Re: freeradius on IBM AIX 4.3.3

2002-02-25 Thread Chris Parker
At 03:57 PM 2/25/2002 +0100, rauscher wrote: Dear freeradius users, I tried to port freeradius-0.4 to IBM AIX 4.3.3. First I had to configure to build a Makefile. The configure came to this point: checking whether the C compiler (gcc -g -02 -D_REENTRANT -WALL -D_GNU_ SOURCE -g Wshadow

Re: Cisco VSA Attribute show again in string

2002-02-25 Thread Alan DeKok
noway noway [EMAIL PROTECTED] wrote: Please help to solve the Cisco VSA attribute problem in Detail file, it shows the attribute in the value string again like H323-Attribute = h323-attribute=value. I've enable the with_cisco_vsa_hack=yes, but it's only in pre-accouting not accounting

RE: freeradius on IBM AIX 4.3.3

2002-02-25 Thread Nico.Baggus
I tried to compile it too, but decided not to use it yet..., in the configure.in there is a string somewhere none required that one is blocking the compiles. (freeradius 0.4) regards, Nico Baggus -Original Message- From: [EMAIL PROTECTED] at INET-1 Sent: Monday, February 25, 2002

Re: freeradius on IBM AIX 4.3.3

2002-02-25 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I tried to compile it too, but decided not to use it yet..., in the configure.in there is a string somewhere none required that one is blocking the compiles. (freeradius 0.4) grumble Rather than doing something intelligent, like setting unneeded variables to

Re: Cisco VSA Attribute show again in string

2002-02-25 Thread noway noway
Alan, thanks for your quick response, I use the snapshot from 20020220. and here is my configuration file. My cisco's IOS is 12.2.5. file trimed: preprocess { huntgroups = ${confdir}/huntgroups hints = ${confdir}/hints # This hack

compile errors due to rlm_counter.c?

2002-02-25 Thread Nick Davis
I downloaded the CVS snapshot freeradius-snapshot-20020225 and went to compile it with these flags: ./configure --localstatedir=/var --sysconfdir=/etc --with-thread-pool --with-mysql-include-dir=/usr/include/mysql/ --with-mysql-lib-dir=/usr/lib/ --with-mysql-dir=/usr/bin/mysql/ the configure

Radius and IPv6

2002-02-25 Thread Joaquim José Godinho
Hi, Can anyone tell me if there is any developments regarding IPv6 suport whithin RADIUS server; that is any AAA IPv6 enabled server Thanks --Joaquim José S.L. Godinho Serviço de Computação Universidade de ÉvoraLargo Duques de Cadaval 7000 EVORA

AW: Using smbpasswd with freeradius?

2002-02-25 Thread Daniel Beuchler
If your are doing IPsec with PPTP or L2TP Tunneling the IPsec tunnel will protect the PAP Passwords because IPsec encryption wraps round the L2TP/PPTP Tunnel and with it encrypts the passwords ... The Passwords will only be exchanged in plaintext between the NAS and your Radius (not bad if your

Re: compile errors due to rlm_counter.c?

2002-02-25 Thread Alan DeKok
Nick Davis [EMAIL PROTECTED] wrote: the configure went perfectly. The problems came when I started the make. Here are the errors that it reported: rlm_counter.c: In function `counter_instantiate': rlm_counter.c:330: `GDBM_NOLOCK' undeclared (first use in this function) rlm_counter.c:330:

Re: AW: Using smbpasswd with freeradius?

2002-02-25 Thread Alan DeKok
Daniel Beuchler [EMAIL PROTECTED] wrote: The Passwords will only be exchanged in plaintext between the NAS and your Radius No. The passwords in RADIUS are NEVER sent on the network in plain text. They are ALWAYS encrypted. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: compile errors due to rlm_counter.c?

2002-02-25 Thread Alan DeKok
Andrew Kelaidis [EMAIL PROTECTED] wrote: I have similars problems with counter module. When I try to run configure I got the following message: counter module require gdbm Have you tried looking at 'config.log', as was suggested on the list earlier today? Alan DeKok. - List

Re: Using smbpasswd with freeradius?

2002-02-25 Thread Chad Miller
On Mon, Feb 25, 2002 at 01:18:33PM -0500, Kurt Hockenbury wrote: Here's my situation. I have a few thousand users, and they'd like to be able to do VPN. I have a cisco VPN box, that supports radius. I have a crypt(3) unix passwd file, and an smbpasswd file, with entries in both for all

Re: Using smbpasswd with freeradius?

2002-02-25 Thread Frank Cusack
On Mon, Feb 25, 2002 at 07:28:46PM +0100, Daniel Beuchler wrote: If your are doing IPsec with PPTP or L2TP Tunneling the IPsec tunnel will protect the PAP Passwords because IPsec encryption wraps round the L2TP/PPTP Tunnel and with it encrypts the passwords ... The Passwords will only be

Re: compile errors due to rlm_counter.c?

2002-02-25 Thread Nick Davis
grumble It's obviously too much for me to expect that gdbm doesn't have massive variations between versions. Upgrade your gdbm libraries header files. The latest version is 1.8 The alternative is to go back to the previous version of the 'counter' module. I'll try to put an

Accounting (detail) file addition?

