/etc/samba/smbpasswd

2008-06-12 Thread vijayakumar
Hai All, If am using /etc/samba/smbpasswd how can I specify the etc/smbpasswd through network . is it possible like this filename = 192.168. XX. XX:/etc/samba/smbpasswd Regards. VIJAY - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Could not link driver rlm_sql_mysql: rlm_sql_mysql.so

2008-06-12 Thread Devinder Singh
Hi Why do i get this error message *Could* *not* *link* *driver* *rlm_sql_mysql*: *rlm_sql_mysql*.*so* ** ** *Regards* *Devinder* - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius/eDirectory/802.1X authentication issue

2008-06-12 Thread Matt Causey
See why I say I don't know a whole lot about how all this works?? :) So it sounds like I don't even need LDAP, but it's helpful for at least I know it is possible to use EAP-TLS, and then use some attribute from the certificate and query LDAP about it. If that's the case in your configuration,

Re: /etc/samba/smbpasswd

2008-06-12 Thread Nicolas Goutte
Am 12.06.2008 um 08:58 schrieb vijayakumar: Hai All, If am using /etc/samba/smbpasswd how can I specify the etc/ smbpasswd through network . is it possible like this filename = 192.168. XX. XX:/etc/samba/ smbpasswd I suppose that you need something valid for the operating system. So

Re: /etc/samba/smbpasswd

2008-06-12 Thread Alan DeKok
vijayakumar wrote: If am using /etc/samba/smbpasswd how can I specify the etc/smbpasswd through network . is it possible like this filename = 192.168. XX. XX:/etc/samba/smbpasswd $ man unlang This will tell you how to construct policies. In 2.0.5, see raddb/modules/smbpasswd. I

Re: Could not link driver rlm_sql_mysql: rlm_sql_mysql.so

2008-06-12 Thread Ivan Kalik
Have you tried reading the FAQ? Ivan Kalik Kalik Informatika ISP Dana 12/6/2008, Devinder Singh [EMAIL PROTECTED] piše: Hi Why do i get this error message *Could* *not* *link* *driver* *rlm_sql_mysql*: *rlm_sql_mysql*.*so* ** ** *Regards* *Devinder* - List info/subscribe/unsubscribe? See

Need help on accounting - authentication

2008-06-12 Thread Do Nguyen Ha
Hi is there a way to config Freeradius to use the same port for Accounting Authentication if yes, please let me know how to edit Thanks Ha` - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Need help on accounting - authentication

2008-06-12 Thread Alan DeKok
Do Nguyen Ha wrote: is there a way to config Freeradius to use the same port for Accounting Authentication No. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

help EAP-TNC

2008-06-12 Thread [EMAIL PROTECTED]
Hi all, I'm working in setting up a basic scenario which involves 3 components: a client using Xsupplicant a AP making use of hostapd and a Radius server using FreeRadius ;). I'm trying to probe the EAP-TNC method but i have received this message from the FreeRadius server: rlm_eap:

Re: Could not link driver rlm_sql_mysql: rlm_sql_mysql.so

2008-06-12 Thread Anders Holm
You haven't installed the MySQL headers. If you're on Linux, you're likely to need to install a package called something along the lines of mysql-devel. If this isn't an FAQ listed query, it should be .. :) //anders 2008/6/12 Ivan Kalik [EMAIL PROTECTED]: Have you tried reading the FAQ?

Re: help EAP-TNC

2008-06-12 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I'm working in setting up a basic scenario which involves 3 components: a client using Xsupplicant a AP making use of hostapd and a Radius server using FreeRadius ;). I'm trying to probe the EAP-TNC method but i have received this message from the FreeRadius server:

Re: MySQL connection over SSL possible?

2008-06-12 Thread Anders Holm
quote From: you Sender: freeradius-users-bounces... Reply-To: [EMAIL PROTECTED] To: freeradius-users@ /quote Yes? That is still for one recipient. Reply-To is where replies to my mail would go. That's set by the MLM (Mailing List Manager) not by my mail client. //anders 2008/6/11 Alan DeKok

Re: MySQL connection over SSL possible?

