Dropping conflicting packet and Rejecting request

2006-03-08 Thread Takeshi Yoshida
I am moving FreeRadius(1.1.0 Sparc Solaris9) by the following compositions. (Target is "* Proxy *") --- | Radius-1 |-- --| HomeRadius1 |---RDB | --- | --- |--|* Proxy *|--| | --- | --- | Radius-2 |-- --|

Re: special characters in passwords + FR + ldap

2006-03-08 Thread Turtiainen, Tero
Hi, From: Natalia Escalera [EMAIL PROTECTED] We have made a small fix to the ldap-module (as seen in the link to the mailing list archive). I don't know if this has been fixed in 1.1.0. I once had a quick look at the ldap-module of 1.1.0, it should be quite easy to test if it still

Re: rlm_perl segfault

2006-03-08 Thread Boian Jordanov
Can you check which version of libperl you are using ? I think on Debian it was separate package ? Also please can you try to run freeradius with example.pl which is included in freeradius. On Wednesday 08 March 2006 05:12, Grant Zanetti wrote: I've just tried to get the rlm_perl module

Re: Problem with rlm_perl.

2006-03-08 Thread Boian Jordanov
On Monday 06 March 2006 15:24, Nikos Diamantis wrote: [EMAIL PROTECTED] wrote: It is: *quote* use Data::Dumper; /*quote* in example.pl that causes the trouble. It seems you don't have a Data::Dumper module. Running your script with perl example.pl can show this. Quote from:

RE: post proxy problem

2006-03-08 Thread VannMann32 .
Hi ! I'm trying to set up Freeradius (1.1.0) to proxy ms-chap-v2 and when I get the accept from ms-win2k3-ias server, then i want to assign a static ip address. Reading the doc/proxy file, i read that the user file is processed as usual after accept is received ms radius server. users :

7 instances of freeradius - radiusd daemon

2006-03-08 Thread sumi thra
Subject:7 instances of freeradius - radiusd daemonHi All, I builded the freeradius-1.0.5 source. In the config option i specified --with-threads=no( tried with --disable-threads too) But, when i ran the daemon, im seeing 7 instances. How do i compile it to run in single thread mode ??Any

eap don't work

2006-03-08 Thread pelusa vali
hi everybody, i have problems using freeradius 1.0.5, i cann't get it works as i hope. well i installed freeradius in my server and tried to see if clients can authenticate, so first tried test over server, my ip is 192.168.10.1, i generate certificates to use TLS. this is my users file:

Problem compiling Freeradius + MySQL on Solaris 9

2006-03-08 Thread Alan
I've made symlinks like recommended in the mailing lists. I have also specified the lib, include and base MySQL directory when running the configure script. After running configure I always get the same output. Please help. -- configure: warning: mysql libraries not found. Use

[freeradius-users]Freeradius With The Support of MySQL Rejected Authenticating!!

2006-03-08 Thread Jedliu
Andrew Browning, Hi! Much appreciate of your answer. you said if you want to use mysql, then configure the mysql module. I've configured the mysql module in radiusd.conf like this, *authorize { preprocess chap mschap suffix sql } accounting { … sql … }* Is there any aditional points? I add the

Re: eap don't work

2006-03-08 Thread A . L . M . Buxey
Hi, hi everybody, i have problems using freeradius 1.0.5, i cann't get it works as i hope. well i installed freeradius in my server and tried to see if clients can authenticate, so first tried test over server, my ip is 192.168.10.1, i generate certificates to use TLS. this is my users

Realms default problem

2006-03-08 Thread Vasco Santos
Hi folks, I what to put anew service in my radius server and I have this configuration in realms file: mycompany.comLOCAL nostrip NULL LOCALnostripDEFAULT XXX.XXX.XXX.XXX:1600 nostrip I actualy have one default server to default domains that are unknownin my server, butI want to

Re: 7 instances of freeradius - radiusd daemon

2006-03-08 Thread Curtis Doty
sumi thra wrote: I builded the freeradius-1.0.5 source. In the config option i specified --with-threads=no( tried with --disable-threads too) But, when i ran the daemon, im seeing 7 instances. How do i compile it to run in single thread mode ?? I just posted your answer earlier this week.

Re: Password Logging

2006-03-08 Thread Craig T. Hancock
I also want to remove the password from the log file. I am trying to modify the rlm_detail file. I beileve the section that needs modifying is at line 280. Before modification I just need to understand the following lines after 280. The code with the comment /* Don't Print passwords in old

Re: special characters in passwords + FR + ldap

2006-03-08 Thread Natalia Escalera
Hello, I tried the patch on http://bugs.freeradius.org/showattachment.cgi?attach_id=112 for the function ldap_pairget in the file rlm_ldap.c but it gives me an error when executing the 'make' command saying that 'token' was already declared. This is where token is declared:

RE: eap don't work

2006-03-08 Thread pelusa vali
first of all, thanks so much alan for your quick response Hi, hi everybody, i have problems using freeradius 1.0.5, i cann't get it works as i hope. well i installed freeradius in my server and tried to see if clients can authenticate, so first tried test over server, my ip is

Re: Problem compiling Freeradius + MySQL on Solaris 9

2006-03-08 Thread Chris Parker
On Mar 8, 2006, at 8:25 AM, Alan wrote: I've made symlinks like recommended in the mailing lists. I have also specified the lib, include and base MySQL directory when running the configure script. After running configure I always get the same output. Please help. -- configure: warning:

Re: net-snmp issues fix?

