VOIP usage - Radius server and billing server

2004-12-21 Thread prabhan
Hello, How does a radius server communicate with billing server. Basically i want to know in a prepaid application,how will the radius server get the maximum duration that can be allowed to the user based on the amount of money remaining in his account or prepaid card. Are all the radius

Re: EAP-PEAP-MSCHAPv2 not sending MPPE keys

2004-12-21 Thread Jakub Jermak
On Sat, Dec 18, 2004 at 08:36:18PM -0500, Alan DeKok wrote: Jakub Jermak [EMAIL PROTECTED] wrote: Yes, the user was rejected, but why? On closer examination, it appears that the debug log you posted includes multiple user sessions. This is confusing, and makes it more difficult to track

Re: EAP-TTLS with tunneled PAP Users files

2004-12-21 Thread A . L . M . Buxey
Hi, (logs Part 2) ** Now I set users to : DEFAULT Huntgroup-Name == 1X, Autz-Type := Wireless_Staff, Auth-Type := EAP from eap.conf # # Whatever you do, do NOT set 'Auth-Type := EAP'. The server # is smart

Unsubscribe

2004-12-21 Thread Berry, William
Title: Unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html * Mueller Industries, Inc. - CONFIDENTIAL INFORMATION This e-mail and any files transmitted with it are confidential and are intended solely for

Re: RADIUS and PAM configuration help--RESOLVED with solution posted

2004-12-21 Thread Brock Noland
Will this allow root login?? Brock On Mon, 20 Dec 2004 16:52:29 -0800, Toby Zimmerer [EMAIL PROTECTED] wrote: Alright! I figured this whole thing out! I switched over to the pam_radius_auth module (Sept 2003) to tie PAM into an existing RADIUS server. The difference with tying RADIUS in

Re: MAC addr. authentication SQL

2004-12-21 Thread Alan DeKok
Joe Mailander [EMAIL PROTECTED] wrote: Problem is, to add an additional MAC address I have to add another entry into the SQL database (handles the authorization part) and add an entry into the users file (handles the authentication part), Why? You can add both entries into the SQL

Re: problems with radutmp

2004-12-21 Thread Alan DeKok
[EMAIL PROTECTED] (Paul Hampson) wrote: I'm gonna take a stab in the dark, and guess that the records are not being deleted because the Accounting Session ID you're getting is too long for the session_id field in radutmp... See FreeRADIUS bug 62 at http://bugs.freeradius.org/show_bug.cgi?id=62

Re: EAP-TTLS with tunneled PAP Users files

2004-12-21 Thread Alan DeKok
Joe Raviele [EMAIL PROTECTED] wrote: I think I have tried every possible setting to get this thing to work, so as requested here are my conf files and logs when I tried different settings. I apologize for the long post (its is actually 2, since the first got bounced), but I am hoping someone

Re: EAP-TTLS with tunneled PAP Users files

2004-12-21 Thread Alan DeKok
Joe Raviele [EMAIL PROTECTED] wrote: Now I set users to : DEFAULT Huntgroup-Name == 1X, Autz-Type := Wireless_Staff, Auth-Type := EAP and it fails with a different message: malformed EAP Changing things at random is a guaranteed way to never solve the problem. Again, write down a clear

Re: EAP-PEAP-MSCHAPv2 not sending MPPE keys

2004-12-21 Thread Alan DeKok
Jakub Jermak [EMAIL PROTECTED] wrote: Question: shouldn't freeradius send Access-Accept (and MPPE keys that it generates for sure - debugged) after having authenticated client? (MSCHAP Success) Yes. But if the client stops talking to the server, then the client is never authenticated.

