Multiple groups via hints file and rlm_sql

2005-03-24 Thread Fiederling, Daniel
Title: Multiple groups via hints file and rlm_sql Hi, I'm currently using freeradius 1.0.2 with a mysql database for authorization. Because I have multiple client applications I use the hints file to define groups based on Client-IP-Address: DEFAULT Client-IP-Address == a.b.c.d Group =

INFORMATION

2005-03-24 Thread mambo judicael
salut stefan, le module tls dans mon ficheir eap.conf est le suivant: tls { private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem certificate_file = ${raddbdir}/certs/cert-srv.pem CA_file = ${raddbdir}/certs/demoCA/cacert.pem dh_file =

passwd module problem

2005-03-24 Thread Zbigniew Zych
Hello, I have such a problem: 1. radiusd.conf passwd admins { filename = format = *User-Name:User-Password } passwd groups { filename = format = =Group-Name:*,User-Name } authorize { preprocess chap mschap eap groups

AW: Problem with FreeRADIUS, PPtP and CHAP-Authentication [Problem solved]

2005-03-24 Thread Christian Reiter
Hi! Alan DeKok wrote: I am not sure if everything is ok with the x86_64 Build of Fedora Core 3. Some apps are Seg-faulting without a reason. Then that would appear to be the problem. Now i have solved the Problem! I didn't use the radiusclient RPM from rpm.pbone.net. Instead i

Access-Reject not sent unless run without threads

2005-03-24 Thread dan doo
Hi, I'm running a Suse box and set up the new 1.0.2 freeradius server. Different parts bothered me: 1°. I couldn't compile it until I configured the --with-system-libtool switch. (The output of the compile log is at the end.) 2°. Everything went well, I was able to successfull set up the sql

Caller Id with PC400

2005-03-24 Thread Emman S. Loloy
Hi guys, anybody knows how to work the caller id feature of freeradius? I'm currently using Cyclades PC400 and portslave program. I would appreciate any help regarding to this matter. Thanks!!! Emman ** This message was sent through GLOBALink Webmail Service. If you are a

Basic logging problems

2005-03-24 Thread tonix (Antonio Nati)
I'm trying to setup a basic configuration, based on MySQL and unix, and I'ld like to keep logging on files. I'm actually using radtest, and I don't see any logging. MySQL is misconfigured, so it's ok not to have logging on MySQL, but I wonder how to have logging on file. Or does radtest just

Re: Basic logging problems

2005-03-24 Thread Alan DeKok
tonix (Antonio Nati) [EMAIL PROTECTED] wrote: Or does radtest just test autentication without bothering with accounting or other logging informations? Read the documentation for radtest. It answers your question. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Caller Id with PC400

2005-03-24 Thread Alan DeKok
Emman S. Loloy [EMAIL PROTECTED] wrote: anybody knows how to work the caller id feature of freeradius? What caller ID feature? If the NAS sends caller ID information, then the server can make decisions based on it. Otherwise, the server can't. Alan DeKok. - List

Re: passwd module problem

2005-03-24 Thread Alan DeKok
Zbigniew Zych [EMAIL PROTECTED] wrote: passwd groups { filename = format = =Group-Name:*,User-Name } The Group Group-Name attributes are for Unix groups. You CANNOT redefine them to be for your own groups. Please read man rlm_passwd, which explains this. Alan

Re: Multiple groups via hints file and rlm_sql

2005-03-24 Thread Alan DeKok
Fiederling, Daniel [EMAIL PROTECTED] wrote: I'm currently using freeradius 1.0.2 with a mysql database for authorization. Because I have multiple client applications I use the hints file to define groups based on Client-IP-Address: DEFAULT Client-IP-Address ==D a.b.c.d

Changing MySQL port

2005-03-24 Thread tonix (Antonio Nati)
I'm using an alternate port (13001) for MySQL, and I've added a port option in sql.conf (I've not found it in documentation, but it works and is in the code). server = localhost port = 13001 login = radius password = While normal mysql program works with

Problem using Freeradius and Mysql

2005-03-24 Thread Christoph Galuschka
Hello, I seem to be running in a little problem. I'm just setting up a second RADIUS server for backup purposes. Both machines use mysql, replication is done by mysql itself. The older machine runs 1.0.1, the new one should run 1.0.2. Bot machines are pretty much the same (same SuSE release,

Re: Help with attr_rewrite/regexp

2005-03-24 Thread Alan DeKok
David Manchado [EMAIL PROTECTED] wrote: I'm trying to rewrite User-Name attribute with attr_rewrite with no success. It's a bug in attr_rewrite. The CVS snapshot from tomorrow has the fix. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

LDAP Profiles

2005-03-24 Thread Jarred Cleem
Thanks for the reply Dustin! I believe what you describe will work just fine. Not sure how to ask my next question so I will try my best. We have some users who receive static IP addresses and other special attributes that are unique to only that user. Then we have some who receive the

Re: Multiple groups via hints file and rlm_sql

2005-03-24 Thread Fiederling, Daniel
Hi! Is there a suggested way to predefine groups in the hints file that are used by rlm_sql and matched to the groupname field? For now I solved the problem by using a group prefix (vpn* for e.f.g.h) and SELECTing by LIKE '%{Group}%%. I will change this attribute to another later. What would

Re: Multiple groups via hints file and rlm_sql

2005-03-24 Thread Alan DeKok
Fiederling, Daniel [EMAIL PROTECTED] wrote: Is there a suggested way to predefine groups in the hints file that are used by rlm_sql and matched to the groupname field? Read sql.conf. It uses the SQL-Group attribute to look for groups. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Trouble getting groups working in ldap

2005-03-24 Thread Douglas Sterner
using a Cisco 3005 concentrator I am using Radius / LDAP on Suse 9.0 ES. I am having trouble getting groups working. I would like to have a group in LDAP called vpn-users and be able to put the user in that group for Radius authentication. radius.conf ldap { server =