callback on mysql

2004-06-04 Thread Yanurul Anwar
Hi All, I'm new to freeradius and this forum. so excuse me if i'm asking an already asked question. I have search the archive regarding callback on mysql but it is no avail. My problem is setting callback user in mysql database. I have set the attibute in radreply to service-type and the

Re: rlm_eap_ttls linking error

2004-06-04 Thread Paul Hampson
On Thu, Jun 03, 2004 at 05:36:39PM -0700, Matthew Albright wrote: I'm attempting to compile freeradius-1.0.0-pre1, and I'm having problems building rlm_eap_ttls. I've narrowed it down to the linking stage, and libtool translating ./../rlm_eap_tls/rlm_eap_tls.la into -lrlm_eap_tls when it is

Re: setting several aaa authentication login methods

2004-06-04 Thread Graeme Hinchliffe
Another thing you may want to look into is using your console port on the router incase of radius inavailabilty. If you still want to be able to use radius auth on the console if it is availible you need the 'secret' command aaa console it doesn't list it in the command lists, if you type it it

Newbie

2004-06-04 Thread Cool Man
Hi, How can I use 802.1x port authentication scheme with free radius and linux. Specifically if I want to use EAP-md5 and PAP. I have setup a switch and freeradius server. but don't understand what to do on my computer, so that it can communicate with switch. Do I need something additional to

Re: callback on mysql

2004-06-04 Thread jesk
On Fri, 4 Jun 2004 15:32:43 -0700 Yanurul Anwar [EMAIL PROTECTED] wrote: Hi All, I'm new to freeradius and this forum. so excuse me if i'm asking an already asked question. I have search the archive regarding callback on mysql but it is no avail. My problem is setting callback user in

freeradius rfc2882 ?

2004-06-04 Thread nsinit
Hi somebody can tell me that whether or not rfc1882 implemented in freeradius0.9.2 or later realease? i have to write a radius client sending a request to my freeradius server for changing the user's password stored in the backend database. thx. described as the

Re: Newbie

2004-06-04 Thread Michael Schwartzkopff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Freitag, 4. Juni 2004 11:15 schrieb Cool Man: Hi, How can I use 802.1x port authentication scheme with free radius and linux. Specifically if I want to use EAP-md5 and PAP. I have setup a switch and freeradius server. but don't understand

EAP/TLS - rlm_ippool: Could not find Pool-Name attribute.

2004-06-04 Thread Zdenek Pizl
Hi all, I am trying to connect our SMC2804WBR wireless routes to the freeradius 1.0.0pre1 (RedHat 9 Linux) and to get connected from WinXP station throuhg 802.1x EAP TLS connection. The result of my tries is in the subject ... I've defined the in the config files following: file users:

traffic shaping to limit radius request spikes, comments?

2004-06-04 Thread Tariq Rashid
i wonder if anyone has experience in this or comments ... in a test environment, we note that rare spikes of very high request rates seem to knock out the radius servers for a short period while they recover. an immediate solution that comes to mind is to use traffic shaping (such as ALTQ) to

problem with accounting

2004-06-04 Thread Szabó György
Hi, my name is George. I have a problem with accounting. If accounting is turn off on AP, then the radius is working. If I turn on the accounting on AP, after authentication few seconds the AP brakes the connection. I don't know why do this. Maybe I should set some attributes for the users?

Re: problem with accounting

2004-06-04 Thread Alexander Lunyov
Hello Szab, Friday, June 4, 2004, 1:56:02 PM, you wrote: SG I have a problem with accounting. If accounting is turn off on AP, then the SG radius is working. If I turn on the accounting on AP, after authentication SG few seconds the AP brakes the connection. I don't know why do this. Maybe I SG

Re: problem with accounting

2004-06-04 Thread Szab Gyrgy
Excuse me for the last mail. Here is the log file from radacct directory. Hello Szab, Friday, June 4, 2004, 1:56:02 PM, you wrote: SG I have a problem with accounting. If accounting is turn off on AP, then the SG radius is working. If I turn on the accounting on AP, after authentication SG

Xsupplicant prob

2004-06-04 Thread Cool Man
Hi, when I try to run xsupplicant Nussnb56:~/xsupplicant # xsupplicant -i eth0 Error: No globals defined. There was a problem with the config file. We cannot continue. What is the problem here. What should the xsupplicant have. The version is xsupplicant-0.8.tar.gz. Thx. Riz

