Re: mschap auth for multiple realms off different domain ctlrs?

On Tue, 28 Jul 2009, Ivan Kalik wrote: Thankyou for the reply and suggestion. I've been interstate and just back now to try it. Create two mschap module instances, mschap_co1 with first ntlm_auth line and mschap_co2 with second one. ok. Then create redundancy inside Auth-Type MS-CHAP

Re: rlm_perl problems]

Garber, Neal wrote: Igor: I hope you weren't offended by my assumption - I wasn't sure, based upon your comment, and I was just trying to help. If I offended you, I apologize. By the way, out of curiosity, did the patch work for you on 2.1.7 also? Don't worry, i wasn't offended at

Re: groupcmp fails during tunneled request

Hello again, I'll try to be more specific so someone can give me an advice. Here is the thing: the server is running, and now the group check is failing since I can't be authorised because it says that I don't have a huntgroup (ie: no huntrgoup). On my ldap account, I do have them. I stop the

Received radius reply from wrong address

Hi, i have 2 virtual servers with 2 ip addresses on same subnet.. For ex for virtserver1 192.168.1.10 virtserver2 192.168.1.11 I have a NAS Server (on a different ip subnet) with 2 different configs running on 2 different interfaces also. But as i see i got the msg Received radius reply from

Re: groupcmp fails during tunneled request

I stop the server and put it in debug mode: it works flawlessly!!! I stop the debug and restart freeradius, it works a while, then it starts failing again And I have nothing more in the logs than: Error: TLS Alert read:fatal:access denied Fix that. It works in debug mode because server

Re: Received radius reply from wrong address

Isnt radius suppose to reply with the same destination address it receives??? If it is configured that way. See listen section of radiusd.conf. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius-Users Digest, Vol 51, Issue 132

Thank you for your message. I am away until August 7th. I will respond to your message on my return . For urgent matters, please contact helpd...@stgeorges.bc.ca . Cheers, Gilbert Lo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Received radius reply from wrong address

Oguzhan Kayhan wrote: But as i see i got the msg Received radius reply from wrong address from them whenever i try to send a req to radius for authentication. You need to put the real IP addresses into the listen section. Don't use ipaddr = * It seems like radius answers back to the nas

Re: Received radius reply from wrong address

On virtual servers here is my config. listen { ipaddr = 192.168.14.210 port = 1812 type = auth virtual_server = dormnet } listen { ipaddr = 192.168.16.210

Re: Received radius reply from wrong address

Oguzhan Kayhan wrote: On virtual servers here is my config. Use tcpdump to see which IP is being used to send the packets. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Question about outer identity

Hi all, I have 2.1.6 and things basically work. But I just came across a question about the processing of outer/inner identity: As I understand it, in case of a non-EAP RADIUS request (eg from my old modem servers), there is no tunnel and hence no inner identity. == Autz and Auth are done by

Re: Question about outer identity

Martin Pauly wrote: I have 2.1.6 and things basically work. But I just came across a question about the processing of outer/inner identity: As I understand it, in case of a non-EAP RADIUS request (eg from my old modem servers), there is no tunnel and hence no inner identity. == Autz and Auth

urgent

Greetings, It makes two days that I tried to find something about dialupadmin installation (with LDAP) but it was in vain. I thought that I can replace it with something like phpRadmin but phpRadmin web site doesn't work(maybe in my country or...): I was not able to download the source. It will be

Re: urgent

It makes two days that I tried to find something about dialupadmin installation (with LDAP) but it was in vain. I thought that I can replace it with something like phpRadmin but phpRadmin web site doesn't work(maybe in my country or...): I was not able to download the source. It will be

Re: Question about outer identity

Hi, I have 2.1.6 and things basically work. But I just came across a question about the processing of outer/inner identity: As I understand it, in case of a non-EAP RADIUS request (eg from my old modem servers), there is no tunnel and hence no inner identity. == Autz and Auth are done by

wrt54g and freeradius

Hello everyone. I need to contact someone who knows how to do or able to use a lynksys WRT54G to authenticate users against a freeradius server, I am having trouble implementing it. I already have the freeradius to work well with a mysql database and try radtest works fine. But wanting to do

/usr/local/sbin/radiusd -X problem

hi All, i am using freeradius2.1.6 on solaris 10 when i run server i am getting following error bash-3.00# /usr/local/sbin/radiusd -X FreeRADIUS Version 2.1.6, for host sparc-sun-solaris2.10, built on Jul 30 2009 at 20:25:20 Copyright (C) 1999-2009 The FreeRADIUS server project and

Re: /usr/local/sbin/radiusd -X problem

Hi, looks like you dont have make and/or openssl tool installed. look in the certs directory to see the script that gets run on first load...run the stuff and then edit the eap.conf to it doesnt run the bootstrap again. alan - List info/subscribe/unsubscribe? See

Re: /usr/local/sbin/radiusd -X problem

/usr/local/etc/raddb/certs/bootstrap: make: not found /usr/local/etc/raddb/certs/bootstrap: openssl: not found It seems that you don't have (correct) $PATH for make and openssl configured (I would assume that those are installed by default). Strange thing is: how did the server compile so you

Re: wrt54g and freeradius

I need to contact someone who knows how to do or able to use a lynksys WRT54G to authenticate users against a freeradius server, I am having trouble implementing it. I already have the freeradius to work well with a mysql database and try radtest works fine. But wanting to do this through the

EAP errors in 2.1.1

We are seeing an increasing number of eap error messages: Error: rlm_eap: No EAP session matching the State variable As mentioned in the Changelog in later version an eap error has been detected and fixed in 2.1.4 Fix EAP-TLS bug. Patch from Arnaud Ebalard Is this bug-fix related to the error

RE: mschap auth for multiple realms off different domain ctlrs?

radiusd.conf[723] Failed to link to module 'rlm_mschap_co1': Shared object rlm_mschap_co1.so not found, required by radiusd radiusd.conf[1949] Unknown module mschap_co1. radiusd.conf[1949] Failed to parse mschap_co1 entry. Did you create 3 instances of mschap using aliases like below?

