Anne,The only diference from your table radgroup and my is the value priority. All entries in my radgroup table has "1" as priority.I really don't know if make sense... Try it and check if will run
Regards,FabianoOn 11/14/06, Anne-Mie Vandermeeren <[EMAIL PROTECTED]
> wrote:I have set up Freeradius
On Monday 13 November 2006 22:24, Christopher Carver wrote:
> Hello,
>
> How do I rewrite the value of the User-Name attribute based on
> Called-Station-Id? I need to do a series of these logical decisions and
> replace the username with username@ based on what the value
> of Called-Station-Id is.
Hi,
> I'm experiencing a problem with freeradius 1.1.2 when I configure and
> compile. It writes the binaries and configuration files to the correct
> directories, but /usr/sbin/radiusd tries to source config files in /usr/etc
> instead of /etc/raddb.
>
> I can change this via /usr/sbin/radiusd
Hi,Thanks a lot for the response. But I have two problems. The first is my english: I am Brazilian and I might not write in english very well... ; )The second and more important problem is this: I configured my freeradius server, I can authenticate with my users ldap... but I configured my mysql
Hello,
Trying to do a very simple task here - create a new check attribute
Pool-Name := servername, depending on what NAS sends the request to
the RADIUS server (identifiable by IP address or by name or whatever
in the request attributes).
What's the best way of doing this?
Thanks,
Jan
-
List
Hi,
I'm experiencing a problem with freeradius 1.1.2 when I configure and
compile. It writes the binaries and configuration files to the correct
directories, but /usr/sbin/radiusd tries to source config files in /usr/etc
instead of /etc/raddb.
I can change this via /usr/sbin/radiusd -X -d /et
>Is it possible to have multiple huntgroups for the same NAS-IP-ADDRESS?
>I am running into this issue trying to configure a vpn appliance that
uses
>the same freeRADIUS server to authenticate its users as well as its
admins.
Yes, but something needs to distinguish the two (another attribute).
Are
Justin Church <[EMAIL PROTECTED]> wrote:
> Not exactly sure where to set this. I've tried acct_users with no luck:
The debug log shows that the "files" module isn't even being called.
So... you edited radiusd.conf to tell it to NOT look at "acct_users".
Don't do that.
Alan DeKok.
--
htt
nting section of radiusd.conf
modcall: entering group accounting for request 0
radius_xlat:
'/usr/local/var/log/radius/radacct/152.2.199.26/detail-20061114'
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/detail-%Y%m%d
expands to /usr/local/var/log/radius/radacct/1
So sorry!
[EMAIL PROTECTED] ~]# radiusd -v
radiusd: FreeRADIUS Version 2.0.0-pre0, for host i686-pc-linux-gnu, built on
Apr 29 2006 at 19:51:21
Copyright (C) 2000-2003 The FreeRADIUS server project.
There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A
PARTICULAR PURPOSE.
You may redi
= "2c2e557e174a1b62".
-->rlm_realm: Proxy reply, or no User-Name. Ignoring.
modcall: group preacct returns noop for request 0
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 0
radius_xlat:
'/usr/local/var/log/radius/ra
Is it possible to have multiple huntgroups for the same NAS-IP-ADDRESS?
I am running into this issue trying to configure a vpn appliance that uses
the same freeRADIUS server to authenticate its users as well as its admins.
The huntgroups file gets checked from top to bottom, so depending which
sp
Justin Church <[EMAIL PROTECTED]> wrote:
> I need to be able to proxy accounting requests that arrive with no
> User-Name attribute. Is that possible? I haven't been able to make it
> work. Maybe I could insert a dummy User-Name pre-proxy and remove it
> post-proxy?
No. Just set Proxy-To-R
Patric sagte:
> Michael Messner wrote:
>> Patric sagte:
>>> Have you tried compiling the source?
>>
>> that works!
>>
>>
>> if I add the -i in the spec file there is no change ... same error!
>>
>> thanks mIke
>
> So it compiles from source? Ok, what is your rpmbuild command?
jep from source
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1
Patric schrieb:
> Michael Messner wrote:
>> Patric sagte:
>>> Have you tried compiling the source?
>>
>> that works!
>>
>>
>> if I add the -i in the spec file there is no change ... same error!
>>
>> thanks mIke
>
> So it compiles from source? Ok
rlm_realm: Adding Realm = "NULL"
rlm_realm: Preparing to proxy accounting request to realm "NULL"
modcall: group preacct returns noop for request 4
Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 4
radius_xlat:
'/usr/
On Tue 14 Nov 2006 11:41, Mircea Harapu wrote:
> I have compiled FreeRadius 1.1.3 to work with OpenLDAP 2.2.23 on Fedora
> Core 4 .
> At 2% of auth requests freeradius is hanging for 5 secs , discarding
> duplicate requests and ignoring other requests.
> In debug mode it hangs at this line :
>
> rl
Mircea Harapu <[EMAIL PROTECTED]> wrote:
> At 2% of auth requests freeradius is hanging for 5 secs , discarding
> duplicate requests and ignoring other requests.
> In debug mode it hangs at this line :
>
...
> rlm_ldap: bind as cn=user,ou=People,dc=company,dc=ro/x to
> ldap.company.ro:389
Thank you, that was it!