2006-03-08 Thread Kevin Bonner
On Wednesday 01 March 2006 23:31, A V wrote: With these fixes, will we be able to get SNMP to work for Solaris 10? Thanks, AV Alan DeKok [EMAIL PROTECTED] wrote: A V wrote: I saw the posting that the net-snmp fixes will be available in freeradius 1.1.1. When is this slated for?

freeradius hangs, using 98% CPU

2006-03-08 Thread George C. Kaplan
For some time we've had an intermittent problem where freeradius becomes unresponsive, consuming at least 98% of the CPU. A 'kill -TERM' will sometimes kill the daemon, but usually a 'kill -9' is needed. This always seems to happen right about when we reload the config (with a HUP), or stop and

RE: Problem compiling Freeradius + MySQL on Solaris 9

2006-03-08 Thread Alan
I uninstalled the sunfreeware package and installed the package directly from MySQL.com (mysql-standard-4.0.26-sun-solaris2.9-sparc-64bit.pkg). I receive one error in config.log. Am I missing something here? configure:988: gcc -o conftest -g -O2 conftest.c -L/usr/lib/mysql/ -lmysqlclient_r

RE: eap don't work

2006-03-08 Thread Laker Netman
--- pelusa vali [EMAIL PROTECTED] wrote: first of all, thanks so much alan for your quick response Hi, hi everybody, i have problems using freeradius 1.0.5, i cann't get it works as i hope. well i installed freeradius in my server and tried to see if clients can authenticate,

nas table in SQL backend

2006-03-08 Thread trs
The SQL scripts have a comment for the nas table that says it isn't used by freeradius. Is this still the case? How is it populated otherwise? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: some users not authenticating

2006-03-08 Thread Kevin Bonner
On Friday 03 March 2006 03:18, Tony Spencer wrote: So I put DEFAULT Auth-Type := Accept Everyone will be authenticated?? If that is so will the other attributes against the username in the users file still be applied, such as IP address, if that user is in the file? Tony That is the

Re: post proxy problem

2006-03-08 Thread Alan DeKok
VannMann32 . [EMAIL PROTECTED] wrote: Reading the doc/proxy file, i read that the user file is processed as usual after accept is received ms radius server. See post_proxy_authorize in proxy.conf. See also postproxy_users, which is I think what you want. Alan DeKok. - List

Re: Password Logging

2006-03-08 Thread Alan DeKok
Craig T. Hancock [EMAIL PROTECTED] wrote: As far as what to change what is the pair-attribute for User-Password statement. I would presume it would be PW_PASSWORD_REQUEST. Huh? Why? What's wrong with using grep to search the source, to find out the proper name? Alan DEKok. - List

Re: eap don't work

2006-03-08 Thread Alan DeKok
pelusa vali [EMAIL PROTECTED] wrote: excuse me, i read many tutorials tutorials that are not distributed with FreeRADIUS. Usually written by people who haven't read the FreeRADIUS docs, or had the FreeRADIUS developers review the tutorials before they're published. please could you refer me

Re: freeradius hangs, using 98% CPU

2006-03-08 Thread Alan DeKok
George C. Kaplan [EMAIL PROTECTED] wrote: I'm guessing that the daemon can hang if it gets a signal just as the rlm_krb5 module is called. It's marked RLM_TYPE_THREAD_UNSAFE, so it gets a mutex, and attaching gdb to the hung daemon showed: That's bad. Is anyone aware of any freeradius

Re: nas table in SQL backend

2006-03-08 Thread Alan DeKok
trs [EMAIL PROTECTED] wrote: The SQL scripts have a comment for the nas table that says it isn't used by freeradius. Is this still the case? How is it populated otherwise? It's used. It's not populated by the server. It's populated by the admin. Alan DeKok. - List

Re: Dropping conflicting packet and Rejecting request

2006-03-08 Thread Alan DeKok
Takeshi Yoshida [EMAIL PROTECTED] wrote: Wed Feb 22 11:53:38 2006 : Error: Dropping conflicting packet from client Radus-1:1039 - ID: 246 due to unfinished request 7101301 This means that the NAS sent a new packet while the server was in the middle of processing an old one. The reason

unsubscribe

2006-03-08 Thread John Peebles
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Realms default problem

