Re: Acct Input and Output gigaword

2009-07-06 Thread Johan Meiring
Eric wrote: any suggestion? Maybe this? http://bugs.gentoo.org/attachment.cgi?id=102981 Can anyone comment on the quality of this patch? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See

Re: unable to run radtest

2009-07-06 Thread ramesh p
On Sat, Jul 4, 2009 at 10:41 PM, Alan DeKok al...@deployingradius.comwrote: ramesh p wrote: I tried to run the following: r...@parsa-laptop:/etc/freeradius# radtest sqltest testpwd localhost 1812 testing123 radclient: socket: cannot initialize udpfromto: Function not implemented.

Cisco ignores Framed-IP-Address from freeradius

2009-07-06 Thread Gilloteau Frederic
Hello, I use freeradius 2.1.1-7 and a CISCO router (IOS 12.4(6)T9) to provide VPN connections. I would like my CISCO router to assign static IP address to remote VPN users thanks to the Freeradius server. My freeradius server is configured to give static ip address to users. I can check it with

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
Further to my previous query I've got global server messages being syslogged to my log hosts. However, all of my radius magic happens inside virtual servers, which live in sites-available. I haven't been able to get any syslog packets sent from within these virtual servers. I've tried

Re: Syslog and FreeRADIUS

2009-07-06 Thread Alan DeKok
Jonathan Gazeley wrote: However, all of my radius magic happens inside virtual servers, which live in sites-available. I haven't been able to get any syslog packets sent from within these virtual servers. The log section is global. See raddb/sites-available/README for a definitive list of

Re: Cisco ignores Framed-IP-Address from freeradius

2009-07-06 Thread up
On Mon, 6 Jul 2009, Gilloteau Frederic wrote: Hello, I use freeradius 2.1.1-7 and a CISCO router (IOS 12.4(6)T9) to provide VPN connections. and the CISCO router gets it ... .. but never assign it to remote users, the cisco router assigns an IP address from its local pool. The interesting

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
On 07/06/2009 04:35 PM, Alan DeKok wrote: Jonathan Gazeley wrote: However, all of my radius magic happens inside virtual servers, which live in sites-available. I haven't been able to get any syslog packets sent from within these virtual servers. The log section is global. See

Re: Syslog and FreeRADIUS

2009-07-06 Thread A . L . M . Buxey
Hi, The log section is global. See raddb/sites-available/README for a definitive list of which sections can appear inside of a server section. OK, thanks. If the log section is global, should I simply be able to insert the word log into my virtual servers? Doing so causes the

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
On 07/06/2009 05:02 PM, a.l.m.bu...@lboro.ac.uk wrote: Ultimately what I'm after is the ability to send detail logs to syslog rather than have them written to a file. Perhaps I've been asking the wrong questions so far, or in the wrong way :) whoa. thats completely different to what

RE: Syslog and FreeRADIUS

2009-07-06 Thread Ted Behling
Jonathan, I'm actually planning to roll out RADIUS on a virtualization platform too, probably Xen. Could you share what VM platform you're using? Thanks! Ted From: freeradius-users-bounces+ted.behling=htc.hargray@lists.freeradius.or g

Re: Syslog and FreeRADIUS

2009-07-06 Thread Jonathan Gazeley
Hi Ted, We are using VMWare ESXi on our hypervisors. There's no need to run a host OS and it's easy to set up. We haven't encountered any problems to speak of. The guest OS that the radius servers run is CentOS. Cheers, Jonathan On 07/06/2009 05:16 PM, Ted Behling wrote: Jonathan, I'm

Re: Syslog and FreeRADIUS

2009-07-06 Thread A . L . M . Buxey
Hi, The reason for wanting to send everything to a log host on the network is that the new generation of radius servers we are preparing are all virtualised and only have a few GB of disk - so no room for logs. there are so many ways of having proper disk access via a virtualised host

freeradius active directory integration fails with no such realm

2009-07-06 Thread Andrei-Florian Staicu
Hello all, I tried to configure freeradius 2.0.4 on debian 5.0.2 (after recompiling with openssl support, as instructed in the debian readme) for authenticating wireless connections with wpa2-enterprise, using active directory user/password (windows xp as clients, d-link dwl 2200ap as ap's).

Re: freeradius active directory integration fails with no such realm

2009-07-06 Thread A . L . M . Buxey
Hi, One thing stands out though in the output of freeradius -X (only after changing the order of suffix and ntdomain in sites-available/default and radiusd.conf: ++[mschap] returns noop ensure that preprocess module is called first and then ensure that with_ntdomain_hack is set to on

Re: set absolute lifetimes

2009-07-06 Thread Damjan
Use Expiration attribute. And where? radcheck? What should I check? If Expiration is... what is CurrentTime as Value in SQL? it's a check item, FreeRadius will use it to allow or deny access and to set Session-Timeout if needed. -- damjan | дамјан This is my jabber ID --

Re: freeradius active directory integration fails with no such realm

2009-07-06 Thread Ivan Kalik
One thing stands out though in the output of freeradius -X (only after changing the order of suffix and ntdomain in sites-available/default and radiusd.conf: ++[mschap] returns noop rlm_realm: Looking up realm IPSO0 for User-Name = IPSO0\andrei.staicu rlm_realm: No such realm IPSO0

Re: Cisco ignores Framed-IP-Address from freeradius

2009-07-06 Thread Ivan Kalik
I would like my CISCO router to assign static IP address to remote VPN users thanks to the Freeradius server. My freeradius server is configured to give static ip address to users. Fine, how about Cisco? and the CISCO router gets it ... .. but never assign it to remote users, the cisco

Re: Syslog and FreeRADIUS

2009-07-06 Thread Alan DeKok
Jonathan Gazeley wrote: For a start I want to syslog the stuff that usually goes into radius.log - so the messages when the server starts (which are already being syslogged successfully) and the summary line (Auth: Login OK) printed after an authentication (which are currently not being sent

David Suarez De Lis/UN24956/OPERACION Y MANTENIMIENTO /TSM está ausente de la oficina.

2009-07-06 Thread david . suarezdelis
Estaré ausente de la oficina desde el 06/07/2009 y no volveré hasta el 22/07/2009. Responderé a su mensaje cuando regrese. Si tiene alguna emergencia, puede contactar con Jose Manuel Gomez Perez (jmgo...@telefonica.es) o Juan Orea Hernandez (juan.oreahernan...@telefonica.es).