Hi!

Can anyone tell me how to make EAP-TLS and PAM work together? or EAP-TLS and
Windows Active Directory work together?

Users will be authenticated based on the /etc/passwd.. or users in my active
directory? aside from the "whatever" secret authentication and certificate..
plssss....

thanks...

arniel

----- Original Message -----
From: <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Thursday, September 18, 2003 6:18 PM
Subject: Freeradius-Users digest, Vol 1 #2325 - 10 msgs


> Send Freeradius-Users mailing list submissions to
> [EMAIL PROTECTED]
>
> To subscribe or unsubscribe via the World Wide Web, visit
> http://lists.cistron.nl/mailman/listinfo/freeradius-users
> or, via email, send a message with subject or body 'help' to
> [EMAIL PROTECTED]
>
> You can reach the person managing the list at
> [EMAIL PROTECTED]
>
> When replying, please edit your Subject line so it is more specific
> than "Re: Contents of Freeradius-Users digest..."
>
>
> Today's Topics:
>
>    1. Re: dialup_admin on different server (Evren Yurtesen)
>    2. Re: FreeRADIUS 0.9.1. under FreeBSD^ making errors (Rohaizam Abu
Bakar)
>    3. No authenticate method, why ? (Jean Frontin)
>    4. Re: centralised radutmp (Kostas Kalevras)
>    5. Re: Authenticating using LDAP module (Kostas Kalevras)
>    6. Re: Authenticating using LDAP module (Kostas Kalevras)
>    7. Recommended value in radiusd.conf for HIGH load env. (Rohaizam Abu
Bakar)
>    8. freeradius ldap and nt password (Roberto Pioli)
>    9. RE: Radiusd service script + daemontools supervise (simon mackey)
>   10. Re: centralised radutmp (Rohaizam Abu Bakar)
>
> --__--__--
>
> Message: 1
> Date: Thu, 18 Sep 2003 11:30:23 -0700
> From: Evren Yurtesen <[EMAIL PROTECTED]>
> To:  [EMAIL PROTECTED]
> Subject: Re: dialup_admin on different server
> Reply-To: [EMAIL PROTECTED]
>
> see conf/admin.conf
> change
> sql_server: localhost
> to your server address
> also the user/pass information etc.
>
> Bernie Liwanag wrote:
>
> > Dear Kostas,
> >
> > Thanks for responding! Can you tell me how to configure the dialup_admin
on
> > a separate server that will lookup my other freeradius and mysql server.
> >
> > TIA!
> >
> > Bernie
> >
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
>
>
> --__--__--
>
> Message: 2
> From: "Rohaizam Abu Bakar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: Re: FreeRADIUS 0.9.1. under FreeBSD^ making errors
> Date: Thu, 18 Sep 2003 16:46:23 +0800
> Reply-To: [EMAIL PROTECTED]
>
>
> face same problem with FreeBSD 4.8
>
> done as below:
>
> # CFLAGS=-lc_r ./configure --without-threads
> # ./configure --without-threads
>     => both giving same error as below:
> # CFLAGS=-lc_r ./configure
>     => giving gethostbyaddr_r error
>
> --haizam
>
>
> rlm_counter.c:681: structure has no member named `mutex'
> rlm_counter.c:716: structure has no member named `mutex'
> rlm_counter.c:718: structure has no member named `mutex'
> rlm_counter.c: In function `counter_detach':
> rlm_counter.c:813: warning: implicit declaration of function
> `pthread_mutex_destroy'
> rlm_counter.c:813: structure has no member named `mutex'
> gmake[5]: *** [rlm_counter.o] Error 1
> gmake[5]: Leaving directory
> `/var/src/freeradius-0.9.1/src/modules/rlm_counter'
> gmake[4]: *** [common] Error 1
> gmake[4]: Leaving directory `/var/src/freeradius-0.9.1/src/modules'
> gmake[3]: *** [all] Error 2
> gmake[3]: Leaving directory `/var/src/freeradius-0.9.1/src/modules'
> gmake[2]: *** [common] Error 1
> gmake[2]: Leaving directory `/var/src/freeradius-0.9.1/src'
> gmake[1]: *** [all] Error 2
> gmake[1]: Leaving directory `/var/src/freeradius-0.9.1/src'
> gmake: *** [common] Error 1
>
> ----- Original Message -----
> From: "Paul Hampson" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Wednesday, September 17, 2003 2:26 AM
> Subject: RE: FreeRADIUS 0.9.1. under FreeBSD^ making errors
>
>
> > > From: andrew bogorodsky
> > > Sent: Sunday, 14 September 2003 8:28 PM
> >
> > > Making static dynamic in rlm_dbm...