Re: EAP errors in 2.1.1

Wegener, Norbert wrote: We are seeing an increasing number of eap error messages: Error: rlm_eap: No EAP session matching the State variable As mentioned in the Changelog in later version an eap error has been detected and fixed in 2.1.4 Fix EAP-TLS bug. Patch from Arnaud Ebalard Is

Re: EAP errors in 2.1.1

Hi, We are seeing an increasing number of eap error messages: Error: rlm_eap: No EAP session matching the State variable either your EAP stuff is being proxied to your server via different servers and therefore not matching (all the EAP session must go through the same proxy path), or the

Re: groupcmp fails during tunneled request

Ivan Kalik a écrit : I stop the server and put it in debug mode: it works flawlessly!!! I stop the debug and restart freeradius, it works a while, then it starts failing again And I have nothing more in the logs than: Error: TLS Alert read:fatal:access denied Fix that. It works in

Re: wrt54g and freeradius

This is the complete out of freeradius -X... rad_recv: Access-Request packet from host 10.1.100.4 port 2048, id=0, length=121 User-Name = pepe NAS-IP-Address = 10.1.100.4 Called-Station-Id = 002369490b7b Calling-Station-Id = 001de0249d5b NAS-Identifier =

Anyone familiar with configuring RADIUS for Nokia IP290 or firewalls

All, Can anyone guide me or provide some examples on how to implement RADIUS on Nokia firewalls using their Windows LDAP credentials? I am currently using version 2.1.5. I would like to test accessing the appliance via HTTPS or SSH using our Windows Credentials. Anyone familiar with this

Re: rlm_ldap not found

07/29/2009 03:32 AM, RANDRIAMAMPIONONA José Johnny:: Hi everyone, I have a problem concerning my configuration and I am wondering if somebody can help me. *freeradius-server-2.1.6* is installed without warning on* CentOS v5.3* ...configured on localhost and tested. Everything's OK. You should

Re: Decoupled accounting

On Wed, 2009-07-29 at 13:23 -0400, Kanwar Ranbir Sandhu wrote: I'm using freeradius 2.1.6 and want to move to decoupled accounting. I understand the example configs, but one question I still have is this: do I have to have preacct and accounting sections in my virtual.blah.com file (very

RE: Freeradius and memory usage

Alan DeKok wrote: Roy Kartadinata wrote: I didn't see any error on error log, it looks clean. But this is what the log looks like when it started to run out of memory the other night: Wed Jul 22 22:03:42 2009 : Error: Rejecting request 16183416 due to lack of any response from home server

Re: Decoupled accounting

As you can see, decoupled-accounting has the same preacct and accounting sections that virtual.blah.com has. So, would I need them in both, or is it enough to just have preacct and accounting in the decoupled-accounting file? Just in decoupled-accounting. But you need to divert accounting to

Re: Anyone familiar with configuring RADIUS for Nokia IP290 or firewalls

Can anyone guide me or provide some examples on how to implement RADIUS on Nokia firewalls using their Windows LDAP credentials? There is no such thing as Windows LDAP. Active Directory? I am currently using version 2.1.5. I would like to test accessing the appliance via HTTPS or SSH

Re: Decoupled accounting

On Thu, 2009-07-30 at 19:24 +0100, Ivan Kalik wrote: Just in decoupled-accounting. But you need to divert accounting to write-detail virtual server in listen section. Yes, I've done that. I actually copied up my old virtual.blah.com config that didn't have the write-detail virtual server in the

Re: Anyone familiar with configuring RADIUS for Nokia IP290 or firewalls

I apologize for not being clear. I am using FreeRADIUS with LDAP working properly using Active Directory. I have accounting working properly with certain network devices like Cisco switches. I'd like to know if anyone is familiar with setting up Nokia firewalls that's using IPSO 4.2. Are there

DB Handles Rejects

During a recent network incident we had some very high churn in PPP clients. Our NASes (Multiple Cisco 7200 as VPDN LNS) didn't appear to be able to authenticate as quickly as they needed to. In the Radius packet logs we see quite a few Rejects for requests that should have been OK - indeed the

Re: DB Handles Rejects

Le jeudi 30 juillet 2009 à 22:53 +0100, Dean Smith a écrit : During a recent network incident we had some very high churn in PPP clients. Our NASes (Multiple Cisco 7200 as VPDN LNS) didn’t appear to be able to authenticate as quickly as they needed to. In the Radius packet logs we see quite a

WPA Authentiction

Hello 2009/7/31 Devinder Singh devinbhul...@gmail.com: Hi I am using Free Radius version 2.0.1 and have set up the Root Server and Client Certificates When i run Radiusd - X i get Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange