Re: Server crashes

2007-10-16 Thread Amr el-Saeed
Dear Alan, Thanks for your reply first, i have about 200,000 users but there is some thin g in the configuration that makes the users connects and disconnects in less than 15 minutes , and that makes that huge number of requests (it's a temp. situation ) of-course. second i tried the

NAS-Port and IP pool

2007-10-16 Thread Dánial Olsen
Hi, I'm hoping someone can assist me with my problem with assigning ip addresses with freeradius 1.1.6 on OpenBSD 4.1. I'm using freeradius to with an Ericsson CGSN and now I'm trying to assign ip addresses to my Mobile Stations. The problem is that the CGSN makes requests to freeradius always

Re: Server crashes

2007-10-16 Thread Amr el-Saeed
i'm running Linux version 2.4.21-51.EL ([EMAIL PROTECTED]) (gcc version 3.2.3 20030502 (Red Hat Linux 3.2.3-58)) Amr el-Saeed wrote: Dear Alan, Thanks for your reply first, i have about 200,000 users but there is some thin g in the configuration that makes the users connects and

Re: NAS-Port and IP pool

2007-10-16 Thread Alan DeKok
Dánial Olsen wrote: I'm using freeradius to with an Ericsson CGSN and now I'm trying to assign ip addresses to my Mobile Stations. The problem is that the CGSN makes requests to freeradius always using the same IP and always port 1, which means only one IP is assigned. After a lot of

Re: Server crashes

2007-10-16 Thread Amr el-Saeed
after the server finishes starting the mysql connections, it prints that error Error: FATAL: Thread create failed: Cannot allocate memory , and starts to connect to mysql again and the error again and so on Amr el-Saeed wrote: i'm running Linux version 2.4.21-51.EL ([EMAIL PROTECTED]) (gcc

Re: Server crashes

2007-10-16 Thread Alan DeKok
Amr el-Saeed wrote: after the server finishes starting the mysql connections, it prints that error Error: FATAL: Thread create failed: Cannot allocate memory , and starts to connect to mysql again and the error again and so on It sounds like your system doesn't support threads that well.

Re: NAS-Port and IP pool

2007-10-16 Thread Dánial Olsen
On 16-10-2007 at 10:21, Alan DeKok [EMAIL PROTECTED] wrote: Dánial Olsen wrote: I'm using freeradius to with an Ericsson CGSN and now I'm trying to assign ip addresses to my Mobile Stations. The problem is that the CGSN makes requests to freeradius always using the same IP and always port 1,

rlm_perl (threads) performance question

2007-10-16 Thread Apostolos Pantsiopoulos
I am using the rlm_perl module for accounting purposes. I tried to benchmark the whole process by doing something like this : sub accounting{ start_benchmark(); // acct start code here stop_benchmark(); send_bench_results_using_udp(); } sub stop_accounting{

Re: Freeradius Clustering

2007-10-16 Thread Nicolas Baradakis
Fred Zinsli wrote: I am wanting to know if Freeradius can be clustered? and if so can someone point me to some documentation on the subject. I'd suggest to use LVS (Linux Virtual Server) in a direct routing setup. See: http://www.linuxvirtualserver.org/VS-DRouting.html I am also wanting to

Compile errors

2007-10-16 Thread Dánial Olsen
I'm getting these errors when compiling CVS and 2.0.0-pre2 on OpenBSD 4.1: Making all in lib... gmake[3]: Entering directory `/root/freeradius/freeradius-server-2.0.0-pre2/src/lib' /root/freeradius/freeradius-server-2.0.0-pre2/libtool --mode=compile gcc -g -O2 -D_REENTRANT

RE: Freeradius Clustering

2007-10-16 Thread David Roze
If your NAS supports several Radius servers, I wouldn't do any clustering, but run them in parallele adding each server's IP in the NAS config. It will detect when a server is unreachable and switch all traffic to other servers. Problem with LVS is you become dependant on your OS. If your NAS does

