Re: Proxy radius

Hi, On Thu, Apr 05, 2012 at 02:36:25PM +0800, cktan wrote: > Can the proxy radius return an additional attribute to NAS apart > from the attribute return by the actual radius server? I've an update reply { ... } in the post-proxy section of your config. Matthew -- Matthew N

Proxy radius

Hi, Can the proxy radius return an additional attribute to NAS apart from the attribute return by the actual radius server? I've an situation where the actual radius server only return the frame-IP-address and netmask in Access-Accept, and we need the frame-Pools (mikrotik library) as

Re: Proxy Radius - Deny user based on username preproxy

Nathan M wrote: > I operate a proxy radius server which proxies requests downstream. A > few particular usernames are repeating far more frequently than they > should and I have no way to eliminate this upstream. I do need to > authenticate the users though and not deny them. The g

Proxy Radius - Deny user based on username preproxy

To any freeradius guru, I operate a proxy radius server which proxies requests downstream. A few particular usernames are repeating far more frequently than they should and I have no way to eliminate this upstream. I do need to authenticate the users though and not deny them. The goal would be

Re: how to configure a proxy radius server but the username doesn't have any realm ?

freddychu wrote: > Hi, >I want to configure a proxy radius server and the username doesn't have > any realm, just like 'tom'. >So I configure realm NULL section in proxy.conf file, but it doesn't > work, the error message in radiusd terminal when redi

how to configure a proxy radius server but the username doesn't have any realm ?

Hi, I want to configure a proxy radius server and the username doesn't have any realm, just like 'tom'. So I configure realm NULL section in proxy.conf file, but it doesn't work, the error message in radiusd terminal when redius server received the accounting message:

Re: Add reply attributes to a proxy radius response

Paul TAVERNIER wrote: > So, the thing i'd like to do with Freeradius v2.1 is to insert a "ldap" > authorization in the post_proxy section of my config. You can add "ldap.authorize" in the post-proxy section. It might work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freerad

Re: Add reply attributes to a proxy radius response

I built a new lab with Freeradius 1.x, Cisco ASA, RSA-OTP and RSARadius Box. All is working perfectly...because, Freeradius 1.x is parsing TWICE the authorize section (as it is said in the proxy.conf comment, once before the proxy request and one after). So it asks twice my LDAP server the att

Add reply attributes to a proxy radius response

Hi all, I run with Freeradius 2.1, CiscoASA and RSASecurid "OTP"+RSARadius. I set my CiscoASA to authenticate against freeradius. On this freeradius server, i created a realm "OTP" which proxy the request to a RSARadius (the only one who can ask RSAOTP Securid database). So wh

When to use proxy Radius

Hi everybody: I am going to planify a new infrastructure with FreeRadius. I would like to ask to you, whats the rule to planify the use of proxy servers for the size in users or the size in use or the redundancy? Thank you from now - List info/subscribe/unsubscribe? See http://www.freeradi

Re: Problem with proxy-radius function

banga wrote: > Alan it seems that this is some kind of bug. OK. It happens only in CVS head, due to some other recent changes. I've committed a fix. > Do you recomend include Default and NULL in proxy.conf? If you need them. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.f

Re: Problem with proxy-radius function

at's happening is that the home server is sending the > response from the wrong port. You would have to show *more* of the > debug log to be sure. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > -- View this message in context: http://www.nabble.com/Problem-with-proxy-radius-function-tp16610498p16654065.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with proxy-radius function

Ivan Popov wrote: > Debug is difficult because of Segmentation Fault. doc/bugs > Is It something wrong whth my configuration? > I decide to disable all nonused modules. Maybe I disable something major? I don't think so. This should work, and it works in my tests. Alan DeKok. - List info/

Re: Problem with proxy-radius function

000\000\000\000\000\000\000\000\000\000\000\000\000" 3GPP2-Attr-116 = 0x 3GPP2-Correlation-Id = "09446618" 3GPP2-Service-Reference-Id = 0x0000 3GPP2-Home-Agent-IP-Address = 0.0.0.0 3GPP2-BSID = "2A2100021102"

Re: Problem with proxy-radius function

Ivan Popov wrote: > What I can say .. > [EMAIL PROTECTED]:/var/log/radius # > tcpdump -i > eth0 host X.X.X.X While this is interesting, you were asked for debugging output. > Is It correct? I thing it should be between port 1813 and 1646 ... The t

