Dear Iq,

Im trying to get freeradius to work with mysql and having problems. Can you
tell me what ./configure options you used to configure it? Cause Im using
./configure --sysconfdir=/etc --with-mysql-lib-dir=/usr/lib/mysql. Its
giving me this error


rlm_sql (sql): Could not link driver rlm_sql_mysql: file not found
rlm_sql (sql): Make sure it (and all its dependent libraries!) are in the
search path of your system's ld.
radiusd.conf[14]: sql: Module instantiation failed.

Just wondering what configure options you used.

Thanks in advance.

From: "Iq" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, November 28, 2002 3:59 PM
Subject: Linux+freeradius+mysql


> Hi everyone,
>                    tried freeradius with mysql, got it working but how do
I
> get usage details out of radacct table. Is there a query provided
anywhere.
> I made two sessions and got both of them in radacct.
> Bellow is a copy of  what I got in radacct
>
>
> mysql> select * from radacct where Username='iraja';
>
+-----------+---------------+--------------+----------+-------+-------------
> -+-----------+-------------+---------------------+---------------------+--
--
> -------------+---------------+-------------------+-------------------+----
--
> -----------+------------------+-----------------+------------------+------
--
> ------------+-------------+----------------+-----------------+------------
--
> --+---------------+
> | RadAcctId | AcctSessionId | AcctUniqueId | UserName | Realm |
NASIPAddress
> | NASPortId | NASPortType | AcctStartTime       | AcctStopTime        |
> AcctSessionTime | AcctAuthentic | ConnectInfo_start | ConnectInfo_stop  |
> AcctInputOctets | AcctOutputOctets | CalledStationId | CallingStationId |
> AcctTerminateCause | ServiceType | FramedProtocol | FramedIPAddress |
> AcctStartDelay | AcctStopDelay |
>
+-----------+---------------+--------------+----------+-------+-------------
> -+-----------+-------------+---------------------+---------------------+--
--
> -------------+---------------+-------------------+-------------------+----
--
> -----------+------------------+-----------------+------------------+------
--
> ------------+-------------+----------------+-----------------+------------
--
> --+---------------+
> |         2 | 7100034B      |              | iraja    |       |
203.14.183.2
> |        12 | Async       | 2002-11-26 22:27:39 | 2002-11-26 22:29:08 |
> 89 | RADIUS        | 38666 LAPM/V42BIS | 24000 LAPM/V42BIS |
1399
> |             1064 | 87966000        |                  | User-Request
> | Framed-User | PPP            | 203.14.193.11  |              0 |
> 0 |
> |         4 | 7100034C      |              | iraja    |       |
203.14.183.2
> |        11 | Async       | 2002-11-26 22:30:46 | 2002-11-26 22:36:12 |
> 326 | RADIUS        | 52000 LAPM/V42BIS | 52000 LAPM/V42BIS |
> 159179 |          1355687 | 87966000        |                  |
> User-Request       | Framed-User | PPP            | 203.14.193.12   |
> 0 |             0 |
>
+-----------+---------------+--------------+----------+-------+-------------
> -+-----------+-------------+---------------------+---------------------+--
--
> -------------+---------------+-------------------+-------------------+----
--
> -----------+------------------+-----------------+------------------+------
--
> ------------+-------------+----------------+-----------------+------------
--
> --+---------------+
> 2 rows in set (0.00 sec)
>
> mysql>
>
>
> If you have any questions or comments, kindly do not hesitate to contact
us
> at Golden IT.
>
> kind regards,
>
>  Internet Services Administrator
> Golden IT
> Ph:  +61 (3) 97052511
> Fax: +61 (3) 97052544
> Email: [EMAIL PROTECTED]
> Web: www.goldenit.net.au
>
> --------------------------------------------------------------------------
--
> -----------------------------------------------------
> Please advise the originator by telephone (03)9705 2511 in the event that
> this transmission is incomplete.
> IF THIS EMAIL HAS BEEN SENT TO YOU BY MISTAKE: please call (03) 9705 2511
> and destroy it immediately. This email may contain Information which is
> confidential or which is subject to legal professional privilege. You must
> not use this email or the Information in it. Any confidentiality or
> privilege is not waived or lost because this email has been sent to you by
> mistake.
