auto-expiring accounts w/ FreeRadius

Hi, I've been asked to set up an authentication system with automatically expiring user access ... so, once the user first loggs in, and a certain time (like e.g. 24 hours) goes by, the account is supposed to be deleted. I recon based on MySQL authentication this should be possible with

Re: auto-expiring accounts w/ FreeRadius

Hi, I've been asked to set up an authentication system with automatically expiring user access ... so, once the user first loggs in, and a certain time (like e.g. 24 hours) goes by, the account is supposed to be deleted. I recon based on MySQL authentication this should be possible with

multiple User-Passwords

Hi list, again something from the legacy-auth-backend to radius freak cabinet: I need to have more than one password for a small group of users (which had a seperate one for dial-up vs. other services). All of these pw are available in clear text, so I thought I could mis-use the mySQL tables

Re: problems with sqlcounter

Suyash napisał(a): It seems that the sum of check-item AcctSessionTime is always 0 in your case. Are you sure that the accounting start and stop records are being updated (inserted) into radacct table. Suyash Shrestha Yes, I am sure.. the whole problem is that, radius kick mi of after 30 sec

Re: auto-expiring accounts w/ FreeRadius

On Thu 02 Mar 2006 10:06, Stefan Winter wrote: Hi, I've been asked to set up an authentication system with automatically expiring user access ... so, once the user first loggs in, and a certain time (like e.g. 24 hours) goes by, the account is supposed to be deleted. I recon based on

Re: freeradius + mysql + AP

Alan, sorry about sending u the log. because if i attached to the mailing list never get any respone from the administrator, cause the file is too big. christopher [EMAIL PROTECTED] wrote: but my client manage to connected to the gateway for a while cause i am continue ping the gateway. it

Re: freeradius + mysql + AP

thanks i will give it a try man.. Install onother drivers to your WLAN card. I have the same problem. - Original Message - From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, March 01, 2006 7:38 PM Subject:

Re: Problem with ntlm_auth

King, Michael wrote: I found that the windbindd_privileged directory was drwxr-x--- 2 root root 4096 2006-02-28 18:10 winbindd_privileged Is this a recent change of Samba? I didn't have to do this a few months ago. More importantly, did I do something wrong? Or is this normal, and I

freradius and krb5 interaction

Hello, I am using freeradius with EAP-TTLS + kereros authentication + ldap authorization. Everyhtign works but I have this error: rlm_krb5: verify_krb_v5_tgt: host key not found : key table erntry not found I checked and the permissions on /etc/krb5.keytab are correct... anyone has a hint

radiusd and PEAP

PEAP authentication will no work with kerberos is it irght ? I can use EAP-TTLS with kerberos and it works fine but not EAP-PEAP. is this because PEAP users mschapv2 which si a challenge ? thanks Rick - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2 X Calling-Station-Id

Hello, I have to limit posibility of loging to the network for one user, just to only 2 Calling-Station-Id how Can I do that? If I put 2 Calling-Station-Id into Radcheck table I am not able to log on to the network so.. my question is how can I limit user, that he can log only from 2

some users not authenticating

Ive got, well think I have, radius to accept all logins no matter what password they send. However some users still cannot login, its around 10 users out of 200. Ill show details for one user that can login ok and one user that cant. Im guessing its something the end user is doing

Re: freradius and krb5 interaction

I haven't tried rlm_krb5, but I've done a lot of kerberos management, so maybe I can help. If there are any kerberos-specific parameters that rlm_krb5 needs, someone else might be able to shed light on them for you. I presume kerberos is working on this system otherwise (eg. you can ssh or

freeradius, user log in, simul use, and radius shut down

Hello What I have to do, when: user connect (simultaneous use 1) and while he is conncected to the network I shut down the radius. After that, when he reconnect he is not able to login to the network, so my question how I can clean sth in sql or what i have to run, to clear that dead sesions

Re: Long mysql queries in sqlcounter get truncated.

On Thursday 02 March 2006 00:49, Gunther wrote: Had the same trouble with long SQL queries. It seems the RADIUS standard only allows up to 253 characters or so. I ended up modifying my table column names to a shorter name. Not nice, but it works. I also 'merged' some tables information to

RE: Problem with ntlm_auth

-Original Message- On Behalf Of Phil Mayers It is supposed to be like that. It's been like that forever as far as I know. I don't know why it was working for you - is your samba from an OS package and it's possible they changed the perms? (It's even worse on RHEL4 systems -

rlm_eap_tls.so is missing

Hi List! This might be off-topic but I couldn't find any solution so far. I am running FreeRADIUS 1.1.0 on Solaris 9 (SPARC) and cannot get it configured with PEAP support. Both FreeRADIUS and OpenSSL 0.9.8 are built from sources with no errors or warnings. When I start radiusd with PEAP

Re: Replace Cisco Secure ACS 3 with FreeRadius

On Wed 01 Mar 2006 19:36, Michael Castillo wrote: For our dial in users and some vpn clients we are using Cisco Secure ACS3 which is authenticating with Novell NDS. Would that configuration be possible using FreeRadius? Integrating Novell eDirectory with FreeRADIUS Overview You can integrate

Re: SQL Accounting and Null Attribute Values

Thanks Peter. It seems I'm using the wrong sql.conf :/. I'm using postgres, and while setting this up I thought the postgresql.conf file was included in the sql.conf for stuff specific to postgres. So instead of using that for sql.conf, I modified the default sql.conf to use the postgres driver.

Re: multiple User-Passwords

Stefan Winter [EMAIL PROTECTED] wrote: That did it. However, I'd like to stick with pure SQL as a backend. Is there some reason why this doesn't work, or is it just a bug/inflexibility of the rlm_sql(_mysql) module? It's that much of the time, you *don't* want to compare passwords, because

Re: radiusd and PEAP

Riccardo.Veraldi [EMAIL PROTECTED] wrote: PEAP authentication will no work with kerberos is it irght ? I can use EAP-TTLS with kerberos and it works fine but not EAP-PEAP. is this because PEAP users mschapv2 which si a challenge ? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: some users not authenticating

Tony Spencer [EMAIL PROTECTED] wrote: DEFAULT Auth-Type = Accept Read man users. This means accept, unless another module has already set Auth-Type. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SQL Accounting and Null Attribute Values

You're welcome. Given that MySQL speaks a fairly basic dialect of (mostly) ANSI SQL sql.conf should actually work with most different brands of SQL servers. Using posgresql.conf will give you some Posgres specific optimisations though. Cheers Peter On Thu 02 Mar 2006 20:36, trs wrote: Thanks

special characters in passwords + FR + ldap

Hello all, Do somebody know how to handle passwords having special characters in between (e.g. $ ) when doing freeradius-ldap authentication? Thank you, Natalia. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP module Problem

[EMAIL PROTECTED] schrieb: Hi, tls: private_key_file = /etc/lbs-certs/priv-srv.pem tls: certificate_file = /etc/lbs-certs/cert-srv.pem tls: CA_file = /usr/src/802/radius/freeradius-snapshot-20060227/scripts/demoCA/cacert.pem tls: private_key_password =