> > > gmake[5]: Entering directory
> > > `/usr/local/soft/freeradius-0.9.1/src/modules/rlm_dbm'
> > > gcc  -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE -DNDEBUG
> > > -I../../include -DHAVE_NDBM_H -c rlm_dbm.c -o rlm_dbm.o
> > > rlm_dbm.c: In function `sm_parse_user':
> > > rlm_dbm.c:172: warning: assignment discards qualifiers from pointer
> > > target type
> > > rlm_dbm.c:206: warning: passing arg 2 of `paircmp' discards qualifiers
> > > from pointer target type
> > > /usr/local/soft/freeradius-0.9.1/libtool --mode=link ld \
> > > -module -static  -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE
> > > -DNDEBUG  -I../../include -DHAVE_NDBM_H rlm_dbm.o -o rlm_dbm.a
> > > mkdir .libs
> > > ar cru rlm_dbm.a rlm_dbm.o
> > > ranlib rlm_dbm.a
> > > gcc  -g -O2 -pthread -D_THREAD_SAFE -Wall -D_GNU_SOURCE -DNDEBUG
> > > -I../../include -DHAVE_NDBM_H -c rlm_dbm_parser.c -o rlm_dbm_parser.o
> > > rlm_dbm_parser.c: In function `storecontent':
> > > rlm_dbm_parser.c:160: warning: assignment discards qualifiers from
> > > pointer target type
> > > /usr/local/soft/freeradius-0.9.1/libtool --mode=link gcc
> > > rlm_dbm_parser.o ../../lib/libradius.a   -o rlm_dbm_parser
> > > gcc rlm_dbm_parser.o -o rlm_dbm_parser  ../../lib/libradius.a
> > > ../../lib/libradius.a(misc.o): In function `ip_hostname':
> > > /usr/local/soft/freeradius-0.9.1/src/lib/misc.c:63: undefined
reference
> > > to `gethostbyaddr_r'
> > > gmake[5]: *** [rlm_dbm_parser] Error 1
> > >
> > > (libtool-1.5)
> >
> > I don't think we support libtool-1.5... No idea if it actually
> > breaks things.
> >
> > This problem is triggered by FreeBSD's lying about the functions
> > provided by libc regarding name resolution. Specifically, it claims
> > to have gethostbyaddr_r but won't link with it. Try
> > CFLAGS=-lc_r ./configure {Rest of configure options}
> > from a clean copy of the tarball, and see if that helps.
> >
> > --
> > =========================================================
> > Paul "TBBle" Hampson
> > Bubblesworth Pty Ltd (ABN: 51 095 284 361)
> > [EMAIL PROTECTED]
> >
> > This is a one line proof...if we start
> > sufficiently far to the left.
> > -- Cambridge University Math Department
> > ---------------------------------------------------------
> > Random signature generator 3.0 by Paul "TBBle" Hampson
> > =========================================================
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> > [ Scanned by JARING E-Mail Virus Scanner ( http://www.jaring.my ) ]
>
>
>
>
> --__--__--
>
> Message: 3
> Date: Thu, 18 Sep 2003 10:53:05 +0200
> To: [EMAIL PROTECTED]
> From: Jean Frontin <[EMAIL PROTECTED]>
> Subject: No authenticate method, why ?
> Reply-To: [EMAIL PROTECTED]
>
> Hello,
>
> I don't understand the error message :
>
> auth: No authenticate method (Auth-Type) configuration found for the=20
> request: Rejecting the user
> auth: Failed to validate the user.
> Login incorrect: [root/********] (from client agly.irit.fr port 0)
>
> here is an stdout extract and below my "users" file.
>
> I use ntradping to test radius server.
> Thanks you for your help
>
> ---------
> Ready to process requests.
