Re: authentification

2010-05-20 Thread Johan Meiring
On 2010/05/18 10:47 PM, dorra aa wrote: is there somebody want to tell what's the utility of it? From: dj_dido2...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: authentification Date: Tue, 18 May 2010

Re: Segmentation fault on 2.1.7 during HUP

2010-05-20 Thread Alan DeKok
coja wrote: Could you please tell me how i can include my pins file to users file. When i write line like $INCLUDE pins in the beginning of the users file, i can see how that line will disapear after reload or restart. Huh? The users file is reloaded, along with all $INCLUDE files. Maybe

Active Directory as PKI

2010-05-20 Thread Nikita Koshikov
Hello freeradius users/admins, I'm trying to implement EAP-TLS authorization with freeradius and Active Directory Certificates Service, but I'm stuck here... With keys/certificates, generated with freeradius makefile(/etc/raddb/certs) everything is working fine. Here is the hierarchy of keys

problem whit home_server template

2010-05-20 Thread Ana Gallardo
Hello, I'm workimg with Freeradius 2.1.8. I would like to use templates in my proxy.conf file to define some home servers. My templates.conf file is: /etc/freeradius# cat templates.conf templates { home_server tldrediris { type = auth+acct port =1812 secret =

State of 2.x?

2010-05-20 Thread Alex French
Hi, We're running 1.1.8 on FreeBSD 5.3 and have been delaying the move to 2.x until absolutely necessary. Given the recent libtool22 issues, I'm thinking it's time to move. Just wondering if people would recommend moving now to 2.1.9 or waiting a while longer for a stable 2.2? Thanks -- Alex -

hostname variable ?

2010-05-20 Thread Fred MAISON
Hello Freeradius-Users, Is there any way to reference hostname (in fact hostname -s) in configuration files, in order to have identical configuration files tree on both a normal and a backup freeradius 2.1.8 server ? For example, to manage differents listen addresse on normal and backup :

FTP and Telnet request to RADIUS server

2010-05-20 Thread Arjun Prasad
Hi, Can we use RADIUS server to validate the user trying to access the NAS using ftp or telnet session. Regards Arjun prasad - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FTP and Telnet request to RADIUS server

2010-05-20 Thread Alan DeKok
Arjun Prasad wrote: Hi, Can we use RADIUS server to validate the user trying to access the NAS using ftp or telnet session. Will your NAS send RADIUS requests when the user tries to access the NAS using a ftp or telnet session? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: hostname variable ?

2010-05-20 Thread Alan DeKok
Fred MAISON wrote: Is there any way to reference hostname (in fact hostname -s) in configuration files, in order to have identical configuration files tree on both a normal and a backup freeradius 2.1.8 server ? $ENV{HOSTNAME} refers to the environment variable HOSTNAME. Alan DeKok. -

Re: State of 2.x?

2010-05-20 Thread Alan DeKok
Alex French wrote: We're running 1.1.8 on FreeBSD 5.3 and have been delaying the move to 2.x until absolutely necessary. Given the recent libtool22 issues, I'm thinking it's time to move. Just wondering if people would recommend moving now to 2.1.9 or waiting a while longer for a stable 2.2?

Building and sending Acct packets

2010-05-20 Thread Stefan A.
I have some use cases, where I have to send an Accounting packet to an RADIUS Accounting Server to provision the user on this server. The trigger for that accounting packet must not be necessarily an accounting packet, coming from a NAS. It might also be a RADIUS Access Request. I will build

Re: State of 2.x?

2010-05-20 Thread Alan Buxey
Hi, Use 2.1.9, which should come out tomorrow or Monday. been running 2.1.9 on some systems now since its pre-release with no issues noted so far 2.2.0 is for major new features. ...and is therefore likely to be 'unstable' compared to 2.1.x alan - List info/subscribe/unsubscribe? See

Re: State of 2.x?

