Problem (?) with multiple dhcp sites and 2.0.5

2008-06-16 Thread Evgeniy Kozhuhovskiy

I'm trying to configure two dhcp sites on different interfaces.

part of first site:
listen {
ipaddr = *
port = 67
type = dhcp
interface = eth1.940
}
second:
listen {
ipaddr = *
port = 67
type = dhcp
interface = eth0
}

ERROR: Failed to open socket: cannot bind socket: Address already in use
/usr/local/freeradius205pre/etc/raddb/sites-enabled/dhcp-iptv[90]: Error 
binding to port for 0.0.0.0 port 67



Ok, i'm trying to specify exactly ip addresses of interfaces - but 
nothing works - because dhcp requests came with 255.255.255.255 
destination address - and freeradius does not recieve this packets.




--
With best regards, Evgeniy Kozhuhovskiy,
Leader of Services team,
Minsk State Phony Network, RUE Beltelecom.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Deploying Freeradius in a HA environment

2008-06-16 Thread A . L . M . Buxey
Hi,

 I would have to dispute that. We've seen NASes across the range (Cisco, 
 3Com, Extreme) fail to move to the backup/secondary radius server they've 
 got configured.

report such bugs to the manufacturers of the NAS devices and double
check your device configs - several of them have quirky ways of failing
over. if you do want to point to a single IP etc then just standard
L4 balancing will work - but ensure that the FR boxes are sharing
the same information if you rely on accounting records for decisions
(eg simultaneous usage)

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Deploying Freeradius in a HA environment

2008-06-16 Thread Arran Cudbard-Bell

[EMAIL PROTECTED] wrote:

Hi,

  
I would have to dispute that. We've seen NASes across the range (Cisco, 
3Com, Extreme) fail to move to the backup/secondary radius server they've 
got configured.



report such bugs to the manufacturers of the NAS devices and double
check your device configs -
 several of them have quirky ways of failing
over. if you do want to point to a single IP etc then just standard
L4 balancing will work
Yes, though if you're using EAP make sure that requests from a NAS 
aren't spread over multiple servers.

 - but ensure that the FR boxes are sharing
the same information if you rely on accounting records for decisions
(eg simultaneous usage)
  


If you're look for a generic solution, layer 7 load balancers are the 
answer; We are considering them because NAS based fail-over schemes are 
never perfect, you always have to have a few missing responses before 
the NAS realises something is up and does something about it.


--
Arran Cudbard-Bell ([EMAIL PROTECTED]),
Authentication, Authorisation and Accounting Officer,
Infrastructure Services (IT Services), 
E1-1-08, Engineering 1, University Of Sussex, Brighton, BN1 9QT

DDI+FAX: +44 1273 873900 | INT: 3900

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Deploying Freeradius in a HA environment

2008-06-16 Thread Michael Schwartzkopff
Am Montag, 16. Juni 2008 10:09 schrieb Arran Cudbard-Bell:
 [EMAIL PROTECTED] wrote:
  Hi,
 
  I would have to dispute that. We've seen NASes across the range (Cisco,
  3Com, Extreme) fail to move to the backup/secondary radius server
  they've got configured.
 
  report such bugs to the manufacturers of the NAS devices and double
  check your device configs -
   several of them have quirky ways of failing
  over. if you do want to point to a single IP etc then just standard
  L4 balancing will work

Load balancing and high availability can be easily accieved by using Linux 
Virtual Server (LVS) and Linux-HA (heartbeat). If you use the localhost 
feature of LVS this will even work with two machines.