Re: rlm_perl (threads) performance question

2007-10-16 Thread Alan DeKok
Apostolos Pantsiopoulos wrote: I am using the rlm_perl module for accounting purposes. ... The results I get (after 2-3 k requests) are these : Mean time for acct start : 0.005 secs Mean time for acct stop : 0.01 secs Since there is a 1:1 ratio of start/stop requests I guess that we can

Re: Compile errors

2007-10-16 Thread Alan DeKok
Dánial Olsen wrote: I'm getting these errors when compiling CVS and 2.0.0-pre2 on OpenBSD 4.1: ... /root/freeradius/freeradius-server-2.0.0-pre2/src/freeradius-devel/missing.h:182: error: redefinition of `struct in6_addr' ...

Re: rlm_perl (threads) performance question

2007-10-16 Thread Boian Jordanov
On Oct 16, 2007, at 12:57 PM, Apostolos Pantsiopoulos wrote: perl_pool total/active/spare [32/0/32] Or you have wrong configuration or rlm_perl isn't your bottleneck. Check your configuration, remove any unwanted module. Best Regards, Boian Jordanov SNE Orbitel - Next Generation

Re: 802.1x kerberos

2007-10-16 Thread Phil Mayers
On Mon, 2007-10-15 at 12:22 -0400, Lisa Besko wrote: Alan DeKok wrote: DEFAULT Auth-Type := Kerberos Fall-Through = 1 An earlier message in this thread said Auth-Type = Kerberos. What you have above is different. An here in lies the problem. I just went back and

Re: Using freeradius and 802.1x for dynamic VLAN

2007-10-16 Thread [EMAIL PROTECTED]
you certainly arent checking that the VLAN is 2 - and if it isnt then fail the authentication. i can understand what you are trying to do...but do do THAT sort of thing you will need to use checking attributes, not setting attributes. you should find that the port which carlos is

Re: Using freeradius and 802.1x for dynamic VLAN

2007-10-16 Thread Alan DeKok
[EMAIL PROTECTED] wrote: ... What certificate i shoud use, so that valid the: carlos User-Password == carlos Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 2 and if the user carlos access to

Re: [Fwd: Re: rlm_perl (threads) performance question]

2007-10-16 Thread Alan DeKok
Apostolos Pantsiopoulos wrote: I did that. Actually it was the first thing I did. I got the same result. Also, the server does a LOT more than just running Perl. You are measuring the time taken to run your Perl scripts. The time taken to process a request can be VERY different. I

Re: Using freeradius and 802.1x for dynamic VLAN

2007-10-16 Thread Arran Cudbard-Bell
Alan DeKok wrote: [EMAIL PROTECTED] wrote: ... What certificate i shoud use, so that valid the: carlos User-Password == carlos Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-Id = 2 and if the user

rlm_passwd pulling file?

2007-10-16 Thread Joe Mom
looking for some sort of indication that the radius.conf file is working. I've created a section in the radius.conf file under modules as per man rlm_passwd passwd tcovc_group { filename = /home/ftpuser/export.txt format = *User-Name:LM-Password

Re: [Fwd: Re: rlm_perl (threads) performance question]

2007-10-16 Thread Apostolos Pantsiopoulos
First of all thanks for your prompt replies Alan DeKok wrote: Apostolos Pantsiopoulos wrote: I did that. Actually it was the first thing I did. I got the same result. Also, the server does a LOT more than just running Perl. You are measuring the time taken to run your Perl scripts.

Re: encrypted password LDAP and EAP//TTLS

2007-10-16 Thread Sergio Belkin
2007/10/12, [EMAIL PROTECTED] [EMAIL PROTECTED]: http://www.securew2.com/ Ivan Kalik Kalik Informatika ISP Thanks Ivan, Now I have a radius server working with EAP/TTLS, and windows and securew2 worked fine using PAP. It's a bit strange that first try as anonymous and password fails and then

Re: encrypted password LDAP and EAP//TTLS

2007-10-16 Thread Martin Gadbois
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Sergio Belkin wrote: 2007/10/12, [EMAIL PROTECTED] [EMAIL PROTECTED]: http://www.securew2.com/ Ivan Kalik Kalik Informatika ISP Thanks Ivan, Now I have a radius server working with EAP/TTLS, and windows and securew2 worked fine using PAP.

rlm_passwd pulling file?

