Configuration questions

2001-08-22 Thread J. S. Townsley
Greetings list members. I am testing free radius currently and have a couple questions. I use the LDAP module for authentication. I have two realms, each on separate DN's. How can I have two separate ldap configurations? It would be neat to be able to specify ldap_realma { binddn= etc..}

update and proxy

2001-08-22 Thread radius
Hellow i am new to this newgroup and hope i dont ask any question that allready has been asked i have searched the archive but did not find the answer neither on the help files the description of the product says when proxying it can add attributes to request how is that done ? what do i need

Re: Authentication

2001-08-22 Thread Miquel van Smoorenburg
In article [EMAIL PROTECTED], Lawrence E. Powell SR. [EMAIL PROTECTED] wrote: Can free radius authenticate on a MAC address? That completely depends on what the NAS sends to the radius server. If the NAS sends the MAC address, you can probably authenticate on it. if so will all of the auditing

Re: Authentication

2001-08-22 Thread Chris Parker
At 09:49 PM 8/21/2001 -0500, you wrote: Can free radius authenticate on a MAC address? if so will all of the auditing information be available? It depends on what NAS you are using, and what you mean by 'authenticate on a MAC address'. I'm going to hazard a guess you are doing some type of

Re: Configuration questions

2001-08-22 Thread Chris Parker
At 12:15 AM 8/22/2001 -0700, you wrote: Greetings list members. I am testing free radius currently and have a couple questions. I use the LDAP module for authentication. I have two realms, each on separate DN's. How can I have two separate ldap configurations? You can declare them as two

Re: update and proxy

2001-08-22 Thread Chris Parker
At 03:45 AM 8/22/2001 -0400, you wrote: Hellow i am new to this newgroup and hope i dont ask any question that allready has been asked i have searched the archive but did not find the answer neither on the help files the description of the product says when proxying it can add attributes to

Re: update and proxy

2001-08-22 Thread aland
[EMAIL PROTECTED] wrote: the description of the product says when proxying it can add attributes to request how is that done ? Hmm.. not that easily, I think. The current format of the 'users' file is set up to add attributes to the reply, not the forwarded proxy message. what do i need

FreeRADIUS First Step

2001-08-22 Thread Averroes
Hi All, I am new in FreeRADIUS, so sorry for my stupid question. After installing the packages, I decided to test if the deamon radiusd can start simly by invoking its startup script rc.radiusd with the following option start But here is the message I got: othello:/etc/rc.d# ./rc.radiusd start

Re: FreeRADIUS First Step

2001-08-22 Thread aland
[EMAIL PROTECTED] wrote: After installing the packages, I decided to test if the deamon radiusd can start simly by invoking its startup script rc.radiusd with the following option start But here is the message I got: othello:/etc/rc.d# ./rc.radiusd start ./rc.radiusd:

Re: Configuration questions

2001-08-22 Thread J. S. Townsley
Thank you Chris, it's working perfectly. A question regarding attributes and ldap. I cannot put all my attributes in LDAP because one of my vendors doesn't work when it receives cisco av pair AND ascend data filter. I noticed the following in documentation: # default: NULL - use only

BUG REMAIN [was Exec-Program[-Wait] for Accounting-Request]

2001-08-22 Thread Michael Chernyakhovsky
Michael Chernyakhovsky [EMAIL PROTECTED] wrote: How I can to execute some external program on Accounting-Request? adding lines like ... to raddb/acct_users does not work. There is no radius_exec_program() call after PW_ACCOUNTING_REQUEST received in sources. Only after

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius (snapshot 08/20/01), we got a lot Dropping conflicting authentication packets messages but for only very limited test traffic. I set

RE: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 12:40 PM 8/22/2001 -0700, Qinxue Chen wrote: I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius (snapshot 08/20/01), we got a lot Dropping conflicting authentication packets messages but

Re: Dropping conflicting authentication packet

2001-08-22 Thread aland
Qinxue Chen [EMAIL PROTECTED] wrote: I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius (snapshot 08/20/01), we got a lot Dropping conflicting authentication packets messages but for only

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
-Original Message- From: Chris Parker [mailto:[EMAIL PROTECTED]] At 12:40 PM 8/22/2001 -0700, Qinxue Chen wrote: I used two kinds of RADIUS servers. With Merit 3.6B, the server accept a lot more traffic from the NAS servers. There is no single complain. With freeradius

Re: Dropping conflicting authentication packet

2001-08-22 Thread aland
Qinxue Chen [EMAIL PROTECTED] wrote: What did the debug show? With debug on, I couldn't see errors at all. And how long did the server take to reply? o Was the server replying to the request? Definitely the newest request is dropped. That is NOT an answer to the question.

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Qinxue Chen [EMAIL PROTECTED] wrote: What did the debug show? With debug on, I couldn't see errors at all. And how long did the server take to reply? within miniseconds normally. Could the server cached the IDs somehow?

RE: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 01:58 PM 8/22/2001 -0700, Qinxue Chen wrote: From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Qinxue Chen [EMAIL PROTECTED] wrote: What did the debug show? With debug on, I couldn't see errors at all. And how long did the server take to reply? within

Re: Dropping conflicting authentication packet

2001-08-22 Thread Spike Ilacqua
If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server does work in regular mode, it's only after about 20 minutes it starts reporting Dropping conflicting

Re: compile w/ mysql

2001-08-22 Thread Nick Davis
I now have freeradius running and loading the mysql module, but it doesn't actually write log entries to the database. I installed db_mysql.sql into the mysql database. I can see radiusd log in to mysql, but it does not make any log entries into the database. Users still authenticate just fine

Re: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 03:49 PM 8/22/2001 -0600, you wrote: If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server does work in regular mode, it's only after about 20 minutes

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
From: Chris Parker [mailto:[EMAIL PROTECTED]] At 03:49 PM 8/22/2001 -0600, you wrote: If it works in debug, has issues in regular, check the permissions needed to read the auth files. I'm seeing basically the same thing, but I don't believe it's a permision problem. The server

Re: Dropping conflicting authentication packet

2001-08-22 Thread Spike Ilacqua
Is this version 0.1, 0.2, or latest CVS? 0.2 on BSDI 4.0.1, compiled static without threads. I'll try CVS now. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Dropping conflicting authentication packet

2001-08-22 Thread Qinxue Chen
The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?) as one of the old requests. From the problem I saw, it is not caused by the NAS end. The freeradius didn't clear some old requests properly in the

RE: Dropping conflicting authentication packet

2001-08-22 Thread Chris Parker
At 05:40 PM 8/22/2001 -0700, you wrote: The problem seems to be that the new request has the same request ID, request code, source IP, source port, but different vectors (what's this?) as one of the old requests. From the problem I saw, it is not caused by the NAS end. The freeradius didn't

Thankyou one and all.

2001-08-22 Thread Timothy Jennings
Re: Client unable to talk to radius Thankyou to all the people that replied and had a look at my configs to help me sort things out. As embaressed as i am to say it, i had Livingston Radius on before playing with Freeradius and i was editing the