RE: Grant access for all users before login

2010-12-01 Thread snowman5840
snowman5840 wrote: Garber, Neal-2 wrote: Use machine authentication (if wireless, use automatic connect). - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Ok that means i must install the certificate (ca.der) on the client. And what else i

Re: Problem with authenticate method (Auth-Type)

2010-12-01 Thread snowman5840
sltd wrote: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user Failed to authenticate the user. What authentication do you want to use!? the user file? you should enable your prefered authentification! -- View this message in context:

Freeradius and Voip

2010-12-01 Thread miha-
Hello, I am first time setting freeradius. I am setting it for voip accounting. I need a little help form you guys :) I read that I need to enable sql in radiusd.conf. I have also run a script for creating a tables. I changed sql.conf to voip-postpaid.conf ( I changed login, pass, and server in

RE: Grant access for all users before login

2010-12-01 Thread Garber, Neal
Ok machine authentication works now with computer name from samba. i can assign vlans also. The switch port appears as up, BUT i can't ping the machine und i can't login with new users that never before use this machine (no local useraccount). Why i doesn't get network access after

Re: Freeradius and Voip

2010-12-01 Thread Alan DeKok
miha- wrote: I am first time setting freeradius. I am setting it for voip accounting. I need a little help form you guys :) I read that I need to enable sql in radiusd.conf. I have also run a script for creating a tables. I changed sql.conf to voip-postpaid.conf ( I changed login, pass, and

dynamically selecting, which attribute to evaluate

2010-12-01 Thread Stefan A.
Hello, I'm trying to dynamically select Attributes to check their values. I have an application, which puts attribute (representing Prepaid Tickets) into the Accept table. All possible TicketTypes are defined in the dictionary. Example: Ticket245-trigger-reactivation = 200 Depending on

freeradius + ldap

2010-12-01 Thread Ana Gallardo
Hello, I'm using freeradius 2.1.10 and I want to use ldap like a backend in authorize section to take userPassword attribute (unix crypt) to authenticate the user. My problem is: the ldap server don't have public key that an admin user (who bind) can take. So I have to bind in the authorize

Re: dynamically selecting, which attribute to evaluate

2010-12-01 Thread Alan DeKok
Stefan A. wrote: and then to evaluate TicetType specific Attributes... if (reply:%{control:TicketType}-trigger-reactivation != ){ You can't really do two levels of expansion like that, sorry. Why does it not expand the %{control:TicketType} to Ticket245 in this situation? You

use existing sql table for user-password

2010-12-01 Thread Oguzhan Kayhan
Hello, I want to use freeradius for wireless authentication. I got an already installed mysql server, and some tables including usernames and passwords. I want to use this user/passwords with freeradius. How can it be possible? I will create a radius table to keep logs etc, but just to use

Re: Freeradius and Voip

2010-12-01 Thread miha-
Thanks! Ok, I was also having problems with old freeradius (Text-clear password). Now I have installed it manually but I getting this problem. [r...@localhost sites-available]# /usr/local/sbin/radiusd -X FreeRADIUS Version 2.1.10, for host x86_64-unknown-linux-gnu, built on Dec 1 2010 at

RE: dynamically selecting, which attribute to evaluate

2010-12-01 Thread Stefan A.
:-( but thanks, Alan, Unfortunately, I've never have been able to build FR with perl on my x86 Solaris 10 boxes... but we well keep trying ;-) For the meantime, would it be feasable to update control { temp_attribute := reply:%{control:TicketType}-trigger-reactivation } and later

Re: TLS authentication works, but does not check usernames against 'users'file.

