Re: SQL authentification

2002-11-13 Thread Joost Hietbrink
The mysql module at the moment (first it did.. but it's removed for the better) does not do the actual authenticate process. This means, you can NOT include 'sql' in the 'authenticate' part of the radiusd.conf file. Instead, mysql adds attributes so the 'chap' or 'pap' module can do the

FW: Expiration date check

2002-11-13 Thread Valakos Yorgos
-Original Message- From: Valakos Yorgos [mailto:[EMAIL PROTECTED]] Sent: Wednesday, November 06, 2002 9:48 AM To: '[EMAIL PROTECTED]' Subject: Expiration date check Hello all and thanks for your help ! I have freeradius 0.7 running under SuSe linux 8.0 on intel platform ( I have to

Radius server not accounting, and dumping core...

2002-11-13 Thread Simon White
Hello, I have FreeRADIUS working, with MySQL db and even have tested with a USR Netserver NAS and it works fine on default port 1812 (which I can set the NAS to authenticate to)... so I have got somewhere. However there are two issues I'd like feedback on, if anyone can help. 1) Core dumping on

Re: Expiration date check

2002-11-13 Thread Peter Nixon
On Wed, 13 Nov 2002 11:30:43 +0200 Squire Valakos Yorgos uttered the following: -Original Message- From: Valakos Yorgos [mailto:valakosg;ipnet.gr] Sent: Wednesday, November 06, 2002 9:48 AM To: '[EMAIL PROTECTED]' Subject: Expiration date check Hello all and thanks for your help

Re: Radius server not accounting, and dumping core...

2002-11-13 Thread Frank Cusack
On Wed, Nov 13, 2002 at 10:11:45AM +, Simon White wrote: speed things up right now I'd appreciate if anyone has a script handy that can generate accounting packets for me. radclient is part of freeradius and can generate accounting packets. /fc - List info/subscribe/unsubscribe? See

FreeRadius-0.7.1 EAP/MD5 packet problem about RADIUS-ID/EAP-ID

2002-11-13 Thread Alan Chen
Hello: We are developing Wireless Access-Point currently. When we test our Access-Point with 802.1x enable,we find this problem. environment: Windows XP -- Access-Point -- FreeRadius-0.7.1 The 802.1x on 802.11 conversation: XPAccess-Point FreeRadius

Re: about EAP/TLS?

2002-11-13 Thread Artur Hecker
what does ldd /usr/local/radiusd/lib/rlm_eap_tls-0.8-pre.so do? Jeffery Huang wrote: Thanks Artur, I have follow the document to compile freeradius! But I got a new problem now! :( ./radiusd: relocation error: /usr/local/radiusd/lib/rlm_eap_tls-0.8-pre.so: undefined symbol:

Simultaneous-Use problem

2002-11-13 Thread Svetlana Vyslanko
Hello, I am trying to use Simultaneous-Use for group users through mysql with freeradius-snapshot-20021101. radiusd.conf: == # Session database, used for checking Simultaneous-Use. The radutmp module # handles this session { # radutmp sql } sql.conf: == #

RE: duplicate-users and mySQL

2002-11-13 Thread Brian Johnson
Would it be possible to use both the username and password in the authentication query? I could then customize the database to work with my user database. Brian J. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-users-admin;lists.cistron.nl] On Behalf Of Alan DeKok

Re: group reject with realm problem

2002-11-13 Thread Chris Parker
At 08:21 PM 11/12/2002 -0600, Marcin Groszek wrote: Version 0.7.1 I am using default radius.config file and i experience problem with denying access to group of users. Normally I use realm, hunt-group work fine port limit also work but Wen i send request to server with realm the server

radwho

2002-11-13 Thread Remus Anca
I've read all about this subject from archives. My radutmp file is created, (and writed) when someone is logged on, but the file have always 0 size, and radwho just print the head of raport (if i remove the radutmp, radwho doesn't display a thing, adn, logically, with strace, says that

Re: group reject with realm problem

2002-11-13 Thread Marcin Groszek
I have try this and i did not get any positive results. user get reject but user@realm did not. I thind i will wait for version 0.8. Chris Parker wrote: At 08:21 PM 11/12/2002 -0600, Marcin Groszek wrote: Version 0.7.1 I am using default radius.config file and i experience problem with

Re: group reject with realm problem

2002-11-13 Thread Marcin Groszek
realm hostplus.net { type = radius authhost= LOCAL accthost= LOCAL } and file realms hostplus.netLOCAL Chris Parker wrote: At 10:11 AM 11/13/2002 -0600, Marcin Groszek wrote: I have try this and i did not get any positive results. user get reject

EAP-TLS re-keying

2002-11-13 Thread BUTTI Laurent FTRD/DTL/ISS
Title: EAP-TLS re-keying Hi, I have an Orinoco AP-2000 (2.0.2) and a windows XP client SP1. MPPE-{Send/Recv}-key seems to be successfully interpreted by the AP-2000, as 3 EAPOL-Key frames are sent to the client. So this scheme is different than Cisco's scheme that seems to send only

