Hello,
Somebody knows why pam_radius_auth authentication module doesn't use
libradius(3) for grater flexibility? There is any equivalent PAM authentication
module available that relays on libradius(3)?
Best Regards
Mugur
-
List info/subscribe/unsubscribe? See
Hello all,
I am using freeradius 2.1.6 on FreeBSD 7.2 and using rp-pppoe server
3.10 on gentoo linux. During live session it is not updating
acct-input/ouput-octets. Earlier with mpd pppoe server on freebsd it was
working fine accounting input and output octets were updating every
5mins as
It´s work.
I write into the ldap.attrmap:
checkItem Cleartext-Password userPassword
In the sites-available/default, I comment out everything except ldap, eap
And I activate LDAP in the sites-available/inner-tunnel authorize.
Thank you for help.
-
List info/subscribe/unsubscribe? See
I need some help again.
Is it possible to use Freeradius without certificate on the XP client?
If I connect to the WLAN with my Iphone, I don’t need the certificate.
Lionne Stangier
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
http://knmc8.topapothecary.eu
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Lionne Stangier wrote:
I need some help again.
Is it possible to use Freeradius without certificate on the XP client?
XP requires at least a root certificate for 802.1X authentication.
If I connect to the WLAN with my Iphone, I don’t need the certificate.
It's either doing WEP, or it's
Hi, Is there any option/configuration so that we can ignore the certificates
sent by user?
I am using eap-ttls mschapv2 and want to authenticate user by its password
only not by
certificate sent by user.
Please help
,Regards
Vijay Badola
P We have responsibility to the environment.
Is it possible to use Freeradius without certificate on the XP client?
XP requires at least a root certificate for 802.1X authentication.
Hmm .. That’s impractical. If some guests come and want to login we need to
install the certificates first.
If I connect to the WLAN with my Iphone, I
Thanks Alan,
but git pull said that local sources are up to date.
I've even downloaded them again to another server (no previous versions of
freeradius at it) according to http://git.freeradius.org/
$ git clone git://git.freeradius.org/freeradius-server.git
$ cd freeradius-server
$ git fetch
Hello,
FreeRADIUS server supports EAP-TTLS with MS-CHAPv2. But there is any way to
build client applications with libradius library using EAP-TTLS with MS-CHAPv2?
Thanks
Mugur
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Lionne Stangier wrote:
Is it possible to use Freeradius without certificate on the XP client?
XP requires at least a root certificate for 802.1X authentication.
Hmm .. That’s impractical. If some guests come and want to login we need to
install the certificates first.
That's how EAP
Alex wrote:
Thanks Alan,
but git pull said that local sources are up to date.
Or... git pull origin v2.1.x:v2.1.x
dhcp.c has this changes:
http://github.com/alandekok/freeradius-server/commit/7d44b0a545a50012aaa60ba996cc976d15745d08
Yes, that should be it.
dictionary.dhcp is from
ABULIUS, MUGUR (MUGUR) wrote:
Hello,
FreeRADIUS server supports EAP-TTLS with MS-CHAPv2. But there is any way
to build client applications with libradius library using EAP-TTLS with
MS-CHAPv2?
See wpa_supplicant, and the eapol_test program.
The FreeRADIUS library does *not* support
Vijay Badola wrote:
Hi, Is there any option/configuration so that we can ignore the
certificates sent by user?
Source code modifications. See the OpenSSL API.
As always, patches are welcome.
Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
That disagrees with what you said earlier:
1) it doesn't need certs
2) the cert is on the phone
I mean you must not manually install the certificate.
And you can't change the way some things work. EAP-TLS methods
require certificates. Don't blame me, or FreeRADIUS for that. All
other
Sources, server version and dictionary was ok.
The problem was in using old attributes:
DHCP-Agent-Circuit-Id := %{request:DHCP-Agent-Circuit-Id}
DHCP-Agent-Remote-Id := %{request:DHCP-Agent-Remote-Id}
Changed them to:
DHCP-Relay-Circuit-Id := %{request:DHCP-Relay-Circuit-Id}
Alex Jaliashvili wrote:
The problem was in using old attributes:
DHCP-Agent-Circuit-Id := %{request:DHCP-Agent-Circuit-Id}
DHCP-Agent-Remote-Id := %{request:DHCP-Agent-Remote-Id}
Uh... no. The dictionary.dhcp that is included with 2.1.10 has the
*same* definition for those attributes.
