Re: FreeRadius crashed on loading test.

2010-09-14 Thread Alan Buxey
Hi, I'm using rlm_sql for my own ippool module: database = mysql num_sql_socks = 32 a while back I pointed out that anything over 10 seems to really kill the system - we found it ticked along okay with 10 sockets per thread anyway but then we found, generally, that MySQL sucks for

Re: COA default configuration...Need help to test radclient

2010-05-17 Thread Johan Meiring
On 2010/05/15 08:28 AM, Alan DeKok wrote: ... Do I have to do anything more than any default configuration? In 2.1.8, there's an example CoA server in raddb/sites-available/coa The coa example was missing from 2.1.8. Please have a look here.

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Alan DeKok
, there's an example CoA server in raddb/sites-available/coa Fri May 14 19:59:04 2010 : Debug: Listening on authentication address * port 1812 Fri May 14 19:59:04 2010 : Debug: Listening on accounting address * port 1813 Fri May 14 19:59:04 2010 : Debug: Listening on command file /home/test

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Eric Martell
Hi Alan,      Thanks for the reply. Pardon my ignorance but as you mentioned I did not find raddb/sites-available/coa. In 2.1.8, there's an example CoA server in raddb/sites-available/coa I only see, # ls -lart sites-available/ total 124 -rw-r- 1 root root  2538 May 14 15:37 vmps -rw-r-

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Alan DeKok
Eric Martell wrote: Hi Alan, Thanks for the reply. Pardon my ignorance but as you mentioned I did not find raddb/sites-available/coa. In 2.1.8, there's an example CoA server in raddb/sites-available/coa Ah... it's in 2.1.9, then. See http://git.freeradius.org/pre/ for a pre-release

Re: COA default configuration...Need help to test radclient

2010-05-15 Thread Eric Martell
: Listening on coa address * port 3799 as server coa Sun May 16 01:43:19 2010 : Debug: Listening on command file /home/test/freeradius-2.1.9/var/run/radiusd/radiusd.sock Sun May 16 01:43:19 2010 : Debug: Listening on proxy address * port 1814 Sun May 16 01:43:19 2010 : Info: Ready to process requests

format input to radclient (or radtest) for EAP-TTLS and EAP-PEAK (MSCHAPv2) test

2010-05-03 Thread bslee (HKBU)
Hi, I am using v2.1.8 in SuSE 11. Question1: I don't have the client and nas environment right now. I want to input EAP-TTLS and EAP-PEAP (MSCHAPv2) respectively into radclient (or radtest) to test my freeradius configuration. What should be the input to radclient (or radtest) (i.e

Re: format input to radclient (or radtest) for EAP-TTLS and EAP-PEAK (MSCHAPv2) test

2010-05-03 Thread Alan DeKok
bslee (HKBU) wrote: Question1: I don't have the client and nas environment right now. I want to input EAP-TTLS and EAP-PEAP (MSCHAPv2) respectively into radclient (or radtest) to test my freeradius configuration. What should be the input to radclient (or radtest) (i.e. the red string

Fw: How can I test result of redundant-load-balance

2010-04-30 Thread Craig Campbell
Freeradius 2.1.8 I am trying to replace the functionality (from sites/enabled/default) of, ldap_server_1 { notfound = return } with a redundant set of servers. I cannot have redundant-load-balance { ldap_server_1 {

Re: Fw: How can I test result of redundant-load-balance

2010-04-30 Thread Alan Buxey
Hi, I am trying to replace the functionality (from sites/enabled/default) of, ldap_server_1 { notfound = return } with a redundant set of servers. I cannot have redundant-load-balance { ldap_server_1 {

FAILURE at the end of eapol test

2010-03-04 Thread R C
Hi, What does teh FAILURE at the end of the eapol test result mean? But, the eap authentication is successful as shown in green color below. RADIUS packet matching with station MS-MPPE-Send-Key (sign) - hexdump(len=32): 11 57 03 9f b7 b4 cb ef 7a

Re: FAILURE at the end of eapol test

2010-03-04 Thread Steve Bertrand
On 2010.03.04 19:27, R C wrote: Hi, What does teh FAILURE at the end of the eapol test result mean? But, the eap authentication is successful as shown in green color below. Can you post in plain text with normal emphasis tags: *stuff*, 'stuff', _stuff_? It's very hard to read green/red

FAILURE at the end of eapol test result

2010-03-04 Thread R C
Resending in a plain text format... Hi, What does the FAILURE at the end of the eapol test result mean? But, the eap authentication is successful as shown below. Why is there a failure at the end of the result when the eap authentication is successful? Thanks for your help

test suite simulating NAS for development?

