Attributes Remain Empty in radacct

2005-02-04 Thread zack musa
Hi RH 8 NoCat Gateway+NocatAuthserver on linux FR 1.0.* I have some problems with my accounting data. We let the radius server to write accounting data inside the detail log files. We use RADIUS.pm to add some attributes and get their values on accounting process, and it works but not for all.

Re: Problems with ttls using SecureW2

2005-02-04 Thread Rok Papez
Hello ystein. Dne petek 04 februar 2005 08:37 je ystein Gsdal napisal(a): I think Alan wrote that the job with getting ttls to work was to set up tls properly... Freeradius works with the built-in 802.1x supplicant, so I guess that tls is in fact set up properly? In eap.conf i have

how can freeradius log the transaction and failed logins?

2005-02-04 Thread Marendra Nutriaji
Hi all, I use Freeradius 1.0.1 dialupadmin, and mysql under Fedora core 2, nad Using Patton 2960 as my Nas. Everything works fine, except when my user failed logging in with any reason, freeradius didnot put those failed transactions into the database. and then how can i make freeradius put any

RE: Problems with ttls using SecureW2

2005-02-04 Thread ystein Gsdal
Thanks for the suggestions, I'll look into them. Again, thank you for your help. -Original Message- From: Rok Papez [mailto:[EMAIL PROTECTED] Sent: 4. februar 2005 14:56 To: freeradius-users@lists.freeradius.org Subject: Re: Problems with ttls using SecureW2 Hello ystein.

question about upgrading from 0.9.3 to 1.0.1

2005-02-04 Thread Joe Meslovich
I am trying to upgrade our freeradius server from 0.9.3 to 1.0.1. We are doing some EAP-TLS authentication for an 802.1x deployment. In 0.9.3 we have entries in the users file for these 802.1x systems like this writingcart1.bridgewater.eduAuth-Type := EAP We used the full domain name for

Re: (no subject)

2005-02-04 Thread Stefan . Neis
Anderson Alves de Albuquerque schrieb: After I need that RADIUS use crypt or DES to have password in clean txt. It's impossible. Once you have the password crypted, you cannot get the clear text from it anymore. It's like making an omelette. You can make one from eggs, but you can't get the

Re: Web interface similar to Dialup Admin but for dialup users to change their login passwords.

2005-02-04 Thread Kostas Kalevras
On Fri, 4 Feb 2005, Shannon Sariman wrote: Hi All, I am using freeradius with mysql and dialup admin. Is there any open source solution out there that can cater for dialup users to manually change their password using a similar web interface like dialup admin? Please help. Not that i know of.

handling of sql accounting stop queries (main and alternate)

2005-02-04 Thread Bruno Lague
Hi, We are having difficulty making FreeRadius efficient in our environment because we cannot reliably attempt to insert records in the SQL database prior to attempting an update. In one environment, our NAS'es are sending STOP accounting requests only (no START and UPDATE). In such a case, it

Help appreciated (accounting only data)

2005-02-04 Thread Johnny Chavez
Hello I am new to this list and I wondering if a topic has been touched on yet or if anyone can help with a question. Has anyone setup radiator to only receive accounting data from multiple locations? We are currently running Radiator 3.3.1, I know its old but for the time being we need this

Re: Free radius for redhat 9

2005-02-04 Thread Paulo Alexandre Caceres Ferreira
Try compile and install the freeradius-1.0.1.tar.gz package in your Redhat 9 system. I use this version of freeradius to test cenarious whith yours R2 AP, and work whith PEAP and MS-CHAPv2 authentication. Regards caceres Schoggins, George wrote: Can anyone tell me where I can find binaries

Re: Attributes Remain Empty in radacct

2005-02-04 Thread Alan DeKok
zack musa [EMAIL PROTECTED] wrote: values like ... are still unavailable both in radacct and detail file. Fix the NAS. See the FAQ. Do we need to enable any scripts through some configuration file to write it in radacct or detail log files? There is nothing you can do to the server

Re: Help appreciated (accounting only data)

2005-02-04 Thread Alan DeKok
Johnny Chavez [EMAIL PROTECTED] wrote: Hello I am new to this list and I wondering if a topic has been touched on yet or if anyone can help with a question. Has anyone setup radiator Huh? You are subscribed to the wrong list. Thank you for your help on this topic. If I am missing

Re: question about upgrading from 0.9.3 to 1.0.1

2005-02-04 Thread Alan DeKok
Joe Meslovich [EMAIL PROTECTED] wrote: What should my entry look like in the users file to get this to authenticate. When I tried running 1.0.1 last night I was getting an error about Auth-Type of EAP being an unknown Auth-Type. Hmm... be sure that 1.0.1 is using the dictionaries from 1.0.1,

Re: MSCHAP V2 local

2005-02-04 Thread Alan DeKok
DeYoung, Brandon [EMAIL PROTECTED] wrote: I've tried this and a few other things in the users file. test Auth-Type = Local, Password = testing Don't set Auth-Type. Authentication against the AD backend works from my clients with mschap v2. But my local users still don't work when sent

Firewall Issue

2005-02-04 Thread Leon
Just installed FreeRadius 1.0.1 on Redhat FC2. Trying to authenicate thru firwalls on client and Server side. I can authenicate inside the server firewall with out problem. I can authenicate outside the server firewall from a dialup account. So no firewall there. When I try to authenicate from

high cpu

2005-02-04 Thread Daniel J McDonald
I have an instance of freeradius 1.0.0 that is consuming 60-100% of a cpu (I have a two-processor box, so I can watch it do this). I am using ldap for the backend database. clients.conf has about 160 devices in it, but this is the secondary box, and there are only a few of us who use the radius

database/ldap for configuration?

2005-02-04 Thread Daniel J McDonald
I use freeradius to manage administrative sessions on a large number of routers and switches. For redundancy, I have two boxes. I'd like to use some sort of a database or directory to configure all of the clients devices rather than the flatfile clients.conf. Is that on the roadmap anywhere?

Re: Firewall Issue

2005-02-04 Thread Alan DeKok
Leon [EMAIL PROTECTED] wrote: Trying to authenicate thru firwalls on client and Server side. I can authenicate inside the server firewall with out problem. I can authenicate outside the server firewall from a dialup account. So no firewall there. When I try to authenicate from inside my

Re: database/ldap for configuration?

2005-02-04 Thread Michael Mitchell
There is currently support to read the clients from the sql module. In addition, I've been working on the same for LDAP... just waiting on some feedback from Kostas regarding the draft patch I submitted a week or so ago to the freeradius-devel list... so it should be coming... regards, Mike

Re: high cpu

2005-02-04 Thread Daniel J McDonald
On Fri, 2005-02-04 at 14:42 -0600, Daniel J McDonald wrote: I have an instance of freeradius 1.0.0 that is consuming 60-100% of a cpu (I have a two-processor box, so I can watch it do this). I am using ldap for the backend database. Following up to myself, I just compiled 1.0.1 and had the

Disabling radwtmp/radutmp For Some Clients

2005-02-04 Thread A. Clausen
I was wondering if there was a way I could disable writing to radutmp and radwtmp for some clients, or whether this is an all or nothing proposition. -- A. Clausen [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: high cpu

2005-02-04 Thread Alan DeKok
Daniel J McDonald [EMAIL PROTECTED] wrote: Following up to myself, I just compiled 1.0.1 and had the same issues - 97% cpu and does not send the authentication response, radiusd -X generates a segmentation fault. That's very weird. I've never seen that myself... I changed radiusd.conf to

Re: high cpu

2005-02-04 Thread Daniel J McDonald
On Fri, 2005-02-04 at 18:15 -0500, Alan DeKok wrote: Daniel J McDonald [EMAIL PROTECTED] wrote: Following up to myself, I just compiled 1.0.1 and had the same issues - 97% cpu and does not send the authentication response, radiusd -X generates a segmentation fault. That's very weird.

RE: Firewall Issue

2005-02-04 Thread Leon
I was finally able to track down the problem using the debug setting on the RADIUS server. Apparently, while the server receives requests for authenication on port 1812 it sends the accept message on port 1036. Once I had my ISP pipe that thru the client worked GREAT!. Anybody know what the

Re: high cpu

2005-02-04 Thread Alan DeKok
Daniel J McDonald [EMAIL PROTECTED] wrote: Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 1076829024 (LWP 17140)] 0x40079e54 in pthread_mutex_lock () from /lib/tls/libpthread.so.0 (gdb) bt #0 0x40079e54 in pthread_mutex_lock () from /lib/tls/libpthread.so.0 #1

Re: Firewall Issue

2005-02-04 Thread Alan DeKok
Leon [EMAIL PROTECTED] wrote: I was finally able to track down the problem using the debug setting on the RADIUS server. Apparently, while the server receives requests for authenication on port 1812 it sends the accept message on port 1036. Uh, no. FreeRADIUS doesn't do that. Anybody

Re: high cpu

2005-02-04 Thread Michael Griego
Try running with LD_ASSUME_KERNEL=2.4.19. This will force runtime linking against the standard libc libs instead of the thread-local storage (tls) libs. So, on the command line, run LD_ASSUME_KERNEL=2.4.19 radiusd -X and see if that segfaults. --Mike Alan DeKok wrote: Daniel J McDonald

Re: Problem in Accounting Port

2005-02-04 Thread Michael Mitchell
Your client is sending accounting packets to the port on which freeRADIUS is listening for proxy responses. Configure the client to send accounting packets to the correct port (probably 1646), and you should be good... Emman S. Loloy wrote: Hi guys, anyone knows how to solve this problem? Sat

Postgresql Authentication How to

2005-02-04 Thread M.V. Jaga Mohan
Hi All, I am using Freeradius 0.9.1. How to configure Freeradius to do authentication using Postgresql database. I have a running database. I have included Postgresql.conf file in radiusd.conf file. But exactly how to configure radiusd.conf and postgresql.conf file so that it will do the