Re: Error building version 1.1.1

2006-03-21 Thread Stefan Winter
Hi, Making install in lib... ln: creating symbolic link `/var/tmp/freeradius- root/usr/lib/libradius-1.1.1.la' to `libradius.la': No such file or directory same for me. Not just an rpm problem: the subdir $PREFIX/lib isn't created by make install. If you install from source, the workaround

Re: Error building version 1.1.1

2006-03-21 Thread Frank Büttner
same for me. But at me it fails with: /home/frank/RPM/BUILD/freeradius-1.1.1/libtool --mode=link gcc -static -o radeapclient radeapclient.lo libeap/libeap.la -lnsl -lresolv -lpthread gcc -o radeapclient radeapclient.o libeap/.libs/libeap.so

Re: Avoiding ldapsearch on LDAP authentication

2006-03-21 Thread MAEDA Atusi
Thanks for the reply. On 3/21/06, Natalia Escalera [EMAIL PROTECTED] wrote: It is my understanding that Freeradius uses Ldap search in order to authenticate users and that the Ldap bind is used to point to the location where the search will be done at the Ldap server. Well, I'll quote from

Re: Module not loading

2006-03-21 Thread Tomás A. Rossi
Dennis Skinner escribió: Tomás A. Rossi wrote: Do not be sorry. You're a bipolar guy, submit instead of complain!!, no no, wait, not everyone's contributions to the project are accepted (specially from guys that we hate) so keep complaining, either way we'll do nothing because we make it for

Re: Module not loading (the end)

2006-03-21 Thread Tomás A. Rossi
Dennis Skinner escribió: Tomás A. Rossi wrote: Think what you want. I've finished my argumentation a lot messages ago (and it was useless). This is not to defend my posture anymore, just a criticism that Alan for sure won't take into account because he's perfect, but it isn't a fallacy. If

Re: Module not loading

2006-03-21 Thread Dennis Skinner
Tomás A. Rossi wrote: Think what you want. I've finished my argumentation a lot messages ago (and it was useless). This is not to defend my posture anymore, just a criticism that Alan for sure won't take into account because he's perfect, but it isn't a fallacy. If you aren't going to add

connection pool

2006-03-21 Thread Miguel
Hi, i have configured a connection pool of 200, i think its too much for my application, doing a netstat -an | grep ESTABLISHED it showe mee 200, how can i be sure how many slot of that pool are really used? thanks - List info/subscribe/unsubscribe? See

Re: sql.conf

2006-03-21 Thread Guy Fraser
On Mon, 2006-20-03 at 16:56 -0600, Atkins, Dwane P wrote: Why is it that when I run a radiusd –X, I always come back with errors on saying that it cannot connect to the mysql server: ...snip... rlm_sql_mysql: Couldn't connect socket to MySQL server [EMAIL PROTECTED]:radius

Re: MySQL and Gigawords help

2006-03-21 Thread Alan DeKok
Daniel [EMAIL PROTECTED] wrote: I have tried: AcctInputOctets = '%{Acct-Input-Octets}+(%{Acct-Input-Gigawords}*4294967296)' Doesn't seem to work. Any pointing in the right direction would br greatly appreciated. Does MySQL have 64-bit support for fields? Alan DeKok. - List

Re: Version 1.1.1 has been released

2006-03-21 Thread Alan DeKok
Stefan Winter [EMAIL PROTECTED] wrote: as I see, #335 didn't make it. Any particular reason or did it just get lost? IIRC, adding it was considered okay? Time validation. 1.1.1 had already been delayed a lot. We should really have a schedule for monthly releases. Alan DeKok. - List

Using a LDAP attribute value as the complete HA1 digest string

2006-03-21 Thread Alan
I would like to use encrypted passwords stored as an attribute value in LDAP. How can I tell the rlm_digest driver to use the complete User-Password attribute value as the full Digest-HA1 string? Instead it takes the value and appends it to the end of the of the A1 string. Please help. ~Alan

Re: sql.conf

2006-03-21 Thread Dennis Skinner
Guy Fraser wrote: First of all for stability, I would suggest FreeBSD. The Fedora Core Releases are, cutting edge with a short life span. Or, if you are more comfortable with RedHat, try CentOS which is rebranded RH Enterprise. -- Dennis Skinner Systems Administrator BlueFrog Internet

Re: Error building version 1.1.1

2006-03-21 Thread Nicolas Baradakis
Sandworm wrote: Looks like the Makefile in the tarball's src/lib directory is removing the '/var/tmp/freeradius-root/usr/lib/' directory and the symbolic link creation then does not find it. I don't think so: there is no directory removal in src/lib/Makefile. /usr/bin/libtool --mode=install

Re: MySQL and Gigawords help

2006-03-21 Thread Dennis Skinner
Alan DeKok wrote: Does MySQL have 64-bit support for fields? If you need to store it as a number (ie do math on it within MySQL), it can handle up to 63 bits (which may be enough for this purpose - you have some big problems if users are transferring over 9.2 Exabytes of data in 1 session).