>
>
> ----- Original Message -----
> From: <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, November 28, 2002 2:30 PM
> Subject: Freeradius-Users digest, Vol 1 #1298 - 10 msgs
>
>
> > Send Freeradius-Users mailing list submissions to
> > [EMAIL PROTECTED]
> >
> > To subscribe or unsubscribe via the World Wide Web, visit
> > http://lists.cistron.nl/mailman/listinfo/freeradius-users
> > or, via email, send a message with subject or body 'help' to
> > [EMAIL PROTECTED]
> >
> > You can reach the person managing the list at
> > [EMAIL PROTECTED]
> >
> > When replying, please edit your Subject line so it is more specific
> > than "Re: Contents of Freeradius-Users digest..."
> >
> >
> > Today's Topics:
> >
> >    1. RE: Re: FreeRadius 0.8, Oracle 8.1.7. Problem with CPU load
> (Novoselsky Alexander)
> >    2. Re: User Configuartion Help and Interesting Scenario (Alan Wong)
> >    3. Re: EAP/TLS testing: SSL_set_my_callback (Artur Hecker)
> >    4. Re: SSL_read Error: EAP-TLS (Artur Hecker)
> >    5. RE: use freeradius to clear line (Chhai  Thach)
> >    6. RE: use freeradius to clear line (Chhai  Thach)
> >    7. Please Confirm Your $10,000 Entries! ([EMAIL PROTECTED])
> >    8. Recommend-It: PLS REPLY to CONFIRM
> [[EMAIL PROTECTED]/6947] (Recommend-It Confirmation Bot)
> >    9. Can I do eap/tls use 2 wire NIC and cisco 2950? (Huter.Liu)
> >   10. Re: Recommend-It: PLS REPLY to CONFIRM
> [[EMAIL PROTECTED]/6947] ([EMAIL PROTECTED])
> >
> > --__--__--
> >
> > Message: 1
> > From: Novoselsky Alexander <[EMAIL PROTECTED]>
> > To: "'[EMAIL PROTECTED]'"
> > <[EMAIL PROTECTED]>
> > Cc: Rubinstein Dmitry <[EMAIL PROTECTED]>
> > Subject: RE: Re: FreeRadius 0.8, Oracle 8.1.7. Problem with CPU load
> > Date: Wed, 27 Nov 2002 21:37:36 +0200
> > Reply-To: [EMAIL PROTECTED]
> >
> > This message is in MIME format. Since your mail reader does not
understand
> > this format, some or all of this message may not be legible.
> >
> > ------_=_NextPart_001_01C2964C.7057D822
> > Content-Type: text/plain;
> > charset="iso-8859-1"
> >
> > > -----Original Message-----
> > > From: Chris Parker [mailto:[EMAIL PROTECTED]]
> > > Sent: Tuesday, November 26, 2002 7:47 PM
> > > To: [EMAIL PROTECTED]
> > >
> > > > > Maybe they cache the responses from Oracle.  Look at the  queries
> they
> > do to Oracle, to see what's going on.
> > > >May be. But OpenRADIUS and Navis Radius use simple SQL queries:
"SELECT
> > password FROM users WHERE username = ?".
> > > >It seems to me, in FreeRadius 0.8 SQL query is not configurable
> > parameter.
> > > >But FreeRadius 0.7.1 used almost the same SQL query (it was in file
> > sql.conf).
> > >
> > > Nope, you can edit the queries in 'sql.conf' for all versions of
> > FreeRADIUS.
> > > Try editing it and see what it does to the performance.  A simpler
> > > query ( assuming properly indexed tables, etc ) should return faster.
> >
> > Thank you for advice, Chris.
> >
> > I tried to leave in file 'sql.conf' only 1 line with SELECT:
> > authorize_check_query = "SELECT id,UserName,Attribute,Value,op FROM
> > ${authcheck_table} WHERE Username = '%{SQL-User-Name}' ORDER BY id"
> >
> > It improved results: instead of 25-30% CPU load, now works with Oracle
> takes
> > 15-20% CPU load.
> >
> > May be, source of my problem was so. I filled only table 'radcheck', but
> > left in file 'sql.conf' all SQL queries, which tried to search in empty
> > tables.