2007-10-16 Thread Joe Mom
looking for some sort of indication that the radius.conf file is working. I've created a section in the radius.conf file under modules as per man rlm_passwd passwd tcovc_group { filename = /home/ftpuser/export.txt format = *User-Name:LM-Password

problem in integeration with poptop

2007-10-16 Thread hadi golestani
hi, I've installed poptop and freeradius well and both are working, but when I try to connect from a vpn connection or even radtest some error occured. what I need to add to users.conf for a simple radtest connection or a vpn client? it's the output of debug mode for vpn client, some thing like

Re: problem in integeration with poptop

2007-10-16 Thread tnt
Well path to ntlm_auth obviously isn't /path/to/ntlm_auth. Ivan Kalik Kalik Informatika ISP Dana 16/10/2007, hadi golestani [EMAIL PROTECTED] piše: hi, I've installed poptop and freeradius well and both are working, but when I try to connect from a vpn connection or even radtest some error

Re: problem in integeration with poptop

2007-10-16 Thread hadi golestani
I've change it to /usr/bin/ntlm_auth ( found from locate ntlm ) but still same error. What I must add to users file to test my radius from radtest or vpn client? sorry for bothering I'm too newbie. On 10/16/07, [EMAIL PROTECTED] [EMAIL PROTECTED] wrote: Well path to ntlm_auth obviously isn't

Re: problem in integeration with poptop

2007-10-16 Thread tnt
You have obviously done some work on breaking the server configuration. Put mschap{} section back the way it was (with ntlm_auth line commented out). You don't need *any* changes to the default configuration if you are using users file. Put this in users file: root Clertext-Password :=

Re: EAP+MD5+SQL trouble

2007-10-16 Thread inl2goal
Thank you very much for your help. I reinstalled freeradius and it worked without me having to change anything. Thank you -O tnt wrote: What freeradius version is this? If it is 1.1.7 leave radiusd.conf as default. Comment out the DEFAULT entry with Auth-Type System in users file

Re: Problem with LDAP and Groups

2007-10-16 Thread Bryan Evege
Message: 3 Date: Thu, 11 Oct 2007 23:23:45 +0100 From: [EMAIL PROTECTED] Subject: Re: Problem with LDAP and Groups To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain;

stuck with no errors

2007-10-16 Thread Joe Mom
K, i'm stuck. Running freeradius 1.1.6 I've got the passwd module working and i can see in the startup.log that its loading the file and settings. the file is in the format username:password the password is an md5 generated password I keep getting a rejected message from my radtests, but I

Freeradius logging w/syslog

2007-10-16 Thread [EMAIL PROTECTED]
Hi all, I'm running freeradius 1.0.1 on CentOS 4.4 and I'm trying to get the radius to log to a syslog server. I followed the example Syslog_HOWTO but its not working. I was hoping that someone else might know the answer / fix. Thanks in Advance, - List info/subscribe/unsubscribe? See

Wimax VSA support

2007-10-16 Thread katro kar
Hi, Does the latest 2.0-pre of freeradius support parsing of wimax VSA attributes ? If it is not (I feel it is not supported yet, as i could not see any dictionary for wimax vsa), is there any plans or work in progress to implement it ? Another question is, does the wimax forum dictate what to

Re: stuck with no errors

2007-10-16 Thread Stefan Winter
Hi, i need to know either, how to get a more verbose log so i can tell what it is i'm doing wrong or simply what is wrong with the statement: radiusd -X, as is well documented in lots of places. passwd pull_export { filename = /home/ftpuser/export.txt