working with another sql table in freeRadius

2004-03-25 Thread John Que
Hello, I work with freeRadius and mysql. Now , I know and succeed to read attributes from the radreply sql table in the authorize request. (see below an example) My problem is this : I want to create a table which has 2 columns : user country code (integer), and price for that country code

Re: [OT] Freeradius Cisco Aironet 1200 with 802.1x, EAP, VLANs and WEP key rotation

2004-03-25 Thread Arne Brutschy
Michael Griego wrote: Amazingly enough, I ran into this exact scenario last night as I was testing RADIUS-assigned VLANs for the first time on an Aironet 1100. Setting up dummy ssid sections with the same settings as my primary ssid (with the exception of the vlan) fixed this problem. ie: [..]

Proxy bug or did I do something wrong?

2004-03-25 Thread Costin Manda
Yes, it's me again. :p I have found out that when using freeradius as a radius proxy, the requests get transformed while going through Freeradius. The most notable change is that cisco_vsa_hack applies to proxied requests. As some radius software do not understand hacked requests, the proxy

xsupplicant vs. freeradius

2004-03-25 Thread Artur Hecker
hi list now it's a bit out of scope but i am sure some of you have some experiences with xsupplicant. i'm doing EAP/TLS over cisco 350 card and cisco 1200 or 350 APs to the 0.9.3 release of freeradius and it's actually a bit funny since (one of the latest) xsupplicant doesn't stop

Re: xsupplicant vs. freeradius

2004-03-25 Thread Gary McKinney
artur, You may want to try the latest CVS Snapshot instead of the 0.9.3 version. The 0.9.3 version does not have all of the code to support what you are attempting to do (or at least it did not when I was working on getting the EAP/TTLS protocols working with a Linksys WRT45G Wireless router and

Cisco attributes

2004-03-25 Thread Alex
Hello, I'm trying to set up rate-limited user access using a cisco router (1700) ie simulating a NAS. Clients(WinXP) connectusing PPPoE to the routerwhich acts as RADIUS client for freeradius. Connections are ok but rate limitation doesn't work at all. I tried adding Cisco-Data-Rate,

Using both slash and suffix relams?

2004-03-25 Thread Alex French
All, I'm having a problem getting slashrealm (/) and atsuffix (@) realms to co-exist. If I configure them both, only the first one seems to work. For example, here I'm trying to use a realm wibble. With the configuration below, it will work as wibble/alex but not [EMAIL PROTECTED] If I

Re: how does the counter module work?

2004-03-25 Thread Alan DeKok
Tim Bots [EMAIL PROTECTED] wrote: I guess the counter module can help me with accounting but I can't find = the full manual for this module. There is none. Read the comments in the radiusd.conf file. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Proxy bug or did I do something wrong?

2004-03-25 Thread Alan DeKok
Costin Manda [EMAIL PROTECTED] wrote: I have found out that when using freeradius as a radius proxy, the requests get transformed while going through Freeradius. The most notable change is that cisco_vsa_hack applies to proxied requests. No... it gets applied to *all* requests, because

Re: Disabled modules are statically compiled anyway

2004-03-25 Thread Alan DeKok
Federico Giannici [EMAIL PROTECTED] wrote: I am compiling FreeRADIUS without shared libraries (--disable-shared) because there are problems under OpenBSD i386 3.3. I have noticed that, even if I disabled a lot of modules (--without-rlm_krb5, --without-rlm_eap, --without-rlm_pam,

help me out plz

2004-03-25 Thread arshad shah
Hi all I am new bie to radius. I am using freeradius 0.9.3. Mysql is installed as well and working. I have got a problem, i want to authenticate user for radius from mysql. But when i start Radius by the command below /usr/local/sbin/radiusd -x It gives an error which is rlm_sql (sql):

Re: Proxy bug or did I do something wrong?

