Re: Freeradius error: Discarding conflicting packet

2008-10-05 Thread Alan DeKok
Jelle Langbroek wrote: I can tell you that with my tests, I figured out that it's happening with all sorts of clients (MacOSX, XP, Vista). The supplicant's aren't involved here. It's the NAS that retransmits the RADIUS packets. It appears only to be happing with the WAP54G (and now the

Re: compile freeradius 2.1.1 with eap-tls mysql openldap openssl

2008-10-05 Thread Alan DeKok
Broussard Philippe wrote: I try to compile freeradius with mysql and openldap aned eap-tls. Mysql and Openssl and Openldap are compiled with sources I use this configure's command line : CFLAGS=-I/opt/mysql/include -I/opt/openssl/include LDFLAGS=-L/opt/mysql/lib -L/opt/openssl/lib

Easy way to Convert Config

2008-10-05 Thread Marcel Grandemange
I have a working FreeRadius Version 1.1.7 setup and would like to change over to version 2. Is there an easy way to do this upgrade? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius and active directory

2008-10-05 Thread Vieri
Hi, I noticed that some freeradius.org howtos suggest to specify a password server in Samba when using ads security: http://wiki.freeradius.org/FreeRADIUS_Active_Directory_Integration_HOWTO http://deployingradius.com/documents/configuration/active_directory.html Why should one do that,

Re: Newbie question

2008-10-05 Thread Maxim Sirenko
It is always better to install from packages that belong to your distro. Install FreeRadius from repository of Red Hat ES And for FreeBSD people it is better to install from ports. There will not be problems with linkers and compilers. Everything was thought about hundreds times. -

Re: Newbie question

2008-10-05 Thread Jeronimo Zucco
Citando Jair Santos [EMAIL PROTECTED]: Hi all, I just got into this list and I am trying to instal in a RedHat ES 5.2, 64 bits. I ran ./configure and when I ran make I got the following error. cc -o .libs/radmin .libs/radmin.o /usr/lib/libreadline.so /usr/lib/libtermcap.so .libs/util.o

Re: Newbie question

2008-10-05 Thread Marinko Tarlac
It is true but then you'll probably have the older version. Centos for example goes with FR 1.1.3 Maxim Sirenko wrote: It is always better to install from packages that belong to your distro. Install FreeRadius from repository of Red Hat ES And for FreeBSD people it is better to install from

Re: freeradius and active directory

2008-10-05 Thread tnt
Why should one do that, especially if the samba docs say Use password server option only with security = server? http://us6.samba.org/samba/docs/man/Samba-HOWTO-Collection/ServerType.html#id2553159 Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See

Re: Easy way to Convert Config

2008-10-05 Thread Alan DeKok
Marcel Grandemange wrote: I have a working FreeRadius Version 1.1.7 setup and would like to change over to version 2. Is there an easy way to do this upgrade? Manually. Most of the configuration is the same, but there are slight differences. Start off using 2.x with the 1.1.x

FreeRADIUS and Novell universal password

2008-10-05 Thread Jason Brown
I am seeing issues with users not authenticating correctly to our Novell eDirectory server. When some users try to authenticate they are denied access due to errors with their universal password. We have other systems that do not have this problem and am not sure why. Is there a way to

Re: FreeRADIUS and Novell universal password

2008-10-05 Thread Graham Marsh
You can't use NDS password because it's a one-way hash and therefore not reversible. You must use UP with radius because it is reversible. So, you need to investigate and fix your UP issues. There are tools that will help such as checking the status of UP on multiple objects, and even retrieving

Re: FR 2.1.1 --enable-developer core dump

2008-10-05 Thread Alan DeKok
Chris Howley wrote: Core dump created when running server with default configuration. ... * 1 process 6 0xd0b60d3d in rad_mangle (data=0x818f720, request=0xd11e0b00) at rlm_preprocess.c:219 That happens only if request is NULL, or if request-packet is NULL. That is *never* supposed

