Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Fabrice-externe SEGURA
Hi. I'm trying to use Freeradius 2.2.0 to catch DHCP request on a local network (a specific interface and physical network of my machine), and forward it to another radius server (through another interface), using the radius protocol, to get authorized, and get the IP address to respond with

VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Shaw, Colin M.
Hi, I'm in the process of attempting to move our 802.1x services off of an aging freeRADIUS (v1) server onto a newly built server running freeRADIUS v2.2 Tests so far with wireless clients using 802.1x PEAP/MS-CHAPv2 are working ok. Clients can authenticate (against AD) and be assigned the

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Phil Mayers
On 08/08/13 11:07, Shaw, Colin M. wrote: difference. Lastly, for testing purposes, if I insert the required attributes into the default post-auth then it all works and the wired client is assigned the correct vlan, so again the switch side must be ok and I also therefore presume all the

Re: Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Alan DeKok
Fabrice-externe SEGURA wrote: I'm trying to use Freeradius 2.2.0 to catch DHCP request on a local network (a specific interface and physical network of my machine), and forward it to another radius server (through another interface), using the radius protocol, to get authorized, and get the IP

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-08 Thread Alan DeKok
Brian Julin wrote: I tried to replicate on a test server with lightly modified 3.0 stock configs. The error only happens when everything is running through the same server/eap instances, so good instincts there. Replicating it is easy: just uncomment the peap virtual-server directive

Re: Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Michael Schwartzkopff
Am Donnerstag, 8. August 2013, 09:19:30 schrieb Fabrice-externe SEGURA: Hi. I'm trying to use Freeradius 2.2.0 to catch DHCP request on a local network (a specific interface and physical network of my machine), and forward it to another radius server (through another interface), using the

Can't figure out Group Authentication

2013-08-08 Thread Jernej
Hi! i am kindly asking for help or pointing right way to solve this problem. Right now we are using LDAP for authentication to IBM products. Last thing we try to do is use Freeradius on same LDAP schema for wireless purposes (Cisco network). We didn't have problems with basic authentication,

Re: Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Fabrice-externe SEGURA
Hi. I was afraid this would come out that wayThanks for the response anyway, it prevent me to further useless research. I will have to hand-knit me this piece of code. A suggestion for v3 : It should be possible then to turn the simple dhcp request into 2 radius request : the auth request

RE: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-08 Thread Brian Julin
Alan DeKok wrote: Brian Julin wrote: I tried to replicate on a test server with lightly modified 3.0 stock configs. The error only happens when everything is running through the same server/eap instances, so good instincts there. Replicating it is easy: just uncomment the peap

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-08 Thread Arran Cudbard-Bell
...and it doesn't matter that example.com defaults to home_server localhost, it does not get that far. Well... I tried it, and I didn't see any errors. Can you check that you're really running a *stock* binary, and a *stock* configuration? I will -- should I preferably be testing

Re: Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Alan DeKok
Fabrice-externe SEGURA wrote: A suggestion for v3 : It should be possible then to turn the simple dhcp request into 2 radius request : the auth request + the acct start request. Icing on the cake : dhcp-release should also transform into an acct stop. That's a lot harder. As always,

Re: Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Arran Cudbard-Bell
On 8 Aug 2013, at 16:45, Alan DeKok al...@deployingradius.com wrote: Fabrice-externe SEGURA wrote: A suggestion for v3 : It should be possible then to turn the simple dhcp request into 2 radius request : the auth request + the acct start request. Icing on the cake : dhcp-release should also

Re: Configuring the DHCP module to forward request to another Radius server.

2013-08-08 Thread Fabrice-externe SEGURA
As a hack just use exec and radclient to generate the packets and feed them back into the server. Interesting. That suggest there might be a way to make it work after all...(I merely need a hack, it's for the purpose of simulating behavior of an operators's GGSN towards a system that

Re: VLAN assignment to HP Switch with 802.1x client

2013-08-08 Thread Phil Mayers
On 08/08/13 16:16, Shaw, Colin M. wrote: Thanks for the reply Phil. difference. Lastly, for testing purposes, if I insert the required attributes into the default post-auth then it all works and the wired client is assigned the correct vlan, so again the switch side must be ok and I also

Problems setting up a freeradius server with PEAP

2013-08-08 Thread Jochen Gatternig
Hello I am currently trying to setup a Freeradius server on a SUSE 12.04. I tried with the packaged version and a version compiled from source (both 2.20). What works is the basic username/password authentication. As soon as I create the certificates (CA, server client) and try to fire up the

Re: Problems setting up a freeradius server with PEAP

2013-08-08 Thread Alan DeKok
Jochen Gatternig wrote: rlm_eap: SSL error error:06065064:digital envelope routines:EVP_DecryptFinal_ex:bad decrypt rlm_eap_tls: Error reading private key file /usr/local/etc/raddb/certs/server.pem The password for the key file is wrong. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Problems setting up a freeradius server with PEAP

2013-08-08 Thread Alan Buxey
Hi How are you generating the certs and what format are they in? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Sending the Framed-IP-Address from a module

2013-08-08 Thread Romeo Mihalcea
I got a complicated schema where my radius server needs to send the Framed-IP-Address based on the results of a redis-db query so, I would like to know if if the post-auth part of my default config I can do that. Something like (or any other solutions doing this): update reply {