> >
> > Best regards,
> > Alexander Novoselsky, Programmer
> > E-mail: [EMAIL PROTECTED]
> >
> > ------_=_NextPart_001_01C2964C.7057D822
> > Content-Type: text/html;
> > charset="iso-8859-1"
> > Content-Transfer-Encoding: quoted-printable
> >
> > <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 3.2//EN">
> > <HTML>
> > <HEAD>
> > <META HTTP-EQUIV=3D"Content-Type" CONTENT=3D"text/html; =
> > charset=3Diso-8859-1">
> > <META NAME=3D"Generator" CONTENT=3D"MS Exchange Server version =
> > 5.5.2655.35">
> > <TITLE>RE: Re: FreeRadius 0.8, Oracle 8.1.7. Problem with CPU =
> > load</TITLE>
> > </HEAD>
> > <BODY>
> >
> > <P><FONT SIZE=3D2>&gt; -----Original Message-----</FONT>
> > <BR><FONT SIZE=3D2>&gt; From: Chris Parker [<A =
> >
HREF=3D"mailto:[EMAIL PROTECTED]";>mailto:[EMAIL PROTECTED]</A>=
> > ]</FONT>
> > <BR><FONT SIZE=3D2>&gt; Sent: Tuesday, November 26, 2002 7:47 PM</FONT>
> > <BR><FONT SIZE=3D2>&gt; To: [EMAIL PROTECTED]</FONT>
> > <BR><FONT SIZE=3D2>&gt; </FONT>
> > <BR><FONT SIZE=3D2>&gt; &gt; &gt; Maybe they cache the responses from =
> > Oracle.&nbsp; Look at the&nbsp; queries they&nbsp; do to Oracle, to see
=
> > what's going on.</FONT>
> > <BR><FONT SIZE=3D2>&gt; &gt;May be. But OpenRADIUS and Navis Radius use
=
> > simple SQL queries: &quot;SELECT password FROM users WHERE username =3D
=
> > ?&quot;.</FONT>
> > <BR><FONT SIZE=3D2>&gt; &gt;It seems to me, in FreeRadius 0.8 SQL query
=
> > is not configurable parameter. </FONT>
> > <BR><FONT SIZE=3D2>&gt; &gt;But FreeRadius 0.7.1 used almost the same =
> > SQL query (it was in file sql.conf).</FONT>
> > <BR><FONT SIZE=3D2>&gt; </FONT>
> > <BR><FONT SIZE=3D2>&gt; Nope, you can edit the queries in 'sql.conf' =
> > for all versions of FreeRADIUS.</FONT>
> > <BR><FONT SIZE=3D2>&gt; Try editing it and see what it does to the =
> > performance.&nbsp; A simpler</FONT>
> > <BR><FONT SIZE=3D2>&gt; query ( assuming properly indexed tables, etc )
=
> > should return faster.</FONT>
> > </P>
> >
> > <P><FONT SIZE=3D2>Thank you for advice, Chris.</FONT>
> > </P>
> >
> > <P><FONT SIZE=3D2>I tried to leave in file 'sql.conf' only 1 line with =
> > SELECT:</FONT>
> > <BR><FONT SIZE=3D2>authorize_check_query =3D &quot;SELECT =
> > id,UserName,Attribute,Value,op FROM ${authcheck_table} WHERE Username =
> > =3D '%{SQL-User-Name}' ORDER BY id&quot;</FONT></P>
> >
> > <P><FONT SIZE=3D2>It improved results: instead of 25-30% CPU load, now =
> > works with Oracle takes 15-20% CPU load.</FONT>
> > </P>
> >
> > <P><FONT SIZE=3D2>May be, source of my problem was so. I filled only =
> > table 'radcheck', but left in file 'sql.conf' all SQL queries, which =
> > tried to search in empty tables.</FONT></P>
> >
> > <P><FONT SIZE=3D2>Best regards,</FONT>
> > <BR><FONT SIZE=3D2>Alexander Novoselsky, Programmer</FONT>
> > <BR><FONT SIZE=3D2>E-mail: &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp; =
> > [EMAIL PROTECTED]</FONT>
> > </P>
> >
> > </BODY>
> > </HTML>
> > ------_=_NextPart_001_01C2964C.7057D822--
> >
> >
> > --__--__--
> >
> > Message: 2
> > From: "Alan Wong" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Subject: Re: User Configuartion Help and Interesting Scenario
> > Date: Thu, 28 Nov 2002 09:10:39 +1100
> > Reply-To: [EMAIL PROTECTED]
> >
> > Dear all,
> >
> > Sorry for the badly worded question which has caused a big confusion. I
> > think I should explain the problem at hand instead of asking bits and
> > pieces. I want to be able to use an authenication server which will
> receive
> > a request. This request asks the authentication server to dynamically
add
> > the user and also generate a one time password. Then after the user is
> > authenticated with that password it will be deleted.
