Re: PAM error on reboot of the RADIUS client

2013-02-05 Thread Alan DeKok
Deepti kulkarni wrote: > Thanks. PAM doesnt support authorization either right? > What radius client do you prefer that can support authentication, > authorization and accounting for linux machines? There is nothing else. Alan DeKok - List info/subscribe/unsubscribe?

Re: PAM error on reboot of the RADIUS client

2013-02-05 Thread Deepti kulkarni
Thanks. PAM doesnt support authorization either right? What radius client do you prefer that can support authentication, authorization and accounting for linux machines? Thanks On Tue, Feb 5, 2013 at 7:15 AM, Alan DeKok wrote: > Deepti kulkarni wrote: > > Authentication and account

Re: PAM error on reboot of the RADIUS client

2013-02-05 Thread Alan DeKok
Deepti kulkarni wrote: > Authentication and accounting works fine after I configure the above on > the client. As soon as I reboot client, login fails with error - "cannot > make/remove an entry for the specified session". Cannot login into the > client. Unfortunately, this is a PAM problem. I

Re: PAM error on reboot of the RADIUS client

2013-02-04 Thread Deepti kulkarni
If I dont configure step 4, I am not locked out on the client. 4- Added following line to /etc/pam.d/common_session session required pam_radius_auth.so Thanks On Mon, Feb 4, 2013 at 4:47 PM, Deepti kulkarni wrote: > Hello, > > I have a debian machine that acts as RADIUS client talking

PAM error on reboot of the RADIUS client

2013-02-04 Thread Deepti kulkarni
Hello, I have a debian machine that acts as RADIUS client talking with the Freeradius server. I have configured PAM on the client, so made following changes. 1 - Added radiusd to /etc/pam.d which contains - @include common-auth @include common-account @include common-password @include common

Re: Compliance testing of Free Radius Client

2012-10-17 Thread Arran Cudbard-Bell
Arpit, As mentioned by other users radclient is not designed to be used in embedded applications. If you require an RFC compliant RADIUS client library, one is available from NetworkRADIUS (http://networkradius.com/clientapi.html). -Arran - List info/subscribe/unsubscribe? See http

Re: Compliance testing of Free Radius Client

2012-10-17 Thread Tarun Dixit
Hey Arpit, You wont be able to interact with the user using radclient. Please have a proper understanding first. Freeradius clearly mentions that radclient and radeapclient are just for testing the freeradius server. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.htm

Re: Compliance testing of Free Radius Client

2012-10-17 Thread Phil Mayers
You need to go away and do some basic reading around the subject. Try the current version of the RADIUS RFCs for starters, instead of obsoleted ones. It sounds like you want a NAS, which is the component that provides network service to the user, and authenticates it using an embedded ra

Compliance testing of Free Radius Client

2012-10-17 Thread Arpit Jain
with freeradius package. On investigation, i found that the manpage of "radclient" states: radclient is a radius client program. It can send arbitrary radius packets to a radius server, then shows the reply. It can be used to test changes you made in the configuration of the radius server,

Re: non-blocking radius client

2012-08-24 Thread Alan DeKok
al so wrote: > you will pay the price for sure.. Threats are rude. You've not only been banned from the list, but your threats are now on permanent record in the list archives. Anyone wanting to know who you really are just has to search for your email address. > On Fri, Aug 24, 2012 at 12:

Re: non-blocking radius client

2012-08-24 Thread Alan DeKok
al so wrote: > > Is there an advantage of using non-blocking IO in the RADIUS client > implementation? This list is about FreeRADIUS. It is not a support group for writing your own RADIUS implementation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius

Re: non-blocking radius client

2012-08-24 Thread al so
Is there an advantage of using non-blocking IO in the RADIUS client implementation? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: non-blocking radius client