Re: Problem with proxy-radius function

Hi, > P.S > On website > http://www.freeradius.org/getting.html > Link to daily snapshot not work. > ftp://ftp.freeradius.org/pub/radius/CVS-snapshots/ just grab the CVS directly as per the info on http://www.freeradius.org/download.html then it wont be as stale - the FTP snapshots may be u

Re: Problem with proxy-radius function

0 PM Subject: Re: Problem with proxy-radius function banga wrote: > AnyOne? > > Error: Rejecting request 20696 due to lack of any response from home server > X.X.X.X port 1646 > Error: Ignoring request from unknown home server X.X.X.X port 1646 > How I can fix that ? I think wha

Re: Problem with proxy-radius function

banga wrote: > AnyOne? > > Error: Rejecting request 20696 due to lack of any response from home server > X.X.X.X port 1646 > Error: Ignoring request from unknown home server X.X.X.X port 1646 > How I can fix that ? I think what's happening is that the home server is sending the response from

Re: Problem with proxy-radius function

> } > > > realm DEFAULT { > accthost = LOCAL

Problem with proxy-radius function

I case if it's good then should I define “=LOCAL” somewhere ? I mean why ”accthost = LOCAL” is correct and ”accthost = LOCALXXX” not ? Thanx. -- View this message in context: http://www.nabble.com/Problem-with-proxy-radius-function-tp16610498p16610498.html Sent from t

Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

Franco Pieressa wrote: > I can't upgrade the NAS nor the RADIUS server :-( I would suggest trying *really* hard. It's a lot easier to upgrade than to do the impossible. > What I need to know, is if it's theorically possible to translate the > MSCHAPv1 authentication to a MSCHAPv2 authenticatio

RE: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

gt; From: [EMAIL PROTECTED]> To: freeradius-users@lists.freeradius.org> Subject: Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2> > Franco Pieressa wrote:> > Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft> > RADIUS extended attribute MS-CHAP-MPPE-Ke

Re: Proxy RADIUS from MSCHAPv1 to MSCHAPv2

Franco Pieressa wrote: > Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft > RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate > with a RADIUS server that ONLY support MSCHAPv2. This doesn't appear to have anything to do with FreeRADIUS.

Proxy RADIUS from MSCHAPv1 to MSCHAPv2

Hi! I have a NAS that ONLY support MSCHAPv1 (requiring the Microsoft RADIUS extended attribute MS-CHAP-MPPE-Keys), that need to authenticate with a RADIUS server that ONLY support MSCHAPv2. Can I proxy RADIUS packets through FreeRADIUS and convert MSCHAPv1 <--> MSCHAPv2? To be more sp

Re: Conditional Proxy Radius

Use Proxy-To-Realm := "somerealm" for those users you want authenticated elsewhere. Ivan Kalik Kalik Informatika ISP Dana 3/10/2007, "Abdul Qadir" <[EMAIL PROTECTED]> piše: >HI, > >I am using freeradius with SER. In simple words i want to proxy radius

Conditional Proxy Radius

HI, I am using freeradius with SER. In simple words i want to proxy radius based on user id instead of realm. Also want to add some extra functionality before I do the proxy. My requirements are as follows I have two different types of users. Some users have numeric user id and some have

Re: How to forward a request rejected by a proxy RADIUS server to another LDAP server?

On 6/5/07, Phil Mayers <[EMAIL PROTECTED]> wrote: Clark J. Wang wrote: > I've configured a proxy RADIUS server in `proxy.conf' and an LDAP server > in `radiusd.conf' and they work well. I want to forward those requests > rejected by the proxy RADIUS serv

Re: How to forward a request rejected by a proxy RADIUS server to another LDAP server?

Clark J. Wang wrote: > I've configured a proxy RADIUS server in `proxy.conf' and an LDAP server > in `radiusd.conf' and they work well. I want to forward those requests > rejected by the proxy RADIUS server to the LDAP server and > re-authenticate them again. Can I

How to forward a request rejected by a proxy RADIUS server to another LDAP server?

