Re: Trouble with Robust Proxy Accounting

2009-04-10 Thread Alan DeKok
JDL wrote: In FreeRADIUS 2.x, the radrelay functions have been built into radiusd. That's the intention. However, I seem to be having problems with data loss. Everything works fine when the remote accounting server is up. However, when it goes down, here is what I am seeing. ... 4) Here

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Alan DeKok
Justin Steward wrote: Thanks for the reply. Since SQL modules can't go in authenticate, this would have to be in authorize, yes? How then, would I get the reply attributes out of the SQL database? Or am I misunderstanding something? Maybe you could describe exactly what you want to do. I

Sending Access-Challenge

2009-04-10 Thread Laszlo Fekete
Hello! I'm new to this list and don't found archive or something where maybe somebody answered my question. So I want a radius server to wifi auth with eap-ttls/peap, ldap and not plain-text passwords. I downloaded 2.1.4 source and create debian package without modification, do some basic

Freeradius server not starting!

2009-04-10 Thread ramesh p
[r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 05:52:13 2009 : Info: Starting - reading configuration files ... radiusd: Couldn't open /usr/local/fnmt/var/log/radius/radius.log for logging: Permission denied (rlm_exec: Wait=yes but no output

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
I'm using radius version 1.1.6 On Fri, Apr 10, 2009 at 4:44 PM, ramesh p rock786...@gmail.com wrote: [r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 05:52:13 2009 : Info: Starting - reading configuration files ... radiusd: Couldn't open

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
Disable SELinux. - Original Message - From: ramesh p To: FreeRadius users mailing list Sent: Friday, April 10, 2009 3:14 PM Subject: Freeradius server not starting! [r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 05:52:13

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
Already it's in disable state. [r...@localhost raddb]# more /etc/sysconfig/selinux # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
Hmm, what the linux u use? or u use Sun OS? pach /usr/local/fnmt/var/log/radius/radius.log is non-standard, this directory exist? Can u create file in? - Original Message - From: ramesh p To: FreeRadius users mailing list Sent: Friday, April 10, 2009 3:25 PM Subject: Re:

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
Linux localhost.localdomain 2.6.9-42.ELsmp #1 i686 i686 i386 GNU/Linux The file(/usr/local/fnmt/var/log/radius/radius.log) exists. 2009/4/10 Волошин Вячеслав volos...@maks.net Hmm, what the linux u use? or u use Sun OS? pach /usr/local/fnmt/var/log/radius/radius.log is non-standard, this

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
set pach /usr/local/fnmt/var/log/radius/ group owner radiusd, and give write and read access for group. check this into user radiusd. - Original Message - From: Волошин Вячеслав To: FreeRadius users mailing list Sent: Friday, April 10, 2009 3:31 PM Subject: Re: Freeradius

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Justin Steward
On Fri, Apr 10, 2009 at 7:32 PM, Alan DeKok al...@deployingradius.comwrote: Justin Steward wrote: Thanks for the reply. Since SQL modules can't go in authenticate, this would have to be in authorize, yes? How then, would I get the reply attributes out of the SQL database? Or am I

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
[r...@localhost data]# ls -ltr /usr/local/fnmt/var/log/radius total 16 drwx-- 2 root root 4096 Apr 28 2007 radacct -rwxr-xr-x 1 root root 8298 Apr 10 06:43 radius.log 2009/4/10 Волошин Вячеслав volos...@maks.net set pach /usr/local/fnmt/var/log/radius/ group owner radiusd, and give

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
ls -ltr /usr/local/fnmt/var/log/ drwxr-xr-x 3 nobody root 4096 Jun 15 2007 radius Thanks, Ramesh. 2009/4/10 ramesh p rock786...@gmail.com [r...@localhost data]# ls -ltr /usr/local/fnmt/var/log/radius total 16 drwx-- 2 root root 4096 Apr 28 2007 radacct -rwxr-xr-x 1 root root 8298

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
[r...@bill etc]# [r...@bill radius]# ls -ltr total 12 drwxr-xr-x 3 radiusd radiusd 4096 Mar 19 16:41 radacct -rw-r- 1 radiusd radiusd 111 Apr 10 15:37 radius.log set this. - Original Message - From: ramesh p To: FreeRadius users mailing list Sent: Friday, April 10, 2009

Re: Sending Access-Challenge

2009-04-10 Thread Alan DeKok
Laszlo Fekete wrote: So I want a radius server to wifi auth with eap-ttls/peap, ldap and not plain-text passwords. I downloaded 2.1.4 source and create debian package without modification, do some basic configuration and testing, radtest from local is fine, but radeapclient eap-md5 testing

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
now its giving like this... [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 07:15:32 2009 : Info: Starting - reading configuration files ... radiusd # ps -eaf|grep radiusd root 4412 31100 0 07:15 pts/000:00:00 grep radius No pid

Re: Freeradius server not starting!