> >
> > Therefore the question is, are there add on modules that can dynamically
> add
> > a user and generate a one time password?
> >
> > But now that the only way to dynamically add a user is through a
database
> > (we do not want to even restart the auth server) therefore the main
> question
> > is is there a module to generate a one time password (and also be able
to
> > delete the user after the password has been used?)
> >
> > Sorry for the confusion caused.
> >
> > THanks in advance,
> > Alan
> >
> > >From: Chris Brotsos <[EMAIL PROTECTED]>
> > >Reply-To: [EMAIL PROTECTED]
> > >To: [EMAIL PROTECTED]
> > >Subject: Re: User Configuartion Help and Interesting Scenario
> > >Date: Wed, 27 Nov 2002 07:39:13 -0600
> > >
> > >Alan,
> > >
> > >At 11:38 PM 11/27/2002 +1100, you wrote:
> > >>Dear all,
> > >>
> > >>I have just installed radius 0.8 on my redhat 7.2 box. Being a total
> > >>newbie I just wanted to know two things...
> > >>
> > >>1) Firstly how do I add new users and then without restarting make
> radius
> > >>reread the users file? Is there a configuration switch to allow me to
do
> > >>that? If it isnt possible, can i set up a database and do it that way?
I
> > >>just need to know how to dynamically add new users without restarting
> the
> > >>radius server.
> > >
> > >Yes, you will need to use a database.
> > >
> > >
> > >>2) Is it possible for radius to also send back a string (password)
back
> to
> > >>the client instead of just accept-accept. Or will I have to set up
> another
> > >>machine or program to do that?
> > >
> > >I am a little unsure of what you mean here, but I think you are
referring
> > >to the use of a Reply-Message attribute that can be added to the user's
> > >profile to send back a string with your Access-Accept packet.
> > >
> > >Chris
> > >
> > >
> > >
> > >- List info/subscribe/unsubscribe? See
> > >http://www.freeradius.org/list/users.html
> >
> >
> > _________________________________________________________________
> > The new MSN 8: smart spam protection and 2 months FREE*
> > http://join.msn.com/?page=features/junkmail
> >
> >
> >
> >
> > --__--__--
> >
> > Message: 3
> > Date: Wed, 27 Nov 2002 23:31:22 +0100
> > From: Artur Hecker <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: Re: EAP/TLS testing: SSL_set_my_callback
> > Reply-To: [EMAIL PROTECTED]
> >
> >
> >
> > you don't need x99 token.
> >
> > go in the src/modules directory, locate the "stable" file and throw it
> > out of the list.
> >
> > ciao
> > artur
> >
> >
> >
> > Nikhil Chauhan wrote:
> > >
> > > Hi Artur:
> > >
> > > Thanks for your suggestions. I heartly appreciate
> > > them.
> > >
> > > The problem with SSL_set_msg_callback seems to be
> > > fixed now. I installed the latest Beta version of the
> > > openssl and /usr/local/lib/ldd rlm_eap_tls-0.7-pre.so
> > > seems to give me libraries from this version of
> > > openssl. I tried again with FreeRADIUS-0.7 and I get a
> > > segmentation fault when it tries to process the TLS
> > > request: (NOTE: PLEASE READ BELOW THE FOLLOWING LOG AS
> > > WELL)
> > >
> > > ====================================================
> > > Listening on IP address *, ports 1812/udp and
> > > 1813/udp, with proxy on 1814/udp.
> > > Ready to process requests.
