Re: PEAP error with 1.1.0

2006-01-17 Thread Pierre-Henri Baraffe
Nicolas Baradakis a écrit : [EMAIL PROTECTED] wrote: I'm trying to get Freeradius 1.1.0 running on a Debian Sarge box. I compiled and built the deb packages from the tarball according to the FAQ instructions. [...] rlm_eap: Failed to link EAP-Type/peap: rlm_eap_peap.so: cannot open

Re: PEAP error with 1.1.0

2006-01-17 Thread Pierre-Henri Baraffe
Nicolas Baradakis a écrit : [EMAIL PROTECTED] wrote: I'm trying to get Freeradius 1.1.0 running on a Debian Sarge box. I compiled and built the deb packages from the tarball according to the FAQ instructions. [...] rlm_eap: Failed to link EAP-Type/peap: rlm_eap_peap.so: cannot open

Problem in sending PAP Authentication with radclient

2006-01-17 Thread Hamzeh Motahari
Hello We have set PAP scheme to MD5 in "radius.conf". Now we can't authenticate users using "radclient". When configuration changes from 'MD5' to 'Clear text', every thing is good. What should we do if we want send password using MD5 method? If "radclient" doesn't support this, can you suggest

Re: rlm_eap.so

2006-01-17 Thread Anton Gorlov
Nicolas Baradakis пишет: I don't see libeap.so in the output of ldd. Something is wrong here, because rlm_eap depends on libeap. You could try to re-build FreeRADIUS with ./configure --disable-shared. It is undesirable to use static libraries. I have found similar problem in the Internet:

Re: Debian + Exec-Program = Zombie process

2006-01-17 Thread Bjørn Mork
George Chelidze [EMAIL PROTECTED] writes: as soon as I send accounting stop packet to radius, test.pl executes and becomes a zombie. (I tried bash script, c program with the same result.) 3890 ?Ss 0:00 /usr/local/freeradius/sbin/radiusd 3893 ?Z 0:00 \_ [test.pl]

libeap.so

2006-01-17 Thread Anton Gorlov
Hm... Warning: Linking the executable radeapclient against the loadable module libeap.so is not portable! [EMAIL PROTECTED] root]# ls /usr/lib/freeradius/libeap.so /usr/lib/freeradius/libeap.so - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Debian + Exec-Program = Zombie process

2006-01-17 Thread George Chelidze
Bjørn Mork wrote: George Chelidze [EMAIL PROTECTED] writes: as soon as I send accounting stop packet to radius, test.pl executes and becomes a zombie. (I tried bash script, c program with the same result.) 3890 ?Ss 0:00 /usr/local/freeradius/sbin/radiusd 3893 ?Z

Re: rlm_eap.so

2006-01-17 Thread Nicolas Baradakis
Anton Gorlov wrote: You could try to re-build FreeRADIUS with ./configure --disable-shared. It is undesirable to use static libraries. Then you could try to build FreeRADIUS from a CVS snapshot: the build process of rlm_eap and libeap should work better. -- Nicolas Baradakis - List

Re: rlm_eap.so

2006-01-17 Thread Anton Gorlov
Nicolas Baradakis пишет: You could try to re-build FreeRADIUS with ./configure --disable-shared. It is undesirable to use static libraries. Then you could try to build FreeRADIUS from a CVS snapshot: the build process of rlm_eap and libeap should work better. freenibs not build from cvs.

Re: Debian + Exec-Program = Zombie process

2006-01-17 Thread Rashad Rustamoff
as soon as I send accounting stop packet to radius, test.pl executes and becomes a zombie. (I tried bash script, c program with the same result.) 3890 ?Ss 0:00 /usr/local/freeradius/sbin/radiusd 3893 ?Z 0:00 \_ [test.pl] defunct As far as I know, this should have

Error: Assertion failed in request_list.c, line 1119

2006-01-17 Thread masetio
i'm using freeradius-snapshot-20060115 i have error --Tue Jan 17 19:56:34 2006 : Error: rlm_sql: Failed to create the pair: Unknown attribute 1Tue Jan 17 19:56:34 2006 : Error: rlm_sql (sql): Error getting data from databas eTue Jan 17 19:56:34 2006 : Error: rlm_sql (sql): SQL query error;

Re: Debian + Exec-Program = Zombie process

2006-01-17 Thread George Chelidze
Rashad Rustamoff wrote: as soon as I send accounting stop packet to radius, test.pl executes and becomes a zombie. (I tried bash script, c program with the same result.) 3890 ?Ss 0:00 /usr/local/freeradius/sbin/radiusd 3893 ?Z 0:00 \_ [test.pl] defunct As far as I

LEAP

2006-01-17 Thread John Peebles
We are having problems getting leap to authenticate. We are using FreeRadius 0.9.3, Cisco Arionet 1200 and eDir as a back end. Here is our config file: ! version 12.3 no service pad service timestamps debug datetime msec service timestamps log datetime msec service password-encryption !

FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-17 Thread Palmer J.D.F.
Hi, I am currently trying to create a new auth system for our WPA 802.1x WiFi network. Thus far I have the server authenticating using PEAP(MSCHAPv2) against a users file containing a simple test user/pass pair. What I would now like to do is use MySQL to contain user data such as

Re: LEAP

2006-01-17 Thread Alan DeKok
John Peebles [EMAIL PROTECTED] wrote: We are having problems getting leap to authenticate. We are using FreeRadius 0.9.3, Cisco Arionet 1200 and eDir as a back end. I suggest you upgrade to 1.1.0. It has a *lot* of security fixes, and eDir integration, too. here is the error message we

Re: Debian + Exec-Program = Zombie process

2006-01-17 Thread Alan DeKok
George Chelidze [EMAIL PROTECTED] wrote: Zombies add up even when I recompile without --without-threads option. That sounds like a serious problem. Looking at the source, I don't see why, though. If I understood things correctly, if I compile radius without threads support reap_children()

Re: Problem in sending PAP Authentication with radclient

2006-01-17 Thread Alan DeKok
Hamzeh Motahari [EMAIL PROTECTED] wrote: What should we do if we want send password using MD5 method? RADIUS doesn't support sending MD5 passwords in a packet. If radclient doesn't support this, can you suggest an open source radius client which can do this? No RADIUS client can do

RE: CIsco Pix and FreeRadius....

2006-01-17 Thread Sills, Tripp
Notice the first request that comes from the 10.2.0.69...It is using the test aaa-server from the PIX itself. The other 2 are when I am connecting to the VPN client and trying to authenicate. It says Auth Type unknown. Any ideas Alan? Starting - reading configuration files ...

Re: FreeRADIUS and OpenLDAP

2006-01-17 Thread Alan DeKok
Michael Schwartzkopff [EMAIL PROTECTED] wrote: If I use OpenLDAP to authorize / authenticate my users, what kinds of passwords can I store in LDAP? In 1.1.0, only one kind of password. I suggest clear. Is this controlled by the password_header configuation or does this only strip the

Re: CIsco Pix and FreeRadius....

2006-01-17 Thread Alan DeKok
Sills, Tripp [EMAIL PROTECTED] wrote: Notice the first request that comes from the 10.2.0.69...It is using the test aaa-server from the PIX itself. The other 2 are when I am connecting to the VPN client and trying to authenicate. It says Auth Type unknown. Any ideas Alan? The only

Dummy newbie question

2006-01-17 Thread Fernando
Hy! I have a dummy question... running radtest, i get a Accept-Accept, and everything seems ok, but the database radacct table doesn't get updated, in fact the table is blank after many tests. Is it normal? Or i've mistaken something? Thanks for the help Fernando S. SanInternet Systems

Re: Dummy newbie question

2006-01-17 Thread Rich Marriner
The radacct will be empty, because your not working with accounting packets using radtest, only Auth packets. Fernando wrote: Hy! I have a dummy question... running radtest, i get a Accept-Accept, and everything seems ok, but the database radacct table doesn't get updated, in fact the

unsubscribe

2006-01-17 Thread Cian Phillips
unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS with PEAP(MSCHAPv2), MySQL and LDAP?

2006-01-17 Thread Phil Mayers
Palmer J.D.F. wrote: Hi, I am currently trying to create a new auth system for our WPA 802.1x WiFi network. Thus far I have the server authenticating using PEAP(MSCHAPv2) against a users file containing a simple test user/pass pair. What I would now like to do is use MySQL to contain

eap authentication and proxy radius

2006-01-17 Thread Matteo Paoli
It's possible configure Freeradius to request two eap authentication? For example, the supplicant starts the eap-tls and the authentication is ok. But the server radius don't send Access Accept but it requests a new authentication (for example eap-md5). If also eap-md5 is ok, the supplicant is

freeradius-1.1.0 + oracle + fedora

2006-01-17 Thread Fred Casavant
I'm running Fedora (FC4) with the Oracle Instantclient 10g rpms (basic,devel,sqlplus,jdbc) and I'm trying to compile freeradius 1.1.0 with oracle support but the oracle module doesn't compile at all. It seem like the rlm_sql_oracle configure and makefile are buggy as hell or they only support

Re: eap authentication and proxy radius

2006-01-17 Thread Alan DeKok
Matteo Paoli [EMAIL PROTECTED] wrote: For example, the supplicant starts the eap-tls and the authentication is ok. But the server radius don't send Access Accept but it requests a new authentication (for example eap-md5). If also eap-md5 is ok, the supplicant is authenticated. No. EAP

Re: Error: Assertion failed in request_list.c, line 1119

2006-01-17 Thread masetio
i'm using freeradius-snapshot-20060115 i have error --Tue Jan 17 19:56:34 2006 : Error: rlm_sql: Failed to create the pair: Unknown attribute 1Tue Jan 17 19:56:34 2006 : Error: rlm_sql (sql): Error getting data from databas eTue Jan 17 19:56:34 2006 : Error: rlm_sql (sql): SQL query error;