> rad_recv: Access-Request packet from host 141.115.16.72:1458, id=3D0,=
>  length=3D44
>          User-Name =3D "root"
>          User-Password =3D "*******"
> modcall: entering group authorize
>    modcall[authorize]: module "preprocess" returns ok
> rlm_counter: Entering module authorize code
> rlm_counter: Could not find Check item value pair
>    modcall[authorize]: module "counter" returns noop
> modcall: group authorize returns ok
> auth: No authenticate method (Auth-Type) configuration found for the=20
> request: Rejecting the user
> auth: Failed to validate the user.
> Login incorrect: [root/********] (from client agly.irit.fr port 0)
> Delaying request 0 for 1 seconds
> Finished request 0
> Going to the next request
> --- Walking the entire request list ---
> Waking up in 1 seconds...
> --- Walking the entire request list ---
> Waking up in 1 seconds...
> --- Walking the entire request list ---
> Sending Access-Reject of id 0 to 141.115.16.72:1458
> Waking up in 4 seconds...
> --- Walking the entire request list ---
> Cleaning up request 0 ID 0 with timestamp 3f6875a1
> Nothing to do.  Sleeping until we see a request.
> rad_recv: Access-Request packet from host 141.115.16.72:1459, id=3D0,=
>  length=3D44
>          User-Name =3D "root"
>          User-Password =3D "********"
> modcall: entering group authorize
>    modcall[authorize]: module "preprocess" returns ok
> rlm_counter: Entering module authorize code
> rlm_counter: Could not find Check item value pair
>    modcall[authorize]: module "counter" returns noop
> modcall: group authorize returns okauth: No authenticate method
(Auth-Type)=
> =20
> configuration found for the request: Rejecting the user
> auth: Failed to validate the user.
> Login incorrect: [root/********] (from client agly.irit.fr port 0)
> Delaying request 1 for 1 seconds
> Finished request 1
> Going to the next request
>
> ----- users
> root    Auth-Type :=3D system
>
>
>
> Jean Frontin
> System team
> I R I T
> Universit=E9 Paul-Sabatier
> 118, rte de Narbonne
> 31062 Toulouse cedex 04
> France
> tel  (33)(0)5 61 55 63 03
> mail [EMAIL PROTECTED]
>
>
>
> --__--__--
>
> Message: 4
> Date: Thu, 18 Sep 2003 12:18:28 +0300 (EEST)
> From: Kostas Kalevras <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: centralised radutmp
> Reply-To: [EMAIL PROTECTED]
>
> On Thu, 18 Sep 2003, Rohaizam Abu Bakar wrote:
>
> > >   No.  Running 10 small programs shouldn't be much of a problem.
> > >
> > OK & noted... thanks..
> >
> > One more question...
> > During radrelay process.. PRIMARY will read "detail-combined" file  and
send
> > to SECONDARY radius. Then in SECONDARY radius it will create
> >
> > {acct-dir}/primary_domain_dir/detail
> >
> > If we want to run radrelay also in SECONDARY back to PRIMARY.. then
radrelay
> > will read again "detail-combined" file that contain detail from PRIMARY
and
> > send back to PRIMARY.....   So there will be a duplicate accounting file
in
> > PRIMARY.....and back to SECONDARY again.... how freeradius handle
this..??
>
> Please read doc/radrelay first. It explains all this.
>
> >
> > thanks..
> >
> > --haizam
> >
> >
> >
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> >
>
> --
> Kostas Kalevras Network Operations Center
> [EMAIL PROTECTED] National Technical University of Athens, Greece
> Work Phone: +30 210 7721861
> 'Go back to the shadow' Gandalf
>
>
> --__--__--
>
> Message: 5
> Date: Thu, 18 Sep 2003 12:21:50 +0300 (EEST)
> From: Kostas Kalevras <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: Authenticating using LDAP module
> Reply-To: [EMAIL PROTECTED]
>
> On Wed, 17 Sep 2003, Narasimha Reddy Gujja wrote:
>
> > Quoting [EMAIL PROTECTED]:
> >
> > > Send Freeradius-Users mailing list submissions to
> > > [EMAIL PROTECTED]
> > >
> > > To subscribe or unsubscribe via the World Wide Web, visit
> > > http://lists.cistron.nl/mailman/listinfo/freeradius-users
> > > or, via email, send a message with subject or body 'help' to
> > > [EMAIL PROTECTED]
> > >
> > > You can reach the person managing the list at
> > > [EMAIL PROTECTED]
> > >
> > > When replying, please edit your Subject line so it is more specific
> > > than "Re: Contents of Freeradius-Users digest..."
