strange parser bug.

2004-09-23 Thread Norguhtar
Hello. I'm installed FreeRADIUS 1.0.1. And got strange parse config bug If i'm used section from wrong.conf., i'm got : reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/cakesql.conf /etc/raddb/radiusd.conf[195]: Unexpected e

radrelay problem....

2004-09-23 Thread Rohaizam Abu Bakar
Hi...   Info: FreeBSD 4.9 FreeRADIUS 1.0.1 OpenLDAP backend   I'm using radrelay to duplicate accounting from a few servers to one master server as below:   radius1-> radius2 >master_radius radius3 >   It's working OK... and master_radi

RE: Free-Radius install on Solaris

2004-09-23 Thread Mitchell, Michael
Hi Steven, First things to check: 1) Did the eap module/sub modules actually build? Check the installation lib directory for rlm_eap*. I found that using the Sun Workshop C compiler, several modules do not build as they rely on gcc features (in particular zero length arrays). 2) Run the server

Re: Re: Wireless Network

2004-09-23 Thread David E. Smith
On 23 Sep 2004 at 23:52, [EMAIL PROTECTED] wrote: > I'll explain in a better way. [ snip: scenario ] Have the RADIUS server give different IP addresses to users A and B. Have a firewall somewhere between the private network and the Internet that will deny Internet traffic to someone whose IP a

Re: Re: Wireless Network

2004-09-23 Thread macleod
Hi all and thanks for the answers, I'll explain in a better way. I would like to have: a user A who can access to Internet with username A and password A (and that's ok, it works); a user B who can access to Private Network (no Internet) with username B and password B. Both connecting to the same

raddump RADIUS packet analyzer

2004-09-23 Thread Jonathan Moore
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Folks, I'd like to announce the availability of the raddump RADIUS packet analyzer which may be useful for debugging your RADIUS infrastructure. Please see the project homepage at https://sourceforge.net/projects/raddump/ for more details. It is GPL

Authenticating IP phone through RADIUS

2004-09-23 Thread Omer Adhia
hi , a quick question. Is it possible to authenticate the ip phone through radius server. What I want to do is, not only to authenticate the users but to also authenticate my ip phone through radius. Is that possible to do so in radius ? If not , is there some way around this ? --

Re: Help needed with Digest

2004-09-23 Thread Alan DeKok
Omer Adhia <[EMAIL PROTECTED]> wrote: > if in the sample script given ,to test the radius server, I change the > digest-method to REGISTER , the server doesnt authenticate The digest algorithm uses the digest method to calculate the digest response. If you change the digest method without chan

Help needed with Digest

2004-09-23 Thread Omer Adhia
hi, if in the sample script given ,to test the radius server, I change the digest-method to REGISTER , the server doesnt authenticate but when digest-method is INVITE it does . It there some problem on my side , or will it only work with INVITE only ? And if possible can someone send me the scri

Re: Wireless Network

2004-09-23 Thread David E. Smith
On 23 Sep 2004 at 10:38, [EMAIL PROTECTED] wrote: > I'm trying to use freeradius to connect users to a private network or to > Internet through an AP of a Wireless LAN. A user gets an account for private > network connection or Internet connection. Internet is ok, but I tried different > ways to m

Re: where do I set the shared Secret

2004-09-23 Thread Marco C. Coelho
If you have the default install: cd /usr/local/etc/raddb/clients.conf Marco Christopher F. Wilson wrote: I have solaris 8 and am running 1.0.1 I am going to try and get mac address authentication going for my 60+ Ornioco/Avaya Access points. But I cant seen to find where to set the shared secret p

Segfault in radrelay on FR 1.0.1

2004-09-23 Thread Kevin Bonner
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 I sent radrelay a TERM and saw that there were a few records left in the detail file that needed to be pushed. Installed version 1.0.1, and radrelay kept segfaulting when trying to start. Running through gdb, I tracked it down to an invalid entry

accounting errors with pppd

2004-09-23 Thread Marco C. Coelho
We are running freeradius 1.0.0 on an AMD box. We are authenticating PPD session on the local machine. PPP Users are getting authenticated and allowed through the box: however, when the PPP session goes down PPP is not clearing them in RadAcct. They are allowed back in, and a radwho shows two

RE: Segmentation Fault on freeradius 1.0.0

2004-09-23 Thread Mark Hennessy
I do, but I have the various builds isolated from each other in their own trees. I tried renaming the old tree (0.9.3) and zeroing out its permissions but I still get that segfault. I even get it with this build of 1.0.1 I did just now. -- Mark Hennessy -Original Message- From: [EMAIL PR

(no subject)

2004-09-23 Thread Omer Adhia
Hello everyone: I want to register phone and authenticate users through RADIUS. meaning lets say, I first want to register a phone , which does not have a password and then if that goes through I want to authenticate the username and password. Is it possible to implement this on RADIUS ?If so ,

username authentication

2004-09-23 Thread John Hogenmiller
I am using freeradius with a mysql backend, working beautifully with multiple realms. >From one of my nas clients as defined in clients.conf, but not the other nas clients, I would like to authenticate any VALID user, regardless of password. If this was a seperate realm, I would be good, but I do

Re: PEAP + LDAP with crypted PWs?

2004-09-23 Thread Roberto S. G.
hi, Well, our aim is to store the ntpassword field in... a win2k Active Directory ... it is an ldap server, isn't it? I've checked plain auth against AD, and it runs ok ;) But i'll have to extend its schema in order to use ntpassword, and it'll take some time (and headaches ?). You don't have to do

Re: Proxy and remote server not responding

2004-09-23 Thread Alan DeKok
Chaigneau Nicolas <[EMAIL PROTECTED]> wrote: > Except for the following : when the remote server is > not responding (timeout), the post-proxy section of my > module doesn't seem to be called. FreeRADIUS is > sending a reject to the NAS, but I need to modify this > Access-Reject before it is sent.