2012-08-24 Thread alan buxey
Hi, > Also, any suggestion on RADIUS servers that I can install and test my > RADIUS client against? well, since this is the freeradius mailing list I think the suggestion for server would be FreeRADIUS :-| alan - List info/subscribe/unsubscribe? See http://www.freeradius.or

non-blocking radius client

2012-08-24 Thread al so
> > I am trying to write my own Radius client using Java + Netty in a > non-blocking IO fashion. > > Is there a sample code I can look at or reuse? Obviously, trying not to > reinvent the wheel here. > > Also, any suggestion on RADIUS servers that I can install and test my

Re: RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

2012-08-01 Thread Alan DeKok
Tobias Hachmer wrote: > Can you tell me which commercial providers do you mean, please? People selling products? Microsoft, Cisco, ... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

2012-08-01 Thread Tobias Hachmer
Thanks Alan for your respone! Am 01.08.2012 18:04, schrieb Alan DeKok: Tobias Hachmer wrote: Is there a RADIUS Client or a captive portal/ hotspot software which supports changing password via mschapv2? Likely not. This requires someone to implement it. Only commercial providers have

Re: RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

2012-08-01 Thread Alan DeKok
Tobias Hachmer wrote: >> Is there a RADIUS Client or a captive portal/ hotspot software which >> supports changing password via mschapv2? Likely not. This requires someone to implement it. Only commercial providers have done this to my knowledge. >> I know FRv3 will suppor

Re: RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

2012-08-01 Thread Tobias Hachmer
Hello list, are there any here who have suggestions for me? Kind regards, Tobias Hachmer Am 20.07.2012 11:35, schrieb Tobias Hachmer: Hello list, I know it isn't an directly FR issue but I hope that anybody on this list have had the questions I have now. Is there a RADIUS Client

RADIUS Client/ supplicant or captive portal / mschapv2 pw change support

2012-07-20 Thread Tobias Hachmer
Hello list, I know it isn't an directly FR issue but I hope that anybody on this list have had the questions I have now. Is there a RADIUS Client or a captive portal/ hotspot software which supports changing password via mschapv2? I know FRv3 will support this, but that's only

Re: Radius Client vs. Radius Client-NG

2011-12-08 Thread Johan Meiring
On 2011/12/08 09:05 PM, Alexandre Chapellon wrote: read this: http://freeradius.org/freeradius-client/ from the link below: In late 2006 it was decided that the FreeRADIUS Project should adopt the latest code from radiusclient-ng cvs as the basis of a new FreeRADIUS client package. I personnall

Re: Radius Client vs. Radius Client-NG

2011-12-08 Thread Alexandre Chapellon
read this: http://freeradius.org/freeradius-client/ from the link below: In late 2006 it was decided that the FreeRADIUS Project should adopt the latest code from radiusclient-ng cvs as the basis of a new FreeRADIUS client package. I personnally use radiusclient-ng Le 08/12/2011 19:18, Nick

Radius Client vs. Radius Client-NG

2011-12-08 Thread Nick Khamis
Hello Everyone, When installing the client, some documentation point to: radiusclient-ng 0.5.6: http://developer.berlios.de/projects/radiusclient-ng/, and freeradius-client-1.1.6.tar: ftp://ftp.freeradius.org/pub/freeradius/ Is there a difference between the two? Is one recommended or have benef

Re: Radius client redundance

2011-10-03 Thread Alan DeKok
oleaweel wrote: > I did add the ... > But it does not seem to work, is there some attributes that i need to add, > remove or change ? See the FAQ for "it doesn't work" Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius client redundance

2011-10-03 Thread oleaweel
home_server = nps01 home_server = nps02 } But it does not seem to work, is there some attributes that i need to add, remove or change ? Regards Ole -- View this message in context: http://freeradius.1045715.n5.nabble.com/Radius-client-redundance-tp4822209p4866338.html Sent from the FreeRadius - User

Re: Radius client redundance

2011-09-21 Thread Alan DeKok
oleaweel wrote: > Just for information, I have not been working to much with FreeRadius:). I > have read the proxy.conf file but im having problems understanding the > configuration. When it say "home_server" is this a general name ? I don't know what you mean by that. > If I understand correct

