Re: Problem with regular expressions in users file (v.2.0.x)

2008-06-29 Thread Alan DeKok
Massimo Pistoni wrote: The symptom is that the third (but also the fourth for simpler tries) of the following users statements does not match in the case of authentication based on a [EMAIL PROTECTED] style (with Suffix =! lnf.infn.it):

Re: dhcp server - some patches

2008-06-29 Thread Alan DeKok
Haralds Ulmanis wrote: Second one ... patches for updating reply-code correctly depending on modules answer(last DHCP-Message-Type update will be in action). Actualy client must!!! supply in some update section DHCP-Message-Type. Otherwise i think no reply at all(not tested) :) . The

dialup admin httpd/error_log

2008-06-29 Thread Deep Purple
Hello Fedora 5   httpd  2.2.2  ( Release: 1.3) php 5.1.6   ( Release : 1.6) /var/log/httpd/error_log  PHP Notice:  import_request_variables() [a href='function.import-request-variables'function.import-request-variables/a]: No prefix specified - possible security hazard in

Re: dhcp server - some patches

2008-06-29 Thread EvilEzh
In some cases, the server needs to send an explicit NAK, in order to force the client to re-broadcast a discover. That's true, but i'll choose when send NAK and when not. Or not respond at all. Of course we can make some rfc check (discover-offer; request-ack,nak; and so on). Actualy i'm

Re: dhcp server - some patches

2008-06-29 Thread Alan DeKok
EvilEzh wrote: That's true, but i'll choose when send NAK and when not. Or not respond at all. Yes. The code I committed allows that. It also allows the server to just to the right thing if you don't specify a message type. Actualy i'm implementing it with jradius module :). Good that can

Re: FreeRadius Mysql Problem Solaris

2008-06-29 Thread A . L . M . Buxey
Hi, crle -u -v -l /usr/local/ssl/lib:/usr/local/lib:/usr/local/BerkeleyDB.4.2/lib:/etc/lib:/usr/share/l ib:/etc/security/lib:/usr/sfw/lib:/usr/openwin/lib:/usr/css/lib:/usr/xpg4/lib:/usr/dt/lib:/usr/loca l/mysql/lib/mysql its cant find development headers - ensure that the

freeradius accepts anybody

2008-06-29 Thread Sergio Yébenes Moreno
Hi, using freeradius with EAP-TLS, the CommonName field of client certificate contains this: pepe If my file raddb/users constains this: pepe123 Auth-Type := EAP Radius sends an Access-Acept and they shouldn't. Can anybody help me? Thanks a lot - List info/subscribe/unsubscribe? See

Re: freeradius accepts anybody

2008-06-29 Thread Alan DeKok
Sergio Yébenes Moreno wrote: using freeradius with EAP-TLS, the CommonName field of client certificate contains this: pepe If my file raddb/users constains this: pepe123 Auth-Type := EAP Radius sends an Access-Acept and they shouldn't. (1) EAP-TLS authenticates users based on client

Re: freeradius accepts anybody

2008-06-29 Thread Ivan Kalik
First line in eap.conf says: Whatever you do, do NOT set 'Auth-Type := EAP'. Ivan Kalik Kalik Informatika ISP Dana 30/6/2008, Sergio Yébenes Moreno [EMAIL PROTECTED] piše: Hi, using freeradius with EAP-TLS, the CommonName field of client certificate contains this: pepe If my file raddb/users

Re: freeradius accepts anybody

2008-06-29 Thread Sergio Yébenes Moreno
Alan DeKok escribió: Sergio Yébenes Moreno wrote: using freeradius with EAP-TLS, the CommonName field of client certificate contains this: pepe If my file raddb/users constains this: pepe123 Auth-Type := EAP Radius sends an Access-Acept and they shouldn't. (1) EAP-TLS authenticates

Re: freeradius accepts anybody

2008-06-29 Thread Alan DeKok
Sergio Yébenes Moreno wrote: Thanks, it's really easy to understand. Do you know if freeradius can make ocsp request? It cannot. As always, patches are welcome. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: sqlippool error

2008-06-29 Thread Peter Nixon
On Sun 22 Jun 2008, Deep Purple wrote: Hello Please Help me sqlippool error select FramedIPAddress,NASIPAddress,CallingStationID,username from radippool; FramedIPAddress| NASIPAddress | CallingStationID | username 172.16.2.1 | 127.0.0.1  | 121.111.111.123 |  user1 172.16.2.2