-- 
Dr. Michael Schwartzkopff
MultiNET Services GmbH
Addresse: Bretonischer Ring 7; 85630 Grasbrunn; Germany
Tel: +49 - 89 - 45 69 11 0
Fax: +49 - 89 - 45 69 11 21
mob: +49 - 174 - 343 28 75

mail: [EMAIL PROTECTED]
web: www.multinet.de

Sitz der Gesellschaft: 85630 Grasbrunn
Registergericht: Amtsgericht München HRB 114375
Geschäftsführer: Günter Jurgeneit, Hubert Martens

---

PGP Fingerprint: F919 3919 FF12 ED5A 2801 DEA6 AA77 57A4 EDD8 979B
Skype: misch42

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Problem (?) with multiple dhcp sites and 2.0.5

2008-06-16 Thread Alan DeKok
Evgeniy Kozhuhovskiy wrote:
 I'm trying to configure two dhcp sites on different interfaces.
...
 ERROR: Failed to open socket: cannot bind socket: Address already in use
 /usr/local/freeradius205pre/etc/raddb/sites-enabled/dhcp-iptv[90]: Error
 binding to port for 0.0.0.0 port 67

  Grab an update from CVS.  It turns out (not suprisingly) that sockets
have to be bound to an interface before they bind to an IP address.

  I've also updated the debug printing routines, so that the interface
name is printed when the server starts up.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: freeradius and client ip

2008-06-16 Thread King, Adam
Hi,
How do UI configure the Packet_Src_IP-Address?
Thanks


 

Adam King
Network Engineer
[EMAIL PROTECTED]


InTechnology plc
Support 0845 120 7070
Telephone 01423 85
Facsimile 01423 858866
www.intechnology.com
 
-Original Message-

From:
[EMAIL PROTECTED]
rg
[mailto:[EMAIL PROTECTED]
radius.org] On Behalf Of Alan DeKok
Sent: 13 June 2008 12:36
To: FreeRadius users mailing list
Subject: Re: freeradius and client ip

King, Adam wrote:
 Hi,
 I am building a radius server for an ADSL platform, the test server is
 built on version 1.1.3 and the radius set up works nicely, thanks to
the
 detailed documentation! 
 However, one extra necessity is the ability to accept/reject a user
 based on where they are connecting from, I have spent several hours
 looking around the internet and looking at the freeradius files trying
 to see how this can be implemented but am stuck. I wonder if you could
 help? 

  Use 2.0.5.  Then match on Packet-Src-IP-Address.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
This is an email from InTechnology plc, Central House, Beckwith Knowle, 
Harrogate, UK, HG3 1UG. Registered in England 3916586.

The contents of this message may be privileged and confidential. If you have 
received this message in error, you may not use,

disclose, copy or distribute its content in anyway. Please notify the sender 
immediately.

All messages are scanned for all viruses.

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: freeradius and client ip

2008-06-16 Thread Alan DeKok
King, Adam wrote:
 How do UI configure the Packet_Src_IP-Address?

  You don't.  You match it:

if (Packet-Src-IP-Address == 1.2.3.4) {
...
}

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


dhcp server (already in use lease verify)

2008-06-16 Thread EvilEzh

Does DHCP server verify is lease already in use or not ?
And another question is about multiple interfaces.
As i understand i need to run several dhcp instances for each interface, or 
maybe it is possible to add attribute on which interface dhcp packet was 
received if i run on multiple interfaces.



-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: dhcp server (already in use lease verify)

2008-06-16 Thread Alan DeKok
EvilEzh wrote:
 Does DHCP server verify is lease already in use or not ?

  No.  It receives DHCP packets, and hands them to your policy.  It then
sends the response.

 And another question is about multiple interfaces.
 As i understand i need to run several dhcp instances for each interface,
 or maybe it is possible to add attribute on which interface dhcp packet
 was received if i run on multiple interfaces.

  I would suggest pointing each interface (listen section) at a
different virtual server.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


LDAP authorization - Attribute User-Password is required for authentication

2008-06-16 Thread Neil Marjoram
I have now read many How-To's but don't seem to be able to find an 
answer, and I hope someone on the list can help.


I am using a Netgear WAG102 Wireless access point to autorise to Radius, 
which in turn uses LDAP. radtest from the command line of the local host 
authenticates no problem, but I understand that it is a possibility that 
the Netgear passes the Mac address of the laptop through to use as a 
password.


I am unable to understand how to map this in LDAP and keep getting :
 Attribute User-Password is required for authentication

I am using the radiusProfile for each user in LDAP that I allow access 
via wireless.