Re: Radius client redundance

2011-09-20 Thread oleaweel
ool my_auth_failover { type = fail-over home_server = nps01 home_server = nps02 } Regards Ole -- View this message in context: http://freeradius.1045715.n5.nabble.com/Radius-client-redundance-tp4822209p4823563.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscr

Re: Radius client redundance

2011-09-20 Thread Alan DeKok
oleaweel wrote: > Hi, > > We have configured EAP-PEAP with freeradius, and forward MS-CHAP-V2 request > to a Microsoft NPS server. This works fine, but we now want to implement one > more Microsoft NPS server, so how do we define a second radius client. So > that if the first

Radius client redundance

2011-09-20 Thread oleaweel
Hi, We have configured EAP-PEAP with freeradius, and forward MS-CHAP-V2 request to a Microsoft NPS server. This works fine, but we now want to implement one more Microsoft NPS server, so how do we define a second radius client. So that if the first one fails, it will automatically try the next

Re: RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 3:53 PM, wrote: > Fajar, > > Thanks for your response. > > I am trying to run a sample RADIUS client and server program. In that case, it's MUCH easier NOT to use radiusclient, but rather just use "radtest" (and possibly also radclient) incl

RE: RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread vikraman.p36
Fajar, Thanks for your response. I am trying to run a sample RADIUS client and server program. Please answer for the following questions 1) In RADIUS client 1.1.6 is there any file to specify username(test) and password(test) details other than STDIN . Eg: testCleartext-Password

Re: RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 3:23 PM, wrote: > Hi , > > > > I have downloaded and installed RADIUS server -2.1.11 and RADIUS > client-1.1.6. To run the server I used the command radiusd –X. > > Please let me know the configuration part for RADIUS client , run RADIUS > clie

RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread vikraman.p36
Hi , I have downloaded and installed RADIUS server -2.1.11 and RADIUS client-1.1.6. To run the server I used the command radiusd -X. Please let me know the configuration part for RADIUS client , run RADIUS client, in which file I need to specify the username ,password and secret password

Re: Specifying Any Port for RADIUS Client

2011-09-07 Thread Det Det
list Sent: Thursday, September 8, 2011 11:40 AM Subject: Re: Specifying Any Port for RADIUS Client On Thu, Sep 8, 2011 at 10:15 AM, Det Det wrote: > please disregard this email. I thought that the 'ports' field in 'nas' table > means the 'source' port the client w

Re: Specifying Any Port for RADIUS Client

2011-09-07 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 10:15 AM, Det Det wrote: > please disregard this email. I thought that the 'ports' field in 'nas' table > means the 'source' port the client will use to connect to the RADIUS server > when it actually means the port on the RADIUS server that the client will > connect to. I

Re: Specifying Any Port for RADIUS Client

2011-09-07 Thread Det Det
From: Det Det To: FreeRadius mailing list Sent: Thursday, September 8, 2011 11:07 AM Subject: Specifying Any Port for RADIUS Client Hi, I want to connect to RADIUS server using RADIUS client software, not through NAS. Using RADIUS client software such as radperf will generat

Specifying Any Port for RADIUS Client

2011-09-07 Thread Det Det
Hi, I want to connect to RADIUS server using RADIUS client software, not through NAS. Using RADIUS client software such as radperf will generate different port numbers when connecting to the RADIUS server. How do I place client information in NAS table such that I am able to specify IP and

RADIUS Disconnect request support in free radius client -1.1.6

2011-09-07 Thread vikraman.p36
Hi , I am looking into Free radius client (freeradius-client-1.1.6) library code for using in our project. Please let me know if the Free radius client supports processing of the disconnect request message from RADIUS server which is defined in the RFC 5176. Thanks, Vikraman Please do

Re: FREE RADIUS client

2011-02-07 Thread karnik jain
Hello B.Candler, Thank you so much sir for replying back. It is really helpful to my research on RADIUS client. Thanks, Karnik On Mon, Feb 7, 2011 at 7:50 PM, Brian Candler wrote: > On Mon, Feb 07, 2011 at 05:07:03PM +0530, karnik jain wrote: > >I am talking about radclient only.

