Re: PEAP + Windows XP

2004-11-03 Thread Sergio Sagliocco
Hi I 've had the same problem some days ago. To solve it I've recompiled freeradius with the following configure and npw it's ok: /configure --with-openssl-includes=/usr/local/src/openssl-0.9.7e/include/ --with-openssl-libraries=/usr/local/src/openssl-0.9.7e/ --disable-shared I think the

Re: different ip pool for different groups

2004-11-03 Thread Kostas Kalevras
On Wed, 3 Nov 2004, Lito Lampitoc wrote: Hello All, Is it possible to use different server side ip pools for different groups? I only have one NAS so obviously it won't be possible to use the huntgroups, for now I just have one default ip pool working. If by different ip pools you mean the ippool

help:have some difficulties about realm and proxy

2004-11-03 Thread
freeradius-users Hi all. I have successfully configured freeradius to work with realm and proxy. In the radius.conf file: realm isp-1 { format = prefix delimiter = \\ ignore_default = yes ignore_null = yes

Re: Ippool Or DHCP Server.

2004-11-03 Thread Chan Min Wai
Paul Hampson wrote: On Wed, Nov 03, 2004 at 02:19:21PM +0800, Chan Min Wai wrote: Dana Hudes wrote: On Wed, 3 Nov 2004, Chan Min Wai wrote: Go back to the defintion of RADIUS: Remote Authentication Dial-In User System. Now think. How do dialup users connect? They use SLIP/PPP. PPP has

ippools module blues

2004-11-03 Thread Terence Agius
Gentlemen, Q1: I am trying to set multiple pools 1380: ippools main_pool ( ) 1496: ippools private_pool ( ) 1530: ippools public_pool ( ) but when loading radiusd server says: 'line 1496 is not in 'attribate = value' format and bombs out. what am I doing wrong ? Q2: what additional steps I

Error: Assertion failed in threads.c, line 309

2004-11-03 Thread Josh Howlett
A server running 0.9.3 (on i386 RHEL v3) crashed today; the following was logged to radius.log: Error: Assertion failed in threads.c, line 309 It restarted okay. I've not had any problems with it in the past. Google doesn't turf up any interesting matches. Any ideas? thanks, josh. --

acct_users - Exec-Program not working

2004-11-03 Thread Mike O'Connor
Hi All I have been using freeradius 0.9.3 for a long time and the acct_users file below has all ways work well (did have a problem where it would just stop running the script sometimes) I upgraded be 1.0.1 because I was having trouble with the ippool code not sending a Framed-IP-Address every

Re: openlap wireless (WPA-radius with PEAP auth on client) problem

2004-11-03 Thread Daniel Davidson
What should default Auth-type be set to then? Right now I am getting a: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user error message from the daemon. thanks again, Dan On Tue, 2004-11-02 at 17:10, Alan DeKok wrote: Daniel Davidson [EMAIL

Re: Error: Assertion failed in threads.c, line 309

2004-11-03 Thread Alan DeKok
Josh Howlett [EMAIL PROTECTED] wrote: Error: Assertion failed in threads.c, line 309 It restarted okay. I've not had any problems with it in the past. Google doesn't turf up any interesting matches. Any ideas? A bug in the thread code in 0.9.3. It's been re-written double-checked in

Re: openlap wireless (WPA-radius with PEAP auth on client) problem

2004-11-03 Thread Alan DeKok
Daniel Davidson [EMAIL PROTECTED] wrote: What should default Auth-type be set to then? Right now I am getting a: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user error message from the daemon. Then you've edited the default radiusd.conf

Re: Ippool Or DHCP Server.