I am pretty new to Radius so am I sure I have some config wrong here 
somewhere. I am currently testing on Ubuntu 8.04, and have Freeradius 1.1.7.


Thanks,

Neil.

rad_recv: Access-Request packet from host 192.168.0.232:1263, id=13, 
length=181

Message-Authenticator = 0x518adcf7d4427415acb16df56084b363
Service-Type = Framed-User
User-Name = test
Framed-MTU = 1488
Called-Station-Id = 001E2A10E483:UCL AP TEST BG
Calling-Station-Id = 0019E3021FD8
NAS-Identifier = UCLAP
NAS-Port-Type = Wireless-802.11
Connect-Info = CONNECT 54Mbps 802.11g
EAP-Message = 0x0201000d016e65696c6d61726a
NAS-IP-Address = 192.168.0.232
NAS-Port = 1
NAS-Port-Id = STA port # 1
  Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 1
  modcall[authorize]: module preprocess returns ok for request 1
  rlm_eap: EAP packet type response id 1 length 13
  rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
  modcall[authorize]: module eap returns updated for request 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for test
radius_xlat:  '(uid=test)'
radius_xlat:  'dc=adastral
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in dc=adastral
filter (uid=test)
rlm_ldap: checking if remote access for test is allowed by radiusFilterId
rlm_ldap: Added password $1$GL8tD.Lb$fkslenzW4.q4Nzy2rQ726. in check items
rlm_ldap: No default NMAS login sequence
rlm_ldap: looking for check items in directory...
rlm_ldap: Adding sambaNTPassword as NT-Password == 
0x46343741374534567832456324435433936324537453141313236323538433441
rlm_ldap: Adding sambaLMPassword as LM-Password == 
0x34443841324541424567883503945423134413342313038463346413643423644
rlm_ldap: Adding radiusCallingStationId as Calling-Station-Id == 
0019e3021fd8

rlm_ldap: Adding radiusAuthType as Auth-Type == LDAP
rlm_ldap: looking for reply items in directory...
rlm_ldap: Adding radiusFilterId as Filter-Id = 0019E3021FD8
rlm_ldap: user test authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
  modcall[authorize]: module ldap returns ok for request 1
modcall: leaving group authorize (returns updated) for request 1
  rad_check_password:  Found Auth-Type ldap
auth: type LDAP
  Processing the authenticate section of radiusd.conf
modcall: entering group LDAP for request 1
rlm_ldap: - authenticate
rlm_ldap: Attribute User-Password is required for authentication.
  modcall[authenticate]: module ldap returns invalid for request 1
modcall: leaving group LDAP (returns invalid) for request 1
auth: Failed to validate the user.
Login incorrect: [test] (from client UCL port 1 cli 0019E3021FD8)
Delaying request 1 for 1 seconds
Finished request 1
Going to the next request
--- Walking the entire request list ---
Waking up in 1 seconds...
rad_recv: Access-Request packet from host 192.168.0.232:1263, id=13, 
length=181

Sending Access-Reject of id 13 to 192.168.0.232 port 1263


Starting - reading configuration files ...
reread_config:  reading radiusd.conf
Config:   including file: /etc/freeradius/proxy.conf
Config:   including file: /etc/freeradius/clients.conf
Config:   including file: /etc/freeradius/snmp.conf
Config:   including file: /etc/freeradius/eap.conf
Config:   including file: /etc/freeradius/sql.conf
 main: prefix = /usr
 main: localstatedir = /var
 main: logdir = /var/log/freeradius
 main: libdir = /usr/lib/freeradius
 main: radacctdir = /var/log/freeradius/radacct
 main: hostname_lookups = no
 main: snmp = no
 main: max_request_time = 30
 main: cleanup_delay = 5
 main: max_requests = 1024
 main: delete_blocked_requests = 0
 main: port = 0
 main: allow_core_dumps = no
 main: log_stripped_names = no
 main: log_file = /var/log/freeradius/radius.log
 main: log_auth = yes
 main: log_auth_badpass = no
 main: log_auth_goodpass = no
 main: pidfile = /var/run/freeradius/freeradius.pid
 main: user = freerad
 main: group = freerad
 main: usercollide = no
 main: lower_user = no
 main: lower_pass = no
 main: nospace_user = no
 main: nospace_pass = no
 main: checkrad = /usr/sbin/checkrad
 main: proxy_requests = yes
 proxy: retry_delay = 5
 proxy: retry_count = 3
 proxy: synchronous = no
 proxy: default_fallback = yes
 proxy: dead_time = 120
 

Re: LDAP authorization - Attribute User-Password is required for authentication

2008-06-16 Thread Alan DeKok
Neil Marjoram wrote:
 I am using a Netgear WAG102 Wireless access point to autorise to Radius,
 which in turn uses LDAP. radtest from the command line of the local host
 authenticates no problem, but I understand that it is a possibility that
 the Netgear passes the Mac address of the laptop through to use as a
 password.
 
 I am unable to understand how to map this in LDAP and keep getting :
  Attribute User-Password is required for authentication

  You have forced Auth-Type := LDAP in your configuration.  Don't do
that.  i.e.  You have:

rlm_ldap: Adding radiusAuthType as Auth-Type == LDAP

  DELETE the radiusAuthType from your LDAP configuration.  It is NOT
needed, and it's making authentication fail.

  It also looks like you've deleted most of the modules from the
authorize section.  Don't do that.  Use the default configuration.
It's there for a purpose: it works.

  It also looks like you haven't configured PEAP or TTLS.  You MUST
configure them for wireless authentication.

 I am using the radiusProfile for each user in LDAP that I allow access
 via wireless.
 
 I am pretty new to Radius so am I sure I have some config wrong here
 somewhere. I am currently testing on Ubuntu 8.04, and have Freeradius
 1.1.7.

  I understand why Ubuntu chose to use 1.1.7, but still Version
2.0.5 is much, much better.

  My recommendation for a quick fix:

1) Install 2.0.5.  It's much better than 1.1.7.
2) start with default config
3) configure the LDAP module as you have done already (modules section,
un-comment ldap in the authorize and authenticate sections of
raddb/sites-available/* (use grep ldap *.
4) do NOT set radiusAuthType in your LDAP directory.
5) Test with 'radtest'.  It should work.
6) Test with a wireless client (un-check validate server certificate)
   It should work.

  2.0.5 makes it trivial to get PEAP and TTLS working.  It's a lot
harder to do that in 1.1.7.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


TLS Error with Freeradius 2: unkown_ca

2008-06-16 Thread Julian Stöver

Hi
I'm running Freeradius2 with EAP-TLS. I've created new certificates  
and putted them into my certs-dir. Radius starts with no errors. But  
if I try to login, I get this TLS Error:



rlm_sql (sql): Released sql socket id: 3
++[sql] returns ok
  rad_check_password:  Found Auth-Type EAP
auth: type EAP
+- entering group authenticate
  rlm_eap: Request found, released from the list
  rlm_eap: EAP/tls
  rlm_eap: processing type tls
  rlm_eap_tls: Authenticate
  rlm_eap_tls: processing TLS
  eaptls_verify returned 7
  rlm_eap_tls: Done initial handshake
  rlm_eap_tls:  TLS 1.0 Handshake [length 0467], Certificate
-- verify error:num=18:self signed certificate
  rlm_eap_tls:  TLS 1.0 Alert [length 0002], fatal unknown_ca
TLS Alert write:fatal:unknown CA
TLS_accept:error in SSLv3 read client certificate B
rlm_eap: SSL error error:140890B2:SSL  
routines:SSL3_GET_CLIENT_CERTIFICATE:no certificate returned

rlm_eap_tls: SSL_read failed in a system call (-1), TLS session fails.
  eaptls_process returned 13
  rlm_eap: Freeing handler
++[eap] returns reject
auth: Failed to validate the user.
Login incorrect: [julian/via Auth-Type = EAP] (from client  
GFS-03-01 port 286 cli 001e.5280.15c6)

