EAP-PEAP with LDAP for 802.1x authentication

2008-02-24 Thread Ryan
Hi All, Understand that it is not possible to authenticate using EAP-PEAP against OpenLDAP due to encrypted password. Can someone advise on how exactly OpenLDAP needs be configured so that it can be used in EAP-PEAP? I found out from http://vuksan.com/linux/dot1x/802-1x-LDAP.html that to do so ad

rlm_dbm can not work?

2008-02-24 Thread Hangjun He
Hi, I am using freeRADIUS 1.1.6. I can not let rlm_dbm work. Result of rlm_dbm_cat: [EMAIL PROTECTED] raddb]# pwd /usr/local/etc/raddb [EMAIL PROTECTED] raddb]# rlm_dbm_cat -f users.db "hhe4" Cleartext-Password := "hhe123" Reply-Message = "Hello"

Configuring radrelay using proxy.conf in v2.0.1

2008-02-24 Thread Ryan
Upgraded to 2.0.2 and got the radrelay working using proxy.conf Ryan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Changing Reply-Message for expired Password

2008-02-24 Thread Tim White
Phil Mayers wrote: Tim White wrote: $ freeradius -v freeradius: FreeRADIUS Version 1.1.6, for host i486-pc-linux-gnu, built on Jun 8 2007 at 17:17:46 I'm using Freeradius, with MySQL (rlm_sql) as the backend for Coova Chilli (and it's JSON interface). Unfortunately, the reply-message when

RE: NAS-Group? - different replies to different NASes?

2008-02-24 Thread Ivan Kalik
You would normally use a DEFAULT entry in users file. In 2.0 you can use unlang and do it in sql. Ivan Kalik Kalik Informatika ISP Dana 24/2/2008, "Adrian" <[EMAIL PROTECTED]> piše: >Hello Ivan, > >Can you point me in the right direction with doing separate requests based >on the NAS-IP-Address

Re: Error LDAP module not available

2008-02-24 Thread Alan DeKok
C A wrote: > But the big problem is that I have not anywhere the file "rlm_ldap.so". > The file simply doesn't exists in the system and I think that when I was > installing the freeRADIUS that file created, or not? No. You need to *build* the module when FreeRADIUS builds. This usually involve

RE: NAS-Group? - different replies to different NASes?

2008-02-24 Thread Adrian
Hello Ivan, Can you point me in the right direction with doing separate requests based on the NAS-IP-Address Attribute? Do I do this in the radius.conf file or in the mysql DB somehow under the groups? Currently I use the nas list from the flat file and the DB for everything else including group

Re: Changing Reply-Message for expired Password

2008-02-24 Thread Phil Mayers
Tim White wrote: $ freeradius -v freeradius: FreeRADIUS Version 1.1.6, for host i486-pc-linux-gnu, built on Jun 8 2007 at 17:17:46 I'm using Freeradius, with MySQL (rlm_sql) as the backend for Coova Chilli (and it's JSON interface). Unfortunately, the reply-message when the password is expi

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread YvesDM
On Sun, Feb 24, 2008 at 2:59 PM, Ivan Kalik <[EMAIL PROTECTED]> wrote: > >'Idle-Timeout' timeout is an argument in Radius. Chillispot use this > >radius argument. > > Yes. > > >I think freeradius configuration can update automatically the > >Acct-Session-Time argument if it see a user is IDLE. > >

Re: Error LDAP module not available

2008-02-24 Thread C A
But the big problem is that I have not anywhere the file "rlm_ldap.so". The file simply doesn't exists in the system and I think that when I was installing the freeRADIUS that file created, or not? Best regards, Antares On Sun, Feb 24, 2008 at 6:17 PM, C A <[EMAIL PROTECTED]> wrote: > Hi, > > I'

Re: Error LDAP module not available

2008-02-24 Thread Vipul Ramani
Cheers, I am suspecting there is shared library path in not included in ld.so.conf , add in this then try it ... it will do On Sun, Feb 24, 2008 at 1:17 PM, C A <[EMAIL PROTECTED]> wrote: > Hi, > > I've compiled and installed the FreeRADIUS 2.0.0 version. Everything works > OK, I can run the

Error LDAP module not available

2008-02-24 Thread C A
Hi, I've compiled and installed the FreeRADIUS 2.0.0 version. Everything works OK, I can run the radtest example. The problem happens when I try to activate the LDAP module. After that when I run "radiusd -X" a get the error: /usr/local/etc/raddb/radiusd.conf[696]: Failed to link to module

Changing Reply-Message for expired Password

2008-02-24 Thread Tim White
$ freeradius -v freeradius: FreeRADIUS Version 1.1.6, for host i486-pc-linux-gnu, built on Jun 8 2007 at 17:17:46 I'm using Freeradius, with MySQL (rlm_sql) as the backend for Coova Chilli (and it's JSON interface). Unfortunately, the reply-message when the password is expired, contains a ne

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread Ivan Kalik
>'Idle-Timeout' timeout is an argument in Radius. Chillispot use this >radius argument. Yes. >I think freeradius configuration can update automatically the >Acct-Session-Time argument if it see a user is IDLE. >What do you think about this? No. Chillispot does the accounting and sends data to fr

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread Alan DeKok
GNULinuxSlackware wrote: > After the Idle-Timeout I need to be relogged to access to the Internet. > I just want tu update the session time value when there is an > Idle-Timeout for the user. Update the session time to... what? Why? > The session has an infinite time because the user need to l

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread GNULinuxSlackware
2008/2/24, Liran Tal <[EMAIL PROTECTED]>: > Pierre, > > So you are indeed looking for an Idle-Timeout, in this case how do you know > that it doesn't work? how can you be sure that your NAS is supposed to send > the Idle-Timeout at all? > > I am talking about tests that you should do. > Taking the

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread Liran Tal
Pierre, So you are indeed looking for an Idle-Timeout, in this case how do you know that it doesn't work? how can you be sure that your NAS is supposed to send the Idle-Timeout at all? I am talking about tests that you should do. Taking the basic scenario - you authenticate and surf to google.com

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread GNULinuxSlackware
2008/2/23, Ivan Kalik <[EMAIL PROTECTED]>: > This is nothing to do with Freeradius. Chillispot enforces Idle-Timeout. > If it "thinks" the users is active it will not disconnect the session. > There is nothing radius server can do about it. This is a Chillispot > problem. > 'Idle-Timeout' timeou

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread GNULinuxSlackware
2008/2/24, Liran Tal <[EMAIL PROTECTED]>: > Hey Pierre, > > Chillispot will disconnect the user but the problem you're facing is that it > isn't actually idle (can happen because of many reasons that you didn't take > in consideration). > > So instead of idle-timeout use the session-timeout attribu

Re: 'Idle-Timeout' and the 'Acct-Session-Time' argument

2008-02-24 Thread GNULinuxSlackware
2008/2/23, Alan DeKok <[EMAIL PROTECTED]>: > GNULinuxSlackware wrote: > > There is a radius database with a lot of tables : > > -radgroupreply > > I can insert into the > > 'Idle-Timeout' argument. > > > Do you know what that does? Yes when I set the 'Idle-Timeout' to a value (in seconds) t