Re: assign wireless users to VLANs on CISCO AP1230

2003-10-22 Thread Jean-Marie GUILLEMOT
These are the RADIUS user attributes used for vlan-id assignment. Each attribute must have a common Tag value to identify the grouped relationship. IETF 64 (Tunnel Type): Set this attribute to VLAN IETF 65 (Tunnel Medium Type): Set this attribute to 802 IETF 81 (Tunnel Private Group

Re: postauth required?

2003-10-22 Thread Graeme Hinchliffe
Graeme Hinchliffe [EMAIL PROTECTED] wrote: The radiusd runs happily. mysqldump starts and radiusd complains about unresponsive children, the number of threads increases until the mysqldump finishes, at which point the number of threads begins to drop. The no of threads gets to about 20

Re: assign wireless users to VLANs on CISCO AP1230

2003-10-22 Thread Jean-Marie GUILLEMOT
vlan-id is not a string, it's an integer for CISCO (for instance, in my WLAN the SSID teacher is mapped to VLAN 10 : 10 is the vlan-id) that doesn't prove anything. 10 is a perfect string. You're right. I misunderstood the word string please always post the server debug output (radiusd

Re: Authentication with FreeRadius and /etc/shadow

2003-10-22 Thread José Berenguer
/radacct/10.0.120.11/auth-detail-20031022' rlm_detail: /usr/local/etc/raddb/radacct/%{Client-IP-Address}/auth-detail-%Y%m%2 modcall[authorize]: module auth_log returns ok for request 0 modcall[authorize]: module chap returns noop for request 0 rlm_eap: EAP packet type notification id 1 length 9

rlm_detail not asing client-IP-Address

2003-10-22 Thread Victor Sanchez
hello to all. i have a freeradius 0.8 and some day back i see a problems in details modules. i Have this config in radius.conf. detail { # Note that we do NOT use NAS-IP-Address here, as that # attribute MAY BE from the originating NAS, and NOT

Re: postauth required?

2003-10-22 Thread Graeme Hinchliffe
On Wed, 22 Oct 2003 09:13:58 +0100 Graeme Hinchliffe [EMAIL PROTECTED] wrote: Graeme Hinchliffe [EMAIL PROTECTED] wrote: The radiusd runs happily. mysqldump starts and radiusd complains about unresponsive children, the number of threads increases until the mysqldump finishes, at which

Trouble while building freeradius 0.9.2 on FreeBSD

2003-10-22 Thread Eugene A. Dmitrichenko
Hi. I got an Oracle DB server on RedHat and need to build FreeRadius on freebsd box. While configuring FreeRadius, beside others, I got this 3 lines: checking for oci.h... no configure: warning: oracle headers not found. Use --with-oracle-home-dir=path. configure: warning: sql submodule

RE: Better security

2003-10-22 Thread Rudi Verago \[vlain\]
I use a vpn also, but I need another level of security and I don't know how use ssl via java/xml. I don't have a web application but a stand alone with java swing. Can I use ssl on java/xml and not in a browser? - - But then what is the better way to improve the security using radius? - radius

Re: java/xml: better security

2003-10-22 Thread Rudi Verago \[vlain\]
I use a vpn and after authentication on radius, but I need another level of security, my application should use java/xml (therefore stand-alone and not web-application via browser),is it possible, in this case, use ssl?tls? I don't want use eap because in my enviroment I want that access point are

Re: dialup_admin latest cvsup

2003-10-22 Thread Kostas Kalevras
On Tue, 21 Oct 2003, apellido jr., wilfredo p wrote: I tried the latest cvsup of dialup_admin and there's a new feature in user's information, the open session however the online user command is not working, then i How do you mean not working? Can you give more details? switch to

Pre Paid VoIP billing system using Freeradius

2003-10-22 Thread Samuel Prakoso
Hello, I'm trying to modify Freeradius so it can be use as billing system, so far it work fine. But I have a little problem to catch the CalledStationId variable. I want to catch the value of that variable and pass it to my own function. Is somebody here can give me an example how to do that?

dialup_admin latest cvsup

2003-10-22 Thread apellido jr., wilfredo p
Good day Mr. Kalevras. statistics, user's statistics and online users doesnt show anything in latest dialup_admin cvsup. here's my config - admin.conf - # # Main Configuration File # # it can be

Group Rewrite

2003-10-22 Thread Brad Pinkston
I'm a newbie to FreeRadius and am using it for system authentication on a Redhat 7.3 server. All my users have their username as their groupname. Is there any way to rewrite the groupname for everyone who authenticates to this server to student ? Also what is the default Group field for my

Re: Pre Paid VoIP billing system using Freeradius

2003-10-22 Thread Alan DeKok
Samuel Prakoso [EMAIL PROTECTED] wrote: I'm trying to modify Freeradius so it can be use as billing system, so far it work fine. But I have a little problem to catch the CalledStationId variable. ble. I want to catch the value of that variable and pass it to my own function. Is somebody

Re: Group Rewrite

2003-10-22 Thread Alan DeKok
Brad Pinkston [EMAIL PROTECTED] wrote: I'm a newbie to FreeRadius and am using it for system authentication on a Redhat 7.3 server. All my users have their username as their groupname. Is there any way to rewrite the groupname for everyone who authenticates to this server to student ? Huh?

