Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread Scott Armitage
On 7 Oct 2013, at 02:30, Bruce Nunn ironr...@yahoo.com wrote: Thanks for the heads-up. I will look for this this coming weekend when I get 2.2.2 in production. Jonathan Gazeley jonathan.gaze...@bristol.ac.uk wrote: We've recently upgraded our radius servers from 2.1.12 (CentOS 6

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread A . L . M . Buxey
Hi, if (Service-Type == NAS-Prompt-User) { if (NAS-IP-Address =~ /^172\.17\.107\./) { if (User-Name =~ /^wisms\-testing/) { update control { Auth-Type := Accept } ouch do you realise how dangerous that is? there should be no need to send an access accept packet back

Re: What does FR 2.2.2 fix?

2013-10-07 Thread A . L . M . Buxey
Hi, If everyone's in favor, I'll release 2.2.2 on Monday. hold request now its monday AM and the load has gone back to higher levels the server is freaking out and freezing witht he last message in the log being Mon Oct 7 07:50:28 2013 : Error: [event.c:2318] Internal sanity check

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread Phil Mayers
On 10/07/2013 08:40 AM, a.l.m.bu...@lboro.ac.uk wrote: Hi, if (Service-Type == NAS-Prompt-User) { if (NAS-IP-Address =~ /^172\.17\.107\./) { if (User-Name =~ /^wisms\-testing/) { update control { Auth-Type := Accept } ouch do you realise how dangerous that is? there

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread Jonathan Gazeley
On 07/10/13 08:40, a.l.m.bu...@lboro.ac.uk wrote: Hi, if (Service-Type == NAS-Prompt-User) { if (NAS-IP-Address =~ /^172\.17\.107\./) { if (User-Name =~ /^wisms\-testing/) { update control { Auth-Type := Accept } ouch do you realise how dangerous that is? there should

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread Scott Armitage
On 7 Oct 2013, at 09:59, Jonathan Gazeley jonathan.gaze...@bristol.ac.uk wrote: On 07/10/13 08:40, a.l.m.bu...@lboro.ac.uk wrote: Hi, if (Service-Type == NAS-Prompt-User) { if (NAS-IP-Address =~ /^172\.17\.107\./) { if (User-Name =~ /^wisms\-testing/) { update control {

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread A . L . M . Buxey
Hi, We're finding these nuggets of code as we dig deeper into James's legacy config. If the Access-Accept response is not required, then presumably I can ditch that entire code block and let the wisms-testing auth attempt go through the system as any other user. yesbut you'd be better

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread Arran Cudbard-Bell
On 7 Oct 2013, at 10:36, a.l.m.bu...@lboro.ac.uk wrote: Hi, We're finding these nuggets of code as we dig deeper into James's legacy config. If the Access-Accept response is not required, then presumably I can ditch that entire code block and let the wisms-testing auth attempt go through

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread A . L . M . Buxey
Hi, Well you want the probes to go through and hit your backed authentication servers, and your databases, and any external resource. ..and get a valid user with access accept? bad. you are better off just semding a reject - just like RADIUS status server probes. it would be nice if the

Re: Problem with Cisco WLC probes in FR 2.2.1

2013-10-07 Thread Arran Cudbard-Bell
On 7 Oct 2013, at 11:31, a.l.m.bu...@lboro.ac.uk wrote: Hi, Well you want the probes to go through and hit your backed authentication servers, and your databases, and any external resource. ..and get a valid user with access accept? bad. you are better off just semding a reject -

Re: What does FR 2.2.2 fix?

2013-10-07 Thread Alan DeKok
a.l.m.bu...@lboro.ac.uk wrote: now its monday AM and the load has gone back to higher levels the server is freaking out and freezing witht he last message in the log being Mon Oct 7 07:50:28 2013 : Error: [event.c:2318] Internal sanity check failed At least that's clearer. It would

Re: What does FR 2.2.2 fix?

2013-10-07 Thread Stefan Winter
Hi, clarification/agreement from Stefan or others? tried the newest GIT this morning and the proxy issues were gone. I haven't seen your Internal sanity check failed just yet (and am not looking forward to it :-/ ). Stefan alan - List info/subscribe/unsubscribe? See

Version 3.0.0 has been released

2013-10-07 Thread Alan DeKok
After many years of development, the FreeRADIUS team is happy to announce Version 3 of the world's most popular server. The release was delayed from June in order to track down and solve a number of last-minute issues. We'd like to thank all of the beta testers for helping with that process.

RE: Version 3.0.0 has been released

2013-10-07 Thread Brian Julin
Congratulations Alan, Arran for pushing this out of the nest, all the while being so attentive on the mailing list, along with Phil and the other Alan :-) You guys are truly obsessed. I get exhausted just reading your commit logs. :-) - List info/subscribe/unsubscribe? See

RE: radwho not working

2013-10-07 Thread Clint Petty
Hi Alan, Well I discovered a way to display a list of all active users without having to implement FreeRadius accounting, which BTW is not as straight forward as it should be. I was able to display all active users through my StrongSwan server, with the simple following command: # strongswan

Re: radwho not working

2013-10-07 Thread Arran Cudbard-Bell
On 7 Oct 2013, at 22:39, Clint Petty cpe...@luthresearch.com wrote: Hi Alan, Well I discovered a way to display a list of all active users without having to implement FreeRadius accounting, which BTW is not as straight forward as it should be. I was able to display all active users

Re: radwho not working

2013-10-07 Thread Alan DeKok
Clint Petty wrote: Hi Alan, Well I discovered a way to display a list of all active users without having to implement FreeRadius accounting, which BTW is not as straight forward as it should be. I was able to display all active users through my StrongSwan server, with the simple

Re: Version 3.0.0 has been released

2013-10-07 Thread Alan DeKok
Brian Julin wrote: You guys are truly obsessed. I get exhausted just reading your commit logs. :-) It's what I do. I spend a fair amount of time on other things, too. But pushing FreeRADIUS ahead is a high priority. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Version 3.0.0 has been released

2013-10-07 Thread Arran Cudbard-Bell
On 7 Oct 2013, at 23:00, Alan DeKok al...@deployingradius.com wrote: Brian Julin wrote: You guys are truly obsessed. I get exhausted just reading your commit logs. :-) It's what I do. I'm just in it for the groupies. Everyone knows girls dig guys who have a working knowledge of

Re: Version 3.0.0 has been released

2013-10-07 Thread Arran Cudbard-Bell
On 7 Oct 2013, at 23:23, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 7 Oct 2013, at 23:00, Alan DeKok al...@deployingradius.com wrote: Brian Julin wrote: You guys are truly obsessed. I get exhausted just reading your commit logs. :-) It's what I do. I'm just in it for

2.2.2 release date

2013-10-07 Thread Wang, Yu
I remember Alan mentioned that 2.2.2 may be released today. I checked git for 2.x.x and it says 2.2.1. I am wondering if it'll be released soon. Thanks, Yu Wang - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html