Error getting data from database

2005-07-22 Thread Nirmal
Hi, i have installed freeradius 1.0.4 on linux 7.3 with postgresql i m getting following error !! what could be the reason ? rad_recv: Access-Request packet from host 127.0.0.1:24001, id=138, length=114

Re: Error getting data from database

2005-07-22 Thread Oliver Graf
On Thu, Jul 21, 2005 at 11:34:17PM -0700, Nirmal wrote: Hi, i have installed freeradius 1.0.4 on linux 7.3 with postgresql i m getting following error !! what could be the reason ? rlm_sql: Failed to create the pair: Unknown attribute User-Password Perhaps that space at the end

Re: Error getting data from database

2005-07-22 Thread Nicolas Baradakis
Nirmal wrote: i have installed freeradius 1.0.4 on linux 7.3 with postgresql i m getting following error !! [...] rlm_sql: Failed to create the pair: Unknown attribute User-Password ^^ I guess FreeRADIUS complains

RE: Life Connect time

2005-07-22 Thread Abdul Lateef
Hi, Thank you for ur all replies. I contacted my nas producer and found that they have some account intrem update, which solved our problem. Thank YouYours,Abdul LateefComputer ProgrammerHATIF COMMob: +974 - 5405022Tel: +974 - 4883068ICQ: 276994704YM!: abdul_zuFax: +974 - 4883063Doha

Re: Multiple Root Contexts

2005-07-22 Thread Kolbjørn Barmen
On Wed, 20 Jul 2005, Mearl Danner wrote: Might try downloading this and reading. It's very helpful. http://www.novell.com/documentation/edir_radius/pdfdoc/radadmin/radadmin.pdf If that's 3 separate o= at the root of the tree, the this from the above document. Great, this also helps

AW: freeRadius CVS make install problem

2005-07-22 Thread Metz, Frederic
Hi, I tried it but there's another problem when I run make after configure --disable-shared: (It's an actual CVS up from this morning 9am) extracting global C symbols from `../modules/rlm_eap/types/rlm_eap_peap/.libs/rlm_eap_peap.a' extracting global C symbols from

freeradius and MySQL 4.1.12-1

2005-07-22 Thread d . wintgens
Hi, I have a Suse 9.2 server with the 64-bits 4.1.12-1 MySQL version (I need the MySQL 4.1 database for another applications). I want to have a radius server on this server. The freeradius-1.0.0-5.5.x86_64.rpm package is installed and the radius database is created and filled correctly. The

Re: Error getting data from database

2005-07-22 Thread Nirmal
Thanks for your help which file i should look into in order to remove this space ? NirmalOliver Graf [EMAIL PROTECTED] wrote: On Thu, Jul 21, 2005 at 11:34:17PM -0700, Nirmal wrote: Hi, i have installed freeradius 1.0.4 on linux 7.3 with postgresql i m getting following error !! what

Re: Error getting data from database

2005-07-22 Thread Oliver Graf
On Fri, Jul 22, 2005 at 04:32:56AM -0700, Nirmal wrote: Thanks for your help which file i should look into in order to remove this space ? It's in your SQL database. Oliver. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and MySQL 4.1.12-1

2005-07-22 Thread Nicolas Baradakis
Didier Wintgens wrote: How update the MySQL client version of freeradius to 4.1 protocol ? Don't use the RPM package and rebuild FreeRADIUS from source against MySQL 4.1 client library. -- Nicolas Baradakis - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Multiple Appearing of the same Attribute variables

2005-07-22 Thread Metz, Frederic
Hi, now I tried the actual CVS nightly snapshot of today, because of shared lib errors I disabled the rlm_eap module in Make.inc, I need the radius server in the first step only for accounting. Nevertheless, the %{Attribute[index]} didn't work. The field in the sql statement in debug mode is

Re: Debian and 'module eap returns noop for request'

2005-07-22 Thread Kris Benson
Kris Benson [EMAIL PROTECTED] wrote: I have self-compiled the EAP module on Debian due to the binary distribution restrictions, and the error I'm getting is: module eap returns noop for request [number] And what does the *rest* of the debug output say? Hi Alan, I was thinking I'd save

Re: rlm_ldap: Attribute User-Password is required forauthentication

2005-07-22 Thread Kris Benson
melvin [EMAIL PROTECTED] wrote: Sorry as I am not an expert in radius but if I do not set Auth-Type = LDAP how do I ensure that the authentication goes thru ldap. LDAP is an authentication server? That's news to me. All the users have their passwords stored in ldap and therefore I hope

LDAP and FreeRadius Authentication - One user, multiple groups

2005-07-22 Thread Mark Litchfield
Using: FreeRadius 1.0.4 OpenLDAP 2.2.27 FreeBSD 5.4 We are trying to get FreeBSD to allow a user to be a member in multiple groups. Here's roughly the way we have the tree laid out. dc: treeroot |_ou: accounts | |_ou: domain1 | | |_uid: joe | | mail: [EMAIL PROTECTED] |

Re: Possible? Same client with separate secrets for service separatio n?