2004-03-25 Thread Costin Manda
- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 25, 2004 5:33 PM Subject: Re: Proxy bug or did I do something wrong? Why are you logging requests locally *and* proxying them? Or are you trying to proxy some, and log others? I

RE: MySql and freeRadius

2004-03-25 Thread Juan Pablo Fava
Can you send link to RPMS and will this work on redhat 9 ? I dont know but i supose yes, i use fedora core 1 Mysql and freeradius from the oroginal distribution: and sqlcounter from here: http://rpm.pbone.net/index.php3/stat/4/idpl/1061499/com/freeradius-sqlcounter-0.9.3-alt3.i586.rpm.html

Re: Uninstalling Freeradius

2004-03-25 Thread Alan DeKok
Linda Pagillo [EMAIL PROTECTED] wrote: Could you please tell me how to uninstall freeradius version 0.9.3? If you've built it from source, there's no standard way to uninstall it. Just delete by hand all of the files it installed. I need to uninstall it and then reinstall it again because i

RE: MySql and freeRadius

2004-03-25 Thread Jeremy Davis
snip Can you send link to RPMS and will this work on redhat 9 ? Thanks ! I use apt for rpm at apt.freshrpms.net 50 Radius installs later and not a hiccup. Jeremy - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Uninstalling Freeradius

2004-03-25 Thread Linda Pagillo
Thank you. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, March 25, 2004 9:38 AM Subject: Re: Uninstalling Freeradius Linda Pagillo [EMAIL PROTECTED] wrote: Could you please tell me how to uninstall freeradius version 0.9.3? If

EAP State identical in two Access-Challenges

2004-03-25 Thread Desmond Rivet
Hi all, A quick Google search revealed nothing here, though I might have chosen just the wrong words :) Apologies if I did. I'm experimenting with an EAP type that I added to FreeRADIUS 0.9.0. We are trying to go through about 10 successful authentications in rapid successsion. At about

Re: wireless and FreeRADIUS

2004-03-25 Thread Alan DeKok
Aaron Rogers [EMAIL PROTECTED] wrote: Sorry if this question has been addressed a million times but does FreeRADIUS support wireless authentication? Wireless authentication is EAP. The latest snapshots support PEAP EAP-TTLS. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: EAP State identical in two Access-Challenges

2004-03-25 Thread Alan DeKok
Desmond Rivet [EMAIL PROTECTED] wrote; Out of curiosity, do you think there's any chance this problem might have been fixed in 0.9.3? We'd prefer to use that one instead of the CVS one if at all possible... I don't know if it's fixed in 0.9.3, sorry. Alan DeKok. - List

RE: Uninstalling Freeradius

2004-03-25 Thread John Overman
Hello I am looking for a Mysql rpm that will install the data base for radius is there one ? Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Linda Pagillo Sent: Thursday, March 25, 2004 8:14 AM To: [EMAIL PROTECTED] Subject: Re: Uninstalling

Re: Cisco attributes

2004-03-25 Thread Jérôme Warnier
Le jeu 25/03/2004 à 14:42, Alex a écrit : Hello, I'm trying to set up rate-limited user access using a cisco router (1700) ie simulating a NAS. Clients (WinXP) connect using PPPoE to the router which acts as RADIUS client for freeradius. Connections are ok but rate limitation doesn't work

Re: MySQL accounting and Cisco-AVPair

2004-03-25 Thread Jérôme Warnier
Le lun 22/03/2004 à 11:47, Pugnaloni Federico a écrit : Hi, i'm using FreeRADIUS Version 0.9.3on FreeBSD 4.9 i'm using with a Cisco PIX to AAA internet access it works fine, but i need to store the Cisco-AVPair info in radacct SQL table. As i can see in the detail accounting freeradius

Order of attributes when using LDAP

2004-03-25 Thread Wolfgang Hottgenroth
Hi, I've a question concerning the rlm_ldap module. The order of radius attributes, especially of multiple values for one attribute, in the access-accept reply sent to the NAS is sometimes crucially. For instance for the ascend-data-filter attribute. Is there a way to guarantee this order when

supported wireless

2004-03-25 Thread Aaron Rogers
I don't see anywhere on the website what wireless devices are supported. Can some provide a link if this information is available? Or let me know if Agere (Lucent) Orinoco and Accton wireless is supported? Thank you. - List info/subscribe/unsubscribe? See

Re: supported wireless

2004-03-25 Thread Michael Griego
If your device lists supporting 802.1x (and it supports it correctly), then it will work with FreeRADIUS. -- --Mike --- Michael Griego Wireless LAN Project Manager The University of Texas at Dallas - List info/subscribe/unsubscribe? See

Re: LDAP in authenticate, not authorize -- connect with client user/pass

2004-03-25 Thread Kostas Kalevras
On Tue, 23 Mar 2004, Rok Papez wrote: Hello! I'm trying to configure LDAP authentication to work with the user supplied credentials. ACLs don't allow me to browse the LDAP directory so I'd like to authenticate the user based on a successfull connection to LDAP server with his user/pass.

