Re: compiling freeradius with oracle support

2008-08-19 Thread Alan DeKok
Alexandre Chapellon wrote: It says headers (oci.h) are not found, but this file realy is in the specified include path. The configure logs should say why it wasn't built, but even that isn't really worth looking at. Does anyone have a clue what i could do? $ vi

Re: Crash on x64?

2008-08-19 Thread Alan DeKok
John Dennis wrote: Actually, on Fedora RHEL you don't need to rebuild with debugging symbols on. All packages built for Fedora RHEL always have matching debuginfo packages which can optionally be installed, which once installed will give you line number information in the debugger. Nice.

Re: Locking accounts after failed attempts. pam_tally ?

2008-08-19 Thread Alan DeKok
Mark Tunnell wrote: Is there a way to disable radius access for a user after a specified number of incorrect passwords using the standard Unix passwd system? I don't know of any way. I have pam_tally running and it correctly increments on failed SSH login attempts. However, failed

Re: Crash on x64?

2008-08-19 Thread Alex Balashov
Alan DeKok wrote: John Dennis wrote: Actually, on Fedora RHEL you don't need to rebuild with debugging symbols on. All packages built for Fedora RHEL always have matching debuginfo packages which can optionally be installed, which once installed will give you line number information in the

I've started to put the book online

2008-08-19 Thread Alan DeKok
http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of common misunderstandings about how it all works. Keep checking the site. More will be coming later. Alan DeKok. - List

Re: I've started to put the book online

2008-08-19 Thread Jelle Langbroek
Just great! Thanks, I'll be sure to read it. 2008/8/19 Alan DeKok [EMAIL PROTECTED] http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of common misunderstandings about how it all

Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Harry J Walsh
Hi, I want to develop some test cases for a radius client I am developing and I would like to be able to use rlm_perl to simulate various scenarios. The one I am having major problems with is Access-Challenge. I really like rlm_perl and the flexibility it provides and I would like to be able to

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Alan DeKok
Harry J Walsh wrote: I want to develop some test cases for a radius client I am developing and I would like to be able to use rlm_perl to simulate various scenarios. The one I am having major problems with is Access-Challenge. I really like rlm_perl and the flexibility it provides and I

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Harry J Walsh
Thanks for the swift reply Dekok. I tried what you suggested and it doesn't work. Looking at dictionary.freeradius.internal and double checking the values in the pair everything looks okay.I'm going to play about with this a bit, but in the mean time here's some more details and I would

Realms and proxying

2008-08-19 Thread Dean, Barry
I currently have a realm defined: realm liv.ac.uk { type= radius authhost= LOCAL accthost= LOCAL } I now have one of my departments, which for various complex reasons, has been allowed to have its own user accounts. They have the subdomain

Re: Realms and proxying

2008-08-19 Thread Stefan Winter
Hi, Is this position dependant? Does it have to appear before the liv.ac.uk realm to prevent [EMAIL PROTECTED] being caught by the first realm? No, unless you use a regex in the realm stanza, the matches are *literal* realms. i.e. realm liv.ac.uk does not match foo.bar.liv.ac.uk.

Re: Crash on x64?

2008-08-19 Thread John Dennis
Alex Balashov wrote: Alan DeKok wrote: John Dennis wrote: Actually, on Fedora RHEL you don't need to rebuild with debugging symbols on. All packages built for Fedora RHEL always have matching debuginfo packages which can optionally be installed, which once installed will give you line number

convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread S Adrian
Hi everybody, I got a file that looks like this (utstarcom.dct) which would need to be translated to freeradius .. anyone can help? start of file # utstarcom.dct - Radius dictionary for UTStarcom BBS1000 @radius.dct # # UTStarcom specific parameters # MACRO UTStarcom-VSA(t,s) 26 [vid=7064

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread Alex Balashov
That one's pretty easy; have a peek at the other FreeRADIUS-formatted vendor dictionaries that come with the package and spy the nuances in the differences. On Tue, August 19, 2008 10:33 am, S Adrian wrote: Hi everybody, I got a file that looks like this (utstarcom.dct) which would need to

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread S Adrian
That one's pretty easy; have a peek at the other FreeRADIUS-formatted vendor dictionaries that come with the package and spy the nuances in the differences. Ok, but what about that radius.dct .. should it affect what I enter in the new freeradius dictionary file ? # utstarcom.dct - Radius

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread S Adrian
Here it is attached to this message. Thanks .. but still .. those thingies .. c .. cr .. 7064 .. what are they ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Auth-Type := Accept - CHAP problems

2008-08-19 Thread Thomas Buchberger
Hi @ll, we're playing with the freeradius features and are getting confused in the way it behaves: We have several different Users in user-files which works fine. Now we want that the radius always answers with OK and no more Login incorrect - but with other Options than a correct user. We

Re: final question about client certs using eap-tls (was: cert bootstrap bug?)