> > > rad_recv: Access-Request packet from host
> > > 192.168.11.20:1047, id=23, length=122
> > >         User-Name = "adam-ctl"
> > >         NAS-IP-Address = 192.168.11.20
> > >         Called-Station-Id = "004096577e54"
> > >         Calling-Station-Id = "000809000097"
> > >         NAS-Identifier = "AP350"
> > >         NAS-Port = 29
> > >         Framed-MTU = 1400
> > >         NAS-Port-Type = Wireless-802.11
> > >         EAP-Message = "\002\035\000\r\001adam-ctl"
> > >         Message-Authenticator =
> > > 0x09cf6a42badba94b8978e30247cdd626
> > > modcall: entering group authorize
> > >   modcall[authorize]: module "preprocess" returns ok
> > >   modcall[authorize]: module "eap" returns updated
> > >     rlm_realm: Looking up realm NULL for User-Name =
> > > "adam-ctl"
> > >     rlm_realm: No such realm NULL
> > >   modcall[authorize]: module "suffix" returns noop
> > >     users: Matched adam-ctl at 97
> > >   modcall[authorize]: module "files" returns ok
> > > modcall: group authorize returns updated
> > >   rad_check_password:  Found Auth-Type EAP
> > > auth: type "EAP"
> > > modcall: entering group authenticate
> > > rlm_eap: processing type tls
> > > Segmentation fault
> > > ======================================================
> > >
> > > I understand that there are a lot of bug-fixes within
> > > FreeRadius 0.8 release and I should UPGRADE to the
> > > same level. I tried to install freeradius-0.8 and it
> > > gives me a parse error in unistd.h
> > > ===================================================
> > > gmake[6]: Entering directory
> > > `/tmp/freeradius-0.8/src/modules/rlm_unix'
> > > /tmp/freeradius-0.8/libtool --mode=link
> > > ld \
> > > -module -static  -g -O2 -D_REENTRANT
> > > -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE -g
> > > -Wshadow -Wpointer-arith -Wcast-qual -Wcast-align
> > > -Wwrite-strings -Wstrict-prototypes
> > > -Wmissing-prototypes -Wmissing-declarations
> > > -Wnested-externs -I../../include  rlm_unix.o cache.o
> > > compat.o -o rlm_unix.a
> > > ar cru rlm_unix.a rlm_unix.o cache.o compat.o
> > > ranlib rlm_unix.a
> > > gmake[6]: Leaving directory
> > > `/tmp/freeradius-snapshot-20021122/src/modules/rlm_unix'
> > > Making static dynamic in rlm_x99_token...
> > > gmake[6]: Entering directory
> > > `/tmp/freeradius-snapshot-20021122/src/modules/rlm_x99_token'
> > > gcc  -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS
> > > -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith
> > > -Wcast-qual -Wcast-align -Wwrite-strings
> > > -Wstrict-prototypes -Wmissing-prototypes
> > > -Wmissing-declarations -Wnested-externs
> > > -I../../include -DX99_MODULE_NAME=\"rlm_x99_token\"
> > > -DFREERADIUS -c x99_site.c -o x99_site.o
> > > In file included from ../../include/radiusd.h:19,
> > >                  from x99_rad.h:25,
> > >                  from x99.h:201,
> > >                  from x99_site.c:37:
> > > /usr/include/unistd.h:945: parse error before `('
> > > /usr/include/unistd.h:945: parse error before
> > > `__const'
> > > gmake[6]: *** [x99_site.o] Error 1
> > > gmake[6]: Leaving directory
> > > `/tmp/freeradius-0.8/src/modules/rlm_x99_token'
> > > gmake[5]: *** [common] Error 1
> > > gmake[5]: Leaving directory
> > > `/tmp/freeradius-0.8/src/modules'
> > > gmake[4]: *** [all] Error 2
> > > gmake[4]: Leaving directory
> > > `/tmp/freeradius-0.8/src/modules'
> > > gmake[3]: *** [common] Error 1
> > > gmake[3]: Leaving directory
> > > `/tmp/freeradius-0.8/src'
> > > gmake[2]: *** [all] Error 2
> > > gmake[2]: Leaving directory
> > > `/tmp/freeradius-0.8/src'
> > > gmake[1]: *** [common] Error 1
> > > gmake[1]: Leaving directory
> > > `/tmp/freeradius-0.8'
> > > make: *** [all] Error 2
> > > =================================================
> > >
> > > --- Artur Hecker <[EMAIL PROTECTED]> wrote:
> > > > nikhil:
> > > >
> > > >
> > > > as i already said to you:
> > > > - upgrade to the newest version, why do you still
> > > > use the 0.7.1?
> > > > - assure that the "old" openssl is not involved into
> > > > the compilation
> > > >
> > > > your problem is evidently that the rlm_eap_tls used
> > > > by freeradius is
> > > > compiled to use the old openssl OR it uses this for
> > > > unclear reasons.
> > > > resolve it, don't wait for _the_ solution, simply
> > > > try, play with your
> > > > settings (after having upgraded), with your gcc
> > > > config, your system
> > > > config, etc.
> > > >
> > > > the old lib doesn't have this function, only the new
> > > > beta versions have
> > > > (for as far as i know). yours evidently don't.
