Re: Problem with Auth-Type

2004-11-16 Thread Kostas Zorbadelos
On Tue, Nov 16, 2004 at 08:02:42AM +, carlos akitani wrote: htmldiv style='background-color:'DIV class=RTEHi, I've go the same problem but no solution. /DIV DIV class=RTEI've added the Auth-Type:=Local in the users file but the same answer:/DIV DIV class=RTEauth: No authenticate method

Re: Little Details, WRT54GS

2004-11-16 Thread Paul
Wodan wrote: I posted this question on the Sveasoft board once. The WEP key you enter in WEP RADIUS mode is the key that is used for encryption. Usually, in normal WEP mode, you use the same key for encryption and authentication. In the WRT54GS RADIUS mode, you use RADIUS for authentication and

Compiling freeradius with snmp-support

2004-11-16 Thread Tobias Amon
Hi, I'm using freeradius 0.9.3 on Suse 9.1 I authorize my users with mysql. My AccessPoint is a Cisco 350. How do I change the configuration of my precompiled freeradius on suse 9.1 after the installation. Freeradius was installed by default with no snmp-support. Is there any way to do this,

Stop packet with zero session length

2004-11-16 Thread Andrea Gabellini
Hi, in my logs I see this string: Error: rlm_sql: Stop packet with zero session length. Reading through the source code and the mailing list, I think that stop packets with zero session length must be dropped by FR. But in my logs I see the error above, the record is updated into the DB and FR

Re: A question about port 1646

2004-11-16 Thread Andreas Meyer
Alan DeKok [EMAIL PROTECTED] wrote: Andreas Meyer [EMAIL PROTECTED] wrote: I wanted to use ports 1812 and 1813. If I set port=0 in radiusd.conf, radacct wants to connect to 1646 although I edited /etc/services to use 1813 for radius-acct. I suggest finding out why that's happening.

Re: Problem with Auth-Type

2004-11-16 Thread Carlos
Excuse me, just a mistakethis morning in writting the files. I've read a lot the documentations and the files themselves. There are a descriptions for the files; users, clients.conf and proxy.conf : /raddb/users demolocal Auth-Type := Local, Password == demolocal Service-Type = Framed-User,

Low cost APs that support EAP/TLS Freeradius??

2004-11-16 Thread Joe Matuscak
Hi. I'd like to set up wireless at my home and do it securely. At work im using Cisco 1200s with Freeradius authenticating with EAP/TLS. I'd like to do the same thing at home, but the Cisco 1200s are *way* outside of my budget :-) Does anyone have any suggestions for a reasonably priced

Re: Little Details, WRT54GS

2004-11-16 Thread Wodan
What about dynamic WEP re-keying? As far as i know this is not supported by Satori 4.0 and i could not get any more information from Sveasoft concerning this point. The wireless interface seems to be something they don't mess with much. How could I tell that different keys are actually being

Re: Low cost APs that support EAP/TLS Freeradius??

2004-11-16 Thread Michael Griego
I was looking around yesterday, and I noticed that Linksys' new wireless router (WTV56G I believe) perports to support 802.1x. It retails for about $180 depending on where you look. It's more than just an AP though, it has full blown router functions. --Mike On Tue, 2004-11-16 at 08:00, Joe

Secure TLS connection between Freeradius and Openldap

2004-11-16 Thread Konstantin KABASSANOV
Hello, I'm trying to establish a secure TLS connection between a Freeradius and an Openldap server. The openssl s_client -connect command successfully establishes a connection to the openldap server on the mentioned port with the following certificates, but when trying to bind from freeradius I

Re: Low cost APs that support EAP/TLS Freeradius??

2004-11-16 Thread Alan DeKok
Michael Griego [EMAIL PROTECTED] wrote: I was looking around yesterday, and I noticed that Linksys' new wireless router (WTV56G I believe) perports to support 802.1x. It retails for about $180 depending on where you look. It's more than just an AP though, it has full blown router functions.