> > >
> > >
> >
> > there seems to be a problem with radius interpreting the IP address of
the ldap
> > machine. even if you give ldap://ipaddr it wont contact the ldap server,
OR
> > maybe not maybe iam ignorant.(-; , just my view.
>
> You will need to have HAVE_LDAP_INITIALIZE defined during compilation of
> rlm_ldap for ldap urls to be accepted. The configure script of rlm_ldap
needs to
> be updated to find if ldap_initialize() is available.
>
> >
> > when you used localhost did you put it in quote like "localhost", if not
try that.
> >
> > and how do you want to use ldap for authenticate without using
"userPassword"
> > attribute in your ldap entry??
> >
> > Reddy
> > ([EMAIL PROTECTED])
> >
> >
> >
> > -------------------------------------------------
> > This mail sent through IMP: http://horde.org/imp/
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> >
>
> --
> Kostas Kalevras Network Operations Center
> [EMAIL PROTECTED] National Technical University of Athens, Greece
> Work Phone: +30 210 7721861
> 'Go back to the shadow' Gandalf
>
>
> --__--__--
>
> Message: 6
> Date: Thu, 18 Sep 2003 12:30:02 +0300 (EEST)
> From: Kostas Kalevras <[EMAIL PROTECTED]>
> To: [EMAIL PROTECTED]
> Subject: Re: Authenticating using LDAP module
> Reply-To: [EMAIL PROTECTED]
>
> On Thu, 18 Sep 2003, Vishal Jose wrote:
>
> >
> > Kostas Kalevras <[EMAIL PROTECTED]> wrote:
> >
> > > >                 filter = "uid=%u"
> > >
> > > Hmm, that should be "cn=%u" for things to work.
> >
> > Thanx,it solved my problem.What I need now is CHAP-Password type to be
> > send across to Radius Server from Client.My password in the LDAP
database is
> > plain text.I would like to know what is addition that to be given in
> > radiusd.conf if necessary?
>
> This has been discussed many times in the list. Check the list archives.
Also
> doc/rlm_ldap includes plenty of information on the subject.
>
> >
> > Thanx
> >
> > -Vishal
> >
> > -
> > List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
> >
>
> --
> Kostas Kalevras Network Operations Center
> [EMAIL PROTECTED] National Technical University of Athens, Greece
> Work Phone: +30 210 7721861
> 'Go back to the shadow' Gandalf
>
>
> --__--__--
>
> Message: 7
> From: "Rohaizam Abu Bakar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: Recommended value in radiusd.conf for HIGH load env.
> Date: Thu, 18 Sep 2003 17:36:35 +0800
> Reply-To: [EMAIL PROTECTED]
>
> This is a multi-part message in MIME format.
>
> ------=_NextPart_000_010C_01C37E0B.68112540
> Content-Type: text/plain;
> charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
>
> Please help me to tune recommended value in radiusd.conf for HIGH load =
> environment
>
> Used:
>
>     FreeBSD 4.8
>     Freeradius 0.9.0
>     Openldap 2.0.27
>
> .....
> max_request_time =3D 30
> delete_blocked_requests =3D no
> cleanup_delay =3D 5
> max_requests =3D 256000
> hostname_lookups =3D yes  =20
> allow_core_dumps =3D no
>
> # THREAD POOL CONFIGURATION
> thread pool {=20
>     start_servers =3D 5
>     max_servers =3D 2048        =3D> is it too high ???
>     min_spare_servers =3D 3
>     max_spare_servers =3D 10
>     max_requests_per_server =3D 0
> }
>
> # MODULE
> ldap {
>                 server =3D "10.1.1.1"
>                 identity =3D =
> "cn=3DSysadmin,ou=3DApplications,dc=3Dxxx,dc=3Dxx"
>                 password =3D xxxxxxx
>                 basedn =3D "ou=3DPeople,dc=3Dxxxx,dc=3Dxxx"
>                 filter =3D "(uid=3D%{Stripped-User-Name:-%{User-Name}})"
>                 start_tls =3D no
>                 access_attr =3D "dialupAccess"
>                 dictionary_mapping =3D ${raddbdir}/ldap.attrmap
>                 ldap_connections_number =3D 2048        =3D> is it too =
> high ?????
