Radius, Radsec, Diameter [was: Silly question - secure Radius?]

Hi! radsec?  It addresses the server-server problem, not the supplicant login problem. Sure, it's on the radar, but so far there hasn't been much *practical* interest in implementing it. Speaking of a radar - is an implementation of the Diameter protocol something you have on that radar as

Re: Can do EAP/TLS, but not EAP/MD5

Jefri bin Dahari wrote: I have Freeradius running where wireless users authenticate using EAP/TLS. Now, I would like to use the same server to authenticate wired users using EAP/MD5 on Cisco switch 3750 but it doesn't work. The log shows it doesn't do EAP authentication as shown below.

MAKEFILE: Regarding the compiling problem of `lrad_crypt_check':

** Your attention is drawn to the note at the end of this message. ** Hi, Attached codes as below, there exists error in function ' rad_crypt_check' while running MAKE. I have already run the CONFIGURE Do you have any suggestions solving this ? Thanks, Sunny Wog Kai Kwong

Re: Can do EAP/TLS, but not EAP/MD5

It works. Thank you very much Vladimir. - Original Message - From: Vladimir Vuksan [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Friday, July 08, 2005 14:39 Subject: Re: Can do EAP/TLS, but not EAP/MD5 Jefri bin Dahari wrote: I have

Proxying with Calling-Station-Id

Hi, I am trying to configure freeradius to proxy requests to another radius based on the Calling Station Id. Can anyone help me how to configure my radius server to do this? Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can do EAP/TLS, but not EAP/MD5

or simply put 'eap' as the last module in the authorize section. should be the same. Jefri bin Dahari wrote: It works. Thank you very much Vladimir. - Original Message - From: Vladimir Vuksan [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org

Re: Proxying with Calling-Station-Id

Stylianos Stylianou wrote: I am trying to configure freeradius to proxy requests to another radius based on the Calling Station Id. Can anyone help me how to configure my radius server to do this? In the users file: DEFAULT Calling-Station-Id == 0102030405, Proxy-To-Realm := realm1.net

Cisco attributes for Freeradius using MySQL db for auth

Defined them in the radgroupreply table and used the += in the op row in that table and voila .. Did'nt have to stick them in the users or hints files in the raddb conf dir ... See example ... rlm_pap: login attempt by [EMAIL PROTECTED] with password test3 rlm_pap: Using password

Problem with 1.1.0-pre0 - CVS Snapshot of 30th of June

I have a problem when proxying an auth request to another server. The server crashes with the following error: rad_recv: Access-Request packet from host 127.0.0.1 port 32770, id=130, length=69 --- Walking the entire request list --- Thread 1 got semaphore Thread 1 handling request 0, (1 handled

Re: EAP-TTLS and PEAP auth problem ... sorry!!

thanks for the help until now! I have another problem on freeradius, related to PEAP. The MSCHAP module needs a couple user-pw to perform authentication... and in the radiusd log I can read that is not possible to retrieve a NT-password or NL-password. But I don't want to use such thing (I read

Re: Radius not configured properly

Hey everyone, I am very new to this so if I screw up and ask a stupid question I apologize, I have freeradius it's version 1.0.2 (I will upgrade when I understand better what's going on) installed on a Mandriva LE 2005 Box and it's the default install not configured as of yet. I added a

ippool corrections

Hi there! I have installed and run FreeRadius Server on Solaris 8 (x86 and sparc). Authorization and authentication works with LDAP protocol with OpenLDAP server. Accounting is processed by SQL database (PostgreSQL). I use these radius servers to perform AAA operations as a response to request

High performance request remapping / rewriting

All, We are looking to implement mac-based vlans with a radius backend. I'm hoping freeradius is the obvious choice, but I'm having a hard time seeing how to do what I need. What I'm looking to is feed FreeRadius from our host registration database. Each NAS (switch) may potentially have

Re: Dusty Here's the info requested......PAP ok No Chap new Installation.

On Thu, 7 Jul 2005, Radius wrote: OK I can do this, but will the PAP that uses the /etc/passwd be prevented? We have both running here. Good question, I think it would. Is there any reason you're using both /etc/passwd and mysql? Why not just use mysql? Do I need to add a Auth == Local

class attribute wont pass

Hello, I'm running freeradius 0.9.3 (I know.. it's old..), operating in a proxy configuration. I'm having issues with freeradius not passing the class attribute back to the NAS after receiving it from one of our proxy customers. I can't put the Class attribute in the user's file because

Re: class attribute wont pass

rad_recv: Access-Accept packet from host 63.174.xxx.xx:1645, id=1, length=218 Proxy-State = 0x3735 Service-Type = Framed-User Framed-Protocol = PPP Ascend-Data-Filter = ip in forward tcp est Ascend-Data-Filter = ip in forward dstip 63.174.xxx.x/24 0

