Re: Segfault while sending Access-Accept

2005-11-16 Thread Luca Corti
On Tue, 2005-11-15 at 11:54 -0800, Kristina Pfaff-Harris wrote: Luca, are you on a Linux/Unixish type system? If so, and if worst comes to Yes, I'm on Debian GNU/Linux. worst, you may be able to find it with: find / -name '*core*' -print Already tried to do a find, it lists quite a lot

Re: Setup freeradius for intranet desktop client

2005-11-16 Thread Brian A. Seklecki
On Tue, 2005-11-15 at 22:59, mahesh luhar wrote: Dear All, I have installed radius server Version 1.0.5 on linux 9. I would like to use feeradius server following usage. (1) Intranet desktop client authentication for internet access with limited no of ports as outgoing destination

RE: Ading NAS to MySQL DB

2005-11-16 Thread Santiago Balaguer García
I am very keen on knowing how I can replace my clients.conf file by a SQL query. From: "Alex M" [EMAIL PROTECTED]Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.orgTo: "'FreeRadius users mailing list'" freeradius-users@lists.freeradius.orgSubject: Ading NAS to MySQL

Pool-Name check item causes Access-Reject

2005-11-16 Thread Gerret Apelt
Hi List, My setup: Debian Sarge (2.6.8) Debian package freeradius-mysql 1.0.5-2 FreeRADIUS Version 1.0.5, for host , built on Oct 16 2005 at 11:56:56 I am successfully authentiating dialup users with Freeradius; the users live in a MySQL db. Their IP addresses are assigned by a Patton RAS's

RE: [radius] Re: Login incorrect- RAS autentication

2005-11-16 Thread Danny Zenzano
now I am using the user file, but I want to use the information of the database, but i dont know how. -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de Nick Marino Enviado el: miércoles, 16 de noviembre de 2005 0:51 Para: FreeRadius users mailing list Asunto:

client configuration with max6000

2005-11-16 Thread Danny Zenzano
i m working with the max6000-lucent and the freeradius 1.0.0-5 but in the client file i can see a list of NAS: # The nastype tells 'checkrad.pl' which NAS-specific method to # use to query the NAS for simultaneous use. # # Permitted NAS types are: # # cisco # computone # livingston # max40xx #

Re: [radius] client configuration with max6000

2005-11-16 Thread Nick Marino
- Original Message - From: Danny Zenzano [EMAIL PROTECTED] To: Freeradius-Users (E-mail) freeradius-users@lists.freeradius.org Sent: Wednesday, November 16, 2005 7:47 AM Subject: [radius] client configuration with max6000 i m working with the max6000-lucent and the freeradius

Re: Odd problem (FreeRadius 1.0.5 / MSSQL 2000 / Fedora Core 3)

2005-11-16 Thread Matt
For anyone else having this problem. We had to roll back our FREETDS install from 0.63 to 0.62.3. I'm not sure why the new version of FREETDS has an issue, but I know I was advised of this with asterisk as well. On 11/15/05, Matt [EMAIL PROTECTED] wrote: We have the exact same configuration

Re: Pool-Name check item causes Access-Reject

2005-11-16 Thread Dusty Doris
Following the docs, I have the files db.ipindex and db.ippol set up, and the main_pool is configured in radiusd.conf. user 'gerret' is the gunea pig with the following radcheck table entries: | 1354 | gerret | User-Password | == | testpw | | 1491 | gerret | Pool-Name | == | main_pool |

Re: Segfault while sending Access-Accept

2005-11-16 Thread Kristina Pfaff-Harris
On Wed, 16 Nov 2005, Luca Corti wrote: There is (or was) also an option in radiusd.conf that says allow_core_dumps = no. You may need to set this to yes, but I'm not sure that applies to debug mode. As I said I set allow_core_dumps to yes and tried running freeradius both in debugging

FreeRadius EAP-TLS issue

2005-11-16 Thread Hamid Salim
Hi, I am just wondering if anyone has encountered the same issue. I have set up my enviornment for EAP-TLS, with windows XP SP2 as a supplicant. For some reason I am getting: auth: Failed to validate the user. Login incorrect: [radiustst/no User-Password attribute] (from client testradius-ap-1

