Re: Question regarding nested WiMAX TLV formatting

2011-02-04 Thread Alan DeKok
Adrien Demarez wrote: I wish to deploy FreeRadius on a WiMAX setup, ... Lots of people do this, I'm not sure why. :( INSERT INTO `radgroupreply` (`id`, `groupname`, `attribute`, `op`, `value`) VALUES (1, 'Gold', 'WiMAX-Packet-Flow-Descriptor-v2', ':=', '??') (2, 'Gold',

Re: Radius Client UDP port selection

2011-02-04 Thread Brian Candler
On Fri, Feb 04, 2011 at 04:17:11AM -, vijay s sheelavantar wrote: Now the radius client UDP port is selected randomly, Is there a way by which i can mention the server to use perticular UDP port as client port. Are you talking about when freeradius is used as a proxy (and thus

Unable to authenticate in case of multilingual characters

2011-02-04 Thread karnik jain
Hi, While I am doing testing of my RADIUS client with multilingual characters consits in the username to check my multilingual support module. At that time I am using* FREE RAIDUS server*, I have attached all configuration files related to my setup with this mail. *username :* ∞ *password :*

Re: Unable to authenticate in case of multilingual characters

2011-02-04 Thread Alan DeKok
karnik jain wrote: While I am doing testing of my RADIUS client with multilingual characters consits in the username to check my multilingual support module. At that time I am using* FREE RAIDUS server*, I have attached all configuration files related to my setup with this mail. ... I have

Re: Unable to authenticate in case of multilingual characters

2011-02-04 Thread karnik jain
Hi Alan, I have written multilingual character *∞ *directly in RADIUS server's *users file.* without encoding it into UTF-8. * * Do I need to write Username in *user file of RADIUS server *after converting it into UTF-8 to make the *whole thing work*? If Yes then How can I write UTF-8 characters

Re: Unable to authenticate in case of multilingual characters

2011-02-04 Thread James J J Hooper
--On 04 February 2011 22:02 +0530 karnik jain karnik.j...@gmail.com wrote: Hi Alan, I have written multilingual character *∞ *directly in RADIUS server's *users file.* without encoding it into UTF-8. * * Do I need to write Username in *user file of RADIUS server *after converting it into UTF-8

Proxy Maintenance Process

2011-02-04 Thread Brian Carpio
Hi All, Currently we are using freeradiusd to proxy / load balance requests to our backend radius application. However as I'm sure many of you encounter there are times which require maintenance / upgrades of the backend servers, what is the best practice in regards to putting home_servers

Re: Proxy Maintenance Process

2011-02-04 Thread Alan DeKok
Brian Carpio wrote: Currently we are using freeradiusd to proxy / load balance requests to our backend radius application. However as I’m sure many of you encounter there are times which require maintenance / upgrades of the backend servers, what is the “best practice” in regards to putting

RE: Proxy Maintenance Process

2011-02-04 Thread Brian Carpio
Part of the problem is that during an upgrade our radius application still listens on port 1813 and 1812 and replies to the keepalves (working with development to resolve that since I think that is a problem) so in the mean time I'd like to be able to mark and upgrading server dead then decide

Re: Unable to authenticate in case of multilingual characters

2011-02-04 Thread karnik jain
Hello Sir, But the issue is you have written the Chinese charter directly in place of user name rather than writing its equivalent UTF-8 into users file as said by you. users: 現年快樂 Auth-Type := Accept My doubt is How can I write UTF-8 encoded (may be HEX form) in users file. Because I have did

Re: Proxy Maintenance Process

2011-02-04 Thread Alexander Clouter
Brian Carpio bcar...@broadhop.com wrote: Currently we are using freeradiusd to proxy / load balance requests to our backend radius application. However as I'm sure many of you encounter there are times which require maintenance / upgrades of the backend servers, what is the best practice

Re: Unable to authenticate in case of multilingual characters

2011-02-04 Thread John Dennis
On 02/04/2011 02:01 PM, karnik jain wrote: Hello Sir, But the issue is you have written the Chinese charter directly in place of user name rather than writing its equivalent UTF-8 into users file as said by you. No, it was utf-8, but was rendered as a Chinese glyph. users: 現年快樂 Auth-Type :=

Re: Unable to authenticate in case of multilingual characters

2011-02-04 Thread Alan DeKok
karnik jain wrote: But the issue is you have written the Chinese charter directly in place of user name rather than writing its equivalent UTF-8 into users file as said by you. Uh... nonsense. You can't write chinese characters in ASCII. You need to write them in another encoding, such

Re: Proxy Maintenance Process

2011-02-04 Thread Brian Candler
On Fri, Feb 04, 2011 at 07:44:41PM +0100, Alan DeKok wrote: what is the “best practice” in regards to putting home_servers into maintenance so that freeradiusd doesn’t attempt to send traffic to them? Use radmin radmin set home server state IP PORT dead WARNING This tool is

how to test authentication process using Access-Challenge response

2011-02-04 Thread Gregor Bruhin
Hi, I'm currently playing around with freeradius to implement a two-way authentication using smsotp. Is there a way to test the whole authentication process, including access-challenge packets without using a real radius client device? Many thanks and best regards, Greg - List

Re: how to test authentication process using Access-Challenge response

2011-02-04 Thread Peter Lambrechtsen
You can use TinyRadius with JMeter to bulk load queries. There are a number of different radius client tools you can use. On Sat, Feb 5, 2011 at 1:30 PM, Gregor Bruhin g...@11g.ch wrote: Hi, I'm currently playing around with freeradius to implement a two-way authentication using smsotp.

Radius Groups / Profiles

2011-02-04 Thread npayne
I have installed freeradius with daloRadius. I have then created a group / profile to cut off after using a certain amount of data. I have the following problem. It does not cut the user off when the limit was reached but it will reject the user when he/she tries to log in again. The DB only gets

Re: Proxy Maintenance Process

2011-02-04 Thread Alan DeKok
Brian Candler wrote: WARNING This tool is experimental and should not be used in production environments. (Just quoting the manpage... maybe it's more paranoid than necessary) From an old version of the server. It no longer says that. Alan DeKok. - List info/subscribe/unsubscribe?

Re: how to test authentication process using Access-Challenge response

2011-02-04 Thread Alan DeKok
Gregor Bruhin wrote: Is there a way to test the whole authentication process, including access-challenge packets without using a real radius client device? Use radclient. You will likely need to hack the source. Alan DeKok. - List info/subscribe/unsubscribe? See