2010-01-22 Thread Mark McWiggins
Hi All, We're developing an application to capture log data from Radius, but we don't have a NAS to test with to generate the logs. Is there some test suite available to do this? Thanks much; if none is available we will probably develop one and I think our management will consent to share

Re: test suite simulating NAS for development?

2010-01-22 Thread Alan DeKok
Mark McWiggins wrote: We're developing an application to capture log data from Radius, but we don't have a NAS to test with to generate the logs. Is there some test suite available to do this? radclient comes with the server. It can generate traffic if you feed it data. There's also

Configuration test issue

2010-01-13 Thread Guillaume Rousse
rlm_ldap Module: Skipping instantiation of ldap1 Module: Skipping instantiation of ldap2 So, can I do something here to fix the validation test :) ? -- BOFH excuse #145: Flat tire on station wagon with tapes. (Never underestimate the bandwidth of a station wagon full of tapes hurling down

Re: Configuration test issue

2010-01-13 Thread Alan DeKok
isn't created by the LDAP module. So, can I do something here to fix the validation test :) ? Add the ldap1-LDAP-Group attribute to raddb/dictionary as a string attribute. The value doesn't matter (though follow the guidelines in raddb/dictionary) Alan DeKok. - List info/subscribe

Re: Configuration test issue

2010-01-13 Thread Guillaume Rousse
Le 13/01/2010 16:39, Alan DeKok a écrit : So, can I do something here to fix the validation test :) ? Add the ldap1-LDAP-Group attribute to raddb/dictionary as a string attribute. The value doesn't matter (though follow the guidelines in raddb/dictionary) Perfect, many thanks. -- BOFH

Re: EAPTLS Stress test: 2.1.7

2009-10-01 Thread leopold
Hello Alan, Thanks as always for your reply. Yes regarding Load Balancer we know that we need IP stickiness and we do have it. In this case we disabled IP stickiness just to be able to test how FreeRADIUS reacts when it recieves messages dedicated for another FR server. This scenario could happen

Re: EAPTLS Stress test: 2.1.7

2009-10-01 Thread Alan DeKok
leopold wrote: Another test case we did was stressing one freeradius server (no loadbalancers in the middle) and it could cope gracefully with load of 200 eaptls authentications/sec, but when we increased load to 300 auth/sec things when really bad 1. We could reproduce constantly this error

EAPTLS Stress test: 2.1.7

2009-09-30 Thread leopold
Hi, We tried to stress test (EAPTLS) FreeRADIUS 2.1.7 which sits behind Load Balancer We had 2 FreeRADIUS servers behind load balancer (R1,R2) Some requests got rejected (Access-Reject was sent) and the log showed Wed Sep 30 11:56:31 2009 : Error: rlm_eap: No EAP session matching the State

Re: EAPTLS Stress test: 2.1.7

2009-09-30 Thread Alan DeKok
leopold wrote: Hi, We tried to stress test (EAPTLS) FreeRADIUS 2.1.7 which sits behind Load Balancer That doesn't work. Don't bother trying to fix FreeRADIUS. Instead, use a load balancer that is aware of EAP. e.g. FreeRADIUS. Now we understand that if EAPTLS session started (we have

Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results

2009-09-01 Thread Alan Buxey
Hi, [files] users: Matched entry steven at line 79 okay - whats at line 79 of your Users file? you're trying to use EAP/PEAP (PEAPv0/MSCHAPv2) from your accounts - so whats the info you put into the users file? alan - List info/subscribe/unsubscribe? See

Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results

2009-09-01 Thread Steven Sprague
freeradius-users@lists.freeradius.org To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Subject: Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results Date: Tue, 1 Sep 2009 09:51:26 +0100 Hi, [files] users: Matched entry steven at line 79 okay - whats at line 79

Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results

2009-09-01 Thread Alan Buxey
Hi, Anonymous Identity: blank CA Certificate: ca.pem [copied from the servers cert directory] PEAP Version: Version 1 nope. PEAPv0 (version 0) only - PEAPv1 is a very special thing. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results

