EAP-AKA

Hi all, I'm trying to configure EAP-AKA using EAP2, where do I insert the quintets?.. in the same way as EAP-SIM? Thanks, Fernando. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Disabling accounting logging (FreeRADIUS 1.1.4)

Ciaran O'Rourke wrote: Hello We’re running FreeRADIUS 1.1.4 on OpenBSD 4.0. We’ve implemented a proprietary RLM that we use to manipulate auth and accounting packets before proxying them to a central RADIUS server. Diskspace on the host running FreeRADIUS is limited in size

Re: domain security problem

my configuration: radius 2.X , win 2003 AD, domain: TEST, 802.1x I have a problem: If the pc is in the domain(TEST) it can authenticate good. If it is not in domain it can't auth, it is good, BUT when i set the computer name to TEST and it is not in the domain(simple workgroup) it CAN

fr group howto

Hi all! I have 802.1x authentication, which works. I want use dynamic vlan assignment: The radius authenticate the user (use ntlm_auth) and after this, it use ldap to get user indormation form database (username=samaccount name). ldap.attrmap changes the attributes and send to the switch, it

domain security problem

hi, my configuration: radius 2.X , win 2003 AD, domain: TEST, 802.1x I have a problem: If the pc is in the domain(TEST) it can authenticate good. If it is not in domain it can't auth, it is good, BUT when i set the computer name to TEST and it is not in the domain(simple workgroup) it

Re: need help on Access Reject

You can insert it via the attribute filter in Post-Auth-Type Reject. See how it's done in current version. Or upgrade and it will be there. Ivan Kalik Kalik Informatika ISP Dana 9/12/2008, Do Nguyen Ha [EMAIL PROTECTED] piše: Hi all is there a way to insert the attribute h323-return-code = 2

Re: Does FreeRADIUS support PEAPv0/EAP-TLS?

On Tue, Dec 9, 2008 at 5:35 AM, Alan DeKok [EMAIL PROTECTED]wrote: Jason Wittlin-Cohen wrote: I already do that with the Juniper Access Client. The problem is that the client certificate has the user's name as the Common Name and that is sent in the clear. PEAP/EAP-TLS sends the user's

Re: Does FreeRADIUS support PEAPv0/EAP-TLS?

Ivan,b I already do that with the Juniper Access Client. The problem is that the client certificate has the user's name as the Common Name and that is sent in the clear. PEAP/EAP-TLS sends the user's certificate through the tunnel obviating the issue. I admit this isn't a large problem but it

Disabling accounting logging (FreeRADIUS 1.1.4)

Hello We're running FreeRADIUS 1.1.4 on OpenBSD 4.0. We've implemented a proprietary RLM that we use to manipulate auth and accounting packets before proxying them to a central RADIUS server. Diskspace on the host running FreeRADIUS is limited in size (deliberately). My question is: is

Re: Does FreeRADIUS support PEAPv0/EAP-TLS?

http://wiki.freeradius.org/EAP You should be able to set ananymous as user name for outer tunnel EAP-TLS negotiation on the supplicant and use EAP-TLS with identity hidden. Ivan Kalik Kalik Informatika ISP Dana 9/12/2008, Jason Wittlin-Cohen [EMAIL PROTECTED] piše: I'm attempting to setup

Re: Does FreeRADIUS support PEAPv0/EAP-TLS?

Jason Wittlin-Cohen wrote: I already do that with the Juniper Access Client. The problem is that the client certificate has the user's name as the Common Name and that is sent in the clear. PEAP/EAP-TLS sends the user's certificate through the tunnel obviating the issue. I admit this isn't a

Re: Question about the random file

Jason Wittlin-Cohen wrote: I'm currently using EAP-TLS with 3072 bit RSA certificates and a 3072 bit DH paramters. Currently I'm using the random file produced by the bootstrap script which appears to take 10 bytes of data from /dev/urandom. Is this sufficient with the larger keysize I am

Re: Freeradius and WiMAX ASN-GW

Ben Wiechman wrote: Can anyone who is using FR to authenticate a 802.16e WiMAX network speak a bit about which ASN-GW they are using and any issues they are encountering? Of particular interest is the ASN-GW offered by Cisco. It has been tested with Nokia, Motorola, and a few others. I

No log destination specified.

I have a problem where I upgraded v1 to v2 of freeradius and now I can only start it with mode radius -X , if I try use script is simply does following. /usr/local/etc/rc.d]# ./rc.radiusd start Starting FreeRADIUS:radiusd: Error: No log destination specified. Radius Any advise?

RE: No log destination specified.

I have a problem where I upgraded v1 to v2 of freeradius and now I can only start it with mode radius -X , if I try use script is simply does following. /usr/local/etc/rc.d]# ./rc.radiusd start Starting FreeRADIUS:radiusd: Error: No log destination specified. Radius Any advise? FYI - I have

Re: No log destination specified.

Marcel Grandemange wrote: I have a problem where I upgraded v1 to v2 of freeradius and now I can only start it with mode radius –X , if I try use script is simply does following… /usr/local/etc/rc.d]# ./rc.radiusd start Starting FreeRADIUS:radiusd: Error: No log destination specified.

