Re: user authorization pam radius

Hello, I have downloaded pam_radius for my redhat linux 9 to integrate it with RSA SecurID Authentication technology.Can you please send me the steps to configure the linux 9 client to communicate with radius server? Waiting for your reply. Warm regards, Rakesh Mukherjee Yahoo! India

Re: linux newby attempts freeradius (unsuxesfull)

Fred Zinsli wrote: Rather that tell me what I an doing wrong (apart from attempting this) can someone point me to where I can find out what I need to know. Firstly, HTML is forbidden on the list. Did you read the rules before subscribing? http://www.freeradius.org/list/users.html Scenario:

PEAP TLS establishment and certificates

Hi everyone, I would like to configure a freeradius 1.0.4 with PEAP protocol and OpenSSL certificates. My first question is where should I place the generated certificates with Openssl? As I am developing a client's interface, can anybody tell me how to create the Client_Hello packet? Thank you

Re: Require realm suffix

Ben Thompson wrote: I have set up FreeRADIUS so that I am using the relam format [EMAIL PROTECTED] I have succesfully got this working by adding the relevent realm to proxy.conf and setting authhost and acchost to LOCAL. Currently when someone logs without specifying a realm, they are still

Re: Can I add extra fields to the radius accounting database?

Miguel Angel Quiles wrote: I've got freeradius 1.0.2 on a SUSE 9.3. I was thinking if I could add a new field to the radius accounting. I'm using mysql. I already added the field to the radacct table in the radius database. And I've tried to modify the sql.conf file in the raddb directory.

Re: freeradius-mysql-clid

Sam Njenga wrote: I have downloaded the latest freeradius and compiled ok. I have tested it and it works fine. I would like to authenticate calls based on Caller-Id. What do I have to have in the tables. A small example will be highly appreciated. These links may help:

Digest and MD5

All, For the Digest, the MD5 hashed response is, as far as I can make out, generated as follows :- A1 = H[Digest-User-Name:Realm:Password] A2 = H[Digest-Method:URI] KD1 = H[Hexdump(A1):Nonce] KD2 = H[KD1:Hexdump(A2)] KD = H[KD2] - - Which should match the final received Digest-Reponse

Digest test

All, Have run the test as suggested in the doc/rlm_digest file and have got an odd output message from freeradius saying it can't find the Digest-Nonce element. In the radiusd.conf file I'm authenticating but not authorizing digest. Users file has the following: #--- testAuth-Type := Digest,

Authenticating between a Cisco 3640 and radius server

I setup free radius on a linux box and am trying to authenticate a user from a cisco 3640 router. Below is the output I am receiving when using radiusd -xxyz -l stdout. The router will not let me login, so something isn't working properly. Any suggestions??? I set the radius server up to

Re: Can I add extra fields to the radius accounting database?

Thanks Nicolas, I've changed %{Tunnel-Type}, I also had another mistake. I changed everything and it works perfect. Thanks. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Moving a freeradius installation

Hi, I have built freeradius-1.04 from source and installed it to the default directories (for example, /usr/local/etc/raddb for the configuration files). I now wish to move the whole installation to /usr/radius so that it will be possible to tar the directory and copy it to other severs. I know

Can't start freeradius - auth bind error

Title: Can't start freeradius - auth bind error Hi, can not start freeradius: Starting RADIUS server: Tue Sep 6 13:08:47 2005 : Info: Starting - reading configuration files ... auth bind: Address already in use [FAILED] What is it? Regards, - List info/subscribe/unsubscribe? See

Re: Require realm suffix

On Tue, 2005-09-06 at 10:49 +0200, Nicolas Baradakis wrote: Ben Thompson wrote: I have set up FreeRADIUS so that I am using the relam format [EMAIL PROTECTED] I have succesfully got this working by adding the relevent realm to proxy.conf and setting authhost and acchost to LOCAL.

Authentication using LDAP on port 636

Hi, I installed freeradius 1.0.1 for RHEL4 from RedHat network. As an ldap server I have Sun Directory server 5.2 patch3 with SSL enabled. I have plenty of applications using port 636 to access LDAP (ypldapd from padl, /etc/ldap.conf on linux, Mozilla address book, etc..) . With freeradius

Script to process authentications accounting

Is there any information about using a script with freeradius to process authentications? TIA - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Script to process authentications accounting

-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, September 06, 2005 2:56 PM To: freeradius-users@lists.freeradius.org Subject: Script to process authentications accounting Is there any information about using a script

Re: Can't start freeradius - auth bind error

NECTIS NetVoice Sales wrote: can not start freeradius: Starting RADIUS server: Tue Sep 6 13:08:47 2005 : Info: Starting - reading configuration files ... auth bind: Address already in use [FAILED] It looks like there is another instance of FreeRADIUS already running, or another program

Re: Script to process authentications accounting

[EMAIL PROTECTED] wrote: Is there any information about using a script with freeradius to process authentications? rlm_exec rlm_perl (not stable) rlm_python (not stable) -- Groeten, Regards, Salutations, Thor Spruyt M: +32 (0)475 67 22 65 E: [EMAIL PROTECTED] W: www.thor-spruyt.com

RE: Moving a freeradius installation

I know I can configure which directories radusd uses in radiusd.conf, but is there any way to make radiusd look in /usr/radius/etc for radiusd.conf without rebuilding? radiusd -d /usr/radius/etc/raddb You could have trouble with the radius module libraries though. I see there is a

Re: DIGEST-MD5 and LDAP Backend

Daniel Corbe [EMAIL PROTECTED] wrote: I'm passing a Digest auth request from my SIP server to my Radius server and then to my LDAP back-end. The only way I can get it to work is if I store the userPassword attribute on the LDAP server in plain text. Ideally I'd like to be able to store

Re: Digest and MD5

Iandc Davies [EMAIL PROTECTED] wrote: For the Digest, the MD5 hashed response is, as far as I can make out, generated as follows :- See doc/rfc/draft-sterman-aaa-sip-00.txt All info apart from the Password come from the incoming VAS AVP packet. The Password seems to be sourced from a

users who are listed in /usr/local/etc/raddb/users cannot authenticate.

I have a number of users whom are listed in my /usr/local/etc/raddb/users file in this format: User1 password=4978 fall-through=1 user2 password=knjy500 fall-through=1 user3 password=8556 fall-through=1 user4 password=8556 fall-through=1 user5 password=rocky