Re: Pam radius authentication

2006-10-19 Thread danieldinu
Isn't there anyone who tried this implementation? > >Hi! >if you are reffering to this line: >"account required pam_radius_auth.so debug" >than here is the explanation: > "The pam configuration can be: >... >auth sufficient /lib/security/pam_radius_auth.so [options] >... >accountsuf

RE: Dialupadmin and PHP Question

2006-10-19 Thread Vineet.Asati
Hi Darcy, What I feel, you might have missed some linux packages to install and because of those only, you are getting dependancy error. I have install freeradius dialupadmin on debian linux machine. I am listing my package lists for php and mysql. debian:~# dpkg -l | grep php ii php4

Re: Rewrite Attribute when proxy the specific realm

2006-10-19 Thread Rio Yang
I found the solution.The preproxy_users file can rewrite attribute by the specific realm.Thanks.Rio2006/10/20, Rio Yang <[EMAIL PROTECTED] >:Thanks.But the hints file can only add new attributes.I wanna to rewrite the attribute not create new one. Any new idea?Rio2006/10/20, Richard Cotrina < [EMAI

Re: Rewrite Attribute when proxy the specific realm

2006-10-19 Thread Rio Yang
Thanks.But the hints file can only add new attributes.I wanna to rewrite the attribute not create new one.Any new idea?Rio2006/10/20, Richard Cotrina < [EMAIL PROTECTED]>: You might use regular expressions in the hints file. - Original Message - From: Rio Yang To: fr

RE: static IP's with rlm_perl

2006-10-19 Thread Michael Gale
Hello, Here is the debug info: >From the information it looks like I have added the information correctly >however it is not sent to the client: --snip-- rlm_perl: Added pair Framed-Protocol = PPP rlm_perl: Added pair Framed-Netmask = 255.255.255.255 rlm_perl: Added pair Service-Type = Framed-Us

Re: Difference between radiusd-cistron and freeradius?

2006-10-19 Thread Jan Mulders
t; > radiusd-cistron-1.6-snapshot-20061019.tar.gz > > Is this freeradius? No. > upon which point it sits there doing nothing for about 20 minutes. The machine appears to be overloaded, with a disk that's nearly full. I'll see if there's anything I can do. Alan

Re: Difference between radiusd-cistron and freeradius?

2006-10-19 Thread Alan DeKok
"Jan Mulders" <[EMAIL PROTECTED]> wrote: > I've tried looking in the cvs-snapshots subfolder, and found: > > radiusd-cistron-1.6-snapshot-20061019.tar.gz > > Is this freeradius? No. > upon which point it sits there doing nothing for abou

Difference between radiusd-cistron and freeradius?

2006-10-19 Thread Jan Mulders
Hello, I'm currently trying to get hold of a CVS snapshot of the latest FreeRADIUS build - but I'm having some real trouble. I've tried looking in the cvs-snapshots subfolder, and found: radiusd-cistron-1.6-snapshot-20061019.tar.gz Is this freeradius? I would like the ne

Re: ***SPAM*** RE: Windows Vista doing PEAP

2006-10-19 Thread Michael Griego
__LINE__ is an unsigned int... its being referenced in the patch as a string (%s as opposed to %u). --Mike On Oct 19, 2006, at 10:30 AM, King, Michael wrote: It seg faults when I do -X (or -sxx. But not with -x) Here is the gdb log rad2:/home/mking/freeradius-1.1.3/doc# more gdb-radiusd.

Re: billing problem in freeradius

2006-10-19 Thread James Wakefield
anand kumar wrote: HI, i want to configure the billing server(mysql database) with freeradius. Include sql in the accounting { } section towards the end of your radiusd.conf. If you're working with the default radiusd.conf, all you have to do is uncomment that line. Then configure sql.c

Re: static IP's with rlm_perl

2006-10-19 Thread Alan DeKok
Michael Gale <[EMAIL PROTECTED]> wrote: > I thought I could assign the IP by using the method below: > > $RAD_REPLY{'Framed-IP-Address'} = '192.168.77.200'; > $RAD_REPLY{'Framed-Netmask'}= '255.255.255.255'; > $RAD_REPLY{'Framed-Protocol'} = 'PPP'; > $RAD_

Re: Windows Vista doing PEAP

2006-10-19 Thread Alan DeKok
"King, Michael" <[EMAIL PROTECTED]> wrote: > I did some reading, and __LINE__ returns an integer (%d). Would that > cause a segfault, I figured it would just cause a compile error. > > I changed __FUNCTION__ to __func__ and the second %s to %d, and the last > line in the patch, I removed the two

Re: Rewrite Attribute when proxy the specific realm

2006-10-19 Thread Richard Cotrina
You might use regular expressions in the hints file. - Original Message - From: Rio Yang To: freeradius-users@lists.freeradius.org Sent: Tuesday, October 17, 2006 8:03 PM Subject: Rewrite Attribute when proxy the specific realm Hi, I have tried attr_rewr