2002-02-25 Thread Kevin Hildebrand
Is there any way to have freeradius write Stop records to the detail file for failed logins? We're used to using the Cisco AS5300 which actually sends these stop records, however the new box we're working with doesn't do it, so we'd like to simulate it. It's nice to be able to parse just one

attribute 8 'include-in-access-req'

2002-02-25 Thread Todd T. Fries
I see online at cisco it describes commands to type on every access server to set an attribute 8 to include it in the access request. http://www.cisco.com/univercd/cc/td/doc/product/software/ios121/121newft/121t/121t5/dtrattr8.htm Actually what would be useful is to have it be logged in the

Re: Accounting (detail) file addition?

2002-02-25 Thread Alan DeKok
Kevin Hildebrand [EMAIL PROTECTED] wrote: Is there any way to have freeradius write Stop records to the detail file for failed logins? We're used to using the Cisco AS5300 which actually sends these stop records, however the new box we're working with doesn't do it, so we'd like to simulate

Re: FreeRADIUS crashing on Solaris 8

2002-02-25 Thread Alan DeKok
[EMAIL PROTECTED] (Rainer Clasen) wrote: Even with the changes from the radiusd.c you sent me, this goto is still triggered. sigh I think it's the threading problems. The server still uses a few functions which aren't thread-safe, and they should be made thread safe. e.g. gmtime(),.

Re: Counter

2002-02-25 Thread Alan DeKok
Gillou [EMAIL PROTECTED] wrote: A option to add to the counter module is to set decrement of an accounting attribute instead of an increment. So, somebody can offer a prepaid service of 25h/month, and increase the customer time if he call one phone number or something similar.(if we

Re: FreeRADIUS crashing on Solaris 8

2002-02-25 Thread Todd T. Fries
While non-optimal, would a mutex lock around non threadsafe functions be a viable workaround? It at least allowed a program I've written to function safely .. Penned by Alan DeKok on Mon, Feb 25, 2002 at 05:44:48PM -0500, we have: | [EMAIL PROTECTED] (Rainer Clasen) wrote: | Even with the

Re: FreeRADIUS crashing on Solaris 8

2002-02-25 Thread Alan DeKok
Todd T. Fries [EMAIL PROTECTED] wrote: While non-optimal, would a mutex lock around non threadsafe functions be a viable workaround? It at least allowed a program I've written to function safely .. That's about as much work as fixing the code to use the thread-safe functions, instead of

username's that start with S (uppercase) get the S removed

2002-02-25 Thread Razathorn
Hello, I work for a startup local to my area. We have been using freeradius for a while with great success and decided to backend freeradius to our backend setup. I wrote a rlm auth module which does this task quite well -- it was based off the rlm_example. The strangest thing has started

LDAP ~ No Packets

2002-02-25 Thread Andy
Greetings, Before I spray any unnecessary configs around let me describe what I am (not) seeing... I can successfully authenticate against local usernames and passwords with radtest. I have went through the last three months of support emails and the Linux LDAP Imp How-To gathering settings

RE: username's that start with S (uppercase) get the S removed

2002-02-25 Thread VPM Support
I just discovered this with the Cistron Radius server. It also happened with a Capital 'C' as well. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Razathorn Sent: Monday, February 25, 2002 4:21 PM To: [EMAIL PROTECTED] Subject: username's that

heeeelp

2002-02-25 Thread wheatly
hi,everyone could i put the authentication and authorization information into the database(such as oracle),thanks wheatlyshi Ê©ºìÎÀtel: 86-21-52984755-215email: [EMAIL PROTECTED]

Re: username's that start with S (uppercase) get the S removed

2002-02-25 Thread Frank Cusack
On Mon, Feb 25, 2002 at 06:21:16PM -0600, Razathorn wrote: thing has started happening though: usernames that start with a capital S get the capital S chopped off ie... Steve turns into teve. The debug output shows a User-Name pair with the correct value in it, but in the debug messages

Re: LDAP ~ No Packets

2002-02-25 Thread Alan DeKok
Andy [EMAIL PROTECTED] wrote: I have went through the last three months of support emails and the Linux LDAP Imp How-To gathering settings for radius authentication against LDAP. When I run radtest I don't see **anything** on my LDAP machine when it is run in debug mode. And what do you

What happened to CHAP?

2002-02-25 Thread Darkshot
Sorry if this is in the FAQ, but what I've found in the FAQ so far is misleading- it mentions a module that I can't find. In short, I'm using CHAP on Max 4K and 6K boxes and in trying to get freeradius to work, I get the: Auth: rlm_unix: Attribute Password is required for authentication. Cannot

Re[2]: What happened to CHAP?

2002-02-25 Thread Darkshot
Try running freeradius in debug mode (radiusd -X), and send us the output, as well as the output of radtest (including all the arguments you are passing it it, eg radtest bob bob 1 127.0.0.1 testing123 Thanks. I appreciate the help. Here's the output from bob bob # radtest bob bob

Re: Re[2]: What happened to CHAP?

2002-02-25 Thread Andrew Tait
This doesn't look good. [/usr/local/etc/raddb/users]:2 WARNING! Changing 'Password =' to 'Password ==' ? May I suggest something like this in your users file: bobAuth-Type := Local, Password := bob Fall-Through = Yes Also, once you actually run radtest, there

Re: username's that start with S (uppercase) get the S removed

2002-02-25 Thread Razathorn
ARG.. thou art correct. I never looked at the hints file (it wasn't enabled in our previous setup and the fresh install that I did aparently put that in... i had started with a fresh raddb dir). Guilty as charged... I just left the preprocess in there since the #comment seemed to indicate that