Re: Using a LDAP attribute value as the complete HA1 digest string

2006-03-21 Thread Alan DeKok
Alan [EMAIL PROTECTED] wrote: I would like to use encrypted passwords stored as an attribute value in LDAP. How can I tell the rlm_digest driver to use the complete User-Password attribute value as the full Digest-HA1 string? You don't. In version 1.1.1, you use the Digest-HA1 attribute.

Re: Error building version 1.1.1

2006-03-21 Thread Nicolas Baradakis
Frank Büttner wrote: same for me. But at me it fails with: /home/frank/RPM/BUILD/freeradius-1.1.1/libtool --mode=link gcc -static -o radeapclient radeapclient.lo libeap/libeap.la -lnsl -lresolv -lpthread In the previous post rpmbuild was using the system libtool, but in your case the

Re: Version 1.1.1 has been released

2006-03-21 Thread Bjørn Mork
Stefan Winter [EMAIL PROTECTED] writes: as I see, #335 didn't make it. Any particular reason or did it just get lost? IIRC, adding it was considered okay? I do of course not know why it was left out, but I noticed the following discussion a few days ago: aland: If it doesn't change existing

Mod_auth_radius

2006-03-21 Thread Cris Boisvert
I have a couple macs running apache (Preconfigured via Apple) The source is not supplied and the apple didn't apxs.. Has anyone installed mod_auth_radius on a Apple running osx? Thanx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Using a LDAP attribute value as the complete HA1 digest string

2006-03-21 Thread Philippe Sultan
In order to avoid confusion, you might want to store a 'digestHA1' LDAP attribute in your LDAP directory, and tell FreeRADIUS to map this attribute to Digest-HA1 by inserting this line in you ldap.attrmap file : checkItem Digest-HA1 digestHA1 Note that you *must* store a 32 bytes text

Re: Error building version 1.1.1

2006-03-21 Thread Frank Büttner
Nicolas Baradakis schrieb: Frank Büttner wrote: same for me. But at me it fails with: /home/frank/RPM/BUILD/freeradius-1.1.1/libtool --mode=link gcc -static -o radeapclient radeapclient.lo libeap/libeap.la -lnsl -lresolv -lpthread In the previous post rpmbuild was using the system

Re: Limiting number of EAP connexion

2006-03-21 Thread Alan DeKok
JVUVANT Yahoo [EMAIL PROTECTED] wrote: ... Please, no HTML to the list. Someone can tell me how to limit number of simultaneous EAP connexions with same login/password ? EAP is no different than anything else. See doc/Simultaneous-Use Alan DeKok. - List info/subscribe/unsubscribe?

Re: Version 1.1.1 has been released

2006-03-21 Thread Peter Nixon
I would like to suggest that we setup [EMAIL PROTECTED] to allow people who are not subscribed to the user or devel list but still want to be notified of new releases and security issues. All release info should be cross posted to it as well as the usual places. Cheers Peter On Tue 21 Mar

Accounting-Response packet with invalid signature!

2006-03-21 Thread Ryan Melendez
Hello, I am getting Accounting-Response packets from one particular NAS with an invalid signature. I verified the shared secret is correct. Radiusd is configured to proxy Accounting-Request packets the following way. proxy server { synchronous = no retry_delay = 10

How to export or install the certification to Windows XP pc

2006-03-21 Thread Keithy
Hi, Can someone share with me on how to export or install the certification to Windows XP and MAC-apple from Freeradius server? Thanks, Timolthy For Win2kserver or Win2003 IAS, on WinXP system we can http://IP-Srv/certsrv and install the certification.

Re: Accounting-Response packet with invalid signature!

2006-03-21 Thread Alan DeKok
Ryan Melendez [EMAIL PROTECTED] wrote: This particular NAS take about 25 seconds to send the Accounting-Response. By the time it's sent its response freeradius has moved on to the second or third retry. The authenticator calculated by the NAS is for the initial accounting packet and is

RE: Error building version 1.1.1

2006-03-21 Thread Sandworm
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Nicolas Baradakis wrote: But the next line shows that installation is done in the parent directory /var/tmp/freeradius-root/usr. That is what I am seeing. Files are being created in the parent directory (see below), but the symlink is being

Re: Questions about FreeRadius proxy

2006-03-21 Thread Dovelet
Hi Phil Mayers, Thank you of your reply. Do you mean the append the following into the radius.conf or other files? I cannot start the radiusd after I append them into the radius.conf file. Sorry, I am really new in FreeRadius. Thanks. ---

Re: Avoiding ldapsearch on LDAP authentication

2006-03-21 Thread MAEDA Atusi
Hello all, I had inserted some debugging trace in FR-1.1.0 source and I think I finally figured out the probelm. But I'm not sure how to fix it. The problem is ldap_authenticate() does not look at check items (nor reply items) set in users file. So seting Ldap-UserDn in users file causes no

Re: Version 1.1.1 has been released

2006-03-21 Thread Stefan Winter
Hi, I understand that this change is what you want, but there MAY be someone depending on the existing behaviour. This change will then surely break their current working configuration. They can of course fix it by reconfiguring the server, taking this change into consideration, but that