Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Fojtán Balázs István
Hello Fajar, mysql select * from radgroupreply; ++---+--++---+ | id | GroupName | Attribute ? ? ? ?| op | Value | ++---+--++---+ | ?1 | HZ ? ? ? ?| Simultaneous-Use | := | 1 ? ? |

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Chris Knipe
Yes, Simulaneous-Use is a check item, not a reply. 2010/2/12 Fojtán Balázs István bal...@fojtan.hu Hello Fajar, mysql select * from radgroupreply; ++---+--++---+ | id | GroupName | Attribute ? ? ? ?| op | Value |

How to ignore some NASs?

2010-02-12 Thread Leighton Man
Hi, I need to configure freeradius to ignore requests from particular clients based on NAS-IP-Address. Is there a quick way to do this? Thanks, Leighton --- This transmission is confidential and may be legally privileged. If you receive it in error, please notify us immediately by e-mail

Re: radiusd not responding to radtest

2010-02-12 Thread Colin Byelong
Alan, Thanks this was fixed by commenting out the ::1 entry in /etc/hosts as we don't intend to run IPv6 on the box Thanks again Colin Colin Byelong wrote: radtest test test localhost 0 testing123 Sending Access-Request of id 253 to ::1 port 1812 ::1 is IPv6. ...

Re: Re: Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Fojtán Balázs István
Hello, Yes, Simulaneous-Use is a check item, not a reply. Ok, I did this mistake, sorry. Now I've deleted the Simultaneous-Use := 1 record from radgroupreply (now this is empty), and inserted it into the radgroupcheck. mysql select * from radgroupcheck;

RE: How to ignore some NASs?

2010-02-12 Thread Leighton Man
Hi, I need to configure freeradius to ignore requests from particular clients based on NAS-IP-Address. Is there a quick way to do this? Nothing like a 1 hour meeting for thinking! Added them to clients.conf with the wrong secret! Thanks, --- This transmission is confidential and may be

Re: How to ignore some NASs?

2010-02-12 Thread Jonathan Gazeley
On 02/12/2010 10:24 AM, Leighton Man wrote: Hi, I need to configure freeradius to ignore requests from particular clients based on NAS-IP-Address. Is there a quick way to do this? Nothing like a 1 hour meeting for thinking! Added them to clients.conf with the wrong secret! Why add them

Resetting the status server counters

2010-02-12 Thread Jonathan Gazeley
I've been looking at this page[1] and I'm using a command like echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 1 | /usr/local/bin/radclient localhost:18120 status adminsecret to extract some numbers of processed packets, etc. Is there a way to send packets to the status

Ancient Freeradius Problem

2010-02-12 Thread Teguh Kurniawan
Hello, I use ancient Free Radius 1.1.7 packages (from Ubuntu 8.04/Hardy) on Ubuntu Server 9.10. I use ancient Free Radius, because the requirement from Radius Manager we buy from http://www.radius-manager.com/. But after finish setting up the configuration for Free Radius, I've got some problem.

Simultaneous-Use problem with Mikrotik NAS clients

2010-02-12 Thread Fojtán Balázs István
Hello, After I've made your suggested change (inserted the Simultaneous-Use := 1 record into radgroupcheck table), the checkrad.pl script run, when I use radtest to a user, who is listed by radwho. I've set the $debug, $snmpget, $snmpwalk, $cmmty_string variables in the /usr/sbin/checkrad. After

Re: FreeRadius 2.1.8 works fine in DEBUG mode

2010-02-12 Thread John Dennis
On 02/11/2010 07:39 PM, Amal Janardhanan wrote: If I don't include in import statement from python it works well. You've got a pretty good clue then. This isn't a freeradius problem. Go figure out why python import statements are your problem. Some things to check are what is your PYTHONPATH

Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory

2010-02-12 Thread Moe D.
Hello List! I got a machine up and running Freeradius 2.1.0 with SSL support to secure a Wireless LAN. In our school’s network we (have to) use an Apple Mac OS X 10.4 Server with Samba as the PDC. Samba stores the user information using the OpenDirectory on the same server – using the NTLM

Radius Manager

2010-02-12 Thread Teguh Kurniawan
Hello, I use ancient Free Radius 1.1.7 packages (from Ubuntu 8.04/Hardy) on Ubuntu Server 9.10. I use ancient Free Radius, because the requirement from Radius Manager we buy from http://www.radius-manager.com/. But after finish setting up the configuration for Free Radius, I've got some problem.

Re: Radius Manager

2010-02-12 Thread Nicolas Goutte
Am 12.02.2010 um 15:39 schrieb Teguh Kurniawan: Hello, I use ancient Free Radius 1.1.7 packages (from Ubuntu 8.04/Hardy) on Ubuntu Server 9.10. I use ancient Free Radius, because the requirement from Radius Manager we buy from http://www.radius-manager.com/. But after finish setting up the

Re: Ancient Freeradius Problem

2010-02-12 Thread Josip Rodin
On Fri, Feb 12, 2010 at 06:42:02PM +0700, Teguh Kurniawan wrote: But I've got another problem, my testing is rejected. What should I do ? cfg.c, line 175: no permission for configfile Exec-Program output: Exec-Program: returned: 1 Delaying request 0 for 1 seconds Finished request 0 You're

Set Calling-Station-Id after first authorization

2010-02-12 Thread Kledi Andoni
Hello, I need a way to set the Calling-Station-Id attribute automatically for each user after the first authorization request. In this way the user will be allowed to authorize only from that mac address in the future. I am using freeradius 1.1.7 with mysql. I do not have the expertise to

Re: Ancient Freeradius Problem

2010-02-12 Thread Teguh Kurniawan
I didn't yet running any program excepted radtest user localhost 1812 testing123 as root. And it reported rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=172, length=20. Do you have any clue ? Thank's Teguh Kurniawan On Fri, Feb 12, 2010 at 10:26 PM, Josip Rodin

Re: Set Calling-Station-Id after first authorization

2010-02-12 Thread EasyHorpak.com
Kledi Andoni wrote: Hello, I need a way to set the Calling-Station-Id attribute automatically for each user after the first authorization request. In this way the user will be allowed to authorize only from that mac address in the future. I am using freeradius 1.1.7 with mysql. I do not

Re: Checking password and doing something else during authenticate...

2010-02-12 Thread Alan DeKok
Johan Meiring wrote: To sum up my understanding of how freeradius works. authorise = select auth type authenticate = run the appropriate auth method And post-auth: do any post-authentication processing. Currently I do the following authorise = set Auth-Type to perl authenticate = run

Re: Resetting the status server counters

2010-02-12 Thread Alan DeKok
Jonathan Gazeley wrote: I've been looking at this page[1] and I'm using a command like echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 1 | /usr/local/bin/radclient localhost:18120 status adminsecret to extract some numbers of processed packets, etc. Is there a way to send

Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory

2010-02-12 Thread Alan DeKok
Moe D. wrote: I got a machine up and running Freeradius 2.1.0 with SSL support to secure a Wireless LAN. In our school’s network we (have to) use an Apple Mac OS X 10.4 Server with Samba as the PDC. Samba stores the user information using the OpenDirectory on the same server – using the NTLM

Re: Freeradius PEAP/MSCHAPv2 against Apple OpenDirectory

2010-02-12 Thread Moritz Dereschkewitz
Am 13.02.2010 08:21, schrieb Alan DeKok: Moe D. wrote: I got a machine up and running Freeradius 2.1.0 with SSL support to secure a Wireless LAN. In our school’s network we (have to) use an Apple Mac OS X 10.4 Server with Samba as the PDC. Samba stores the user information using the