Re: R: R: R: NAS-Identifier and radgroupcheck table

2010-04-27 Thread Ana Gallardo
Hello Alan, thank you for your response. Where is this coming from? I put a default entry at the button of users file. http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg51143.html My users file: debian:/etc/freeradius# cat users DEFAULT Auth-Type := Reject bob

Re: More complex Proxying

2010-04-27 Thread Rosario Lumia
I mean: - my user try to log in with myu...@myrealm - freeradius try to verify username and password in more auth-server (for example in a sql DB, at home_server1 and at home_server2) indipendently by myrealm ; if authentication fails in all 3 auth-server, the authentication fails, else it's ok.

accounting packets

2010-04-27 Thread VU VAN HUNG
Hi all, I'm trying to implement radius accounting. I want to ask how I can know whether accounting packets are sent and received ? Hung, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accounting packets

2010-04-27 Thread VU VAN HUNG
And I can't see Accouting-Request and Accounting-Respond. How do I configure freeradius to get Accouting-Request and Accounting-Respond packets when I capture them ? I hope someones will give me some advices. Hung - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: More complex Proxying

2010-04-27 Thread Alan DeKok
Rosario Lumia wrote: I mean: - my user try to log in with myu...@myrealm - freeradius try to verify username and password in more auth-server (for example in a sql DB, at home_server1 and at home_server2) indipendently by myrealm ; if authentication fails in all 3 auth-server, the

Re: accounting packets

2010-04-27 Thread Alan DeKok
VU VAN HUNG wrote: Hi all, I'm trying to implement radius accounting. I want to ask how I can know whether accounting packets are sent and received ? Run the server in debugging mode, as suggested in the FAQ, README, INSTALL, man page If you don't see accounting packets, go fix the

Re: Proxy EAP-TLS as non-EAP

2010-04-27 Thread Alan DeKok
Alok Shingala wrote: I am trying to setup FreeRadius server to handle EAP-TLS authentication with a WiMAX ASN GW. I have another Radius server which does not support EAP-TLS but stores the WiMAX QoS attribute values that need to be assigned to the user (user is identified by

Re: accounting packets

2010-04-27 Thread VU VAN HUNG
Alan DeKok wrote: VU VAN HUNG wrote: Hi all, I'm trying to implement radius accounting. I want to ask how I can know whether accounting packets are sent and received ? Run the server in debugging mode, as suggested in the FAQ, README, INSTALL, man page If you don't see

Re: accounting packets

2010-04-27 Thread Alan DeKok
VU VAN HUNG wrote: In my freeradius, accounting listening port is 1813, how do I edit my accounting port in freeradius by configuration ? I'm using Engenius ECB3500 Access Point as NAS. It uses RADIUS port 1812. Read your NAS documentation. This is not a FreeRADIUS issue, and cannot be

VMPS logging

2010-04-27 Thread Jens Link
Hi, I have a working VMPS installation, radiusd -X shows me the relevant information ( MAC - VLAN assignments) but how do I log these information to a file or syslog? thanks Jens -- - | Foelderichstr. 40 | 13595 Berlin,

Re: VMPS logging

2010-04-27 Thread Alan DeKok
Jens Link wrote: I have a working VMPS installation, radiusd -X shows me the relevant information ( MAC - VLAN assignments) but how do I log these information to a file or syslog? rlm_linelog Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Redundant Audit logs

2010-04-27 Thread Natr Brazell
I have 3 geographically distributed Radius servers. I'd like all audit logs to go to a central log server. What is the best way? How do you all accomplish this? Please provide valid feedback or references. Thanks, N - List info/subscribe/unsubscribe? See

Re: Redundant Audit logs

2010-04-27 Thread Harry Hoffman
I would probably go with syslog myself. Natr Brazell wrote: I have 3 geographically distributed Radius servers. I'd like all audit logs to go to a central log server. What is the best way? How do you all accomplish this? Please provide valid feedback or references. Thanks, N

Re: proxy based on number of numeric char.

2010-04-27 Thread Agent Smith
That seems to work very well. Thanks.. --- On Mon, 4/26/10, Alan DeKok al...@deployingradius.com wrote: From: Alan DeKok al...@deployingradius.com Subject: Re: proxy based on number of numeric char. To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Monday, April

Re: R: R: R: NAS-Identifier and radgroupcheck table

2010-04-27 Thread Alan DeKok
Ana Gallardo wrote: DEFAULT Auth-Type := Reject Hmm... that will cause all of the users to be rejected. Delete it. I follow this howto http://wiki.freeradius.org/SQL_Huntgroup_HOWTO and, at the button said: *Note: If you want to reject authentication by default then edit the

Re: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user

2010-04-27 Thread Alan DeKok
Johnny R wrote: Hi all, Problem solved about CopSpot and Freeradius, it works against the user file (not OpenLDAP). Actually, I am wondering if I can do the authentication using eap-tls module. I enabled it and it gave me the following output: ... Tue Apr 27 11:12:19 2010 : Error: rlm_eap:

Re: R: R: R: NAS-Identifier and radgroupcheck table

2010-04-27 Thread VU VAN HUNG
Alan DeKok wrote: Ana Gallardo wrote: DEFAULT Auth-Type := Reject Hmm... that will cause all of the users to be rejected. Delete it. I follow this howto http://wiki.freeradius.org/SQL_Huntgroup_HOWTO and, at the button said: *Note: If you want to reject authentication by

Capturing Access-Reject data in the radpostauth table

2010-04-27 Thread Aaron Paetznick
I've added a column to my radpostauth table and started collecting %{reply:Reply-Message} for each Access-Reject packet. This is moderately useful, but it's not really what I want to do. My intention is to capture some useful information as to why the user was rejected. Ideally, I'd like to

Proxy EAP - TLS Nesting.

2010-04-27 Thread brisstony21
Hi everyone, I have some troubles to proxy PEAP requests to (internal) virtual server : I have one proxy server (with realms define in proxy.conf file) that forward the request internally to a virtual server define in site-enabled directory. For basic authentication request (PAP, CHAP, MSCHAP,