Problem with loading files from free radius

2005-11-09 Thread Eyas Sarabi
Hi All; I faced a major problem, My Hard disk was corrupted and the free radius wasnt being able to write to database, I still have the files generated by free radius and I want to load them to the database .Is there any tool that can load the generated files to oracle database ?

dialup_admin online users problems

2005-11-09 Thread Eric Tanguy
Hi, i use freeradius-1.0.1 with mysql on Fermi Linux LTS Release 3.0.1 and dialup_admin1.62 I have a problem in showing the online user in dialup_admin. when a user over ppp connect on NAS, it doesn't appear in user online because nothing is writing into the radacct table and i don't know

Failed attempts log

2005-11-09 Thread Thierry Hoferlin
Hi, I've configured afreeradius 1.0.5 with MSSQL authentification. It works fine. Is there a way to log failed authentification records to SQL ? For the moment i've just the accounting information logged to SQL. Thanks in advance Thierry H. - List info/subscribe/unsubscribe? See

Re: FreeBSD anyone?

2005-11-09 Thread christian meutes
Can you point me to the explanation, i cant find it? --On Wednesday, November 09, 2005 01:23:22 AM -0500 Alan DeKok [EMAIL PROTECTED] wrote: Dusty Doris [EMAIL PROTECTED] wrote: Our authentication structure is quite different as we are looking more for availability. But in the accounting

Freeradius .. EAP/PEAP ... no accounting

2005-11-09 Thread Simone
hi all.. I have installed a freeradius 1.0.5.. For my project i need to use it for authenticate and log (accounting) the wi-fi customer on an area of my city.. All is done ok.. the Hot-spot is configured for work with Radius using WPA - EAP using PEAP and radius.. Freeradius is configured with

Re: Freeradius .. EAP/PEAP ... no accounting

2005-11-09 Thread Damjan
DAMN !!! freeradius don't log the accounting and i don't find what is the problem.. all the config on radiusd.conf about auth and accounting seem to be ok.. First of all are you sure your access point sends accounting? -- damjan | дамјан This is my jabber ID -- [EMAIL PROTECTED] -- not my

RE: Freeradius .. EAP/PEAP ... no accounting

2005-11-09 Thread Guy Davies
Is your AP configured to send accounting information? Many don't do this by default. You will have to set it and tell it to use the same RADIUS server for accounting. Rgds, Guy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Simone Sent: 09 November

Re: Cisco AP Vlan assignment when proxying EAP-PEAP?

2005-11-09 Thread Josh Howlett
Hi Jezz, Do you have any cunning solutions to how you might get around the reject issue? I'd imagine it's quite a common scenario, IE wanting to let users know that they are doing something wrong as opposed to just rejecting them. Not really. FWIW, I think that a module that caught proxied

RE: Cisco AP Vlan assignment when proxying EAP-PEAP?

2005-11-09 Thread Guy Davies
You could do this on IOS based APs by creating multiple SSIDs. You can have a secured SSID that connects to your protected VLAN. Then, you could have an appropriately named SSID (NEWUSERSSTARTHERE ? :-) that is unencrypted and unauthenticated. It is associated with a walled garden VLAN with

Re: Proxy not sending out packets (was Re: Proxying a PEAP request to an IAS server)

2005-11-09 Thread Dan Newcombe
Alan DeKok wrote: Dan Newcombe [EMAIL PROTECTED] wrote: The short of it is I'm trying to get 802.1x with PEAP to be proxied by freeradius to an ias radius server. Start simple. Use PAP, and radtest to send the packets. If that makes FreeRADIUS proxy the packets, then go to PEAP.

Re: Proxy not sending out packets (was Re: Proxying a PEAP request to an IAS server)

2005-11-09 Thread Alan DeKok
Dan Newcombe [EMAIL PROTECTED] wrote: One thing I've noticed is on the non-PEAP packets, the src address of the packet going to the IAS box is 172.28.240.73, whereas on the PEAP packets, it is 127.0.0.1, That's bad. That's the source of the problem, then. I have *no* idea why that

Re: FreeBSD anyone?

