Duplicate Accounting logging desired

2005-03-06 Thread Stefan Winter
Hello, I'd like to log accounting packets on our local (proxying) FR-1.0.2 server but as well send them to the realm server that is configured for them in proxy.conf. That is, let A be an accounting packet that arrives at tour server. Then - log A locally (plain text detail-like file suffices) -

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Chan Min Wai
Alan DeKok wrote: > Chan Min Wai <[EMAIL PROTECTED]> wrote: > ... > >>These are the fields that have no information at all. > > > Please read the FAQ. The server can only log what the NAS sends. > > Alan DeKok. What about the info that provided by the freeradius? When we are using ippool

Re: freeradius + pptp

2005-03-06 Thread Alan DeKok
Mervyn Yeo <[EMAIL PROTECTED]> wrote: > This appears after I've included plugin radius.so in my > /etc/ppp/options.pptpd. Can someone give me some clues on rc_avpair_new: > unknown attribute 11 and 25? Read the "dictionary" file for the names of attributes 11 and 25. As for why pptpd doesn'

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Alan DeKok
Chan Min Wai <[EMAIL PROTECTED]> wrote: ... > These are the fields that have no information at all. Please read the FAQ. The server can only log what the NAS sends. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: From Called-Station-ID Get Country Code??

2005-03-06 Thread Abdul Lateef
Hi, Its great reply. I want to use it for our VoIP Billing System. And my NAS is cisco and i am sure the cisco is sending full dialed telephone noumber with Called-Station-ID. Because we are using MERA VoIP Softswitch and i asked theirs eng. they told us Called-Station-ID is the full dialed noumb

Checking user accounts

2005-03-06 Thread Janakan Rajendran
Hello everyone,   I have a wireless network in which access points are getting authenticated by freeradius running on solaris box. I want to add user authentication and thinking of having a mysql database for that. But for time being, I’m thinking of using “users” file for couple of users

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Chan Min Wai
Alan DeKok wrote: > Chan Min Wai <[EMAIL PROTECTED]> wrote: > >> I've the freeradius, ippool with mysql running however in the database >>this fields is always blank. > > > WHAT fields? Frame-IP-Address (this is more important) NASPortType (I've sure the request have this) CalledStati

Re: freeradius + pptp

2005-03-06 Thread Mervyn Yeo
Perhaps I should include this information as well, from radiusd -X rad_recv: Access-Request packet from host 127.0.0.1:32769, id=175, length=64 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "root" Calling-Station-Id = "172.168.0.53" NAS-IP-Address =

freeradius + pptp

2005-03-06 Thread Mervyn Yeo
hi everyone, Firstly, radiusd: FreeRADIUS Version 1.0.2, for host , built on Mar 3 2005 at 08:50:02 Not sure if these will help, rpm -qa|grep pp kernel_ppp_mppe-0.0.5-2dkms pptpd-1.2.1-1 ppp-2.4.3-4.rhel3 I'm testing by connecting from XP and part of what appears in /var/log/messages is this:

Password entry in dialup admin

2005-03-06 Thread zack musa
Hi. When I entering the value for some user, with the admin.conf set to crypt, the value inserted in the db are encrypted. So when that new user try to login to the network, he get deny access message. so how can the ecryption can be a help avoiding the data to be exposed,at the same time allowing

Re: more detailed sql logging

2005-03-06 Thread Kris Efland
Score!  Exactly the information I needed.  Thank you.  For clarification, since I havent written a module before... For example:   If i had the following block in radiusd.conf   post-auth{    Post-Auth-Type REJECT {    log_rejected_users    } }   In the modules block in radiusd.conf...  Can I e

Re: FreeRadius logging lots of duplicates?

2005-03-06 Thread Alan DeKok
Scott Baker <[EMAIL PROTECTED]> wrote: > So I'm guessing it's never hearing > back "I got your Accounting packet" even though the server is > logging it. Do the accounting packets require an acknowledge? Yes. If the NAS doesn't like the ACK (wrong source IP, etc), it will ignore it, and send

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Alan DeKok
Chan Min Wai <[EMAIL PROTECTED]> wrote: > I've the freeradius, ippool with mysql running however in the database > this fields is always blank. WHAT fields? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Frame-IP-Address in SQL?

2005-03-06 Thread Chan Min Wai
Greeting, I've the freeradius, ippool with mysql running however in the database this fields is always blank. Is that my configuration problem or there is some special requirement to get this working? I'm using the default sql.conf came with freeradius. Anyone have any idea? Regards, C

Re: LDAP Profiles

2005-03-06 Thread Kostas Kalevras
On Sun, 6 Mar 2005, Jarred Cleem wrote: Hello all; I am tying to put together an openLDAP/FreeRadius implementation for a multitude of services we provide. We are currently providing high speed cable modem services, local dial-up, national dial-up, Motorola Canopy Wireless, DSL, ISDN, extended Eth

LDAP Profiles

2005-03-06 Thread Jarred Cleem
Hello all; I am tying to put together an openLDAP/FreeRadius implementation for a multitude of services we provide. We are currently providing high speed cable modem services, local dial-up, national dial-up, Motorola Canopy Wireless, DSL, ISDN, extended Ethernet, Ethernet over power and a few ot

Re: radsqlrelay questions

2005-03-06 Thread Kostas Kalevras
On Sun, 6 Mar 2005 [EMAIL PROTECTED] wrote: hi all, i've tested radsqlrelay for moving big acct-logs (detail-file) into my database - and have read the comments about the code: 1. is it possibile to (log-)rotate the detail-file - when radsqlrelay is running - and read it ? Why? The idea is that the

radsqlrelay questions

2005-03-06 Thread j . dostal
hi all, i've tested radsqlrelay for moving big acct-logs (detail-file) into my database - and have read the comments about the code: 1. is it possibile to (log-)rotate the detail-file - when radsqlrelay is running - and read it ? 2. i've read about the .work file - but couldn't see it. will it o

Re: From Called-Station-ID Get Country Code??