I've configured a proxy RADIUS server in `proxy.conf' and an LDAP server in `radiusd.conf' and they work well. I want to forward those requests rejected by the proxy RADIUS server to the LDAP server and re-authenticate them again. Can I do that in FreeRADIUS? And how? Thank

Proxy Radius

Hello! I need to configure freeradius as a proxy server only for users that ends in "@domain1.com". This users must be authenticated by its home server (external proxy) but users must received an ip address from my pool. (We give internet service to customer from another country with its dialu

Re: proxy radius

On Fri 16 Feb 2007 13:27, Larin Denis wrote: > The help is necessary. > Is 2 RADIUS servers and 1 NAS, it is necessary if authorization has > not passed on the first to be authorized on the second, what it is > necessary for this purpose? Most NAS support multiple radius servers.. Have a look at t

proxy radius

The help is necessary. Is 2 RADIUS servers and 1 NAS, it is necessary if authorization has not passed on the first to be authorized on the second, what it is necessary for this purpose? -- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Questions about proxy radius on multihomed host

Kostas Zorbadelos wrote: >> There are patches pending against CVS head >> that should fix this. >> > In a portable way? Yes. Much of FreeRADIUS is intended to be portable. It would be annoying to make it non-portable now. > I am reffering to proxy_send in proxy.c Which doesn't matter for

Re: Questions about proxy radius on multihomed host

On Sun, Dec 03, 2006 at 09:15:54PM -0800, Alan DeKok wrote: > Kostas Zorbadelos wrote: > > on a multihomed Solaris host when radius packets are proxied what is > > their source IP? Is it IP1 or it could also be IP2? > > Uh... that's up to the OS. That's what I also thought. This would have to

Re: Questions about proxy radius on multihomed host

Kostas Zorbadelos wrote: > on a multihomed Solaris host when radius packets are proxied what is > their source IP? Is it IP1 or it could also be IP2? Uh... that's up to the OS. There are patches pending against CVS head that should fix this. > I took a look at the sources where I see that in p

Questions about proxy radius on multihomed host

Hello to everyone. I have a question regarding freeradius proxying. My setup is freeradius 1.1.3 on Solaris 9. I have a very simple proxy configuration. The setup is a bit 'weird' in the sense that I have a freeradius server on the machine that acts as a proxy to another radius server running on t

Re: FreeRadius working as proxy Radius for RSA ACE Server

[EMAIL PROTECTED] wrote: > After that, is there anyone there using FreeRadius servers as proxy for > RSA Radius Server? I've done it. I just configured FreeRADIUS as a proxy. > Any help or simple configuration (file or url or something) to start to > work would be appreciated. The document

Re: FreeRadius working as proxy Radius for RSA ACE Server

Hi there, First all, thanks for then answers!!! :D After that, is there anyone there using FreeRadius servers as proxy for RSA Radius Server? I need to deploy a configuration ASAP, I could do a configuration on my own buy I don´t have physical time to work on it, since I am trying to finish some

Re: FreeRadius working as proxy Radius for RSA ACE Server

On 11/23/2006 11:34 AM, Alan DeKok wrote: Luis wrote: > Hi there, > > Is there anyone with experience with FreeRadius working as proxy for the > RSA ACE Server? Yes. RSA ACE is just a re-branded Funk server. Alan DeKok. Careful here. The RSA SecurID Server, (aka the ACE Server o

Re: FreeRadius working as proxy Radius for RSA ACE Server

Luis wrote: > Hi there, > > Is there anyone with experience with FreeRadius working as proxy for the > RSA ACE Server? Yes. RSA ACE is just a re-branded Funk server. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog -

FreeRadius working as proxy Radius for RSA ACE Server

Hi there, Is there anyone with experience with FreeRadius working as proxy for the RSA ACE Server? Regards. -- Luis [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Proxy Radius and accthost

We have a customer who we terminate connections for and pass on the authentication and accounting to via proxy.conf. However we want to be able to see the accounting also. Is it possible to add another “accthost” to the entry in proxy.conf for this customer so we receive the radius accoun

RE: Proxy RADIUS problem

Whay can I do??? Hi people, I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS correctly with one remote server, but if I add in my proxy.conf file a redundant one because the primary RADIUS fails, it doesn't work correctly. I want to do roaming with two remote RA

Re: Proxy RADIUS problem

Le Mon, Apr 24, 2006 at 10:37:53AM -0400, Reynold McGuire ecrivait: > > > Have you tried: > > ---CUT--- > #realm serv.com { > # type= radius > # authhost= radius.serv.com:1645 > # accthost= radius.serv.com:1646 > # secret = TheirKey > # ldflag

RE: Proxy RADIUS problem

hy it wouldn't work. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Santiago Balaguer García Sent: Monday, April 24, 2006 9:49 AM To: freeradius-users@lists.freeradius.org Subject: Proxy RADIUS problem Hi people, I have a LINUX machine with freeradius

