Re: error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2

2006-06-29 Thread Alberto Cruz
Hi Tadej sorry to answer you until now. This is what you have to do to include the docs: 1. Edit the freeradius.spec file 2. Include the sed command as follow: %build CFLAGS="$RPM_OPT_FLAGS" \ sed -i "[EMAIL PROTECTED]/[EMAIL PROTECTED]/freeradius-%{version}@" doc/Makefile

Re: Freeradius advocacy needed for convincing corporate management

2006-06-29 Thread Kostas Zorbadelos
On Wed, Jun 28, 2006 at 02:01:24PM -0400, Alan DeKok wrote: Kostas Zorbadelos [EMAIL PROTECTED] wrote: - Any large installations that use freeradius effectively today (commercial environments preffered). This would give us arguments in favour of freeradius scalability and reliability

exec-program dependent on ldap attribute values

2006-06-29 Thread Tariq Rashid
Hi, I am using the acct_users file to trigger an external script when an accounting start has been received: DEFAULT Acct-Status-Type == Start Exec-Program = /etc/freeradius/scripts/acct_start.py %{User-Name} I would like however for the script to be called only when an LDAP

Setting vlan tag based on authentication/authorization source

2006-06-29 Thread Tom Whitehouse
I have a freeradius setup (currently 1.1.1) for a VPN NAS box using 128-bit MPPE MSCHAPv2 authentication against a Samba password file and have recently added an EAP/PEAP setup for switches and access points to provide 802.1x access control. This all works, and I now need to check multiple

Multiple AD-Domains with rlm_ldap

2006-06-29 Thread robiwan
Dear all, For AAA-Authenticating on a Cisco Catalyst Switch 3750, i use the rlm_ldap module to authenticate users against our single Active Directory (domain-name: SOUTH). Users telnet the switch, therefore a clear-text password will be sent. This works properly. But now, we have four

FW: mpd+freeradius+AD

2006-06-29 Thread Егоров Сергей
This is Framed-IP-Address in radius dialect. Thanks for explaining freeradius basic concepts. I understood, that to assign IP to user I should use users freeradius file. But I couldn't configure it correctly. Now I have only one line in this file DEFAULT Auth-Type := MS-CHAP I've add another

rlm_perl %RAD_REQUEST rewrite

2006-06-29 Thread Evil I_Am
Hi Is the %RAD_REQUEST hash used by rlm_perl read only? i need to modify some of the request packet attributes but it do not seems to work. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_perl %RAD_REQUEST rewrite

2006-06-29 Thread Boian Jordanov
On Thursday 29 June 2006 15:52, Evil I_Am wrote: Hi Is the %RAD_REQUEST hash used by rlm_perl read only? i need to modify some of the request packet attributes but it do not seems to work. This feature is available in CVS HEAD. -- Best Regards, Boian Jordanov SNE Orbitel - Next Generation

Auth-Type in rlm_perl

2006-06-29 Thread Evil I_Am
Hi Which hash i should inspect to find out the value of the Auth-Type attribute? Thanks in advance - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRadius Log File ?

2006-06-29 Thread Scott Miller
Hello all - I have freeradius with mysql up and running perfectly. I recently upgraded from icradius because it seems to have dropped off the face of the earth. Anyways - there was a feature in icradius where I could poll the log file to get customers authentication status. I created a link to

RE: FreeRadius Log File ?

2006-06-29 Thread Heiden, John
Have you looked in /usr/local/var/log/radius John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ius.org] On Behalf Of Scott Miller Sent: Thursday, June 29, 2006 10:26 AM To: freeradius-users@lists.freeradius.org Subject: FreeRadius Log File ? Hello all - I have

RE: FreeRadius Log File ?

2006-06-29 Thread Seferovic Edvin
I think that freeRADIUS logs to /var/log/radius/ look at this directory and you will find out what log file you need ! Regards, Edvin Seferovic -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] g] On Behalf Of Scott Miller Sent: Donnerstag, 29. Juni 2006 16:26 To:

RE: FreeRadius Log File ?