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Alan DeKok
Nirmal [EMAIL PROTECTED] wrote: how can i use Framed-Route Attribute in radius ? what is the exact format for this attribute ? http://www.freeradius.org/rfc/attributes.html Click on the attribute to find documentation for it. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Compiling freeradius with snmp-support

2004-11-16 Thread Alan DeKok
Tobias Amon [EMAIL PROTECTED] wrote: How do I change the configuration of my precompiled freeradius on suse 9.1 after the installation. Freeradius was installed by default with no snmp-support. Is there any way to do this, or do i have to reinstall and/or update to 1.0? You have to

Re: A question about port 1646

2004-11-16 Thread Alan DeKok
Andreas Meyer [EMAIL PROTECTED] wrote: Did some tests again. I set port = 0 in radiusd.conf and /etc/services looks like this: radius 1812/tcp# RADIUS That's nice. What ports does the server say it's listening on when you run it in debugging mode? # netstat -pantu |grep

Re: Problem with Auth-Type

2004-11-16 Thread Alan DeKok
Carlos [EMAIL PROTECTED] wrote: Excuse me, just a mistakethis morning in writting the files. I've read a lot the documentations and the files themselves. There are a descriptions for the files; users, clients.conf and proxy.conf : ... But not the debug logs. Please go back, and READ the

Segmentation fault reading clients

2004-11-16 Thread Peter L.
Hi all, i get a segmentation fault when starting freeradius. read_config_files: reading clients Segmentation fault Any ideas? Kind regards, Peter see gdb output below. -- (gdb) set args -x -x (gdb) break clients_free Breakpoint 1 at 0x8074faa: file client.c, line 52. (gdb) run

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
Janakan, I tried to disable rlm_x99_token as you say you did. I ran ./configure --disable-rlm_x99_token. Is this not right? only to get the same errors: In file included from x99_rlm.c:54: x99.h:26:42: openssl/des.h: No such file or directory gmake[6]: *** [x99_rlm.o] Error 1 gmake[6]: Leaving

Re: Segmentation fault reading clients

2004-11-16 Thread Alan DeKok
Peter L. [EMAIL PROTECTED] wrote: i get a segmentation fault when starting freeradius. read_config_files: reading clients Segmentation fault This happens when the code in the server disagrees with itself. e.g. Version X of the server is using modules from version Y, or the header files

RE: radiusdb - no such file or directory

2004-11-16 Thread Janakan Rajendran
Michael, The command is correct. What I did is I manually delete the free radius folder and then started new with the configure command disabling rlm_x99_token(your syntax is correct) and it worked. No errors during make and make install. Try deleting the folder and redo again. It might help.

AW: Segmentation fault reading clients

2004-11-16 Thread Peter L.
read_config_files: reading clients Segmentation fault This happens when the code in the server disagrees with itself. e.g. Version X of the server is using modules from version Y, or the header files were updated, and onlysome parts of the server were re-built. Try deleting your

Re: A question about port 1646

2004-11-16 Thread Andreas Meyer
Alan DeKok [EMAIL PROTECTED] wrote: radius 1812/tcp# RADIUS That's nice. What ports does the server say it's listening on when you run it in debugging mode? I made a fresh install. Debugging mode says this: Starting - reading configuration files ... reread_config:

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
Janakan, Thanks for your help. Still no luck. I deleted the freeradius folder that is created after untaring the initial file. Is there another freeradius folder I should delete before running configure again? Does it matter where I untar the freeradius file to? On Tue, 16 Nov 2004 11:18:28

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
--without, (instead of --disable) worked!!! On Tue, 16 Nov 2004 11:40:51 -0500 Michael Basso [EMAIL PROTECTED] wrote: Janakan, Thanks for your help. Still no luck. I deleted the freeradius folder that is created after untaring the initial file. Is there another freeradius folder I should

RE: radiusdb - no such file or directory

2004-11-16 Thread Janakan Rajendran
Thatz great! Michael. I'm wondering do you have any documentation to configure the freeradius. If you could share that with me, I'd really appreciate. Thank you, Regards, Janakan Rajendran -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Michael Basso