2005-07-22 Thread Alan DeKok
Burrill, Jim [EMAIL PROTECTED] wrote: Is it possible to configure a cisco Pix with separate radius definitions and auth against Freeradius using separate secrets so you can separate to specific groups? That would be up to the PIX. We've attempted it and it seems to find the first client

Re: multiple peap authentication source?

2005-07-22 Thread Alan DeKok
[EMAIL PROTECTED] wrote: if freeradius can use both ntlm_auth and users file to authticate users, then everything is streight-forward. For guests, put the following in the users file: name User-Password := password, Use-NTLM-Auth := No And set up ntlm_auth for employees. It will

IPPools + Proxies

2005-07-22 Thread Joshua Coombs
I'm trying to use ippools defined within radius for users in a specific domain that I proxy auth for. On the main radius server I have: --- radiusd.conf: modules { ippool pool1 { name = pool1 range-start = 192.168.1.64 range-stop =

Re: AW: freeRadius CVS make install problem

2005-07-22 Thread Alan DeKok
Metz, Frederic [EMAIL PROTECTED] wrote: /home/fmetz/freeradius/src/lib/misc.c:75: warning: Using 'gethostbyaddr_r' in statically linked applications requires at runtime the shared libraries from the glibc version used for linking So install the static version of glibx with gethostbyaddr_r

Re: rlm_ldap: Attribute User-Password is required forauthentication

2005-07-22 Thread Alan DeKok
Kris Benson [EMAIL PROTECTED] wrote: Hi Alan, Melvin, LDAP does provide some authentication -- through the 'BIND' statement. Yes, I know that. But it's a hack, and it only works if the request contains a User-Password. Since many requests don't contain a User-Password, people who

Re: IPPools + Proxies

2005-07-22 Thread Alan DeKok
Joshua Coombs [EMAIL PROTECTED] wrote: attrs: test.net Pool-Name := pool1, Fall-Through := No Why are you using the attrs file instead of the users file? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: LDAP and FreeRadius Authentication - One user, multiple groups

2005-07-22 Thread Dusty Doris
On Fri, 22 Jul 2005, Mark Litchfield wrote: Using: FreeRadius 1.0.4 OpenLDAP 2.2.27 FreeBSD 5.4 We are trying to get FreeBSD to allow a user to be a member in multiple groups. Here's roughly the way we have the tree laid out. dc: treeroot |_ou: accounts | |_ou: domain1 |

Re: Debian and 'module eap returns noop for request'

2005-07-22 Thread Alan DeKok
Kris Benson [EMAIL PROTECTED] wrote: I was thinking I'd save you the trouble of wading through all that... but since you asked. :-) Ok... modcall: entering group authorize for request 2 modcall[authorize]: module preprocess returns ok for request 2 modcall[authorize]: module eap

IPTABLES

2005-07-22 Thread Shaun Rossi
Hello everyone, I'm new to FreeRadius, and I've been 'playing' with it for a few days. I am wondering what most people are using for the configuration of IPTABLES in etc/sysconfig/iptables using Fedora Core 3. I will likely post a few more items I am experiencing difficulty with

Re: multiple peap authentication source?

2005-07-22 Thread tbsky
hi: that's what i want. thanks a lot for your kindly help. and thanks for Stefan, i think you want to tell me the same thing. Best regards, tbsky [EMAIL PROTECTED] wrote: if freeradius can use both ntlm_auth and users file to authticate users, then everything is streight-forward.

IPTABLES - continued

2005-07-22 Thread Shaun Rossi
After posting, I realized I should have elaborated more. I would like to have this FreeRadius box on the Internet so a few of my NAS devices can access it no matter where they are. I understand port 1812 and 1813 udp must be opened. I am looking for some example IPTABLES (fedora core) entries

Re: IPTABLES - continued

2005-07-22 Thread Thor Spruyt
Shaun Rossi wrote: After posting, I realized I should have elaborated more. I would like to have this FreeRadius box on the Internet so a few of my NAS devices can access it no matter where they are. I understand port 1812 and 1813 udp must be opened. I am looking for some example