2004-11-03 Thread Alan DeKok
Chan Min Wai [EMAIL PROTECTED] wrote: I hope that radius server can talk to the DHCP server and tell the DHCP server what ip address to be allocate... No. Feel free to implement that, though. I'm sure many people would find it useful. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: LDAP and radiusVSA question

2004-11-03 Thread Alan DeKok
Rich Foster [EMAIL PROTECTED] wrote: I have just built freeradius-1.0.1 on Solaris 8, I am connecting to openldap 2.2.17 running under Redhat. I have authorization and authentication sorted out, but cannot get the radiusVSA command to pass the variable Cisco-AVPair = ip:route=x.x.x.x

Re: ippools module blues

2004-11-03 Thread Alan DeKok
Terence Agius [EMAIL PROTECTED] wrote: I am trying to set multiple pools 1380: ippools main_pool ( ) 1496: ippools private_pool ( ) 1530: ippools public_pool ( ) That's not the format the server expects for modules. One, you should use {} rather than (). Two, the module expects to

Re: Ippool Or DHCP Server.

2004-11-03 Thread Dana Hudes
On Wed, 3 Nov 2004, Chan Min Wai wrote: So unless that, this Switch is smart enough to do a PPP connection and only then this IP address will be able to be distribute by the switch to the client. What switch? Made by whom? What model? I hope that radius server can talk to the DHCP

Re: Oracle cursor leak

2004-11-03 Thread Roberto Re
hi, I have applied the patch yesterday only, but the problem still exists. The cursors are allocated and they continuously increase up to the maximum limit imposed by Oracle to the db. I have analysed some of the queries allocating the cursors: there are some query to RADGROUPCHECK and

failed to compile source code on solaris 9

2004-11-03 Thread jd ba
Hi, I'd like to know what's the prerequisite to install FreeRadius on solaris 9 box. My installation stopped at command 'make' with a msg -- make: Fatal error: Command failed for target `all' My steps of installation are:gunzip freeradius-1.0.1.tar.gztar xvf freeradius-1.0.1.tarcd

Problem getting OpenSSL to work with Freeradius

2004-11-03 Thread Ronald I. Nutter
I am trying to get OpenSSL to work with Freeradius. I am running the CA.all perl script but am getting errors that I cant find the cause for. I have modified the openssl.cnf to put the defaults for my install. I am seeing errors unable to load certificate and missing directory but don't see

freeradius + postgresql howto

2004-11-03 Thread David Young
Hi, I'm new to the list and I was just wondering if there's some straightforward documentation out there on how to set up freeradius with postgresql. The only document i've found is for Oracle and even that document doesn't explain any details about the tables created by freeradius and what

cisco ACS vulnerability

2004-11-03 Thread Artur Hecker
FYI: EAP-TLS vulnerability in cisco ACS http://www.cisco.com/warp/public/707/cisco-sa-20041102-acs-eap-tls.shtml ciao artur PS it's a bit out of topic, but well, they also have their problems :-) - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: failed to compile source code on solaris 9

2004-11-03 Thread Alan DeKok
jd ba [EMAIL PROTECTED] wrote: My installation stopped at command 'make' with a msg -- make: Fatal error: Command failed for target `all' Ok... The errors and warnings in the config.log are: Uh... why? I would expect you to post the errors from the make process. The messages you

Re: mod_auth_radius-2.0 difficulty

2004-11-03 Thread vollkommen
I bet if you set up a sniffer trace or use snoop, you probably would see your Apache2 wasn't even talking to the RADIUS server. I just got it all worked out on Solaris 8 and Mac OS X 10.3 after several days of similar head-scratching. Here's what I had to do to make Apache 2.0.52 use

Re: freeradius + postgresql howto

2004-11-03 Thread Alan T. DeKok
David Young [EMAIL PROTECTED] wrote: Hi, I'm new to the list and I was just wondering if there's some straightforward documentation out there on how to set up freeradius with postgresql. The only document i've found is for Oracle and even that document doesn't explain any details about the

FreeRadius authenticate_query over authorize_check_query

2004-11-03 Thread Mike Everest
Hi Folks, I'm confused as to the interaction of authenticate_query and authorize_check_query This is freeradius 1.0.0 debian sarge with postgresql db I want to use authenticate_query for user auth without any row entry in authorize_check_query I want to achieve this so I can manage the user

access-challenge question

2004-11-03 Thread Matt
Hello, First, I am new to the RADIUS protocol, and appreciate your help. Im working with a python web-interface and a remote server running freeradius-current. Using the web-interface, Im trying to get the client to print very verbose information about the transaction with the server

Re: Ippool Or DHCP Server.