2006-03-08 Thread Alan DeKok
Vasco Santos [EMAIL PROTECTED] wrote: Its is possible to put a priotity in servers? someting like this: DEFAULT1 XXX.XXX.XXX.XXX:1700 nostrip DEFAULT XXX.XXX.XXX.XXX:1600nostrip No. If not possible, give-me solutions to my problem or ways to

Re: eap don't work

2006-03-08 Thread A . L . M . Buxey
Hi, first of all, thanks so much alan for your quick response thanks excuse me, i read many tutorials and all of them says this is correct, so please could you refer me to right doc?? may be freeradius docs? exactly which? like the main Alan on this list, I don't care to be questioned on

Re: special characters in passwords + FR + ldap

2006-03-08 Thread A . L . M . Buxey
Hi, I tried the patch on http://bugs.freeradius.org/showattachment.cgi?attach_id=112 for the function ldap_pairget in the file rlm_ldap.c but it gives me an error when executing the 'make' command saying that 'token' was already declared. This is where token is declared:

accounting of MAC of the NAS

2006-03-08 Thread Alex M
Hi Ive noticed while running in debug mode, I can see the MAC of the NAS, but when I go to the Accounting logs (that are stored in MySQL) I dont see any place for MAC of the NAS, it only has the space for NAS IP. So is it possible to make freeradius to log the MAC address of the nas too?

Re: Cert Generation Script

2006-03-08 Thread Stephen Walsh
Hi Alan Sorry for taking so long to get back to you, the site was using an old version of the script. Please feel free to include cacert into the CVS tree. Let me know if you need anything more from me. (I am working a README for those who can't read Bash) Stephen Walsh [EMAIL PROTECTED]

Re: rlm_perl segfault

2006-03-08 Thread Grant Zanetti
I'm running libperl5.8 (5.8.8-2) with perl (5.8.8-2) Using example.pl yields the exact same results. In fact using a script that doesn't exist segfaults in the same manner. It's definitely segfaulting before it begins parsing the perl. On Wed, 2006-03-08 at 11:20 +0200, Boian Jordanov

Re: Password Logging

2006-03-08 Thread Alan DeKok
Craig T. Hancock [EMAIL PROTECTED] wrote: If I had to guess (and I am somewhat guessing at this point due to my knowledge of the Code Tree). The attribute would be PW_USER_PASSWORD. Yes. If you can confirm this or direct me to the source file has the structure definitions I would

Re: nas table in SQL backend

2006-03-08 Thread Alan DeKok
trs [EMAIL PROTECTED] wrote: How is it used? Can I modify it (e.g., add columns, change the primary key, etc.) to better suit my environment? Sure, if you modify the SQL queries and server source, too. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: accounting of MAC of the NAS

2006-03-08 Thread Alan DeKok
Alex M [EMAIL PROTECTED] wrote: I've noticed while running in debug mode, I can see the MAC of the NAS, In what attribute, in what kind of packet? but when I go to the Accounting logs (that are stored in MySQL) I don't see any place for MAC of the NAS, it only has the space for NAS IP. So

NAS MAC VAriable

2006-03-08 Thread Alex M
What is the variable for NAS MAC address, so that I can setup the rule fot mysql to log the MAC address of the NAS when the client sends request - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: accounting of MAC of the NAS

2006-03-08 Thread Alex M
I don't know what attribute and what packet, I regular install for MySql ... I do see the quires in SQL.config but I don't know what variable is used for NAS MAC address? That why I asked. -Original Message- From: [EMAIL PROTECTED] .org [mailto:[EMAIL PROTECTED] eeradius.org] On Behalf

Re: accounting of MAC of the NAS

2006-03-08 Thread Alan DeKok
Alex M [EMAIL PROTECTED] wrote: I don't know what attribute and what packet, You have to be joking. You already said you see the MAC address in debug mode. How hard is it to read that to find out the attribute name, and packet? Debug mode prints all that information! I do see the quires

RE: accounting of MAC of the NAS

2006-03-08 Thread Alex M
Hm yea interesting idea! Thanks! I will try that -Original Message- From: [EMAIL PROTECTED] .org [mailto:[EMAIL PROTECTED] eeradius.org] On Behalf Of Alan DeKok Sent: Wednesday, March 08, 2006 6:18 PM To: FreeRadius users mailing list Subject: Re: accounting of MAC of the NAS Alex M

HTTP to Radius relay, possible?

2006-03-08 Thread hkdio
I wanna know is it possible to have Http to radius translation feature The conecpt like that, when user login to server/firewall, server will send the radius request to radius server. Than Radius server will try to login a http page by basic authentication (eg: http://user:[EMAIL PROTECTED]), if

RE: mysql 4.1.0 can not run normally in Freeradius 1.0.5

2006-03-08 Thread yao guoxian
Are you sure that you have compiled FR with mysql support ? Recompile itwith sql_mysql driver and it should work. I am not family with FR. I just use ./configure make make install Howerver when I input : radiusd -X The same error appears. Is it the correct way to recompile FR? If not ,