Delaying reject of request 11 for 1 seconds
Going to the next request


But I don't know why freeradius has a problem with the ca cert.

thanks for helping me


Here's the startup log and the hole request:
startup.log

Starting - reading configuration files ...
including configuration file /etc/freeradius/radiusd.conf
including configuration file /etc/freeradius/proxy.conf
including configuration file /etc/freeradius/clients.conf
including configuration file /etc/freeradius/snmp.conf
including configuration file /etc/freeradius/eap.conf
including configuration file /etc/freeradius/sql.conf
including dictionary file /etc/freeradius/dictionary
main {
prefix = /usr
localstatedir = /var
logdir = /var/log/freeradius
libdir = /usr/lib/freeradius
radacctdir = /var/log/freeradius/radacct
hostname_lookups = no
max_request_time = 30
cleanup_delay = 5
max_requests = 1024
allow_core_dumps = no
pidfile = /var/run/freeradius/freeradius.pid
user = freerad
group = freerad
checkrad = /usr/sbin/checkrad
debug_level = 0
proxy_requests = no
 security {
max_attributes = 200
reject_delay = 1
status_server = no
 }
}
 client localhost {
ipaddr = 127.0.0.1
require_message_authenticator = no
secret = testing123
nastype = other
 }
 client 172.17.255.1 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.2 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-02
 }
 client 172.17.255.3 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-03
 }
 client 172.17.255.4 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.5 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.6 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.11 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.12 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.13 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.14 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.15 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.16 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
 client 172.17.255.21 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-03-01
 }
 client 172.17.255.22 {
require_message_authenticator = no
secret = 4n3kc092ldnS3mfL2ndL
shortname = GFS-01-01
 }
radiusd:  Loading Realms and Home Servers 
 proxy server {
retry_delay = 5
retry_count = 3
default_fallback = no
dead_time = 120
wake_all_if_all_dead = no
 }
 home_server localhost {
ipaddr = 127.0.0.1
port = 1812
type = auth
secret = testing123
response_window = 20
max_outstanding = 65536
zombie_period = 40
status_check = status-server
   

Error: rlm_radutmp

2008-06-16 Thread Neil Jones
Hello. We keep getting the following error in the radius log but do not
appear to have any issues. I have Googled it and see many, many references
to it but none explain what causes the error or what the impact is. Thank
you for your input, Neil


Error: rlm_radutmp: Logout entry for NAS 7206VXR_2A port 1090519040 has
wrong ID

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Hi

2008-06-16 Thread mbaoyone
Is this this HOW_TO  
(http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO) up  
to date to make freeradius_conneceted to ldap or there is something  
else to do ?


- thanx!


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Hi

2008-06-16 Thread Sambuddho Chakravarty
Hello
 For ldap you need to configure the module/ldap file and not active
directory (which I think uses EAP).

Thanks
Sambuddho
On Mon, 2008-06-16 at 20:21 +0200, [EMAIL PROTECTED] wrote:
 Is this this HOW_TO  
 (http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO) up 
  
 to date to make freeradius_conneceted to ldap or there is something  
 else to do ?
 
 - thanx!
 
 
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error: rlm_radutmp

2008-06-16 Thread Alan DeKok
Neil Jones wrote:
 Hello. We keep getting the following error in the radius log but do not
 appear to have any issues. I have Googled it and see many, many references
 to it but none explain what causes the error or what the impact is.

  ?  There should be dozens of references to that message on this list.

 Error: rlm_radutmp: Logout entry for NAS 7206VXR_2A port 1090519040 has
 wrong ID

  Your NAS is likely sending packets out of order.  If you don't use the
radutmp module, just delete it from the configuration, and the message
will go away.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: TLS Error with Freeradius 2: unkown_ca

2008-06-16 Thread Alan DeKok
Julian Stöver wrote:
 I'm running Freeradius2 with EAP-TLS. I've created new certificates and
 putted them into my certs-dir. Radius starts with no errors. But if I
 try to login, I get this TLS Error:
...
   rlm_eap_tls:  TLS 1.0 Handshake [length 0467], Certificate
 -- verify error:num=18:self signed certificate
   rlm_eap_tls:  TLS 1.0 Alert [length 0002], fatal unknown_ca

  You have given the client a self-signed certificate.  You have given
the server a completely *different* set of certificates.  Since there is
no common point of reference, the user cannot authenticate.

