Re: Learn Radius

2002-02-04 Thread Alan DeKok
. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reject Response From server

2002-02-04 Thread Alan DeKok
the server. Requests from a known NAS for an unknown user results in a reject message being sent to the NAS. Requests from an unknown NAS get discarded. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reject Response From server

2002-02-04 Thread Alan DeKok
by the server in cases of 1) unknown NAS 2) Badly formated request In case of one version of Livingston server version I saw no reject message for request from known NAS for an unknown user. Not sure about it's RFC compliance. I dunno. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: user accounting

2002-02-05 Thread Alan DeKok
attribute to the 'users' file. I don't understand what you're trying to do, or why you're having problems. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: (no subject)

2002-02-05 Thread Alan DeKok
n.v.m. raju [EMAIL PROTECTED] wrote: I have installed the free radius but dont know how to use it. The FAQ gives detailed instructions on setting up and running the server in debug mode, and sending it test packets via radclient. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Identical attributes on auth

2002-02-06 Thread Alan DeKok
, but not significantly. The patch would be fairly small, too. If people think it's terribly useful, I'll take a look at doing it in the next few days. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Win ME Authentication problem

2002-02-06 Thread Alan DeKok
isn't sending RADIUS packets to the server, so I'd suggest looking at the logs on the NAS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Always on rlm_sql: Could not link driver rlm_sql_mysql

2002-02-06 Thread Alan DeKok
we tried to work with mysql it return the 'usual error': Do you have the *shared* versions of the mysql libraries installed? If all else fails, do: ./configure --disable-shared and you will avoid the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: Radius Question

2002-02-06 Thread Alan DeKok
listed. Any idea's? radzap? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 100% CPU utilization bug in FreeRadius 2001/03/10?

2002-02-06 Thread Alan DeKok
freeradius tar file and managed to get it to build on my desktop FreeBSD-4.4STABLE but it won't build properly on the production email/radius box. Why not? It *should* produce error messages which tell you what went wrong, any why. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: upgrading freeradius

2002-02-06 Thread Alan DeKok
august of 2001. ps, how do you tell exactly what version you have? 'radiusd -h' wouldtell you that '-v' gives you the version information. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Identical attributes on auth

2002-02-06 Thread Alan DeKok
Alan DeKok [EMAIL PROTECTED] wrote: The code in src/main/valuepair.c, function paircmp() should be changed so that IF there isn't a match, it loops back to check for another copy of the same attribute. This will slow the server down a little, but not significantly. The patch would

Re: Thread issue - Possible fix

2002-02-06 Thread Alan DeKok
, it's probably a thread issue. The rest of the thread-unsafe functions should be replaced with the thread-safe version, but I haven't had time to do that yet. As always, patches are welcome. btw.. did you have (extra) time to revise the rlm_radutmp patch that I sent No, not yet. Alan

Re: Identical attributes on auth

2002-02-07 Thread Alan DeKok
their. If you had tested this with the 'users' file first, you would have been able to verify if the feature worked. It would probably have then been obvious that the issue was NOT the new feature, but some misconfiguration or bug in the SQL module. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Identical attributes on auth

2002-02-07 Thread Alan DeKok
do with the problem in SQL? You can verify that the *server* can do what you want, independently of whether the *SQL* module can do it. If the server can do it and SQL can't, then at least you know where to look to solve the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Windows XP PPPoE == DoS in disguise

2002-02-07 Thread Alan DeKok
of recognizing these packets? That will allos us to hack the server to throw these garbage requests away, without using all of the CPU. Putting an ascii copy of tcpdump's output for this problem on the web somewhere would help enormously. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Unknown error message on radius proxy

2002-02-08 Thread Alan DeKok
: Sending duplicate authentication reply to client xxx.xxx.xxx.xxx:1607 - ID: 62 The answers are being dropped somewhere in the network. I think the FAQ has some text on this... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Java frontend

2002-02-08 Thread Alan DeKok
Cleo [EMAIL PROTECTED] wrote: Is there any java front end to FreeRadius on Linux (redhat 7.2). Sorry I am completely new to it. Sorry, no. If you're using SQL, there is a web-based front end, dialup-admin, which is now included with the server. Alan DeKok. - List info/subscribe