2009-09-01 Thread Steven Sprague
@lists.freeradius.org Subject: Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results Date: Tue, 1 Sep 2009 16:24:47 +0100 Hi, Anonymous Identity: blank CA Certificate: ca.pem [copied from the servers cert directory] PEAP Version: Version 1 nope. PEAPv0 (version 0) only - PEAPv1

Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results

2009-09-01 Thread Alan Buxey
Hi, Success. After switching from PEAPv1 to v0. See this one error below - OpenSSL: tls_connection_handshake - Failed to read possible Application Data error::lib(0):func(0):reason(0) I think you can ignore that one - OpenSSL API doing something or FreeRADIUS doing something that

Re: Setting FreeRadius + WPA - Enterprises (PEAP) Test Results

2009-08-31 Thread Steven Sprague
Ivan, I copied over the servers ca.pem to my workstation for use in this test. My first try gave me client errors so I fixed those by creating a network -copied this from the example. client 192.168.0.0/24 { require_message_authenticator = no secret = testing123

Re: simple test,, how to go on?

2009-07-01 Thread Rakotomandimby Mihamina
07/01/2009 02:53 PM, Rakotomandimby Mihamina:: [...] rlm_pap: login attempt with password mihamina rlm_pap: Using CRYPT encryption. rlm_pap: Passwords don't match ++[pap] returns reject [...] The question: What Have I got to put in the Cleartext-Password attribute in users in order to have

Re: simple test,, how to go on?

2009-07-01 Thread Ivan Kalik
- Freeradius 2.0.4, packaged by Ubuntu 9.04 Jaunty, on radius20 host. In users: [...] mihamina Cleartext-Password := {clear}mihamina That's wrong. Remove {clear} header from the password. Service-Type = Framed-User, Framed-Protocol = PPP,

Re: simple test,, how to go on?

2009-07-01 Thread Nicolas Goutte
Am 01.07.2009 um 14:10 schrieb Rakotomandimby Mihamina: 07/01/2009 02:53 PM, Rakotomandimby Mihamina:: [...] rlm_pap: login attempt with password mihamina rlm_pap: Using CRYPT encryption. rlm_pap: Passwords don't match ++[pap] returns reject [...] The question: What Have I got to put in the

Re: Building a test tool

2009-06-06 Thread Alan DeKok
Vinit Karandikar wrote: Aha ! Where can I find information on this API for what you correctly described as very custom development that I'm looking to do ? $ emacs src/include/libradius.h See also the various other programs included with the server for examples of how the API is used. The

Re: Building a test tool

2009-06-05 Thread Vinit Karandikar
code to co-ordinate what each thread should do for each test case. The server comes with a RADIUS API. You can use the API to create an application that sends and receives RADIUS packets. Aha ! Where can I find information on this API for what you correctly described as very custom

Re: Building a test tool

2009-06-04 Thread Vinit Karandikar
-- Message: 4 Date: Tue, 02 Jun 2009 00:48:56 +0200 From: Alan DeKok al...@deployingradius.com Subject: Re: Building a test tool To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: 4a245ad8.4050...@deployingradius.com Content

Re: Building a test tool

2009-06-04 Thread Alan DeKok
Vinit Karandikar wrote: So... run 10 copies of radclient. That requires a separate manual setup for each of 50 test cases which is bound to be error prone. Which gets into the issue of defining your requirements. This message defines your requirements a bit better than how do I send

Re: stress test or performance test result

2009-06-02 Thread Alan DeKok
Nizar Zulmi wrote: i just configure my RADIUS server with standard configuration. iam using intel pentium 4 processors with 512MB of RAM, and this is what i got, to perform stress test i am using Evolynx RADIUS load test??do you test your RADIUS with this tool??this the result i got We've

Re: stress test or performance test result

2009-06-02 Thread A . L . M . Buxey
Hi, Heavy duty crypto can affect speed but that's part of cryptography's charm. actually, this reminds me - the eap.conf calls 'DEFAULT' openssl crypto engine - this should give the possibility to use offloading crypto cards such as the Hifn (or even a VIA cX cpu with padlock engine. alan -

Building a test tool

2009-06-01 Thread Vinit Karandikar
Hello folks, I'm new to Free Radius and would like to use it to build a test tool for testing a AAA server. I'd like the test tool to simulate (say) 10 network elements that talk to a AAA server - using threads on different ports that are controlled by the main thread. Some