2008-08-19 Thread Sergio
Sergio escribió: Hi, also was so many others. At this time i have got one eap module which authenticates users under a PKI. My client certs are issued by root ca (ca.pem) and everything works. I can manage the crl, because it is public, and authenticate any user against any server. So my

Problems with EAP and LDAP replyItems (2.0.2)

2008-08-19 Thread tschaos
Hi Guys, Since freeradius2 has some major improvements I try to upgrade from 1.1.4. Unfortunately there are a few problems i encounter: cause of some weird reason the server isn't sending back my LDAP replyItems back to the NAS along the Access-Accept packet. In short i want to authenticate

Re: cert bootstrap bug? (was Re: definitely, I have a problem with eap-tls)

2008-08-19 Thread William Hegardt
I hate to resurrect this long thread from July 22-28, but I have the same problem and never saw a resolution. I'm using FreeRadius 2.0.5 on CentOS 5.2 with wpa_supplicant 0.6.4 (latest to date). I'm using the bootstrap script to generate example certificates. I also created a client certificate

Re: web based certificate management

2008-08-19 Thread John Dennis
Tomoki Taniguchi wrote: is there a good web based certificate management system that users of freeradius recommend? i need something that will apply the needed xpextensions and generate the necessary .p12 and .der certificates for a windows xp client. i am looking into editing the ebox-ca to

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread Alan DeKok
S Adrian wrote: I got a file that looks like this (utstarcom.dct) which would need to be translated to freeradius .. anyone can help? http://github.com/alandekok/freeradius-server/tree/master/share/dictionary.utstarcom :) There's also a simple (i.e. dumb) script that does some of the

Re: Auth-Type := Accept - CHAP problems

2008-08-19 Thread Alan DeKok
Thomas Buchberger wrote: we're playing with the freeradius features and are getting confused in the way it behaves: :) It's simple... just read 1000's of lines of debugging output, and hordes of miscellaneous unrelated unorganized documentation files. We have several different Users in

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Alan DeKok
Harry J Walsh wrote: Thanks for the swift reply Dekok. I tried what you suggested and it doesn't work. Sorry... looking at the code again, the Response-Packet-Type should go into the control/check items. ... $RAD_REPLY{'Response-Packet-Type'} = Access-Challenge; Change

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Harry J Walsh
Yes, that worked a charm. Thanks for the help Alan! -- Harry On Tue, Aug 19, 2008 at 6:03 PM, Alan DeKok [EMAIL PROTECTED] wrote: Harry J Walsh wrote: Thanks for the swift reply Dekok. I tried what you suggested and it doesn't work. Sorry... looking at the code again, the

Re: NAS-Post in Netgear Accounting-Packet

2008-08-19 Thread Stefan Puch
In the Start-Packets and Interim-Update-Packets it seems to be right. But ALL the Stop-Packets have 0 as NAS-Port. So, you agree that this is a bug of the Access-Point? Thank you for your reply. Wolfgang Burger Hello, I've got three WG102 Access Points from Netgear. I'm using the latest

Re: I've started to put the book online

2008-08-19 Thread Alexandre Chapellon
ok then I know what to do today to stop feeling stupid on this list :p Alan DeKok a écrit : http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of common misunderstandings about how

Re: NAS-Post in Netgear Accounting-Packet

2008-08-19 Thread Ivan Kalik
Tue Aug 19 18:11:30 2008 : Auth: Login OK: [test2 /via Auth-Type = EAP] (from client AP-Halle1 port 1 cli 001302BE) Tue Aug 19 18:12:30 2008 : Error: rlm_radutmp: Logout for NAS AP-Halle1 port 0, but no Login record .. It's shows that the user is still connected... Does anyone know how this

Re: I've started to put the book online

2008-08-19 Thread Sergio
Alexandre Chapellon escribió: ok then I know what to do today to stop feeling stupid on this list :p Alan DeKok a écrit : http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of

Re: I've started to put the book online

2008-08-19 Thread Do Nguyen Ha
its good news for everyone who love FreeRadius :) Date: Tue, 19 Aug 2008 09:23:06 +0200 From: Alan DeKok [EMAIL PROTECTED] Subject: I've started to put the book online To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain;

Re: compiling freeradius with oracle support

2008-08-19 Thread Alexandre Chapellon
Ok the modules compils great. and it creates rlm_sql_oracle-2.0.5.so (and its symlink). I copy thoose two files in /usr/lib/freeradius but when launching freeradius -X i get: rlm_sql (sql): Driver rlm_sql_oracle (module rlm_sql_oracle) loaded and linked rlm_sql (sql): Attempting to connect to

Re: compiling freeradius with oracle support

2008-08-19 Thread Alan DeKok
Alexandre Chapellon wrote: Ok the modules compils great. and it creates rlm_sql_oracle-2.0.5.so (and its symlink). I copy thoose two files in /usr/lib/freeradius but when launching freeradius -X i get: ... freeradius: symbol lookup error: /usr/lib/freeradius/rlm_sql_oracle.so: undefined