Re: How-to use Framed-Route Attribute

2004-11-16 Thread Nirmal
Yes when i run radiusd in debug mode it shows the framed-route entry there in radius reply messages... can u tell me what part in NAS could be misconfigured ?   i saw my ppp source files... there are some files ip-up and login.radius which contains code to add Framed-Route. there is a parameter $ro

Acounting problem using mysql

2004-11-16 Thread Terence Agius
gentlemen, I am using free radius and its fantastic Took me some time, and some questions, so thanks for the help. I have one problem still though. I am using mysql integration but accounting does not seem to work. data seems to be writtem but all records show as "deleted" any ideas ?

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Nachko Halachev
On Wednesday 17 November 2004 08:34, Nirmal wrote: > i don't know wheather [Framed-Route] it works or not. Well, thet run radiusd in debug mode - radiusd -X. If everything is OK within database, you should see reply message from freeradius to NAS after user authenticate. If you see that reply me

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Nirmal
Hi,   i have read rfc 2865 and rlm_sql module also and i used "=" as an Op but in any case secondary route is not being added on primary ppp interface...   i don't know wheather [Framed-Route] it works or not.     Nirmal Nachko Halachev <[EMAIL PROTECTED]> wrote: Hello,About how to use Framed-Route

Server is being hit by requests as old as one week..... how to stop?

2004-11-16 Thread Prabhdeep
Hi guys, We had a problem with multiple accounting records, which we resolved by adding unique key to radacct table and modifying the insert/update SQL for accounting records. It seems that by solving this problem we had taken on a bigger problem. Because server is now returning error for any du

Re: Low cost APs that support EAP/TLS & Freeradius??

2004-11-16 Thread Paul
David Mitton wrote: A Linksys WRT54GS with Sveasoft looks like a bargin functionally. Amazon.com has the WRT54GS for $81.99 - $10 Rebate. Yeah, that's a good price. I use the WRT54GS with the tinyPEAP embedded RADIUS server. The firmware is based on Sveasoft's version 4.0, because it's freely a

Re: Low cost APs that support EAP/TLS & Freeradius??

2004-11-16 Thread David Mitton
On 11/16/2004 10:11 AM, Alan DeKok wrote: Michael Griego <[EMAIL PROTECTED]> wrote: > I was looking around yesterday, and I noticed that Linksys' new wireless > router (WTV56G I believe) perports to support 802.1x. It retails for > about $180 depending on where you look. It's more than just an AP

Re: LDAP radiusprofile

2004-11-16 Thread Kostas Kalevras
On Tue, 16 Nov 2004, Dave wrote: HI, I am currently setting up freeradius with openldap as a backend for testing. I have read through the various walk-throughs and have noticed that most show the radiusprofile objectclass to be structural. But looking at the RADIUS-LDAPv3.schema, it shows that obje

Re: to Kostas Kalevras!

2004-11-16 Thread Kostas Kalevras
On Mon, 15 Nov 2004, Edgars wrote: doesn't this project recall something? dialpup-admin2? Certainly not dialupadmin2 :-) From the screenshots it's just a lot less pages than dialupadmin with a little bit more info (in the online users page for instance) specifically designed for mikrotik administ

Re: Proxied EAP authentication

2004-11-16 Thread Alan DeKok
"jh vg" <[EMAIL PROTECTED]> wrote: > I am working my university thesis using Freeradius. Its about WLAN Roaming. > We want to reduce the messages that are sent during an EAP authentication > between the foreign and home server( so we use proxy ). I'm not sure that's possible. > No matter how

Re: interface for the users

2004-11-16 Thread Kostas Kalevras
On Mon, 15 Nov 2004, Osvaldo Alvarez Pozo wrote: Hy hello everybody, this is my first email to the list. I have just installed freeradius and configured it to work with mysql for storing user information. As a admin interface I have dialup_admin. But I have a problem, I need a user interface, so

Re: URGENT: IP Pool allocation based on LDAP attribute value

2004-11-16 Thread Kostas Kalevras
On Mon, 15 Nov 2004, Nishen Narandas wrote: Good day all, I am currently implementing FreeRadius for testing with our GGSN (Radius client) in our GPRS network. We have an External LDAP server which contains all usernames, passwords and other attributes. I would like to if it is possible to configu

