Re: Authentication problem with ntlm_auth

2005-04-14 Thread Sylvain Clerc
On 4/13/05, Alexandre Coninx [EMAIL PROTECTED] wrote: On Wed, Apr 13, 2005, Sylvain Clerc wrote: rlm_mschap: Told to do MS-CHAPv2 for radius with NT-Password radius_xlat: '/usr/bin/ntlm_auth --request-nt-key --username=radius' Exec-Program: /usr/bin/ntlm_auth --request-nt-key

rlm_tcl module

2005-04-14 Thread Alexei Chetroi
Hi, Is there rlm_tcl module available anywhere? -- Alexei Chetroi Smile... Tomorrow will be worse. (c) Murphy's Law - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS attributes

2005-04-14 Thread vicky
Hi Alan, Thanks for your answer but that is unfortunately not what I had hoped for. What I'm actually looking for is a way to retrieve the configured attributes of some one that is trying to connect to my freeRADIUS server. Is that possible? Best, Vicky Alan DeKok wrote: vicky [EMAIL

Authentication problem through radius.

2005-04-14 Thread Alex
Hi all. Hi Alan. I am trying to authenticate ser users through freeradius. I installed freeradius-1.0.2 radiusclient-4.8 It's seems like i don't sending the requests to radius,( I don't see anything on the radius logs). I checked the config files, it's looks correct. The goal is to authenticate

to match attributes in a request packet

2005-04-14 Thread Neptune Neptunchik
Hello all! For authentification VoIP users I want to use RRQ and ARQ messages auth via Freeradius via [RadAliasAuth] GnuGK feature. For RRQ auth I want to use Cisco-AVPair check attribute, for ARQ auth I want to use Calling-Station-Id check attribute. radcheck table:

Re: proxy reply attributes

2005-04-14 Thread Tiago Fernandes
On Wed, 2005-04-13 at 12:51 -0400, Alan DeKok wrote: Tiago Fernandes [EMAIL PROTECTED] wrote: I know that it's possible in freeradius to set attributes to a default value when a local freeradius is proxying an auth request (attr_filter). Ok... But what i want to do, is to prevent

RE: RADIUS attributes

2005-04-14 Thread Mitchell, Michael J
Hi Alan, Thanks for your answer but that is unfortunately not what I had hoped for. What I'm actually looking for is a way to retrieve the configured attributes of some one that is trying to connect to my freeRADIUS server. Is that possible? Configured where? Do you mean you want to see

Accounting without authorization?

2005-04-14 Thread Bram
/radius/radacct/127.0.0.1/detail-20050414' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/127.0.0.1/detail-20050414 modcall[accounting]: module detail returns ok for request 3 modcall[accounting]: module unix returns ok

Re: Authentication via Scripting

2005-04-14 Thread Roman Medina-Heigl Hernandez
Hello, I've been testing Exec-Program(-Wait) but I don't get it to work. My goal is to authenticate via external perl script (I want to test this method first, and then I'll try the rlm_perl module). * My users file: pepeAuth-Type:= Local, User-Password == manolo DEFAULT Exec-Program-Wait =

RE: Accounting without authorization?

2005-04-14 Thread Mitchell, Michael J
The radius server can process accounting without processing authentication (and vice versa), there is nothing wrong with that... Simplistically, if you want to use the Simulatenous-Use features built into freeRADIUS, then yes the server must process RADIUS authentication and accounting streams.

Re: Cisco WDS, WLSE and FreeRADIUS (SOLUTION!)

