Tacacs+ Support?

2005-07-25 Thread K. Suresh
Hi, How to implement Tacacs+ with freeRadius? The details available in the list looks older. Suresh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error getting data from database

2005-07-25 Thread Nirmal
Thanks oliver, there was problem in my database.. i am able to connect my user in new radius now. thanks :) NirmalOliver Graf [EMAIL PROTECTED] wrote: On Fri, Jul 22, 2005 at 04:32:56AM -0700, Nirmal wrote: Thanks for your help which file i should look into in order to remove this space

Re: edir + cert problem

2005-07-25 Thread garry crothers
Sayantan Bhowmick wrote: Hi, Make sure that the server name you specify in the LDAP module section matches with the CN in the certificate used by the eDirectory LDAP server. e.g if your LDAP server is using SSL CERT DNS, write the hostname as the server name. If you are using SSL CERT IP,

Defining whole networks for huntgroups matching!

2005-07-25 Thread Erling Paulsen
Hello. I'm using huntgroups to group our NAS-boxes, and I'm wondering if it is possible to designate whole networks ala. A.B.C.D/24 - instead of listing all boxes with multiple NAS-IP-Address statements? We have an awful lot of dot1x NAS'es (Cisco Switches), and they're all members of a

Re: Defining whole networks for huntgroups matching!

2005-07-25 Thread Oliver Graf
On Mon, Jul 25, 2005 at 01:36:19PM +0200, Erling Paulsen wrote: I'm using huntgroups to group our NAS-boxes, and I'm wondering if it is possible to designate whole networks ala. A.B.C.D/24 - instead of listing all boxes with multiple NAS-IP-Address statements? If you can write the network as

Re: Defining whole networks for huntgroups matching!

2005-07-25 Thread Michael Mitchell
Or you can just go: myhuntgroup NAS-IP-Address == A.B.C.* works just fine :) Mike Oliver Graf wrote: On Mon, Jul 25, 2005 at 01:36:19PM +0200, Erling Paulsen wrote: I'm using huntgroups to group our NAS-boxes, and I'm wondering if it is possible to designate whole networks ala.

Re: about adding new attributes

2005-07-25 Thread Ranjitsinh Wable
Dear Alan, Thanks for the details. I am bit new to this field so if I am asking very prelimnary questions then excuse me. If I understood the concept, the addition of the new attribute will have following steps. Correct me if I am wrong. 1) Include the vendor specific file in the main

Re: Defining whole networks for huntgroups matching!

2005-07-25 Thread Erling Paulsen
On Mon, Jul 25, 2005 at 10:39:19PM +1000,Michael Mitchell, The Induhvidual, scrabbled: Or you can just go: myhuntgroup NAS-IP-Address == A.B.C.* works just fine :) Mike Just what I needed. Thank you. - Erling -- |sig|--- [EMAIL PROTECTED] Nettseksjonen, ITavd UiT -

Re: Setting up freeradius to work with cisco aironet accesspoints in a custom environment

2005-07-25 Thread Mario Lipinski
Hello, thank you for your response. Alan DeKok schrieb: Mario Lipinski [EMAIL PROTECTED] wrote: And how to use it in the SQL template or configuration? The sample SQL configuration in sql.conf? I will have a closer look at this now. Maybe you could give me a hint how to configure

Tunnel-Password fails proxy: tunnel password is too long for the attribute

2005-07-25 Thread Tariq Rashid
when a backend radius server sends bakc the following tunnel attributes, the freeradius 1.0.2 fails the request with tunnel password is too long for the attribute( discovered by radiusd -X). Tunnel-Server-Endpoint = 1:82.111.96.178 Tunnel-Type = 1:L2TP Tunnel-Medium-Type

Re: Tacacs+ Support?

2005-07-25 Thread Alan DeKok
K. Suresh [EMAIL PROTECTED] wrote: How to implement Tacacs+ with freeRadius? The details available in the list looks older. Wait two weeks. I've been hearing rumors. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: about adding new attributes

2005-07-25 Thread Alan DeKok
Ranjitsinh Wable [EMAIL PROTECTED] wrote: I am bit new to this field so if I am asking very prelimnary questions then excuse me. Your questions are answered in the existing documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Setting up freeradius to work with cisco aironet accesspoints in a custom environment

2005-07-25 Thread Alan DeKok
Mario Lipinski [EMAIL PROTECTED] wrote: I will have a closer look at this now. Maybe you could give me a hint how to configure Freeradius to look for MAC Addresses and EAP authentication in different tables? The sql documentation included with FreeRADIUS should say how to configure it in

bug in translating Tunnel-Type inusers file?

2005-07-25 Thread Tariq Rashid
for the followiing profile .. the tunnel type is sent as value 1 not 3... [EMAIL PROTECTED] Password == 888, NAS-IP-Address == 1.2.3.4 Tunnel-Server-Endpoint := 1:3.4.5.6, Tunnel-Type := 1:L2TP, Tunnel-Medium-Type := 1:IP, Tunnel-Password := 1:***,

Re: bug in translating Tunnel-Type inusers file?

2005-07-25 Thread Alan DeKok
Tariq Rashid [EMAIL PROTECTED] wrote: for the followiing profile .. the tunnel type is sent as value 1 not 3... [EMAIL PROTECTED] Password == 888, NAS-IP-Address == 1.2.3.4 Tunnel-Server-Endpoint := 1:3.4.5.6, Tunnel-Type := 1:L2TP, The permitted tag formats are:

Re: Tunnel-Password fails proxy: tunnel password is too long for the attribute

2005-07-25 Thread Alan DeKok
Tariq Rashid [EMAIL PROTECTED] wrote: when a backend radius server sends bakc the following tunnel attributes, the freeradius 1.0.2 fails the request with tunnel password is too long for the attribute( discovered by radiusd -X). Ok... Tunnel-Password = 1:lab That's not the

Re: filter id stored in LDAP

2005-07-25 Thread chubbymidget
Do you know if FreeRADIUS support this? Sorry, I just noticed that gmail has me replying to you rather than the list. On 7/21/05, Dusty Doris [EMAIL PROTECTED] wrote: On Wed, 20 Jul 2005, sean wagoner wrote: Can the actual Filter ID be store in and retreived by the radius server. By this

Re: Multiple Appearing of the same Attribute variables

2005-07-25 Thread Alan DeKok
Metz, Frederic [EMAIL PROTECTED] wrote: now I tried the actual CVS nightly snapshot of today, because of shared lib errors I disabled the rlm_eap module in Make.inc, I need the radius server in the first step only for accounting. It's fixed in the CVS head. Alan DeKok. - List