prepaid counter

dear all, I need your advice for my prepaid billing, i have several scenario : 1. prepaid for 4 hours and expire in 2 days after login. 2. prepaid for 8 hours and expire in 4 days after login. 3. prepaid for 24 hours and expire in 1 day. i have configured my freeradius and mysql using

Re: ld: error fatal: library -lssl: no encontrado

Alvaro Quiñones wrote: I have this mistake ld: error fatal: library -lssl: no encontrado when i try to make. Version is freeradius-1.1.0 and my SO is Solaris10. how can i compile freeradius without support OpenSSL?? You need to disable all the modules that use OpenSSL: $ ./configure

Re: Peap and LDAP

I thought this line in LDAP entry gives NT password. sambaNTPassword: AA182541927C4597271A8CAE2393FA4E sambaLMPassword: 53DCAC0777C3A618AAD3B435B51404EE - Original Message - From: Josh Howlett [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org

Re: NAS ID re-write

Nicola Iotti wrote: I'm using freeradius 1.0.5 just as proxy to do a realm based messages redirection... How can I re-write NAS_ID ( attribute 32) with different ID for different redirection options... Please no HTML to the list. You might add some entries in file

Re:problem with simultanous use...any idea

On Fri, 2006-02-10 at 11:15 +0100, [EMAIL PROTECTED] wrote: problem with simultanous use...any idea???tommy garsia Hi guys... I've finished compile and install freeradius v1.1.0 with mysql...and work great... and i'm happy with it... now i have a problem during the accounting

SIGHUP and instantiate method

Hy all, I am going to develop a custom module. I would like to know if the instantiate method of my new module would be called again when I send the server a SIGHUP (in order to do the reinitialization of my variables with the new values inserted) Regards, Susana

Re: using scripts for sql.conf

Thanks. Will this allow me to run 1 of a number of queries in sql.conf depending on whats in the access-request the server receives? So I need to run some queries every time an access-request packet is received and then choose which authorize query to run in sql.conf. Alan DeKok wrote:

EAP-MD5, PEAP TTLS

Hi all, I plan to implement 802.1x for wired and wireless users. For wired using EAP-MD5 and wireless using PEAP. From my reading, EAP-MD5 only support clear-text password and PEAP only support clear text and NT password. Am I correct on these facts? Thanks. - List

Radius client

Hallo everybody, As far as i know, Freeradius only act as a AAA server. so do you guys have preference for which radius client that I can use? Or can I use freeradius also as Radius client also? Many thanks for your help san __ Do You Yahoo!?

multiple huntgroup, same NAS-IP

first, thanks for writting and giving out FR. I have been given $$ to buy commercial radius but I haven't since I love FR, I think it has more featurs then the commercial one we looked at so good job!!! now, Is it possible for same NAS-IP to be in multiple huntgroups? I tried to do this but

Re: EAP-MD5, PEAP TTLS

Jefri bin Dahari wrote: Hi all, I plan to implement 802.1x for wired and wireless users. For wired using EAP-MD5 and wireless using PEAP. From my reading, EAP-MD5 only support clear-text password and PEAP only support clear text and NT password. Am I correct on these facts? Yes. josh. -

Re: EAP-MD5, PEAP TTLS

Jefri bin Dahari wrote: Hi all, I plan to implement 802.1x for wired and wireless users. For wired using EAP-MD5 and wireless using PEAP. From my reading, EAP-MD5 only support clear-text password and PEAP only support clear text and NT password. Am I correct on these facts? Referencing the

Re: Radius client

San wrote: Hallo everybody, As far as i know, Freeradius only act as a AAA server. so do you guys have preference for which radius client that I can use? Or can I use freeradius also as Radius client also? FreeRADIUS ships with a radius client. If you want to do EAP testing, my preferred

Re: Peap and LDAP

Jefri bin Dahari wrote: I thought this line in LDAP entry gives NT password. sambaNTPassword: AA182541927C4597271A8CAE2393FA4E sambaLMPassword: 53DCAC0777C3A618AAD3B435B51404EE It does - however, the default ldap.attrmap reads: checkItem LM-Password lmPassword

Re: EAP-MD5, PEAP TTLS

Jefri bin Dahari wrote: Hi all, I plan to implement 802.1x for wired and wireless users. For wired using EAP-MD5 and wireless using PEAP. From my reading, EAP-MD5 only support clear-text password and PEAP only support clear text and NT password. Am I correct on these facts? Yes. - List

cntinue with mistake

Hi Continue with the same problem, the mistake continue and when i tried with ./configure --without-openssl --without-rlm_eap_peap --without-rlm_eap_tls --without-rlm_eap_ttls --without-rlm_otp and ./configure --without-openssl --without-rlm_eap_peap --without-rlm_eap_tls

Re: Radius client

Hi Josh, Thanks a lot for quick reply. I have another question then, how do I invoke this client? I already install the freeradius in the other computer (acting as client) do I just use radclient command or? I want to see how they interact (server and client) What I got until now is the server