Re: static IP's with rlm_perl

2006-10-19 Thread Michael Gale
Hello, On the client side I receive the error: TCP/IP CP reported error 738: The server did not assign an address. In my authorize function in rlm_perl I am trying to assign a static IP to the client based on their username: I thought I could assign the IP by using the method

RE: Windows Vista doing PEAP

2006-10-19 Thread King, Michael
-Original Message- >>Again, I have no idea why it's core dumping. It shouldn't be. >>I don't have Vista, and I can't debug this issue myself. It's up to you. Should this line be like this? DEBUG2("VISTA[%s:%s]: here", __FUNCTION__, __LINE__); I have not coded in C (or C++) for 5 y

rlm_perl and checking request status in post-proxy

2006-10-19 Thread Pshem Kowalczyk
Hi, I have a simple question - is it possible to check the status of request (Accept/Reject) in a post-proxy phase using rlm_perl? And if so - how? kind regards pshemko - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Windows Vista doing PEAP

2006-10-19 Thread King, Michael
Could you try the patch Alan has posted, run the server in debug mode, and post the logs? Please don't do this on a production server. For some reason, the patch is causing my server to segfault. (It doesn't matter what the OS is (WinXP, VISTA, they all cause it to seg fault with DEBUG printing)

Re: static IP's with rlm_perl

2006-10-19 Thread Alan DeKok
Michael Gale <[EMAIL PROTECTED]> wrote: > I am trying the following as a test but it is not working: What's not working, why? > Any help would be great full. You've carefully not given any information about what you expect it to do, or what is happening. No one can help you without that inf

Re: Privelege Level with Different Manufacturers

2006-10-19 Thread Kevin Bonner
On Thursday 19 October 2006 08:20, Maestro_Ba wrote: > > > user1Auth-Type := System >Service-Type = Shell-User, >cisco-avpair = "shell:priv-lvl=15" > > However, now I have other manufacturers' devices in my network, namely > Alcatel, Enterasys and Nortel. >

RE: Windows Vista doing PEAP

2006-10-19 Thread Dourty, Brian R. \(IATS\)
We have also posted here about our difficulties with Windows Vista and our FR. It isn't working for us either. Brian > -Original Message- > From: freeradius-users- > [EMAIL PROTECTED] [mailto:freeradius- > [EMAIL PROTECTED] On Behalf Of > King, Michael > Sent: Thursday, October 19, 2006

Re: Windows Vista doing PEAP

2006-10-19 Thread Alan DeKok
Josh Howlett <[EMAIL PROTECTED]> wrote: > Sorry - I've come late to this thread. Do we have a general problem with > Vista failing to authenticate against FR, or is this just one instance > failing, and we know of other instances where it is working? It's not working at all. The failure mode

Re: Duplicate accounting packets

2006-10-19 Thread Luca Corti
On Fri, Oct 13, 2006 at 12:49:48PM +0100, John Williams wrote: > Why would I see more than one start entry in the radacct table for a user > all with the same session id? > > +-+---+-+-+ > | UserName| AccStatus | AcctStartTime

static IP's with rlm_perl

2006-10-19 Thread Michael Gale
Hello, I am trying to set static IP addresses for clients I have authenticated via radius with my rlm_perl module. I am trying the following as a test but it is not working: --snip-- $RAD_CHECK{'NT-Password'} = $pass; $RAD_REPLY{'Framed-IP-Address'} = '192.168.77.200'

Re: SNMP with Freeradius - Again

2006-10-19 Thread Kevin Bonner
On Thursday 19 October 2006 08:38, Velikanov wrote: > when I run /usr/local/sbin/radiusd -X > > And NOW, again, there are no strings with "smux", as shown in wiki > > Where is my mistake? > What must I looking for? > > Thanks. Did you also configure your local SNMP daemon with the pr

RE: Windows Vista doing PEAP

2006-10-19 Thread King, Michael
-Original Message- Sorry - I've come late to this thread. Do we have a general problem with Vista failing to authenticate against FR, or is this just one instance failing, and we know of other instances where it is working? It's most likely I'm the first to try it, and I've had.

Dialupadmin and PHP Question

2006-10-19 Thread Darcy Parker
Good day all, I am running ubuntu 6.06, I have apache2, PHP5, and MySql installed. I ran the following command to install freeradius: [EMAIL PROTECTED]:~# apt-get install freeradius freeradius-ldap freeradius-mysql freeradius-krb5 libperl5.8 I then ran the following command to get di

Re: Windows Vista doing PEAP

2006-10-19 Thread Josh Howlett
Alan DeKok wrote: "King, Michael" <[EMAIL PROTECTED]> wrote: It seg faults when I do -X (or -sxx. But not with -x) At this point, I have no clue why it's dying. I suggest editing the code yourself. The issue is that a decision is being made by the module to not continue processing the E

