Last login time in LDAP?

Does someone know if freeradius can update an LDAP user attribute as part of post processing? Would it be via xlat or unlang? tia -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Testing LDAP server return code?

Is there a way to test the return code or message from the LDAP server so a different reply-message can be sent on server is unwilling to perform? thanks, -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

NAS type with NAS defined in SQL (FR 2.1.6)

I've tried dozens of ways but I can't figure out how to get the NAS type for clients defined in MySQL. The column is populated, the query has the correct fields matching the source code for the module. The module appears to populate the address, shortname, nastype, secret and virtual server.

Using unlang to control ldap module

Is there a way I can conditionally change the config items in the ldap module, so that if NAS-Port-Type = Wireless then access_attr = X -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS and MAC Authentication

I've been told that Cisco APs won't do WPA with MAC auth in recent versions of IOS. -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

NAS type when NAS is stored in SQL?

I'm using the nas table in mysql to store my clients. I've found that if I try to test for client:nastype, a value is returned only for entries from clients.conf. Is there a way to get the nas type for clients in SQL? John Doppke - List info/subscribe/unsubscribe? See http

Re: NAS type when NAS is stored in SQL?

On 3/19/2010 at 1:40 PM, freeradius-users-requ...@lists.freeradius.org wrote: Do an SQL query. %{sql: SELECT ...} Alan DeKok. I was afraid of that. I looked through the code and it appears as if rlm_sql should populate nastype along with shortname, secret, etc. Anyone know

Re: NAS type when NAS is stored in SQL?

-- -John On 3/19/2010 at 4:21 PM, freeradius-users-requ...@lists.freeradius.org wrote: t does if the info is there: SELECT id, nasname, shortname, type, secret FROM ${nas_table} (in fact, it can also populate the 'server' too - add that as last option in the SELECT - latest version of

Status server python example

. An authentication request with the same secret works, so I don't think it's that. Regards, -John Doppke - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Hiding passwords

Is there a way to tell freeradius not to include passwords in the log when debugging? -John - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

redundant/failover modules

is tried even if ldap1 finds the user. Am I missing something? Regards, -John Doppke - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Preventing outer EAP id from going through auth

I have a fairly standard config, using EAP/TTLS and an LDAP back end. Both EAP and non-EAP requests need to do LDAP lookups. It's working well (I did very little customizing), except I see a lot of the anonymous outer id's getting sent to the LDAP servers. I moved EAP above LDAP in the