Re: group reject with realm problem

2002-11-13 Thread Marcin Groszek
I try to use realms or proxy.cong with deferent options: nostrip norealm But non of the combination do the job. Chris Parker wrote: At 10:43 AM 11/13/2002 -0600, Marcin Groszek wrote: realm hostplus.net { type= radius authhost= LOCAL accthost= LOCAL }

Re: authentication of users ADSL

2002-11-13 Thread Alan DeKok
Samyr Alves [EMAIL PROTECTED] wrote: how to configure radius for authentication of users ADSL? Read the docs? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

groups not working in user file

2002-11-13 Thread Dan
I just copied the configuration over from cistron to freeradius (making necessary modifications) and we can't get group checking to work in the user file. this is freeradius 0.71, I've even tried the default samples in the users file, such as: DEFAULT Group == ''disabled, Auth-Type := Reject

Re: group reject with realm problem

2002-11-13 Thread vince nigro
At 12:28 PM 11/13/2002 -0600, you wrote: OK so other group setup with realm will not work ie: DEFAULT group == isdn, Simultaneous-Use := 2 So how can i setup 2 port connection for user ? You might want to use Cistron Radius (which Freeradius was based on) until this problem is fixed in

Re: limiting DSL users bandwidth

2002-11-13 Thread Alan DeKok
Dan [EMAIL PROTECTED] wrote: Is there any way to limit the amount of bandwidth available to a user through radius? Only if your NAS supports it in a RADIUS attribute. running radiusd in full debug I dont even see it sending this back to the user. and the user is not limited at all.

ppp authentication windows NT domain

2002-11-13 Thread Miriam Benham
Hi there, I'm new using/configuring freeradius, and it's working great so far. I now would like to use it to authenticate our remote PPP users. I want to use our NT domain server so as not to have to create a new password file for all the users on the freeradius server. I currently have NT

Re: ppp authentication windows NT domain

2002-11-13 Thread Alan DeKok
Miriam Benham [EMAIL PROTECTED] wrote: PAP works great with my existing NT domain authentication configuration, but if I use CHAP it fails. I've read that I have to create users credentials on the freeradius server if I want to use CHAP. That's not true. PAP is fine. As for why CHAP

Re: ppp authentication windows NT domain

2002-11-13 Thread Steve Langasek
On Wed, Nov 13, 2002 at 03:58:48PM -0500, Alan DeKok wrote: Miriam Benham [EMAIL PROTECTED] wrote: PAP works great with my existing NT domain authentication configuration, but if I use CHAP it fails. I've read that I have to create users credentials on the freeradius server if I want to use

EAP/TLS

2002-11-13 Thread Ynjiun P. Wang
Hi, I was able to get Radius running with EAP/TLS. But when I get my Windows XP logon through 802.11 (with root.der and cert-clt.p12 installed), after couple rounds of exchanges of info with Radius server, I got : rlm_eap_tls: Invalid ACK received modcall[authenticate]: module eap

RE: EAP/TLS

2002-11-13 Thread Ynjiun P. Wang
More information: I checked rlm_eap_tls-0.8-pre.so using ldd and found that libssl.so.0.9.8 = not found. Is this normal? If not, how to fix it? Thanks. [root@curve EAP]# ldd /usr/local/lib/rlm_eap_tls-0.8-pre.so libssl.so.0.9.8 = not found libcrypto.so.0.9.8 = not found

CISCO LEAP

2002-11-13 Thread Mike Paneth
We are about to setup a wireless network based on CISCO 1200 APs and need to control access. Does anyone know how to get Freeradius working with CISCO LEAP? Mike Paneth Melbourne Australia

RE: EAP/TLS

2002-11-13 Thread Jeffery Huang
you need to find out these two library! If u follow the howto setup! It will at /usr/local/openssl/lib so before u run radiusd you must $ export LD_LIBRARY_PATH=/usr/local/openssl/lib Regard, Jeffery ¦b ¶g¥|, 2002-11-14 08:26, Ynjiun P. Wang ¼g¹D¡G More information: I checked

Re: CISCO LEAP

2002-11-13 Thread Jeremy Salch
On Wednesday 13 November 2002 06:52 pm, Mike Paneth wrote: We are about to setup a wireless network based on CISCO 1200 APs and need to control access. Does anyone know how to get Freeradius working with CISCO LEAP? It can't. . LEAP is a Cisco Proprietary EAP type to cisco.. you'll

RE: using FreeRADIUS SecurID/RSA?

2002-11-13 Thread Gene Parks
What about using the radius server built into the SecurID product and let Freeradius proxy to it for that function? Just a thought. Gene Parks VIP Direct - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CISCO LEAP

2002-11-13 Thread Lars Viklund
On Wed, 2002-11-13 at 16:06, Jeremy Salch wrote: On Wednesday 13 November 2002 06:52 pm, Mike Paneth wrote: We are about to setup a wireless network based on CISCO 1200 APs and need to control access. Does anyone know how to get Freeradius working with CISCO LEAP? It can't. Not