Re: FREE RADIUS client

2011-02-07 Thread Brian Candler
On Mon, Feb 07, 2011 at 05:07:03PM +0530, karnik jain wrote: >I am talking about radclient only. >If supplied USER-NAme is not UTF-8 encoded by some means >suppose the scenario where UTF-8 support is not there then >at that time what radclient does. > >Does it send the same mul

Re: FREE RADIUS client

2011-02-07 Thread Alan DeKok
karnik jain wrote: > I am under the impression that RADIUS client (radclient) is itself > is doing the UTF-8 conversion as per RFC 2865 while sending multilingual > username attribute > if it is not in UTF-8 form. > > So I think this is not at all a meaning less. > cor

Re: FREE RADIUS client

2011-02-07 Thread karnik jain
Hello, I think that's a meaningless question. > > RADIUS deals with bytes. It will send as User-Name whatever chunk of bytes > you give it. It doesn't mangle values. > > I am under the impression that RADIUS client (radclient) is itself is doing the UTF-8 conversion as p

Re: FREE RADIUS client

2011-02-07 Thread Brian Candler
On Mon, Feb 07, 2011 at 04:05:41PM +0530, karnik jain wrote: >Can any one tell me that > >FREE RADIUS client is inernally doing UTF-8 conversion > >for the multilingual characters or It is replying on some other >underlying module I think that's a meanin

FREE RADIUS client

2011-02-07 Thread karnik jain
Hi, Can any one tell me that FREE RADIUS client is inernally doing UTF-8 conversion for the multilingual characters or It is replying on some other underlying module who is suppling credentials like username and password? Regards, Karnik Jain - List info/subscribe/unsubscribe? See http

Re: Radius Client UDP port selection

2011-02-06 Thread Brian Candler
On Sun, Feb 06, 2011 at 11:11:58AM +, Brian Candler wrote: > 1. If pam_radius_client doesn't have the ability to bind to a particular > port, then you can modify the source code to do so. The call you need is > bind() after the socket has been created. Ah, it turns out the code to do this is a

Re: Radius Client UDP port selection

2011-02-06 Thread Brian Candler
On Sun, Feb 06, 2011 at 10:06:01AM -, vijay s sheelavantar wrote: >I am talking about pam_radius_client. I want this pam_radius_auth.so >client to select a particular UDP port to communicate with external >radius server. so that server can send authentication responce on the >sa

Re: Radius Client UDP port selection

2011-02-04 Thread Brian Candler
On Fri, Feb 04, 2011 at 04:17:11AM -, vijay s sheelavantar wrote: >Now the radius client UDP port is selected randomly, Is there a way by >which i can mention the server to use perticular UDP port as client >port. Are you talking about when freeradius is used as a proxy

Re: Radius Client UDP port selection

2011-02-03 Thread Tobias Koopmann
vijay s sheelavantar wrote: Now the radius client UDP port is selected randomly, Is there a way by which i can mention the server to use perticular UDP port  as client port. Well, this would imply that your radius client would exactly be able to authenticate one Supplicant simultaneous

Re: Radius Client UDP port selection

2011-02-03 Thread Alexander Clouter
vijay s sheelavantar wrote: > Now the radius client UDP port is selected randomly, Is there a way by > which i can mention the server to use perticular UDP port  as > client port. > > 1. Is there a way where i can configure port numbers for client and > server? &g

Radius Client UDP port selection

2011-02-03 Thread vijay s sheelavantar
Hello Friends, Now the radius client UDP port is selected randomly, Is there a way by which i can mention the server to use perticular UDP port  as client port. 1. Is there a way where i can configure port numbers for client and server?2. Or if i need to change the code then in which function i

Re: Settign up postauth to record radius-client name and other information

2010-11-17 Thread Alan DeKok
William wrote: > What I want to store int he radpostauth table is: ... > (I want to add these) > Calling_Station, > Called_Station, See the debug mode for these attribute names. They're in the packet. Calling-Station-Id and Called-Station-Id. > NAS_Short_name from clients.conf That's

Re: Radius Client password not accepted

2010-11-12 Thread Alan DeKok
Azam Zia wrote: > I am using free radius for communication between asterisk voip server > and database. I have everything setup on same machine which has Centos > 5.4. My problem is that when i send request from client to server the > radius password is not accepted, What does that mean? > als

Radius Client password not accepted

2010-11-12 Thread Azam Zia
Hi, I am using free radius for communication between asterisk voip server and database. I have everything setup on same machine which has Centos 5.4. My problem is that when i send request from client to server the radius password is not accepted, also when i see radius packets in wireshark i

Re: Re: radius client / send NAS IP ?