Re: How to parse the value in an accounting message andprintthecontents In detail-... file?

Hi Ivan, Hmm, on my ubuntu system - I am not able to execute a basic perl module from freeradius. It is freeradius version 1.1.7 (installed using apt-get install freeradius) When i start freeradius with -X option, I am not seeing any indication of rlm_perl being loaded. (I have included a perl

Re: How to parse the value in an accounting message andprintthecontents In detail-... file?

al pat wrote: Hi Ivan, Hmm, on my ubuntu system - I am not able to execute a basic perl module from freeradius. It is freeradius version 1.1.7 (installed using apt-get install freeradius) Build 2.1.3 from source. Or build a debian package. Ensure that you install libperl-dev, too.

Re: Programatically provision users to server.

Ok this has been very helpful. So I just want to make sure I am headed down the right path. I have a WLAN controller that will be configured to use RADIUS for authentication. Currently it (WLAN) uses its own user accounts on the controller. Does this mean that the WLAN will deliver an IP after the

mysql fail over

Hi Everyone I've been trying to setup MySQL fail over with freeradius I've followed http://wiki.freeradius.org/SQL_HOWTO#Additional_Snippets But I get weird results. If I stop the first sql server service, freeradius starts to use the second sql server, as expected. But if I

rlm_python:python_load_function: module 'freeradius-cdrtool' is not found

i am trying to install freeradius-cdrtool with freeradius-server-2.1.3 and get the following the error: rlm_python:python_load_function: module 'freeradius-cdrtool' is not found rlm_python:EXCEPT:type 'exceptions.ImportError': /usr/lib/python2.5/lib-dynload/_socket.so: undefined symbol:

Regarding Dynamiv Vlan Association Via Radius Server

Hi This is Durai Velan C, from India. I would like to know about the Free Radius Version that supports, Dynamic VLAN Association for an User that is getting authenticated from Radius Server. Here by, I would require the Free Radius Server Configurations document to aid the Same. Requirements.

Re: Programatically provision users to server.

So I just want to make sure I am headed down the right path. I have a WLAN controller that will be configured to use RADIUS for authentication. Currently it (WLAN) uses its own user accounts on the controller. Does this mean that the WLAN will deliver an IP after the RADIUS has authenticated the

EAP/TLS TLS_accept error

EAP/TLS TLS_accept error Hi: I want to build a IEEE 802.1x authentication environoment and I have installed freeradius-1.0.2, openssl-0.9.8i, hostpad-0.4.8, wpa_supplicant-0.4.8. The authentication server is built in redhat9 , the database is mysql5 and client is

Re: EAP/TLS TLS_accept error

henry1412 wrote: I want to build a IEEE 802.1x authentication environoment and I have installed freeradius-1.0.2, openssl-0.9.8i, hostpad-0.4.8, wpa_supplicant-0.4.8. The authentication server is built in redhat9 , the database is mysql5 and client is build in linux. Most of these software

Re: EAP/TLS TLS_accept error

I want to build a IEEE 802.1x authentication environoment and I have installed freeradius-1.0.2, Why? It's outdated and has serious security flaws in EAP. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Regarding Dynamiv Vlan Association Via Radius Server

I would like to know about the Free Radius Version that supports, Dynamic VLAN Association for an User that is getting authenticated from Radius Server. Every. More important question is: does your NAS support it? Here by, I would require the Free Radius Server Configurations document to aid

wimax support

Hi, I am using the freeradius server 2.1.1 as the Radius server in the network to authenticate a wimax user. It seems that it could support the wimax VSA, since I found the dictionary.wimax in the dictionary directory. However, in my application, in the Access Accept message, the freeradius

Re: Programatically provision users to server.

Yes I do plan on using a RoR application to make the changes to the MySQL database. So I think this is coming together. However, the username and password... where is the user responsible for using those credentials. Would a user connect to my WiFi network, then authenticate against the RADIUS

Re:EAP/TLS TLS_accept error

I want to build a IEEE 802.1x authentication environoment and I have installed freeradius-1.0.2, Why? It's outdated and has serious security flaws in EAP. I just do some testing with old version who had more documents. It seem the old version also can run well, but I cann't config them running.

python error in complie freeradius-2.1.3

I install freeradius-2.1.3 on redhat9, the python version is 2.2. When I make the freeradius, it reports many error in rlm_python.c file. I paste the error information below rlm_python.c: In function `python_error': rlm_python.c:163: `PyGILState_STATE' undeclared (first use in this function)

Re: python error in complie freeradius-2.1.3

yes the python version is old use the latest python version i also faced the same problem :0) henry1412 [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 12/10/2008 12:18 PM Please respond to FreeRadius users mailing list freeradius-users@lists.freeradius.org To

(err=2)! (Shared secret is incorrect.)

i've read FAQ Hello i've got Linux 2.6.9-22 and freeRADIUS server v.2.1.1. I have the following problem - when i start radius in debuging mode it returns me the next message: rad_recv: Access-Reject packet from host 127.0.0.1 port 1812, id=195, length=20 rad_verify: Received Access-Reject