2004-11-03 Thread Chan Min Wai
Dana Hudes wrote: On Wed, 3 Nov 2004, Chan Min Wai wrote: So unless that, this Switch is smart enough to do a PPP connection and only then this IP address will be able to be distribute by the switch to the client. What switch? Made by whom? What model? It is a 24 Port 10/100 Switch by

Re: Ippool Or DHCP Server.

2004-11-03 Thread Paul Hampson
On Wed, Nov 03, 2004 at 07:04:09PM +0800, Chan Min Wai wrote: I hope that radius server can talk to the DHCP server and tell the DHCP server what ip address to be allocate... Write a script in that adds the authenticated client's MAC address and the IP Address you've assigned to the DHCP

Re: Ippool Or DHCP Server.

2004-11-03 Thread Craig Huckabee
Paul Hampson wrote: On Wed, Nov 03, 2004 at 07:04:09PM +0800, Chan Min Wai wrote: I hope that radius server can talk to the DHCP server and tell the DHCP server what ip address to be allocate... Write a script in that adds the authenticated client's MAC address and the IP Address you've assigned

Re: failed to compile source code on solaris 9

2004-11-03 Thread jd ba
Hi thanks for the feedback from Alan. Here are the msg from command 'make' (/usr/ccs/bin/make): ltdl.c:85:5: warning: "HAVE_ARGZ_H" is not definedltdl.c:405:7: warning: "HAVE_ARGZ_APPEND" is not definedltdl.c:447:7: warning: "HAVE_ARGZ_CREATE_SEP" is not definedltdl.c:510:7: warning:

RE: failed to compile source code on solaris 9

2004-11-03 Thread Mitchell, Michael
ld: fatal: file /usr/oracle/9205/lib/libclntsh.so: wrong ELF class: ELFCLASS64 ld: fatal: File processing errors. No output written to .libs/rlm_sql_oracle-1.0.1.so You're trying to link against the 64 bit oracle library, but compiling freeRADIUS as 32 bit. You need to fix the path to the

Adding a module

2004-11-03 Thread Matthew Ryan
Greetings all, I have an ambition to write a module for FreeRadius and am having quite a bit of difficulty. - I basically took rlm_example, made a copy and renamed it - Made all modifications to the C file - Every other file that needed correct references - Built that module which was fine -

Re: FreeRadius authenticate_query over authorize_check_query (D'OH!)

2004-11-03 Thread Alan DeKok
Mike Everest [EMAIL PROTECTED] wrote: Well, yes - in many ways it does. Is there no way that I am able to use a custom table for additional checks then? Not really. Is authenticate query deprecated, or is it only available in 1.0.1? It's deprecated. It doesn't exist in 1.x, and never

Re: access-challenge question

2004-11-03 Thread Alan DeKok
Matt [EMAIL PROTECTED] wrote: First, I am new to the RADIUS protocol, and appreciate your help. I'm working with a python web-interface and a remote server running freeradius-current. Using the web-interface, I'm trying to get the client to print very verbose information about the

Re: freeradius + postgresql howto

2004-11-03 Thread David Young
OK, that's what I thought. I've looked at those 2 docs already (don't want you guys to think I don't RTFM), but just thought maybe there would be a more detailed document or a tutorial written by someone that explains certain tables in more detail and maybe with some real-life examples. So far,

RE: FreeRadius authenticate_query over authorize_check_query (D'OH!)

2004-11-03 Thread Mike Everest
OK, Thanks Alan Mike Everest [EMAIL PROTECTED] wrote: Well, yes - in many ways it does. Is there no way that I am able to use a custom table for additional checks then? Not really. That's a shame - the work-around will be very messy :( Is authenticate query deprecated, or is it

Re: FreeRadius authenticate_query over authorize_check_query (D'OH!)

2004-11-03 Thread Thor Spruyt
Mike Everest wrote: Mike Everest [EMAIL PROTECTED] wrote: Well, yes - in many ways it does. Is there no way that I am able to use a custom table for additional checks then? Maybe multiple queries in the authorize_check_query would solve a bit. -- Regards, Thor Spruyt E: [EMAIL PROTECTED] W: