How to determine packet-type in proxy-reply

2010-09-14 Thread Chidanand Gangur
Hi, I am using freeRADIUS verison 2.1.9. I am trying to add some attribute in proxy-reply, I want to do it only if it is Access-Accept packet. I am trying to achieve it using unlang. I have tried following options and none of them have worked if (%{proxy-reply:Packet-Type} == 2) { }

a lot of memory inuse

2010-09-14 Thread Strong, Mark
Hi Guys, I have free radius 2.1.6, and it has quite a chunk of memory inuse at the moment, are there any known issues with this version and memory leaks? It's running on CentOS 4.7 32 bit, compiled with this version of MySQL 5.0.20a-0.rhel4 (which isn't standard on CentOS 4.7). I

Re: a lot of memory inuse

2010-09-14 Thread James J J Hooper
--On 14 September 2010 17:01 +1000 Strong, Mark mstr...@tnsi.com wrote: Hi Guys, I have free radius 2.1.6, and it has quite a chunk of memory inuse at the moment, are there any known issues with this version and memory leaks? It's running on CentOS 4.7 32 bit, compiled with this

Re: a lot of memory inuse

2010-09-14 Thread James J J Hooper
--On 14 September 2010 08:15 +0100 James J J Hooper jjj.hoo...@bristol.ac.uk wrote: --On 14 September 2010 17:01 +1000 Strong, Mark mstr...@tnsi.com wrote: Hi Guys, I have free radius 2.1.6, and it has quite a chunk of memory inuse at the moment, are there any known issues with

Solved: interpret check-Item and change reply-item to set VLAN

2010-09-14 Thread Michael Bathe
Thanks for reply! I have solved my attempt to set VLAN-Group-ID based on checkItem by insert this line in post-auth section of 'sites-available/default' -- $INCLUDE ${confdir}/setTunnelGroup -- In the file setTunnelGroup I insert this: -- if (reply:SectionNetwork == sec11) { update reply {

Re: How to determine packet-type in proxy-reply

2010-09-14 Thread Alan DeKok
Chidanand Gangur wrote: I am trying to add some attribute in proxy-reply, I want to do it only if it is Access-Accept packet. I am trying to achieve it using unlang. I have tried following options and none of them have worked if (%{proxy-reply:Packet-Type} == 2) { }

Re: How to determine packet-type in proxy-reply

2010-09-14 Thread Chidanand Gangur
On Tue, Sep 14, 2010 at 1:35 PM, Alan DeKok al...@deployingradius.comwrote: Chidanand Gangur wrote: Tue Sep 14 06:34:14 2010 : Info: +- entering group post-proxy {...} Tue Sep 14 06:34:14 2010 : Info: ++? if (proxy-reply:Packet-Type == 2) Tue Sep 14 06:34:14 2010 : Info: (Attribute

Re: Login Incorrect !

2010-09-14 Thread Alan Buxey
Hi, [peap] The users session was previously rejected: returning reject (again.) [peap] *** This means you need to read the PREVIOUS messages in the debug output [peap] *** to find out the reason why the user was rejected. [peap] *** Look for reject or fail. Those earlier messages will

Re: use freeRadius client to connect a java application

2010-09-14 Thread Noura Kossentini
Hi can I use the authentication module for apache. With my java program I will send a http requqest to apache and it will do the authentication?? http://www.apache.org/ 2010/9/8 Alan DeKok al...@deployingradius.com Noura Kossentini wrote: I proposed to use TinyRadius but they refused it.

Details of attrbiutes in SQL Table

2010-09-14 Thread Robin
Hi, I already installed run FreeRADIUS in my server successfully (FreeRADIUS with CenterOS, Mikrotik RouterOS). I knew usage of some attributes in SQL tables. For example, Insert into TABLE radgroupcheck, add a group name and attribute - Simultaneous-Use:=1 to limit only 1 user to

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread Esteban TALAVERA
Thanks, yoy're rigth. I'ill continue this way, the problem is not the effort, but I was trying to complete the picture Freeradius+MySql+EAP_TLS+Cisco AP without success. Keep trying... On Tue, Sep 14, 2010 at 5:25 AM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, I´ll like to know if there

FreeRadius crashed on loading test.