2010-09-27 Thread Michael Arndt
Hello Alan, sorry, my fault :-) radclient saves my day, indeed i can send any attribute / value pair i like thanks for your help Micha - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius client / send NAS IP ?

2010-09-25 Thread Alan DeKok
Michael Arndt wrote: > at least the radclient of the installed version does not allow to add those > attributes according to manpage Really? What part of the man page says that? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Re: radius client / send NAS IP ?

2010-09-25 Thread Michael Arndt
Nachricht - Subject: Re: radius client / send NAS IP ? Date: Sa 25 Sep 2010 15:01:49 CEST From: Alan DeKok To: FreeRadius users mailing list<freeradius-users@lists.freeradius.org> Michael Arndt wrote: > is there a radtest client where i can send those attribute / value pairs > i

Re: radius client / send NAS IP ?

2010-09-25 Thread Alan DeKok
Michael Arndt wrote: > is there a radtest client where i can send those attribute / value pairs > intentionally ? $ man radclient Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

radius client / send NAS IP ?

2010-09-25 Thread Michael Arndt
Hello *, at the time beeing i have to use an old radius version for different reasons. freeradius-client-1.1.5-36 freeradius-devel-1.1.6-47 freeradius-1.1.6-47 freeradius-client-devel-1.1.5-36 freeradius-client-libs-1.1.5-36 for real logins at WLAN Hot Spot the DEFAULT NAS-IP-Address == "192.1

Regardin radius client

2010-08-18 Thread Suresh kumar
Hi, All I have to develope redius client to full fill the follwing requrment. Plz which radius client lib/stack i should use for windows. simulate Radius and dot1x type of client flows The radius tool should allow us to specify authentication type and it should support all EAP methods

Re: Using Radiusclient to implement a radius client on Windows platform?

2010-04-26 Thread Alan DeKok
Joshua Lim wrote: > Hi Alan, > > Thanks, how about using the pgina radius plugin? > http://userpage.fu-berlin.de/~holger/radiusplugin/RADIUSplugin-0.3src.zip > > It has code taken from pam_radius_auth > > Is pam_radius_auth using radiusclient? No. They are different code bases. They should

Re: Using Radiusclient to implement a radius client on Windows platform?

2010-04-23 Thread Joshua Lim
hope someone can help me. I'm trying to implementing a radius client on Windows platform to work with freeradius. I intend to use VC++ or Delphi. radiusclient is for linux platform, can i adapt it for Windows? You'll have to hack the source code. It's not really portable righ

Re: Using Radiusclient to implement a radius client on Windows platform?

2010-04-23 Thread Alan DeKok
Joshua Lim wrote: > Hi I'm a newbie, hope someone can help me. I'm trying to implementing a > radius client on Windows platform to work with freeradius. I intend to > use VC++ or Delphi. radiusclient is for linux platform, can i adapt it > for Windows? You'll h

Using Radiusclient to implement a radius client on Windows platform?

