Authenticating users checking Huntgroup-Name in unlang

Hi, I have set FreeRadius 2.1.12 Server, and configured it to authorize and authenticate users that are in Active Directory and users file. I have tested in real wireless environment to authenticate users from Active Directory users file and it is successful. But according to our

Creating Certificates for EAP

Hi, I am trying to create certificates in Freeradius going inside /usr/local/etc/raddb/certs. I need these certificates for EAP-TTLS authentication for wireless access points. As suggested in deployingradius.com and README inside /usr/local/etc/raddb/certs; I tried to create Test Certificates for

Re: Creating Certificates for EAP

I tried: openssl dhparam -out dh 1024 as you suggested and dh file is created as below: #openssl dhparam -out dh 1024 Generating DH parameters, 1024 bit long safe prime, generator 2 This is going to take a long time

Re: Authorization with Active Directory

Hi, I had implemented the idea given by Phil for authorizing the users of Active directory to use VPN or Wifi or whatever for which they are for depending upon the value of Active directory's extensionAttribute10 attribute as: ## /usr/local/etc/raddb/modules/ldap: filter =

Re: Authorization with Active Directory

Thanks a lot again for showing me the direction. Everything works perfect except the conditional checking for Client-Shortname. I tried using: *if (Client-Shortname =~ /^localhost/) {* It didn't work saying Client-Shortname as unknown attribute. Again I tried using: * if (%{client: shortname}

Re: How to return Filter-ID attribute value for the users in Active Directory?

Hi, I tried to return the value of Filter-ID as: authorize { ... ldap if (distinguishedName =~ /^[^,]+,OU=([^,]+),/) { update control { Tmp-String-1 := %{1} } } ... } post-auth { update reply { Filter-Id :=

Re: How to return Filter-ID attribute value for the users in Active Directory?

Thank you so much Alan for pointing out the mistake suggesting the solution. Using: if (control:Ldap-UserDN =~ /^[^,]+,OU=([^,]+),/) *solved this issue.* Still trying to become more familiar with attributes and learning. In my understanding there are different attributes list as :request,

How to return Filter-ID attribute value for the users in Active Directory?

Hi, I am able to do authentication and authorization of the users that are in Active Directory after FreeRadius and Active Directory integration. I am now testing in real test environment with Enterasys product (Switch) in which Policy manager is already configured to assign different roles

Re: How to return Filter-ID attribute value for the users in Active Directory?

There are different users under Staff, Administrators, Retirees, etc in active directory as: OU=Staff OU=Administrators OU=Retirees CN=users CN=users

Re: Authorization with Active Directory

Phil, I modified the LDAP module configuration as you suggested: filter = ((extensionAttribute10=%{control:Tmp-String-0}) (sAMAccountName=%{%{Stripped-User-Name}:-%{User-Name}})) Also I did change in authorize section of my configuration of default and inner-tunnel files; But I got confused

Authorization with Active Directory

Hi, I have configured freeradius server to authenticate authorize user with the supplied username and password against active directory. Till this stage; The user can be authenticated and authorized successfully with credentials provided. For this purpose; user is just authenticated and

Re: FreeRadius, Active Directory, LDAP Authorization

Hi, After configuration and running the FreeRadius in debug mode, I see that binding with LDAP server is successful as : *[ldap] Bind was successful* Then it does searching of user with filter and gives the error as : *[ldap] ldap_search() failed: Operations error after* *[ldap] search failed*

Re: FreeRadius, Active Directory, LDAP Authorization

Thank you all for the suggestions. I have already installed FreeRadius 2.1.12 which I am running, an I have got ldap in file /usr/local/etc/raddb/modules/ldap; I have gone through it and I am still not sure where the problem lies. I have here included below the part of debug mode output that I

FreeRadius, Active Directory, LDAP Authorization

Hi, I have installed FreeRadius server 2.1.12, installed and configured Kerberos, Samba; configured ntlm_auth program for FreeRadius Authentication with Active Directory. Everything is successful and running smoothly till this stage. Now, I am in the phase of configuration of Authorization in

Re: Error: Failed to send packet; No response from Server

Alan, I updated the ports tree in FreeBSD which upgraded FreeRadius to 2.1.12 from 2.1.10. After installation I am successful on doing basic PAP Authentication. It solved this issue. Thank You so much! -- View this message in context:

Error: Failed to send packet; No response from Server

Hi, I was successful to install Freeradius 2.1.10 and basic PAP authentication, Authentication against Active Directory was successful when I installed Freeradius for first time. But I had to deinstall and reinstall Freeradius 2.1.10 again due to some missing libraries. I am following the same

RE: ldap+freeradius

Guys, I configured FreeRadius for Authentication with Active Directory by following the steps as suggested by Alan's deployingradius.com. Everything is working successfully like Samba, Kerberos, ntlm_auth configuration, I can successfully join the domain as an administrator and also user can

Re: ldap+freeradius

I searched throught the threads and found this thread exactly matching to my error I am getting. I am getting following error while debugging freeradius for using LDAP: /usr/local/etc/raddb/modules/ldap[29]: Failed to link to module 'rlm_ldap': file not found

Re: ldap+freeradius

Alan, I tried the 3 steps that is suggested in FAQ, that isn't working. Also, As suggested in 3rd (b) step; I found the 'radiusd.conf' file inside /usr/local/etc/raddb/radiusd.conf. Inside radiusd.conf file it is suggesting to do : To work around the problem, find out which library contains that

Re: ldap+freeradius

Alan, The LDAP server was already configred in other machine by System Administrator. I am trying to link FreeRadius to that existing and already running LDAP server and authenticate the users using already configured attribute. I didn't download LDAP on this machine where FreeRadius is running.

Re: ldap+freeradius

Alan, *Sorry for the confusion I made. I have put the name of LDAP server accordingly , not the localhost. Just for privacy I didn't put here.* Here is the output of radiusd -X command: # radiusd -X FreeRADIUS Version 2.1.10, for host i386-portbld-freebsd8.2, built on Oct 21 2011 at 11:26:0

RE: ldap+freeradius

Alan, Sorry for any inconvenience caused by it. I just put the output 3rd time since Alan Buxey asked for the complete radiusd-X output, not the small 3 line output to get the complete picture. Yesterday only I joined this freeradius list. Yesterday I opened the thread thinking to get

Problem: FreeRadius Authentication using LDAP

Hi, I have configured FreeRadius to authenticate against LDAP. I have installed and configured FreeRadius in FreeBSD Server and LDAP is already set up in another server. I configured as below: (Changes on file are shown on bold letter) */usr/local/etc/raddb/modules/ldap :* ldap { #

Re: Problem: FreeRadius Authentication using LDAP

Alan, Are you talking about the following FAQ: http://wiki.freeradius.org/FAQ#How+do+I+make+CHAP+work+with+LDAP%3F I have followed the same configuration method it has suggested. Or is there any other FAQ which mentions about this error and method to solve this? Thank you so much for your