Re: Juniper Attributes and OpenLDAP

2004-03-25 Thread Kostas Kalevras
On Mon, 22 Mar 2004, Robert Banniza wrote: On Fri, Mar 19, 2004 at 06:35:17PM +0200, Kostas Kalevras wrote: On Fri, 19 Mar 2004, Robert Banniza wrote: In looking at the dictionary.juniper file, I notice there are 5 attributes in this file: ATTRIBUTE Juniper-Local-User-Name

Re: FreeRADIUS on Cobalt Qube

2004-03-25 Thread Kevin Bonner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Thursday 25 March 2004 11:33, Dan Hawker wrote: Have any of you used a Qube (or Raq I guess) for FreeRADIUS, did it work, was it relatively painless to setup, etc, etc. I have a test RaQ3 (with a 550 OS) and had no issues installing or running

Ldap authentication and Windows Domain Name

2004-03-25 Thread Steve OBrien
I have been searching through the arhives for the proper filter for ldap to strip out the Windows domain name from a query. All of the articles were addressing a [EMAIL PROTECTED] situation. I am seeing a DOMAIN\\username in the debug: rlm_ldap: performing search in dc=ci,dc=bend,dc=or,dc=us,

LDAP LEAP and Freeradius

2004-03-25 Thread Steve OBrien
In reference to this article: http://lists.cistron.nl/pipermail/freeradius-users/2003-April/018305.html I am wondering if all the work I have done over the past couple of weeks is in vain. I have finally gotten freeradius to authenticate via ldaps to Active Directory, this works perfectly for

Re: Uninstalling Freeradius

2004-03-25 Thread Spencer Stapleton
Hi, I believe you are probably looking for freeradius-0.9.3/src/modules/rlm_sql/drivers/rlm_sql_mysql/db_mysql.sql from source tarball. Cheers, Spencer On 25 Mar 2004 10:01:56AM, John Overman wrote: Hello I am looking for a Mysql rpm that will install the data base for radius is there

Re: FOR FREERADIUS DEVELOPERS: Building FreeRADIUS under Cygwin

2004-03-25 Thread Alan DeKok
Frank Seesink [EMAIL PROTECTED] wrote: Good news: FreeRADIUS BUILDS UNDER CYGWIN!!! With NO modifications! That's nice to hear. Bad news: 'make install' fails. That shouldn't be much of a problem. I've copy/pasted the end of the output at the end of this message. It's weird. But

Re: arbitrary packet rewriting

2004-03-25 Thread Alan DeKok
Spencer Stapleton [EMAIL PROTECTED] wrote: Also, I'm wondering how this is going to scale as it's going to require quite a bit of processing to do the regex OR comparison for each and every incoming packet. It won't scale well. What exactly are you trying to do? Map a calling station ID

Preparation for 1.0.0 release of FreeRADIUS

2004-03-25 Thread Paul Hampson
OK, the good news is we're well on track. For the month of April, the developers of FreeRADIUS will be focussing on stabilisation and bug-fixing of FreeRADIUS to prepare for releasing version 1.0.0. What we would like you, the users, to do be diligent in reporting bugs into Bugzilla

Re: FOR FREERADIUS DEVELOPERS: Building FreeRADIUS under Cygwin

2004-03-25 Thread Frank Seesink
Alan, Bingo! Pulled down latest CVS today (25Mar2004), and it looks like you added the additional $(LCRYPT) already. Started with a clean CVS copy. Now good news/bad news time. Good news: FreeRADIUS BUILDS UNDER CYGWIN!!! With NO modifications! Bad news: 'make install' fails. I've