2010-04-23 Thread Joshua Lim
Hi I'm a newbie, hope someone can help me. I'm trying to implementing a radius client on Windows platform to work with freeradius. I intend to use VC++ or Delphi. radiusclient is for linux platform, can i adapt it for Windows? Grateful for any pointers. :) Rgds, Joshua -

Re: Pam radius client and binding to mulitple IPs

2010-01-26 Thread Alan DeKok
Chris Tong wrote: > The problem I am having is that I have an OpenVPN "proxy hub" that has > 3 external IP addresses. > ... However if the user connects to INT2 the NAS requset still > has the source IP address of INT1 and therefore the user is rejected > because he is not a member of the INT1 gro

Pam radius client and binding to mulitple IPs

2010-01-25 Thread Chris Tong
Hi everyone, I realise that this maybe somewhat a limitation of the PAM Radius Plugin for OpenVPN but have searched around for a week now to find a solution. The problem I am having is that I have an OpenVPN "proxy hub" that has 3 external IP addresses. I am using huntgroups to distinguis

Re: Radius client configuration issue

2009-07-28 Thread Ivan Kalik
> 1. Do we configure ip address of Radius server (on linux) at Radius client > (on Solaris machine) ? Yes, on client machine in pam_radius_auth.conf. > 2. Do we give username details on Radius server (on linux) machine? Yes, you enter usernames/passwords in users file (sql, ldap,

Re: Radius client configuration issue

2009-07-28 Thread mer...@gmail.com
Solaris), PAM is configured in SSH. Also, on this machine, we have pam.conf (/etc/pam.conf) and sshd_config files where authentication libraries and other properties are set. Now, I have to login through my client machine (radius client), and it has to sent information to linux machine (where

Re: Radius client configuration issue

2009-07-28 Thread Meraj Siddiqui
machine (On Solaris), PAM is configured in SSH. Also, on this machine, we have pam.conf (/etc/pam.conf) and sshd_config files where authentication libraries and other properties are set. Now, I have to login through my client machine (radius client), and it has to sent information to linux machine

Re: Radius client configuration issue

2009-07-28 Thread Ivan Kalik
> 2) pam_radius_auth.conf is set at radius server (/etc/raddb/server), which > contains server ip address and secret. ... > But I could not find where radius server ip is configured in radius > client. > I am not able to find how radius client knows about radius server. Please >

Re: Radius client configuration issue

2009-07-28 Thread mer...@gmail.com
(/etc/raddb/server), which contains server ip address and secret. 3) Also, client info is set in /etc/raddb/clients.conf on radius server But I could not find where radius server ip is configured in radius client. I am not able to find how radius client knows about radius server. Please let me know

Re: Radius client configuration issue

2009-07-28 Thread Ivan Kalik
> thanks for the link. > > I want to know if we can give radius server ip address and secret in > pam.conf file. No. > I tried to configure radius server with CLI, but it doesn't seems to work. > Can you please tell me how to configure radius server in radius client to &g

Re: Radius client configuration issue

2009-07-28 Thread mer...@gmail.com
thanks for the link. I want to know if we can give radius server ip address and secret in pam.conf file. I tried to configure radius server with CLI, but it doesn't seems to work. Can you please tell me how to configure radius server in radius client to work. Ivan Kalik wrote: > &

Re: Radius client configuration issue

2009-07-27 Thread Ivan Kalik
> I want to use PAM for user authentication. > > I am trying to setup radius client but unable to configure it. Radius > client's setup is at Solaris and Radius Server (RKS emulator) is at Linux > machine. > > Can any one tell the procedure to configure radius client so

Radius client configuration issue

2009-07-27 Thread mer...@gmail.com
I want to use PAM for user authentication. I am trying to setup radius client but unable to configure it. Radius client's setup is at Solaris and Radius Server (RKS emulator) is at Linux machine. Can any one tell the procedure to configure radius client so that it can communicate with R

Re: SSH authendication with radius server fails if the user does not exist in radius client

2009-06-17 Thread kpani
- > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > -- View this message in context: http://www.nabble.com/SSH-authendication-with-radius-server-fails-if-the-user-does-not-exist-in-radius-client-tp24074268p24077890.html Sent from the Fr

Re: SSH authendication with radius server fails if the user does not exist in radius client

2009-06-17 Thread Ivan Kalik
> Do you mean the radius server can be only used for password authentication > in case of ssh/telnet? Yes. > Can't we login using the centralized > username/password? No, that can't work. Let's say that you were authenticated and reached the shell as a nonexistant local user. How is he suposed t

Re: SSH authendication with radius server fails if the user does not exist in radius client