FreeRadius on MACOSX

2004-06-04 Thread Nicolas Ross
Hi all ! I'm new to the radius world, and I have found that freeradius is most suited for our needs. I've successfully configured and compiled the distro (1.0.0-pre1) uner Mac OS X Server 10.3.x using the doc/MACOSX and http://www.frontios.com/freeradius.html instructions to get it to work with

RE: Freeradius 0.9.3 and AIX 5

2004-06-04 Thread Nico.Baggus
That might have been me, I needed quite some basic functionality so I kept removing offending modules until it worked. Basicaly libtool didn't work at all. So everything that uses shared stuff won't work either. I only managed to get a static version working. (This was only done as an aside).

Re: ippool problem

2004-06-04 Thread Kostas Kalevras
On Thu, 3 Jun 2004, Marco Marques wrote: Hi All , i am trying to setup radius to work with ip pools , when i start radius in debug mode i dont see any error. Output : Module: Loaded IPPOOL ippool: session-db = /usr/local/etc/raddb/db.ippool ippool: ip-index =

Re: dialup_admin

2004-06-04 Thread Kostas Kalevras
On Thu, 3 Jun 2004, apellido jr., wilfredo p. wrote: Hello is their any plan to include in dialup_admin, a feature which the USER can check his/her account, edit his/her information and change password authenticated via his/her username/password in Freeradius (using MYSQL). In general

Re: dialup_admin

2004-06-04 Thread apellido
thanks kostas :) i will look for user_state.php3 as reference. On Thu, 3 Jun 2004, apellido jr., wilfredo p. wrote: Hello is their any plan to include in dialup_admin, a feature which the USER can check his/her account, edit his/her information and change password authenticated via

radtest problem

2004-06-04 Thread Ernesto Freyre
Hi List, please I am facingthe following problem: when I attempt to use the radtest tool withe args.: radtest [EMAIL PROTECTED] wilma 172.16.10.5:1645 123 MYSECRET I have the message: radclient:failed to get value I am working withFreeBSD 4.9, freeradius 0.93 Please, could some one to

Re: rlm_eap_ttls linking error

2004-06-04 Thread Matthew Albright
Great, thanks... I'll try that, and let you know if it works when I get all the TLS cert stuff figured out. matt On Fri, 4 Jun 2004 18:11:46 +1000, Paul Hampson [EMAIL PROTECTED] wrote: On Thu, Jun 03, 2004 at 05:36:39PM -0700, Matthew Albright wrote: I'm attempting to compile

Re: fail-over configration

2004-06-04 Thread baffy200y
Thanks for your reply. Alan. You showed the follow process. 1.Checking users file If the User-Name is not found, go to Checking SQL(Mysql) DataBase. Check the Calling-Station-Id. if the Calling-Station-Id is correct, continue to authenticate if the

Re: ippool problem

2004-06-04 Thread Zdenek Pizl
On Fri, 2004-06-04 at 15:29, Kostas Kalevras wrote: the error comes when i try to authenticate gives me this error : auth: user supplied User-Password matches local User-Password modcall: entering group post-auth for request 0 rlm_ippool: Could not find Pool-Name attribute.

Re: radtest problem

2004-06-04 Thread Thor Spruyt
Ernesto, send your mail in plain text, then you'll probably get a response :) - Original Message - From: Ernesto Freyre To: [EMAIL PROTECTED] Sent: Friday, June 04, 2004 12:39 PM Subject: radtest problem Hi List, please I am facingthe following problem:

Re: Freeradius-Users digest, Vol 1 #3304 - 13 msgs

2004-06-04 Thread Juan
Hello Kostas, where can i find rlm_ipool revision 1.3.. with 1.3 i will can work with two differents pools? Thank you Send Freeradius-Users mailing list submissions to [EMAIL PROTECTED] To subscribe or unsubscribe via the World Wide Web, visit

Newb: Sanity Check Please

2004-06-04 Thread Josiah Ritchie
I'm relatively new to the concept of a RADIUS server as a whole, but I've spent the last couple days reading up on it and I think I'm getting a decent grasp of the concept. I was hoping you folks wouldn't mind just looking over what I'm planning to do and let me know of any holes in my

Re: user.cdb support?

2004-06-04 Thread Alan DeKok
Christian Reeves [EMAIL PROTECTED] wrote: I am looking into new RADIUS options to get away from a custom variatyion of Livingston. Does FreeRadius support using a cdb file for auth? If so, is it a module that must be installed? No, sorry. Alan DeKok. - List info/subscribe/unsubscribe?

Re: freeradius rfc2882 ?

2004-06-04 Thread Alan DeKok
nsinit [EMAIL PROTECTED] wrote: somebody can tell me that whether or not rfc1882 implemented in freeradius0.9.2 or later realease? No. 5.1. Password Change Remotely requested password change operations were described and proposed, but rejected by the working group. That means

Re: Xsupplicant prob

2004-06-04 Thread Alan DeKok
Cool Man [EMAIL PROTECTED] wrote: Hi, when I try to run xsupplicant I suggest asking that question on the xsupplicant list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

ippool usage

2004-06-04 Thread Ernesto Freyre
Hi list, here I am here again, now I would want to ask you if it's possible to have many ippool entries in the radiusd.conf file , and how this must be invoked from the post-auth and accounting sections, such as says at the radiusd.conf : Should be added in post-auth and accounting sections Can I

rlm_eap_tls: Received unexpected tunneled data after successful handshake.

2004-06-04 Thread Jawhar TAZI
Hello, Sorry to disturb you, but i would like to know wether you have succeded in resilving this problem : rlm_eap_tls: Received unexpected tunneled data after successful handshake. rlm_eap: Handler failed in EAP/tls rlm_eap: Failed in EAP select modcall[authenticate]: module eap returns

Can't Install from directory w/ spaces

2004-06-04 Thread Josiah Ritchie
I just installed freeradius-snapshot-20040604 and found that the make command won't finish up if the system is configured inside a path with spaces in the name. Not a big deal as it didn't take long to move it to a directory that didn't have spaces in the name, but might be a little gotcha. I

RE: radtest problem

2004-06-04 Thread RH List Account
Looked fine to me (although I dont have a good answer to the question) Ernesto, try running radiusd in debug mode (-X) in another session, and watching the output for hints when you run radtest. Rob From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Thor Spruyt

Re: Can't Install from directory w/ spaces

2004-06-04 Thread Chris Ross
Alan DeKok wrote: Chris Ross [EMAIL PROTECTED] wrote: It may be a common UNIX problem, but it's not like UNIX prevents you from handling it. [EMAIL PROTECTED] aland]$ mkdir hello there [EMAIL PROTECTED] aland]$ cd hello\ there/ [EMAIL PROTECTED] hello there]$ FOO=`pwd` [EMAIL PROTECTED] hello

Re: Can't Install from directory w/ spaces

2004-06-04 Thread Gary McKinney
Slightly off topic (Freeradius that is): Unix is User Friendly - It's just picky about it's Friends! Something an old unix guru told me once - long, long ago Gary N. McKinney Network Administrator Computer Services Dept. Brevard County Library System -- Original Message

Authorization not working w/ Cisco

2004-06-04 Thread John Sasso Jr
I am having trouble with exec authorization when I telnet to a Cisco 2500 router which is configured for AAA against my FreeRADIUS box (version 1.0.0-pre0). With the following configuration on my router: aaa new-model aaa authentication login vty-in group radius local aaa authentication

Re: Authorization not working w/ Cisco

2004-06-04 Thread Milver S. Nisay
If I remove the aaa authorization exec default group radius local entry on the router, I can get in fine. I should note that authentication works A-OK with my freeradius box. Its the authorization that is giving me issues. this happens to be cisco related question and be directed to cisco

Can I use usegroup = option in unix module configuration?

2004-06-04 Thread baffy200y
Hello. Can I use usegroup = option in unix module configuration in radiusd.conf? That option is not in sample radiusd.conf. Is it not recommended to use that option? or is anything wrong with using that option? regards. -- baffy200y [EMAIL PROTECTED]

About Log authentication requests to the log file in radiusd.conf

2004-06-04 Thread baffy200y
Hello. We have log_auth and log_auth_badpass,log_auth_goodpass section like this. -- radiusd.conf -- # Log authentication requests to the log file. # # allowed values: {no, yes} # log_auth = yes # Log passwords with the authentication requests. # log_auth_badpass -