> > > > upgrade & recompile it.
> > > >
> > > > i'm sorry but it's a little bit hard to see what the
> > > > exact problem is
> > > > and to give you the sequence of commands which will
> > > > result in correct
> > > > behaviour, be administrator. you could write small
> > > > test programs in C
> > > > and compile those (simply a SSL_init() and then a
> > > > call to this
> > > > SSL_set_msg_callback() function). once your C test
> > > > compiles correctly
> > > > and executes without linker complaining (although
> > > > the program can
> > > > segfault completely, you don't care) you will
> > > > probably know what's wrong
> > > > now.
> > > >
> > > >
> > > > ciao
> > > > artur
> > > >
> > > >
> > > > Nikhil Chauhan wrote:
> > > > > Hi:
> > > > >
> > > > > Any more pointers on the same subject(please look
> > > > at
> > > > > the email thread) would be highly appreciated. My
> > > > > radius log looks like this:
> > > > >
> > > > > root@tstpc11:/usr/sbin > run_radius -X -A >
> > > > radius_log
> > > > > + LD_LIBRARY_PATH=/usr/local/openssl/lib
> > > > > + LD_PRELOAD=/usr/local/openssl/lib/libcrypto.so
> > > > > + export LD_LIBRARY_PATH LD_PRELOAD
> > > > > + /usr/local/sbin/radiusd -X -A
> > > >
> > > > ...
> > > >
> > > > > /usr/local/sbin/radiusd: error while loading
> > > > shared
> > > > > libraries: /usr/local/lib/rlm_eap_tls-0.7.1.so:
> > > > > undefined symbol: SSL_set_msg_callback
> > > >
> > > >
> > > > --
> > > > Artur Hecker                               Groupe Acc�s et Mobilit�
> > > > hecker[at]enst[dot]fr           D�partement Informatique et
> > > > R�seaux
> > > > +33 1 45 81 7507              46, rue Barrault 75634 Paris cedex
> > > > 13
> > > > http://www.infres.enst.fr                                ENST Paris
> > > >
> > > >
> > > > -
> > > > List info/subscribe/unsubscribe? See
> > > http://www.freeradius.org/list/users.html
> > >
> > > __________________________________________________
> > > Do you Yahoo!?
> > > Yahoo! Mail Plus - Powerful. Affordable. Sign up now.
> > > http://mailplus.yahoo.com
> > >
> > > -
> > > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> > --
> > Artur Hecker
> > artur[at]hecker.info
> >
> >
> > --__--__--
> >
> > Message: 4
> > Date: Wed, 27 Nov 2002 23:36:49 +0100
> > From: Artur Hecker <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
> > Subject: Re: SSL_read Error: EAP-TLS
> > Reply-To: [EMAIL PROTECTED]
> >
> >
> > ah, that's a good one
> >
> >
> > Nikhil Chauhan wrote:
> > >
> > > I generated the certificates as per the HOWTO
> > > by Raymond MacKay. I get a SSL_read Error (Please
> > > see the attached radius server log).
> >
> >
> >
> > > TLS_accept:error in SSLv3 read client certificate A
> > > rlm_eap_tls: SSL_read Error
> > >  Error code is ..... 2
> > >  SSL Error ..... 2
> > >   modcall[authenticate]: module "eap" returns ok
> > > modcall: group authenticate returns ok
> >
> > you are talking about that one right?
> >
> > there is to say, i've been having this error ever since (v0.5) and it
> > seems to work but i would indeed like to know what it actually is...
> >
> > anybody an idea? some openssl expert?
> >
> >
> > ciao
> > artur
> >
> >
> >
> > --
> > Artur Hecker
> > artur[at]hecker.info
> >
> >
> > --__--__--
> >
> > Message: 5
> > Subject: RE: use freeradius to clear line
> > Date: Thu, 28 Nov 2002 09:34:28 +1030
> > From: "Chhai  Thach" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Reply-To: [EMAIL PROTECTED]
> >
> > Thanks Alan!
> >
> > I read the FAQ once before and I remembered that freeradius could kick
> > users but I forgot that it was in the FAQ if that make sense at all!
> >
> > Chhai
> >
> > -----Original Message-----
> > From: Alan DeKok [mailto:[EMAIL PROTECTED]]=20
> > Sent: Thursday, 28 November 2002 1:41 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: use freeradius to clear line=20
> >
> > "Chhai  Thach" <[EMAIL PROTECTED]> wrote:
> > > Is there a way to manually disconnect the user using freeradius
> > instead
> > > of NAS?
> >
> >   Did you bother reading the FAQ?
> >
> >   Alan DeKok.
> >
> > -=20
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> >
> > --__--__--
> >
> > Message: 6
> > Subject: RE: use freeradius to clear line
> > Date: Thu, 28 Nov 2002 09:37:09 +1030
> > From: "Chhai  Thach" <[EMAIL PROTECTED]>
> > To: <[EMAIL PROTECTED]>
> > Reply-To: [EMAIL PROTECTED]
> >
> > Radzap doesn't seem to work for me either. I have two users stuck in FR
> > but they have disconnected from NAS a long time ago.=20
> >
> > -Chhai
> >
> > -----Original Message-----
> > From: Vitaliy Karlov [mailto:[EMAIL PROTECTED]]=20
> > Sent: Thursday, 28 November 2002 1:51 AM
> > To: [EMAIL PROTECTED]
> > Subject: Re: use freeradius to clear line
> >
> > On Wed, Nov 27, 2002 at 10:10:33AM -0500, Alan DeKok wrote:
> > > "Chhai  Thach" <[EMAIL PROTECTED]> wrote:
> > > > Is there a way to manually disconnect the user using freeradius
> > instead
> > > > of NAS?
> > >=20
> > >   Did you bother reading the FAQ?
> >
> > May be I wrong, but in FR-0.8 radzap is broken!
> >
> > I yourself want delete user from line, but nothing more, then log-entry:
> > in radius.log "Error: No clients entry for localhost", did not recieve
> > :(
> > In client and  clients.conf I have records for localhost!
> >
> > Any suggestion?
> >
> > PS. Now I use radzap from FR-0.7...
> >
> > --=20
> > WBR, Vitaliy Karlov [KV1670-RIPE]
> >
> > -=20
> > List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> >
> >
> > --__--__--
> >
> > Message: 7
> > From: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Subject: Please Confirm Your $10,000 Entries!
> > Date: Thu, 28 Nov 2002 01:08:23 +0100
> > Reply-To: [EMAIL PROTECTED]
> >
> > Please confirm the following contest entries by
> > clicking the link below:
> >
> > Recommend-It Spread the Word and Win $10,000
> > Sweepstakes (5 Entries) Sony DVD Player Giveaway (5 Entries)
> >
> > Your confirmation link is:
> >
> > http://ric1.com/irec.e?228469CB76F
> >
> > Your confirmation page will also show you how
> > you can earn additional contest entries by visiting
> > great Recommend-It websites!
> >
> > Don't want to hear about other contests and
> > promotions? Visit the link above and uncheck the
> > notification box.
> >
> > -------
> > Recommend-It, iRecommend-It and Spread the Word
> > and Win are trademarks of Digital Demographics, Inc.
> > All contest entries are subject to applicable
> > contest rules. Visit http://iRecommend-it.com/ for more details.
> >
> >
> >
> >
> > --__--__--
> >
> > Message: 8
> > Date: 27 Nov 2002 19:15:24 -0500
> > To: <[EMAIL PROTECTED]>
> > From: "Recommend-It Confirmation Bot"
<[EMAIL PROTECTED]>
> > Subject: Recommend-It: PLS REPLY to CONFIRM
> [[EMAIL PROTECTED]/6947]
> > Reply-To: [EMAIL PROTECTED]
> >
> > CONFIRMATION OF RECOMMEND-IT SUBSCRIPTION REQUEST IS REQUIRED!
> >
> > We have just received a subscription request to add you to the
> > free lists run by Recommend-It. You must confirm your subscription to
> > join these lists by following the simple instructions below.
> >
> > INSTRUCTIONS:
> >
> > In order to activate your subscription(s), you MUST send us an email
> > by replying to this message to verify your email address! It is very
easy:
> > simply hit the "Reply" button to this email, leave the confirmation code
> > in the "Subject:" and click to "Send."
> >
> > Alternatively, you can also confirm via the web:
> >
> >
>
http://www.ric2.com/pmdconfirm.jsp?E=freeradius-users%40lists.cistron.nl&T=6
> 947
> >
> > If asked, your codes are   E: [EMAIL PROTECTED] and T:
> 6947
> >
> > This is just to verify your email address and to make sure no one is
> trying
> > to subscribe you without your permission. If this subscription request
is
> > in error, do nothing, you will NOT receive any mail from us.
> >
> > We NEVER spam, and this email is to validate the subscription request we
> > received via the Recommend-It web site. There is a possibility that
> someone
> > may have attempted to sign you up maliciously; in which case ignore this
> > email. Again, we do not harvest or send unsolicited email of any sort,
nor
> > do we wish to do that.
> >
> > Finally, let us remind you again: to confirm your subscription, "Reply"
to
> this
> > message, leaving the code in the subject line, and click on "Send".
> >
> >
> > Recommend-It lists requested:
> > ----------------------------
> > Recommend-It/Dating.list
> > Recommend-It/Entertainment_Ezine.list
> > Recommend-It/HUMOR.list
> > Recommend-It/Recommend-It_Megazine.list
> >
> >
> >
> >
> > ** [EMAIL PROTECTED]
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> >
> > --__--__--
> >
> > Message: 9
> > Date: Thu, 28 Nov 2002 11:18:0 +0800
> > From: "Huter.Liu" <[EMAIL PROTECTED]>
> > To: [EMAIL PROTECTED]
<[EMAIL PROTECTED]>
> > Subject: Can I do eap/tls use 2 wire NIC and cisco 2950?
> > Reply-To: [EMAIL PROTECTED]
> >
> > hi,everyone!
> > I know 802.1x support both wireless and wire network authentication,but
I
> found nobody use 802.1x do wire network authentication,why?I don't
know.Now
> I'd to do such a trick,I must show somebody how cisco 2950 support 802.1x
> authentication,I want use freeradius and xsupplicant,just use one laptop
> with two wire NIC(one embedded and one PCMCIA,I can't found any document
> about xsupplicant,can you tell me xsupplicant support wire NIC do EAP/TLS
> authentication or not?
> >
> > Best Regards
> > Yours
> > Huter.Liu
> > [EMAIL PROTECTED]
> >
> >
> >
> >
> > --__--__--
> >
> > Message: 10
> > From: [EMAIL PROTECTED]
> > To: [EMAIL PROTECTED]
> > Date: Wed, 27 Nov 2002 22:44:45 -0500
> > Subject: Re: Recommend-It: PLS REPLY to CONFIRM
> [[EMAIL PROTECTED]/6947]
> > Reply-To: [EMAIL PROTECTED]
> >
> >
> > > CONFIRMATION OF RECOMMEND-IT SUBSCRIPTION REQUEST IS REQUIRED!
> > >
> > > We have just received a subscription request to add you to the
> > > free lists run by Recommend-It. You must confirm your subscription to
> > > join these lists by following the simple instructions below.
> > >
> > > INSTRUCTIONS:
> > >
> > > In order to activate your subscription(s), you MUST send us an email
> > > by replying to this message to verify your email address! It is very
> easy:
> > > simply hit the "Reply" button to this email, leave the confirmation
code
> > > in the "Subject:" and click to "Send."
> > >
> > > Alternatively, you can also confirm via the web:
> > >
> > >
>
http://www.ric2.com/pmdconfirm.jsp?E=freeradius-users%40lists.cistron.nl&T=6
> 947
> > >
> > > If asked, your codes are   E: [EMAIL PROTECTED] and T:
> 6947
> > >
> > > This is just to verify your email address and to make sure no one is
> trying
> > > to subscribe you without your permission. If this subscription request
> is
> > > in error, do nothing, you will NOT receive any mail from us.
> > >
> > > We NEVER spam, and this email is to validate the subscription request
we
> > > received via the Recommend-It web site. There is a possibility that
> someone
> > > may have attempted to sign you up maliciously; in which case ignore
this
> > > email. Again, we do not harvest or send unsolicited email of any sort,
> nor
> > > do we wish to do that.
> > >
> > > Finally, let us remind you again: to confirm your subscription,
"Reply"
> to this
> > > message, leaving the code in the subject line, and click on "Send".
> > >
> > >
> > > Recommend-It lists requested:
> > > ----------------------------
> > > Recommend-It/Dating.list
> > > Recommend-It/Entertainment_Ezine.list
> > > Recommend-It/HUMOR.list
> > > Recommend-It/Recommend-It_Megazine.list
> > >
> > >
> > >
> > >
> > > ** [EMAIL PROTECTED]
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> >
> >
> >
> >
> > --__--__--
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> >
> > End of Freeradius-Users Digest
> >
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to