From owner-freebsd-wireless@FreeBSD.ORG Thu May 21 17:18:08 2015 Return-Path: Delivered-To: freebsd-wireless@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:1900:2254:206a::19:1]) (using TLSv1.2 with cipher AECDH-AES256-SHA (256/256 bits)) (No client certificate requested) by hub.freebsd.org (Postfix) with ESMTPS id 5BF546A7; Thu, 21 May 2015 17:18:08 +0000 (UTC) Received: from mail-wi0-x233.google.com (mail-wi0-x233.google.com [IPv6:2a00:1450:400c:c05::233]) (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits)) (Client CN "smtp.gmail.com", Issuer "Google Internet Authority G2" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id F2BFE1A99; Thu, 21 May 2015 17:18:07 +0000 (UTC) Received: by wicmc15 with SMTP id mc15so19431171wic.1; Thu, 21 May 2015 10:18:06 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=message-id:date:from:user-agent:mime-version:to:cc:subject :references:in-reply-to:content-type:content-transfer-encoding; bh=PTE6epJpWN3rt/LuXNg3YUAwbjltYwtS6MZXTdcrT68=; b=OQDPaHyksZdDqzZD1llHmVinCmIgnuaBxRZmwxCAivYrmkXRgag4AGQH6wBfgQaERC NPBbVTilxVE2dXF6+BjQ/gE7B18qehxxRFZO/UZlOi00KXdJNbd7y+1E5525lKZHaMNL e3ugtrPs8WI7ke3L8+8MlCnB2uow+bDfRK1fEH43gfhMRb1WUwWYPaB8CsN5bi2Ot5xo R3/sepxT5YXNdPIGwya1fqRgm5j+LzfPIwz+IWn1lxUFERbZuE4BLyAadfid0h9tzwzl GrPmjmtKdv5q9Z6iZ+mgjo5q1gjV446k/NEkRpxxFobZ0qewo6awu/WP0Y0Ca346zTwl 8l3A== X-Received: by 10.194.175.65 with SMTP id by1mr7326360wjc.152.1432228686389; Thu, 21 May 2015 10:18:06 -0700 (PDT) Received: from ?IPv6:2001:4200:7000:100:590d:7849:477:386a? ([2001:4200:7000:100:590d:7849:477:386a]) by mx.google.com with ESMTPSA id fa8sm3569109wib.14.2015.05.21.10.18.04 (version=TLSv1.2 cipher=ECDHE-RSA-AES128-GCM-SHA256 bits=128/128); Thu, 21 May 2015 10:18:05 -0700 (PDT) Message-ID: <555E1346.8010509@gmail.com> Date: Thu, 21 May 2015 19:17:58 +0200 From: Johann User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:31.0) Gecko/20100101 Thunderbird/31.7.0 MIME-Version: 1.0 To: Adrian Chadd , Willem@offermans.rompen.nl CC: "freebsd-wireless@freebsd.org" Subject: Re: hostapd + freeradius can't connect References: <01e701d08d75$fed02bd0$fc708370$@gmail.com> <003c01d08dbe$6018b900$204a2b00$@gmail.com> <555CB658.6040103@gmail.com> <555CC261.8080505@gmail.com> <20150521083957.GB5453@vpn.offrom.nl> In-Reply-To: Content-Type: text/plain; charset=utf-8; format=flowed Content-Transfer-Encoding: 7bit X-BeenThere: freebsd-wireless@freebsd.org X-Mailman-Version: 2.1.20 Precedence: list List-Id: "Discussions of 802.11 stack, tools device driver development." List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 21 May 2015 17:18:08 -0000 I've tried it this morning on 11.0-CURRENT #172 r280972: Thu Apr 2 and it worked. Here is my configs. rc.conf wlans_ath0="wlan0" create_args_wlan0="wlanmode hostap country ZA" ifconfig_wlan0="mode 11g channel 6" hostapd_enable="YES" cloned_interfaces="bridge0" ifconfig_bridge0="addm vr0 addm wlan0 up" ifconfig_vr0="146.64.5.5/24 up" defaultrouter="146.64.5.1" hostapd.conf interface=wlan0 ctrl_interface=/var/run/hostapd ctrl_interface_group=wheel ssid=testAP hw_mode=g channel=6 wpa=2 ignore_broadcast_ssid=0 wpa_pairwise=CCMP TKIP wpa_key_mgmt=WPA-EAP wpa_pairwise=TKIP CCMP rsn_pairwise=CCMP ieee8021x=1 own_ip_addr=146.64.5.5 auth_server_addr=146.64.8.20 