Re: stress test or performance test result

2009-06-01 Thread Sajeewa Warnakulasuriya
Fedora is very slow... Specially with innodb tables... On Mon, Jun 1, 2009 at 11:51 AM, Nizar Zulmi siapa_bilang_emailku_panj...@yahoo.com wrote: dear all.. i want to compare my RADIUS server result test with someone who perform stress test or performance test. please anyone has did

RE: Building a test tool

2009-06-01 Thread Vinit Karandikar
: Building a test tool To: 'FreeRadius users mailing list' freeradius-users@lists.freeradius.org Message-ID: 4a241f34.16538c0a.1328.a...@mx.google.com Content-Type: text/plain; charset=us-ascii Use the radclient tool. You can create test files that have the attributes for the radius

Re: Building a test tool

2009-06-01 Thread Alan DeKok
Vinit Karandikar wrote: Not sure how radclient will help, Tim. Based on my limited exposure, I get the impression that I can use radclient to simulate 1 network element (like the PDSN). I'm trying to simulate 10 different ones simultaneously. So... run 10 copies of radclient. As mentioned

Re: stress test or performance test result

2009-06-01 Thread Michael Lecuyer
Evolynx is not very good (quite poor). It uses long fixed time outs for packets which really only tells how fast the client is, not the server. Almost all simple load tests have this problem. All RADIUS systems will bog down with back end issues like LDAP and accounting databases. Test those

freeRADIUS first test with PostgreSQL?

2009-05-28 Thread Just E. Mail
I am ready to test my first freeRADIUS server with PostgreSQK backend. He is my setup: freeRADIUS Server: -CentOS 5.3 -freeRADIUS V# 2.1.6 (RPM install) -PostgreSQL V# 8.3.7 (RPM install) - Client eth0: Connect to the Internet eth1: Connected to the backend server thru a hub Backend Server

Re: freeRADIUS first test with PostgreSQL?

2009-05-28 Thread Ivan Kalik
I need to add a couple of USER/PW into the PostgreSQL tables to test. How do I do that? Is there a GUI to add UID/PW? Are UID/PW added manually? Where can read about it? http://wiki.freeradius.org/SQL_HOWTO#Populating_SQL You have dialup admin included with the server. daloRadius is a good

Re: freeRADIUS first test with PostgreSQL?

2009-05-28 Thread A . L . M . Buxey
Hi, I need to add a couple of USER/PW into the PostgreSQL tables to test. How do I do that? however you like Is there a GUI to add UID/PW? theres a basic GUI supplied as part of freeradius source - dialup_admin there is also DaloRADIUS - the author of that tool is on this list. Are UID

test

2009-05-12 Thread François Mehault
De : François Mehault Envoyé : mardi 12 mai 2009 11:27 À : 'freeradius-users@lists.freeradius.org' Cc : François Mehault Objet : RE: check-item NAS-IP-ADdress Calling-Station-ID with openldap Hi All, I want to use FreeRadius to administer network equipement. I use also OpenLDAP to stock

Re: test

2009-05-12 Thread Nicolas Goutte
Am 12.05.2009 um 11:31 schrieb François Mehault: De : François Mehault Envoyé : mardi 12 mai 2009 11:27 À : 'freeradius-users@lists.freeradius.org' Cc : François Mehault Objet : RE: check-item NAS-IP-ADdress Calling-Station-ID with openldap Hi All, Don't worry. We do receive your

PEAP test fails using eapol_test

2009-03-31 Thread Bo Nygaard Bai
I have spend more than a week, trying every hint i could extract from google. But I am still unable to get a working PEAP setup. Could someone please point out my glaringly obvious mistake. Versions: freeradius built from 2.1.4 source (but it reports 2.1.5 on start!) eapol_test from

Re: PEAP test fails using eapol_test

2009-03-31 Thread tnt
I have spend more than a week, trying every hint i could extract from google. But I am still unable to get a working PEAP setup. Could someone please point out my glaringly obvious mistake. The main mistake is that authentication - works: Sending Access-Accept of id 9 to 130.225.51.87 port

Re: Error in test Freeradius

2009-01-12 Thread Paulo César Naves Mota
Hello guys, I made others test Freeradius, but not works. I made other BD and reinstall my freeradius, I used user= paulo and password= user01 for test. My clients.conf has the below configuration: client 127.0.0.1 { secret

