Re: rlm_perl hash issue

2005-03-23 Thread Boian Jordanov
On Wed, Mar 23, 2005 at 05:13:14AM +0200, Chris Knipe wrote: Lo all, This has been to the perl mailing lists as well, there is nothing wrong with the code as far as every one knows... rlm_perl just doesn't like this for some reason Snipets of the script in question:

Re: rlm_perl hash issue

2005-03-23 Thread Chris Knipe
- Original Message - From: Boian Jordanov [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Wednesday, March 23, 2005 9:56 AM Subject: Re: rlm_perl hash issue On Wed, Mar 23, 2005 at 05:13:14AM +0200, Chris Knipe wrote: Lo all, This has been to the perl mailing lists as

Re: FreeRadius AND HP PC 2524 as a 802.1x autentificator

2005-03-23 Thread Andrew Bogorodsky
Alan DeKok wrote: Andrew Bogorodsky [EMAIL PROTECTED] wrote: mysql select * from radcheck; ++--+---++---+ | id | UserName | Attribute | op | Value | ++--+---++---+ | 2 | ab | CHAP-Password | := | 123 | Huh? What

Re: FreeRadius AND HP PC 2524 as a 802.1x autentificator

2005-03-23 Thread Andrew Bogorodsky
Alan DeKok wrote: Andrew Bogorodsky [EMAIL PROTECTED] wrote: mysql select * from radcheck; ++--+---++---+ | id | UserName | Attribute | op | Value | ++--+---++---+ | 2 | ab | CHAP-Password | := | 123 | Huh? What

radreply and radgroupreply

2005-03-23 Thread seehoe yee
Hie all, Could you all please enlighten me whether if radius would send both replies to the NAS? For instance: X user in group TEST radreply 1 test Reply-Message = Hello, there X! Whereas radgroupreply

multiple Ascend-Data-Filter profiles

2005-03-23 Thread Dan Bethe
Hi all! I have a freeradius 1.0.1 setup with PAM and Ascend-Data-Filter in production. I have configured /etc/raddb/users to include a DEFAULT section for all users and a user-specific section for the one-offs. I use Ascend-Data-Filter for the purpose of configuring packet filtering with

Re: multiple Ascend-Data-Filter profiles

2005-03-23 Thread Stefan Winter
Hello! The problem is that freeradius when one of my specified users authenticates, freeradius is sending the DEFAULT section and then the user-specific section. I want it to either send only the user-specific section and not the DEFAULT section, or else be able to clear the packet filter

Help with attr_rewrite/regexp

2005-03-23 Thread David Manchado
Hello, I'm trying to rewrite User-Name attribute with attr_rewrite with no success. What I want to do is to rewrite the username in the form [EMAIL PROTECTED] into [EMAIL PROTECTED] due to limitations on the provider (let's say each realm has a charge ;D) If the problem is the delimitator

Re: rlm_perl hash issue

2005-03-23 Thread Peter Nixon
On Wednesday 23 March 2005 09:18, Chris Knipe wrote: - Original Message - From: Chris Knipe [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Wednesday, March 23, 2005 5:31 AM Subject: Re: rlm_perl hash issue Chris Knipe [EMAIL PROTECTED] wrote: So basically:

Re: rlm_perl hash issue

2005-03-23 Thread Kenneth Grady
try putting them in perenthesis re: $RAD_REPLY{'Recv-Limit'} = ($BytesAvail - $BytesUsed); $RAD_REPLY{'Xmit-Limit'} = ($BytesAvail - $BytesUsed); The array may be adding the data in as a string. On Tue, 2005-03-22 at 20:13, Chris Knipe wrote: Lo all, This has been to the perl mailing lists as

Re: rlm_perl hash issue

2005-03-23 Thread Boian Jordanov
On Wed, Mar 23, 2005 at 01:48:43PM +0200, Peter Nixon wrote: On Wednesday 23 March 2005 09:18, Chris Knipe wrote: - Original Message - From: Chris Knipe [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Sent: Wednesday, March 23, 2005 5:31 AM Subject: Re: rlm_perl hash

HELPING !!!!

2005-03-23 Thread mambo judicael
I am a young engineer studying in data processing and networks. I would like to make a server freeradius under redhat Linux 9.0.I have a problem with my configuration. there are radiusd.conf and eap.conf. I use EAP/PEAP with MS-CHAP V2 and i want to test localy. I would appreciate any help or

cisco AV-Pairs

2005-03-23 Thread Schweizer Laurent
Hello I have a question about cisco AV-Pairs and I see many mails about this but now solutions: When I receive radius packet from the cisco gw I have some Cisco-AVPair attribute. h323-call-origin = h323-call-origin=answer h323-call-type = h323-call-type=VoIP Cisco-AVPair =

Re: rlm_perl hash issue

2005-03-23 Thread Chris Knipe
Eeeek. There is definitely a bug somewhere :-( Fixed in CVS. Please use recent cvs snapshot. Before rlm_perl expects that scalar value of RAD_xxx hash is character value, now it can be string or integer. There is only one limitation an ip address should be returned as character value i.e.

HELPING !!!!

