uselessidbr wrote:
> People, i've read a lot about the WIFI/AP authentication over Freeradius
> using LDAP but it seems i cannot make it work unless i use clear-text
> password or Nt/Lmpassword which as far as i know implies in Samba + LDAP
> integration.
http://deployingradius.com/documents/pro
Christ Schlacta wrote:
> I thought if you had a certificate signed by a trusted root CA, you were
> good and didn't need to install anything on the client.
It's true that you don't need to install anything on the client. It's
*not* true that it's a good idea.
Alan DeKok.
-
List info/subscrib
Hello,
I need two FreeRadius Servers which have the same data consisted.
I'm testing on two Ubuntu 10.4 with freeradius 2.1.8.
My Cisco# asks the first and if the first is not available it asks the
second.
Is there any Information on this topic?
I use freeradius with mysql. is mysql-replicatio
Just ensure that they have the same config. If you want to use mysql then
master/slave replication would be a way of achieving that
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi All,
Thanks for helped me to Authenticate with FreeRADIUS. Now I am able to
authenticate successfully.
Please help me to resole with the following issue,
How to get authorize with FreeRADIUS?
Where to store the user group details and his permissions? (which file i
have to store it)
Thanks
R
Hello Guys
i have inherited the administration of a radius server, that
authenticate 900 PPPoE user on mikrotik box.
i've noticed that there is some performance problem, mikrotik box show
that "last request RTT" in some cases is up to 1000ms, there is some
"resend" request and also some "timeo
I can not see its giving this error while starting. Do I have to change
installation directory or the library dirctory in the radiusd.conf?
[10:15:39.9] gmake[11]: Entering directory
`/home/network/Downloads/freeradius-server-2.1.12/src/modules/rlm_sql/drivers/rlm_sql_postgresql'
[10:15:39.9] if
On 20/09/2011 11:38, denizaydin wrote:
I can not see its giving this error while starting. Do I have to change
installation directory or the library dirctory in the radiusd.conf?
[10:15:39.9] gmake[11]: Entering directory
`/home/network/Downloads/freeradius-server-2.1.12/src/modules/rlm_sql/driv
Hello,
I have a script using radzap to zap clients. This script with
freeradius 1.1.7 worked, but since I updated to 2.1.10 it didn't work.
The command I run is:
root@vulpes21:~/scripts/radius# radzap -P 9937 -u -N 10.57.112.8
localhost
radclient: Nothing to send.
The ou
Hi,
We are successfully running the following version on our network for our DSL
users.
FreeRADIUS Version 2.1.7, for host i686-redhat-linux-gnu, built on Mar 31 2010
at 00:25:31
Copyright (C) 1999-2009 The FreeRADIUS server project and contributors.
FreeRADIUS was compiled with MySQL and radc
Giuseppe Marocchio wrote:
> i have inherited the administration of a radius server, that
> authenticate 900 PPPoE user on mikrotik box.
>
> i've noticed that there is some performance problem, mikrotik box show
> that "last request RTT" in some cases is up to 1000ms, there is some
> "resend" req
Sorry for that, I havent check the config output that's my fault. But 2.1.11
was working fine. Nevermind 2.1.12 is working now.
-
Deniz AYDIN
Senior Network Engineer
--
View this message in context:
http://freeradius.1045715.n5.nabble.com/2-1-12-potential-problem-tp4811959p4822190.html
Sent
Thanks a lot James, thats solved my problem with the version 2.1.12
authorize {
Autz-Type PPPOE_SUBSCRIBER {
sql
if (notfound) {
update control {
Auth-Type := Accept
}
}
}
}
[sql] User ccotesist06adsl not found
++
Hi,
We have configured EAP-PEAP with freeradius, and forward MS-CHAP-V2 request
to a Microsoft NPS server. This works fine, but we now want to implement one
more Microsoft NPS server, so how do we define a second radius client. So
that if the first one fails, it will automatically try the next ?
Hi,
my problem: I use RADA on 2 lines of 3com switches:
- those with ComWare 5 expect Radius to return Tunnel-Medium-Type =
"IEEE-802"
- those with ComWare 3 expect Tunnel-Medium-Type = "802"
Of course, in users, I can use only one of those values, as follows:
f0-0f-de-ad-f0-01 Cleartext-Passw
Stanisław Kamiński wrote:
> After looking at unlang man page - explains the basics, but show no
> examples; radiusd.conf - still no examples; and googling - some
> examples, but I counted 4 of them (maybe I searched the wrong way, but
> see for yourself what does "unlang examples" yield) I decided
oleaweel wrote:
> Hi,
>
> We have configured EAP-PEAP with freeradius, and forward MS-CHAP-V2 request
> to a Microsoft NPS server. This works fine, but we now want to implement one
> more Microsoft NPS server, so how do we define a second radius client. So
> that if the first one fails, it will au
On 20 Sep 2011, at 19:59, Stanisław Kamiński wrote:
> Hi,
> my problem: I use RADA on 2 lines of 3com switches:
> - those with ComWare 5 expect Radius to return Tunnel-Medium-Type = "IEEE-802"
> - those with ComWare 3 expect Tunnel-Medium-Type = "802"
Oh wow, that's exceptionally retarded. Can y
Hi
I ma looking for an example to compare of a rad accept request for telkom
adsl as All of a sudden I have routers that do not auth and have throuput
issues.
regards
Hilton
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
> Don't. Fix the database so that it isn't too slow.
