Do you remember Halloween is coming?

2002-10-30 Thread Halloween
Do you remember Halloween is coming? Take your chance to send a Free greeting from: http://cards.web-space-station.com/halloween-greeting-card.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unresponsive child

2002-10-30 Thread Igor Chen
I did two things: 1) re-compiled radius without -O2 2) removed wrong attributes from rlm_acct_unique config (in radiusd.conf) Seems like it stopped dumping to core. I can not do such experiments on a production server in ISP :) When it screwed up i hardly got grey-haired with all that... The

Re: compiling with Kerberos fails

2002-10-30 Thread Brian Johnson
Ah, hmm. You also need RLM_CFLAGS = -I/usr/kerberos/include and that should be it... Ah hah! I thought something should've gone there, but unfortunately I couldn't find anything that told me what I should put. Thanks for clearing that up! I added it to my original Makefile and gave it

Debug mode and CTRL-C

2002-10-30 Thread delphi
Hi! While in debug mode, after Ctrl-C server does mot exit clearly. Problem in: radiusd.c line 940 /* * If we're debugging, then a CTRL-C will cause the * server to die immediately. Use SIGTERM to shut down * the server cleanly in that case.

Re: Debug mode and CTRL-C

2002-10-30 Thread delphi
also I think that it is not so bad to add /* * Delete PID file to indicate * normal shutdown */ unlink(pid_file); or if (dont_fork == FALSE) unlink(pid_file); in if (do_exit) {...} block. - List

Oracle and radius authentication

2002-10-30 Thread Ricardo Gadea
Hi all, Is it possible to give Radius authentication to oracle users through the radius module for PAM? I mean, the authentication based on the Operating System that supports the database, and redirected to a Radius server. The main idea is to give strong authentication to oracle applications

rlm_counter: Could not find Check item value pair

2002-10-30 Thread Svetlana Vyslanko
Hi, Please help me in my problem. I am new in this discussion. I've installed freeradius-0.7.1 now. I used freeradius-0.1.0 before and it was worked. In users file I define Daily-Session-Time for user ppkons: ppkons Daily-Session-Time 7200, Auth-Type := Reject

Re: Debug mode and CTRL-C

2002-10-30 Thread Alan DeKok
[EMAIL PROTECTED] wrote: While in debug mode, after Ctrl-C server does mot exit clearly. Yes... if you had seen one of my previous messages on this topic, you would know that this is intentional, and WHY it's intentional. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Oracle and radius authentication

2002-10-30 Thread Alan DeKok
Ricardo Gadea [EMAIL PROTECTED] wrote: Is it possible to give Radius authentication to oracle users through the radius module for PAM? I don't see why not. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeRADIUS dialup admin

2002-10-30 Thread ajoncas
Hello, I was wondering if there was an oracle driver for the dialup admin. Thanks. Adam Joncas - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

ScanMail Message: To Recipient Match eManager setting and take action.

2002-10-30 Thread System Attendant
eManager Notification * The following mail was blocked since it contains sensitive content. Source mailbox: [EMAIL PROTECTED] Destination mailbox(es): [EMAIL PROTECTED] Rule/Policy: Profanity Action: Quarantine to C:\Program

Re: Undefined reference

2002-10-30 Thread Alan DeKok
Gene Parks [EMAIL PROTECTED] wrote: I am installing this on Solaris 8. Already have 2 copies running on 2 other Solaris 8 machines but for some reason this one wants to get me trouble. modules.o: In function `setup_modules': /export/home/users/freeradius-0.7.1/src/main/modules.c:611:

Re: Unresponsive child

2002-10-30 Thread Alan DeKok
Igor Chen [EMAIL PROTECTED] wrote: The main reason of core dumping was delay after sending request to database. Trigger on UPDATE became too slow (UPDATE request was handled ~40 - 60 sec.) This problem should be addressed in the documentation in flaming letters 10 feet high. If the back-end

Re[2]: Debug mode and CTRL-C

2002-10-30 Thread delphi
Yes... if you had seen one of my previous messages on this topic, you would know that this is intentional, and WHY it's intentional. shrug Maybe I've missed something...but I don't find reason while 'dirty' exit was done intentionally for debugging - List info/subscribe/unsubscribe?

Re: Unresponsive child

2002-10-30 Thread Igor Chen
Of course i understand that :) I didn't even try to accuse radius developers, but IMHO sql back-end should give any glue (debugging info) to let the administrator solve the problem. On Wed, 30 Oct 2002, Alan DeKok wrote: Igor Chen [EMAIL PROTECTED] wrote: The main reason of core dumping was

VSAs in mysql database

2002-10-30 Thread Brian Johnson
I am trying to setup a reply attribute in the radgroupreply table in mysql. It is a Redback VSA specified in the dictionary.redback file. I have checked that it is included in the dictionary file and it is. I have STFWd and RTFMd for two days with no luck. I just want to send the Redback VSA for

Re: VSAs in mysql database

2002-10-30 Thread Alan DeKok
Brian Johnson [EMAIL PROTECTED] wrote: I am trying to setup a reply attribute in the radgroupreply table in mysql. It is a Redback VSA specified in the dictionary.redback file. I have checked that it is included in the dictionary file and it is. I have STFWd and RTFMd for two days with no

Re: Re[2]: Debug mode and CTRL-C

2002-10-30 Thread Alan DeKok
[EMAIL PROTECTED] wrote: shrug Maybe I've missed something...but I don't find reason while 'dirty' exit was done intentionally for debugging Because you can still send it SIGTERM. CTRL-C means die now. SIGTERM means please die. In debugging mode, and without child threads, the

Re: VSAs in mysql database

2002-10-30 Thread delphi
Simply add it to the table. insert into radgroupreply (groupname,attribute,value,op) values ('mygroup','Client_DNS_Pri','1.1.1.1','='); insert into radgroupreply (groupname,attribute,value,op) values ('mygroup','Client_DNS_Sec','1.1.1.2','='); I am trying to setup a reply attribute in the

Little LAN and Freeradius. It's possible?

2002-10-30 Thread kubimax
Hello everybody. I create a mini lan with 2 PC's, A) 192.168.0.1 and B) 192.168.0.2. The S.O. is Linux RH7.2 . Every PC is equipped with ethernet card Realtek, and ping test from A to B and vice-versa don't have any problem. All is ok. On B personal computer I have installed FREERADIUS

also, how to call a external program from Accounting section in radiusd.conf

2002-10-30 Thread Raymond Chen
Raymond

RE: VSAs in mysql database

2002-10-30 Thread Brian Johnson
I'm a little shaky on the whole operator thing, but otherwise yes using the == operator. I tried the following entries: Client_DNS_Pri = 1.2.3.4 Redback:Client_DNS_Primary = 1.2.3.4 Any other ideas? Brian J. -Original Message- From: [EMAIL PROTECTED]

Re: VSAs in mysql database

2002-10-30 Thread Alan DeKok
Brian Johnson [EMAIL PROTECTED] wrote: I'm a little shaky on the whole operator thing, but otherwise yes using the == operator. You probably don't want to do that. Read the sample 'users' file to see examples of reply attributes, and the operators they use. Read the 'users' man page, to get

Re: Little LAN and Freeradius. It's possible?

2002-10-30 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I want send B pc from A with all services availables (telnet, http, ftp ecc...). My necessity is authenticate all connection from A to B with radius and CHAP type of authentication (login and password) Why? YP (or NIS) does exactly the same thing, and is probably

Re: mysql radcheck table

2002-10-30 Thread Alan DeKok
Mark Terry [EMAIL PROTECTED] wrote: currently i'm using this but i am unsure whether it is correct: +-+--+---++--+ | id | UserName | Attribute | Value | op | +-+--+---++--+ | 311 | 102523 | User-Password |

Re: mysql radcheck table

2002-10-30 Thread Chris Parker
At 05:48 PM 10/30/2002 +, Mark Terry wrote: all, can anyone give me an example radcheck table entry for using freeradius with mysql, please? currently i'm using this but i am unsure whether it is correct: +-+--+---++--+ | id | UserName |

pap authentication problem

2002-10-30 Thread Ulrich Walcher
I have freeradius-0.7.1 working with ldap for autz/auth and mysql for acct. The passwords are stored SHA encrypted on the ldap. I can get the password but rlm_pap fails with SHA1 encryption. The password can be reproduced with the OpenLDAP tool slappasswd: rootjul# slappasswd -h {SHA} -s test