2008-06-12 Thread Alan DeKok
This is getting off-topic, but... Anders Holm wrote: quote From: you Sender: freeradius-users-bounces... Reply-To: [EMAIL PROTECTED] To: freeradius-users@ /quote Yes? That is still for one recipient. Reply-To is where replies to my mail would go. That's set by the MLM (Mailing List

Re: MySQL connection over SSL possible?

2008-06-12 Thread Anders Holm
1/ Indeed I did. I did see that in the original mail I replied to. Where that was added is a good question, but I saw it in the mail that was replied to .. I'm saying that this is the way the mail was crafted, as I received it, before replying to it. 2/ Indeed it would be, if it did. Has anyone

Re: MySQL connection over SSL possible?

2008-06-12 Thread Nicolas Goutte
Am 12.06.2008 um 14:42 schrieb Anders Holm: 1/ Indeed I did. I did see that in the original mail I replied to. Where that was added is a good question, but I saw it in the mail that was replied to .. I'm saying that this is the way the mail was crafted, as I received it, before replying

Re: freeradius 2.05 peap and ldap bind?

2008-06-12 Thread Tim Tyler
Ivan, Alan, We now have peap and ttls-pap working. It turns out you were both right. What tricked us for a long period of time is that we had to comment out unix because our testing server had the ldap users on it for other testing purposes. The unix module was thwarting the ldap module

Re: MySQL connection over SSL possible?

2008-06-12 Thread Anders Holm
2008/6/12 Nicolas Goutte [EMAIL PROTECTED]: [snip] For me it has worked since then. I have seen only one of each of your messages. Have a nice day! Excellent! One problem solved, and on to the next one. To get back on topic a tad then so, and to describe my experience with the SSL side of

Re: MySQL connection over SSL possible?

2008-06-12 Thread A . L . M . Buxey
Hi, When I tried setting the port number to something different I used port = port number .. That yielded cannot connect to server using socket error when running radiusd in debug mode. So, there's two things to take away from that experience. whoah. one missing step. did you test this

RE: FreeRadius/eDirectory/802.1X authentication issue

2008-06-12 Thread Newall, Bryce
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, June 11, 2008 1:14 PM To: FreeRadius users mailing list Subject: Re: FreeRadius/eDirectory/802.1X authentication issue Newall, Bryce wrote: See why I

Can FreeRADIUS proxy accounting requests to multiple systems?

2008-06-12 Thread Sylvain Robitaille
and Network analyst Concordia University Instructional Information TechnologyMontreal, Quebec, Canada -- --- old/proxy.conf.20080612 2008-03-27 12:47:55.0 -0500 +++ proxy.conf 2008-06-12

Re: Forcing lowercase User-Name with rlm_perl

2008-06-12 Thread oz
Hi Chris, your perl-module for lower_user works perfectly! It was important, to use it in the right order, which means in my case before files ... authorize { preprocess perl files } preacct { preprocess perl files } Doing this, User-Name is lower-cased in

RE: FreeRadius/eDirectory/802.1X authentication issue

2008-06-12 Thread Ivan Kalik
Dumb question perhaps, but without configuring LDAP, how does EAP-TLS know where to send authentication requests? EAP-TLS is certificate based authentication. All you need in order to get authenticated is a valid certificate. Do you mean authorization? Ivan Kalik Kalik Informatika ISP - List

Re: Can FreeRADIUS proxy accounting requests to multiple systems?

