Fwd: using IP address of vpn users in radius server

-- Forwarded message -- From: Eric Date: Mon, Feb 9, 2009 at 9:10 AM Subject: Re: using IP address of vpn users in radius server To: freeradius-users@lists.freeradius.org yes.but how can I specify Calling-Station-Ids based on valid and invalid ips? I want that radius checks that

Enabling hashed passwords

Hi I've trawled looking for a solution for this, but there doesn't seem to be a clearcut answer. I am using Freeradius 1.1.7. I'm trying to make it so that in the users file, passwords are stored as a SHA hash. So my users file looks like this: asdf SHA-Password == 3da541559918a808c2402bba5012f6c6

Re: FreeRadius support of EAP-AKA

I could not find that patch, it seems the only way is to download it from "bugs.freeradius.org". Could you please tell me when will that website be recovered from the crash? Thanks, Kevin- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE:outer identity anonymous is being rejected (solved)

Apologies, I didn't read all the MAN pages, found the answer I needed >My FR 2.1 is set to authenticate users via PEAP + EAP-TTLS, this works fine but some users are being rejected >So it's being rejected. How do I get the inner identity which contains a valid username to be processed instead

Pool-Name woes with sqlippool

Hi all, I have, what I think is a simple problem, with a simple answer that doesn't work. The environment I am supply authentication requests to, require that I respond with a fixed IP address in each NAS domain. eg NAS-IP-Addresses 192.168.1.0/28 should get an IP from the pool 10.0.0.0/16 W

Re: Error binding port to ipv6 address

D'AVELLA STEFANO wrote: > Exactly the problem is in the udpfromto_init() call inside the > listen_bind() function. Then disable udpfromto. It is NOT enabled in the default build of the server, so the only way you can run into this problem is if you enable a non-standard feature. Alan DeKok.

Re: Installation Problem

Nice, Thanks Will I'll try it ... I had to stay with 2.1.1, because I didn't have time ... Thanks for sharing ... - Original Message - From: "Will D. Spann" >;willdsp...@yahoo.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html- List info/subscribe

RE: Error binding port to ipv6 address

Exactly the problem is in the udpfromto_init() call inside the listen_bind() function. Inside this function the return value is set to be: return setsockopt(s, proto, flag, &opt, sizeof(opt)); with the ipv6 address, it returns -1 (and after a couple of calls and error logs, the program exits)

RE: Error binding port to ipv6 address

Ok I have traced where the problem is (of course it was in the actual binding of the port). Listen_init() calls listen_parse() that calls common_socket_parse(). Inside this function around line 510 of listen.c there is this line: /* * And bind it to the port. */ if (listen_bind(this) < 0)

RE: Error binding port to ipv6 address

I don't have selinux installed on the machine, the only installed package about selinux is the shared library libselinux1, so I don't think that is the problem. I am thinking that it is something about the ipv6 config in ubuntu but I am not sure. What I am doing right now is trying to backtrace t

Re: MSSQL, bugs and a "patch"

Hello, forget this mail. I worked with an old version of the schema. In the new version, the radpostauth-table is already there... Original-Nachricht > Datum: Tue, 10 Feb 2009 11:58:20 +0100 > Von: "Sebastian Heil" > An: freeradius-users@lists.freeradius.org > Betreff: MSSQL,

Re: Error binding port to ipv6 address

No problem :) Maybe a shot in the dark but is selinux enabled? check your logs to see if any policies are blocking it or type 'echo 0 > /selinux/enforce' then try to start it again. -- Leigh On Tue, Feb 10, 2009 at 3:19 AM, D'AVELLA STEFANO < stefano.dave...@alcatel-lucent.com> wrote: > Thanks

Re: Dialup_admin "New user" page is empty

Am Dienstag, 10. Februar 2009 13:02:11 schrieb Michael Schwartzkopff: > Hi, > > I am trying to get dialup_admin running. I have ldap directory and FR+LDAP > works. > > I have the webserver running, see the start page and "Check Server" works. > > When I click "New User" I see a blank page. Nothing

Re: Restrict access to certain groups

To remember : I want only user1 can access to host1. To illustrate it: root | -- || hosts users || -- ||| host1 use

Dialup_admin "New user" page is empty

Hi, I am trying to get dialup_admin running. I have ldap directory and FR+LDAP works. I have the webserver running, see the start page and "Check Server" works. When I click "New User" I see a blank page. Nothing in the /var/log/apache2 files. Any help or hints? Thanks. -- Dr. Michael Schw

Re: FreeRadius support of EAP-AKA

aaron...@gdnt.com.cn wrote: > Does anyone know if the FreeRadius supports EAP-AKA or not? I am using > Version 2.1.3 and it seems that the EAP-AKA is not supported. > > Is there any plan to support that in the future releases? There was a patch on bugs.freeradius.org, but the machine has suffer

MSSQL, bugs and a "patch"

Hello everybody, i try to work with a mssql-database. The connection to the database works fine, but there are some things missing and wrong in the schema and the dialup.conf. I added the following part to the schema.sql to make sure, that there is a radpostauth-table in the mssql-database: --

Re: DHCP in FreeRADIUS 2

Andrew Rikhlivsky wrote: > Where I can read information about using DHCP opt. 82 in FreeRADIUS 2 ? Can you describe what you want to do with it? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Restrict access to certain groups

Hi I have a Freeradius which checks if an user has right to connect to a network equipment via LDAP. For security reasons, i want to restrict access to certain users (network administrator). At the beginning, I wanted to do it by adding host attribute to a user, it will contain all allowed hosts h

users

Hello, This is my users file. It works. But I have the impression that this could be optimized. Any suggestions? DEFAULT Auth-Type = opendirectory Fall-Through = 1 DEFAULT Ldap-Group == "wlan_test", Airespace-Wlan-Id == 4 Auth-Type := opendirectory, Service-Type = Login

FreeRadius support of EAP-AKA

Hi, Does anyone know if the FreeRadius supports EAP-AKA or not? I am using Version 2.1.3 and it seems that the EAP-AKA is not supported. Is there any plan to support that in the future releases? Thanks, Aaron Lai - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users

RE: Error binding port to ipv6 address

Thanks for the suggestion but of course I tried different ways to try to grep the process :) I just mentioned one of the command I used to make people understand that I checked the process list :) Still no clue about the problem anyway... Try just 'ps -e|grep radius' that will catch freerad