Still, I'll be gratefull if somebody can point me into right direction
with some documentation describing what Attributes -Type -Values are
more usually used.
That's besides the dictionaries...
One last tought: I think Freeradius could de improved if in debug mode
cao
Christopher Carver wrote:
Hello,
How do I rewrite the value of the User-Name attribute based on
Called-Station-Id? I need to do a series of these logical decisions and
replace the username with username@ based on what the value of
Called-Station-Id is.
hmm that is a tricky one! One possible
Hi all,
I have some problems setting up Freeradius 1.1.3, with mysql 3.23.54 on
Redhat9.
Here's the log for radiusd (relevant part):
Listening on authentication *:1812
Listening on accounting *:1813
Ready to process requests.
rad_recv: Access-Request packet from host 127.0.0.1:32769, id=216, le
I have set up Freeradius working fine with a users-file. I did some tests
to change to Mysql and all was ok, until I want to add some conditions for
users in more than one group.
This looks like a simple setup for Mysql, but it's not working as I
thought it would:
mysql> select * from usergroup;
Alexandru Matei <[EMAIL PROTECTED]> wrote:
> One last tought: I think Freeradius could de improved if in debug mode
> caould say what is the sql result it doesn't like.
Sure. Send a patch.
Alan DeKok.
--
http://deployingradius.com - The web site of the book
http://deployingradius
Michael Messner wrote:
Patric sagte:
Have you tried compiling the source?
that works!
if I add the -i in the spec file there is no change ... same error!
thanks mIke
So it compiles from source? Ok, what is your rpmbuild command?
Patric
-
List info/subscribe/unsubscribe? See http://www
Hi again,
I run into trouble again. I want to authenticate with chap and radius
failed with:
rad_recv: Access-Request packet from host 127.0.0.1:32769, id=110, length=70
Service-Type = Framed-User
Framed-Protocol = PPP
User-Name = "test1"
CHAP-Password = 0xfaf5457967
Patric sagte:
> Michael Messner wrote:
>> hey @all,
>>
>> cp: will not overwrite just-created
>> `/var/tmp/freeradius-root/usr/share/doc/freeradius-1.1.3/README' with
>> `README'
>> error: Bad exit status from /var/tmp/rpm-tmp.73012 (%doc)
>>
>>
>> RPM build errors:
>> Bad exit status from /var
I have compiled FreeRadius 1.1.3 to work with OpenLDAP 2.2.23 on
Fedora Core 4 .
At 2% of auth requests freeradius is hanging for 5 secs , discarding
duplicate requests and ignoring other requests.
In debug mode it hangs at this line :
rlm_ldap: - authenticate
rlm_ldap: login attempt by "use
> mysql> SELECT
> radgroupcheck.id,radgroupcheck.GroupName,radgroupcheck.Attribute,radgroupch
>eck.Value,radgroupcheck.op FROM radgroupcheck,usergroup WHERE
> usergroup.Username = 'test1' AND usergroup.GroupName =
> radgroupcheck.GroupName ORDER BY radgroupcheck.id;
> ++---+
Michael Messner wrote:
hey @all,
cp: will not overwrite just-created
`/var/tmp/freeradius-root/usr/share/doc/freeradius-1.1.3/README' with
`README'
error: Bad exit status from /var/tmp/rpm-tmp.73012 (%doc)
RPM build errors:
Bad exit status from /var/tmp/rpm-tmp.73012 (%doc)
any ideas?
hey @all,
trying to build freeradius-1.1.3 rpms for centOS with the description
from http://wiki.freeradius.org/Build#Building_RedHat_packages
ends with the following error:
Executing(%doc): /bin/sh -e /var/tmp/rpm-tmp.73012
+ umask 022
+ cd /root/rpmbuild/BUILD
+ cd freeradius-1.1.3
+ DOCDIR=/v
Sorry, sorry, sorry. It's all my fault.
"Proxy server" instead of "proxy server" in proxy.conf.
So it did not retries and set retry_delay to 0 and so on...
--
Sincerely Yours,
Alexander
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
I have compiled FreeRadius 1.1.3 to work with OpenLDAP 2.2.23 on Fedora
Core 4 .
At 2% of auth requests freeradius is hanging for 5 secs , discarding
duplicate requests and ignoring other requests.
In debug mode it hangs at this line :
rlm_ldap: - authenticate
rlm_ldap: login attempt by "user"
hi, all:
forgive my poor expression in english. :(
server A as the proxy server, server B as the remote server validating
the user in the access-request proxying by A.
The exact thing that happens for A is this:
1. receive the access-request, check th
Alexander Serkin wrote:
Alexander Serkin wrote:
...
After that the srings Walking/Waking rapidly appear during dead_time
configured in proxy.conf and at the same time the process takes about
50% of CPU on slow netra 1120 (2x440MHz) and up to 99% on Netra-240
(1x1GHz). After dead_time we see:
Alexander Serkin пишет:
Alan DeKok пишет:
Alexander Serkin <[EMAIL PROTECTED]> wrote:
May be someone could give an advice how to debug the problem while
the server will not be in production?
Attach to it with gdb, and see what it's doing.
Got some debugs on this. The problem does not dep
35 matches
Mail list logo