Re: A question about port 1646

2004-11-16 Thread Michael J. Hartwick
On Tue, 16 Nov 2004 at 17:39 (+0100), Andreas Meyer wrote: AM Listening on authentication *:1812 AM Listening on accounting *:1813 AM Listening on proxy *:1814 AM Ready to process requests. AM AM When I do now a radlogin I get this in /var/log/messages: AM AM Nov 16 17:24:59 gamma radlogin[6208]:

Tcpdump Attribute Question

2004-11-16 Thread jesk
I have a question to tcpdumping FreeRADIUS. in some auth-replies there a missing some attributes but instead of them i can see at the end of a tcpdump line the following: [|radius] what does this exactly mean? f.e.: --- 12:58:05.215548 x.x.x.x.1645 x.x.x.x.1645: rad-access-accept 217 [id 14]

Re: A question about port 1646

2004-11-16 Thread Andreas Meyer
Michael J. Hartwick [EMAIL PROTECTED] wrote: I haven't really followed this thread, but if you look at the top three lines you see that it is listening on 1812, 1813, and 1814 not 1645, and 1646 which radacct is trying to use. I don't remember exactly when the standard ports for RADIUS

Re: radiusdb - no such file or directory

2004-11-16 Thread Michael Basso
On Tue, 16 Nov 2004 12:06:52 -0500 Janakan Rajendran [EMAIL PROTECTED] wrote: Thatz great! Michael. I'm wondering do you have any documentation to configure the freeradius. If you could share that with me, I'd really appreciate. I wish I did. If I get any documentation I will be sure to let you

EAP-MD5 help

2004-11-16 Thread jagadish gowda
Hi all, I 'am trying to authenticate using EAP-MD5. After some requests Free RADIUS server resends the Access Challenge multiple times. It does not say what's the error is and output of the log is Resending the access chanllenge to the client. But it works for the same user in new call.

Re: radiusdb - no such file or directory

2004-11-16 Thread Alan DeKok
Michael Basso [EMAIL PROTECTED] wrote: I wish I did. If I get any documentation I will be sure to let you know. I'm looking through the radiusd.conf file at the moment and I am a bit overwhelmed. The O'Reilly RADIUS book is a good beginning for people starting with RADIUS. FreeRADIUS

Re: EAP-MD5 help

2004-11-16 Thread Alan DeKok
jagadish gowda [EMAIL PROTECTED] wrote: i 'am writing client in java. I would say that your client has bugs. Read the RFC's to see how EAP-MD5 is implemented. And the debug log from FreeRADIUS will tell you what's going on, and why. Read it. If you're not going to read it, you'll never

Re: Tcpdump Attribute Question

2004-11-16 Thread Alan DeKok
jesk [EMAIL PROTECTED] wrote: in some auth-replies there a missing some attributes but instead of them i can see at the end of a tcpdump line the following: [|radius] what does this exactly mean? I suggest asking the tcpdump people. They wrote. Alan DeKok. - List

Proxied EAP authentication

2004-11-16 Thread jh vg
Hi I am working my university thesis using Freeradius. Its about WLAN Roaming. We want to reduce the messages that are sent during an EAP authentication between the foreign and home server( so we use proxy ). No matter how i have searched i cannt find an rfc describing the sequence of messages

LDAP radiusprofile

2004-11-16 Thread Dave
HI, I am currently setting up freeradius with openldap as a backend for testing. I have read through the various walk-throughs and have noticed that most show the radiusprofile objectclass to be structural. But looking at the RADIUS-LDAPv3.schema, it shows that objectclass as auxiliary. I am

[securew2@alfa-ariss.com: Alfa Ariss Make SecureW2 Available as Open Source] (fwd)

2004-11-16 Thread Kostas Kalevras
Maybe this will interest a few of the list members. - Forwarded message from SecureW2 [EMAIL PROTECTED] - Subject: Alfa Ariss Make SecureW2 Available as Open Source From: SecureW2 [EMAIL PROTECTED] To: undisclosed-recipients: ; Date: Tue, 16 Nov 2004 15:37:29 +0100 Thread-Topic: Alfa