> See the logs. If the DB is slow, the logs will usually say.
I have no slow queries on mysql-slow.log.
thanks
--
Lorenzo Milesi - lorenzo.mil...@yetopen.it
YetOpen S.r.l. - http://www.yetopen.it/
Via Carlo Torri Tarelli 19 - 23900 Lecco - IT
> is the db on the same server as freeradius?
yes
> there should be something on FR log file. If not, then run the server
> in debug mode and see which part is slow or spitting out errors.
will try to look for something
--
Lorenzo Milesi - lorenzo.mil...@yetopen.it
YetOpen S.r.l. - http://www.
Lorenzo Milesi wrote:
>> Don't. Fix the database so that it isn't too slow.
>> See the logs. If the DB is slow, the logs will usually say.
>
> I have no slow queries on mysql-slow.log.
Then it must be magic. Hire a wizard to fix the problem.
Something *you did* broke the server. Either say
> Then it must be magic. Hire a wizard to fix the problem.
Thanks, your sarcasm is really helpful!
> Something *you did* broke the server. Either say what you did, or
> good luck solving it yourself.
> i.e. See the FAQ for useless comments like "it doesn't work", which is
> what your messages am
> there should be something on FR log file. If not, then run the server
> in debug mode and see which part is slow or spitting out errors.
I ran in debug, and saw something which maybe could be wrong:
User-Name = "MYUSERNAME"
User-Password = "\002\234\350v[z\035Y\237\257\354\245\3
Lorenzo Milesi wrote:
>> Then it must be magic. Hire a wizard to fix the problem.
>
> Thanks, your sarcasm is really helpful!
It seems to work better than honest suggestions. You've ignored those.
> I *DID* say what I did: increased the amount of accounted users, nothing else.
The *default
Lorenzo Milesi wrote:
>> there should be something on FR log file. If not, then run the server
>> in debug mode and see which part is slow or spitting out errors.
>
> I ran in debug, and saw something which maybe could be wrong:
>
> User-Name = "MYUSERNAME"
> User-Password = "\002
On Tue, Sep 20, 2011 at 8:23 PM, Lorenzo Milesi
wrote:
>> there should be something on FR log file. If not, then run the server
>> in debug mode and see which part is slow or spitting out errors.
There are several reasons why I suggest you run the server in debug
mode (as also suggested many time
Hello.
Thanks for the answers.
I got no AD integrated with LDAP.
Is there any way i can convert an LDAP MD5/SHA hash to a NT hash password?
Thanks!
"Alan DeKok" escreveu:
> uselessidbr wrote:
>> People, i've read a lot about the WIFI/AP authentication over Freeradius
>> using LDAP but it seem
On 09/20/2011 11:03 AM, GUSTAVO VIEIRA OLIVEIRA wrote:
Is there any way i can convert an LDAP MD5/SHA hash to a NT hash password?
one-way password hashes are called one-way for a reason :-)
To produce a password hash you must start with a cleartext password.
see also:
http://deployingradius.
> For one, it can show you which part is slow (is it really the db, or
> is it something else). Another one is it can show relevant parts of
> the config which can help others pinpoint the problem. Pasting only
> PART of the debug log will only get you (at best) partial guesses.
Ok, I missed this,
On Tue, Sep 20, 2011 at 10:22 PM, Lorenzo Milesi
wrote:
>> For one, it can show you which part is slow (is it really the db, or
>> is it something else). Another one is it can show relevant parts of
>> the config which can help others pinpoint the problem. Pasting only
>> PART of the debug log wil
> The *default configuration* doesn't have the problem you described.
> So... what did you change? "adding users" is *not* the answer I'm
> looking for.
This radius has been successfully running for 4y now.
Problems raised since when we increased the number of users.
> You edited radiusd.conf to
> Your output does not look llike it comes from FR2's debug log.
This first debug log was a -x.
And yes, it's FR 1.1.7! (yes, could have said that before)
> > Let's say most of the problems come from a newly deployed nas.
>
> Then start from there.
>
> If the db is slow and FR is late to respo
Lorenzo Milesi wrote:
> Ok, I missed this, I thought was a suggestion to me :-)
> http://paste.ubuntu.com/693812/
Ugh. Upgrade to 2.1.x.
> Another weird thing I noticed is that as you can see at line 155 in the
> middle of an Access-Accept report there's another rad_recv, like it's mixing
>
So, there's no other option to use LDAP database for radius authentication
for WIFI users (windows users) without the use of an AD or a 3rd party
supplicant?