Re: user accounting

2002-02-08 Thread Alan DeKok
will send the hangup signal. Radius doesn't work like that. The Session-Timeout attribute will be set. See the RFC's for what the attribute does. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Auth problem

2002-02-08 Thread Alan DeKok
please please [EMAIL PROTECTED] wrote: Could you explain more? Read the 'users' file. There isn't much documentation on what the various attributes mean, sorry. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting using mySQL

2002-02-08 Thread Alan DeKok
Andrew Kelaidis [EMAIL PROTECTED] wrote: The module stores only the start/stop requests. I want to store bad password attempts or double logins also. Any ideas? I don't think that you can right now. But it should be possible, soon. As always, suggestions patches are welcome. Alan

Re: unable to get a clean gmake

2002-02-10 Thread Alan DeKok
the ACTUAL zeke [EMAIL PROTECTED] wrote: i have tried several builds, we are running BSDI BSD/OS 4.2 compiled under: ... the output of check-radiusd-config is pasted below /usr/local/sbin/radiusd: can't resolve symbol 'fgetgrent' Upgrade to the latest CVS snapshot. Alan DeKok

Re: Freeradius configuration.

2002-02-10 Thread Alan DeKok
from the pool. When you use 'x.x.x.10+ for an IP address, there is no pool. Nothing is managed, and you can have as many users as you want using the same configuration. Also will multiple sessions with same user name be allowed? That's a different issue. Alan DeKok. - List info/subscribe

Re: unable to get a clean gmake

2002-02-10 Thread Alan DeKok
recommended flavor of linux as an alternate solution. I use Linux for my development, so it's definitely tested there. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS with MS SQL

2002-02-10 Thread Alan DeKok
Michael Vasilenko [EMAIL PROTECTED] wrote: I need to setup RADIUS wich works with MS SQL, can somebody give me an advice? Does FreeRADIUS can do this? ODBC or something? ODBC should work in the latest CVS snapshot. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Identical attributes on auth

2002-02-11 Thread Alan DeKok
Alan DeKok [EMAIL PROTECTED] wrote: The code in src/main/valuepair.c, function paircmp() should be changed so that IF there isn't a match, it loops back to check for another copy of the same attribute. This will slow the server down a little, but not significantly. The patch would

Re: (no subject)

2002-02-11 Thread Alan DeKok
n.v.m. raju [EMAIL PROTECTED] wrote: I have installed the free radius but dont know how to use it. The FAQ gives detailed instructions on setting up and running the server in debug mode, and sending it test packets via radclient. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Error: CHILD: exit on signal (11)

2002-02-11 Thread Alan DeKok
Eric Dean [EMAIL PROTECTED] wrote: Anyboday know of a good way I can debug this so that I can let everyone know the source of this problem? gdb? See doc/BUGS Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe

Re: Win ME Authentication problem

2002-02-11 Thread Alan DeKok
isn't sending RADIUS packets to the server, so I'd suggest looking at the logs on the NAS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Windows XP PPPoE == DoS in disguise

2002-02-11 Thread Alan DeKok
of recognizing these packets? That will allos us to hack the server to throw these garbage requests away, without using all of the CPU. Putting an ascii copy of tcpdump's output for this problem on the web somewhere would help enormously. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Auth problem

2002-02-11 Thread Alan DeKok
? Authentication type. You've got to configure the server, to tell it *how* to authenticate the user. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Java frontend

2002-02-11 Thread Alan DeKok
Cleo [EMAIL PROTECTED] wrote: Is there any java front end to FreeRadius on Linux (redhat 7.2). Sorry I am completely new to it. Sorry, no. If you're using SQL, there is a web-based front end, dialup-admin, which is now included with the server. Alan DeKok. - List info/subscribe

Re: user accounting

2002-02-11 Thread Alan DeKok
will send the hangup signal. Radius doesn't work like that. The Session-Timeout attribute will be set. See the RFC's for what the attribute does. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http