Re: Re: mysql radcheck table

2002-10-30 Thread Mark Terry
On Wednesday 30 Oct 2002 5:54 pm, you wrote: At 05:48 PM 10/30/2002 +, Mark Terry wrote: all, can anyone give me an example radcheck table entry for using freeradius with mysql, please? currently i'm using this but i am unsure whether it is correct:

how to use external program in both authorize and accounting secction

2002-10-30 Thread Raymond Chen
Thanks Raymond - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem with primary-dns

2002-10-30 Thread Juergen Weiss
High List, we ae using freeradius 0.7 on an RedHat 7.3 System in conjunction with openldap 2.0.34. Things work quite well ( CHAP/PAP/EAP-MD5 ). One router requires additional attributes like Ascend-Client-Primary-DNS for example. Authentification seems to be ok. How do I provide these additional

RE: VSAs in mysql database

2002-10-30 Thread Brian Johnson
Never mind... Screwball me didn't know about man -a. :P Thanks. It works like a charm now that I got my head pulled out. :) Brian J. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-users-admin;lists.cistron.nl] On Behalf Of Alan DeKok Sent: Wednesday, October 30,

New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread McKay, Raymond
Greetings all, For the good of all mankind, I have written an updated EAP/TLS HOWTO that answers a lot of the questions and fills in the holes in the existing HOWTOS. It is available at http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm. I don't claim to be an overall expert on that matter

Re: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread Artur Hecker
hi Raymond that's surely a good thing. some comments here: in Chapter 3: Dynamic encryption keying and re-keying requires the MPPE module within FreeRADIUS. This is a part of the CVS version ONLY!!! The release version does not include it. - it's not an MPPE module, it's the ability to add

Re: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread McKay, Raymond
Thank you for your update Artur. I have made a few updates based on your recommendations it's not an MPPE module, it's the ability to add correclty formatted MPPE-* attributes to the Access Accept within the rlm_eap_tls module. Otherwise the people will begin to look for rlm_mppe and that's

Re: compiling with Kerberos fails

2002-10-30 Thread Steve Langasek
On Wed, Oct 30, 2002 at 08:27:09AM -0500, Brian Johnson wrote: So I decided to see if I had more love with the nightly snapshot (thanks for fixing that in time for the snapshot, Steve!). Did a configure on it and it looked good, so I tried a make. The bad news is, I didn't get through the

Unsubscribe

2002-10-30 Thread Torry Crass
Unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

AIX and PAM authentication

2002-10-30 Thread Ricardo Gadea
Hi all, Does anyone now if AIX supports PAM authentication? And the PAM to RADIUS authentication module? Thanks! Ricardo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread Artur Hecker
Hi Raymond I have updated the MPPE info so that it clarifies the MPPE keying extension within rlm_eap. For now I am going to leave the info on the CVS snapshot as the keying ability is not within the release version. If someone could give me a heads up when it exists in the release

RE: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread Antonios Lazaridis
Hello. XP without SP1 works perfectly. In SP1 there is no EAP/MD5 for wireless anymore... I should update my EAP/MD5 document. You mean that Microsoft removed EAP support for wireless completely? You now need extra software to have 802.1x with windows XP and SP1? If so, any idea why this

RE: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread McKay, Raymond
No, they only removed EAP/MD5 support or at least hid it really well. Support for EAP/TLS and support for PEAP are included now in SP1 Raymond McKay IT Manager / Network Administrator Funnybone Interactive Vivendi Universal Games -Original Message- From: Antonios Lazaridis

Re: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread Artur Hecker
Antonios Lazaridis wrote: Hello. XP without SP1 works perfectly. In SP1 there is no EAP/MD5 for wireless anymore... I should update my EAP/MD5 document. You mean that Microsoft removed EAP support for wireless completely? You now need extra software to have 802.1x with windows XP

RE: New EAP/TLS + MPPE WinXP HOWTO

2002-10-30 Thread Antonios Lazaridis
somebody on the list said to me that eap/md5 has been removed only for wireless interfaces... i've never verified that - wasn't it you??? No, not me... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html