How to raise numbers of request/sec in Freeradius

2010-10-22 Thread Robin
Hi, I use Freeradius2 to authenticate user login. I use the tools of Evolynx Radius Load Test to test number of request by second. I find only max 20-25 requests/sec in Freeradius. Can I raise the number via editing configuration files? Thanks. Robin Lu - List

Re: freeradius with NTLM authentication

2010-10-22 Thread Ramzi Abdallah
-Session-Id = 0fa5011f Connect-Info = web-auth Fortinet-Vdom-Name = root +- entering group authorize {...} ++[preprocess] returns ok [auth_log] expand: /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d - /var/log/radius/radacct/193.188.X.X/auth-detail-20101022

Re: freeradius proxy can't recognize Delegated-IPv6-Prefix attribute

2010-10-22 Thread Bjørn Mork
ichiro tanaka i_tan...@hotmail.co.jp writes: Proxy-Server recognition was repaired, if proxy-server did not include dictionary.ascend. I believe it is time to revisit the Ascend dictionary fixup. This was done once, and then reverted for between 2.1.7 and 2.1.8: commit

Re: cisco log entry

2010-10-22 Thread Alan DeKok
MONTFORD, AUSTIN wrote: What does this error mean on a cisco switch? Ask Cisco. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius with NTLM authentication

2010-10-22 Thread Phil Mayers
On 10/22/2010 07:12 AM, Ramzi Abdallah wrote: exactly right the firewall is prompting the user to authenticate using its internal captive portal page. ... requires authentication. now instead of authenticating via the firewall captive portal I want to use NTLM to check is the user is already

Re: freeradius proxy can't recognize Delegated-IPv6-Prefix attribute

2010-10-22 Thread Alan DeKok
Bjørn Mork wrote: I believe it is time to revisit the Ascend dictionary fixup. I think so, yes. Yes, I can see the point that this will break existing setups. But I will argue that such setups have *always* been broken. At least when we are discussing the FreeRADIUS 2.x era. You cannot

authorize an user using a multivalue ldap attribute

2010-10-22 Thread Ana Gallardo
Hello, I have a string attribute named Relaciones in my ldap. This attribute can have more than one value. Actually I return those values in the reply: Sending Access-Accept of id 229 to X.X.X.X port 32796 Relaciones += -11 Relaciones += 03 Relaciones += -01 I want to authorize the

Activate LDAP group membership checking

2010-10-22 Thread mic nightic
Hi, I'm trying to activate the LDAP group membership checking in FreeRadius. In my radiusd.conf i've modified the group checking section: groupname_attribute = cn groupmembership_filter =

Re: How to raise numbers of request/sec in Freeradius

2010-10-22 Thread Alan DeKok
Robin wrote: I use the tools of Evolynx Radius Load Test to test number of request by second. I find only max 20-25 requests/sec in Freeradius. Can I raise the number via editing configuration files? When authentication is from the users file, the server can do 10K requests/s. The

Re: authorize an user using a multivalue ldap attribute

2010-10-22 Thread Ana Gallardo
Hello again, I have a string attribute named Relaciones in my ldap. This attribute can have more than one value. Actually I return those values in the reply: Sending Access-Accept of id 229 to X.X.X.X port 32796 Relaciones += -11 Relaciones += 03 Relaciones += -01 I want to

Re: authorize an user using a multivalue ldap attribute

2010-10-22 Thread Alan DeKok
Ana Gallardo wrote: I want to authorize the access only if there is one attibute Relaciones whith a positive value. So I would like to use unlang in authorize module to check all the attributes Relaciones whit a regex, but I don't know how can I check all the attributes, and how can I stop

Re: Activate LDAP group membership checking

2010-10-22 Thread Alan DeKok
mic nightic wrote: By looking in my openldap logs, freeradius is not even trying to search for the group. Do i have to activate something else to enable group checking? doc/rlm_ldap Look for group support Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Activate LDAP group membership checking

2010-10-22 Thread mic nightic
Yes sir! thank you Found the solution in the doc On Fri, Oct 22, 2010 at 12:57 PM, Alan DeKok al...@deployingradius.comwrote: mic nightic wrote: By looking in my openldap logs, freeradius is not even trying to search for the group. Do i have to activate something else to enable group

Re: authorize an user using a multivalue ldap attribute

2010-10-22 Thread Ana Gallardo
Hello Alan, and thank you for your response. You can't really do that with unlang. I suggest using the perl module. I flow your suggestion and write this: # cat /etc/freeradius/perl/checkRelaciones.pm use strict; use vars qw(%RAD_REQUEST %RAD_REPLY %RAD_CHECK); use Data::Dumper; use

Re: authorize an user using a multivalue ldap attribute

2010-10-22 Thread Jonathan Gazeley
On 22/10/10 13:16, Ana Gallardo wrote: Can't load '/usr/lib/perl/5.10/auto/Data/Dumper/Dumper.so' for module Data::Dumper: /usr/lib/perl/5.10/auto/Data/Dumper/Dumper.so: undefined symbol: Perl_sv_cmp at /usr/lib/perl/5.10/XSLoader.pm line 64. at /usr/lib/perl/5.10/Data/Dumper.pm line 36 You

Re: authorize an user using a multivalue ldap attribute

2010-10-22 Thread Kevin Ehlers
On 10/22/10 6:25 AM, Jonathan Gazeley wrote: On 22/10/10 13:16, Ana Gallardo wrote: Can't load '/usr/lib/perl/5.10/auto/Data/Dumper/Dumper.so' for module Data::Dumper: /usr/lib/perl/5.10/auto/Data/Dumper/Dumper.so: undefined symbol: Perl_sv_cmp at /usr/lib/perl/5.10/XSLoader.pm line 64. at

Re: LDAP authentication failed

2010-10-22 Thread snowman5840
Message-Authenticator = 0xfb650903c7207e001d0385d8a036 +- entering group authorize {...} ++[preprocess] returns ok [auth_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d - /var/log/freeradius/radacct/192.168.0.2/auth-detail-20101022 [auth_log] /var/log

RE: LDAP authentication failed

2010-10-22 Thread Sallee, Stephen (Jake)
{...} ++[preprocess] returns ok [auth_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d - /var/log/freeradius/radacct/192.168.0.2/auth-detail-20101022 [auth_log] /var/log/freeradius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/freeradius/radacct/192.168.0.2

RE: LDAP authentication failed

2010-10-22 Thread snowman5840
wow. hey now it's working with both OS ;-) . thx for your hint, nt_hack was missing. -- View this message in context: http://freeradius.1045715.n5.nabble.com/LDAP-authentication-failed-tp3217861p3232899.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List