Re: Accounting using mySQL

2002-02-11 Thread Alan DeKok
Andrew Kelaidis [EMAIL PROTECTED] wrote: The module stores only the start/stop requests. I want to store bad password attempts or double logins also. Any ideas? I don't think that you can right now. But it should be possible, soon. As always, suggestions patches are welcome. Alan

Re: user accounting (one line questions)

2002-02-11 Thread Alan DeKok
the administration of the server. You can then use the example 'users' file given in the comments for the counter module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Auth problem

2002-02-11 Thread Alan DeKok
please please [EMAIL PROTECTED] wrote: Could you explain more? Read the 'users' file. There isn't much documentation on what the various attributes mean, sorry. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe

Re: Freeradius configuration.

2002-02-11 Thread Alan DeKok
from the pool. When you use 'x.x.x.10+ for an IP address, there is no pool. Nothing is managed, and you can have as many users as you want using the same configuration. Also will multiple sessions with same user name be allowed? That's a different issue. Alan DeKok. - List info/subscribe

Re: Freeradius and RSA SecurID

2002-02-12 Thread Alan DeKok
generally hit 'd'. You're a saint! No, I've been to Salt Lake City, and I didn't see the need to convert. shudder Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS with MS SQL

2002-02-12 Thread Alan DeKok
Michael Vasilenko [EMAIL PROTECTED] wrote: I need to setup RADIUS wich works with MS SQL, can somebody give me an advice? Does FreeRADIUS can do this? ODBC or something? ODBC should work in the latest CVS snapshot. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: problem with DEFAULT realm

2002-02-12 Thread Alan DeKok
them on the floor? Is there a need for a general, configurable solution or am I up to hacking this up myself? It should be easy to hack something together. If you're looking for a realm, and have found a dead one, don't fall through to the DEFAULT. Alan DeKok. - List info/subscribe

Re: Radius Question

2002-02-12 Thread Alan DeKok
listed. Any idea's? radzap? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Identical attributes on auth

2002-02-12 Thread Alan DeKok
their. If you had tested this with the 'users' file first, you would have been able to verify if the feature worked. It would probably have then been obvious that the issue was NOT the new feature, but some misconfiguration or bug in the SQL module. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Freeradius and RSA SecurID

2002-02-12 Thread Alan DeKok
. Is there anything underway at the moment? Follow the instructions on the web page for doing an anonymous CVS checkout from cvs.freeradius.org, but check out 'manual' instead of 'radiusd'. It's the current in-progess version of the manual. It could use a LOT of work. Alan DeKok. - List info/subscribe

Re: UTF-8

2002-02-12 Thread Alan DeKok
, then the server can send them in a packet, or look at them from a packet. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and RSA SecurID

2002-02-12 Thread Alan DeKok
, and that they're usually the correct answers. It also means that the answers may not be phrased in a corporate politically correct way to kiss up to the customer. But that's life. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Using PAM to auth to FR w/ mysql?

2002-02-12 Thread Alan DeKok
something other than PAM. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius detail log question

2002-02-12 Thread Alan DeKok
to the request. It's value is discovered through a callback, which means that you don't need 'counter' in the 'authorize' section, and it will still work. If you care, you can submit a patch to the module, which adds the current value of the counter attribute to the request. Alan DeKok. - List info

Re: Fix for consideration: re: checkrad timeout

2002-02-13 Thread Alan DeKok
, not public. Anyway, this fixes it for me. Hope this helps someone else. Thanks, I've applied the patch to CVS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Incorrect Acct-Session-Time

2002-02-13 Thread Alan DeKok
Daniel Yeung [EMAIL PROTECTED] wrote: Sometime, I exprience incorrect session-time problem in details file sometimes. Would anyone give me suggestion ? Tell the NAS to stop lying to the server. There's nothing you can do to the server to fix the problem. Alan DeKok. - List info

Re: SNMP Woes

2002-02-13 Thread Alan DeKok
for checkrad? shrug If you have the sample 'finger' output, I'd suggest poking through the checkrad source, and seeing how it parses the finger output for other NAS boxes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Migration Radiator - FreeRadius