ABULIUS, MUGUR (MUGUR) wrote:
Hello,
Somebody knows why pam_radius_auth authentication module doesn’t use
libradius(3) for grater flexibility?
Because it was written before the RADIUS libraries.
And what greater flexibility do you want?
There is any equivalent PAM
authentication module
And what greater flexibility do you want?
Something like
client hostname|ip-address|ip-network {
attribute = value
}
that is specified like for clients.conf
Best Regards
Mugur
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
ABULIUS, MUGUR (MUGUR) wrote:
And what greater flexibility do you want?
Something like
client hostname|ip-address|ip-network {
attribute = value
}
that is specified like for clients.conf
Uh... the PAM library is a client. So having a client definition
doesn't make sense. And
hi list!
i'm setting up my freeradius architecture with a single proxy and
multiple servers;
here's my scenario:
freeradius server # 1 - my own server [realm local.net]
freeradius server # 2 - external server [realm ext.net]
freeradius proxy - i know everything about users i proxy towards my
Here are a few lines from my cfg files:
In radiusd.conf:
proxy_requests = yes
$INCLUDE proxy.conf
In proxy.conf:
#(this is where I want to forward)
home_server aruba {
type = coa
ipaddr = xx.yy.110.148
port = 1812
src_ipaddr = xx.yy.110.128
coa {
marco perugini wrote:
so this is my question for you: can i use rlm_realm to proxy an entire
realm without knowing the usernames just to trace auth/acct requests?
Yes. That's what realms are for. People have been doing this with
RADIUS since 1995 or so.
Alan DeKok.
-
List
newtownz wrote:
And now I'm puzzled as to how to set the Home-server-pool
as stated in recv-coa section of coa:
recv-coa {
...
update control {
Home-Server-Pool := to_aruba
}
...
}
I tried to find the way that it is done for authentication
Bishal wrote:
I am using freeradius 2.1.6 on FreeBSD 7.2 and using rp-pppoe server
3.10 on gentoo linux. During live session it is not updating
acct-input/ouput-octets.
Is the NAS sending packets with those fields? What does debug mode say?
Earlier with mpd pppoe server on freebsd it was
Hello Freeradiususers,
I m trying to get freeradius to send vlan id to some group in AD( win 2003),
but it seems that radius can not pull out the info. about the groups even that
the radius is joined in AD. Radius ignores the group and goes back to the
default or preferred Vlan. I m runing
Greetings,
I would like to be able to incorporate processing of
ADSL-Agent-Circuit-Id into my freeradius / mysql environment. I have a
stock debian / freeradius2 server with a local mysql database, and my
bras is correctly getting this attribute to me and I see it under
freeradius -X. I
Ad this into the authorize section:
authorize {
if %{ADSL-Agent-Circuit-Id} {
update request {
User-Name := %{ADSL-Agent-Circuit-Id}
Password := %{ADSL-Agent-Circuit-Id}
}
}
Make sure that to add
Tim Sylvester wrote:
Ad this into the authorize section:
authorize {
if %{ADSL-Agent-Circuit-Id} {
update request {
User-Name := %{ADSL-Agent-Circuit-Id}
Password := %{ADSL-Agent-Circuit-Id}
}
}
This opens up a security hole I wish to avoid - if someone knows what
my
circuit Id's look like, and that database is used in any context where
a
user can send an id/password to authenticate that does NOT have
ADSL-Agent-Cirtcuit-Id in it, then I've created a bunch of known user
id's for
On 07/20/2010 01:12 PM, Lionne Stangier wrote:
That disagrees with what you said earlier:
1) it doesn't need certs
2) the cert is on the phone
I mean you must not manually install the certificate.
And you can't change the way some things work. EAP-TLS methods
require certificates. Don't
This opens up a security hole I wish to avoid - if someone knows what
my
circuit Id's look like, and that database is used in any context where
a
user can send an id/password to authenticate that does NOT have
ADSL-Agent-Cirtcuit-Id in it, then I've created a bunch of known user
id's for
32 matches
Mail list logo