2010-12-01 Thread Nolan King
It is easier for me to put explicit denies in the users file when authenticating with TLS. By default anyone with a valid cert gets in. See also certificate revocation list Andrew Bovill abov...@gmail.com 11/30/10 7:56 AM Hi, I'm trying to get WPA Enterprise EAP/TLS working with my

Re: dynamically selecting, which attribute to evaluate

2010-12-01 Thread Alan DeKok
Stefan A. wrote: :-( but thanks, Alan, Unfortunately, I've never have been able to build FR with perl on my x86 Solaris 10 boxes... but we well keep trying ;-) It should be possible. For the meantime, would it be feasable to update control { temp_attribute :=

Re: wifi ip allocation

2010-12-01 Thread Alexandre Chapellon
Le mardi 30 novembre 2010 à 21:01 +0100, Alan DeKok a écrit : Alexandre Chapellon wrote: Hi every body, While all the documentation on the web seems to answer *NO*, and because I feel like i need to talk to someone today, I was wondering if there is any way to allocate IP address to wifi

mac address high

2010-12-01 Thread Leonardo Fajardo López
From: cosita_bodo...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: FW: altas de direcciones mac Date: Tue, 30 Nov 2010 20:28:19 + From: cosita_bodo...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: altas de direcciones mac Date: Tue, 30 Nov 2010

Re: configure radius to write detailed log to multiple files

2010-12-01 Thread Johan Meiring
On 2010/12/01 09:05 PM, kabilius smith wrote: Hi Alan, I tried adding another detail module like the following: detail { detailfile = c:/testfolder/testfile.log detailperm = 0777 } detail { detailfile = c:/testfolder/testfile1.log detailperm = 0777 } Do the

Re: dynamically selecting, which attribute to evaluate

2010-12-01 Thread Johan Meiring
On 2010/12/01 07:46 PM, Alan DeKok wrote: For the meantime, would it be feasable to update control { temp_attribute := reply:%{control:TicketType}-trigger-reactivation } and later if (%{control:temp_attribute} != ){ do the rest } sigh I said: You can't really do

Re: configure radius to write detailed log to multiple files

2010-12-01 Thread Alan Buxey
Hi, to add a second detail module, simply copy the first one and add a name to it ie the first detail file will have something like this... detail { blah blah blah blah } change this to detail detail1 { blah blah blah blah } and now make a second file (you can do it all in one file

Re: freeradius + ldap

2010-12-01 Thread Josip Rodin
On Wed, Dec 01, 2010 at 12:48:14PM +0100, Ana Gallardo wrote: My problem is: the ldap server don't have public key that an admin user (who bind) can take. So I have to bind in the authorize section with the user and password (clear text) in the request. authenticate { Auth-Type PAP {

Informacio

2010-12-01 Thread Horacio Andrade Zepeda FELIZZZZZZ
Hi I am newbie at this help please Description O. System Windos Vista With 1 application of Oracle VM VirtualBox Virtual Machine O. System Ubuntu 10.10 with a server radiusd aser nesesito mac filtering equipment through this server Well my question is if the users file I register users with

In what file are enlisted to users?

2010-12-01 Thread Jess Tafo11a
Hello friends my name´s Jesus I have a problem, I am using freeradius on my virual machine to the ubuntu version 9.10 and want to add clients for my freeradius detect the mac address that I enter. The question is: Is there any easy way to add clients? Yo I have installed: The virtualbox

Re: wifi ip allocation

2010-12-01 Thread Alan DeKok
Alexandre Chapellon wrote: Am not sure to understand... Once the wifi user entered the network (level2: no IP yet), I have an entry for its sessions in my accouting database, with username, sessionID, maybe mac_address and so on... Yes. This often includes NAS IP and port. But when the

Re: use existing sql table for user-password

2010-12-01 Thread Alan DeKok
Oguzhan Kayhan wrote: Hello, I want to use freeradius for wireless authentication. I got an already installed mysql server, and some tables including usernames and passwords. I want to use this user/passwords with freeradius. How can it be possible? Yes. Edit the queries in

SQL modul

2010-12-01 Thread Miha Zoubek
Hello, at the end of this file I am getting massage Failed to load modulesql. Could you please help me what to do ? Thank you! miha[r...@localhost sites-available]# /usr/local/sbin/radiusd -XFreeRADIUS Version 2.1.10, for host x86_64-unknown-linux-gnu, built on Dec 1 2010 at 14:25:01Copyright

Re: use existing sql table for user-password

2010-12-01 Thread Oguzhan Kayhan
On Thursday, December 02, 2010 08:39:18 am Alan DeKok wrote: Oguzhan Kayhan wrote: Hello, I want to use freeradius for wireless authentication. I got an already installed mysql server, and some tables including usernames and passwords. I want to use this user/passwords with freeradius.