2002-02-13 Thread Alan DeKok
of your questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: duplicate accounting entries

2002-02-13 Thread Alan DeKok
most likely the problem. but I have freeradius bound to only one of these (ie. bind_address = 192.168.0.1) The NAS with the problem accounting packets is sending it's requests to the *other* IP address on that machine. Run 'tcpdump' to verify this. Alan DeKok. - List info/subscribe

Re: attributes based on NAS

2002-02-13 Thread Alan DeKok
Matthew Schumacher [EMAIL PROTECTED] wrote Is it possible to configure freeradius to serve different attributes based on which NAS is asking to authenticate? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: attributes based on NAS

2002-02-14 Thread Alan DeKok
Matthew Schumacher [EMAIL PROTECTED] wrote: Can you point me to documentation the explains how? raddb/radiusd.conf, look in the 'detail' section. The documention may not be extensive or well organized, but most things *are* described somewhere in the configuration files. Alan DeKok

Re: attributes based on NAS

2002-02-15 Thread Alan DeKok
-Type attributes. If you don't set Autz-Type, then everything works exactly the same as before. I haven't looked at your patch, so I don't know how close my ideas are to it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and RSA SecurID

2002-02-15 Thread Alan DeKok
! Pointers to any relevant documentation will be extremely helpful. There is a pam_securid. Do a search on Google. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems with sql

2002-02-15 Thread Alan DeKok
. You probably want to create a NEW attribute, like 'SQL-Group'. Set that in the SQL module, and it can be used for checking in the 'users' file. I don't have much to say on your other questions, sorry. I'm not very familiar with the configuration of the SQL module. Alan DeKok. - List

Re: All sockets are being used!

2002-02-16 Thread Alan DeKok
to SQL. If you get 100's of requests per second, then you will run out of sockets quickly. Have you indexed your SQL tables? How long does it take to do the queries when you run in debug mode, and send it test packets? Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: HELP

2002-02-18 Thread Alan DeKok
posted the question to. They're different. Please post the question to a list which discusses Cistron radius, NOT FreeRADIUS. Oh, and off of the top of my head, upgrading to a version of Cistron released this millenium might help... Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: howto include clients.conf info in ldap

2002-02-18 Thread Alan DeKok
it ? Source code patches. Write them, submit them. It can't be done in 0.4 as-is. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring to use shadow passwords

2002-02-18 Thread Alan DeKok
IH - Net Admin [EMAIL PROTECTED] wrote: We have the same problem. I'm not sure if it is a bug with 0.4 or not? We had no problem with 0.3 so I went back to that version. It's not a bug, it's a feature. And the way 0.3 works *is* a bug. Alan DeKok. - List info/subscribe/unsubscribe

Re: Configuring to use shadow passwords

2002-02-18 Thread Alan DeKok
users'. Please also read the 'users' file which comes with FreeRADIUS. Compare it to your Livingston 'users' file, and see what the differences and new features are. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_krb5

2002-02-18 Thread Alan DeKok
changed. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Vendor List

2002-02-18 Thread Alan DeKok
Roberval Aratame Ribeiro [EMAIL PROTECTED] wrote: Where do I get the list of all vendors of RADIUS? Google. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Hrmm, no pidfile when run in non-daemon mode ...

2002-02-18 Thread Alan DeKok
, that the pidfile is only written when run in daemon mode? Sure. The reason for doing that is the server MAY change uid/gid, so writing the PID file before forking may not be possible. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: problem with DEFAULT realm

2002-02-18 Thread Alan DeKok
and the previosly used cvs diff output isn't that good, isn't it? shrug context diff is OK. I've made some minor changes to the patch, and committed it. Please double-check that it works, and does what you want. :) Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: Configuring to use shadow passwords

2002-02-19 Thread Alan DeKok
to know what it is, and to fix it. If there's something unclear in the documentation, we need to fix that, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Client-IP-Address occasionally incorrect

