Re: Huntgroups checking in MySQL radgroupcheck

Il giorno gio, 06/06/2013 alle 09.21 +0200, Marco Marzetti ha scritto: Il giorno mer, 05/06/2013 alle 13.41 -0400, Alan DeKok ha scritto: Marco Marzetti wrote: Also, if i understand it correctly, it makes sense to me since == is a filtering operator while := add the attribute to

Send modified Radius packets from FR

Hi For specific testing requirements ... I want my FR to send response that does not match any request to client (i.e response with modified request no. ) or if the RADIUS message code is not Access-Accept or Access -Reject Any help! -- br, Navodit Bhardwaj Hughes Systique Corporation - List

WARNING: Unknown value specified for Post-Auth-Type

Hi, It is not default virtual server). Following error occurs, when user attempt to login with invalid password, otherwise not. is it normal? or should be troubleshooted. Info: WARNING: Unknown value specified for Post-Auth-Type. Cannot perform requested action My postauth section post-auth

RE: module-failure-message in exec module

Hi, Ok so I've played about and can get a decent failure reply from a script based solution. Moving on to those NAS clients that actually do PEAP/MSCHAP .. I would like to get a response when a failure occurs from them, but it seems that Failure-Response-Message from the mschap isn't filled

RE: module-failure-message in exec module

Ok, so the other questions stand, but an update to say the problem is the variable is not coming back to the default VS from the inner tunnel which I didn't at first spot. I had this problem recently and couldn't work it out : how do we copy control attributes from the inner tunnel to the outer

dialupadmin and php5

Hi folks, I'd want to know is anyone is using dialupadmin along with php5.. Thanks in advance! -- -- Sergio Belkin http://www.sergiobelkin.com Watch More TV http://sebelk.blogspot.com LPIC-2 Certified - http://www.lpi.org - List info/subscribe/unsubscribe? See

RE: module-failure-message in exec module

Andy, You may want to try and set it in inner-tunnel's post-auth section: if (Module-Failure-Message) { update outer.reply { Module-Failure-Message := %{Module-Failure-Message} } } That way the response is copied to the outer reply. With Regards Stefan

Re: Send modified Radius packets from FR

Navodit Bhardwaj wrote: Hi For specific testing requirements ... I want my FR to send response that does not match any request to client (i.e response with modified request no. ) or if the RADIUS message code is not Access-Accept or Access -Reject Write C code. Alan DeKok. - List

Free Radius not sending reject message when using max_request_time

Hi, There is a parameter max_request_time defined in file radiusd.conf which indicates the maximum time free Radius takes to handle a request. Request which take more time than this will be killed and reject message is sent by Free radius. This problem is most often seen when using an SQL

Re: module-failure-message in exec module

On 07/06/13 13:15, Franks Andy (RLZ) IT Systems Engineer wrote: Hi, Ok so I've played about and can get a decent failure reply from a script based solution. Moving on to those NAS clients that actually do PEAP/MSCHAP .. I would like to get a response when a failure occurs from them, but it

Re: module-failure-message in exec module

On 07/06/13 14:05, stefan.pae...@diamond.ac.uk wrote: Andy, You may want to try and set it in inner-tunnel's post-auth section: if (Module-Failure-Message) { update outer.reply { Module-Failure-Message := %{Module-Failure-Message} } } That way the response is

Re: Free Radius not sending reject message when using max_request_time

manjunath uthappa ponnachana wrote: I am trying to test this and trying to execute SQL query from free radius which will take more time than max_request_time. But free radius is not sending reject message instead it comes out with an error no response from the server. That's how it works.

MAC authentication succeeds, port stays unauthorized (allied telesis)

Hi, I'm trying to do MAC based authentication on our switches, but for some strange reason the port doesn't want to authenticate, even though the radius server sends an Access-Accept package to the port. I did a capture on the port and the Access-Accept package is received by the port, but

FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

Hi list, I just tried to upgrade FreeRADIUS to the latest version from git. My goal is to get the passchange feature working in the mschap module. I am unable to get ntlm_auth to work in mschap. debug output, --- Debug: (0) mschap : expand: '--nt-response=%{%{mschap:NT-Response}:-00}' -

FreeRADIUS 3-0 : mschap problem.

Hi list, I just tried to upgrade FreeRADIUS to the latest version from git. My goal is to get the passchange feature working in the mschap module. I am unable to get ntlm_auth to work in mschap. debug output, --- Debug: (0) mschap : expand: '--nt-response=%{%{mschap:NT-Response}:-00}' -

Re: FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

On 06/07/2013 10:46 AM, Bjarni Hardarson wrote: I am sure that the ntlm_auth file is at /usr/bin/ntlm_auth and if i run it manually with the expanded attributes i get the NT_KEY. root@freelab:/#/usr/bin/ntlm_auth --request-nt-key --username=vpntest --challenge=d9a8b4d1c188ae1b

Re: MAC authentication succeeds, port stays unauthorized (allied telesis)

Stijn D'haese wrote: Any ideas where I need to start looking? The RADIUS server sent the right answer. The NAS ignored it. Blame the NAS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MAC authentication succeeds, port stays unauthorized (allied telesis)

The NAS device is the final arbiter of allowing access. Even if the authentication succeeds, there may be other things about the connection and the NAS policies that are not met by the port user. Best to check the error log on the NAS. Dave. Quoting Stijn D'haese maill...@stijn-dhaese.be: