Re: regexp and Group

2005-11-04 Thread pepe lopez
Sorry fot using html it was not my intention, hope this is pain text !! Hi! I am using the 1.0.5 freeradius version. radiusd -v radiusd: FreeRADIUS Version 1.0.5, for host , built on Nov 1 2005 at 16:22:00 Copyright (C) 2000-2003 The FreeRADIUS server project. There is NO warranty; not

Newbie question re. dictionary files.

2005-11-04 Thread Mark Tunnell
I'm using FreeRADIUS 1.0.5. to authenticate admin logins to a NetScreen5. I'm able to authenticate accounts just fine. Now I'd like to begin pulling administrative privileges from the Radius server, but I haven't figured out how to do that. I've referenced the dictionary.netscreen file in

Re: Newbie question re. dictionary files.

2005-11-04 Thread Alan DeKok
Mark Tunnell [EMAIL PROTECTED] wrote: I've referenced the dictionary.netscreen file in my clients.conf file, nastype = netscreen, That isn't necessary. I've tried various permutations like: markt Auth-Type := Local, User=Password == testing NS-Admin-Privilege = Read-Only-Admin

Proxying based on AVPair (multiple SSIDs)

2005-11-04 Thread Jason Carr
I'm running multiple access points with multiple SSIDs on each access point. We have some groups that want to run their own RADIUS authentication, and we need to proxy their requests. Cisco access points have radius servers configured only by device not by SSID, so I need another way to figure

RE: Newbie question re. dictionary files.

2005-11-04 Thread Bohannan, Chad W
Try changing NS-Admin-Privilege = Read-Only-Admin To NS-Admin-Privilege = 1 Chad -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Mark Tunnell Sent: Friday, November 04, 2005 1:23 PM To: freeradius-users@lists.freeradius.org Subject: Newbie question

Re: Newbie question re. dictionary files.

2005-11-04 Thread Mark Tunnell
Can you show the debug output, as suggested in the README, INSTALL, and FAQ? Alan DeKok. Here's the debug from the Radius server: Ready to process requests. rad_recv: Access-Request packet from host 172.17.200.13:2913, id=16, length=51 User-Name = markt User-Password =

Re: Newbie question re. dictionary files.

2005-11-04 Thread Alan DeKok
Mark Tunnell [EMAIL PROTECTED] wrote: Here's the debug from the Radius server: Ready to process requests. rad_recv: Access-Request packet from host 172.17.200.13:2913, id=16, length=51 User-Name = markt User-Password = testing NAS-IP-Address = 172.17.200.13

Re: Proxying based on AVPair (multiple SSIDs)

2005-11-04 Thread Alan DeKok
Jason Carr [EMAIL PROTECTED] wrote: I'm running multiple access points with multiple SSIDs on each access point. We have some groups that want to run their own RADIUS authentication, and we need to proxy their requests. Cisco access points have radius servers configured only by device not by

Re: Problem with EAP/TLS and XP SP2

2005-11-04 Thread Hal Pomeranz
Is there anybody on the mailing list who has Freeradius working as an EAP/TLS authentication server for Windows XP SP2 supplicants? What procedure did you use for creating and installing the server and client certs? -- Hal Pomeranz, Founder/CEO Deer Run Associates [EMAIL PROTECTED]

Re: Problem with EAP/TLS and XP SP2

2005-11-04 Thread Alan DeKok
Hal Pomeranz [EMAIL PROTECTED] wrote: Is there anybody on the mailing list who has Freeradius working as an EAP/TLS authentication server for Windows XP SP2 supplicants? Yes. What procedure did you use for creating and installing the server and client certs? See

Re: Newbie question re. dictionary files.

2005-11-04 Thread Mark Tunnell
Sorry, I was using an x instead of an X. Here's the full debug: [EMAIL PROTECTED] ~]# radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf

RE: Newbie question re. dictionary files.

2005-11-04 Thread Bohannan, Chad W
I'm using FreeRADIUS 1.0.5. to authenticate admin logins to a NetScreen5. I'm able to authenticate accounts just fine. Now I'd like to begin pulling administrative privileges from the Radius server, but I haven't figured out how to do that. I've referenced the dictionary.netscreen file in

Re: Newbie question re. dictionary files.

2005-11-04 Thread Alan DeKok
Mark Tunnell [EMAIL PROTECTED] wrote: users: Matched entry markt at line 2 So, what is that entry? If it's one of the ones you posted earlier, it should send back the attributes you've configured. At least, it does so in my configuration. Are you sure you're using the same names

Re: Proxying based on AVPair (multiple SSIDs)

2005-11-04 Thread Jason Carr
Calling-Station-Id has the MAC address of the access point's SSID which I'd have to collect the list of MACs, too many to filter on. I like the second method but I'm not seeing any documentation on matching based on regular expressions with AVP's. Can you point to a config file that I should be

RE: Attribute Value length using SQL

2005-11-04 Thread Gunther
I actually changed the MAX_STRING_LEN size from 254 to 762 in include/libradius.h and it seems to work. No, it doesn't work ... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with EAP/TLS and XP SP2

2005-11-04 Thread Hal Pomeranz
See the scripts directory that comes with FreeRADIUS. There's a CA.certs script which tries to create sample certificates. It turns out that this was the pointer I needed. Note that the CA.certs script is a little broken, but it's broken in obvious ways that are easily fixed. A fixed version

Re: FreeBSD anyone?

2005-11-04 Thread Dusty Doris
Hi, im running freeradius 1.0.5 + postgres 8.0.3 on a dual xeon, gentoo 2005.1, all is working ok, but i have another server with the same hardware specs that i recently upgraded from gentoo to freebsd 5.3, the server was running apache + postgres and, wow , great diference, better