Re: FreeRadius EAP-TLS issue

2005-11-16 Thread Brian A. Seklecki
rlm_eap_tls: Received unexpected tunneled data after successful handshake. ...that's what I get when I try an invalid password in my EAP + Cisco 1200 + LDAP + PEAP/MS-CHAPv2 configuration. Let me ask...how is the client certificate method supposed to work? Is the username embeded the

Unique dictionary entries

2005-11-16 Thread Christopher Fowler
1. Radiusd version: [EMAIL PROTECTED] sbin]$ radiusd -v radiusd: RADIUS version 1.6.7 21-Jul-2003 Compilation flags: USE_SYSLOG ATTRIB_NMC COMPAT_1543 linux 2. Users File [EMAIL PROTECTED] sbin]$ cat /etc/raddb/users joe Ens-Auth-Type = user, Ens-Auth-Password = rad

Attribute question

2005-11-16 Thread Jorge Pomoro
Hi, is there an attribute for limit the numbers of connections of one user? and after the last connection no longer the user can connect thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius EAP-TLS issue

2005-11-16 Thread Brian A. Seklecki
If it was regular TLS, i'd tell you to openssl s_client -connect foo:123 -cacert /blah. Are you sure that you have imported and trusted your CA's cetificate on both the client and the server? This is when I let the other guys make suggestions. I was just curious of EAP-TLS with client

Re: FreeRadius EAP-TLS issue

2005-11-16 Thread Hamid Salim
I am not sure if I completly follow: If it was regular TLS, i'd tell you to openssl s_client -connect foo:123 -cacert /blah. Are you sure that you have imported and trusted your CA's cetificate on both the client and the server? But I used 'how to EAP/TLS' from the FreeRadius web site. It is

RE: FreeRadius EAP-TLS issue

2005-11-16 Thread Guy Davies
Hi Hamid, What CA did you use to create the client certs? If it was OpenSSL, did you ensure that you included the special attributes that the MS supplicant expects? There are a few HOWTO's around and they pretty much all reference this special value. If you used the M$ Certificate Services, it

Re: RE: FreeRadius EAP-TLS issue

2005-11-16 Thread Hamid Salim
I used OpenSSL, what are the special attributes that you mention? is it OID? Thanks. Hamid. Guy Davies wrote: Hi Hamid, What CA did you use to create the client certs? If it was OpenSSL, did you ensure that you included the special attributes that the MS supplicant expects? There are a

FR and Pgsql

2005-11-16 Thread Paul Khavkine
Hi Folks. I'm setting up FreeRADIUS with Postgres for accounting and there's one thing i can't seem to figure out. When a Start record gets written to radacct table, AcctStopTime is not being set to anything. The field is empty. Since AcctStopTime is of type timestamp with time zone it does not

generic x99 DES parity question

2005-11-16 Thread Greg Woods
I am still trying to get the rlm_x99_token to work. I am now testing with a SecureNet Key token (A generic in the x99passwd file). This token I know how to manually program, so I can guarantee that I know the DES key and have entered it properly in the x99passwd file. The user interface is, I

Help request on the EAP-TTLS V1 in freeradius

2005-11-16 Thread MCG ZHANG Yuna
Title: Help request on the EAP-TTLS V1 in freeradius Hello, Currently we try to use the freeradius to simulate AAA server in our lab, we had succeeded in using the EAP-TTLS V0 before. Now we want to introduce the EAP-TTLS V1 in the next step, but I didn't find any new information from the

Expired system passwords are still authenticating

2005-11-16 Thread Mark Tunnell
I've set up a Cisco router to authenticate against a freeradius server on a Linux box using the local system account. Everything looked great until I expired the password. If I log into that account on the Linux box it tells me the password has expired and I need to change it. However, if I

RE: Pool-Name check item causes Access-Reject

2005-11-16 Thread Dan Russell
Try putting the Pool-Name attribute in the radgroupcheck table. That's how I have it in mine and it works fine there. Daniel Russell Lead Technician In-House IT Services PH (03) 50210044 FX (03) 50210066 -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL

Re: FR and Pgsql - null acctstoptime

2005-11-16 Thread Humberto Diogenes
Paul, SELECT * FROM radacct WHERE acctstoptime IS NULL; On Wed, 16 Nov 2005 14:45:21 -0500 Paul Khavkine [EMAIL PROTECTED] wrote: (...) When a Start record gets written to radacct table, AcctStopTime is not being set to anything. The field is empty. Since AcctStopTime is of type