2005-11-09 Thread Alan DeKok
christian meutes [EMAIL PROTECTED] wrote: Can you point me to the explanation, i cant find it? http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/man/man5/rlm_sql_log.5?rev=1.2content-type=text/x-cvsweb-markup Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Failed attempts log

2005-11-09 Thread Nicolas Baradakis
Thierry Hoferlin wrote: I've configured a freeradius 1.0.5 with MSSQL authentification. It works fine. Is there a way to log failed authentification records to SQL ? Please don't post HTML on the list. Search the archives for detailed instructions, but the general idea is to use the

Re: JRadius

2005-11-09 Thread Raoul Demour
Hello thanks for all the answers! Regarding EAP-SIM, JRadius has no specific support for it. What is it you are trying to do? What I have understood: FreeRADIUS is able to authenticate using EAP-SIM. But you need to set the attributes: EAP-SIM-Rand1 EAP-SIM-SRES1 EAP-SIM-KC1 EAP-SIM-Rand2

Re: Proxy not sending out packets (was Re: Proxying a PEAP request to an IAS server)

2005-11-09 Thread Dan Newcombe
Alan DeKok wrote: Dan Newcombe [EMAIL PROTECTED] wrote: One thing I've noticed is on the non-PEAP packets, the src address of the packet going to the IAS box is 172.28.240.73, whereas on the PEAP packets, it is 127.0.0.1, That's bad. That's the source of the problem, then. I

Re: Problem with loading files from free radius

2005-11-09 Thread Alan DeKok
Eyas Sarabi [EMAIL PROTECTED] wrote: I faced a major problem, My Hard disk was corrupted and the free radius wasn't being able to write to database, I still have the files generated by free radius and I want to load them to the database .Is there any tool that can load the generated files to

Re: simultaneous use, checkrad, and MPP attempts

2005-11-09 Thread Alan DeKok
Christopher Carver [EMAIL PROTECTED] wrote: The proxy'ing radius servers and NAS's of the other company from whom we lease equipment are unavailable to checkrad. By default shouldn't it be allowing these people on? It depends what you want. The current behavior is to disallow logins, as

Re: simultaneous use, checkrad, and MPP attempts

2005-11-09 Thread Kevin Bonner
On Wednesday 09 November 2005 00:35, Christopher Carver wrote: The proxy'ing radius servers and NAS's of the other company from whom we lease equipment are unavailable to checkrad. By default shouldn't it be allowing these people on? I looked at the code and it seemed as though it should. I

authenticate against bytes in and out with sqlcounter

2005-11-09 Thread Martin Potgieter
hello, I am using freeradius 1.0.5 and trying to get to a point where I can deny access to a user when he has used more than a specific amount of bandwidth in a month (from the 1st to the last day of the month). rlm_sqlcounter seems to be what I need. I have configured it as I think it

Problem with loading files from free radius

2005-11-09 Thread Eyas Sarabi
Hi All; I faced a major problem, My Hard disk was corrupted and the free radius wasnt being able to write to database, I still have the files generated by free radius and I want to load them to the database .Is there any tool that can load the generated files to oracle database ?

having filter-id sent on an eap response

2005-11-09 Thread Dan Newcombe
It's tired and I'm late or something like that :) Thanks to Alan's help, things are now resolving to the IAS server as mentioned in my previous posts and configs. The switches seem to be receiving the Access-Accept packets as they are marking the ports as authenticated with the correct user

Re: FreeBSD anyone?

2005-11-09 Thread Dusty Doris
Thanks for the advice. Didn't get a change to get good numbers for you today, but here is at least something. I took a look at our records for today and we have about 70,000 entries, with only 1500 of them without a stop yet. I can't get a good estimate at packets right now because I'm