Re: Error in test Freeradius

2009-01-12 Thread Luciano Afranllie
On Mon, Jan 12, 2009 at 3:08 PM, Paulo César Naves Mota paulo.m...@cetelem.com.br wrote: Hello guys, I made others test Freeradius, but not works. I made other BD and reinstall my freeradius, I used user= paulo and password= user01 for test. My clients.conf has the below

Re: Error in test Freeradius

2009-01-12 Thread Paulo César Naves Mota
Afranllie wrote: Paulo, Please, see previous messages in the thread. Did you add the user paulo to your users file? If yes, run the test with freeradius in debug mode (radiusd -X) and send the output. Regards Luciano -- Att, Paulo César Naves Mota Administrador de Redes CETELEM SERVICOS

Re: Error in test Freeradius

2009-01-12 Thread A . L . M . Buxey
Hi, Can someone help me? I'm sure someone can - please send output of 'radiusd -X' to this list as per the FAQ, the docs in the server and the many many such requests to this list alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error in test Freeradius

2009-01-12 Thread A . L . M . Buxey
Hi, Hello Luciano, In below the result of command: I have a user in BD: do you read documents? is so, which document did you read to set this up? it should be ++--+-+++ | id | username | attribute | op | value |

Re: Error in test Freeradius

2009-01-12 Thread tnt
In below the result of command: That's the debug of the startup. You haven't sent the request to be processed. You should post the debug of request processing. mysql select * from radcheck; ++--+---+++ | id | username | attribute | op | value |

Error in test Freeradius

2009-01-11 Thread Paulo César Naves Mota
Hello people, I`d like to know how to resolve this problem in configuration: [r...@serverrh5 raddb]# radtest pc1 123456 localhost 0 mysecret Sending Access-Request of id 169 to 127.0.0.1 port 1812 User-Name = pc1 User-Password = 123456 NAS-IP-Address = 127.0.0.1

Re: Error in test Freeradius

2009-01-11 Thread Alan DeKok
Paulo César Naves Mota wrote: Hello people, I`d like to know how to resolve this problem in configuration: [r...@serverrh5 raddb]# radtest pc1 123456 localhost 0 mysecret Sending Access-Request of id 169 to 127.0.0.1 port 1812 User-Name = pc1 User-Password =

Re: How to test whether EAP-PEAP works?

2008-11-27 Thread Lech Karol Pawłaszek
Sebo PL wrote: Hi all! Is it possible to test whether EAP works from the shell? I'm looking for something simullar to: Sure there is: http://deployingradius.com/scripts/eapol_test/ Kind regards, -- Lech Karol Pawłaszek ike You will never see me fall from grace [KoRn] - List info/subscribe

Re: How to test whether EAP-PEAP works?

2008-11-27 Thread tnt
And the only thing I found is this: http://wiki.eduroam.cz/rad_eap_test/ wpa_supplicant's eapol_test, JRadius Simulator But I'm confused about this script cause I just can't see any 'chalange' or etc in # freeradius -X when $ rad_eap_test It's nothing to do with the testing tool. rad_recv:

WPA Supplicant - EAPOL-TEST

2008-11-24 Thread Surendranath.C.
I am not able to execute the file eapol_test after making the necessary changes as described in the link below: http://deployingradius.com/scripts/eapol_test/ The message that I am getting is as below: [EMAIL PROTECTED] wpa_supplicant-0.5.10]# make eapol_test Make: `eapol_test' is up

Test Radius Client supporting PEAP-EAP MD5

2008-11-18 Thread Queenie de Melo
Hi, Can anyone suggest a test radius client supporting PEAP with EAP MD5 ? I have tried JRadius Simuator , RadiusTest n others but could not get the option of PEAP with EAP MD5. Incase anyone has come across, please let me know. Warm regards Queenie - List info/subscribe/unsubscribe? See http

Re: Test Radius Client supporting PEAP-EAP MD5

2008-11-18 Thread tnt
wpa_supplicant eapol_test. Ivan Kalik Kalik Informatika ISP Dana 18/11/2008, Queenie de Melo [EMAIL PROTECTED] piše: Hi, Can anyone suggest a test radius client supporting PEAP with EAP MD5 ? I have tried JRadius Simuator , RadiusTest n others but could not get the option of PEAP with EAP MD5

Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = test User-Password = testing123 NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.29 p

2008-08-14 Thread Martin Silvero
hello! now i have this. i hope this time your answerme!!1 Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = test User-Password = testing123 NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = test User-Password = testing123 NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.