2008-06-12 Thread Alan DeKok
Sylvain Robitaille wrote: I'm looking to have both of these systems proxy incoming accounting data to each other, so that they both have complete, up-to-date data regarding which users are presently authenticated on which services, That should be easy. See the detail file readers in

PEAP authenication issues - sort of

2008-06-12 Thread Capelle, Mark (PCMC-GB)
I have FreeRADIUS setup do LDAP authentication against AD and also PEAP which ultimately uses ntlm_auth against AD. Both work fine for the most part except some users that I have started to add to the PEAP enabled wireless network. If I connect to this network, I authenticate fine. If one of

Re: Forcing lowercase User-Name with rlm_perl

2008-06-12 Thread Alan DeKok
oz wrote: A small problem I just had when I recompiled my freeradius-2.0.3 with Answer: 2.0.5. I decided to ignore it, because the symbolic link inner-tunnel alread existed from my first compilation an that seems to cause the error (is this fixed in 2.0.5 eventually?). Yes. Alan

RE: FreeRadius/eDirectory/802.1X authentication issue

2008-06-12 Thread Newall, Bryce
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] On Behalf Of Ivan Kalik Sent: Thursday, June 12, 2008 12:20 PM To: FreeRadius users mailing list Subject: RE: FreeRadius/eDirectory/802.1X authentication issue Dumb question perhaps, but

Re: Can FreeRADIUS proxy accounting requests to multiple systems?

2008-06-12 Thread Ivan Kalik
I'm looking to have both of these systems proxy incoming accounting data to each other, so that they both have complete, up-to-date data regarding which users are presently authenticated on which services, but I'd also like to have them proxy the accounting data to a third system (commercial

Re: FR2.0.3 - UCD-SNMP 4.2.7 communication does not work on 64 bits Freebsd (but does on 32 bit Freebsd)

2008-06-12 Thread Thomas Fagart
Alan DeKok wrote: Thomas Fagart wrote: Do you think I can report a bug about that issue ? Please don't. The SMUX code is old, and is deprecated by the the net-snmp people. It will NOT be fixed. It's much better to write new code against the AgentX API, which is supported.

Re: FR2.0.3 - UCD-SNMP 4.2.7 communication does not work on 64 bits Freebsd (but does on 32 bit Freebsd)

2008-06-12 Thread Alan DeKok
Thomas Fagart wrote: Ok I'll try to write code. Just before doing that I've try to find out how I can query radius with radclient to get the statistics ? You can't. Is there anything special in the configuration that I should enable, to collect statistics ? No. You have to write new

Re: Simultaneous-Use and radwho

2008-06-12 Thread Tuc at T-B-O-H.NET
Copy the configs to a test machine. Run radsniff on the production machine to grab packets. Play them back on the test machine. Run radiusd -X on the test machine. Ok, wasn't aware of the functionality. I don't see a radsneeze, so I'm guessing you pipe them back in via echoing it

Bug 517 - Can it make the next release?

2008-06-12 Thread Tuc at T-B-O-H.NET
Hi, Can Bug 517 (Patch for radwho to correct time output and IP address outpu) be included in the next release? I've used the supplied patch and find it works quite well. Thanks, Tuc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Multiple radius servers on one machine

2008-06-12 Thread [EMAIL PROTECTED]
I have two applications that authenticate via radius. These applications require separate radius conf files, log files, users files, etc. How can I run two distinct radius servers on one server to serve these applications? Also, these applications run on one server, so how can I have their server

Re: Multiple radius servers on one machine

2008-06-12 Thread Paul Bartell
might i suggest using virtual machines, instead of messing around with multiple instances. (radius is rather non resource intensive) On Thu, Jun 12, 2008 at 8:11 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I have two applications that authenticate via radius. These applications require

Re: Multiple radius servers on one machine

2008-06-12 Thread [EMAIL PROTECTED]
might i suggest using virtual machines, instead of messing around with multiple instances. (radius is rather non resource intensive) If I can avoid it, I would not like to mess around with virtual machines. On Thu, Jun 12, 2008 at 8:11 PM, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: I have two

Re: Multiple radius servers on one machine

2008-06-12 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I have two applications that authenticate via radius. These applications require separate radius conf files, log files, users files, etc. How can I run two distinct radius servers on one server to serve these applications? $ man radiusd Use the '-d' parameter to