Proxy RADIUS problem

Hi people, I have a LINUX machine with freeradius 1.1.10. I do proxy RADIUS correctly with one remote server, but if I add in my proxy.conf file a redundant one because the primary RADIUS fails, it doesn't work correctly. I want to do roaming with two remote RADIUS servers t

Re: eap authentication and proxy radius

Matteo Paoli <[EMAIL PROTECTED]> wrote: > For example, the supplicant starts the eap-tls and the authentication is > ok. But the server radius don't send Access Accept but it requests a new > authentication (for example eap-md5). If also eap-md5 is ok, the > supplicant is authenticated. No. EAP

eap authentication and proxy radius

thentication eap-tls on remote radius server) && (authentication eap-md5 on proxy radius server) Many thanks, Matteo Paoli -- Matteo Paoli - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxy radius GTC

"benjo.fr" <[EMAIL PROTECTED]> wrote: > Now, I configure Supplicant and the FreeRadius with the same settings, > except MsChapV2 is repaced by GTC. It's not ok ... What do you see? What do you expect to see? How the heck do you expect *anyone* to be able to help you when your description o

Proxy radius with socks on client

Hi, I have to socksify client requests on a freeradius in proxy mode. I can try to use an external module in radius like this /usr/bin/socksify /usr/bin/radtest "$USER" "$PASS" $RADIUS 10 $PSK but i would like to know if there is not an other solution to do this ? Thanks Romain - List info

Re: Proxy radius GTC

My final target is to use EAP-PEAP authentication with EAP-GTC (Wi-Fi 802.1x). In the first step, I try to connect Supplicant to Radius (not FreeRadius) with EAP-PEAP / EAP-GTC. The Supplicant freeze. In the second step, I try to connect Supplicant to a Radius (not FreeRadius) with EAP-PEAP / EA

Re: Proxy radius GTC

"benjo.fr" <[EMAIL PROTECTED]> wrote: > Have you any idea about my mistake ? It would help if you described exactly what you're doing. So far, I can tell you're using PEAP, MSCHAP, and GTC with proxying, but I have no idea what protocol is used where, or what protocol you *want* to be used wh

Re: Proxy radius GTC

Alan, Thanks for your answer. I have this architecture : Supplicant <--> FreeRadius <--> Radius I'have not the choice about Supplicant and Radius. When I want to do PEAP/EAP-GTC or PEAP/EAP-MsChapV2 directly with Supplicant and Radius, it doesn't work. FreeRadius is RFC-Compliant (thank you Free

Re: Proxy radius GTC

"benjo.fr" <[EMAIL PROTECTED]> wrote: > I know proxying for PEAP/EAP-MsChapV2 is ok with FreeRadius. > Or, I want to know if proxying for PEAP/EAP-GTC is working too ? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Proxy radius GTC

Hi, I know proxying for PEAP/EAP-MsChapV2 is ok with FreeRadius. Or, I want to know if proxying for PEAP/EAP-GTC is working too ? Thanks BenjO - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: freeradius as radius and proxy radius server

Hi Marc, > can freeradius work as a radius server and at the same time > as a proxy radius server? if this is possible, has anyone Yes. > found good links/resources on how to set this up? Have you read the docs that come with freeradius? Looked at the example configuration files?

freeradius as radius and proxy radius server

hi all, can freeradius work as a radius server and at the same time as a proxy radius server? if this is possible, has anyone found good links/resources on how to set this up? thanks. regards, marc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: high volume proxy radius issues

Tariq Rashid <[EMAIL PROTECTED]> wrote: > thanks for the reply - multiple source ports is the obvious answer which i > didn't trust was actually specified in the RFCs. Yes, it's in there. > The reason for this is that too often i have seen requests from 1645 > to 1645 and not (random-high-port

RE: high volume proxy radius issues

thanks for the reply - multiple source ports is the obvious answer which i didn't trust was actually specified in the RFCs. The reason for this is that too often i have seen requests from 1645 to 1645 and not (random-high-port to 1645) for example. extendid ID? well some radius servers will exte

