question
Hi -
Summary - I want/need to configure free radius to allow a TLS user on to
the system; without having
To authenticate the certs? I am not sure if this is possible, but
wanted to ask if there was a way to bypass
TLS cert authentication.
I did set the Default-auth-type = Accept; got a `Login Ok' response from
free radius; but the user still
wasn't able to get network entry?
Any options?
Thanks,
Jerry
Login OK: [EMAIL PROTECTED]/no User-Password attribute] (from
client PAYLOAD_SET65537 port 1 cli 001de104702b)
Processing the post-auth section of radiusd.conf
modcall: entering group post-auth for request 43
radius_xlat:
'/usr/local/var/log/radius/radacct/192.168.104.41/reply-detail-20081121'
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/reply-detail-%Y%m
%d expands to
/usr/local/var/log/radius/radacct/192.168.104.41/reply-detail-20081121
modcall[post-auth]: module reply_log returns ok for request 43
modcall: leaving group post-auth (returns ok) for request 43
Sending Access-Accept of id 110 to 192.168.104.41 port 33039
Reply-Message = Default = Accept
Finished request 43
Going to the next request
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: question
Hi Alan - This is a wireless network. If you have a minute could you explain why this is different between `wireless' `wired' system? Thanks for your time, Jerry -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] dius.org] On Behalf Of Alan DeKok Sent: Monday, November 24, 2008 10:36 AM To: FreeRadius users mailing list Subject: Re: question Jackson Jerry-NPC637 wrote: Hi - Summary - I want/need to configure free radius to allow a TLS user on to the system; without having To authenticate the certs? I am not sure if this is possible, but wanted to ask if there was a way to bypass TLS cert authentication. It's not possible for wireless networks. It might be possible for wired networks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
dictionary question
I'm a freeradius newbie so bear with me. Two questions/issues: 1. I've installed version 1.1.6, but have some dictionary files that are/were setup for Freeradius 1.1.3. I've seen from the README/faq that the dictionary files have changed post 1.1.3 am wondering what I need to do/change to incooperate my 1.1.3 dictionary files to work with Freeradius 1.1.6? It looks like most of the 1.1.3 dict. files are duplicated in 1.1.6, but notice I have a couple (company specific) dictionary files that I need to use with freeradius 1.1.6? 2. Probably not a big deal (just curious), but was wondering what exactly changed with the dictionary files between freeradius 1.1.3 1.1.6. I see an error like values can only be Interger types, but am not sure what this means. Hopefully this is just a quick/short answer. Thanks, Jerry - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
problem with freeradius fedors core 5,6
Hi I hope I haven't missed something obvious, but am having trouble getting radius to start after /configure/make/make install running Fedora core 5 or 6. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] Thanks for your help. Jerry J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius fedors core 5,6
Eshun - Thanks for the info. Bear with me, but from the info I've received on the mailing list it looks like; (there is a fix for this, but it needs to be checked out of cvs built?), correct. I haven't used cvs in a while, but will try an grab this update/fix. Will the instructions for making this work after checking out of cvs be the same - ./configure Make Make install Thanks, From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eshun Benjamin Sent: Thursday, April 05, 2007 10:18 AM To: FreeRadius users mailing list Subject: Re : problem with freeradius fedors core 5,6 Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x090fcde8 *** if you are installing 1.1.5 then install cvs . $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: anoncvs $ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd == Benjamin K. Eshun - Message d'origine De : Jackson Jerry-NPC637 [EMAIL PROTECTED] À : Jackson Jerry-NPC637 [EMAIL PROTECTED]; freeradius-users@lists.freeradius.org Envoyé le : Jeudi, 5 Avril 2007, 16h16mn 58s Objet : problem with freeradius fedors core 5,6 Hi I hope I haven't missed something obvious, but am having trouble getting radius to start after /configure/make/make install running Fedora core 5 or 6. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] Thanks for your help. Jerry J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.rd.yahoo.com/evt=42054/*http:/fr.answers.yahoo.com . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius fedors core 5,6
Last question on this I'm sure. If I wanted to get this update for version 1.1.3? Jerry From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Jackson Jerry-NPC637 Sent: Thursday, April 05, 2007 1:28 PM To: FreeRadius users mailing list Subject: RE: Re : problem with freeradius fedors core 5,6 Eshun - Thanks for the info. Bear with me, but from the info I've received on the mailing list it looks like; (there is a fix for this, but it needs to be checked out of cvs built?), correct. I haven't used cvs in a while, but will try an grab this update/fix. Will the instructions for making this work after checking out of cvs be the same - ./configure Make Make install Thanks, From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Eshun Benjamin Sent: Thursday, April 05, 2007 10:18 AM To: FreeRadius users mailing list Subject: Re : problem with freeradius fedors core 5,6 Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x090fcde8 *** if you are installing 1.1.5 then install cvs . $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: anoncvs $ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd == Benjamin K. Eshun - Message d'origine De : Jackson Jerry-NPC637 [EMAIL PROTECTED] À : Jackson Jerry-NPC637 [EMAIL PROTECTED]; freeradius-users@lists.freeradius.org Envoyé le : Jeudi, 5 Avril 2007, 16h16mn 58s Objet : problem with freeradius fedors core 5,6 Hi I hope I haven't missed something obvious, but am having trouble getting radius to start after /configure/make/make install running Fedora core 5 or 6. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] Thanks for your help. Jerry J. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Découvrez une nouvelle façon d'obtenir des réponses à toutes vos questions ! Profitez des connaissances, des opinions et des expériences des internautes sur Yahoo! Questions/Réponses http://fr.rd.yahoo.com/evt=42054/*http:/fr.answers.yahoo.com . - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Re : problem with freeradius fedors core 5,6
I appreciate the help from everyone, but ran into the same problem after checking out new source from CVS make clean ./configure Make Make install still get the double free error starting up radius. Is there anything else I need to do besides a (make clean) of the previous installation? Maybe waiting for 1.1.6 is the best answer. Thanks again, Jerry $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: anoncvs $ cvs -d :pserver:[EMAIL PROTECTED]:/source checkout -r branch_1_1 radiusd Jackson Jerry-NPC637 wrote: Last question on this I'm sure. If I wanted to get this update for version 1.1.3? 1.1.6. See the web site for details when it comes out. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
error on start up
