

"Nico Gazzano" <[EMAIL PROTECTED]> wrote: > I've gotten as far as installing version 1.1.3. Are there any scripts to > add users, and how do I configure the web interface? The web interface included with the server is dialup_admin. It is a PHP-based interface that administers users in an SQL d

RE: Radius Installation

Any examples on how to configure it? Nico Gazzano Network & Systems Admin MIS Choice Inc. 1699 Wall ST Suite 602 Mount Prospect, IL 60056 Phone 847-690-1900 ext206 Fax 847-690-1350 [EMAIL PROTECTED] -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan D

Re: Radius Installation

"Nico Gazzano" <[EMAIL PROTECTED]> wrote: > Any examples on how to configure it? To do... what, exactly? Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.o

sqlcounter for rechargeable account

Hi all, Can anybody guide me how to make sql counter for rechargeable account. like user "test01" subscribe for total of 25hours and after finishing 25hours if he wants to recharge his account again to 25hrs. Bisal - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/user

Re: 1.1.3 on Solaris 10 (sparc)

Lin Richardson wrote: You should post this to thet userlist (I am cc'ing them on this reply). Perhaps someone there has seen the "false cru" error before... I'm no compiler guru, but google tells me that libtool may be to blame. I don't acutally show libtool installed on my box and don't know