RE: Newbie question

2008-10-05 Thread Jair Santos
Thank you, I did not find a tar file for RHEL5. I found rpms here http://download.opensuse.org/repositories/network:/aaa/RHEL_5/x86_64/ but don't know which one to use. freeradius-client-1.1.6-3.1.x86_64.rpm freeradius-client-libs-1.1.6-3.1.x86_64.rpm

Not authenticating after adding attributes

2008-10-05 Thread Karl Auer
After spending two days gettig a suitable virtual machine operational (!) I have finally managed to get back to what I was actually trying to do, namely come to grips with FreeRADIUS! At the moment, a simple user entry in my database works; when I add attributes, the entry stops working. I have

Re: Not authenticating after adding attributes

2008-10-05 Thread Alan DeKok
Karl Auer wrote: At the moment, a simple user entry in my database works; when I add attributes, the entry stops working. Please read doc/rlm_sql. This IS documented. *** that worked. Then I added a few reply attributes so that the user looked like this: mysql select * from

Re: Not authenticating after adding attributes

2008-10-05 Thread Karl Auer
On Sun, 2008-10-05 at 19:17 +0200, Alan DeKok wrote: Karl Auer wrote: At the moment, a simple user entry in my database works; when I add attributes, the entry stops working. Please read doc/rlm_sql. This IS documented. I did read that. And a lot more besides. It didn't help,

IPv6 question, plus changelog not accessible?

2008-10-05 Thread Karl Auer
Hi there. I'm interesting in using FreeRADIUS with IPv6 (not as a RADIUS transport, but in an IPv6-enabled environment). Looking at the roadmap for version 2, there is this little snippet, under the heading Done: IPv6 (not IPv6 home server realms, Raghu has a patch) What does not IPv6 home

Re: Easy way to Convert Config

2008-10-05 Thread A . L . M . Buxey
Hi, Start off using 2.x with the 1.1.x configuration files. Then, fix everything it complains about. I would suggest to start with the supplied 2.x config file then read through your 1.1.x configs, note which modules you actually use and which you dont, and how they are configured and then

Doubt about default and inner-tunnel

2008-10-05 Thread Giovanni Lovato
I use FR 2.1.1 for WPA authentication, using TTLS+MSCHAPv2 and LDAP to store users and passwords (in LM/NT hash format). I tried several configurations: Configuration 1: - no changes in sites-enabled/default; - in sites-enabled/inner-tunnel uncommented ldap in authorize and Auth-Type LDAP in

Re: IPv6 question, plus changelog not accessible?

2008-10-05 Thread Alan DeKok
Karl Auer wrote: I'm interesting in using FreeRADIUS with IPv6 (not as a RADIUS transport, but in an IPv6-enabled environment). It works. Looking at the roadmap for version 2, there is this little snippet, under the heading Done: IPv6 (not IPv6 home server realms, Raghu has a patch)

Conversion to Version 2

2008-10-05 Thread Doug Hardie
I have been using FreeRadius 1.x for a number of years. It has worked just fine. All I am using it for is to authenticate and authorize dial-in users (its about as simple as you can get). The only unusual item is I have a couple of fairly complex modules for authorization and

Re: Conversion to Version 2

2008-10-05 Thread A . L . M . Buxey
Hi, I have been using FreeRadius 1.x for a number of years. It has worked just fine. All I am using it for is to authenticate and authorize dial-in users (its about as simple as you can get). The only unusual item is I have a couple of fairly complex modules for authorization and

Re: Conversion to Version 2

2008-10-05 Thread Doug Hardie
On Oct 5, 2008, at 13:27, [EMAIL PROTECTED] wrote: Hi, I have been using FreeRadius 1.x for a number of years. It has worked just fine. All I am using it for is to authenticate and authorize dial-in users (its about as simple as you can get). The only unusual item is I have a couple of

Re: Doubt about default and inner-tunnel

2008-10-05 Thread tnt
I use FR 2.1.1 for WPA authentication, using TTLS+MSCHAPv2 and LDAP to store users and passwords (in LM/NT hash format). I tried several configurations: Configuration 1: - no changes in sites-enabled/default; - in sites-enabled/inner-tunnel uncommented ldap in authorize and Auth-Type LDAP in