auth_server_port=1812 auth_server_shared_secret=test123 Regards Johann On 2015/05/21 06:47 PM, Adrian Chadd wrote: > That's the plan. Once I fix a couple other things I'm going to go see > why it currently isn't working. > > > > -adrian > > On 21 May 2015 at 01:39, Willem Offermans wrote: >> Dear FreeBSD friends, >> >> Sorry to interrupt here, but I got triggered by this e-mail thread. >> >> Do I understand correctly that it is possible to connect hostapd with >> FreeRadius and OpenLDAP? Would it be possible to do the authentication of >> wireless access over the ldap server? If yes, do I need FreeRadius to >> intermediate between hostapd and OpenLDAP? >> >> Is there some documentation around to setup hostapd + OpenLDAP or hostapd + >> FreeRadius + OpenLDAP under FreeBSD? >> >> Sorry, to interrp >> >> On Wed, May 20, 2015 at 07:20:33PM +0200, Johann wrote: >>> On 2015/05/20 06:29 PM, Johann wrote: >>>> On 2015/05/16 08:03 AM, Adrian Chadd wrote: >>>>> Hi, >>>>> Has this ever worked? >>>> Yes. >>>> >>>> I got it working in April 2012 on FreeBSD 8 and 9. I've used a >>>> FreeRadius server and a FreeBSD client with wpa_supplicant to test >>>> it. >>>> >>>> At that stage you had to enable the eap_server when you compile hostapd >>>> >>>> # echo HOSTAPD_CFLAGS+=-DEAP_SERVER >> /etc/src.conf >>>> # cd /usr/src/usr.sbin/wpa/hostapd >>>> # make >>>> # make install >>>> >>>> but Bernhard Schmidt fixed it so that EAP_SERVER was enabled by default. >>>> >>>> >>>> Here is the configs that I used: >>>> >>>> rc.conf >>>> hostname="AP-vlan" >>>> wlans_ath0="wlan0" >>>> create_args_wlan0="wlanmode hostap country ZA" >>>> ifconfig_wlan0="146.64.5.5/24 mode 11g channel 6" >>>> defaultrouter="146.64.5.1" >>>> hostapd_enable="YES" >>>> cloned_interfaces="bridge0" >>>> ifconfig_bridge0="addm sis0 addm wlan0 up" >>>> ifconfig_sis0="up" >>>> >>>> >>>> hostapd.conf >>>> interface=wlan0 >>>> ctrl_interface=/var/run/hostapd >>>> ctrl_interface_group=wheel >>>> ssid=testAP >>>> hw_mode=g >>>> channel=6 >>>> >>>> wpa=1 >>>> wpa_pairwise=CCMP TKIP >>>> wpa_key_mgmt=WPA-EAP >>>> wpa_pairwise=TKIP CCMP >>>> rsn_pairwise=CCMP >>>> >>>> Hope it helps >>>> >>>> Regards >>>> Johann >>>> _______________________________________________ >>>> freebsd-wireless@freebsd.org mailing list >>>> http://lists.freebsd.org/mailman/listinfo/freebsd-wireless >>>> To unsubscribe, send any mail to >>>> "freebsd-wireless-unsubscribe@freebsd.org" >>>> >>> Looks like this part of hostapd.conf got lost. >>> >>> ieee8021x=1 >>> own_ip_addr=146.64.5.5 >>> auth_server_addr=146.64.8.25 >>> auth_server_port=1812 >>> auth_server_shared_secret=same-as-on-freeradius >>> >>> Johann >>> >>> _______________________________________________ >>> freebsd-wireless@freebsd.org mailing list >>> http://lists.freebsd.org/mailman/listinfo/freebsd-wireless >>> To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org" >> -- >> Met vriendelijke groeten, >> With kind regards, >> Mit freundlichen Gruessen, >> De jrus wah, >> >> Wiel >> >> ************************************* >> W.K. Offermans >> _______________________________________________ >> freebsd-wireless@freebsd.org mailing list >> http://lists.freebsd.org/mailman/listinfo/freebsd-wireless >> To unsubscribe, send any mail to "freebsd-wireless-unsubscribe@freebsd.org"