Re: Realms in DB

I do roaming with third companies, so instead of add all the realms in the file proxy.conf file, I would prefer to have them in realm table in my postgres DB. It is easier to handle. Otherwise, what is the use of realms and realmgroup tables?? > I can also see a dictionary table commented ou

Re: Problem with rlm_perl.

> It is: > > <*quote*> > use Data::Dumper; > > > in "example.pl" that causes the trouble. Many thanks. I commented this string out and freeradius is running. > I wonder if this library inclusion could be automated at the configure > stage... In my case, it happened automatically by itself.

Re: Problem with EAP/TLS authentication

There is a link at the bottom of every message, on that page at the bottom is a link for searching the archives via google. Good Luck. -Bob Guillaume wrote: 2006/3/6, Alan DeKok <[EMAIL PROTECTED]>: Guillaume <[EMAIL PROTECTED]> wrote: I run the freeradius version 1.0.4. Y

Re: Radius server health monitor :

On Mon 06 Mar 2006 15:11, Devaraj Hattibelegal Patil wrote: > Radius server health monitor: I was looking from best way monitor the > health of the Radius server. Can some body suggest the best possible > way? > Thanks in advance Nagios, OpenNMS (Which I use) and many other NMS systems have radius

Re: Problem with EAP/TLS authentication

2006/3/6, Alan DeKok <[EMAIL PROTECTED]>: > Guillaume <[EMAIL PROTECTED]> wrote: > > I run the freeradius version 1.0.4. > > You should probably upgrade. > > > >> rlm_eap_tls: Received unexpected tunneled data after successful > > >> handshake. > > I recall that's a problem with machine accou

Re: Realms in DB

Luca Corti <[EMAIL PROTECTED]> wrote: > Just wondering, is there any particular reason for this or noone has > bothered to add support? No one has bothered to do it. > I can also see a dictionary table commented out in the database > shema, are there any plans for dictionary in SQL support?

CRL not working....

I'm having some odd troubles here with the check_crl = yes I've added what I think is the appropriate config file directives, I must be missing something. Here is the debug output, any help would be much appreciated -Bob rad_recv: Access-Request packet from host 192.168.2.169:1038, id=37,

Re: Realms in DB

On Mon, 2006-03-06 at 13:26 -0500, Alan DeKok wrote: > It's not supported. Hello Alan, Just wondering, is there any particular reason for this or noone has bothered to add support? I can also see a dictionary table commented out in the database shema, are there any plans for dictionary in SQL s

Re: Cert Generation Script

Stephen Walsh <[EMAIL PROTECTED]> wrote: > Apologies if this is off-topic, but for those that may need it, I've > written a small bash script (called cascript) to extend the certificate > generation script supplied with FR (CA.all). It was written as part of the > EDUROAM project in Australia (http

Re: pix auth and spawn_flag

Alan DeKok wrote: Curtis Doty <[EMAIL PROTECTED]> wrote: Yes, disabling this feature works around. But what about the aforementioned request confuses radiusd? Auth failures respond immediately from other nas devices. And the reject_delay feature is desirable. It's a bug. It doesn'

Re: Problem with EAP/TLS authentication

Guillaume <[EMAIL PROTECTED]> wrote: > I run the freeradius version 1.0.4. You should probably upgrade. > >> rlm_eap_tls: Received unexpected tunneled data after successful handshake. I recall that's a problem with machine accounts, or some other Windows weirdness. See the list archives.

Re: EAP-TTLS

=?iso-8859-1?B?U2FudGlhZ28gQmFsYWd1ZXIgR2FyY+1h?= wrote: > Is it necessary to recompile freeradius source to active EAP-TTLS? If there's no rlm_eap_ttls.so on the system, yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Realms in DB

=?iso-8859-1?B?U2FudGlhZ28gQmFsYWd1ZXIgR2FyY+1h?= wrote: > I want to do the same with realm.conf file, but I don't know what line I > must write in postgresql.conf file for reading realms table in my DB. Any > suggestion?? It's not supported. Alan DeKok. - List info/subscribe/unsubscri

Problem with EAP/TLS authentication

hi, i am in trouble in the configuration of my radius server, eap/tls and wifi clients, i dont know where is the error, if its in my conf or if its in my certificates... I run the freeradius version 1.0.4. When Wifi client running winXP sp2 try to connect the radius, i have this following error af

EAP-TTLS

Hi people, When I configure eap.conf file and re-launch ./radiusd -X appears: * rlm_eap: Loaded and initialized type gtc tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = "/u

Realms in DB

Hi people, I am using freeradius-1.0.4 for more than two years in a Debian machine. I have all my user configurations in a Postgres DB. Now I migrate the clients.conf to DB successfully. For that porpouse I write at the end of my sql.conf: # Set to 'yes' to read radius clients from the dat

Re: proxy problem/question

Hi ! > Is this possible ? Should it work ? Is it possible to proxy ms-chap-v2 ? Yes. My guess is that the other RADIUS server doesn't understand MS-CHAPv2. The solution was to add a "nostrip" in proxy.conf file. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users

Proxy accounting and Preproxy_useres

Title: Proxy accounting and Preproxy_useres Hello guys/girls I’m a new  in this forum And any help will be appriciate Freeradius Version   1.1.0 I’m trying to use  proxy accounting to a radius backend server The proxy.conf file look like this and it works fine realm DEFAULT {   

Re: Problem with rlm_perl.

[EMAIL PROTECTED] wrote: rlm_perl: perl_parse failed: /etc/freeradius/example.pl not found or has syntax errors. radiusd.conf[211]: test_module: Module instantiation failed. radiusd.conf[245] Unknown module "test_module". radiusd.conf[242] Failed to parse accounting section. The file exists: # l

Radius server health monitor :

Radius server health monitor: I was looking from best way monitor the health of the Radius server. Can some body suggest the best possible way? Thanks in advance - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Reload on freeradius 1.1.0

freeradius 1.1.0 doesn't seem to cope with reloads as well as it did with freeradius 1.0.5. On the version 1.1.0 after about 2/3 reloads, I get the following on the logs: Tue Feb 25 16:23:22 2003 : Info: rlm_eap_tls: Loading the certificate file as a chain Tue Feb 25 16:23:22 2003 : Error: rlm_e

Re: proxy problem/question

Hi ! > If I send ms-chap, then the proxy works. But if I send ms-chap-v2 then > i get this error message (from debug) : That's nice. What does the debug log on the other RADIUS server say? Sorry no debug information, but here is some from the ms w2k3 ias log file : vent Type: Warnin

Re: special characters in passwords + FR + ldap

You can try to log passwords sending to FR by NAS and snoop passwords sending by FR to LDAP, + switch on logging on LDAP and check why BIND operation between RF and LDAP fails. The bottom line here is that the password with spec chars is the same all the way down to LDAP server. on 04/03/2006