2005-04-14 Thread Martin Hamilton
On Thu, Apr 14, 2005 at 12:23:04AM +0200, Holger Steppke wrote: | do you know if this is fixed in the wlse in the meantime ? I'm running 2.9 on the eval unit, but 2.9.1a doesn't mention anything like this in the release notes that I could see. Raise a TAC case if it's still not working for

Re: RADIUS attributes

2005-04-14 Thread vicky
Mitchell (and all the rest), Thanks for your answer but what I meant was : Of all freeRADIUS attributes that exists, I want to know exactly witch once the client (the one on the other side who is trying to connect to my server) has set (configured) and to which value. Is this feasible? Thanks

Re: RADIUS attributes

2005-04-14 Thread vicky
Exactly, what I meant by client is NAS not PC. You are not the one confused, it is more likely that I'm speaking gibberish. If my server receives the (all!) attributes from any NAS in the request then problem solved. But, the request piece in the debugger is so small, I had a doubt that I

Determine modem utilization?

2005-04-14 Thread Carl Davis
Is there a program that will analyze out mysql accounting logs and give us an idea if we are peaking out anywhere and need to consider order another 24 channels? Carl - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Determine modem utilization?

2005-04-14 Thread Matthew Crocker
Why don't use use MRTG/RRDTOOL and poll the modem pool with SNMP? (www.mrtg.org, www.rrdtool.org) -Matt On Apr 14, 2005, at 8:19 AM, Carl Davis wrote: Is there a program that will analyze out mysql accounting logs and give us an idea if we are peaking out anywhere and need to consider order

SNMP with net-snmp

2005-04-14 Thread Hoppál Felicián
Hello, I'm new to freeradius (and this list) but not to radius servers. I've just compiled freeradius (--with-snmp=yes), and i'm trying to enable SNMP support (Red Hat AS4). It compiles without any errors. my snmpd.conf: smuxpeer .1.3.6.1.4.1.3317.1.3.1 secret raddb/radiusd.conf: snmp = yes

Re: Post-Proxy-Type + rlm_rewrite + rlm_ippool does not work

2005-04-14 Thread Pasi Kärkkäinen
On Thu, Apr 14, 2005 at 05:19:46PM +0300, Pasi Kärkkäinen wrote: On Tue, Apr 12, 2005 at 06:07:02PM -0400, Alan DeKok wrote: Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= [EMAIL PROTECTED] wrote: If I'm trying to do something that won't work, please tell me.. :) I have no idea why you're using

RE: mssql

2005-04-14 Thread Lucas Aimaretto
rlm_sql (sql): Driver rlm_sql_unixodbc (module rlm_sql_unixodbc) loaded and linked rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:1433/radius You have that use the name of de pc no the ip rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:1433/radius Thanx for

Re: SNMP with net-snmp

2005-04-14 Thread Kevin Bonner
On Thursday 14 April 2005 09:33, Hoppál Felicián wrote: I've just compiled freeradius (--with-snmp=yes), and i'm trying to enable SNMP support (Red Hat AS4). It compiles without any errors. Do you have the net-snmp-devel RPM installed? Kevin Bonner pgplztesgkwc9.pgp Description: PGP

Re: Authentication problem with ntlm_auth

2005-04-14 Thread Alan DeKok
Sylvain Clerc [EMAIL PROTECTED] wrote: My real problem is here. I think the username and the password are ok for Active Directory ( Exec-Program output: NT_STATUS_OK: Success (0x0) ) but I don't understand why the rlm_mschap expects a NT_KEY. It is required for the module to finish the

Re: rlm_tcl module

2005-04-14 Thread Alan DeKok
Alexei Chetroi [EMAIL PROTECTED] wrote: Is there rlm_tcl module available anywhere? No. I'm not sure I'd want to include one, even if it existed. Try rlm_perl or rlm_python. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: proxy reply attributes

2005-04-14 Thread Alan DeKok
Tiago Fernandes [EMAIL PROTECTED] wrote: what i want to know, is if it's possible to configure the freeradius in que proxied servers to only send necessary attributes in replies, even if que attr_filter is configured in the server that is going do send back only allowed attributes. That's