2002-02-19 Thread Alan DeKok
to turn off hostname lookup and see if we get any directories created with invalid ip addresses. That's about all you can do right now. Until there is a bug verified in the server, there is no way to fix it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: FreeRADIUS crashing on Solaris 8

2002-02-19 Thread Alan DeKok
assertions that request-finished isn't marked '1', while the thread is alive. I've seen the suggestion of running radiusd with -s. What side effects do I have to expect? It will probably be slower. But it shouldn't be too serious in the short term. Alan DeKok. - List info/subscribe/unsubscribe

Re: FreeRadius Security hole

2002-02-19 Thread Alan DeKok
fixed for almost 3 months now. We will have an official release soon which officially fixes the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius Security hole

2002-02-19 Thread Alan DeKok
Alan DeKok [EMAIL PROTECTED] wrote: Is there a patch that covers this? If so, we can get guys to take the security hold off of the port. If not, is there a timeframe to fix? It's fixed in the latest CVS snapshot. We haven't released another version yet. Sorry to follow up again

Re: FreeRADIUS crashing on Solaris 8

2002-02-19 Thread Alan DeKok
is dead, then something wrong happens. I'll commit a bug fix now. Grab the CVS snapshot from tonight. If this fixes your problem, I think we should release 0.5 ASAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Exec-Program attribute

2002-02-20 Thread Alan DeKok
=?big5?B?p2SoS+am?= [EMAIL PROTECTED] wrote: Could anyone tell me how to use the Exec-Program attribute? Grab the latest CVS snapshot, and read 'scripts/exec-program-exit' Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring to use shadow passwords

2002-02-20 Thread Alan DeKok
. Enable the caching, and it may work. If so, then that there's a bug in the non-caching code. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: postgresql HOWTO :)

2002-02-20 Thread Alan DeKok
COLUMN op varchar(2); ALTER TABLE radgroupreply ADD COLUMN op varchar(2); Can you submit a patch to the db_postgresql.sql? I think you did so before, but I can't find it, sorry. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: I can't authenticate using /etc/passwd file

2002-02-20 Thread Alan DeKok
Godfred Ofori-Som [EMAIL PROTECTED] wrote: Below is an extract of my user file and the result with radtest. what am i doing wrong DEFAULT Auth-Type += System ... DEFAULT AUTH-Type := sql, ... Read 'man users' on the difference between '+=' and ':=' Alan DeKok. - List info

Re: Freeradius and Token/Cryptocard support ...

2002-02-20 Thread Alan DeKok
that also. Nope. Look on 'bugtraq'. Or, do a google search for 'bugtraq cryptocard', you should be able to find a utility which decrypts the .tok file to get the DES key. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS crashing on Solaris 8

2002-02-20 Thread Alan DeKok
request %d ID %d with timestamp %08lx. Change the 'if' condition before that so it does NOT check for PW_ACCOUNTING_REQUEST. If that makes the difference, then it's narrowed down. I'll take another look at the code to see what the heck is going on. Alan DeKok. - List info/subscribe/unsubscribe

Re: (no subject)

2002-02-20 Thread Alan DeKok
Hyder, Karen (FXNZ AKL) [EMAIL PROTECTED] wrote: So how do I upgrade to version 0.4 the nicest, easiest way? download untar ./configure options make make install Your configuration files will *not* be over-written. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: the attribute of Exec-Program

2002-02-21 Thread Alan DeKok
Liu Tung-Chen [EMAIL PROTECTED] wrote: I would like to use the attribute of Exec-Program when the authentication is passed . But it doesn't work. Could anyone help me? Grab the latest CVS snapshot. Read 'scripts/exec-program-wait' Alan DeKok. - List info/subscribe/unsubscribe? See

Re: (no subject)

2002-02-21 Thread Alan DeKok
problem if they don't read that message, or follow it's suggestions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: postgresql HOWTO :)

2002-02-21 Thread Alan DeKok
Igor Chen [EMAIL PROTECTED] wrote: ok :) it's not a patch, just 4 lines added :) I've added it, thanks. I also remind, that your sql.conf does not work with postgres :) OK. I'll try to dig up the old message where you posted a working postgres sql.conf... Alan DeKok. - List info