Re: more info in the log file

2006-10-19 Thread Alan DeKok
"Mike May" <[EMAIL PROTECTED]> wrote: > Hello everyone, I need some help on logging, I want to grab some more info > out of the radius logs, I currently use the log options in radiusd.conf > file, but wanted to get some time stamps. The log messages are time stamped... > I am using radius and L

Re: Windows Vista doing PEAP

2006-10-19 Thread Alan DeKok
"King, Michael" <[EMAIL PROTECTED]> wrote: > It seg faults when I do -X (or -sxx. But not with -x) At this point, I have no clue why it's dying. I suggest editing the code yourself. The issue is that a decision is being made by the module to not continue processing the EAP session, but I do

RE: Windows Vista doing PEAP

2006-10-19 Thread King, Michael
It seg faults when I do -X (or -sxx. But not with -x) Here is the gdb log rad2:/home/mking/freeradius-1.1.3/doc# more gdb-radiusd.log Starting program: /usr/sbin/freeradius -X [Thread debugging using libthread_db enabled] [New Thread 1077729984 (LWP 2603)] Program received signal SIGSEGV, Segm

more info in the log file

2006-10-19 Thread Mike May
Hello everyone, I need some help on logging, I want to grab some more info out of the radius logs, I currently use the log options in radiusd.conf file, but wanted to get some time stamps. I am using radius and LDAP, and would like to be able to see when the radius server perfomed the searc

Privelege Level with Different Manufacturers

2006-10-19 Thread Maestro_Ba
Hi, I've been using freeradius for a while, for authentication in a network of cisco devices. All my users follow this pattern: user1Auth-Type := System Service-Type = Shell-User, cisco-avpair = "shell:priv-lvl=15" However, now I have other manufacturers'

Re: rlm_sqlippool load failure

2006-10-19 Thread Alan DeKok
"Francisco Gimeno" <[EMAIL PROTECTED]> wrote: > freeradius: relocation error: /usr/lib/freeradius/rlm_sqlippool-1.1.3.so: > undefined symbol: sql_get_socket It looks like the linker on your system isn't resolving symbols globally. Since the same problem appears with the CVS head, it looks like

SNMP with Freeradius - Again

2006-10-19 Thread Velikanov
I want to use SNMP with Freeradius. NOW, after some work, I have: 1.FreeRADIUS Version 1.1.3, for host, configured with option '-with-snmp' Now I see in src/include/autoconf.h: /* Include SNMP subagent */ #define WITH_SNMP 1 #define HAVE_UCD_SNMP_ASN1_S

Re: User collision/duplicate users and mysql backend

2006-10-19 Thread Collen Blijenberg
O, I did tried that... sql.conf authorize_check_query = "SELECT id, UserName, Attribute, Value, op, Attribute2, Value2, op2\ FROM ${authcheck_table} \ WHERE Username = '%{SQL-User-Name}' \ ORDER BY id" - a

Re: More CVS madness: Radiusd not actually doing anything

2006-10-19 Thread A . L . M . Buxey
Hi, > I'm trying to run radiusd on my server, replacing an existing, working > configuration. > > When I run radiusd (specifying paths or using defaults, it doesn't > matter), I get the following: > > [EMAIL PROTECTED] [/etc/raddb]# radiusd -xx > Starting - reading configuration files ... > Read

certificat

2006-10-19 Thread mkerkoub
Hi, I want to give certificat to my server freeradius. My CA is a Windows CA. Can you tell me how do it please, thank you? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_sqlippool load failure

2006-10-19 Thread Francisco Gimeno
2006/10/19, Peter Nixon <[EMAIL PROTECTED]>: > This is my first post in the list, so please excuse any eventual problem I> could cause.> I'm running a FreeRadius 1.1.3 server with the Debian patches and a little> patch I made to correct the NAS-Port known behaviour for fixed NAS-Port. You shouldn't

AW: PEAP-MSCHAP failure. Please help

2006-10-19 Thread Hector.Ortiz
Thanks for your answers, I forgot to mention that when I generated the certs I did use the OID. When I look at the certs' details, one of those details reads "Enhanced key usage: Server Authentication (1.3.6.1.5.5.7.3.1)" Even with this, it doesn't work. I'll try generating (once again) the cert

Re: User collision/duplicate users and mysql backend

2006-10-19 Thread Peter Nixon
On Thu 19 Oct 2006 10:19, Collen Blijenberg wrote: > I was wondering, any change of getting the User collision/duplicate > users option in to the sql module (pref. mysql) ?? > > I'm still trying to get the mysql backend to work, with duplicate > usernames. (still stuck here) > > in the tuning guide

User collision/duplicate users and mysql backend

2006-10-19 Thread Collen Blijenberg
I was wondering, any change of getting the User collision/duplicate users option in to the sql module (pref. mysql) ?? I'm still trying to get the mysql backend to work, with duplicate usernames. (still stuck here) in the tuning guide, i found a document called 'tuning guide' under the sql mo