Re: PAP authentication with LDAP

2003-10-22 Thread Alan DeKok
Lai Fu Keung [EMAIL PROTECTED] wrote: How can ask LDAP to look at UserPassword attribute when PAP is used, and look at chapPassword attribute when MS_CHAP is used? Why? UserPassword will work fine with both authentication methods. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Authentication with FreeRadius and /etc/shadow

2003-10-22 Thread Alan DeKok
=?iso-8859-1?Q?Jos=E9?= Berenguer [EMAIL PROTECTED] wrote: I can't read /etc/shadow. Password are encrypt. The error is (in debug mode): As you have discovered, you cannot use /etc/passwd to authenticate EAP sessions. EAP *requires* a plain-text password. /etc/passwd does not supply one.

RE: Better security

2003-10-22 Thread Puneet B
I use a vpn also, but I need another level of security and I don't know how use ssl via java/xml. I don't have a web application but a stand alone with java swing. Can I use ssl on java/xml and not in a browser? more security that what an IPSEC VPN provides? This brings me back to Alans

RE : RE: Better security

2003-10-22 Thread Rudi Verago \[vlain\]
First of all thanks to everybody. I know that vpn (in my situation I use AES in esp and ike) is a perfect (about) solution. In my infrastructure vpn authenticates machines/computer/box (network card) and radius authenticates users. Can I made an eap/tls connction above a vpn? That is before I

cisco auths three times with realm

2003-10-22 Thread Oliver Graf
Hi! This is no real freeradius problem, but perhaps someone did stumble about this before: After switching to a realm based auth on our cisco ubr 71XX boxes (i.e. from 'user' to '[EMAIL PROTECTED]' as Username), the cisco still lets to users in, but for each authentication, I see three auth

error compiling 0.9.2 on FreeBSD 4.8

2003-10-22 Thread Jeff Palmer
Hello, I've been motoring along quite happily with Freeradius 0.8.1 However I was just looking at the changelog for FreeRadius 0.9.2 and it appears several bugs have been found/fixed along with new features and dictionaries. ./configure works well. make works well also. However, there is an

Proxy setup

2003-10-22 Thread Jason Sehlmeyer
Hello, New to the list, but Ive read everything that I could possibly read, maybe I just dont understand. What Im trying to do. Use a STAROS using Hotspot to authenticate with our radius server. Ive installed and setup freeradius on a machine we use for mirroring, and if I do the

rlm_eap: EAP-Message not found

2003-10-22 Thread Ed - Radius List
Having a little trouble with an error message with version 0.9.0 and above : rlm_eap: EAP-Message not found. before every login: The machine is an old RedHat. ( Redhat 7.3 ( 2.4.18-3smp) ) Ed S Compass Communications Seattle, WA Below is the radiusd -x output: admin: {69} %

SPEKE support

2003-10-22 Thread Jack J
Hi, Just wanted to know if SPEKE support is being planned ? I could not find in any discussion on this topic FreeRadius archives. Thanks, __ Do you Yahoo!? The New Yahoo! Shopping - with improved product search http://shopping.yahoo.com - List

Re: SPEKE support

2003-10-22 Thread Alan DeKok
Jack J [EMAIL PROTECTED] wrote: Just wanted to know if SPEKE support is being planned SPEKE is patented, and is available only through license fees. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: error compiling 0.9.2 on FreeBSD 4.8

2003-10-22 Thread Paul Hampson
From: Jeff Palmer Sent: Thursday, 23 October 2003 4:41 AM I've been motoring along quite happily with Freeradius 0.8.1 However I was just looking at the changelog for FreeRadius 0.9.2 and it appears several bugs have been found/fixed along with new features and dictionaries.

ePHARMACY - VIA.GRA, Soma, Celebrex - PRICES SLASHED...elise

2003-10-22 Thread Timmy Mcgrath
Wholesale Prescription Medications www.downtown-services.com/23 Our Licensed Doctors Will Write Your Prescription Allergies: allegra--clarinex--flonase--zyrtec Antibiotics: cipro Cold Sores: denavir Depression: celexa--lexapro--paxil--prozac--remeron--sarafem--zoloft Heartburn:

Re: PAP authentication with LDAP

2003-10-22 Thread Lai Fu Keung
On 22 Oct 2003 at 11:09, Alan DeKok wrote: How can ask LDAP to look at UserPassword attribute when PAP is used, and look at chapPassword attribute when MS_CHAP is used? Why? UserPassword will work fine with both authentication methods. I read the document which says that for MS_CHAP, I

Re: error compiling 0.9.2 on FreeBSD 4.8

2003-10-22 Thread Rohaizam Abu Bakar
the patch if you like... for me 0.9.2 works very well with my FreeBSD 4.8 despite this little glitch... but 0.9.2 having rlm_ldap problem with my FreeBSD 5.1... I'm still troubleshooting it... anyone having same problem?? *** src/modules/rlm_ippool/Makefile.in Sat Oct 4 07:44:51 2003 ---

Re: Pre Paid VoIP billing system using Freeradius

2003-10-22 Thread Samuel Prakoso
doc/variables.txt ? Alan DeKok. Hi, Thanks for the answer, I have already read that file before, I put %{CalledStationId} in my program, to call my own function like this: update_prepaid(sqlusername, %{CalledStationId}); When I compiled it, gcc refuses to compile, it say that my program

US Stock Market: TRHL - Last Pick From .45 to 1.18...cleta

2003-10-22 Thread Johnnie Hicks
UPSIDE INTERNATIONAL - Searching Out Stocks with Big Upside Potential...that have gone unnoticed until now. Our last pick SUQU went from 0.45 to 1.18 Our New Pick is True Health, Inc. - TRHL - with revenues up by more than 412% True Health, Inc.: TRHL Industry: Healthcare 12-month range: