Re: radius-1.0.1 die randomly

2005-01-14 Thread Stephan Jaeger
Am Donnerstag, den 13.01.2005, 11:08 +0100 schrieb Stefan Winter: Now that's a complicated script. How about #!/bin/bash pstree | grep radiusd || /etc/rc.d/init.d/radiusd restart As i already wrote in another thread i have nearly the same problem (and also almost the same setup: two

Suggestion

2005-01-14 Thread Amit Gupta
I have suggestion. We can create on online community at Yahoo/MSN messengers for fast resolution of problems. Amit Gupta Mobile: 91-9891062552 Yahoo IM: amitguptainn MSN IM : amitguptainn

Re: Question about vlans

2005-01-14 Thread Michael Schwartzkopff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Donnerstag, 13. Januar 2005 19:11 schrieb Matt Ashfield: Hi, We're looking at implementing 802.1x with FreeRadius. I'm wondering if it's possible for the Radius server to return a vlanID to the supplicant (in this case, an edge switch) telling

eap/ttls segementation fault

2005-01-14 Thread Guy C Erb
Hi, time to ask for help. I am having a segmentation fault snippet below. I see a similar crash posted in the lists, usually due to multiple version of openssl installed (which is the case on this machine), so I try various things then finally try not using shared libs. I have these two playing

Re: eap/ttls segementation fault

2005-01-14 Thread Guy C Erb
My little *snippet* was missing the two magic words *Segmentation fault*. Guy C Erb wrote: I am having a segmentation fault snippet below. . auth: type EAP Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 6 rlm_eap: Request found,

Proxy Freeradius (primary and secondary)

2005-01-14 Thread Nans Delrieu
hello and thank you very much for your help. I'm happy it works !! when i use radtest, if the primary is down the proxy radius server mark primary as dead. But I must do a second request and the proxy radius server contact the secondary . Is there to way to tell proxy radius to contact

Re: icradius to freeradius with mysql - do I need all the tables...

2005-01-14 Thread Mark Elkins
On Tue, 2005-01-11 at 17:47 +0200, Mark Elkins wrote: I'm in need of some advice - ... move to freeradius... In my current MySql structure - I have a master user table (useracct) - containing fields like... | userid | usertype | username | fullname | password | contact | uid | gid | phone

Re: freeradius ports

2005-01-14 Thread Thomas MARCHESSEAU
hahaha 5 mails , you seems to be really happy ;) cya Thom Thomas MARCHESSEAU wrote: Hi Esteban a parts of radiusd.conf listen { ipaddr = * port = 1234 type = auth } listen { ipaddr = * port = type = auth } - it works fine . cya :) [EMAIL PROTECTED]

Re: Suggestion

2005-01-14 Thread Lewis Bergman
Amit Gupta said: I have suggestion. We can create on online community at Yahoo/MSN messengers for fast resolution of problems. By whom? The same people on this list? If so, what do you find unique about that system that this one does not support? Even my stupid questions have been

Apache2

2005-01-14 Thread Lewis Bergman
By the way. The standard apache2 way of setting output filters appears to be broken in at least the RH rpm's. You have to add the old Application-type directive from the Apache1 to get php to work. Funny enough that Apache2 doesn't seem to report in the log that php is enabled or not. Unless you

RE: Suggestion

2005-01-14 Thread Amit Gupta
Hi, You are right. Even, Most of the time we solve our problems on our own. But some times we need immediate help. For example, few of us will be working at ISPs. At ISP, problem at Radius server affect hundred of customers. For such situations I recommend online community. I case or emergency

Re: LDAP, PEAP, Active Directory issue

2005-01-14 Thread Stefan . Neis
Hi, I have a question about the problem bellow. If in LDAP (openldap) we provide the ntpassword (with samba), it will work for authenticate Windows XP users with PEAP + mschapv2 ?? Note however, that storingusing ntpasswords instead of cleartext passwords offers no advantage at all -

Re: Suggestion

2005-01-14 Thread Neil Craig
Good idea - I could create a forum on my webspace which may be better - if anyone thinks it's a good idea I will set it up tonight [EMAIL PROTECTED] 01/14/05 8:09 AM I have suggestion. We can create on online community at Yahoo/MSN messengers for fast resolution of problems. Amit

PEAP + OpenLDAP

2005-01-14 Thread Israel Fabio Alves
Hi, I tried to configure Windows XP to autenthicate with 802.1x using PEAP + MSCHAPV2. The freeradius 1.0.1 was configured to search user information in OpenLdap. In the same computer where is installed freeradius, I have the OpenLdap + Samba server version 2.2.12 that store users passwords in

SQL db failover

2005-01-14 Thread Michel van Dop
Hi, The mirroring between the two mysql db (3.23.58-4) work with the replication mechanism of mysql and I have two sql.conf to describe the way to connect to each db and right config on radiusd.conf I use freeradius-0.9.3-1.1 and freeradius-mysql-0.9.3-1.1 I now this is old but this is the last

RE: LDAP, PEAP, Active Directory issue

2005-01-14 Thread Willey Kurt D
It isn't as hard as you are trying to make it... There are sample configs in the archieve I posted for AJ Grinnell -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Ron Wahler Sent: Thursday, January 13, 2005 4:40 PM To:

Re: Proxy Freeradius (primary and secondary)

2005-01-14 Thread Thor Spruyt
Nans Delrieu wrote: Is there to way to tell proxy radius to contact directly the secobndary if the primary is dead instead of doing a second request with rad test ?? No, that's the way it's implemented. And I guess there's a reason for it, but I wouldn't know what it is. Of course, editing the

RE: Permission denied on certificate-files

2005-01-14 Thread Hedenborg Thomas
Hi, I've tried to, temporarely, run the radius-server with main: user = root with success. I've checked the permissions on the following file folders but I know too little about file- folderpermissions in Linux. I hope somebody can help me spot any problems! # ls -la /etc/raddb/ -rw-r--r--

Re: SQL db failover

2005-01-14 Thread Alan DeKok
Michel van Dop [EMAIL PROTECTED] wrote: I use freeradius-0.9.3-1.1 and freeradius-mysql-0.9.3-1.1 I now this is old but this is the last stap! I would suggest upgrading. See http://www.freeradius.org/security.html I have this in the radiusd.conf $INCLUDE ${confdir}/sql.conf $INCLUDE

Re: radius-1.0.1 die randomly

2005-01-14 Thread Alan DeKok
Stephan Jaeger [EMAIL PROTECTED] wrote: These problems are just occouring from time to time and i don't know exactly when. Too much simultaneous radius requests? Too much load on the db? Or maybe the network is just slow from time to time... The server doesn't deal well with being under

Re: PEAP + OpenLDAP

2005-01-14 Thread Alan DeKok
Israel Fabio Alves [EMAIL PROTECTED] wrote: If a configure the autenticate to occur as file the autHentication is 100%, but when configured to OpenLdap, I always get the error bellow: ... The root cause of the error is a little further up in the debug log: rlm_mschap: Found LM-Password

RE: Permission denied on certificate-files

2005-01-14 Thread Stefan . Neis
Hi, (snipp) drw-r- 3 root radiusd 472 Jan 11 14:36 certs drw-r- 3 root root 472 Jan 11 15:30 certs_backup (snipp) drw-r- 2 root radiusd 200 Jan 11 14:36 demoCA (snipp) Directories normally need the x-Bit to be set. Try chmod u+x certs certs_backup

RE: Permission denied on certificate-files

2005-01-14 Thread Hedenborg Thomas
Hi, seems to be working! Thanks a lot. :-) //Thomas -Original Message- From: [EMAIL PROTECTED] on behalf of [EMAIL PROTECTED] Sent: Fri 2005-01-14 15:48 To: freeradius-users@lists.freeradius.org Cc: Subject:RE: Permission denied on certificate-files Hi,

Re: Luscent Portmaster 3

2005-01-14 Thread Kerry Penland
I also have a PM3 functioning with Freeradius, working well for over a year. I am using ports 1812 and 1813 however. I use dialupadmin to perform most of the day to day customer stuff. If you reboot the pm3 while clients are online, you will get no accounting stop packets and thus you'll be

RE: Suggestion

2005-01-14 Thread Guy Fraser
Unfortunately most of the people who provide help have other urgent things to do. Taking some time to check the list and answer what you can, is one thing. Having an instant message pop up while you are fixing a mission critical problem is a whole other thing. I have been working with

Re: Luscent Portmaster 3

2005-01-14 Thread Michael A Cooper
I use the pmvision for my Portmaster Admin stuff, It's a really nice program I can get right into over the net config it reboot it pretty much what-ever needs to be done. Okay I'll Stop rambling this is off topic Sorry Guys Kerry Penland wrote: I also have a PM3 functioning with Freeradius,

Re: Luscent Portmaster 3

2005-01-14 Thread Brad Fisher
Michael A Cooper wrote: I use the pmvision for my Portmaster Admin stuff, It's a really nice program I can get right into over the net config it reboot it pretty much what-ever needs to be done. Okay I'll Stop rambling this is off topic Sorry Guys Kerry Penland wrote: I also have a PM3

Re: FreeRadius Logs

2005-01-14 Thread Neil Craig
In radiusd.conf it specifies the log directory :) On Fri, 14 Jan 2005 10:59:30 -0600, Michael A Cooper [EMAIL PROTECTED] wrote: Hey Guys, I have a question wher do I look for my logs for FreeRadius? I am very new to this process and haven't learned where to look for those yet. I

Re: Multiple NAS Vendors, one user-id?

2005-01-14 Thread James Feger
On Thu, 6 Jan 2005, James Feger wrote: Okay, So I am a newbie with just enough knowledge to know this should work, and have spent a few hours reading all the different cool things RADIUS does for me. However, I cant get it to do what we need, and I am sure its lack of experience. I have read

Re: Luscent Portmaster 3

2005-01-14 Thread Kerry Penland
Hey! Thanks for the tip. We had one that was malfunctioning a few months ago and a reboot would cure things for a while. We since have replaced it because I hate having to reboot a piece of gear that should just run and work. Brad Fisher wrote: Michael A Cooper wrote: I use the pmvision for my

Re: Luscent Portmaster 3

2005-01-14 Thread Guy Fraser
On Fri, 2005-14-01 at 10:41 -0600, Brad Fisher wrote: Michael A Cooper wrote: I use the pmvision for my Portmaster Admin stuff, It's a really nice program I can get right into over the net config it reboot it pretty much what-ever needs to be done. Okay I'll Stop rambling this is off

FreeRadius and B2BUA

2005-01-14 Thread Bruno Machado
Hi all Im using the B2BUA, FreeRadius and SER proxy to make calls to PSTN network. When I use the B2BUA without authentication, the process run perfectly. However, I cant put the b2bua working with authentication. We can see the log of FreeRadius below: rlm_sql (sql): sql_set_user escaped user

Rewriting usernames before authenticating

2005-01-14 Thread Dennis Beach
I have FreeRADIUS 1.0.1 running successfully with an INTERMEC accesss point. We also have a Cisco access point and would like both to use the same RADIUS server. INTERMEC sends usernames (MAC address) as 00-00-00-00-00-00 and the Cisco sends them like ... Can the usernames be rewritten

Re: SQL db failover

2005-01-14 Thread Michel van Dop
Thank you Alan, Sorry but this is new for me. Freeradius is now running but on one db. Now the last step freeradius SQL db failover! So i leave the default config in radiusd.conf include the file sql.conf and put this in my radiusd.conf: $INCLUDE ${confdir}/sql.conf modules { sql sql1 {

More same attribute, multiple entries.

2005-01-14 Thread Sean
[EMAIL PROTECTED] [EMAIL PROTECTED] wrote: how do I access the second, third, etc. value for a duplicate attribute in sql.conf ? I have read doc/variables.txt and I did not figure out. Can it be done ? In the current CVS snapshot. Not in 1.0.1 Alan DeKok. I found the above in the

Re: More same attribute, multiple entries.

2005-01-14 Thread Dustin Doris
On Fri, 14 Jan 2005, Sean wrote: [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: how do I access the second, third, etc. value for a duplicate attribute in sql.conf ? I have read doc/variables.txt and I did not figure out. Can it be done ? In the current CVS snapshot. Not in 1.0.1

Re: SQL db failover

2005-01-14 Thread Alan DeKok
Michel van Dop [EMAIL PROTECTED] wrote: So i leave the default config in radiusd.conf include the file sql.conf and put this in my radiusd.conf: $INCLUDE ${confdir}/sql.conf modules { Once again, the include for sql.conf MUST BE INSIDE of the modules section. It's there in the

RE: (no subject)

2005-01-14 Thread Janakan Rajendran
Hi, Check out this link http://www.multitech.com/SUPPORT/Families/CommPlete4000/software.asp Regards, Janakan Rajendran -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Jessa Sent: Thursday, January 13, 2005 1:02 PM To:

Debian testing = no PEAP/TLS/TTLS support?

2005-01-14 Thread Lincoln Smith
Hi there Module: Loaded eap rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory radiusd.conf[9]: eap: Module instantiation failed. Is it the case that PEAP/TLS/TTLS support has been removed from the freeradius package in debian

Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-14 Thread Lincoln Smith
Err as usual found the solution shortly after posting... Lincoln Smith wrote: Hi there Module: Loaded eap rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory radiusd.conf[9]: eap: Module instantiation failed. Is it the case that

RE: Suggestion

2005-01-14 Thread Amit Gupta
We can do it on prudence-india.com. its website. But my Idea was primarily for yahoo/msn messengers Amit Gupta Mobile: 91-9891062552 Yahoo IM: amitguptainn MSN IM : amitguptainn -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Neil Craig Sent: Friday,

Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-14 Thread Sven Juergensen
the start/stop script of the debian freeradius package is faulty as well. let me know if you need a modified script and i'll mail it to you. cheers, sven Lincoln Smith wrote: Err as usual found the solution shortly after posting... Lincoln Smith wrote: Hi there Module: Loaded eap rlm_eap: Failed