Re: EAP-TLS: check_cert_cn dows not work?

2005-03-06 Thread Manuel Schmitz
Thank you for your answers, Mike. Manuel Schmitz wrote: Can I re-enable certs as well (with CRLs)? It *can* be done, but it's generally not advised. If you need to temporarily disable a client, then the more appropriate way would be an explicit deny for that username in the users file

Re: Called-Station-Id value??

2005-03-06 Thread Alan DeKok
Abdul Lateef [EMAIL PROTECTED] wrote: Already i read the both files (variables.txt,Exec-Program-Wait) but i did not found any information about how to retrive the value of Called-Station-Id in perl file. Those documents describe how RADIUS attributes are put into environment variables. The

Re: more detailed sql logging

2005-03-06 Thread Alan DeKok
Kris Efland [EMAIL PROTECTED] wrote: Clearly... As I said in my first email. There are no insert statements that coincide to what I am looking for and thus my original question about crafting my own sql statements. It's not just a matter of crafting your own SQL statements. The module is

Re: radsqlrelay for 1.0.2

2005-03-06 Thread Nicolas Baradakis
Bart Van Daal wrote: Nicolas I'm currently using your radsqlrelay.c with the 1.0.2 release and I've patched the makefile. I'm very new to this whole patching and code-hacking thing. I'm getting the following error message while making radsqlrelay: thanks for any pointers how to compile

Re: radsqlrelay for 1.0.2

2005-03-06 Thread Nicolas Baradakis
Bart Van Daal wrote: is it possible to build it against the 1.0.2 tree or am I stuck with the cvs version. The libraries differ from the cvs version and the 1.0.2 version. Yes, it is possible. As reported in the mailing list, I'm building radsqlrelay in the 1.0.2 source tree. And Roy is doing

Re: From Called-Station-ID Get Country Code??

2005-03-06 Thread Sebastian Wild
Abdul Lateef wrote: Hi, I have one mySQL table contains Code, Country Name I want to get the code using Called-Station-ID matching with mySQL country list table using the perl file. If anyone can give me a little example really it will be great for me. Thank You

radsqlrelay questions

2005-03-06 Thread j . dostal
hi all, i've tested radsqlrelay for moving big acct-logs (detail-file) into my database - and have read the comments about the code: 1. is it possibile to (log-)rotate the detail-file - when radsqlrelay is running - and read it ? 2. i've read about the .work file - but couldn't see it. will it

Re: radsqlrelay questions

2005-03-06 Thread Kostas Kalevras
On Sun, 6 Mar 2005 [EMAIL PROTECTED] wrote: hi all, i've tested radsqlrelay for moving big acct-logs (detail-file) into my database - and have read the comments about the code: 1. is it possibile to (log-)rotate the detail-file - when radsqlrelay is running - and read it ? Why? The idea is that

LDAP Profiles

2005-03-06 Thread Jarred Cleem
Hello all; I am tying to put together an openLDAP/FreeRadius implementation for a multitude of services we provide. We are currently providing high speed cable modem services, local dial-up, national dial-up, Motorola Canopy Wireless, DSL, ISDN, extended Ethernet, Ethernet over power and a few

Re: LDAP Profiles

2005-03-06 Thread Kostas Kalevras
On Sun, 6 Mar 2005, Jarred Cleem wrote: Hello all; I am tying to put together an openLDAP/FreeRadius implementation for a multitude of services we provide. We are currently providing high speed cable modem services, local dial-up, national dial-up, Motorola Canopy Wireless, DSL, ISDN, extended

Frame-IP-Address in SQL?

2005-03-06 Thread Chan Min Wai
Greeting, I've the freeradius, ippool with mysql running however in the database this fields is always blank. Is that my configuration problem or there is some special requirement to get this working? I'm using the default sql.conf came with freeradius. Anyone have any idea? Regards,

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Alan DeKok
Chan Min Wai [EMAIL PROTECTED] wrote: I've the freeradius, ippool with mysql running however in the database this fields is always blank. WHAT fields? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius logging lots of duplicates?

2005-03-06 Thread Alan DeKok
Scott Baker [EMAIL PROTECTED] wrote: So I'm guessing it's never hearing back I got your Accounting packet even though the server is logging it. Do the accounting packets require an acknowledge? Yes. If the NAS doesn't like the ACK (wrong source IP, etc), it will ignore it, and send

Re: more detailed sql logging

2005-03-06 Thread Kris Efland
Score! Exactly the information I needed. Thank you. For clarification,sinceI havent written a module before...For example: If i had the following block in radiusd.conf post-auth{ Post-Auth-Type REJECT { log_rejected_users } } In the modules block in radiusd.conf... Can I enter raw sql syntax

Password entry in dialup admin

2005-03-06 Thread zack musa
Hi. When I entering the value for some user, with the admin.conf set to crypt, the value inserted in the db are encrypted. So when that new user try to login to the network, he get deny access message. so how can the ecryption can be a help avoiding the data to be exposed,at the same time

freeradius + pptp

2005-03-06 Thread Mervyn Yeo
hi everyone, Firstly, radiusd: FreeRADIUS Version 1.0.2, for host , built on Mar 3 2005 at 08:50:02 Not sure if these will help, rpm -qa|grep pp kernel_ppp_mppe-0.0.5-2dkms pptpd-1.2.1-1 ppp-2.4.3-4.rhel3 I'm testing by connecting from XP and part of what appears in /var/log/messages is this:

Re: freeradius + pptp

2005-03-06 Thread Mervyn Yeo
Perhaps I should include this information as well, from radiusd -X rad_recv: Access-Request packet from host 127.0.0.1:32769, id=175, length=64 Service-Type = Framed-User Framed-Protocol = PPP User-Name = root Calling-Station-Id = 172.168.0.53 NAS-IP-Address =

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Chan Min Wai
Alan DeKok wrote: Chan Min Wai [EMAIL PROTECTED] wrote: I've the freeradius, ippool with mysql running however in the database this fields is always blank. WHAT fields? Frame-IP-Address (this is more important) NASPortType (I've sure the request have this) CalledStationId

Checking user accounts

2005-03-06 Thread Janakan Rajendran
Hello everyone, I have a wireless network in which access points are getting authenticated by freeradius running on solaris box. I want to add user authentication and thinking of having a mysql database for that. But for time being, Im thinking of using users file for couple of users.

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Alan DeKok
Chan Min Wai [EMAIL PROTECTED] wrote: ... These are the fields that have no information at all. Please read the FAQ. The server can only log what the NAS sends. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius + pptp

2005-03-06 Thread Alan DeKok
Mervyn Yeo [EMAIL PROTECTED] wrote: This appears after I've included plugin radius.so in my /etc/ppp/options.pptpd. Can someone give me some clues on rc_avpair_new: unknown attribute 11 and 25? Read the dictionary file for the names of attributes 11 and 25. As for why pptpd doesn't

Re: Frame-IP-Address in SQL?

2005-03-06 Thread Chan Min Wai
Alan DeKok wrote: Chan Min Wai [EMAIL PROTECTED] wrote: ... These are the fields that have no information at all. Please read the FAQ. The server can only log what the NAS sends. Alan DeKok. What about the info that provided by the freeradius? When we are using ippool which meant

Duplicate Accounting logging desired

2005-03-06 Thread Stefan Winter
Hello, I'd like to log accounting packets on our local (proxying) FR-1.0.2 server but as well send them to the realm server that is configured for them in proxy.conf. That is, let A be an accounting packet that arrives at tour server. Then - log A locally (plain text detail-like file suffices)