[securew2@alfa-ariss.com: Alfa & Ariss Make SecureW2 Available as Open Source] (fwd)

2004-11-16 Thread Kostas Kalevras
Maybe this will interest a few of the list members. - Forwarded message from SecureW2 <[EMAIL PROTECTED]> - Subject: Alfa & Ariss Make SecureW2 Available as Open Source From: SecureW2 <[EMAIL PROTECTED]> To: undisclosed-recipients: ; Date: Tue, 16 Nov 2004 15:37:29 +0100 Thread-Topic: Alfa

LDAP radiusprofile

2004-11-16 Thread Dave
HI, I am currently setting up freeradius with openldap as a backend for testing. I have read through the various walk-throughs and have noticed that most show the radiusprofile objectclass to be structural. But looking at the RADIUS-LDAPv3.schema, it shows that objectclass as auxiliary. I am guess

Proxied EAP authentication

2004-11-16 Thread jh vg
Hi I am working my university thesis using Freeradius. Its about WLAN Roaming. We want to reduce the messages that are sent during an EAP authentication between the foreign and home server( so we use proxy ). No matter how i have searched i cannt find an rfc describing the sequence of messages

Re: Tcpdump Attribute Question

2004-11-16 Thread Alan DeKok
"jesk" <[EMAIL PROTECTED]> wrote: > in some auth-replies there a missing some attributes but instead of them i > can see at the end of a tcpdump line the following: > "[|radius]" > > what does this exactly mean? I suggest asking the tcpdump people. They wrote. Alan DeKok. - List info/sub

Re: EAP-MD5 help

2004-11-16 Thread Alan DeKok
jagadish gowda <[EMAIL PROTECTED]> wrote: > i 'am writing client in java. I would say that your client has bugs. Read the RFC's to see how EAP-MD5 is implemented. And the debug log from FreeRADIUS will tell you what's going on, and why. Read it. If you're not going to read it, you'll never

Re: radiusdb - no such file or directory

2004-11-16 Thread Alan DeKok
Michael Basso" <[EMAIL PROTECTED]> wrote: > I wish I did. If I get any documentation I will be sure to let you know. I'm > looking through the radiusd.conf file at the moment and I am a bit > overwhelmed. The O'Reilly RADIUS book is a good beginning for people starting with RADIUS. FreeRAD

EAP-MD5 help

2004-11-16 Thread jagadish gowda
Hi all, I 'am trying to authenticate using EAP-MD5. After some requests Free RADIUS server resends the Access Challenge multiple times. It does not say what's the error is and output of the log is "Resending the access chanllenge" to the client. But it works for the same user in new call.

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
On Tue, 16 Nov 2004 12:06:52 -0500 "Janakan Rajendran" <[EMAIL PROTECTED]> wrote: Thatz great! Michael. I'm wondering do you have any documentation to configure the freeradius. If you could share that with me, I'd really appreciate. I wish I did. If I get any documentation I will be sure to let

Re: A question about port 1646

2004-11-16 Thread Andreas Meyer
"Michael J. Hartwick" <[EMAIL PROTECTED]> wrote: > I haven't really followed this thread, but if you look at the top > three lines you see that it is listening on 1812, 1813, and 1814 not > 1645, and 1646 which radacct is trying to use. I don't remember > exactly when the standard ports for RADIUS

Tcpdump Attribute Question

2004-11-16 Thread jesk
I have a question to tcpdumping FreeRADIUS. in some auth-replies there a missing some attributes but instead of them i can see at the end of a tcpdump line the following: "[|radius]" what does this exactly mean? f.e.: --- 12:58:05.215548 x.x.x.x.1645 > x.x.x.x.1645: rad-access-accept 217 [id 14

Re: A question about port 1646

2004-11-16 Thread Michael J. Hartwick
On Tue, 16 Nov 2004 at 17:39 (+0100), Andreas Meyer wrote: AM> Listening on authentication *:1812 AM> Listening on accounting *:1813 AM> Listening on proxy *:1814 AM> Ready to process requests. AM> AM> When I do now a radlogin I get this in /var/log/messages: AM> AM> Nov 16 17:24:59 gamma radlogin

