Re: unable to connection freeradius with mysql

2009-08-05 Thread Alan DeKok
shivashankar wrote: i am useing freeradius2.1.6 and mysql5.0 on solaris10. when ever i start the server radiusd -X . i am getting below problem. i think it is not connected to mysql.plz help me how to connect READ the debug messages? rlm_sql (sql): Attempting to connect rlm_sql_mysql

Re: Freeradius and memory usage

2009-08-05 Thread Alan DeKok
Roy Kartadinata wrote: Do you need any other information from me to help you with finding the leaks? Ideally, run it under valgrind, with options where it shows and tracks memory usage: $ script leak.txt $ valgrind --tool=memcheck --leak-check=full radiusd -f $ exit Let it run for a few

MySQL - support - radacct (sql counters not responding)

2009-08-05 Thread Benjamin Klutse
Hi Having a problem with getting freeradius to kick users off when their time has expired. using mysql, all modules loaded and sqlcounter included in radiusd.conf but still not working. i've cross-checked the sql settings in authorize and accounting section and sql is # (commented) out. any

Re: Freeradius-Users Digest, Vol 52, Issue 27

2009-08-05 Thread Gilbert Lo
Thank you for your message. I am away until August 7th. I will respond to your message on my return . For urgent matters, please contact helpd...@stgeorges.bc.ca . Cheers, Gilbert Lo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Info regarding radius and tacacs

2009-08-05 Thread Vamsi Krishna Valiveti
Hi, Can anyone let me know if there is a free downloadable Tacacs server with support for Ipv6 If yes then please provide the link or the freeware software itself Rgds, Vamsi DISCLAIMER: This message is proprietary to Aricent and is intended solely for the

Client-IP-Address attribute in the request

2009-08-05 Thread Adam Osuchowski
Hi, I can't obtain Client-IP-Address attribute in %RAD_REQUEST hash in rlm_perl. In default server config from version 2.1.6, I noticed such a fragment: # It also adds the %{Client-IP-Address} attribute to the request. preprocess I browse through the sources of FR version 2.1.6 and it

Re: Info regarding radius and tacacs

2009-08-05 Thread Alan Buxey
Hi, Hi, Can anyone let me know if there is a free downloadable Tacacs server with support for Ipv6 www.google.com alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Info regarding radius and tacacs

2009-08-05 Thread YvesDM
On Wed, Aug 5, 2009 at 1:13 PM, Alan Buxeya.l.m.bu...@lboro.ac.uk wrote: Hi, Hi, Can anyone let me know if there is a free downloadable Tacacs server with support for Ipv6 www.google.com alan Aren't you mistaking? This looks like some kind of search engine, not a tacacs server? :-) -

LDAP bind as user

2009-08-05 Thread Mark Saner
I'm using freeradius 2.0.4 for eap-peap authentication with LDAP as my back end. Everything is working great (thanks to help from this mailing list). However I was wondering if there is a way to get RADIUS to bind to LDAP as the user that is trying to authenticate rather than the LDAP admin

Re: LDAP bind as user

2009-08-05 Thread Alan DeKok
Mark Saner wrote: I'm using freeradius 2.0.4 for eap-peap authentication with LDAP as my back end. Everything is working great (thanks to help from this mailing list). However I was wondering if there is a way to get RADIUS to bind to LDAP as the user that is trying to authenticate rather than

Re: LDAP bind as user

2009-08-05 Thread Rokkhan
You could use ldap as authentication using EAP-TTLS. 2009/8/5 Alan DeKok al...@deployingradius.com: Mark Saner wrote: I'm using freeradius 2.0.4 for eap-peap authentication with LDAP as my back end. Everything is working great (thanks to help from this mailing list). However I was wondering

Fwd: Freeradius with Active_Directory

2009-08-05 Thread Hari Novferdianto
Dear All... I was following http://deployingradius.com/documents/configuration/active_directory.html I was installed freeradius-1.1.7 and samba version 3 on my slackware 11 and also I was installed Windows Server 2003 for Active Directory. This is my smb.conf : [global] workgroup = RADIUS

Freeradius with Active_Directory

2009-08-05 Thread Hari Novferdianto
Dear All... I was following http://deployingradius.com/documents/configuration/active_directory.html I was installed freeradius-1.1.7 and samba version 3 on my slackware 11 and also I was installed Windows Server 2003 for Active Directory. This is my smb.conf : [global] workgroup = RADIUS

RE: Freeradius and memory usage

2009-08-05 Thread Roy Kartadinata
Alan DeKok wrote: Roy Kartadinata wrote: Do you need any other information from me to help you with finding the leaks? Ideally, run it under valgrind, with options where it shows and tracks memory usage: $ script leak.txt $ valgrind --tool=memcheck --leak-check=full radiusd -f $ exit

Re: Client-IP-Address attribute in the request

2009-08-05 Thread Alan DeKok
Adam Osuchowski wrote: Hi, I can't obtain Client-IP-Address attribute in %RAD_REQUEST hash in rlm_perl. In default server config from version 2.1.6, I noticed such a fragment: # It also adds the %{Client-IP-Address} attribute to the request. preprocess Ah. That doesn't happen

