Re: Consuming card code

2008-02-28 Thread Juraj Bilic
Can i implement user login, consuming of card codes, etc. with only packets (acct) or im missing some crucial points? No idea. What card codes are you talking about? The problem: There is a host that controls internet access for 25 different machines.

Re: Force user disconnect on NAS

2008-02-28 Thread Marinko Tarlac
This works fine for me. It is POD message (packet of disconnect) Check port number and check NAS and radius log files if it doesn't work. If you have some programming skills, you can create schedule script to disconnect all active users at specific time... User-Name = [EMAIL

Re: Consuming card code

2008-02-28 Thread Liran Tal
Hey Juraj, I think that you are over-complicating things. This is rather easy to implement, you simply need to create a pincode-auth scenario and for limiting the time you can use Max-All-Session attribute. Be sure to check daloRADIUS as a management platform for RADIUS and Hotspots deployments

freeradius web administration

2008-02-28 Thread parfait kouassi nda
hi, i'm using freeradius server like proxy, and i want to administrate it with web mode. please can you give applications or how i can implement the web mode option on my freeradius server. thanks for all. _ Appelez vos amis de

Re: Consuming card code

2008-02-28 Thread Ivan Kalik
The problem: There is a host that controls internet access for 25 different machines. For having internet access machine user must type prepaid code. (there are 1000 generated prepaid valid codes) With one prepaid code user can use the internet for 1h. If user used only

Re: freeradius web administration

2008-02-28 Thread Liran Tal
Hey Parfait, Are you referring to the management of the FreeRADIUS configuration? (i.e: radiusd.conf, sql.conf, proxy.conf, etc...) or are you talking about the management of users? On Thu, Feb 28, 2008 at 11:22 AM, parfait kouassi nda [EMAIL PROTECTED] wrote: hi, i'm using freeradius

Re: freeradius web administration

2008-02-28 Thread Ivan Kalik
http://www.freeradius.org/dialupadmin.html Ivan Kalik Kalik Informatika ISP Dana 28/2/2008, parfait kouassi nda [EMAIL PROTECTED] piše: hi, i'm using freeradius server like proxy, and i want to administrate it with web mode. please can you give applications or how i can implement the web

Re: header enrichment

2008-02-28 Thread mauro
please have a look inline thanks Normally in a mobile services there's no specification into the header about connection type. *Which header? You are assuming that everyone here is familiar with 3g *terminology. You were already told we were not. i didn't mention anything about 3G, i spoke

RE: EAP-PEAP with LDAP for 802.1x authentication

2008-02-28 Thread Ryan
I have installed smbldap-tools and tried to modify existing LDAP records using smbldap-usermod after updating the smbldap.conf and smbldap_bind.conf to connect to the LDAP but I keep getting an error that user cannot be found. Using ldapsearch, syslog shows Feb 28 17:54:42 advert slapd[5679]:

Re: header enrichment

2008-02-28 Thread Guy Davies
Mauro, On 28/02/2008, mauro [EMAIL PROTECTED] wrote: please have a look inline thanks Normally in a mobile services there's no specification into the header about connection type. *Which header? You are assuming that everyone here is familiar with 3g *terminology. You were already told

Re: header enrichment

2008-02-28 Thread Stefan Winter
Hi, Ah! So you are speaking of *HTML* headers? That was absolutely not clear up to now... This is a RADIUS mailing list though. I assume you would like to see that the RADIUS server sends specific attributes in an Access-Accept message, whose values then get injected into a HTML header by

limiting user access by day

2008-02-28 Thread Budiono U.
Hi all, I'm currently setup freeradius server for hotspot, but right now I have some problem for limiting access user to particular day. As example : user1 accessing on Monday to Friday and user2 only accesing on Saturday or Sunday. And each user is limiting for one day access only, and after

Re: limiting user access by day

2008-02-28 Thread Ivan Kalik
Login-Time to restrict user to the days on which he can log in. And set Expiration to the end of the current day (? 24 hours - what's a day) on first login (script). Ivan Kalik Kalik Informatika ISP Dana 28/2/2008, Budiono U. [EMAIL PROTECTED] piše: Hi all, I'm currently setup freeradius

Two networks: WEP+MAC Filtering and WPA(PEAP)

2008-02-28 Thread Era
Hello, I would like to setup two WLAN networks on one AP with different VLAN. From Radius I need MAC authorization for network #1 and WPA(PEAP) authorization for network #2. I have successfully setup both types of authorization separately. Could you please correct me about

Need to customized the table schema.

2008-02-28 Thread johnson elangbam
hi, I am using free radius 2 with MS Sql 2000. I want to make a database schema of my own to store only username and password in MS Sql. I would like to modify the query so that the radius server reads only this information from my customized table.I've tryied modyfying sql queries from

Re: Two networks: WEP+MAC Filtering and WPA(PEAP)

2008-02-28 Thread Phil Mayers
Could you please correct me about mac authorization. In my debug log I see mac authorization request : rad_recv: Access-Request packet from host 10.10.10.139:6001, id=7, length=115 User-Name = 00-18-de-4e-8f-1d User-Password = secret NAS-IP-Address = x.x.x.139

Re: Need to customized the table schema.