Re: Radius client

Hi, I have another question then, how do I invoke this client? I already install the freeradius in the other computer (acting as client) do I just use radclient command or? I want to see how they interact (server and client) What I got until now is the server succesfully authenticate the

Re: Radius client

Hi Alan, Thanks for the help. Also, what I really want to do is that I want radclient to do calculation like in the prepaid billing. So, when the client receive access_accept from the server, then it start the calculation. and after sometime report the result to the server. And the server will

Re: Radius client

Hi, Also, what I really want to do is that I want radclient to do calculation like in the prepaid billing. So, when the client receive access_accept from the server, then it start the calculation. and after sometime report the result to the server. And the server will respond according to

Re: rlm_eap_tls error

Alan: What file. Certificate? Thank you, John John Metcalfe, Jr. IT Specialist - AIS IBM Business Consulting Services, Public Sector Telephone: 240-396-5305 email: [EMAIL PROTECTED] Alan DeKok [EMAIL PROTECTED] Sent by: [EMAIL PROTECTED] 02/09/2006 05:30 PM Please respond to FreeRadius

Re: Root Certificate via ADS

This is probably really a question for a windows mailing list. :) You can install the root certificates via GPO Under Computer Configuration - Windows Settings - Security Settings - Public Key policies. The problem you're going to run into is configuring the 802.1x client on all 300

Re: EAP/TLS work but with errors

You can also add the following to a file called xpextensions RPM-vmware ssl # cat xpextensions [ xpclient_ext] extendedKeyUsage = 1.3.6.1.5.5.7.3.2 [ xpserver_ext ] extendedKeyUsage = 1.3.6.1.5.5.7.3.1 Then when you sign the cert, you add -extfile = xpextensions That should get rid of the

Re: Deleting VLAN information while proxying

Phil Mayers [EMAIL PROTECTED] wrote: Alan (DeKok) - is there a quick two-line description of what issues would need to be addressed to run attr_filter in post-auth? If it's easy I'll take a crack at it, as it would simplify our config as well. Port the changes from CVS head, I think.

Re: SIGHUP and instantiate method

Susana Macias [EMAIL PROTECTED] wrote: I would like to know if the instantiate method of my new module would be called again when I send the server a SIGHUP (in order to do the reinitialization of my variables with the new values inserted) Yes. Alan DeKok. - List

Re: using scripts for sql.conf

Maqbool Hashim [EMAIL PROTECTED] wrote: Will this allow me to run 1 of a number of queries in sql.conf You said script not additional queries. Please describe *accurately* what you want to do. Giving information in bits and pieces is annoying. So I need to run some queries every time an

Re: multiple huntgroup, same NAS-IP

Agent Smith [EMAIL PROTECTED] wrote: first, thanks for writting and giving out FR. I have been given $$ to buy commercial radius but I haven't since I love FR, I think it has more featurs then the commercial one we looked at so good job!!! Thanks. Is it possible for same NAS-IP to be in

Re: Radius client

San [EMAIL PROTECTED] wrote: How do i see if the client sending the message to the server.How do I make untill all of these information show in let say tcpdump. Why use tcpdump? Try reading the documentation that comes with the server. Honestly. It helps a lot. Alan DeKok. - List

Re: rlm_eap_tls error

John Metcalfe [EMAIL PROTECTED] wrote: What file. Certificate? I have no idea. You didn't post your configs or any additional information, so it's impossible to guess context from no information. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Radius client

Hi Alan, Thanks a lot for your help to explain this to me. oh. generally you do all the accounting and pre-paid stuff and timing of sessions etc on the SERVER. all the required bits are already there. various rlm_* modules that can interface nicely to a database backend etc. But I still

Sending radius attributes....

Is there any way to send back specific radius attributes based on a sql query? So, say I have a user, and then I want to sernd back a specific attribute based on some other information. Is this a case for a custom module? -Bob - List info/subscribe/unsubscribe? See

postgres sql accounting....

Anyone seen this? I'm getting some strange errors from postgres, it's almost as if my queries aren't filled in the whole way. What am I missing? Is my switch just not returning all of the proper accounting info? -Bob --- Walking the entire request list --- Cleaning up request 2 ID 87

Re: Radius client

Hi, server. I think I can trigger this by writing shell script when the packet access_accept received. (am i right?) you can do. if the reply conatins whatever string you want... Second question : How do I learn to use the command line to run client? man radclient at the bottom of that

RE: multiple huntgroup, same NAS-IP

Is it possible for same NAS-IP to be in multiple huntgroups? I'm not sure. No, it will match the first huntgroup it reaches in the huntgroups file. I tried that to. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] - List

Re: Deleting VLAN information while proxying

Alan DeKok wrote: Phil Mayers [EMAIL PROTECTED] wrote: Alan (DeKok) - is there a quick two-line description of what issues would need to be addressed to run attr_filter in post-auth? If it's easy I'll take a crack at it, as it would simplify our config as well. Port the changes from CVS