Re: Authentication via Scripting

2005-04-14 Thread Alan DeKok
Roman Medina-Heigl Hernandez [EMAIL PROTECTED] wrote: I've been testing Exec-Program(-Wait) but I don't get it to work. My goal is to authenticate via external perl script (I want to test this method first, and then I'll try the rlm_perl module). ... DEFAULT Exec-Program-Wait =

Re: RADIUS attributes

2005-04-14 Thread Alan DeKok
vicky [EMAIL PROTECTED] wrote: You are not the one confused, it is more likely that I'm speaking gibberish. Describing exactly what you see, and what you want would help a lot. If you describe your problem in only one sentence, then most people have no idea what you mean. And using phrases

Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Brian Gao
Title: Freeradius with postgresql (Login incorrect) Hi, all I am trying to configure postgresql 7.4 as a backend of freeradius server. After I run radtest radius radius 47.135.23.217 1812 testing123 The debug file shows: rad_recv: Access-Request packet from host 47.135.123.217:32782,

Problem with authenticate module, Had sent TLV failure and MSCHAP-response

2005-04-14 Thread Félicien TALLA
authorize for request 7 modcall[authorize]: module preprocess returns ok for request 7 radius_xlat: '/var/log/radacct/192.168.0.253/auth-detail-20050414' rlm_detail: /var/log/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radacct/192.168.0.253/auth-detail-20050414 modcall[authorize

Re: Problem with authenticate module, Had sent TLV failure and MSCHAP-response

2005-04-14 Thread Alan DeKok
=?ISO-8859-1?Q?F=E9licien_TALLA?= [EMAIL PROTECTED] wrote: I tring to set up freeradius with mysql using EAP PEAP on FreeBSD. I have the message Had sent TLV failure I noticed there is already a subject concerning my problem but it didn't help. Read the REST of the debug log. It's telling

Re: Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Alan DeKok
Brian Gao [EMAIL PROTECTED] wrote: Login incorrect: [radius/radius] (from client 47.135.123.0 port 1812) So... the password is wrong. This looks to me like the connection is established already, the error that is being thrown looks like it is coming from the PostgreSQL. No. It's coming

Re: Freeradius with postgresql (Login incorrect)

2005-04-14 Thread Thor Spruyt
Title: Freeradius with postgresql (Login incorrect) Please send mail in PLAIN TEXT! I don't know where YOU see an error message, but I don't see any. I would suggest turning SQL traces on (see postgresql.conf) --Groeten, Regards, Salutations, Thor SpruytM: +32 (0)475 67 22 65E: [EMAIL

Re: SNMP with net-snmp

2005-04-14 Thread Kevin Bonner
On Thursday 14 April 2005 12:05, Hoppál Felicián wrote: On Thu, 14 Apr 2005, Kevin Bonner wrote: Do you have the net-snmp-devel RPM installed? yes Any messages during the build about snmp? Check the config.log file, or the output from configure. Your debug messages not showing up might

Strange problems

2005-04-14 Thread Alex
Hi guys thanks for any help, i got a lot of useful information from this list. I will try to explain my problem. i have 2 linux servers : 1- server Red Hat Linux release 9 ser + freeradius 0.9.3 + radius client 2-server Red Hat Enterprise Linux AS release 3 ser + freeradius 1.2 + radius client

Regarding pppd with pam authentication and pptpd

2005-04-14 Thread Bob Mancker
I am currently working on a vpn server, and I use pptpd with pppd and trying to get pam working. I want to setup pam authentication because I want to limit simulatenous logins per user to 1. [root box pam.d]# pptpd --version Poptop v1.2.1 pppd version 2.4.3 /etc/pam.d/ppp contains: #%PAM-1.0

Attribute User-Password is required for authentication.

2005-04-14 Thread Bob Mancker
I am currently working on a vpn server, and I use pptpd with freeradius and trying to get pam authentication working. I want to setup freeradius with pam authentication because I want to limit simulatenous logins per user to 1. The two odd things I notice are this in /var/log/messages: Apr 15