2009-06-17 Thread kpani
it looks like the radius client is not sending the password to radius >> server if the user does not exist in local machine. > > Yes, that's how PAM works. It can't authenticate users that don't exist > locally (think about it - if user/group is not defined local

Re: SSH authendication with radius server fails if the user does not exist in radius client

2009-06-17 Thread Ivan Kalik
> So it looks like the radius client is not sending the password to radius > server if the user does not exist in local machine. Yes, that's how PAM works. It can't authenticate users that don't exist locally (think about it - if user/group is not defined locally what will u

SSH authendication with radius server fails if the user does not exist in radius client

2009-06-17 Thread kpani
Hi, I am trying to authenticate ssh login using radius server running in another linux machine. I added a new user in /usr/local/etc/raddb/users of radius server. Now when I do ssh to the radius client, the radius server denies request and says 'Password doesn't match. But I gave righ

Re: radius client on fedora 10 ?

2009-05-13 Thread John Dennis
François Mehault wrote: > I would like to know is there any radius client on fedora 10 ? > pam_radius ? other ? pam radius is not currently packaged for Fedora, although there has been a request previously. It's on my to-do list, but the reality is I've got a lot of other work

radius client on fedora 10 ?

2009-05-13 Thread François Mehault
Hi, I would like to know is there any radius client on fedora 10 ? pam_radius ? other ? Regards, François - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Read radius client from database

2008-11-26 Thread tnt
>First freeradius goes to sql and check for the user record... regardless of >result of sql , request is also fwd to jradius. and jradius also checks for >the same username in another database over another server (as im using >jradius for having connectivity to another server)... i want freeradius

Re: Read radius client from database

2008-11-26 Thread Alan DeKok
Saeed Akhtar wrote: please...formatyourmessages in a normal way. Formatting them badly makes them harder to understand. > i dont now that is there any conditional statements in > configuration file which will help me hopeful for some help :) FreeRADIUS 2.x comes with a c

Re: Read radius client from database

2008-11-26 Thread Saeed Akhtar
Thanks It worked but here comes another issue where im stuck ... using both sql and jradius for authorization creates a problem First freeradius goes to sql and check for the user record... regardless of result of sql , request is also fwd to jradius. and jradius also checks

Re: Read radius client from database

2008-11-26 Thread tnt
1.1.3 doesn't use Cleartext-Password. That came in 1.1.4. Read the users file. It should be User-Password. Ivan Kalik Kalik Informatika ISP Dana 26/11/2008, "Saeed Akhtar" <[EMAIL PROTECTED]> piše: >Thanks for ur help setting sql in authorize section of radiusd.conf >solved the problem.

Re: Read radius client from database

2008-11-26 Thread tnt
sql is commented out in radiusd.conf by default. Enable it somewhere. This is the old server version. Use the latest one. Even for testing. It's so much better. Ivan Kalik Kalik Informatika ISP Dana 26/11/2008, "Saeed Akhtar" <[EMAIL PROTECTED]> piše: >Debug Trace: > >Starting - reading config

Re: Read radius client from database

2008-11-26 Thread Saeed Akhtar
Thanks for ur help setting sql in authorize section of radiusd.conf solved the problem But now when sql checks for username and password it gives error Unknow Attribute "Cleartext-Password".. I am not upgrading to 2.x because i tried to configure jradius with 2.1.1 it gave

Re: Read radius client from database

2008-11-26 Thread Alan DeKok
Saeed Akhtar wrote: > Debug Trace: You're not running 2.x. You should upgrade. You haven't configured the SQL module. You need to do this for it to work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

re:Re: Read radius client from database

2008-11-26 Thread mj mailing lists user
Hi seems to me you are missing rlm_sql, when I start radiusd -X I get the following lines: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked .. rlm_sql_mysql: query: SELECT id, nasname, shortname, type, secret FROM nas this last line is then followed by rlm_sql (sql)

Re: Read radius client from database

2008-11-26 Thread Saeed Akhtar
Debug Trace: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/et