  You need to give the client a certificate that is signed by the server
certificate.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re : Hi

2008-06-16 Thread Joel MBA OYONE
so the HOW_TO about active diretory/freeradius seem to be enough. I asked cause 
i noticed that most of the tips on www.freeradius.org point to 1.1x and i use 
2.0.x

thanx for the answer

 
MBA OYONE Joël
Lot. El Firdaous
Bât GH20, Porte A 204, Appt 8
2 Oulfa
Casablanca - Maroc
 
Tél. : +212 69 25 85 70



- Message d'origine 
De : Sambuddho Chakravarty [EMAIL PROTECTED]
À : FreeRadius users mailing list freeradius-users@lists.freeradius.org
Envoyé le : Lundi, 16 Juin 2008, 18h39mn 07s
Objet : Re: Hi

Hello
For ldap you need to configure the module/ldap file and not active
directory (which I think uses EAP).

Thanks
Sambuddho
On Mon, 2008-06-16 at 20:21 +0200, [EMAIL PROTECTED] wrote:
 Is this this HOW_TO  
 (http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO) up 
  
 to date to make freeradius_conneceted to ldap or there is something  
 else to do ?
 
 - thanx!
 
 
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



  
_ 
Envoyez avec Yahoo! Mail. Une boite mail plus intelligente http://mail.yahoo.fr-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

dhcp server launch error

2008-06-16 Thread Haralds Ulmanis
2.0.6 (just from csv)
Tried to launch dhcp server (nothing changed in default dhcp site 
configuration)... got error:

radiusd:  Loading Virtual Servers 
server dhcp {
 modules {
No DHCP-Message-Type attribute
}
Errors initializing modules
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Free Radius FreeBSD

2008-06-16 Thread Devinder Singh
Hi

Which version of Free Radius shoud i use for FreeBSD I plan to use Free BSD
7.0.

SHoud i use the Free Radius Free BSD version on the web site

http://portsmon.freebsd.org/portoverview.py?category=netportname=freeradius

-- 
Devinder
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Free Radius resource

2008-06-16 Thread Do Nguyen Ha

hi

when is this book launch, i am looking for it
and think many people are looking for it

Ha`


2008/6/14 Alan DeKok [EMAIL PROTECTED]:

Rogelio wrote:

Hi all, just started delving into RADIUS and have begun to take the
plunge with FreeRADIUS.

Any suggested books on the subject?  I see quite a few on the subject:


 The O'Reilly book is good if you know absolutely nothing about RADIUS.
 But 1/3 is from the RFC's (paraphrased), and another 1/3 is from the
FreeRADIUS documentation.

 The Wiley book has about 30 pages on RADIUS, the rest is about
technologies that you don't use.  And the RADIUS stuff is not that 
useful.


 Then, there's my book.  It's at about 200 pages, and has been at that
level for over a year.  I'm trying to find time to either finish it, or
to clean it up, and put it on the web.

 Alan DeKok.
-
List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


2.0.5 Compile error on SLES10SP1, check-radiusd-config file missing

2008-06-16 Thread Graham Marsh
Hi all, I'm attempting to compile 2.0.5 on SLES10SP1 and getting the
following error. I noticed another similar posting but not sure if
there was any fix. Appreciate any advice, thanks, Graham:

