pfSense Support Subscription

Author Topic: NEW Package: freeRADIUS 2.x  (Read 105163 times)

0 Members and 2 Guests are viewing this topic.

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2754
  • Karma: +1/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #210 on: January 31, 2012, 10:49:05 am »
Hi again,

to create the USERS file like you posted above you can do the following - I suppose that there are no other entries in the users file:

  • FreeRADIUS => Users => Add a user (+)
  • Set any username and set any password (because this are requiered fields) and the scroll down to "Additional RADIUS Attributes on the TOP of this entry" and paste the following code. Take attention: If you miss whitespaces or something the syntax will be incorrect and radiusd will not start.
Code: [Select]
DEFAULT Group == "hotspot", Simultaneous-Use := 4| Fall-Through = 1|DEFAULT Simultaneous-Use := 1| Fall-Through = 1|DEFAULT Framed-Protocol == PPP| Framed-Protocol = PPP,| Framed-Compression = Van-Jacobson-TCP-IP|DEFAULT Hint == "CSLIP"| Framed-Protocol = SLIP,| Framed-Compression = Van-Jacobson-TCP-IP|DEFAULT Hint == "SLIP"| Framed-Protocol = SLIPThat's it for users file.

please take attention: in users file "hotspot" is all small letters, your old ldap config has a capital letter at first, your new has two capital letters. don't know if this is case sensitive or not.

The following is not present in your old config so you should probably set this in the GUI to "no". But test with both/mixed.
  • Compare Check Items
  • Do XLAT
  • Access Attribute Used For Allow

the last thing is:
please replace the line 1200 in freeradius.inc like I posted before - the click "save" on FreeRADIUS => LDAP again to write the changes to the ldap file.

Now we should have your config like it was on your old debian server - hopefully it will work. :-)

Then we only have to find a way around your "unlang" part and solve this with users file - if possible.

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #211 on: January 31, 2012, 10:54:06 am »
Hi Nachtfalke,

thanx for your support. Can check it tommorow. Now i am at home an can´t check it.

Gruß, Valle ;-)

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2754
  • Karma: +1/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #212 on: January 31, 2012, 01:34:55 pm »
Update pkg v1.5.9:

  • Added: The fields "username/password" or "mac address" are no requiered fields anymore. This allows us to make an entry in users/mac file with custom options like "DEFAULT Group == ldap" without username/password. Further this allows us to make en complete empty entry in GUI as a placeholer. Nothing will be put into users/mac file so we are able to put there something else later. Users/mac file has the disadvantage that it will be processed from top to down and a re-arrangement of the entries with drag&drop isn't able from GUI.

@valshare
You should update to latest version - this changes were made just for you ;-)
But now you must not change line 1200 but line 1212 in freeradius.inc  :P

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #213 on: January 31, 2012, 01:39:53 pm »
Hi Nachtfalke,

will test it firstly tomorrow and send back feedback as soon as possible.

Thanx!

Valle

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2754
  • Karma: +1/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #214 on: January 31, 2012, 02:11:22 pm »
Hi Nachtfalke,

will test it firstly tomorrow and send back feedback as soon as possible.

Thanx!

Valle

I know, I know. Don't stress :D :D

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #215 on: February 01, 2012, 03:51:37 am »
Hi Nachtfalke,

i have testet the new package but withouth success.

First i found out that the users settings are not needed.

But there is anything missing in the settings on pfsense but i don´t know whats missing.

Regards, Valle

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #216 on: February 01, 2012, 04:00:58 am »
now it works!!!

i have copied my site-avaible/default to the pfsense server and restartet freeradius.

the problem is, that the entry

Code: [Select]
       Auth-Type LDAP {
                ldap
                if (LDAP-Group == "hotspot") {
                        noop
                }
                else {

                        reject

                }
        }

is missing in the default file. If have made the change in freeradius.inc on line 1212 and pushed on "save" in the ldap settings and restartet the server.
« Last Edit: February 01, 2012, 04:44:13 am by valshare »

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2754
  • Karma: +1/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #217 on: February 01, 2012, 04:51:26 am »
(...)
is missing in the default file. If have made the change in freeradius.inc on line 1212 and pushed on "save" in the ldap settings and restartet the server.

So after you made the changes on line 1212 the above entry is there, correct ?

And without the changes on this line 1212 you cannot authenticate a user ?


Can you post the complete output of radiusd -X when authenticationg with and without the freeradius.inc changes ?
delete passwords. Perhaps we can find another way to work around this entry just from GUI.

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #218 on: February 01, 2012, 05:20:38 am »
(...)
is missing in the default file. If have made the change in freeradius.inc on line 1212 and pushed on "save" in the ldap settings and restartet the server.

So after you made the changes on line 1212 the above entry is there, correct ?

no, there are no changes in the default file.


Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2754
  • Karma: +1/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #219 on: February 01, 2012, 07:48:16 am »
Use the attached file (freeradius.inc), copy it to /usr/local/pkg and then got to
FreeRADIUS => LDAP => Save

Check before in FreeRADIUS => View config => virtual-server-default

PS: Did it work with the "DEFAULT" entries from webGUI in FreeRADIUS => Users ?

Thanks
« Last Edit: February 01, 2012, 07:51:03 am by Nachtfalke »

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #220 on: February 01, 2012, 08:11:58 am »
Hi,

i have copied your file in the right place and set the rights to 755.
Go to Services => LDAP => pushed the save button

View the config => virtual-server-default

but it changed nothing :(

checked it with the console:

Code: [Select]
[2.0.1-RELEASE][root@pfsense.xxx.local]/usr/local/pkg(220): cat freeradius.inc | grep hot
        $varmodulesldapenableauthenticate = "Auth-Type LDAP {" . "\n\t\t\tldap" . "\n\t\t\tif (LDAP-Group == " . '"hotspot") {' . "\n\t\t\t\tnoop" . "\n\t\t\t}" . "\n\t\t\telse {" . "\n\t\t\t\treject" . "\n\t\t\t}" . "\n\t\t\t$varmodulesldap2enableauthenticate" . "\n\t}";
[2.0.1-RELEASE][root@pfsense.xxx.local]/usr/local/pkg(221): cat /usr/local/etc/raddb/sites-available/default | grep hot
[2.0.1-RELEASE][root@pfsense.xxx.local]/usr/local/pkg(222):

sorry, but what can i do wrong?

Offline Nachtfalke

  • Hero Member
  • *****
  • Posts: 2754
  • Karma: +1/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #221 on: February 01, 2012, 09:31:11 am »
Hi,

i have copied your file in the right place and set the rights to 755.
Go to Services => LDAP => pushed the save button

View the config => virtual-server-default

but it changed nothing :(

checked it with the console:

Code: [Select]


[2.0.1-RELEASE][root@pfsense.xxx.local]/usr/local/pkg(220): cat freeradius.inc | grep hot
        $varmodulesldapenableauthenticate = "Auth-Type LDAP {" . "\n\t\t\tldap" . "\n\t\t\tif (LDAP-Group == " . '"hotspot") {' . "\n\t\t\t\tnoop" . "\n\t\t\t}" . "\n\t\t\telse {" . "\n\t\t\t\treject" . "\n\t\t\t}" . "\n\t\t\t$varmodulesldap2enableauthenticate" . "\n\t}";
[2.0.1-RELEASE][root@pfsense.xxx.local]/usr/local/pkg(221): cat /usr/local/etc/raddb/sites-available/default | grep hot
[2.0.1-RELEASE][root@pfsense.xxx.local]/usr/local/pkg(222):

sorry, but what can i do wrong?

did you rename it from freeradius.inc.txt to freeradius.inc ?
For me it is working.

Code: [Select]
Auth-Type LDAP {
ldap
if (LDAP-Group == "hotspot") {
noop
}
else {
reject
}
#ldap2
}
« Last Edit: February 01, 2012, 09:32:49 am by Nachtfalke »

Offline valshare

  • Full Member
  • ***
  • Posts: 103
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #222 on: February 01, 2012, 10:32:18 am »
yes, i have rename the freeradius.inc.txt file to freeradius.inc as you can see in the code.
grep found the change you have made. I will try it again later.

strange  ??? But big thnx for your support.

Offline etudiant_22

  • Newbie
  • *
  • Posts: 13
  • Karma: +0/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #223 on: February 03, 2012, 11:09:30 am »
Bonjour,

je fais pars de mon problème dans ce forum en espérant que quelqu'un puisse m'aider.

J'ai donc installé et configuré pfsense et plus précisément le portail captif pour que lorsque que des clients wifi de mon réseau veulent se conecter, il leur faut insérer leur login et mot de passe.

Avec les compte sur la base local tout marche bien.

Maintenant je voudrai mettre en place freeradius (le package de pfsense), et c'est la que je bloque.

- Je créer un utilisateur dans la base local de radius pour tester.
- J'active l'authentification radius dans le service portail captif et la quand j
- Je lance mon navigateur web
- je rentre le login et mot de passe  et la j'ai ce message :

No valid RADIUS responses received


Merci d'avance

Offline marcelloc

  • Hero Member
  • *****
  • Posts: 10004
  • Karma: +5/-0
    • View Profile
Re: NEW Package: freeRADIUS 2.x
« Reply #224 on: February 03, 2012, 11:28:01 am »
etudiant_22,

I know you love your mother language but please translate your question to english or post it on french forum.

Cordialement,

Marcello Coutinho