Re: Read radius client from database

2008-11-26 Thread tnt
Post the debug of the server startup. Ivan Kalik Kalik Informatika ISP Dana 26/11/2008, "Saeed Akhtar" <[EMAIL PROTECTED]> piše: >Hi all, > > I am having problem to configure Radius to read client information from >mysql database table "nas". I found an option at last line of sql.conf > >read

Read radius client from database

2008-11-26 Thread Saeed Akhtar
Hi all, I am having problem to configure Radius to read client information from mysql database table "nas". I found an option at last line of sql.conf readclients = yes i uncommented it ... then added record in nas table... then tried to send request from newly added client but it says unknow

free RADIUS client + CHAP + PAM

2008-11-20 Thread Vinay
Hi there There are a lot of places on the net which talk about how PAM cannot work with CHAP on the RADIUS server. Will an implementation of freeRADIUS client with CHAP and PAM(pam_radius_auth) module work? Please point me to the appropriate link. Thanks -Vinay - List info/subscribe/unsubscribe

free RADIUS client + CHAP + PAM

2008-11-19 Thread Vinay
Hi there There are a lot of places on the net which talk about how PAM cannot work with CHAP on the RADIUS server. Will an implementation of freeRADIUS client with CHAP and PAM(pam_radius_auth) module work? Please point me to the appropriate link. Thanks -Vinay - List info/subscribe/unsubscribe?

Re: Test Radius Client supporting PEAP-EAP MD5

2008-11-18 Thread tnt
wpa_supplicant eapol_test. Ivan Kalik Kalik Informatika ISP Dana 18/11/2008, "Queenie de Melo" <[EMAIL PROTECTED]> piše: >Hi, > >Can anyone suggest a test radius client supporting PEAP with EAP MD5 ? > >I have tried JRadius Simuator , RadiusTest n others but co

Test Radius Client supporting PEAP-EAP MD5

2008-11-18 Thread Queenie de Melo
Hi, Can anyone suggest a test radius client supporting PEAP with EAP MD5 ? I have tried JRadius Simuator , RadiusTest n others but could not get the option of PEAP with EAP MD5. Incase anyone has come across, please let me know. Warm regards Queenie - List info/subscribe/unsubscribe? See http

Re: Radius client can not connected!

2008-08-10 Thread Alan DeKok
Kwok Sianbin wrote: > I'd been doing this for sometimes and can't get it solved. > Client try to communicate with server but just can't get it connected. Please READ the debug output. It is telling you what's going wrong. > rlm_eap_tls: <<< TLS 1.0 Handshake [length 037f], Certificate > -->

Radius client can not connected!

2008-08-10 Thread Kwok Sianbin
Hi all, Need help. I'd been doing this for sometimes and can't get it solved. Client try to communicate with server but just can't get it connected. here are the message: Waking up in 4.7 seconds.     User-Name = "testing"     NAS-IP-Address = 0.0.0.0     Framed-MTU = 1488   

Re: php radius client (mount packet data)

2008-08-08 Thread Phil Mayers
On Fri, Aug 08, 2008 at 03:29:15AM -0300, Alexandre J. Correa - Onda Internet wrote: Hello !! Based on 'Pure PHP radius class' (http://developer.sysco.ch/php/) i´m trying to implement "disconnect-packet" like this command: echo "User-Name := xx" | radclient -x 111.222.333.444 disconnect

Re: php radius client (mount packet data)

2008-08-08 Thread Marinko Tarlac
Pasting class source won't help. You need to ask specific question. I believe that nobody here doesn't have enough time to read 1000 lines just to answer you. You can find all about POD in FreeRadius FAQ section. create shell script and call it when you need to disconnect someone. On Fri, Aug 8,

php radius client (mount packet data)

2008-08-07 Thread Alexandre J. Correa - Onda Internet
lated ressources * * FreeRADIUS, a free Radius server implementation for Linux and *nix environments: http://www.freeradius.org/ * WinRadius, Windows Radius server (free for 5 users): http://www.itconsult2000.com/en/product/WinRadius.zip * Radl, a free Radius server for Windows: http:/

  1   2   >