Need help installing 1.0.4 on RHEL update 4

I am not a RHEL expert, but have installed the 1.0.1 RPM of freeradius. I am trying to get freeradius to authenticate against a Windows 2003 Active Directory. Once I can get radtest to work on the server I'll configure the clients (Cisco VPN 3005 and console access for all my other Cisco

Authenticating to a Windows 2003 active directory

Does anyone have a working radiusd.conf and users file I could see as I have been unsuccessful configuring Freeradius 1.0.1 to talk to my Active Directory. When I try to test with radtest I get the following: [EMAIL PROTECTED] freeradius-1.0.4]# radtest ken george xx localhost 1 testing123

Debug vs. Run mode

I have a problem I am running fedora core 4 FreeRADIUS 1.0.2 and MySQL 4.1.11 I am using NTRadPing Test Utility to test the radius server I can get Access-Accept response from MySQL only when I am running in debug mode (radiusd X) If I run /etc/init.d/radiusd start and try to

Re: class attribute wont pass

Dusty Doris wrote: rad_recv: Access-Accept packet from host 63.174.xxx.xx:1645, id=1, length=218 Proxy-State = 0x3735 Service-Type = Framed-User Framed-Protocol = PPP Ascend-Data-Filter = ip in forward tcp est Ascend-Data-Filter = ip in forward dstip

Re: Debug vs. Run mode

Jamie Chitester [EMAIL PROTECTED] wrote: If I run /etc/init.d/radiusd start and try to authenticate I get no response from server (timed out) Odds are the server isn't running. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Debug vs. Run mode

Where is your binary? might be under /etc/rc.d/rc.radiusd start Or depending where your binary is located /opt/freeradius/sbin/radiusd will start it /opt/freeradius/sbin/radiusd -x or -xx for debug. Alan DeKok wrote: Jamie Chitester [EMAIL PROTECTED] wrote: If I run

LOGIN INCORRECT and LOGIN OK

Hi friends There are a weird something happening here. This is our log about a user: Wed Jun 29 22:36:03 2005 : Auth: Login incorrect: [EMAIL PROTECTED]/no User-Password attribute] (from client 10.5.0.2 port 5060) Wed Jun 29 22:36:04 2005 : Auth: Login incorrect: [EMAIL PROTECTED]/no

Re: LOGIN INCORRECT and LOGIN OK

Bruno Machado [EMAIL PROTECTED] wrote: I already tried to discover the problem, but I didn't find anything. Have you tried running it in debugging mode? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ippool corrections

Marek Gradzki [EMAIL PROTECTED] wrote: unfortunately all sessions that are terminated in the box working with radius come to this device by the same port. So I had to rewrite a little bit rlm_ippool module to verify used ip addresses not only by nas device and nas port but also by user name.

Service-Type: Outbound vs. Outbound-User

hi, according to rfc2865 value 5 of attr 6 should be named Outbound and not Outbound-User (if i have read the rfc well) and that causes all my dial-out's fail after installing v1.0.4 because all users where configured with Outbound. even though fixing was dead easy - have i misunderstood the

Re: Service-Type: Outbound vs. Outbound-User

Gerald Krause [EMAIL PROTECTED] wrote: according to rfc2865 value 5 of attr 6 should be named Outbound and not Outbound-User (if i have read the rfc well) and that causes all my dial-out's fail after installing v1.0.4 because all users where configured with Outbound. even though fixing was

Shipping freeradius and mysql

Hi, I am using freeradius 1.0.2 on mandrake 10.1. The question I want to post is about shipping freeradius to customers. I have written a script to install freeradius, mysql, java and my product. Every time I use the script, I run into different errors while installing freeradius. The errors

Problems with the PEAP configuration

Hi! I'd finally knew why the client (Xp-SP2) was sending the username PEAP-MacAddress to the radius. I have installed the Cisco Aironet Client Utility (and the aironet drivers), and this software changed the EAP methods on XP and sends the mentioned user instead of the real one when tries PEAP

Re: Problems with the PEAP configuration

Yeah yeah! I forgot the debug log: rad_recv: Access-Request packet from host 192.168.20.7:55049, id=131, length=136 User-Name = jairo NAS-IP-Address = 192.168.20.7 Called-Station-Id = 00-0c-41-b1-37-07 Calling-Station-Id = 00-0b-7d-0f-f7-35 NAS-Identifier =

Re: PEAP docs

Maybe http://howtos.linux.com/howtos/8021X-HOWTO/freeradius.shtml and http://www.dslreports.com/forum/remark,9286052~mode=flat could help you! On 7/7/05, Albrecht, Robert-Manfred [EMAIL PROTECTED] wrote: Hello, some months I had a cool document describing the installation of freeradius