2010-09-14 Thread Konstantin Chekushin
Good day. I want to continue Dinh Pham Cong topic ((FreeRadius crashed on accounting load tests with 1000 concurrent clients - Tue, 10 Nov 2009 01:39:30 -0800 )) I use freeradius 2.1.9 Linux myhost 2.6.26-2-amd64 Some info from radiusd.conf : -- max_request_time = 30

passing VLAN tag to clients

2010-09-14 Thread matteo
Hello, I'm using Freeradius 2.1.8 on Fedora 13 with EAP-TTL and PAP with inner authentication with OpenLDAP as backend. Everything is working fine, but the problem is that I haven't an OpenLDAP Radius oriented, that is there is no VLAN info in my LDIFs. So, is there a way, external to the

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread Kevin Ehlers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/13/10 3:40 PM, Esteban TALAVERA wrote: I´ll like to know if there is a way to configurates a Radius server + Mysql to authenticate Wireless clients via a Cisco AP without certificates (EAP TLS), only a username and password Are you using an

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread Esteban TALAVERA
Thanks Is an autonomous AP. I'll try Freeradius+MySql+EAP-TLS schema. On Tue, Sep 14, 2010 at 11:06 AM, Kevin Ehlers ke...@uoregon.edu wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/13/10 3:40 PM, Esteban TALAVERA wrote: I´ll like to know if there is a way to configurates a

Re: passing VLAN tag to clients

2010-09-14 Thread Phil Mayers
On 14/09/10 16:30, mat...@crs4.it wrote: Hello, I'm using Freeradius 2.1.8 on Fedora 13 with EAP-TTL and PAP with inner authentication with OpenLDAP as backend. Everything is working fine, but the problem is that I haven't an OpenLDAP Radius oriented, that is there is no VLAN info in my LDIFs.

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread John Dennis
On 09/14/2010 11:53 AM, Esteban TALAVERA wrote: Thanks Is an autonomous AP. I'll try Freeradius+MySql+EAP-TLS schema. Huh? What's that? As has been pointed previously you must have a server cert if you're doing TLS. In addition the server cert should be signed by a trusted CA and the

Re: FreeRadius crashed on loading test.

2010-09-14 Thread Alan Buxey
Hi, I'm using rlm_sql for my own ippool module: database = mysql num_sql_socks = 32 a while back I pointed out that anything over 10 seems to really kill the system - we found it ticked along okay with 10 sockets per thread anyway but then we found, generally, that MySQL sucks for

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread Alan Buxey
Hi, I´ll like to know if there is a way to configurates a Radius server + Mysql to authenticate Wireless clients via a Cisco AP without certificates (EAP TLS), only a username and password yes. we use Cisco APs - we used to use them in autonomous mode but moved to the lightweight LWAPP

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread Kevin Ehlers
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On 9/14/10 11:38 AM, Alan Buxey wrote: Hi, I´ll like to know if there is a way to configurates a Radius server + Mysql to authenticate Wireless clients via a Cisco AP without certificates (EAP TLS), only a username and password yes. we use

Re: Freeradius + MySql + Wireless Clients without certificates

2010-09-14 Thread Alan Buxey
Hi, I agree for the most part. However, captive portals will still be in use for guest access. There's less administrative and helpdesk overhead for this type of deployment. On windows machines, the CA/cert trust has to be explicitly enabled. This can be a barrier for un-managed and

Failed default PAP and PEAP in CentOS

2010-09-14 Thread Javier Richard Quinto Ancieta
CentOS 5.4 installing freeradius from the default base repository freeradius-1.1.3-1.5.el5_4 If I add, to the top of /etc/raddb/users: bob Cleartext-Password := hello Then when I attempt to start freeradius I get: /etc/raddb/users[1]: Parse error (check) for entry bob: Unknown attribute

Re: Failed default PAP and PEAP in CentOS

2010-09-14 Thread John Dennis
On 09/14/2010 03:24 PM, Javier Richard Quinto Ancieta wrote: CentOS 5.4 installing freeradius from the default base repository freeradius-1.1.3-1.5.el5_4 You should use a modern version of FreeRADIUS from the 2.x series. It's available under the freeradius2 package name (note the 2 appended).

Re: Failed default PAP and PEAP in CentOS

2010-09-14 Thread Alan Buxey
Hi, freeradius-1.1.3-1.5.el5_4 If I add, to the top of /etc/raddb/users: bob Cleartext-Password := hello yep - that wouldnt work in 1.x But I added to the top of /etc/raddb/users of the next way: user User-Password == pass Auth-Type := EAP And It's Ok. aye - but you

detail logging not right with IPv6 clients

2010-09-14 Thread Alan Buxey
with the fact it uses %{Client-IP-Address} as part of the detailfile construction as the logs show: [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct//auth-detail-20100914 [reply_log] /var/log/radius/radacct/%{Client-IP-Address}/reply