2008-08-14 Thread A . L . M . Buxey
hi, you need to look at the debug log for the RADIUS server which lives at 10.0.6.29 as that is the thing doing the rejecting! alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = test User-Password = testing123 NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.

2008-08-14 Thread Alan DeKok
Martin Silvero wrote: now i have this. i hope this time your answerme!!1 Why? Is there some kind of contractual obligation requiring people here to respond? Sending Access-Request of id 42 to 10.0.6.29 http://10.0.6.29 port 1812 User-Name = test User-Password

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = test User-Password = testing123 NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.

2008-08-14 Thread Martin Silvero
: Listening on accounting address 10.30.1.104 port 1813 Thu Aug 14 17:36:15 2008 : Debug: Listening on proxy address 10.30.1.104port 1814 Thu Aug 14 17:36:15 2008 : Debug: Ready to process requests. ok, and when i write : radtest test testing123 10.0.6.29 1812 testing123 i get: Sending Access

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name = test User-Password = testing123 NAS-IP-Address = 10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet from host 10.0.6.

2008-08-14 Thread A . L . M . Buxey
Hi, hi ! to firts alan my server is 10.30.1.104 no 10.0.6.29 and when i write this: radiusd -i 10.30.1.104 -p 1812 -x -X : okay. your server is 10.30.1.104 ok, and when i write : radtest test testing123 10.0.6.29 1812 testing123 i get: do you know what that command means? you are sending

Re: Sending Access-Request of id 42 to 10.0.6.29 port 1812 User-Name= test User-Password = testing123 NAS-IP-Address =10.30.1.104 NAS-Port = 1812 rad_recv: Access-Reject packet fromhost 10.0.6.29

2008-08-14 Thread Ivan Kalik
hi ! to firts alan my server is 10.30.1.104 no 10.0.6.29 Fine. ok, and when i write : radtest test testing123 10.0.6.29 1812 testing123 So why are you sending the request to the wrong radius server? Read instructions how to use radtest again. Ivan Kalik Kalik Informatika ISP - List info

test md5

2008-04-16 Thread xiningtom_1986
Hello! Today I tried the md5 method,but at the last step when I sent the Access-Accept packet to the supplicant,the supplicant said that there is no session key and it can't continue to do the 4 way handshake.Why? The client use the wpa_supplicant. Xiningtom - List

Re: test md5

2008-04-16 Thread Alan DeKok
xiningtom_1986 wrote: Today I tried the md5 method,but at the last step when I sent the Access-Accept packet to the supplicant,the supplicant said that there is no session key and it can't continue to do the 4 way handshake.Why? Because EAP-MD5 doesn't supply a session key. The

Re: Auth-Test accounts in users file

2008-03-27 Thread Alan DeKok
James McOrmond wrote: Yes. But don't set Auth-Type. Please. you seem to have a real issue with it :-) Because almost everyone gets it wrong, and then argues about it... I specifically want the test-pap account to fail if the authentication method used is anything but pap. I don't

Re: Auth-Test accounts in users file

2008-03-26 Thread Alan DeKok
James McOrmond wrote: Is it possible/appropriate to have some test accounts in the users file, along with an Auth-Type set to which auth type this account can be used for? Yes. But don't set Auth-Type. Please. We're testing a client that we're building (based on wpa_supplicant on linux

Re: Auth-Test accounts in users file

2008-03-26 Thread James McOrmond
Alan DeKok wrote: James McOrmond wrote: Is it possible/appropriate to have some test accounts in the users file, along with an Auth-Type set to which auth type this account can be used for? Yes. But don't set Auth-Type. Please. you seem to have a real issue

Auth-Test accounts in users file

2008-03-25 Thread James McOrmond
Is it possible/appropriate to have some test accounts in the users file, along with an Auth-Type set to which auth type this account can be used for? We're testing a client that we're building (based on wpa_supplicant on linux), so would like to confirm the different auth methods

Re: EXAMPLE: unlang removing attribute inside a test

2008-01-24 Thread Mike O'Connor
Hi Alan The documentation does not mention these options so I assume that you mean it would need writing ? One option is to add more filtering operators. e.g. -~, meaning regex match, and remove. Or perhaps a better way, is to add a filter section: filter request { # filter out