Also, is there any howto that explains how i can get my setup to work with
NtPassword?
If i change my radius setup to work with ntpasswords
You can use LDAP without needing AD or some 3rd party supplicant on the OS ,
but as already said, you will need to have the password as nthash or cleartext.
Read the compatibility matrix
alan
--
Message may be brief as it has been sent from my mobile
-
List info/subscribe/unsubscribe? See http:
Hi Phil,
It's been a while since we did not receive feedbacks about that SoH and
DHCP enforcement. I am just wandering if you had some news about it.
Thanks!
On 11-07-20 2:36 PM, Phil Mayers wrote:
On 07/20/2011 06:07 PM, Francois Gaudreault wrote:
Hi,
I am trying to make the SoH statemen
On 2011/09/20 05:22 PM, Lorenzo Milesi wrote:
Ok, I missed this, I thought was a suggestion to me :-)
http://paste.ubuntu.com/693812/
What is:
"Can't connect to SNMP agent with SMUX: Connection refused"
Is an SNMP connetion of some sorts not maybe slowing it down while
authenticating?
--
Hi,
I thought it might be useful for some users to add the
dictionnary.symbol file below :
VENDOR Symbol388
BEGIN-VENDORSymbol
ATTRIBUTESymbol-Admin-Role1integer
VALUESymbol-Admin-RoleMonitor1
VALUESymbol-Admin-Role
On 09/20/2011 06:15 PM, Francois Gaudreault wrote:
Hi Phil,
It's been a while since we did not receive feedbacks about that SoH and
DHCP enforcement. I am just wandering if you had some news about it.
Sorry; I've no time to look into it at the moment. Personal real-life
issues are consuming
Francois Gaudreault wrote:
> I thought it might be useful for some users to add the
> dictionnary.symbol file below :
Added, thanks.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
That's fine, I understand that.
On 11-09-20 1:56 PM, Phil Mayers wrote:
On 09/20/2011 06:15 PM, Francois Gaudreault wrote:
Hi Phil,
It's been a while since we did not receive feedbacks about that SoH and
DHCP enforcement. I am just wandering if you had some news about it.
Sorry; I've no tim
Hi,
Thanks for fast reply.
Just for information, I have not been working to much with FreeRadius:). I
have read the proxy.conf file but im having problems understanding the
configuration. When it say "home_server" is this a general name ?
If I understand correct i need to configure a "home_server
Hi,
Configure freeradius with his ldap module and a ldap server as openldap.
http://wiki.freeradius.org/Rlm_ldap could be a good start.
Fred,
2011/9/20, Rajkumar balaji :
> Hi All,
>
> I just want to store user details like, The user name is "ABC" and the user
> belongs to "XYZ" group and "PQR"
http://wiki.freeradius.org/Clients.conf
2011/9/20, Dagia Dorjsuren :
> Hello all,
>
> How to configure
> multiple NAS (NAS-IP-Address) in freeradius? Which radius database's
> table should I add "NAS-IP-Address" attributes?
>
> Anyone advise me?
>
-
List info/subscribe/unsubscribe? See http
On Tue, Sep 20, 2011 at 1:47 PM, Rajkumar balaji
wrote:
> Purpose is After the authentication i need to retrieve the group details
> associated with this user and according to them I need to Authorize the
> user.
>
> Store it in FreeRADIUS (text file also fine) ( and I want to retrieve it
> using
Hi,
I try to figure out how to make following configuration:
1. Three clients. (Two access points. NAS1, NAS2 and NAS3)
2. There is one, central freeradius server holding all acounts, for both
locations.
Now, what I try to do is to create accounts that are location
dependant... so account c
Hi,
I try to figure out how to make following configuration:
1. Three clients. (Three access points. NAS1, NAS2 and NAS3)
2. There is one, central freeradius server holding all acounts, for three
locations.
Now, what I try to do is to create accounts that are location
dependant... so accoun
Very true, thank you for pointing that out as well.
Note to anyone following:
If you use a certificate signed by a general authority (verisign for
example) then anyone with a verisign cert will be trusted in your place,
and able to "authenticate" your users, IE as a man in the middle.
They'll
nas1 ==> localhost
nas2 ==> 200.300.xxx.1
sqlippool
UserName NASIPAddress CallingStationID pool_key
user1 127.0.0.1 111.111.111.225
user2 127.0.0.1 222.222.222.224
user3 127.0.0.1 333.333.333.227
user4 login ...
user3 NASIP
If you've got sufficient control over CPE and CPE is all sufficiently
capable, you should be doing EAP-TLS authentication anyway. if CPE is
compromised, you can simply reflash, replace the credentials, and revoke
the old ones.
On 9/20/2011 04:18, Raz Muhammad wrote:
Hi,
We are successfully
51 matches
Mail list logo