2006-06-29 Thread Scott Miller
Hello all - I have freeradius with mysql up and running perfectly. I recently upgraded from icradius because it seems to have dropped off the face of the earth. Anyways - there was a feature in icradius where I could poll the log file to get customers authentication status. I created a link to

Password: PEAP or freeradius bug?

2006-06-29 Thread Paulo Cabrita
Hello there! We are using a wireless lan where our users use PEAP for authentication. I think that PEAP must have a clear password in the database, in our case openldap (field clearpassword). My question is: if the password starts with a #, for instance ##12345, the freeradius doesn't get

FreeRadius and Ericsonn NAS

2006-06-29 Thread David Goodenough
Has anyone connected FreeRadius to an Ericsonn NAS which identifies itself as:- Ericsonn AB - Packet Core Networks My FreeRadius setup is receiving an Access-Request and is sending back an Access-Accept but the NAS thinks it is being rejected. Apparently this NAS does not have easily

RE: FreeRadius Log File ?

2006-06-29 Thread Scott Miller
Yes - I have looked at that file. All it contains is: [EMAIL PROTECTED] radius]# vi radius.log Tue Mar 21 04:06:00 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #3 Tue Mar 21 04:06:00 2006 : Info: rlm_sql_mysql: Starting connect to MySQL server for #4 Tue Mar 21 04:06:00 2006

Re: FreeRadius Log File ?

2006-06-29 Thread Konne
Scott Miller schrieb: Hello all - I have freeradius with mysql up and running perfectly. I recently upgraded from icradius because it seems to have dropped off the face of the earth. Anyways - there was a feature in icradius where I could poll the log file to get customers authentication

RE: FreeRadius Log File ?

2006-06-29 Thread Scott Miller
Nope, nothing there, not even the radius directory (in /var/log/). I did just create the directory there (/var/log/radius/) and restarted the process to see if it magically fills up though. Thanks, Scott Miller -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On

RE: FreeRadius Log File ?

2006-06-29 Thread Scott Miller
Sorry for the double-post - wasn't sure if my first one went through since it took so long - this one is almost 40 minutes late as well - sorry. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Scott Miller Sent: Thursday, June 29, 2006 8:42 AM To:

RE: SPAM-LOW: Band-Width Limitation

2006-06-29 Thread Jaco van Tonder
Yes you need to change the code to return the correct attribute that your NAS supports to limit bandwidth. Then do the same type of calculation as for the Session-Timeout and return that Attribute to your NAS. Regards Jaco van Tonder -Original Message- From: [EMAIL PROTECTED]

basic handling of multiple EAP-Methods by freerad

2006-06-29 Thread Rainer Brinkmann
Hello, we wonder, how a freeradius can request a client to use a fixed EAP-Method: so its defined: Client starts with EAP-Start-Msg Radius wants EAP-Identity Client answers with Username or Hostname NOT using a special EAP-Method Radius now starts communiucating with the first EAP-Packet, using

Re: basic handling of multiple EAP-Methods by freerad

2006-06-29 Thread Alan DeKok
Rainer Brinkmann [EMAIL PROTECTED] wrote: we wonder, how a freeradius can request a client to use a fixed EAP-Method: so its defined: Client starts with EAP-Start-Msg Radius wants EAP-Identity Client answers with Username or Hostname NOT using a special EAP-Method That isn't how EAP works.

monitoring freeradius

2006-06-29 Thread Giuseppe Parlato
Hi all, Have you ever tried to monitor freeradius using mrtg orwhat's up gold ? Is there any way to monitor this service using snmp? I've already compiled freeradius with snmp. thanks Giuseppe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: FreeRadius Log File ?

2006-06-29 Thread Scott Miller
Hello all - I have freeradius with mysql up and running perfectly. I recently upgraded from icradius because it seems to have dropped off the face of the earth. Anyways - there was a feature in icradius where I could poll the log file to get customers authentication status. I created a

Called-Station-Id not logged to sql when login fails csid check

2006-06-29 Thread Mike Jakubik
Hello, It seems that the Called-Station-Id is not logged to SQL when the login fails the Called-Station-Id check using the rlm_checkval module. Any ideas why that is? It makes troubleshooting impossible. Thanks. - List info/subscribe/unsubscribe? See

Re: FreeRadius Log File ?