Problems with installing to /etc and /var

I am running freeradius-1.0.4 from source, on SLES 9.0. I want to install freeradius so that it uses /etc and /var, and not /usr/local/etc and /usr/local/var. If I do: /usr/local/src/freeradius-1.0.4 # make clean make distclean /usr/local/src/freeradius-1.0.4 # ./configure --disable-shared

Re: Service-Type: Outbound vs. Outbound-User

hello alan, Am Freitag, 8. Juli 2005 22:37 schrieb Alan DeKok: Gerald Krause [EMAIL PROTECTED] wrote: according to rfc2865 value 5 of attr 6 should be named Outbound and not Outbound-User (if i have read the rfc well) and that causes all my dial-out's fail after installing v1.0.4 because

Re: Shipping freeradius and mysql

On Fri, 8 Jul 2005 14:00:09 -0700 (PDT) Sonali Karmarkar [EMAIL PROTECTED] wrote: Hi, I am using freeradius 1.0.2 on mandrake 10.1. The question I want to post is about shipping freeradius to customers. I have written a script to install freeradius, mysql, java and my product. Every

Re: Chap password failing with Cisco

On 7/1/05, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Brent Smith schrieb: I am trying to get freeradius to authenticate chap for a ISDN backup call on a cisco. I am running version 1.0.1. I am in control of server and clients, so I know the passwords match, but the logs say they do

Re: Problems with installing to /etc and /var

Hello jck, I don't know what the proper permissions are, however - Original Message - From: [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Friday, July 08, 2005 4:37 PM Subject: Problems with installing to /etc and /var I am running freeradius-1.0.4 from

Problems with installing to /etc and /var

Hello Michael, On Fri, Jul 08, 2005 at 05:36:26PM -0500, Michael Cooper wrote: Hello jck, I don't know what the proper permissions are, however My problem is not permissions related. I am trying to install FreeRADIUS so that it references /etc/raddb, and writes to /var/log/radius.

Re: Problems with installing to /etc and /var

[EMAIL PROTECTED] wrote: My problem is not permissions related. I am trying to install FreeRADIUS so that it references /etc/raddb, and writes to /var/log/radius. The locations of the files and directories used by the server are defined in radiusd.conf. $ vi /etc/raddb/radiusd.conf /logdir

Re: Service-Type: Outbound vs. Outbound-User

Gerald Krause [EMAIL PROTECTED] wrote: we have only cisco NAS's in production and all the examples on cisco.com using outbound. They also give ACS in their examples. Does that mean you use ACS? In any case, it's simple enough to fix, if you so care. Edit /etc/raddb/dictionary, and add

Re: Problems with installing to /etc and /var

Hey jck, Oh, I am sorry, yeah how stupid of me. Yup I ran into that very same thing, Dang let me remember what I did to fix it and I'll email ya the solution. See ya Michael A Cooper BCCISP.net http://www.bccisp.net 281-854-2079 Technology that counts, voices that matter! - Original

Re: PEAP/mschapv2 fails first time

Graham, Robert [EMAIL PROTECTED] wrote: I FINALLY got a user to authenicate against Active Directory via freeradius using PEAP and mschapv2. but I still have one issue. When the user first logons, the authenication fails. Approximately 60 seconds later the client tries to re-authenicate and

Re: Radius, Radsec, Diameter [was: Silly question - secure Radius?]

Stefan Winter [EMAIL PROTECTED] wrote: Speaking of a radar - is an implementation of the Diameter protocol something you have on that radar as well? Why the heck would we do that? To my knowledge, no real usable implementation exists. The only serious thing on Open Source side I have seen

Re: Problem with 1.1.0-pre0 - CVS Snapshot of 30th of June

Jaco van Tonder [EMAIL PROTECTED] wrote: Assertion failed in request_list.c, line 724 This ONLY happens for proxied requests. All local requests gets authenticated ok. What can be the problem The code is being updated. Did you not see my response to the previous report of this problem?

Re: EAP-TTLS and PEAP auth problem ... sorry!!

Gandalf the Gray [EMAIL PROTECTED] wrote: I would like to submit user and password to my LDAP server, and this one have to check the right relationship! LDAP is a database, not an authentication server. FreeRADIUS is an authentication server. Now: is it possible to tell MSCHAP to use

Re: Need help installing 1.0.4 on RHEL update 4

Ken George [EMAIL PROTECTED] wrote: I get the following errors when I try to ./configure 1.0.4 100% of what you posted isn't errors, it's internal logs from configure, as it tries to figure out what's on your system. Calling them errors is a mistake, and misleading. Posting the log file is

Re: Need help installing 1.0.4 on RHEL update 4

On Fri, Jul 08, 2005 at 11:36:33AM -0400, Ken George wrote: I am not a RHEL expert, but have installed the 1.0.1 RPM of freeradius. I am trying to get freeradius to authenticate against a Windows 2003 Active Directory. Once I can get radtest to work on the server I'll configure the clients