Re: high volume proxy radius issues

Tariq Rashid <[EMAIL PROTECTED]> wrote: > When a radius proxy, such as an appropriately configured freeradius , > forwards (proxies) a radius request to a target, the target sees a radius > request from the proxy .. it sees its IP address, the source port, and the > UID of the radius request. UI

high volume proxy radius issues

When a radius proxy, such as an appropriately configured freeradius , forwards (proxies) a radius request to a target, the target sees a radius request from the proxy .. it sees its IP address, the source port, and the UID of the radius request. now, when the radius target forms a reply/responce,

Accounting with a proxy radius server and primary server

Hello , In the past, i had one server radius and acounnting was configured . No problem No, I would like to have : Proxy radius (it just proxy all request to other radius) -> Primary radius -> Secondary radius -> Default Radius In

How to define freeradius as a proxy radius server and not a home server

server.HOW to declare Proxy A and PROXY B as PROXY RADIUS SERVER and not home server.please help me

How to define freeradius as a proxy radius server and not a home server (listening on proxy :1814 ??

e Home server. HOW to declare Proxy A and PROXY B as PROXY RADIUS SERVER and not home server. please help me ___[ Pub ] Envie de discuter gratuitement avec vos amis ? Téléchargez

For perons who have made primary and secondary freeradius with proxy radius

hello i have do that : Proxy freeradius --> Primary Freeradius | --> Secondary Freeradius i want to put on the same pc primary radius and proxy freeradius ? is it possible ? if yes, how i can do that please ? My first idea was to run two freeradius

Re: Proxy Radius server with primary and secondary don't work, Strange ?

Nans Delrieu wrote: Hello, I want to have a secondary server radius if primary fall. I think my configuration is good but when I use radtest, the proxy radius server doenst't proxy the request to the secondary radius server. It will mark the server as dead and send the NEXT request to the fal

Proxy Radius server with primary and secondary don't work, Strange ?

Hello, I want to have a secondary server radius if primary fall. I think my configuration is good but when I use radtest, the proxy radius server doenst't proxy the request to the secondary radius server. In order to test my configuration the primary server doesn't exist ( it's

Re: Cisco auth-proxy / radius

flamur <[EMAIL PROTECTED]> wrote: > I have tried to send Session-Timeout attribute in radius reply > packets to the NAS, but it doesnt work. If your NAS doesn't obey Session-Timeout, then there's very little you can do to control the users session time. Alan DeKok. - List info/subscribe/un

Cisco auth-proxy / radius

packet (something like Session-Timeout attribute or whatever...). I have tried to send Session-Timeout attribute in radius reply packets to the NAS, but it doesnt work. Is there any way to control user's session time from radius reply packets, in cisco auth-proxy/radius setup ? regards, F

Re: Proxy Radius Server

radius :) - Original Message - From: Cool Man To: [EMAIL PROTECTED] Sent: Wednesday, July 28, 2004 10:31 AM Subject: Proxy Radius Server Hi ,   Which protocol is used to communicate between two radius servers?   Regards, Riz.   Piro Magic

Proxy Radius Server

Hi ,   Which protocol is used to communicate between two radius servers?   Regards, Riz.   Piro Magic <[EMAIL PROTECTED]> wrote: (Sorry for my english :-) )Hi all, I have a little problem.I'd like to test my freeradius 1pre3 and I want toknow how to make it.I'd like to test VPN, dialup, and adsl ac

Re: Proxy radius AND SQL for IP management

paul hanson <[EMAIL PROTECTED]> wrote: > is it possible for a local SQL server (PostgreSQL/MySQL) used for IP > management ( for example fixed IP address per user ) but implement > radius proxying to other servers for authorisation. Yes. > Already have ~3000 users accross 4 servers but want fix

Proxy radius AND SQL for IP management

Question, is it possible for a local SQL server (PostgreSQL/MySQL) used for IP management ( for example fixed IP address per user ) but implement radius proxying to other servers for authorisation. Already have ~3000 users accross 4 servers but want fixed IP per user - is it possible to use bo

Re: Setting up a proxy radius server

"Stephen Petersen" <[EMAIL PROTECTED]> wrote: > By the docs its setup to do proxy. > In plain language what conf files need to be edited. clients.conf & proxy.conf > I've edit client.conf and proxy.conf and can't get any proxying happening. Try running it debug mode, as suggested in the FAQ,

Setting up a proxy radius server

I've just setup freeradius just using ./configure, make and make install. By the docs its setup to do proxy. In plain language what conf files need to be edited. I've edit client.conf and proxy.conf and can't get any proxying happening. Regards Stephen Petersen - List info/subscribe/unsubsc