2006-06-29 Thread Konne
Scott Miller wrote: Hello all - I have freeradius with mysql up and running perfectly. I recently upgraded from icradius because it seems to have dropped off the face of the earth. Anyways - there was a feature in icradius where I could poll the log file to get

Re: basic handling of multiple EAP-Methods by freerad

2006-06-29 Thread Josh Howlett
On 29 Jun 2006, at 17:23, Rainer Brinkmann wrote: Hello, we wonder, how a freeradius can request a client to use a fixed EAP- Method: so its defined: Client starts with EAP-Start-Msg Radius wants EAP-Identity Client answers with Username or Hostname NOT using a special EAP- Method Radius

RE: FreeRadius Log File ?

2006-06-29 Thread Scott Miller
-Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-users- [EMAIL PROTECTED] On Behalf Of Konne Sent: Thursday, June 29, 2006 12:47 PM To: FreeRadius users mailing list Subject: Re: FreeRadius Log File ? Scott Miller wrote: Hello all - I have freeradius with mysql

Re: exec-program dependent on ldap attribute values

2006-06-29 Thread Alan DeKok
Tariq Rashid [EMAIL PROTECTED] wrote: I would like however for the script to be called only when an LDAP attribute has a certain values. Is this possible? The user's LDAP profile has already been searched for the user's password in the initial auth request, and possibly in the acct request.

Re: FreeRadius Log File ?

2006-06-29 Thread Dennis Skinner
Scott Miller wrote: /usr/local/sbin/radiusd -X FreeRADIUS doesn't write to the log file in debug mode (or at least it never used to). Start it without the -X then send it some login requests and check the log. -- Dennis Skinner Systems Administrator BlueFrog Internet http://www.bluefrog.com -

Re: Setting vlan tag based on authentication/authorization source

2006-06-29 Thread Alan DeKok
Tom Whitehouse [EMAIL PROTECTED] wrote: This all works, and I now need to check multiple Samba password files and depending on which one contains the users credentials return a VLAN tag to the switch. ... and tried using realms and Autz-Type in the authorize section and changing User-Name

Re: Multiple AD-Domains with rlm_ldap

2006-06-29 Thread Alan DeKok
[EMAIL PROTECTED] wrote: What would be the best way to authenticate users? In my case, access should be granted for user SOUTH\john.smith and NORTH\nicole.smith ? If they log in with the domain name, ntl_mauth would be good. Is ntlm_auth the right way, or multiple ldap instances to differ

RE: FreeRadius Log File ?

2006-06-29 Thread Heiden, John
I'm not sure what you are looking for, but have you checked out the details files? They should be located in: /usr/local/var/log/radius/radacct John -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ius.org] On Behalf Of Scott Miller Sent: Thursday, June 29, 2006

Throttle On Cap

2006-06-29 Thread Alex Abraham
I need some help with implementing Throttle on Cap Usage type feature for our ADSL project. Wondering if any one has implemented this using Freeradius and MySQL and if you could point me in the right direction. The BRAS we are using is Huawei MA5200F. Thanks in Advance

Re: Parse error freeradius-1.1.1

2006-06-29 Thread Lin Richardson
I think this is probably a topic for the dev list... Anyway, I finally got back to the office after a few days off... access to some Solaris boxen. I assume you meant for me to test this build on solaris10? I grabbed the CVS branch referenced below and did the standard ./configure make output

Re: Parse error freeradius-1.1.1

2006-06-29 Thread Alan DeKok
Lin Richardson [EMAIL PROTECTED] wrote: rlm_detail.c:344: warning: passing arg 2 of `lrad_hash_table_finddata' makes pointer from integer without a cast I'll be fixing that in a few days. After that, we're probably good to go for 1.1.2. Alan DeKok. - List info/subscribe/unsubscribe? See