Re: Fwd: Freeradius with Active_Directory

2009-08-05 Thread Alan Buxey
Hi, exec ntlm_auth { wait = yes program = /path/to/ntlm_auth ntlm_auth --request-nt-key --domain=MYDOMAIN --username=%{mschap:User-Name} --password=%{User-Password} } I reall hope that you edited that part of config to put the real PATH of html_auth in

Re: Freeradius and memory usage

2009-08-05 Thread Alan DeKok
Roy Kartadinata wrote: Alan DeKok wrote: Will radius still be operational (taking authentication request) while we run it under valgrind? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Info regarding radius and tacacs

2009-08-05 Thread Alan Buxey
Hi, Aren't you mistaking? This looks like some kind of search engine, not a tacacs server? :-) thanks to the API it can be whatever you want it to be - I've got a friend who's doing some seriously cool things with Google code ;-) alan - List info/subscribe/unsubscribe? See

Re: Freeradius and memory usage

2009-08-05 Thread Alan Buxey
Hi, Will radius still be operational (taking authentication request) while we run it under valgrind? yes - but slower - so make sure you've got the horsepower...any time critical things might not operate as usual. alan - List info/subscribe/unsubscribe? See

RE: unable to connection freeradius with mysql

2009-08-05 Thread Ben Wiechman
http://lmgtfy.com/?q=does+not+support+authentication+protocol+requested+by%2 0server+consider+upgrading+MySQL+client -Original Message- From: freeradius-users- bounces+wiechman.lists=gmail@lists.freeradius.org [mailto:freeradius-users-

Simple username password text file

2009-08-05 Thread Paul Blalock
Is it possible to have a simplistic username and password setup in freeradius? For example. user, pass user1, pass1 Or is it possible to have the users file point to a file that does this? If not, is it possible to have this type of format by using mysql? -- Paul Blalock - List

RE: Freeradius and memory usage

2009-08-05 Thread Roy Kartadinata
Alan Buxey wrote: Hi, Will radius still be operational (taking authentication request) while we run it under valgrind? yes - but slower - so make sure you've got the horsepower...any time critical things might not operate as usual. Cool, I'll just do it during our slowest hour then.

Re: Simple username password text file

2009-08-05 Thread Alan DeKok
Paul Blalock wrote: Is it possible to have a simplistic username and password setup in freeradius? For example. user, pass user1, pass1 $ man rlm_passwd Or is it possible to have the users file point to a file that does this? No. If not, is it possible to have this type of

Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0)

2009-08-05 Thread Heivilin, Jim
I'm seeing lots of Wed Aug 5 10:40:28 2009 : Error: TLS_accept:error in SSLv3 read client certificate A Wed Aug 5 10:40:28 2009 : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) In my radius logs. I'm fairly certain I've done this research before but I don't have any

Buffered SQL for authentication failures?

2009-08-05 Thread John Morrissey
I'm in the process of replacing OSG's Radiator with FreeRADIUS. I have our relatively complex configuration mostly ported, but a few things have left me stumped. I'd like to write authentication failures to an SQL database using a detail listener so they're buffered, as with accounting: detail

Re: Error: rlm_eap: SSL error error:00000000:lib(0):func(0):reason(0)

2009-08-05 Thread Alan DeKok
Heivilin, Jim wrote: I'm seeing lots of Wed Aug 5 10:40:28 2009 : Error: TLS_accept:error in SSLv3 read client certificate A Wed Aug 5 10:40:28 2009 : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) That was fixed some time *way* back in the 1.1 versions. In

Service-type

2009-08-05 Thread Bert Beaudin
Hello all I have freeradius authenticating off of Active Directory. This is working but I now need to pass Service-Type = 6 for all connections that sussfuly authencate. What file and section to I put this in? Let me know if you need mroe information. Thanks, bert - List

Re: Simple username password text file

2009-08-05 Thread Scott Lambert
On Wed, Aug 05, 2009 at 09:44:55AM -0500, Paul Blalock wrote: Is it possible to have a simplistic username and password setup in freeradius? For example. user, pass user1, pass1 Or is it possible to have the users file point to a file that does this? If not, is it possible to have

DEAFAULT keyword??

2009-08-05 Thread Marlon Duksa
Hi - I've been reading through WiKi pages but still not clear. I need to evaluate two attributes and I'm doing this with the =~ operator. But the second attribute is not evaluated but instead returned as reg expr (exactly as stated below) DEFAULT *User-Name =~ ^([aA-zZ]+)-([aA-zZ]+)$,

Re: DEAFAULT keyword??

2009-08-05 Thread Marlon Duksa
I put 'fall-through' before DEFAULT NAS-Port-Id and now it works. But I still do not understand what does the DEAFULT keyword do? Thanks, Marlon On Wed, Aug 5, 2009 at 3:51 PM, Marlon Duksa mdu...@gmail.com wrote: Hi - I've been reading through WiKi pages but still not clear. I need to