2008-02-28 Thread Ivan Kalik
hi, I am using free radius 2 with MS Sql 2000. I want to make a database schema of my own to store only username and password in MS Sql. I would like to modify the query so that the radius server reads only this information from my customized table. I assume that this means that you have

Re: Two networks: WEP+MAC Filtering and WPA(PEAP)

2008-02-28 Thread Ivan Kalik
rad_recv: Access-Request packet from host 10.10.10.139:6001, id=7, length=115 User-Name = 00-18-de-4e-8f-1d User-Password = secret NAS-IP-Address = x.x.x.139 Called-Station-Id = 00-20-a6-64-66-a3:A Calling-Station-Id = 00-18-de-4e-8f-1d

Re: Consuming card code

2008-02-28 Thread Juraj Bilic
Ive found the answer to my dilemma. With radiusmanager3 i set available online time to 1h and with acct packet subtract seconds from available online time. The main solution lies in two attributes: Acct-Status-Type = Interim-Update and Acct-Session-Time = seconds. thanks for all the support

Re: Reject user from SQL-DB

2008-02-28 Thread JB
I'm sorry, I have to ask again. Have you found a way to let the reply query know that the user has already been rejected in the check-query? I'm trying to avoid executing the same queries twice and also to avoid using temporary tables. Thank you, JB JB (08.02.2008 14:00): Phil Mayers

Re: Reject user from SQL-DB

2008-02-28 Thread Phil Mayers
JB wrote: I'm sorry, I have to ask again. Have you found a way to let the reply query know that the user has already been rejected in the check-query? I'm trying to avoid executing the same queries twice and also to avoid using temporary tables. I thought I'd answered this? What you could

freeradius SQL + EAP + Windows client

2008-02-28 Thread Guillaume Chartrand
Hi, I've got some problem when I try to Authorize with SQL and a windows client to Wireless connection. I configure my windowx xp wireless connection to works with PEAP. My freeradius version is 2.0.0 running on RHEL4 AS When I make a test with the command Radtest guillaume passtest localhost

freeradius 1 mysql Attribute

2008-02-28 Thread Dustin Schuemann
Im working with dialup provider that is acting as the nas and they are authenticating off my radius server. Authentication works fine. They have this fastnet program that is supposed to make the internet faster. Attached is what they told me to do. I have added it to the dynamic group in

Re: freeradius SQL + EAP + Windows client

2008-02-28 Thread Ivan Kalik
Hi, I've got some problem when I try to Authorize with SQL and a windows client to Wireless connection. No, you don't. When I make a test with the command Radtest guillaume passtest localhost 1645 testing123 I've have this result .. Sending Access-Accept of id 204 to 127.0.0.1 port 34468 So

Re: freeradius 1 mysql Attribute

2008-02-28 Thread Ivan Kalik
Add to your dictionary file at /usr/local/etc/raddb/dictionary: Same file in Freeradius. VENDORATTR 7000 Slipstream-Auth 1 string You will find this in there: #ATTRIBUTE My-Local-String 3000string #ATTRIBUTE My-Local-IPAddr 3001ipaddr #ATTRIBUTE

Re: Reject user from SQL-DB

2008-02-28 Thread Phil Mayers
JB wrote: Phil Mayers: JB wrote: I'm sorry, I have to ask again. Have you found a way to let the reply query know that the user has already been rejected in the check-query? I'm trying to avoid executing the same queries twice and also to avoid using temporary tables. I thought I'd

Re: freeradius 1 mysql Attribute

2008-02-28 Thread Dustin Schuemann
I don't have anything like this in my dictionary. This is free radius 1 On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote: Add to your dictionary file at /usr/local/etc/raddb/dictionary: Same file in Freeradius. VENDORATTR 7000 Slipstream-Auth 1 string You will find this in there:

Re: freeradius 1 mysql Attribute

2008-02-28 Thread Ivan Kalik
So is this. 1.1.7 file /usr/local/etc/raddb/dictionary. Ivan Kalik Kalik Informatika ISP Dana 28/2/2008, Dustin Schuemann [EMAIL PROTECTED] piše: I don't have anything like this in my dictionary. This is free radius 1 On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote: Add to your dictionary

Re: freeradius 1 mysql Attribute

2008-02-28 Thread Dustin Schuemann
This is version 1.1.3 I don't see this anywhere in this file. #ATTRIBUTE My-Local-String 3000string #ATTRIBUTE My-Local-IPAddr 3001ipaddr #ATTRIBUTE My-Local-Integer3002integer On Feb 28, 2008, at 8:16 PM, Ivan Kalik wrote: So is this.

Re: freeradius 1 mysql Attribute

2008-02-28 Thread Dustin Schuemann
Can I just add it ? On Feb 28, 2008, at 5:51 PM, Ivan Kalik wrote: Add to your dictionary file at /usr/local/etc/raddb/dictionary: Same file in Freeradius. VENDORATTR 7000 Slipstream-Auth 1 string You will find this in there: #ATTRIBUTE My-Local-String 3000string

RE: freeRADIUS+samba3.0.1+AD(multiple domains)

2008-02-28 Thread Hangjun He
Great news! We are using krb5-1.3.2 and samba-3.0.1. These 2 version support multiple domains? Can you give me some example about how to configure krb5.conf and smb.comf? Thanks. John Joe Vieira [EMAIL PROTECTED] 写道: But there are multiple domains in active-directory. How

Re: freeradius 1 mysql Attribute

2008-02-28 Thread Scott Lambert
On Thu, Feb 28, 2008 at 05:08:46PM -0500, Dustin Schuemann wrote: Im working with dialup provider that is acting as the nas and they are authenticating off my radius server. Authentication works fine. They have this fastnet program that is supposed to make the internet faster. Attached