Re: Problem with nostrip

2004-09-23 Thread Alan DeKok
George Chelidze <[EMAIL PROTECTED]> wrote: > as I haven't specified nostrip directive I thought radius would query > database with User-Name = 'test' but it uses User-Name = > '[EMAIL PROTECTED]'. I looked at debug output and I found that 'test' is > assigned to Stripped-User-Name, 'localhost'

Re: authentication Problem

2004-09-23 Thread Alan DeKok
Markus Blasl <[EMAIL PROTECTED]> wrote: > My problem now is, that it is working here in my company environment, but it > is not working in the environment of our customer, where i always get this > message in the radius log: > > > Thu Sep 23 10:33:43 2004 : Error: Discarding new request from clie

Re: Wireless Network

2004-09-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: > Internet is ok, but I tried different > ways to make him having a private network connection (and just that) and > it doesn't work because there's an AP between the user and Radius cabled > LAN. > Any ideas? Set up routing on the AP for the private network. Alan DeK

Re: KRB5 + Freeradius 1.0.1 Problem.

2004-09-23 Thread Kenneth Grady
The Auth-Type must match what is in the dictionary (the default dictionaries have "Kerberos" rather than "KRB5") On Wed, 2004-09-22 at 15:21, Kenneth Mix wrote: > After upgrading to Freeradius 1.0.1, I am getting an error when trying > to authenticate users via Kerberos 5. > > Below is debug out

Re: where do I set the shared Secret

2004-09-23 Thread Guus Houtzager - Luna.nl
On Thu, 2004-09-23 at 15:25, Christopher F. Wilson wrote: > I have solaris 8 and am running 1.0.1 > > I am going to try and get mac address authentication going for my 60+ Ornioco/Avaya > Access points. But I cant seen to > find where to set the shared secret password for the server. clients.co

Re: ip pool for each realm

2004-09-23 Thread Kostas Kalevras
On Mon, 20 Sep 2004, Bad Moh wrote: > Hi, > > How can I configure freeradius to allocate ip address from different pools based on > the users realm ? > > realm1 -> 10.1.0.0/16 > realm2 -> 10.2.0.0/16 > etc ... > > Is it possible ? DEFAULT Realm == "first", Pool-Name := "first" DEFAULT Realm ==

where do I set the shared Secret

2004-09-23 Thread Christopher F. Wilson
I have solaris 8 and am running 1.0.1 I am going to try and get mac address authentication going for my 60+ Ornioco/Avaya Access points. But I cant seen to find where to set the shared secret password for the server. I know mac address's can be easly faked and that there are other ways of doin

Adding Realm to Accounting Data

2004-09-23 Thread David
Hi, I am running FR 1.0.0 on RedHat9. I have 2 radius servers set up primarily for proxying but we do have some locally managed realms. I have 2 special cases where I need to add realm information to our accounting data. I had been trying this with attr_rewrite with little success. Case 1: ISP AB

Re: cisco_vsa_hack

2004-09-23 Thread Amedzekor Kafui
I don't know how to use CVS but I am learning to do that now. I only tried it on postgresql using Peter Nixon's schema. I only had to do some minor changes. I will post the patch here. Thanks. Kafui Amedzekor --- Apu islam <[EMAIL PROTECTED]> wrote: > Hello Kafui, > > Is that hack being sent

Re: PEAP + LDAP with crypted PWs?

2004-09-23 Thread Martin Pauly
> isn't it fantastic? (freeRadius, i mean)  :) Full ack, using freeRadius is fun (even the code itself didn't scare me off, although I had only time to take a short glimpse). > I think i'm gonna do PEAP + LDAP with MSCHAPv2, and I also have > crypted passwords... so what i'm planning to do is a mi

Free-Radius install on Solaris

2004-09-23 Thread Stephen Donovan
Good Day All I have looked for a solution to this, but I haven't been able to find anything that will solve my problem. I am attempting to install Free-Radius on a Solaris 8 box. I have tried 1.0.1 and 0.9.3, but both of the result in a core dump when I attempt to activate the EAP support. For 1.

Re: PEAP + LDAP with crypted PWs?

2004-09-23 Thread Roberto S. G.
hi, I think i'm gonna do PEAP + LDAP with MSCHAPv2, and I also have crypted passwords... so what i'm planning to do is a middle step: people will have to authenticate via web the first time, in order to check the password. Then, if its correct the password will be hashed in the air to NT format. Th

Problem with nostrip

2004-09-23 Thread George Chelidze
Hello, I use freeradius 0.9.3 from fedora core 2 distro. I'd like to use mysql tables to store users information. I test my configuration against User-Name = "[EMAIL PROTECTED]" proxy.conf listing: realm localhost { type = radius authhost = LOCAL } as I haven't specified nostrip

authentication Problem

2004-09-23 Thread Markus Blasl
Hello all, I'm using freeradius to authenticate users to an Active-Directory-Server using perl as authentication method. I managed to get everything working like expected, with the radius server asking the authentication and the correct vlan from the ADS and then afterwards sending it back to an

Wireless Network

2004-09-23 Thread macleod
Hi all, I'm trying to use freeradius to connect users to a private network or to Internet through an AP of a Wireless LAN. A user gets an account for private network connection or Internet connection. Internet is ok, but I tried different ways to make him having a private network connection (and ju

Proxy and remote server not responding

2004-09-23 Thread Chaigneau Nicolas
Hi all, I'm trying to use FreeRADIUS (version 1.0.0) as a proxy for roaming users using my network. Basically, I need to forward requests to roaming partners and alter requests and responses from those distant servers. I have developped a module that I used in the sections "pre-proxy" and "post