Re: FreeRadius questions

2012-02-29 Thread Johan Meiring
On 2012/02/28 07:06 PM, James DeLuca wrote: Module: Checking post-auth {...} for more modules to load } radiusd: Opening IP addresses and Ports listen { type = auth ipaddr = 10.0.8.9 You've configures your server to NOT listen on localhost. Sending to localhost will therefore

Re: LDAP (POSIX attibutes) password expiry

2012-02-29 Thread Alan DeKok
u...@3.am wrote: checkItem Expiration radiusExpiration Did you check that the LDAP module is returning this attribute for the query? No, I don't expect it to, since I don't have that attribute or anything that looks like it might be a good substitute. So...

Re: rlm_sqlcounter doesn't increase counter

2012-02-29 Thread pamela pomary
Hello Alan, logins for Cisco wont do decent accounting for login sessions - for authenticated sessions on edge ports they can sent accounting...eg aaa accounting dot1x default start-stop group RADIUS alan Sorry, I didn't quiet understand your submission.Please are you saying Cisco 2960

Re: rlm_sqlcounter doesn't increase counter

2012-02-29 Thread Alan Buxey
Hi, logins for Cisco wont do decent accounting for login sessions - for authenticated sessions on edge ports they can sent accounting...eg aaa accounting dot1x default start-stop group RADIUS did you read what I typed? I dont see a line like this inyour provided config -

Re: LDAP (POSIX attibutes) password expiry

2012-02-29 Thread Phil Mayers
On 28/02/12 21:16, u...@3.am wrote: Hi: We've been running various versions of FreeRadius for years, currently 2.1.10 in this application. A while ago, we switched from PAM (unix) auth to LDAP auth. Everything worked fine after the switch...POSIX attributes for group membership correctly

Re: rlm_sqlcounter doesn't increase counter

2012-02-29 Thread pamela pomary
/detail-20120229 doesn't give much NAS-Port-Id = FastEthernet0/9 Called-Station-Id = EC-30-91-1D-69-89 Calling-Station-Id = 00-1E-33-D5-7A-68 Service-Type = Framed-User NAS-IP-Address = 10.1.5.4 Acct-Delay-Time = 0 Client-IP-Address = 10.1.5.4

Re: rlm_sqlcounter doesn't increase counter

2012-02-29 Thread Fajar A. Nugraha
On Wed, Feb 29, 2012 at 8:29 PM, pamela pomary ppom...@gmail.com wrote: But counter doesn't increase.Users are not logged off when they reach their Maximum Daily session. #Radius Debug# rlm_sqlcounter: (Check item - counter) is greater than zero rlm_sqlcounter: Authorized user

Re: Internal sanity check failed After adding second Home Server

2012-02-29 Thread Alberto Martínez
if(%{User-Name} =~ /?([^@]+)@?([-[:alnum:]._]*)?$/) { I'm not that good with POSIX regex, but shouldn't it be if(%{User-Name} =~ /?([^@]+)@?([-[:alnum:]\._]*)?$/) { AFAIK the dot . means any char so I think it needs to be escaped. - List info/subscribe/unsubscribe? See

Re: Unable to setup freeradius server to authenticate from Unix username/passwords

2012-02-29 Thread Alan DeKok
Mohit Aron wrote: I'm using the freeradius 2.10 server that comes with Ubuntu 11.10. I'm unable to set it up so as to authenticate incoming requests from the Unix username/passwords stored in /etc/{passwd, shadow}. You should mostly just uncomment unix in raddb/sites-enabled/default Here

Re: Internal sanity check failed After adding second Home Server

2012-02-29 Thread Alberto Martínez
Within POSIX bracket expressions, the dot character matches a literal dot. For example, a.c matches *abc*, etc., but [a.c] matches only *a*, *.*, or *c*. My bad. 2012/2/29 Alberto Martínez alberto_marti...@deusto.es if(%{User-Name} =~ /?([^@]+)@?([-[:alnum:]._]*)?$/) { I'm not that

Re: Internal sanity check failed After adding second Home Server

2012-02-29 Thread Alan Buxey
Hi, if(%{User-Name} =~ /?([^@]+)@?([-[:alnum:]._]*)?$/) { please note i did say that was a example - please dont just use anything like this in a production system - you will need other checks and validations too - its just to give you an idea. the first one would be something