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
in person the people who created this stupidity, you have my permission to tell them exactly what I think of their service: shoddy, and non-standards compliant. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
the source IP address. Hmm... if 'bind_address' is set, then the proxy fd *should* be bound to that IP address, too. That currently isn't done. Luckily, it's a ~5 line patch. It's probably a good idea to do. Can you supply a patch? Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
Alan DeKok [EMAIL PROTECTED] wrote: Hmm... if 'bind_address' is set, then the proxy fd *should* be bound to that IP address, too. That currently isn't done. Luckily, it's a ~5 line patch. Never mind... I read a little more of the code, and it *is* done. So if you set 'bind_address

Re: Counter

2002-02-21 Thread Alan DeKok
Gillou [EMAIL PROTECTED] wrote: If I use reser = never, can I reset the counter manualy with a given value with a small perl script or C prog ? There is currently no way to do this. It shouldn't be hard to do from a small program. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: HEEEEEEEEELP

2002-02-21 Thread Alan DeKok
server the original poster is connecting to is a multihomed freeradius server? ;) Hmm... I can't help but feel at least partially responsible for such a situatuion. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: old version of FreeRADIUS

2002-02-22 Thread Alan DeKok
in detail. You may want to take a look at the current version of the server. It has a lot of fixes over the old one. If you diameter code is GPL'd, then it may be worth starting a free software diameter server. (Although I think diameter is massively over-engineered) Alan DeKok. - List info

Re: One more question about counter

2002-02-22 Thread Alan DeKok
to the counter module to allow better support for other attributes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Counter

2002-02-22 Thread Alan DeKok
of an accounting attribute instead of an increment. That's a good idea, too. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Please send me a sample config

2002-02-22 Thread Alan DeKok
by private email at $100u.s. per question. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Please send me a sample config

2002-02-22 Thread Alan DeKok
, and what I'm good at. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pam_radius SecurID

2002-02-22 Thread Alan DeKok
on this, considering to do so, or has any alternative suggestions on how I might be able to do this without requiring two logins? Source code patches. Post them, and I'll probably add them to the module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: radius proxy and accounting

2002-02-23 Thread Alan DeKok
packets. You listed them above: acctsessionid,username,nasipaddress Get the SQL module to do an 'insert' of the stop record if it isn't there, and NOT to do an 'update' if the record already exists. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Questions about VPN3000 and FreeRadius

2002-02-24 Thread Alan DeKok
the server in debugging mode, like it says in the READ and the FAQ? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cisco VSA Attribute show again in string

2002-02-25 Thread Alan DeKok
call which generates detail files. The pre-accounting modules edit the request so that the accounting function will log the cleaned attributes. If it's not doing that for you, check your config. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius on IBM AIX 4.3.3

2002-02-25 Thread Alan DeKok
to empty strings, autoconf is *so* helpful that it sets them to english strings which say they're empty. Go to 'configure', and look for: PTHREADLIB=$PTHREADLIB $ac_cv_search_sem_init Delete that line. The configure process should work. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: compile errors due to rlm_counter.c?

2002-02-25 Thread Alan DeKok
. Upgrade your gdbm libraries header files. The latest version is 1.8 The alternative is to go back to the previous version of the 'counter' module. I'll try to put an update in tonight. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: AW: Using smbpasswd with freeradius?

2002-02-25 Thread Alan DeKok
Daniel Beuchler [EMAIL PROTECTED] wrote: The Passwords will only be exchanged in plaintext between the NAS and your Radius No. The passwords in RADIUS are NEVER sent on the network in plain text. They are ALWAYS encrypted. Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: compile errors due to rlm_counter.c?

2002-02-25 Thread Alan DeKok
Andrew Kelaidis [EMAIL PROTECTED] wrote: I have similars problems with counter module. When I try to run configure I got the following message: counter module require gdbm Have you tried looking at 'config.log', as was suggested on the list earlier today? Alan DeKok. - List info

  1   2   3   4   5   6   7   8   9   10   >