Re: EXAMPLE: unlang removing attribute inside a test

2008-01-24 Thread Alan DeKok
Mike O'Connor wrote: The documentation does not mention these options so I assume that you mean it would need writing ? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Procedure to test performance

2008-01-23 Thread tnt
: Hello My radius server is not implemented yet, but i am wondering of a performance of it before it starts, I will need to simulate a performance test, My idea is to generate packet to analize the server. 1. If anyone done that before, could you give some clues of how to test it, and what

Re: Procedure to test performance

2008-01-23 Thread Alan DeKok
Pawel Cieplinski wrote: My radius server is not implemented yet, but i am wondering of a performance of it before it starts, I will need to simulate a performance test, My idea is to generate packet to analize the server. 1. If anyone done that before, could you give some clues of how

Re: Procedure to test performance

2008-01-23 Thread A . L . M . Buxey
Hi, My radius server is not implemented yet, but i am wondering of a performance of it before it starts, I will need to simulate a performance test, My idea is to generate packet to analize the server. doc/performance-testing its in the freeradius archive - eg freeradius-server-2.0.1.tar.gz

Re: EXAMPLE: unlang removing attribute inside a test

2008-01-23 Thread Alan DeKok
Mike O'Connor wrote: One issue I could not seem to find a way of removing an attribute unless both the attribute and value match, this means that I have to list each of the pool individually. One option is to add more filtering operators. e.g. -~, meaning regex match, and remove. Or

Re: How to configure RADIUS server to test EAP-SIM

2007-12-20 Thread Raghavendra. S
Dana 11/12/2007, Raghavendra. S [EMAIL PROTECTED] piše: Hi All, I want to use RADIUS server to test EAP-SIM. I would like to know how to configure eap.conf, users, radiusd.conf and clients.conf to support EAP-SIM. Also plz let me know if I have to configure some more files. Actually I

Re: How to configure RADIUS server to test EAP-SIM

2007-12-18 Thread Raghavendra. S
want to use RADIUS server to test EAP-SIM. I would like to know how to configure eap.conf, users, radiusd.conf and clients.conf to support EAP-SIM. Also plz let me know if I have to configure some more files. Look in src/tests/eapsim* Actually I want to test wpa supplicant for EAP-SIM

Re: Need help to test EAP-MD5

2007-12-13 Thread Alan DeKok
Nilanjan Sarkar wrote: I want to test radiusd with radeapclient. I am following from radeapclient man page, and using ./radeapclient -x localhost auth testing123 req.txt. ... But radeapclient is getting access-reject with Failure EAP-Code from radiusd (running like ./radiusd -X in another

RE: Need help to test EAP-MD5

2007-12-13 Thread Nilanjan Sarkar
Hi Alan, Ivan, Thanks for the reply. I have posted the log below. After observing the radiusd log, I guess the authentication failed due to this - rlm_eap_md5: User-Password is required for EAP-MD5 authentication rlm_eap: Handler failed in EAP/md5 rlm_eap: Failed in EAP select

Re: Need help to test EAP-MD5

2007-12-13 Thread Alan DeKok
Nilanjan Sarkar wrote: Thanks for the reply. I have posted the log below. That's one piece of the solution. After observing the radiusd log, I guess the authentication failed due to this ... Do you have information about what does it mean? Yes. Go read the web page I posted my last

RE: Need help to test EAP-MD5

2007-12-13 Thread tnt
Dana 13/12/2007, Nilanjan Sarkar [EMAIL PROTECTED] piše: Hi Alan, Ivan, Thanks for the reply. I have posted the log below. After observing the radiusd log, I guess the authentication failed due to this - rlm_eap_md5: User-Password is required for EAP-MD5 authentication rlm_eap:

RE: Need help to test EAP-MD5

2007-12-13 Thread Nilanjan Sarkar
To: FreeRadius users mailing list Subject: Re: Need help to test EAP-MD5 Nilanjan Sarkar wrote: Thanks for the reply. I have posted the log below. That's one piece of the solution. After observing the radiusd log, I guess the authentication failed due to this ... Do you have information about what