>                 timeout =3D 10
>                 timelimit =3D 10
>                 net_timeout =3D 5
>   }
> ..............
>
> ------=_NextPart_000_010C_01C37E0B.68112540
> Content-Type: text/html;
> charset="iso-8859-1"
> Content-Transfer-Encoding: quoted-printable
>
> <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.0 Transitional//EN">
> <HTML><HEAD>
> <META http-equiv=3DContent-Type content=3D"text/html; =
> charset=3Diso-8859-1">
> <META content=3D"MSHTML 6.00.2800.1126" name=3DGENERATOR>
> <STYLE></STYLE>
> </HEAD>
> <BODY bgColor=3D#ffffff>
> <DIV><FONT face=3DArial size=3D2>P</FONT><FONT face=3DArial =
> size=3D2>lease help me to=20
> tune recommended value in radiusd.conf for HIGH load =
> environment</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>Used:</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; FreeBSD =
> 4.8</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp;=20
> Freeradius&nbsp;0.9.0</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; Openldap =
> 2.0.27</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2>.....</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>max_request_time =3D 30</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>delete_blocked_requests =3D =
> no</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>cleanup_delay =3D 5</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>max_requests =3D 256000</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>hostname_lookups =3D yes&nbsp;&nbsp; =
> </FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>allow_core_dumps =3D =
> no<BR></FONT></DIV>
> <DIV><FONT face=3DArial size=3D2># THREAD POOL =
> CONFIGURATION</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>thread pool {&nbsp;</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; start_servers =3D =
> 5</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; max_servers=20
> =3D&nbsp;2048&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; =3D&gt; is it too =
> high=20
> ???</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; min_spare_servers =
> =3D=20
> 3</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; max_spare_servers =
> =3D=20
> 10</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; =
> max_requests_per_server =3D=20
> 0</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>}</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2></FONT>&nbsp;</DIV>
> <DIV><FONT face=3DArial size=3D2># MODULE</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>ldap {</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp;=20
> &nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; server =3D=20
> "10.1.1.1"<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
> ;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> identity =3D=20
> "cn=3DSysadmin,ou=3DApplications,dc=3Dxxx,dc=3Dxx"<BR>&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> password=20
> =3D&nbsp;xxxxxxx<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp=
> ;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> basedn =3D=20
> "ou=3DPeople,dc=3Dxxxx,dc=3Dxxx"<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> filter =3D=20
> "(uid=3D%{Stripped-User-Name:-%{User-Name}})"<BR>&nbsp;&nbsp;&nbsp;&nbsp;=
> &nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> start_tls =3D=20
> no<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;=20
> access_attr =3D=20
> "dialupAccess"<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> dictionary_mapping =3D=20
> ${raddbdir}/ldap.attrmap<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nb=
> sp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;=20
> ldap_connections_number =3D 2048&nbsp;&nbsp;&nbsp; &nbsp;&nbsp;&nbsp; =
> =3D&gt; is it=20
> too high=20
> ?????<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbs=
> p;&nbsp;&nbsp;&nbsp;&nbsp;=20
> timeout =3D=20
> 10<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;=20
> timelimit =3D=20
> 10<BR>&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&nbsp;&=
> nbsp;&nbsp;&nbsp;&nbsp;=20
> net_timeout =3D 5</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp; }<BR>..............</FONT></DIV>
> <DIV><FONT face=3DArial size=3D2>&nbsp;</DIV></FONT><FONT face=3DArial=20
> size=3D2></FONT></BODY></HTML>
>
> ------=_NextPart_000_010C_01C37E0B.68112540--
>
>
>
>
> --__--__--
>
> Message: 8
> From: "Roberto Pioli" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: freeradius ldap and nt password
> Date: Thu, 18 Sep 2003 11:37:54 +0200
> Reply-To: [EMAIL PROTECTED]
>
> I'm using freeradius with Ldap ;
> I store an md5 password and a Nt password in Ldap.When a user want to
login
> to my cisco 7100 radius use username and the attribute User Password
(where
> i store the md5 password).When the user is making a vpn from a windows
> client ( using mschap) radius use username and NtPassword .
>
>
> Autztype Ldap
>
>                               {
>
>                                    ldap
>
>                               }
>
> ......
>
>
>
> authenticate {
>
>             authtype MS-CHAP
>
>                     {
>
>                         ms-chap
>
>                     }
>
>
>
>         authtype Ldap
>
>                      {
>
>                         ldap
>
>                      }
>
>
>
> All work fine.