Processing files: freeradius-server-utils-2.0.5-0
Finding  Provides: /usr/lib/rpm/find-provides freeradius-server
Finding  Requires: /usr/lib/rpm/find-requires freeradius-server
Finding  Supplements: /usr/lib/rpm/find-supplements freeradius-server
Requires(rpmlib): rpmlib(PayloadFilesHavePrefix) = 4.0-1
rpmlib(CompressedFileNames) = 3.0.4-1
Requires: freeradius-server-libs = 2.0.5 /bin/sh /usr/bin/perl
libc.so.6 libc.so.6(GLIBC_2.0) libc.so.6(GLIBC_2.1)
libc.so.6(GLIBC_2.2) libc.so.6(GLIBC_2.3) libc.so.6(GLIBC_2.3.4)
libc.so.6(GLIBC_2.4) libcrypto.so.0.9.8 libfreeradius-eap-2.0.5.so
libfreeradius-radius-2.0.5.so libgdbm.so.3 libgdbm_compat.so.3
libnsl.so.1 libpcap.so.0 libpthread.so.0 libpthread.so.0(GLIBC_2.0)
libresolv.so.2 libssl.so.0.9.8
Processing files: freeradius-server-dialupadmin-2.0.5-0
Processing files: freeradius-server-devel-2.0.5-0
Processing files: freeradius-server-debuginfo-2.0.5-0
RPM build errors:
File not found:
/var/tmp/freeradius-server-2.0.5-build/usr/sbin/check-radiusd-config
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Free Radius FreeBSD

2008-06-16 Thread Scott Lambert
On Tue, Jun 17, 2008 at 09:08:40AM +0800, Devinder Singh wrote:
 Hi
 
 Which version of Free Radius shoud i use for FreeBSD I plan to use Free BSD
 7.0.
 
 Shoud i use the Free Radius Free BSD version on the web site
 
 http://portsmon.freebsd.org/portoverview.py?category=netportname=freeradius


Use FreeRADIUS 2.x

net/freeradius2

http://portsmon.freebsd.org/portoverview.py?category=netportname=freeradius2


-- 
Scott LambertKC5MLE   Unix SysAdmin
[EMAIL PROTECTED]

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Free Radius FreeBSD

2008-06-16 Thread Devinder Singh
Hi Scott

Thanks

I will giev it a go now. We tried on Free BSD and when i ran using MYSQL it
gave a lot of erros. ependency missing.

Regards
Devinder

2008/6/17 Scott Lambert [EMAIL PROTECTED]:

 On Tue, Jun 17, 2008 at 09:08:40AM +0800, Devinder Singh wrote:
  Hi
 
  Which version of Free Radius shoud i use for FreeBSD I plan to use Free
 BSD
  7.0.
 
  Shoud i use the Free Radius Free BSD version on the web site
 
 
 http://portsmon.freebsd.org/portoverview.py?category=netportname=freeradius


 Use FreeRADIUS 2.x

 net/freeradius2


 http://portsmon.freebsd.org/portoverview.py?category=netportname=freeradius2


 --
 Scott LambertKC5MLE   Unix SysAdmin
 [EMAIL PROTECTED]

 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-- 
Devinder
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius security

2008-06-16 Thread Zahra Bahar
Hi,
I have freeradius using ldap DS for aaa. my radius supports vpn users and uses 
PAP. 
what is the best way for secure user_passwords in connections?
 
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: dhcp server launch error

2008-06-16 Thread Alan DeKok
Haralds Ulmanis wrote:
 2.0.6 (just from csv)
 Tried to launch dhcp server (nothing changed in default dhcp site 
 configuration)... got error:
...
 No DHCP-Message-Type attribute

  You have to edit the dictionary file, and add a $INCLUDE of
dictionary.dhcp.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: 2.0.5 Compile error on SLES10SP1, check-radiusd-config file missing

2008-06-16 Thread Alan DeKok
Graham Marsh wrote:
 Hi all, I'm attempting to compile 2.0.5 on SLES10SP1 and getting the
 following error. I noticed another similar posting but not sure if
 there was any fix. Appreciate any advice, thanks, Graham:
..
 RPM build errors:
 File not found:
 /var/tmp/freeradius-server-2.0.5-build/usr/sbin/check-radiusd-config

  Edit suse/freeradius.spec, and delete the line that references
check-radiusd-config.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html