Re: Problems with freeradius accounting proxy

2010-02-16 Thread Phil Pierotti
Hi Fajar, On Tue, Feb 16, 2010 at 1:16 PM, Fajar A. Nugraha fa...@fajar.net wrote: On Tue, Feb 16, 2010 at 6:09 AM, Phil Pierotti phil.piero...@gmail.com wrote: Tue Feb 16 09:40:25 2010 : Proxy: Marking home server 192.168.147.2 port 1813 as zombie (it looks like it is dead). There

Re: Problems with freeradius accounting proxy

2010-02-16 Thread Phil Pierotti
Since you've deleted 99% of the debug log, I can't tell. Since you don't know what to look for in the logs, you can't tell, either. Yes, I have no idea what to look for. If I did, I'd have been looking for it, rather than asking the list. Not withstanding your replies, I *still* am no

Re: Problems with freeradius accounting proxy

2010-02-16 Thread Fajar A. Nugraha
On Tue, Feb 16, 2010 at 3:37 PM, Phil Pierotti phil.piero...@gmail.com wrote: about actual accounting request, do they get a timely response? It is It could easily be that the downstream server is lagging in responsiveness , given that it's a db backend. Best-case is snappy, worst-case is

Re: Problems with freeradius accounting proxy

2010-02-16 Thread Alan DeKok
Phil Pierotti wrote: Yes, I have no idea what to look for. If I did, I'd have been looking for it, rather than asking the list. Maybe my messages haven't been clear enough. The people on this list know what to look for. But if you insist on giving *no* information for us to work with... we

Multiple checks items for the same attribute

2010-02-16 Thread Sicly undecided
Hi Forgive me if this topic has been covered before, for all my searching i could not find a solution. I want to be able to check multiple values for the same check attribute (nas ipaddress || nas port). I have tried the :=, += way, but i'm guessing, since it didn't work that this only works for

Re: error coovachilli , freeradius, yfi hotspot manager

2010-02-16 Thread Fajar A. Nugraha
On Tue, Feb 16, 2010 at 12:17 PM, taufiq rahman taufiqrom.koe...@gmail.com wrote: i just development coovachilli 1.0.14, with freeradius 2.1.8 and frontend with yfi-beta2 and i debug the coovachilli redir.c: 1023: 98 (Address already in use) IP: 10.1.0.1 Port: 3990 - Waiting for retry.

Re: Multiple checks items for the same attribute

2010-02-16 Thread Fajar A. Nugraha
On Tue, Feb 16, 2010 at 5:24 PM, Sicly undecided siclyundeci...@gmail.com wrote: I want to be able to check multiple values for the same check attribute (nas ipaddress || nas port). I have tried the :=, += way, but i'm guessing, since it didn't work that this only works for reply attributes.

Re: Multiple checks items for the same attribute

2010-02-16 Thread Alan DeKok
Sicly undecided wrote: Forgive me if this topic has been covered before, for all my searching i could not find a solution. $ man unlang I want to be able to check multiple values for the same check attribute (nas ipaddress || nas port). I have tried the :=, += way, but i'm guessing, since

Re: Multiple checks items for the same attribute

2010-02-16 Thread Sicly undecided
In... the users file? SQL? Where? Sorry I forgot to mention... SQL On Tue, Feb 16, 2010 at 1:17 PM, Alan DeKok al...@deployingradius.com wrote: Sicly undecided wrote: Forgive me if this topic has been covered before, for all my searching i could not find a solution. $ man unlang I

no response to Access-Challenge

2010-02-16 Thread Vieri
Hi, Sorry for the rookie question but I'd like to know what I can make of the following: I have just one wireless device, an access point and a freeradius server. When the supplicant tries to connect I can see the following messages in FR over and over: rad_recv: Access-Request packet

Re: Multiple checks items for the same attribute

2010-02-16 Thread Sicly undecided
Thanks Fajar... didn't see your response there at first. Wasn't expecting to find an easy way to do this. That looks like exact what i need. Thank you both again On Tue, Feb 16, 2010 at 2:38 PM, Sicly undecided siclyundeci...@gmail.com wrote:  In... the users file?  SQL?  Where? Sorry I

Re: no response to Access-Challenge

2010-02-16 Thread Alan DeKok
Vieri wrote: Sending Access-Challenge of id 46 to 10.215.146.130 port 2048 EAP-Message = 0x010200061920 Message-Authenticator = 0x State = 0x2bd535b12bd72c983ec1de5e3f93e675 Finished request 18. Going to the next request Waking up in

Re: radius for linux authentication

2010-02-16 Thread sri . b
Thank you Fajar. I added additional argument to the lib pam radius like realm=192.168.100.10 and this realm is appended to the user like u...@192.168.100.10. This solved my problem. Regards, Sri. On Thu, Feb 11, 2010 at 5:20 PM, sr...@aol.in wrote: Now the problem is how to identify a

Re: radiusd not responding to radtest

2010-02-16 Thread Alan Buxey
Hi, Thanks this was fixed by commenting out the ::1 entry in /etc/hosts as we don't intend to run IPv6 on the box if you dont intend fo run IPv6 on that server then I'd suggest to turn it off - otherwise you may have no ::1 in /etc/hosts but your IPv6 stack is running and ALL daemons etc that

