Hi I am using free radisu 1.1.7 and eap tls authentication.I would like to know the maximum number of users/ authentication requests that it can handle?
Regards Anoop -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: Thursday, October 25, 2007 11:02 AM To: [email protected] Subject: Freeradius-Users Digest, Vol 30, Issue 91 Send Freeradius-Users mailing list submissions to [email protected] To subscribe or unsubscribe via the World Wide Web, visit http://lists.freeradius.org/mailman/listinfo/freeradius-users or, via email, send a message with subject or body 'help' to [EMAIL PROTECTED] You can reach the person managing the list at [EMAIL PROTECTED] When replying, please edit your Subject line so it is more specific than "Re: Contents of Freeradius-Users digest..." Today's Topics: 1. Access-Reject in a php script (manIP) 2. FR-2.0.0-pre2 - virtual server configuration problem - how to use client and listen (Tomasz Zieleniewski) 3. Re: Access-Reject in a php script (Alan DeKok) 4. FR-2.0.0-pre2 - doubled sql accounting (Tomasz Zieleniewski) 5. Re: FR-2.0.0-pre2 - virtual server configuration problem - how to use client and listen (Alan DeKok) 6. Re: Access-Reject in a php script ([EMAIL PROTECTED]) 7. Re: AW: AW: Newbie Question o.O (Sebastian Wild) 8. Re: AW: AW: Newbie Question o.O (Andy Billington) 9. Fw: FreeRadius Server: Installation problem (j v) ---------------------------------------------------------------------- Message: 1 Date: Wed, 24 Oct 2007 17:34:09 +0200 From: manIP <[EMAIL PROTECTED]> Subject: Access-Reject in a php script To: [email protected] Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" Hi all! I am using a script for the authentication and it is working well. I can send a list of attributes without any problem. Now I want to send an "Access-Reject" if the authentication fails but I do not know how...I would be very grateful if someone could tell me how to do so. herein is a test script: #!/usr/bin/php <?php $argv = $_SERVER['argv']; if ( $argv[1] == "toto") echo "Session-Timeout:=100"; else echo "Access-Reject"; //NOT WORKING!!!!!! ?> Thanks a lot for your assistance Khalid :) -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102 4/ce894a23/attachment-0001.html> ------------------------------ Message: 2 Date: Wed, 24 Oct 2007 16:37:54 +0200 From: "Tomasz Zieleniewski" <[EMAIL PROTECTED]> Subject: FR-2.0.0-pre2 - virtual server configuration problem - how to use client and listen To: "FreeRadius users mailing list" <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" Hi, I have some doubts about the rules of applying client and listen blocks in comparison to virtual server setting. Is it this way that both client and listen blocks can appear in the main radiusd.conf file so that they will behave like default global setting for all defined virtual servers?? If yes then any of this section put inside the virtual server block overrides the global settings? Do I have to specify the virtual_server item in the client or listen block? What if I don't in neither of them, will it point to some default "null" server? For instance this one which doesn't have a name specified: server { .... } Waiting for your feedback Thanks in advance Tomasz -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102 4/5eb2cadd/attachment-0001.html> ------------------------------ Message: 3 Date: Wed, 24 Oct 2007 17:48:25 +0200 From: Alan DeKok <[EMAIL PROTECTED]> Subject: Re: Access-Reject in a php script To: FreeRadius users mailing list <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 manIP wrote: > I am using a script for the authentication and it is working well. I can > send a list of attributes without any problem. > Now I want to send an "Access-Reject" if the authentication fails but I > do not know how...I would be very grateful if someone could tell me how > to do so. > herein is a test script: > > #!/usr/bin/php > <?php > $argv = $_SERVER['argv']; > if ( $argv[1] == "toto") > echo " Session-Timeout:=100"; > else > echo " Access-Reject"; //NOT WORKING!!!!!! It's not documented as doing that. Have the script return an error, and no output. Alan DeKok. ------------------------------ Message: 4 Date: Wed, 24 Oct 2007 18:19:01 +0200 From: "Tomasz Zieleniewski" <[EMAIL PROTECTED]> Subject: FR-2.0.0-pre2 - doubled sql accounting To: "FreeRadius users mailing list" <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" Hi, I have the home_server configuration which points to my localhost. So the scenario is the following that when I receive the Accounting-Request with the user name of the form [EMAIL PROTECTED] I check the realm for particular domain and strip the user name and proxy it again to my home_server localhost - partcular realm have the pool which points to the localhost home_server Problem is that there each accounting request is accounted twice. First time when request gets to freeradius and second after it enters again after proxing it through home_server pool. What can I do about it. How can I disable such behavior?? I know that I can do it by setting particular as local without specifying the acctpool - but i still would like to use the pool. Can I somehow disable the first or the second accounting, what is the right way to do it?? Thank you for any help Regards Tomasz -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102 4/bba56638/attachment-0001.html> ------------------------------ Message: 5 Date: Wed, 24 Oct 2007 17:47:14 +0200 From: Alan DeKok <[EMAIL PROTECTED]> Subject: Re: FR-2.0.0-pre2 - virtual server configuration problem - how to use client and listen To: FreeRadius users mailing list <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 Tomasz Zieleniewski wrote: > I have some doubts about the rules of applying client and listen blocks > in comparison to virtual server setting. raddb/sites-available/README contains the documentation for that. > Is it this way that both client and listen blocks can appear in the main > radiusd.conf file so that they will