Hello - I hope I haven't missed something obvious, but am having trouble getting radius to start after installing/configure/make...running Fedora core 5. Note - I'm not an Linux expert, so bear with me. This is the error - [EMAIL PROTECTED] freeradius-1.1.5]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf Config: including file: /usr/local/etc/raddb/eap.conf Config: including file: /usr/local/etc/raddb/sql.conf main: prefix = /usr/local main: localstatedir = /usr/local/var main: logdir = /usr/local/var/log/radius main: libdir = /usr/local/lib main: radacctdir = /usr/local/var/log/radius/radacct main: hostname_lookups = no main: max_request_time = 30 main: cleanup_delay = 5 main: max_requests = 1024 main: delete_blocked_requests = 0 main: port = 0 main: allow_core_dumps = no main: log_stripped_names = no main: log_file = /usr/local/var/log/radius/radius.log main: log_auth = no main: log_auth_badpass = no main: log_auth_goodpass = no main: pidfile = /usr/local/var/run/radiusd/radiusd.pid main: user = (null) main: group = (null) main: usercollide = no main: lower_user = no main: lower_pass = no main: nospace_user = no main: nospace_pass = no main: checkrad = /usr/local/sbin/checkrad main: proxy_requests = yes proxy: retry_delay = 5 proxy: retry_count = 3 proxy: synchronous = no proxy: default_fallback = yes proxy: dead_time = 120 proxy: post_proxy_authorize = no proxy: wake_all_if_all_dead = no security: max_attributes = 200 security: reject_delay = 1 security: status_server = no main: debug_level = 0 read_config_files: reading dictionary read_config_files: reading naslist Using deprecated naslist file. Support for this will go away soon. read_config_files: reading clients read_config_files: reading realms radiusd: entering modules setup Module: Library search path is /usr/local/lib *** glibc detected *** radiusd: double free or corruption (fasttop): 0x08b30140 *** === Backtrace: = /lib/libc.so.6[0x8d6f18] /lib/libc.so.6(__libc_free+0x79)[0x8da41d] /usr/local/lib/libltdl.so.3[0x5736bb] /usr/local/lib/libltdl.so.3(lt_dlopenext+0xbe)[0x57404e] radiusd(find_module_instance+0x317)[0xf571a7] radiusd(setup_modules+0x1d8)[0xf57758] radiusd(main+0x45c)[0xf5ad8c] /lib/libc.so.6(__libc_start_main+0xdc)[0x8887e4] radiusd[0xf4ecd1] === Memory map: 00111000-00123000 r-xp fd:00 976235 /usr/lib/libz.so.1.2.3 00123000-00124000 rwxp 00011000 fd:00 976235 /usr/lib/libz.so.1.2.3 00124000-00127000 r-xp fd:00 976261 /usr/lib/libkrb5support.so.0.0 00127000-00128000 rwxp 2000 fd:00 976261 /usr/lib/libkrb5support.so.0.0 0016d000-0017e000 r-xp fd:00 18515580 /lib/libnsl-2.4.so 0017e000-0017f000 r-xp 0001 fd:00 18515580 /lib/libnsl-2.4.so 0017f000-0018 rwxp 00011000 fd:00 18515580 /lib/libnsl-2.4.so 0018-00182000 rwxp 0018 00:00 0 001d3000-001d4000 r-xp 001d3000 00:00 0 [vdso] 002e1000-002f6000 r-xp fd:00 959556 /usr/local/lib/libradius-1.1.5.so 002f6000-002f7000 rwxp 00014000 fd:00 959556 /usr/local/lib/libradius-1.1.5.so 002f7000-002f8000 rwxp 002f7000 00:00 0 00345000-00347000 r-xp fd:00 18515584 /lib/libcom_err.so.2.1 00347000-00348000 rwxp 1000 fd:00 18515584 /lib/libcom_err.so.2.1 0037a000-0037c000 r-xp fd:00 976373 /usr/local/lib/rlm_exec-1.1.5.so 0037c000-0037d000 rwxp 1000 fd:00 976373 /usr/local/lib/rlm_exec-1.1.5.so 003fe000-0040 r-xp fd:00 18515576 /lib/libdl-2.4.so 0040-00401000 r-xp 1000 fd:00 18515576 /lib/libdl-2.4.so 00401000-00402000 rwxp 2000 fd:00 18515576 /lib/libdl-2.4.so 00455000-0046d000 r-xp fd:00 976264 /usr/lib/libgssapi_krb5.so.2.2 0046d000-0046e000 rwxp 00017000 fd:00 976264 /usr/lib/libgssapi_krb5.so.2.2 004d6000-004db000 r-xp fd:00 18515589 /lib/libcrypt-2.4.so 004db000-004dc000 r-xp 4000 fd:00 18515589 /lib/libcrypt-2.4.so 004dc000-004dd000 rwxp 5000 fd:00 18515589 /lib/libcrypt-2.4.so 004dd000-00504000 rwxp 004dd000 00:00 0 0057-00575000 r-xp fd:00 955078 /usr/local/lib/libltdl.so.3.1.4 00575000-00576000 rwxp 4000 fd:00 955078 /usr/local/lib/libltdl.so.3.1.4 005c9000-005e2000 r-xp fd:00 18515573 /lib/ld-2.4.so 005e2000-005e3000 r-xp 00018000 fd:00 18515573 /lib/ld-2.4.so 005e3000-005e4000 rwxp 00019000 fd:00 18515573 /lib/ld-2.4.so 006f9000-0073a000 r-xp fd:00 18515586 /lib/libssl.so.0.9.8a 0073a000-0073e000 rwxp 0004 fd:00 18515586 /lib/libssl.so.0.9.8a 0073e000-0085d000 r-xp fd:00 18515585 /lib/libcrypto.so.0.9.8a 0085d000-0087 rwxp 0011e000 fd:00 18515585