2005-03-06 Thread Sebastian Wild
Abdul Lateef wrote: Hi, I have one mySQL table contains Code, Country Name I want to get the code using Called-Station-ID matching with mySQL country list table using the perl file. If anyone can give me a little example really it will be great for me. Thank You

Re: radsqlrelay for 1.0.2

2005-03-06 Thread Nicolas Baradakis
Bart Van Daal wrote: > is it possible to build it against the 1.0.2 tree or am I stuck with > the cvs version. The libraries differ from the cvs version and the > 1.0.2 version. Yes, it is possible. As reported in the mailing list, I'm building radsqlrelay in the 1.0.2 source tree. And Roy is doi

Re: radsqlrelay for 1.0.2

2005-03-06 Thread Nicolas Baradakis
Bart Van Daal wrote: > Nicolas I'm currently using your radsqlrelay.c with the 1.0.2 > release and I've patched the makefile. I'm very new to this whole > patching and code-hacking thing. I'm getting the following error > message while making radsqlrelay: thanks for any pointers how to > compile r

Re: more detailed sql logging

2005-03-06 Thread Nicolas Baradakis
Kris Efland wrote: > Packet-Type = Access-Request > Sat Mar 5 15:04:02 2005 > User-Name = "user" > User-Password = "password" > NAS-IP-Address = 1.2.3.4 > Client-IP-Address = 1.3.4.5 > Module-Failure-Message = "rlm_ldap: User not found" > > _I would like t

Re: How to set FreeRADIUS auth via POP3?

2005-03-06 Thread Alan DeKok
CNCA CNCA <[EMAIL PROTECTED]> wrote: > HI,I want FreeRADIUS use pop3 as an authentication method in FreeBSD That's a terrible idea. > pam_pass: using pamauth string for pam.conf lookup > pam_pass: function pam_acct_mgmt FAILED for . Reason: error in > service module Try to get PAM to tell

Re: From Called-Station-ID Get Country Code??

2005-03-06 Thread Juan Manuel García Carral
Hi, I supose you are referring to some kind of roaming users. I don´t think that will work in every NAS they connect, because not every TELCO sends you the complete international number in the Called-Station-Id attribute. I have several TELCOs that only send me the last four numbers. Regards. J.M

Re: 802.1X Port-Based Authentication HOWTO

2005-03-06 Thread micki
Vladimir Vuksan wrote: micki wrote: Hello i am trying to execute 802.1X Port-Based Authentication HOWTO aftwer change all the configuration file of the server i get an error message when i type radiusd -X 4422:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:632:Expecting: CERTIF

Re: 802.1X Port-Based Authentication HOWTO

2005-03-06 Thread Vladimir Vuksan
micki wrote: Hello i am trying to execute 802.1X Port-Based Authentication HOWTO aftwer change all the configuration file of the server i get an error message when i type radiusd -X 4422:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:632:Expecting: CERTIFICATE 4422:error:020010

Re: more detailed sql logging

2005-03-06 Thread Alan DeKok
Kris Efland <[EMAIL PROTECTED]> wrote: > Clearly... As I said in my first email. There are no insert > statements that coincide to what I am looking for and thus my original > question about crafting my own sql statements. It's not just a matter of crafting your own SQL statements. The module

Re: Called-Station-Id value??

2005-03-06 Thread Alan DeKok
Abdul Lateef <[EMAIL PROTECTED]> wrote: > Already i read the both files > (variables.txt,Exec-Program-Wait) but i did not found > any information about how to retrive the value of > Called-Station-Id in perl file. Those documents describe how RADIUS attributes are put into environment variables.

802.1X Port-Based Authentication HOWTO

2005-03-06 Thread micki
Hello i am trying to execute 802.1X Port-Based Authentication HOWTO aftwer change all the configuration file of the server i get an error message when i type radiusd -X 4422:error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:632:Expecting: CERTIFICATE 4422:error:0200100E:system lib

Re: EAP-TLS: "check_cert_cn" dows not work?

2005-03-06 Thread Manuel Schmitz
Thank you for your answers, Mike. > Manuel Schmitz wrote: > > Can I re-enable certs as well (with CRLs)? > > It *can* be done, but it's generally not advised. If you need to > temporarily disable a client, then the more appropriate way would be an > explicit deny for that username in the user

From Called-Station-ID Get Country Code??

2005-03-06 Thread Abdul Lateef
Hi, I have one mySQL table contains Code, Country Name I want to get the code using Called-Station-ID matching with mySQL country list table using the perl file. If anyone can give me a little example really it will be great for me. Thank You

Re: Called-Station-Id value??

2005-03-06 Thread Abdul Lateef
HI, I used the following format now it is working. Exec-Program-Wait = "/usr/local/etc/ctime.pl %{User-Name} %{Called-Station-Id}" Thank you all for times __ Celebrate Yahoo!'s 10th Birthday! Yahoo! Netrospective: 100 Moments of the