>
> Now the problem.I have to use MYSQL instead of Ldap.Where can I say to use
> the attribute NTpassword?With Ldap I can specify the attribute to use for
> user pasword,.... but in mysql?
>
>
>
>
>
> Thanks
>
>
>
> Roberto
>
>
>
>
> --__--__--
>
> Message: 9
> From: "simon mackey" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: RE: Radiusd service script + daemontools supervise
> Date: Thu, 18 Sep 2003 11:06:51 +0100
> Reply-To: [EMAIL PROTECTED]
>
> Thanks Alan,
>
> Simon.
>
>  > -----Original Message-----
>  > From: [EMAIL PROTECTED]
>  > [mailto:[EMAIL PROTECTED] On Behalf
>  > Of Alan DeKok
>  > Sent: 16 September 2003 15:36
>  > To: [EMAIL PROTECTED]
>  > Subject: Re: Radiusd service script + daemontools supervise
>  >
>  > "simon mackey" <[EMAIL PROTECTED]> wrote:
>  > > When I boot up I can see the message "Starting radiusd
>  > [OK]" amongst all
>  > > the other services like httpd, etc., so I presume it's
>  > running, but
>  > > when I log in and type "lsof -i" at the command line I
>  > don't see any
>  > > radiusd processes running :(
>  >
>  >   'ps' is the usual command to use.  'lsof' does something else.
>  >
>  > > I would reallllly appreciate it if someone would take me
>  > through how
>  > > to get radiusd to start at boot time (with daemontools
>  > also monitoring
>  > > it without me having to type supervise /var/svc/radiusd
>  > every time I reboot)?
>  >
>  >   The 'doc' directory has documentaion on setting up daemontools.
>  >
>  >   As for getting it to run on boot, that's a function of
>  > your local OS.  Read it's documentation, and look at the
>  > scripts for the other programs which *do* run on boot.
>  >
>  >   Alan DeKok.
>  >
>  > -
>  > List info/subscribe/unsubscribe? See
>  > http://www.freeradius.org/list/users.html
>  >
>
>
> --__--__--
>
> Message: 10
> From: "Rohaizam Abu Bakar" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Subject: Re: centralised radutmp
> Date: Thu, 18 Sep 2003 18:16:46 +0800
> Reply-To: [EMAIL PROTECTED]
>
>
> I've read the docs .. but seems cannot find attr "Freeradius-Proxied-To"
in
> secondary server detail file...
>
> --haizam
>
> ----- Original Message -----
> From: "Kostas Kalevras" <[EMAIL PROTECTED]>
> To: <[EMAIL PROTECTED]>
> Sent: Thursday, September 18, 2003 5:18 PM
> Subject: Re: centralised radutmp
>
>
> > On Thu, 18 Sep 2003, Rohaizam Abu Bakar wrote:
> >
> > > >   No.  Running 10 small programs shouldn't be much of a problem.
> > > >
> > > OK & noted... thanks..
> > >
> > > One more question...
> > > During radrelay process.. PRIMARY will read "detail-combined" file
and
> send
> > > to SECONDARY radius. Then in SECONDARY radius it will create
> > >
> > > {acct-dir}/primary_domain_dir/detail
> > >
> > > If we want to run radrelay also in SECONDARY back to PRIMARY.. then
> radrelay
> > > will read again "detail-combined" file that contain detail from
PRIMARY
> and
> > > send back to PRIMARY.....   So there will be a duplicate accounting
file
> in
> > > PRIMARY.....and back to SECONDARY again.... how freeradius handle
> this..??
> >
> > Please read doc/radrelay first. It explains all this.
> >
> > >
> > > thanks..
> > >
> > > --haizam
> > >
> > >
> > >
> > >
> > > -
> > > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> > >
> >
> > --
> > Kostas Kalevras Network Operations Center
> > [EMAIL PROTECTED] National Technical University of Athens, Greece
> > Work Phone: +30 210 7721861
> > 'Go back to the shadow' Gandalf
> >
> > -
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> >
> > [ Scanned by JARING E-Mail Virus Scanner ( http://www.jaring.my ) ]
>
>
>
>
>
> --__--__--
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>
>
> End of Freeradius-Users Digest


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reply via email to