How to parse the value in an accounting message and print the contents In detail-... file?

2008-12-08 Thread al pat
Hello, I am trying to decode accounting message from a device which sends PacketCable Event Messages. These are VSAs and the payload has a custom format. Freeradius dumps the octet string of the length of the message which it cannot decode (due to custom format) I want to dump these specific

Re: Programatically provision users to server.

2008-12-08 Thread Matthew Carriere
So I was taking a look at the schema's provided on Github. Can someone narrow down for me what the workflow of provisioning a user would look like? Specifically what I need to do is authorize/de-authorize users using a timestamp. So what I am thinking is: 1. I would provision users in my Rails

Re: Programatically provision users to server.

2008-12-08 Thread tnt
http://wiki.freeradius.org/SQL_HOWTO#Populating_SQL See also sqlcounters and Expiration attribute. Ivan Kalik Kalik Informatika ISP Dana 8/12/2008, Matthew Carriere [EMAIL PROTECTED] piše: So I was taking a look at the schema's provided on Github. Can someone narrow down for me what the

Re: How to parse the value in an accounting message and print thecontents In detail-... file?

2008-12-08 Thread tnt
Freeradius has cablelabs VSA dictionary. If it needs updating ask the vendor for the latest dictionary. Post it also to this list so that it can be included in the distribution. Ivan Kalik Kalik Informatika ISP Dana 8/12/2008, al pat [EMAIL PROTECTED] piše: Hello, I am trying to decode

Re: How to parse the value in an accounting message and print thecontents In detail-... file?

2008-12-08 Thread al pat
Ivan, Yes, there is a cablelabs dictionary. The problem is that one of the attributes has a complex structure that is embedded in the value part. The value part here is just printed as a hex string - but from the packetcable standard it is to be interpreted in a certain way. Since this payload

Freeradius and WiMAX ASN-GW

2008-12-08 Thread Ben Wiechman
Can anyone who is using FR to authenticate a 802.16e WiMAX network speak a bit about which ASN-GW they are using and any issues they are encountering? Of particular interest is the ASN-GW offered by Cisco. Ben Wiechman Network Admin Wisper High Speed Internet - List

Re: Is FreeRADIUS 2.1.1 capable of handling NAI decorations

2008-12-08 Thread Luca Adamo
Thank you for the quick reply. I've tried this solution but the results are not what I expected. In fact i defined the following realm module: realm wimax_decorator { format = prefix delimiter = } ignore_default = no ignore_null = no } and i make FR to

Re: Is FreeRADIUS 2.1.1 capable of handling NAI decorations

2008-12-08 Thread Alexandre Chapellon
Change sql_user_name = %{User-Name} to sql_user_name = %{Stripped-User-Name} in dialup.conf Le 02.12.2008 06:37, Luca Adamo a écrit : Thank you for the quick reply. I've tried this solution but the results are not what I expected. In fact i defined the following /realm /module: realm

Re: How to parse the value in an accounting message and printthecontents In detail-... file?

2008-12-08 Thread tnt
What is the name that attribute? Can you post the debug of the accounting packet. Ivan Kalik Kalik Informatika ISP Dana 8/12/2008, al pat [EMAIL PROTECTED] piše: Ivan, Yes, there is a cablelabs dictionary. The problem is that one of the attributes has a complex structure that is embedded in the

Re: Is FreeRADIUS 2.1.1 capable of handling NAI decorations

2008-12-08 Thread tnt
The problem is that all my subsequent queries suppose the Attribute User-Name to be [EMAIL PROTECTED] instead of [EMAIL PROTECTED] so I keep getting null result set from the Oracle DB since there aren't entries for [EMAIL PROTECTED] in the DB. A possible solution could be making the sql module to

Re: How to parse the value in an accounting message and printthecontents In detail-... file?

2008-12-08 Thread al pat
Sat Aug 16 19:02:04 2008 NAS-IP-Address = 101.101.101.3 Acct-Status-Type = Interim-Update Acct-Session-Id = I=220+00\000\000\000\t CableLabs-Event-Message =

Re: How to parse the value in an accounting message andprintthecontents In detail-... file?

2008-12-08 Thread tnt
Sat Aug 16 19:02:04 2008 NAS-IP-Address = 101.101.101.3 Acct-Status-Type = Interim-Update Acct-Session-Id = I=220+00\000\000\000\t CableLabs-Event-Message =

Does FreeRADIUS support PEAPv0/EAP-TLS?

2008-12-08 Thread Jason Wittlin-Cohen
I'm attempting to setup PEAPv0/EAP-TLS which uses EAP-TLS as the inner authentication method within PEAP. Unlike EAP-TLS, PEAPv0/EAP-TLS sends the client certificate within the secure SSL tunnel, thus protecting the user's identity. While RFC-5216 suggests that EAP-TLS can optionally support a

RE: Does FreeRADIUS support PEAPv0/EAP-TLS?

2008-12-08 Thread Jason Wittlin-Cohen
I forgot to mention that I'm running FreeRADIUS 2.1.0 on Ubuntu 8.10 (2.1.0+dfsg-0ubuntu2 to be exact). As the original binary didn't come with SSL support, I recompiled it using the Ubuntu source package. The client computer I have been testing run Windows XP SP3. Jason -- Jason Wittlin-Cohen

about the source code in version 2.1.3

2008-12-08 Thread neoo
Hi,all I'm not clear about two things. 1) in the file freeradius-server-2.1.3/src/mainradiusd.c, at the line 103-105: 103 #ifdef OSFC2 104 set_auth_parameters(argc,argv); 105 #endif what's this checked for ? it's about security or something? 2) in the file

Question about the random file

2008-12-08 Thread Jason Wittlin-Cohen
I'm currently using EAP-TLS with 3072 bit RSA certificates and a 3072 bit DH paramters. Currently I'm using the random file produced by the bootstrap script which appears to take 10 bytes of data from /dev/urandom. Is this sufficient with the larger keysize I am using? In addition, many howtos

need help on Access Reject

2008-12-08 Thread Do Nguyen Ha
Hi all is there a way to insert the attribute h323-return-code = 2 in the Access Reject message i use the FreeRadius 1.1.7, Could you give me some advices Thank you Ha`- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html