behave > like default global setting for all defined virtual servers?? Yes. > If yes then any of this section put inside the virtual server block > overrides the global settings? Yes. > Do I have to specify the virtual_server item in the client or listen block? If the client/listen block is in a virtual server, no. > What if I don't in neither of them, will it point to some default "null" > server? Yes. Alan DeKok. ------------------------------ Message: 6 Date: Wed, 24 Oct 2007 18:24:13 +0100 From: [EMAIL PROTECTED] Subject: Re: Access-Reject in a php script To: FreeRadius users mailing list <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=us-ascii Hi, > echo "Session-Timeout:=100"; > else > echo "Access-Reject"; //NOT WORKING!!!!!! hmmm, normally/properly you dont send such attributes back - thats a server job. you should simply exit with the return code that equals reject. alan ------------------------------ Message: 7 Date: Wed, 24 Oct 2007 16:39:05 +0200 From: Sebastian Wild <[EMAIL PROTECTED]> Subject: Re: AW: AW: Newbie Question o.O To: FreeRadius users mailing list <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=utf-8 Bernd please correct your system date. You keep sending mails dated in the future! Sebastian Am Mittwoch, den 31.10.2007, 14:20 +0100 schrieb Bernd: > I'm sorry...I never worked with RADIUS, please consider that. I don't mind > reading documentations :) - but I don't know where I can find the NAS > documentation > > -----Urspr?ngliche Nachricht----- > Von: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] Im Auftrag von Alan > DeKok > Gesendet: Mittwoch, 24. Oktober 2007 12:38 > An: FreeRadius users mailing list > Betreff: Re: AW: Newbie Question o.O > > Bernd wrote: > > > Do the AP's send RADIUS requests to authenticate the MAC when they see > > a new machine? If not, you can't do it. > > > > How do I know if they do? > ... > > >> Unfortunately, you're being told to go read the NAS documentation. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------ Message: 8 Date: Wed, 24 Oct 2007 22:39:37 +0100 From: "Andy Billington" <[EMAIL PROTECTED]> Subject: Re: AW: AW: Newbie Question o.O To: "FreeRadius users mailing list" <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 which explains why gmail shows all his mails as being 0 minutes ago. Not even Google has harnessed time travel (don't tell the shareholders tho) On 24/10/2007, Sebastian Wild <[EMAIL PROTECTED]> wrote: > Bernd please correct your system date. You keep sending mails dated in > the future! > > Sebastian > > Am Mittwoch, den 31.10.2007, 14:20 +0100 schrieb Bernd: > > I'm sorry...I never worked with RADIUS, please consider that. I don't mind > > reading documentations :) - but I don't know where I can find the NAS > > documentation > > > > -----Urspr?ngliche Nachricht----- > > Von: [EMAIL PROTECTED] > > [mailto:[EMAIL PROTECTED] Im Auftrag von Alan > > DeKok > > Gesendet: Mittwoch, 24. Oktober 2007 12:38 > > An: FreeRadius users mailing list > > Betreff: Re: AW: Newbie Question o.O > > > > Bernd wrote: > > > > Do the AP's send RADIUS requests to authenticate the MAC when they see > > > a new machine? If not, you can't do it. > > > > > > How do I know if they do? > > ... > > > > >> Unfortunately, you're being told to go read the NAS documentation. > > > > Alan DeKok. > > - > > List info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > > > > > - > > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html > > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------ Message: 9 Date: Thu, 25 Oct 2007 10:58:37 +0530 (IST) From: j v <[EMAIL PROTECTED]> Subject: Fw: FreeRadius Server: Installation problem To: FreeRadius users mailing list <[email protected]> Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset="iso-8859-1" Please guide from where to get these tools libtool is needed by freeradius-1.1.6-0.i586 libtool-ltdl-devel is needed by freeradius-1.1.6-0.i586 ----- Forwarded Message ---- From: j v <[EMAIL PROTECTED]> To: FreeRadius users mailing list <[email protected]> Sent: Wednesday, 24 October, 2007 11:16:47 AM Subject: FreeRadius Server: Installation problem Hey all, > > I am trying to install 1.1.6. When i try to make the SUSE Linux Package > and run the rpm build command then an error message comes which reads: > freeRadius 1.1.5.gz file not present. > > Please guide. > > Now you can chat without downloading messenger. Click here to know how. -----Inline Attachment Follows----- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Chat on a cool, new interface. No download required. Go to http://in.messenger.yahoo.com/webmessengerpromo.php -------------- next part -------------- An HTML attachment was scrubbed... URL: <https://lists.freeradius.org/pipermail/freeradius-users/attachments/2007102 5/99abfa86/attachment.html> -------------- next part -------------- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html ------------------------------ - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html End of Freeradius-Users Digest, Vol 30, Issue 91 ************************************************ ********** DISCLAIMER ********** Information contained and transmitted by this E-MAIL is proprietary to Sify Limited and is intended for use only by the individual or entity to which it is addressed, and may contain information that is privileged, confidential or exempt from disclosure under applicable law. If this is a forwarded message, the content of this E-MAIL may not have been sent with the authority of the Company. If you are not the intended recipient, an agent of the intended recipient or a person responsible for delivering the information to the named recipient, you are notified that any use, distribution, transmission, printing, copying or dissemination of this information in any way or in any manner is strictly prohibited. If you have received this communication in error, please delete this mail & notify us immediately at [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