2010-05-20 Thread Alex French
Thanks Alan Alan, that's what I wanted to know. -- Alex - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FW: MS AD / OpenLDAP with PAP - is it really not possible ?

2010-05-20 Thread Pawel Cieplinski
Hello I have got application that allow only to authenticate using PAP method. My Goal would bo to use Active Directory as a abckend User Database, but I found that: Once the PAP authentication test has been successful, the next step for sites using Active Directory is to configure the

Re: hostname variable ?

2010-05-20 Thread Fred MAISON
Great ! Thanks, Alan. Le jeudi 20 mai 2010 à 13:39 +0200, Alan DeKok a écrit : Fred MAISON wrote: Is there any way to reference hostname (in fact hostname -s) in configuration files, in order to have identical configuration files tree on both a normal and a backup freeradius 2.1.8 server

Re: certs files missing?

2010-05-20 Thread Josip Rodin
On Wed, May 19, 2010 at 01:25:56PM -0600, shirkavand wrote: $ cd /etc/raddb/certs $ make but in my freeradius installation the certs folder does not have any make file, so if i try to run above commands i get errors. In fact my installation does not have several files that the tutorial

Re: Segmentation fault on 2.1.7 during HUP

2010-05-20 Thread coja
Alan DeKok-2 wrote: coja wrote: Could you please tell me how i can include my pins file to users file. When i write line like $INCLUDE pins in the beginning of the users file, i can see how that line will disapear after reload or restart. Huh? The users file is reloaded, along with

Re: freeradius + mysql trouble

2010-05-20 Thread Ski Mountain
I was simply using the debian package manager version, seams to work file for what I need. is version of freeradius supplied by distro or package manager? have you uncommented calls to sql - eg in the default server or inner-tunnel (look in the required/needed sections, eg authorize,

Re: Building and sending Acct packets

2010-05-20 Thread Alan DeKok
Stefan A. wrote: I have some use cases, where I have to send an Accounting packet to an RADIUS Accounting Server to provision the user on this server. The trigger for that accounting packet must not be necessarily an accounting packet, coming from a NAS. It might also be a RADIUS Access

Re: FW: MS AD / OpenLDAP with PAP - is it really not possible ?

2010-05-20 Thread Alan DeKok
Pawel Cieplinski wrote: I have got application that allow only to authenticate using PAP method. My Goal would bo to use Active Directory as a abckend User Database, but I found that: It should work. Once the PAP authentication test has been successful, the next step for sites using

Re: certs files missing?

2010-05-20 Thread shirkavand
Use the package and you'll probably get the certificates automatically So i can avoid to execute make in /usr/share/doc/freeradius/examples etc etc for generating test certificates? then i can use the defaults ones that are stored into /etc/freeradius/certs that came with the normal package

Authenticating groups via LDAP

2010-05-20 Thread John Maher
I really didn't want to post here, but I just can't make any headway with my radius implementation. I am very new at this and still quite confused on how the various config files function and interact with each other. So, I'm not surprised that my implementation is only sort of working. I have

wildcard matching on username?

2010-05-20 Thread Jiann-Ming Su
I'm running freeradius 2.1.8 with a MySQL backend. I'm want to do MAC based authentication for network access control on my switch. Is it possible to specify a wildcard for the username (mac address)? That is, if I have a bunch of computers with the same OUI on the NIC's, how do I configure

Re: ISG DHCP relay

2010-05-20 Thread Arran Cudbard-Bell
On May 18, 2010, at 6:34 AM, Alan Buxey wrote: Hi, not quite in the same category :-P perhaps more people need to read 'how to ask questions...' ? http://catb.org/~esr/faqs/smart-questions.html very good resource! Often, the person telling you to do a search has the manual or

Re: Authenticating groups via LDAP

2010-05-20 Thread John Dennis
On 05/20/2010 05:44 PM, John Maher wrote: I really didn't want to post here, but I just can't make any headway with my radius implementation. I am very new at this and still quite confused on how the various config files function and interact with each other. So, I'm not surprised that my