Re: How do I get FR 0.9.1 to work on FreeBSD

2003-09-13 Thread Alex Kasatkin
Hi! configure --without-threads. regards. Guy Fraser [EMAIL PROTECTED] wrote: I seem to remeber people saying that gethostbyname_r is not thread safe, but I have not seen how to fix the problem. Just straight answers, no feeble excuses for not answering or flames. Thank You -- Guy

Re: How do I get FR 0.9.1 to work on FreeBSD

2003-09-13 Thread Oliver Graf
On Fri, Sep 12, 2003 at 03:12:58PM -0600, Guy Fraser wrote: I seem to remeber people saying that gethostbyname_r is not thread safe, but I have not seen how to fix the problem. gethostbyname_r is the threadsafe version, which is not present in *BSD (some of them...). Just straight answers, no

Re: EAP/TTLS logging

2003-09-13 Thread Fastbyte
Hi Michael, that´s right. Is there any possibility to do such thing in freeradius? And the rest of problem is to see in inner authentification in log file a real username. Michael Brown wrote: This thread from the radiator list may shed some light on the situation:

POSTGRESQL + FREERADIUS 0.9.1 configuration help

2003-09-13 Thread boggss
hi list, good day to all... i have setup my postgresql 7.3.2 and freeradius 0.9.1 on a freebsd 4.8 machine. i have successfully setup the postgresql and freeradius to support dial up services. i tried to test the original configuration of freeradius 0.9.1 using ntradping..i was able to

Re: lrad_rand()

2003-09-13 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- Alan == Alan DeKok [EMAIL PROTECTED] writes: Short of opening /dev/random and seeding it myself, is there something that is more strongly seeded already present in the tree? Alan No. I would suggest opening /dev/random, but that blocks, which

Re: lrad_rand()

2003-09-13 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- Alan == Alan DeKok [EMAIL PROTECTED] writes: Alan Michael Richardson [EMAIL PROTECTED] wrote: Short of opening /dev/random and seeding it myself, is there something that is more strongly seeded already present in the tree? Alan No. I would

FreeRadius EAP Postgresql

2003-09-13 Thread rolphin
Hi, I'm currently configuring a Freeradius 0.9.1 with EAP-TLS support and Postgresql. If I put in 'users' file DEFAULT Auth-Type := EAP Everything works find, but if someone gets a certificate he can logs in. I want to permit only user using postgresql. What should I put into radcheck,

User and bw Statistics.

2003-09-13 Thread Martin Jessa
Hi guys. I have set up a system based on FreeBSD router running poptop for vpn which authorizes my users against radius server with SQL backend. Everything works great except statistics. The problem is I cannot see any of the users who are loged in nor how much bandtwith they use. I use

Re: How do I get FR 0.9.1 to work on FreeBSD

2003-09-13 Thread Alan DeKok
Oliver Graf [EMAIL PROTECTED] wrote: There is always the possibility to add a mutex locking fallback version to libradius... perhaps I'll write one this weekend. That would be the simplest thing to do. Any objections to such a thread-safe helper for systems without reentrant calls from the

Bandwith limiting of wireless users.

2003-09-13 Thread Martin Jessa
Hi guys. I have a setup for wireless clients where I use pptp vpn tunnels for my users to be able to auth and connect. The vpn daemon (poptop) talks to freeradius server which against gets user info from MySQL database. I use dialup_admin to be able to easly add new users. Everything works

Re: lrad_rand()

2003-09-13 Thread Alan DeKok
Michael Richardson [EMAIL PROTECTED] wrote: Or, how about if we call gettimeofday() after every read() from the network, and stir the tv_usec into the lrad_rand() pool? Or should I just suck a copy of yarrow in? I would rather save the contents of the random pool, and re-load them when the

Re: FreeRadius EAP Postgresql

2003-09-13 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I'm currently configuring a Freeradius 0.9.1 with EAP-TLS support and Postgresql. That won't work. Everything works find, but if someone gets a certificate he can logs in. That's what EAP-TLS is supposed to do. (I don't know If I should put Auth-Type here)

Re: Bandwith limiting of wireless users.

2003-09-13 Thread Alan DeKok
Martin Jessa [EMAIL PROTECTED] wrote: Is there a way to make radius do bandwith restrictions or run commands against an external application? For the first question, it's not the responsibility of RADIUS to enforce bandwidth restrictions. The radius server can tell the NAS, but it's the job

Re: FreeRadius EAP Postgresql

2003-09-13 Thread rolphin
On Sat, Sep 13, 2003 at 06:37:03PM -0400, Alan DeKok wrote: [EMAIL PROTECTED] wrote: I'm currently configuring a Freeradius 0.9.1 with EAP-TLS support and Postgresql. That won't work. Everything works find, but if someone gets a certificate he can logs in. That's what EAP-TLS is

Re: Bandwith limiting of wireless users.

2003-09-13 Thread Evren Yurtesen
Hi :) I see you are a BSD guy like me :) I had similar problem for my wireless clients, I came up with an excellent PPPoE solution. It is called www.Mikrotik.com Its a shame that the pppoe implementation in FreeBSD cant do bandwidth limiting, but the mikrotik(linux yack) implementation does! I

Re: Bandwith limiting of wireless users.

2003-09-13 Thread Martin Jessa
Hi ! Thanks a bunch for your quick answer. So basically what you can do with the mikrotic stuff is authorizing users, allow them to connect to your network based on info from a radius server and let the radius to the bandwith limiting? What Radius servers does it support? How is encryption done

Re: Bandwith limiting of wireless users.

2003-09-13 Thread Martin Jessa
I forgot to mention one thing. The bandwith limiting must be done on the routers, not on the AP's. The reason for that is I need to be able to give different bw to users connected to the same AP. Also users must be able to connect from different places to different AP's. Be able to roam. Pluss

RE: Bandwith limiting of wireless users.

2003-09-13 Thread Jeremy Davis
PPPoE can provide link encryption, I know this is starting to get off topic. If you like a Cisco IOS like feel, then definitely microtik is probably the way to go. Jeremy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Alan DeKok Sent: Saturday, September