Huntgroups, ldap, groupofnames

2004-12-21 Thread Paul Dlug
I'm trying to get freeradius (1.0.1) working with huntgroups and ldap groups, after toying with this for a few days and searching the mailing list I still can't seem to make it work, perhaps someone can assist. huntgroups: apsdialin NAS-IP-Address == 192.168.1.10 users: DEFAULT

Re: RADIUS and PAM configuration help--RESOLVED with solution posted

2004-12-21 Thread Toby Zimmerer
By deafult,no. SSH is setup to block ROOT login. What you need to do is log into an SSH session as a user, then su to the ROOT account. From: Brock Noland [EMAIL PROTECTED] Reply-To: freeradius-users@lists.freeradius.org To: freeradius-users@lists.freeradius.org Subject: Re: RADIUS and PAM

RG: NAS Type specific PEAP problem

2004-12-21 Thread Georg Brandt
Hello, Ive got a problem with one specific NAS Type. Im using PEAP on Windows XP SP2 without checking certificates and without using Windows login data, the username and passwords are stored in a mysql database. It seems that the EAP process is starting but is not properly answered by the Client.

Adding VSA to reply from NAS device using radius

2004-12-21 Thread David
Hello, I am running FR 1.0.0 on RedHat 9.0. I am working with an ISP who has a USR/3COM Total Control TC1000 but no radius server. The ISP's usernames and passwords are stored in the TC1000 and they are using it to authenticate dial-up users. Our application requires an access-accept and a

Re: EAP-TTLS with tunneled PAP Users files - RESOLVED

2004-12-21 Thread Joe Raviele
Thanks everyone. Alan, it all came down to the Freeradius proxy statement in the users file. Once I did that everything worked fine. I am now able to authenticate to OpenLDAP from the built in OSX client and the secureW2 client for Windows. **users DEFAULT

Re: RADIUS and PAM configuration help--RESOLVED with solution posted

2004-12-21 Thread Brock Noland
Sorry, I should have been more clear. Su uses PAM. I was asking, did you change ALL of your pam files to the configuration you listed, because I don't think root would be allowed to login then. Unless root was authenticated via radius. I was just wondering if you had tried logging in (or su-ing)

Re: RADIUS and PAM configuration help--RESOLVED with solution posted

2004-12-21 Thread Toby Zimmerer
Yes, I was able to SU in the seesion after using RADIUS to establish the SSH tunnel. The SU command used the local ROOT password. From: Brock Noland [EMAIL PROTECTED] Reply-To: freeradius-users@lists.freeradius.org To: freeradius-users@lists.freeradius.org Subject: Re: RADIUS and PAM

Re: RADIUS and PAM configuration help--RESOLVED with solution posted

2004-12-21 Thread John McKinney
On Mon, 20 Dec 2004, Toby Zimmerer wrote: Perhaps a silly question, but if I wanted to allow ftp access to an nfs mounted partition for authenticated users only, will this work? Meaning the users do not have a local account, the radius client is on the local machine and the radius server is a

Re: RADIUS and PAM configuration help--RESOLVED with solution posted

2004-12-21 Thread Alan DeKok
John McKinney [EMAIL PROTECTED] wrote: Perhaps a silly question, but if I wanted to allow ftp access to an nfs mounted partition for authenticated users only, will this work? Meaning the users do not have a local account, the radius client is on the local machine and the radius server is a

free, Brock Noland has invited you to open a Google mail account

2004-12-21 Thread Brock Noland
I've been using Gmail and thought you might like to try it out. Here's an invitation to create an account. --- Brock Noland has invited you to open a free Gmail account. The invitation will expire in three weeks and can only be

free, Brock Noland has invited you to open a Google mail account

2004-12-21 Thread Brock Noland
I've been using Gmail and thought you might like to try it out. Here's an invitation to create an account. --- Brock Noland has invited you to open a free Gmail account. The invitation will expire in three weeks and can only be

Dynamic Authorization Extensions to RADIUS

2004-12-21 Thread xuxu
freeradius-users Does Freeradius implement the Dynamic Authorization Extensions discribed in RFC3576 ? xuxu [EMAIL PROTECTED] 2004-12-22 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

realm setup problem

2004-12-21 Thread zack musa
I try to setup proxy and realm for freeradius in my forwarding server, in the proxy.conf file, it looks like this: realm 200.200.230.136 { type= radius authhost= radius.200.200.230.136:1812 accthost= radius.200.200.230.136:1813 secret