Re: URGENT: IP Pool allocation based on LDAP attribute value

2004-11-16 Thread Kostas Kalevras
On Mon, 15 Nov 2004, Nishen Narandas wrote: Good day all, I am currently implementing FreeRadius for testing with our GGSN (Radius client) in our GPRS network. We have an External LDAP server which contains all usernames, passwords and other attributes. I would like to if it is possible to

Re: interface for the users

2004-11-16 Thread Kostas Kalevras
On Mon, 15 Nov 2004, Osvaldo Alvarez Pozo wrote: Hy hello everybody, this is my first email to the list. I have just installed freeradius and configured it to work with mysql for storing user information. As a admin interface I have dialup_admin. But I have a problem, I need a user interface, so

Re: Proxied EAP authentication

2004-11-16 Thread Alan DeKok
jh vg [EMAIL PROTECTED] wrote: I am working my university thesis using Freeradius. Its about WLAN Roaming. We want to reduce the messages that are sent during an EAP authentication between the foreign and home server( so we use proxy ). I'm not sure that's possible. No matter how i have

Re: to Kostas Kalevras!

2004-11-16 Thread Kostas Kalevras
On Mon, 15 Nov 2004, Edgars wrote: doesn't this project recall something? dialpup-admin2? Certainly not dialupadmin2 :-) From the screenshots it's just a lot less pages than dialupadmin with a little bit more info (in the online users page for instance) specifically designed for mikrotik

Re: LDAP radiusprofile

2004-11-16 Thread Kostas Kalevras
On Tue, 16 Nov 2004, Dave wrote: HI, I am currently setting up freeradius with openldap as a backend for testing. I have read through the various walk-throughs and have noticed that most show the radiusprofile objectclass to be structural. But looking at the RADIUS-LDAPv3.schema, it shows that

Re: Low cost APs that support EAP/TLS Freeradius??

2004-11-16 Thread David Mitton
On 11/16/2004 10:11 AM, Alan DeKok wrote: Michael Griego [EMAIL PROTECTED] wrote: I was looking around yesterday, and I noticed that Linksys' new wireless router (WTV56G I believe) perports to support 802.1x. It retails for about $180 depending on where you look. It's more than just an AP

Re: Low cost APs that support EAP/TLS Freeradius??

2004-11-16 Thread Paul
David Mitton wrote: A Linksys WRT54GS with Sveasoft looks like a bargin functionally. Amazon.com has the WRT54GS for $81.99 - $10 Rebate. Yeah, that's a good price. I use the WRT54GS with the tinyPEAP embedded RADIUS server. The firmware is based on Sveasoft's version 4.0, because it's freely

Server is being hit by requests as old as one week..... how to stop?

2004-11-16 Thread Prabhdeep
Hi guys, We had a problem with multiple accounting records, which we resolved by adding unique key to radacct table and modifying the insert/update SQL for accounting records. It seems that by solving this problem we had taken on a bigger problem. Because server is now returning error for any

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Nirmal
Hi, i have read rfc 2865 and rlm_sql module also and i used "=" as an Op but in any case secondary route is not being added on primary ppp interface... i don't know wheather [Framed-Route] it works or not. Nirmal Nachko Halachev [EMAIL PROTECTED] wrote: Hello,About how to use Framed-Route read

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Nachko Halachev
On Wednesday 17 November 2004 08:34, Nirmal wrote: i don't know wheather [Framed-Route] it works or not. Well, thet run radiusd in debug mode - radiusd -X. If everything is OK within database, you should see reply message from freeradius to NAS after user authenticate. If you see that reply

Acounting problem using mysql

2004-11-16 Thread Terence Agius
gentlemen, I am using free radius and its fantastic Took me some time, and some questions, so thanks for the help. I have one problem still though. I am using mysql integration but accounting does not seem to work. data seems to be writtem but all records show as deleted any ideas ?

Re: How-to use Framed-Route Attribute

2004-11-16 Thread Nirmal
Yes when i run radiusd in debug mode it shows the framed-route entry there in radius reply messages... can u tell me what part in NAS could be misconfigured ? i saw my ppp source files... there are some files ip-up and login.radius which contains code to add Framed-Route. there is a parameter