FreeRadius: PPTP - RADIUS and client IP address

monideth

Hi All,

I haven;t checked the forums for a while since I posted this initial thread.

However, I am pleasantly surpised that some work has been done on the freeradius package :)

Just wanted to ask whether the new freeradius package is now available. I checked the package version and the latest one was 1.1.2 - so I installed this. However, I did not get any changes to the interface to allow config of the IP address in the account configuration.

Is the 1.1.2 version meant to include this feature - or is this feature still needs to be patched in and released?

Thanks for all your hard work.

Regards,

Mon

databeestje

Have the radius extensions made it into CVS yet?

jeroen234

the last time i looked they were not yett in

monideth

Any updates on when these new features will be available?

sbyoon

Now I'm using it and it works great. PPTP users are now given the ip address from freeradius.

I tried 1.0.1-SNAPSHOT-01-13-2007 today but I found that this feature does not added on this snapshot.

Is there some problem to add this function into future pfsense version???

sullrich

Not sure what you mean? Can you send a patch?

sbyoon

Jeroen and I already attached the diffs files for this functions on this thread. Pls read previous posts.@sbyoon:

Here are the diffs for vpn.inc and vpn_pptp.php.
I used vpn.inc version 1.12 and vpn_pptp.php version 1.38.

sullrich

That is not the proper sequence for sending patches. Please read:

http://wiki.pfsense.com/wikka.php?wakka=SubmittingPatches

sbyoon

Sorry, if the sequece was wrong. I checked the link but it does not meantion how to make patch. Could adv me how to make the patch?

databeestje

from the console.

pkg_add -r diffutils
rehash
gdiff -urN <original file=""><new file="">And to put it into a file

gdiff -urN <original file=""><new file="">> patch.txt

Then you can download or fetch the file from the diagnostics menu.</new></original></new></original>

sbyoon

I'm confused. What is the difference between 'diff' and 'patch'?
I've made the diff files with "diff -rub oldfile newfile > file.diff" and attached it this thread as requested by Hoba.

I made the diff files as instructed in below link.
http://forum.pfsense.org/index.php/topic,2972.0.html
And I used the latest files from pfsense cvs and made the diff file with it.

I think your instruction is also for just making diff files. Then, are diff and patch same thing?

Now I attached the diff files again and am sending them to coreteam@pfsense.com as well.

vpn.inc.diff.txt
vpn_pptp.php.diff.txt
freeradius.inc.diff.txt
freeradius.xml.dif.txt

sbyoon

I sent the diff files for freeradius.inc and freeradius.xml that were made by jeroen before. But I think he has updated one which have more fuctions.

Glasswalker

Hey, I was following this thread hoping it would help with our current issues.

I currently have pfsense using pptp and authenticating against our PDC (Win2k3 using microsoft internet authentication service) I know it's microsoft, but our entire company is AD driven and we need to integrate to a single directory service for centralization.

anyway this works fine for authentication, but what we would really like is the ability to have granular firewall control to VPN users.

So basically I am just checking, since microsoft's method also supports assigning static IPs to users, will this new code follow that, and actually assign the ip that radius tells it to? and if so, when will this feature be available to users?

We are hoping to impliment some kind of granular VPN setup very soon, so if there is a way we can apply it (if I just need to apply diffs to the above mentioned code or what) let me know.

Thanks!

sullrich

I have probed other devs and they are interested.

Please email me a final patch set to sullrich@gmail.com

databeestje

currently interested in merging radius code, however lack of time prohibits me from merging it this month. Perhaps somewhere after mid march.

monideth

Databeestje,

Any update on merging the radius code?

Regards,

Mon

databeestje

Unfortunately I have not had the time at all to even look at it. There have been some other pressing matters I needed to take care of.

Also I have been a bit burned out recently the prevented me from participating in the project. As time permits i'll look at it.

monideth

databeestje,

Thanks for the update. Sorry to hear you are so busy.

Can anybody else take on this responsibility? I would if I could but I can't! i.e. i'm just a mere mortal.

Regards,

Mon

monideth

BUMP

monideth

Any update on this - it has been quite a while now!