Re: radiusd not responding to radtest

2010-02-16 Thread Alan Buxey
Hi, rad_recv: Access-Request packet from host 127.0.0.1 port 46723, id=155, length=56 User-Name = test User-Password = test NAS-IP-Address = 127.0.0.1 NAS-Port = 0 +- entering group authorize {...} ++[preprocess] returns ok ++[chap] returns noop

Re: radiusd not responding to radtest

2010-02-16 Thread Colin Byelong
Hi Alan, Thanks for the help we have turned IPv6 off Thanks Colin Hi, Thanks this was fixed by commenting out the ::1 entry in /etc/hosts as we don't intend to run IPv6 on the box if you dont intend fo run IPv6 on that server then I'd suggest to turn it off - otherwise you may

Re: radiusd not responding to radtest

2010-02-16 Thread Colin Byelong
Hi Alan, I figured out that I would need to add a test user in the users file, thanks for looking at it though. We are still testing in the lab, we hope to use this to replace our existing Orps thats running radiator, so we are trying to configure a server that will use EAP-TTLS with a PAP

update session database in Authorization

2010-02-16 Thread Houssam Melhem
Hello, When 2 users with same username try to login to the server at the same time; Radius server receives Auth and Acct packets in the following order: 1- Auth from user1 2- Auth from user2 3- Acct from user1 4- Acct from user2 Since the session database is not populated until a user sends an

Re: update session database in Authorization

2010-02-16 Thread Fajar A. Nugraha
On Wed, Feb 17, 2010 at 12:19 AM, Houssam Melhem hmel...@gmail.com wrote: How can we prevent multiple login in this situation? shall we think in adding a record to the session database in authorization section? In normal situation, acct-capable NAS send acct-start immediately after it receives

Matching Airespace-Wlan-Id in users files or radgroupcheck database

2010-02-16 Thread Adam Wien
I'm trying to get FreeRadius working with a Cisco WLC. I would like to match on Airespace-Wlan-Id to permit access to certain SSIDs. I can't seem to deny access using this attribute. Is there a trick to this? Thanks, -adam - List info/subscribe/unsubscribe? See

which module causes this?

2010-02-16 Thread Kledi Andoni
Hello, Very often, I can say at least 50% of the time I get: Auth: Login incorrect: [1d15057j6p4/\270\310\344\024\n\265E!-\233M\2766\276:] (from client private-network-2 port 1 cli) The username: 1d15057j6p4 is correct, but as you can see the password is not transmitted correctly, although im

Re: which module causes this?

2010-02-16 Thread Kenneth Grady
You might verify the shared secret in the clients.conf and the private-network-2 device. Kledi Andoni wrote: Hello, Very often, I can say at least 50% of the time I get: Auth: Login incorrect: [1d15057j6p4/\270\310\344\024\n\265E!-\233M\2766\276:] (from client private-network-2 port 1 cli)

Re: update session database in Authorization

2010-02-16 Thread Houssam Melhem
Hello, You are right, I have this problem with Pheenet Access point and Nomadix AG, for cisco NAS I have no problem If I need to fix this issue what is the recommended solution to fix this issue? If I modify the authorize section to save sessions does it break Radius Protocol ? I am thinking in

Re: update session database in Authorization

2010-02-16 Thread Fajar A. Nugraha
On Wed, Feb 17, 2010 at 7:16 AM, Houssam Melhem hmel...@gmail.com wrote: Hello, You are right, I have this problem with Pheenet Access point and Nomadix AG, for cisco NAS I have no problem If I need to fix this issue what is the recommended solution to fix this issue? Well, I'd say you need

How to access config parameters for rlm_perl

2010-02-16 Thread David Donn
Hi, I want to set up some config parameters for use in my perl module. I think these are supposed to be in the RAD_CONFIG hash. But this hash always seems to be empty. Any ideas? Maybe I have I have my config parameters defined in the wrong place? Cheers, David Donn My site file: accounting {

Re: which module causes this?

2010-02-16 Thread Alan DeKok
Kledi Andoni wrote: Hello, Very often, I can say at least 50% of the time I get: Auth: Login incorrect: [1d15057j6p4/\270\310\344\024\n\265E!-\233M\2766\276:] (from client private-network-2 port 1 cli) The username: 1d15057j6p4 is correct, but as you can see the password is not

Re: How to access config parameters for rlm_perl

2010-02-16 Thread Alan DeKok
David Donn wrote: I want to set up some config parameters for use in my perl module. I think these are supposed to be in the RAD_CONFIG hash. But this hash always seems to be empty. That hash is per-request configuration. i.e. authentication type, etc. My rlm_perl config file (from

Re: Matching Airespace-Wlan-Id in users files or radgroupcheck database

2010-02-16 Thread Alan DeKok
Adam Wien wrote: I'm trying to get FreeRadius working with a Cisco WLC. I would like to match on Airespace-Wlan-Id to permit access to certain SSIDs. I can't seem to deny access using this attribute. I tried stuff and it didn't work. Is there a trick to this? Describe what you did