RE: radiusdb - no such file or directory

2004-11-16 Thread Janakan Rajendran
Thatz great! Michael. I'm wondering do you have any documentation to configure the freeradius. If you could share that with me, I'd really appreciate. Thank you, Regards, Janakan Rajendran -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Basso Sen

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
--without, (instead of --disable) worked!!! On Tue, 16 Nov 2004 11:40:51 -0500 "Michael Basso" <[EMAIL PROTECTED]> wrote: Janakan, Thanks for your help. Still no luck. I deleted the freeradius folder that is created after untaring the initial file. Is there another freeradius folder I should

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
Janakan, Thanks for your help. Still no luck. I deleted the freeradius folder that is created after untaring the initial file. Is there another freeradius folder I should delete before running configure again? Does it matter where I untar the freeradius file to? On Tue, 16 Nov 2004 11:18:28

Re: A question about port 1646

2004-11-16 Thread Andreas Meyer
"Alan DeKok" <[EMAIL PROTECTED]> wrote: > > radius 1812/tcp# RADIUS > > That's nice. What ports does the server say it's listening on when > you run it in debugging mode? I made a fresh install. Debugging mode says this: Starting - reading configuration files ... reread_conf

AW: Segmentation fault reading clients

2004-11-16 Thread Peter L.
> > read_config_files: reading clients > > Segmentation fault > > This happens when the code in the server disagrees with itself. > e.g. Version X of the server is using modules from version Y, or the > header files were updated, and onlysome parts of the server were re-built. > > Try deleting

RE: radiusdb - no such file or directory

2004-11-16 Thread Janakan Rajendran
Michael, The command is correct. What I did is I manually delete the free radius folder and then started new with the configure command disabling rlm_x99_token(your syntax is correct) and it worked. No errors during make and make install. Try deleting the folder and redo again. It might help. Re

Re: Segmentation fault reading clients

2004-11-16 Thread Alan DeKok
"Peter L." <[EMAIL PROTECTED]> wrote: > i get a segmentation fault when starting freeradius. > > read_config_files: reading clients > Segmentation fault This happens when the code in the server disagrees with itself. e.g. Version X of the server is using modules from version Y, or the header f

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
Janakan, I tried to disable rlm_x99_token as you say you did. I ran ./configure --disable-rlm_x99_token. Is this not right? only to get the same errors: In file included from x99_rlm.c:54: x99.h:26:42: openssl/des.h: No such file or directory gmake[6]: *** [x99_rlm.o] Error 1 gmake[6]: Leaving

Segmentation fault reading clients

2004-11-16 Thread Peter L.
Hi all, i get a segmentation fault when starting freeradius. read_config_files: reading clients Segmentation fault Any ideas? Kind regards, Peter see gdb output below. -- (gdb) set args -x -x (gdb) break clients_free Breakpoint 1 at 0x8074faa: file client.c, line 52. (gdb) run St

Re: Problem with Auth-Type

2004-11-16 Thread Alan DeKok
"Carlos" <[EMAIL PROTECTED]> wrote: > Excuse me, just a mistakethis morning in writting the files. I've read a lot > the documentations and the files themselves. > There are a descriptions for the files; users, clients.conf and proxy.conf : ... But not the debug logs. Please go back, and READ

Re: A question about port 1646

2004-11-16 Thread Alan DeKok
Andreas Meyer <[EMAIL PROTECTED]> wrote: > Did some tests again. I set port = 0 in radiusd.conf and /etc/services > looks like this: > > radius 1812/tcp# RADIUS That's nice. What ports does the server say it's listening on when you run it in debugging mode? > # netstat -pantu

Re: Compiling freeradius with snmp-support

2004-11-16 Thread Alan DeKok
"Tobias Amon" <[EMAIL PROTECTED]> wrote: > How do I change the configuration of my precompiled freeradius on suse > 9.1 after the installation. > Freeradius was installed by default with no snmp-support. > Is there any way to do this, or do i have to reinstall and/or update to > 1.0? You have to

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Alan DeKok
Nirmal <[EMAIL PROTECTED]> wrote: > how can i use Framed-Route Attribute in radius ? > > what is the exact format for this attribute ? http://www.freeradius.org/rfc/attributes.html Click on the attribute to find documentation for it. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Low cost APs that support EAP/TLS & Freeradius??