Need help to test EAP-MD5

2007-12-12 Thread Nilanjan Sarkar
Hi Friends, I want to test radiusd with radeapclient. I am following from radeapclient man page, and using ./radeapclient -x localhost auth testing123 req.txt. req.txt is like this, User-Name = bob EAP-MD5-Password = hello NAS-IP-Address = marajade.sandelman.ottawa.on.c EAP

Re: Need help to test EAP-MD5

2007-12-12 Thread tnt
But radeapclient is getting access-reject with Failure EAP-Code from radiusd (running like ./radiusd -X in another console). And that's the output you should paste. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

How to configure RADIUS server to test EAP-SIM

2007-12-11 Thread Raghavendra. S
Hi All, I want to use RADIUS server to test EAP-SIM. I would like to know how to configure eap.conf, users, radiusd.conf and clients.conf to support EAP-SIM. Also plz let me know if I have to configure some more files. Actually I want to test wpa supplicant for EAP-SIM. So I need

Re: How to configure RADIUS server to test EAP-SIM

2007-12-11 Thread Alan DeKok
Raghavendra. S wrote: I want to use RADIUS server to test EAP-SIM. I would like to know how to configure eap.conf, users, radiusd.conf and clients.conf to support EAP-SIM. Also plz let me know if I have to configure some more files. Look in src/tests/eapsim* Actually I want to test

Re: How to configure RADIUS server to test EAP-SIM

2007-12-11 Thread tnt
http://wiki.freeradius.org/index.php/Rlm_eap Configure clients.conf and users file. EAP-SIM will work with default radiusd and eap settings. Ivan Kalik Kalik Informatika ISP Dana 11/12/2007, Raghavendra. S [EMAIL PROTECTED] piše: Hi All, I want to use RADIUS server to test EAP-SIM. I

Re: Benchmark test score about the performance of this server

2007-11-19 Thread ram
Try this tool http://www.evolynx.com/radius/dl_loadtest.aspx ram On Nov 19, 2007 1:40 AM, Liangliang Guo [EMAIL PROTECTED] wrote: Hi everyone: -Does any one have some measurement counters or benchmark test score about the performance of this server when using mysql database backend

Re: RADIUS Stress Test tool

2007-11-19 Thread Amr el-Saeed
Hi All i used radclient -f attr -p 10 -c 1 localhost:1812 auth local but also got one entry in my log file !! i guess i must get 10 entries . any idea ? Amr el-Saeed wrote: sorry but i was unsubscribed from the milling list, i don't know why ? so, i didn't get the answer !! can u just

Re: RADIUS Stress Test tool

2007-11-19 Thread A . L . M . Buxey
Hi, Hi All i used radclient -f attr -p 10 -c 1 localhost:1812 auth local but also got one entry in my log file !! i guess i must get 10 entries . err, no. because ou only asked for it to do a single request ( -c 1 ) if you want it to do 10, then tell it to do 10. the -p 10 means to

Benchmark test score about the performance of this server

2007-11-18 Thread Liangliang Guo
Hi everyone: -Does any one have some measurement counters or benchmark test score about the performance of this server when using mysql database backend? For example 3000 requests/s for 5 millions users with 98% latency within 0.0X second on Netra 240 ..? -In my understanding this kind

Re: RADIUS Stress Test tool

2007-11-17 Thread Amr el-Saeed
Dear All, i know this is too late to say that :-) but , i used radclient to test my freeradius server i wanted to use the ( -p num Send 'num' packets from a file in parallel. ) thats my command ( radclient -f attr -p 100 localhost:1812 auth local ) this is the file attr ( User-Name

Re: RADIUS Stress Test tool

2007-11-17 Thread tnt
any idea ? You have asked this a couple of days ago. Try reading the answer. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS Stress Test tool

2007-11-17 Thread Amr el-Saeed
sorry but i was unsubscribed from the milling list, i don't know why ? so, i didn't get the answer !! can u just send it again if u not mind ?? thanks [EMAIL PROTECTED] wrote: any idea ? You have asked this a couple of days ago. Try reading the answer. Ivan Kalik Kalik Informatika ISP

Re: RADIUS Stress Test tool

2007-11-15 Thread Amr el-Saeed
Dear All, i know this is too late to say that :-) but , i used radclient to test my freeradius server i wanted to use the ( -p num Send 'num' packets from a file in parallel. ) thats my command ( radclient -f attr -p 100 localhost:1812 auth local ) this is the file attr ( User-Name

<    1   2   3   >