Re: Password Authentication Failing

On Nov 27, 2007 10:03 PM, Alan DeKok [EMAIL PROTECTED] wrote: Frank Everitt wrote: I'm using the UNIX module (see below). Maybe it's a Solaris issue and not freeradius. ... What ya think/ Looks like a Solaris issue. FreeRADIUS just calls getpwent(). If that returns notfound,

RE: Dynamic Realm

Is there any way to put all domains in a table and when freeradius start up, it read this table and recognizes them? I do not understand the realm table in radius DB. Any suggestion? From: [EMAIL PROTECTED] To: [EMAIL PROTECTED]; freeradius-users@lists.freeradius.org Subject: Re: Dynamic Realm

Re: Dynamic Realm

Is there any way to put all domains in a table and when freeradius start up, it read this table and recognizes them? I do not understand the realm table in radius DB. Any suggestion? I have multiple suggestions: 1) Write with a mailer that doesn't fuck up formatting in non-HTML. Your mail

replace the log file with mysql records

Dear All, I have this line in my log file ( Auth: Invalid user (rlm_checkval: This NAS-Port-Type is not allowed for the user): ) I just want to make the radius to insert it in mysql server like post auth as it inserts the Access accepts and rejects, i want to replace the log file with

RE: Dynamic Realm

Thanks for the aclaration about realms. It is my repeated question. Now I am waiting to freeradius 2.0 and try it. By the way, I usually write in plain text. It was a browser bug. From: [EMAIL PROTECTED] To: freeradius-users@lists.freeradius.org Subject: Re: Dynamic Realm Date: Wed, 28

radtest seems to fail out of the box

Ok, Al, can you explain or help with this. just to appease you, I unpacked free radius, out of the box, changed a single line in server as such: 127.0.0.1 testing123 3 ran radtest using a testuser local account: radtest testuser 1234 127.0.0.1 10 testing123 it failed,

Re: radtest seems to fail out of the box

Dan Gahlinger wrote: Ok, Al, can you explain or help with this. just to appease you, I unpacked free radius, out of the box, changed a single line in server as such: 127.0.0.1 testing123 3 I think that's a config file for the PAM module. FreeRADIUS doesn't use it. ran

RE: radtest seems to fail out of the box

I hate hotmail. ok, you're saying /etc/raddb/server is a pam config file ? anyhow, I'm happy to report the single quote method fixes part of the problem. that of the @%% working better now. still doesn't log in. even using radiusd -Xsfxxx or so doesn't give any more information. -X gives the

Re: vlan assignment

Already did that, it is not working Should it say Tunnel-Type:0 = VLAN Tunnel-Medium-Type:0 = IEEE-802 Tunnel-Private-Group-Id:0 = 120 or Cisco-AVPair = Tunnel-Type:0 = VLAN ... ... Thank you A.L.M.Buxey wrote: Hi, I am having trouble configuring VLAN assignment for CISCO

Re: radtest seems to fail out of the box

Dan Gahlinger wrote: I hate hotmail. ok, you're saying /etc/raddb/server is a pam config file ? It's used by the pam_radius_auth module. An example and documentation ships with the module. It is NOT used by FreeRADIUS. even using radiusd -Xsfxxx or so doesn't give any more information. -X

Re: vlan assignment

inl2goal wrote: Already did that, it is not working Should it say (in my attributes) Tunnel-Type = VLAN Tunnel-Medium-Type = IEEE-802 Tunnel-Private-Group-Id = 120 or Cisco-AVPair = Tunnel-Type = VLAN ... ... Thank you A.L.M.Buxey wrote: Hi, I am having

Re: vlan assignment

Hi, inl2goal wrote: Already did that, it is not working Should it say (in my attributes) Tunnel-Type = VLAN Tunnel-Medium-Type = IEEE-802 Tunnel-Private-Group-Id = 120 we simply return them in the form of Tunnel-Medium-Type = IEEE-802 Tunnel-Type = VLAN Tunnel-Private-Group-Id = 666

Execute A Script After User Authenticate

Hi, I have Freeradius setup to authenticate user off mysql database. I was able to set Freeradius to execute a script base on what group a user is in. ex. usergroup table: usernamegroupname Jdoetestprogram radgroupreply table: Groupnameatrributeopvalue testprogram

Re: rlm_passwd and EAP-MD5

Kolbjørn Barmen wrote: Can rlm_passwd be used together with EAP-MD5? Yes. Only if the password is in clear-text. If I in the users file set Password == blabla for a user test-user and then connects using radeapclient as described in the manual with EAP-MD5-Password = blabla it works fine.

Re: vlan assignment

inl2goal wrote: Already did that, it is not working This is from your first post: Sending Access-Accept of id 17 to 10.19.100.196 port 1645 Framed-Protocol := PPP Service-Type := Framed-User Framed-Compression := Van-Jacobson-TCP-IP Tunnel-Type:0 := VLAN