2004-11-16 Thread Alan DeKok
Michael Griego <[EMAIL PROTECTED]> wrote: > I was looking around yesterday, and I noticed that Linksys' new wireless > router (WTV56G I believe) perports to support 802.1x. It retails for > about $180 depending on where you look. It's more than just an AP > though, it has full blown router functi

Secure TLS connection between Freeradius and Openldap

2004-11-16 Thread Konstantin KABASSANOV
Hello, I'm trying to establish a secure TLS connection between a Freeradius and an Openldap server. The "openssl s_client -connect" command successfully establishes a connection to the openldap server on the mentioned port with the following certificates, but when trying to bind from freeradius I

Re: Low cost APs that support EAP/TLS & Freeradius??

2004-11-16 Thread Michael Griego
I was looking around yesterday, and I noticed that Linksys' new wireless router (WTV56G I believe) perports to support 802.1x. It retails for about $180 depending on where you look. It's more than just an AP though, it has full blown router functions. --Mike On Tue, 2004-11-16 at 08:00, Joe Ma

Re: Little Details, WRT54GS

2004-11-16 Thread Wodan
What about dynamic WEP re-keying? As far as i know this is not supported by Satori 4.0 and i could not get any more information from Sveasoft concerning this point. The wireless interface seems to be something they don't mess with much. How could I tell that different keys are actually being

Low cost APs that support EAP/TLS & Freeradius??

2004-11-16 Thread Joe Matuscak
Hi. I'd like to set up wireless at my home and do it securely. At work im using Cisco 1200s with Freeradius authenticating with EAP/TLS. I'd like to do the same thing at home, but the Cisco 1200s are *way* outside of my budget :-) Does anyone have any suggestions for a reasonably priced 802.

Re: Problem with Auth-Type

2004-11-16 Thread Carlos
Excuse me, just a mistakethis morning in writting the files. I've read a lot the documentations and the files themselves. There are a descriptions for the files; users, clients.conf and proxy.conf : /raddb/users demolocal Auth-Type := Local, Password == "demolocal" Service-Type = Framed-User,

Re: A question about port 1646

2004-11-16 Thread Andreas Meyer
"Alan DeKok" <[EMAIL PROTECTED]> wrote: > Andreas Meyer <[EMAIL PROTECTED]> wrote: > > I wanted to use ports 1812 and 1813. If I set port=0 in radiusd.conf, > > radacct > > wants to connect to 1646 although I edited /etc/services to use 1813 for > > radius-acct. > > I suggest finding out why t

Stop packet with zero session length

2004-11-16 Thread Andrea Gabellini
Hi, in my logs I see this string: Error: rlm_sql: Stop packet with zero session length. Reading through the source code and the mailing list, I think that stop packets with zero session length must be dropped by FR. But in my logs I see the error above, the record is updated into the DB and FR e

Compiling freeradius with snmp-support

2004-11-16 Thread Tobias Amon
Hi, I'm using freeradius 0.9.3 on Suse 9.1 I authorize my users with mysql. My AccessPoint is a Cisco 350. How do I change the configuration of my precompiled freeradius on suse 9.1 after the installation. Freeradius was installed by default with no snmp-support. Is there any way to do this, o

Re: Little Details, WRT54GS

2004-11-16 Thread Paul
Wodan wrote: I posted this question on the Sveasoft board once. The WEP key you enter in WEP RADIUS mode is the key that is used for encryption. Usually, in normal WEP mode, you use the same key for encryption and authentication. In the WRT54GS RADIUS mode, you use RADIUS for authentication and

Re: Problem with Auth-Type

2004-11-16 Thread Kostas Zorbadelos
On Tue, Nov 16, 2004 at 08:02:42AM +, carlos akitani wrote: > Hi, I've go the same > problem but no solution. > I've added the Auth-Type:=Local in the users file but the same > answer: > auth: No authenticate method (Auth-Type) configuration found > for the request: Rejecting the user > an

Re: Problem with Auth-Type

2004-11-16 Thread carlos akitani
Hi, I've go the same problem but no solution. I've added the Auth-Type:=Local in the users file but the same answer: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user and even (username/password) not valide (but I've declared them in the clients.conf