2005-03-23 Thread mambo judicael
I get this errors: Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/radius/etc/raddb/clients.conf Config: including file: /usr/local/radius/etc/raddb/snmp.conf Config: including file: /usr/local/radius/etc/raddb/eap.conf

Re: server not starting (EAP-Type/tls: file not found) [was: HELPING !!!!]

2005-03-23 Thread Stefan Winter
Hello! rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = Password: gtc: auth_type = PAP rlm_eap: Loaded and initialized type gtc rlm_eap: Failed to link EAP-Type/tls: file not found radiusd.conf[9]: eap: Module instantiation failed.

WinXP SP1/wireless/FreeRADIUS

2005-03-23 Thread Tim Cross
Sorry if this has been asked before but I am looking for a simple guide to have a WinXP wireless client use FreeRADIUS with WPA. I already have FreeRADIUS up and authenticating against my Linux server's passwd files which is what I also want WinXP to use. All I need is for WinXP to

Re: rlm_perl hash issue

2005-03-23 Thread Alexander M. Pravking
On Wed, Mar 23, 2005 at 04:22:34PM +0200, Boian Jordanov wrote: Fixed in CVS. Please use recent cvs snapshot. Before rlm_perl expects that scalar value of RAD_xxx hash is character value, now it can be string or integer. There is only one limitation an ip address should be returned as

Re: radreply and radgroupreply

2005-03-23 Thread Alan DeKok
seehoe yee [EMAIL PROTECTED] wrote: Could you all please enlighten me whether if radius would send both replies to the NAS? Read doc/rlm_sql. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: HELPING !!!!

2005-03-23 Thread Alan DeKok
mambo judicael [EMAIL PROTECTED] wrote: I am a young engineer studying in data processing and networks. I would like to make a server freeradius under redhat Linux 9.0.I have a problem with my configuration. there are radiusd.conf and eap.conf. I use EAP/PEAP with MS-CHAP V2 and i want to test

Re: WinXP SP1/wireless/FreeRADIUS

2005-03-23 Thread Alan DeKok
Tim Cross [EMAIL PROTECTED] wrote: All I need is for WinXP to authenticate against freeradius using my Linux server's passwd file that way I can consolidate passwords. It's impossible. The security design of the protocols involved makes it impossible. You will need clear-text or

Re: WinXP SP1/wireless/FreeRADIUS

2005-03-23 Thread Tim Cross
So putting users in the users file will allow me to authenticate wireless XP clients using only a password (no certificates)? I realize it is unsecure... From: Alan DeKok [EMAIL PROTECTED] Reply-To: freeradius-users@lists.freeradius.org To: freeradius-users@lists.freeradius.org Subject: Re:

RE: WinXP SP1/wireless/FreeRADIUS

2005-03-23 Thread Guy Davies
If you use a 3rd party supplicant, you should be able to do EAP-TTLS/PAP and have the PAP authentication use the users file. You will be transmitting the password in the clear but it will be transmitted through an encrypted tunnel between your PC and the RADIUS server so, in effect, it's

Re: rlm_perl hash issue

2005-03-23 Thread Boian Jordanov
On Wed, Mar 23, 2005 at 07:42:20PM +0300, Alexander M. Pravking wrote: - if ((sv != NULL) (SvPOK(sv))) { - val = SvPV(sv, val_len); + if (SvTRUE(sv)) { + val = SvPV_nolen(sv); What if sv is 0 (or 0)? SvTRUE would fail, I think... SvLEN(sv) != 0

freeradius 1.0.1 and PAM/files

2005-03-23 Thread Dan Bethe
Hi all. I don't have a problem, but rather, a solution. I thought I'd let you know that to get freeradius working with PAM on older systems, you might have to make the /etc/shadow file readable by radiusd. For example, you could make a /etc/group entry called 'shadow' and do this: chown

NAS authentication without checking nasname field on nas table

2005-03-23 Thread Luca Lafranchi
Hi, to resolve the problem of the nas with dynamic ip (adsl), it's possible to authenticate the nas without checking nasname field (NAS-IP-Address) on nas table of radius ? Thank you Luca Lafranchi - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

counter by group

2005-03-23 Thread Mike Cisar
Just wondering if there's a way to set up a counter based on a user's (unix) group rather than their username? Essentially I have a user currently under the control of a counter based on which I limit him to 100 hours of connect time during the month. There are times when the user might be

help:why authentication always fails?

2005-03-23 Thread shenwei
i use freeradius + mysql.anthentication always fails, but i don't know why.pls help me ,thanx.follow is debugging information:rad_recv: Access-Request packet from host 192.168.3.120:23355, id=184, length=90 User-Name = "shenwei" CHAP-Password =

Windows XP(SP2) PEAP Authentication

2005-03-23 Thread chiam kuosiang
Hi, Ifail toauthenticate thewindows xp client. Can anybody help? Below are the related settings. In D-Link DWL-900AP+ Authentication= WPA WEP Encryption = 64bit Key Type = Hex For Compex Wireless-G USB Adapter Network Authentication = WPA Data Encryption = TKIP rad_recv: Access-Request packet