2009-04-10 Thread A . L . M . Buxey
Hi, now its giving like this... [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 07:15:32 2009 : Info: Starting - reading configuration files ... radiusd # ps -eaf|grep radiusd root 4412 31100 0 07:15 pts/000:00:00 grep radius

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
Now i have given the permissions to radiusd directory (usr/local/fnmt/var/run/ radiusd/) It's working fine. Thank you all. Regards, Ramesh. On Fri, Apr 10, 2009 at 6:40 PM, a.l.m.bu...@lboro.ac.uk wrote: Hi, now its giving like this... [r...@localhost init.d]#

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
Failed creating PID file /usr/local/fnmt/var/run/radiusd/radiusd.pid: Permission denied set this: [r...@bill ~]# ls -ltr /var/run/radiusd total 4 srw-rw 1 rootradiusd 0 Apr 10 17:26 radiusd.sock -rw-r--r-- 1 radiusd radiusd 6 Apr 10 17:26 radiusd.pid in your file

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Alan DeKok
Justin Steward wrote: I want to return some radius reply attributes from an SQL database, check the user's password against an openLDAP server As I said... LDAP isn't an authentication protocol. (maybe a Windows Server running AD at some point in the future), and if possible fall back

Re: Sending Access-Challenge

2009-04-10 Thread Laszlo Fekete
Alan DeKok wrote: Don't use radeapclient. See my web page for instructions on setting up EAP: http://deployingradius.com I tried the eapol_test from the web page ( http://deployingradius.com/scripts/eapol_test/ ). With Eap-ttls pap/chap/ms-chap said success: RADIUS packet

Re: Sending Access-Challenge

2009-04-10 Thread A . L . M . Buxey
Hi, But when I try with eap-ttls eap-md5/eap-mschapv2, eap-peap eap-mschapv2 it fails: PEAP works but TTLS fails - so, does your eap.conf have ttls configured? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Sending Access-Challenge

2009-04-10 Thread Alan DeKok
Do *not* CC me on messages sent to the list. In case you hadn't noticed, I already read the list. And do *not* set return receipt requested. It's rude, and it causes me to be biased against people who use it. Laszlo Fekete wrote: ... But when I try with eap-ttls eap-md5/eap-mschapv2,

freeradius crashes if can not connect to mysql

2009-04-10 Thread Oguzhan Kayhan
Hello, I noticed that..if a network error or another connection problem occurs between freeradius and mysql server, freeradius service just exits... And sure service stops automatically. Is there any way to give a timeout value or retry number for mysql in freeradius configuration that prevents

freeradius-server-2.1.4 make fails

2009-04-10 Thread Thor Spruyt
Hi, I'm trying to compile freeradius-server-2.1.4 on CentOS 4.6 32-bit Configure command: ./configure --prefix=/opt/freeradius-2.1.4 --with-mysql --with-postgresql --with-openldap --without-snmp --without-openssl --without-krb5 --without-vmps But make fails:

Re: freeradius-server-2.1.4 make fails

2009-04-10 Thread A . L . M . Buxey
hi, fixed in CVS IIRC - for now, enable vmps support and it'll compile alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Sending Access-Challenge

2009-04-10 Thread Laszlo Fekete
Alan DeKok wrote: Do *not* CC me on messages sent to the list. In case you hadn't noticed, I already read the list. And do *not* set return receipt requested. It's rude, and it causes me to be biased against people who use it. Sorry, I will watching for this in the future. Laszlo

Re: freeradius-server-2.1.4 make fails

2009-04-10 Thread Волошин Вячеслав
use this : http://www.howtoforge.com/how-to-create-a-freeradius-2.1.1-6-rpm-package-on-centos-5.2 for your version freeradius, I m use this. - Original Message - From: Thor Spruyt thor.spr...@telenet.be To: freeradius-users@lists.freeradius.org Sent: Friday, April 10, 2009 8:43 PM

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Justin Steward
On Fri, Apr 10, 2009 at 11:51 PM, Alan DeKok al...@deployingradius.comwrote: Justin Steward wrote: I want to return some radius reply attributes from an SQL database, check the user's password against an openLDAP server As I said... LDAP isn't an authentication protocol. (maybe a