Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 16 Jun 2005 11:48:35 +0200
From:      Marcin Jessa <lists@yazzy.org>
To:        Andrew Thompson <thompsa@freebsd.org>,  Paul.Hampson@PObox.com (Paul Hampson), "Alan DeKok" <aland@ox.org>
Cc:        freebsd-isp@freebsd.org, edgars@mikrotik.com, normunds@mikrotik.com, freeradius-users@lists.freeradius.org
Subject:   Re: Radius server with web/gui interface
Message-ID:  <20050616114835.7ff9342d.lists@yazzy.org>
In-Reply-To: <20050616080134.GA10529@heff.fud.org.nz>
References:  <a64c109e05061423266dad8f00@mail.gmail.com> <42B0F729.80703@netxp.com.au> <a64c109e05061521047adf549d@mail.gmail.com> <20050616094503.3fd09a8d.lists@yazzy.org> <20050616080134.GA10529@heff.fud.org.nz>

next in thread | previous in thread | raw e-mail | index | archive | help
On Thu, 16 Jun 2005 20:01:34 +1200
Andrew Thompson <thompsa@freebsd.org> wrote:

> On Thu, Jun 16, 2005 at 09:45:03AM +0200, Marcin Jessa wrote:
> > On Thu, 16 Jun 2005 07:04:24 +0300
> > Abu Khaled <khaled.abu@gmail.com> wrote:
> > 
> > > On 6/16/05, phil grainger <lists@netxp.com.au> wrote:
> > > > 
> > > > you can mod the icradius cgi interface to work with freeradius,
> > > > works fine.
> > > > 
> > > 
> > > Very interesting.  How much modification is required?
> > > When it comes to setting up a icradius/freeradius, mysql and apache
> > > then I can do it. I know only the basics of c/perl/php/... (Just how
> > > to write a Hello World and sometimes I need help writing one), so any
> > > help is appreciated
> > > 
> > 
> > I thought you didnt want to run freeradius becouse of the security issues.
> > And now all the sudden it became secure becouse of a different web interface?
> > And dialupadmin would work fine, you dont need to recode interface of icradius.
> > Email thompsa@FreeBSD.org and ask him if he's working on new port of freeradius 1.0.3.
> > If not, I can do that.
> 
> Ive been aware of 1.0.3 for a week now but it has known bugs.
> 
> "06 June, 2005: Minor problems in version 1.0.3 mean that we will be
> releasing 1.0.4 in a day or so. Please wait until then to upgrade."
> 
> 1.0.4 was meant to be out by now and I have it confirmed that will be
> only a few more hours. It will be updated as soon as its out.
> 

Is there a way you could include a new dictionary.mikrotik as a patch for the port?
And add it as $INCLUDE dictionary.mikrotik in the dictionary file?
I suppose it will not make it to the 1.0.4 release (Paul, Alan?).
The old one is inaccurate.
Here is the new dictionary.mikrotik :

#       http://www.mikrotik.com
#
#       http://www.mikrotik.com/Documentation/manual_2.8/dictionary.mikrotik
#
VENDOR          Mikrotik        14988

ATTRIBUTE       Recv-Limit              1       integer         Mikrotik
ATTRIBUTE       Xmit-Limit              2       integer         Mikrotik
ATTRIBUTE       Mikrotik-Group          3       string          Mikrotik
ATTRIBUTE       Wireless-Forward        4       integer         Mikrotik
ATTRIBUTE       Wireless-Skip-Dot1x     5       integer         Mikrotik
ATTRIBUTE       Wireless-Enc-Algo       6       integer         Mikrotik
ATTRIBUTE       Wireless-Enc-Key        7       string          Mikrotik
ATTRIBUTE       Rate-Limit              8       string          Mikrotik
ATTRIBUTE       Mikrotik-Realm          9       string          Mikrotik

# MikroTik Values

VALUE           Wireless-Enc-Algo       No-encryption           0
VALUE           Wireless-Enc-Algo       40-bit-WEP              1
VALUE           Wireless-Enc-Algo       104-bit-WEP             2


Cheers,
Marcin

P.S The dictionary file on mikrotik's website is inaccurate as well. The realm and group values are not changed to match the current ones even tho I asked them to correct that.





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050616114835.7ff9342d.lists>