Re: Decoupled accounting

2009-07-31 Thread Kanwar Ranbir Sandhu
On Thu, 2009-07-30 at 19:24 +0100, Ivan Kalik wrote: Just in decoupled-accounting. But you need to divert accounting to write-detail virtual server in listen section. I'm not sure I've configured the write_detail virtual server in the listen section properly. This is what I have at the moment:

Re: coa functionality in server question

2009-07-31 Thread Anton G.
Alan DeKok ?: Anton G. wrote: It seems that i didn`t understand sites-available/originate-coa right and miss something in my conf Could You please clarify it for me? You need to link it into sites-enabled/originate-coa. The server reads only sites-enabled, not sites-available.

bootstrap problem

2009-07-31 Thread shivashankar
hi, i am using Freeradius2.1.6 bash-3.00# /usr/local/etc/raddb/certs/bootstrap sh: test: argument expected *** Error code 1 The following command caused the error: if [ -e /dev/urandom ] ; then \ dd if=/dev/urandom of=./random count=10 /dev/null 21; \ else \ date ./random; \

RE: bootstrap problem

2009-07-31 Thread Leighton Man
Hi, I had this problem a while back on solaris 10. -e in the if statement doesn't work. -c worked for me. Hope this helps, Leighton -Original Message- From: freeradius-users-bounces+l.j.man=hud.ac...@lists.freeradius.or g

Re: Freeradius-Users Digest, Vol 51, Issue 137

2009-07-31 Thread Gilbert Lo
Thank you for your message. I am away until August 7th. I will respond to your message on my return . For urgent matters, please contact helpd...@stgeorges.bc.ca . Cheers, Gilbert Lo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Decoupled accounting

2009-07-31 Thread Ivan Kalik
I'm not sure I've configured the write_detail virtual server in the listen section properly. This is what I have at the moment: listen { ipaddr = 1.1.1.2 port = 0 interface = eth0 type = acct virtual_server =

Re: Decoupled accounting

2009-07-31 Thread Devinder Singh
Hi Ivan Ned you help here Module: Linked to sub-module rlm_eap_tls Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512 dh_key_length = 512 verify_depth = 0 pem_file_type = yes

Re: Decoupled accounting

2009-07-31 Thread Devinder Singh
I my certs /pass directord is empty 2009/7/31 Devinder Singh devinbhul...@gmail.com: Hi Ivan Ned you help here Module: Linked to sub-module rlm_eap_tls  Module: Instantiating eap-tls   tls {        rsa_key_exchange = no        dh_key_exchange = yes        rsa_key_length = 512        

Re: Decoupled accounting

2009-07-31 Thread Devinder Singh
Hi Ivan This is how generetd the certs and radiusd -X gives error linux-7v1x:/etc/raddb/certs # ./CA.root myettelap Generating a 1024 bit RSA private key ..++ .++ writing new private key to 'pem/newreq.pem' - You are about to be asked to enter information that will be

Re: bootstrap problem

2009-07-31 Thread shiva shankar
thanx Leighton, i fixed the problem random: @if [ -e /dev/urandom ] ; then \ i removed the empty line between random and @if [ -e /dev/urandom ] ; then \ and changed -c to -e.now it is workign fine thanx alot for u r help regard's shiva shankar 2009/7/31 Leighton Man

Re: Decoupled accounting

2009-07-31 Thread Kanwar Ranbir Sandhu
On Fri, 2009-07-31 at 09:35 +0100, Ivan Kalik wrote: It should, as long as the listen section in server blah isn't identical (as it is in your examples). This acct listen section is actually from the server blah config. The one in the other email was the original config before I made my

Re: Question about outer identity

2009-07-31 Thread Martin Pauly
Hi Alan, Replace the ldap123 line in the authorize seciton with: if (!EAP-Message) { ldap123 } works great and is logical indeed -- thanks! Just for myself and others try to learn from examples: I had thought that eap { ok = return

password encryption problem

2009-07-31 Thread Hegedus Gabor
Hi all! I have a problem, I want to authenticate console users in cisco switches. In the 2960, the switch send the password in cleartext, nothing problem. User-Password=password but int the 2950, the switch can only send in crypted version like this: NAS-Port-Type = Virtual User-Name = test

Re: password encryption problem

2009-07-31 Thread Nicolas Goutte
Am 31.07.2009 um 15:13 schrieb Hegedus Gabor: Hi all! I have a problem, I want to authenticate console users in cisco switches. In the 2960, the switch send the password in cleartext, nothing problem. User-Password=password Please try using Cleartext-Password := password in the

Re: password encryption problem

2009-07-31 Thread Hegedus Gabor
Nicolas Goutte wrote: Am 31.07.2009 um 15:13 schrieb Hegedus Gabor: Hi all! I have a problem, I want to authenticate console users in cisco switches. In the 2960, the switch send the password in cleartext, nothing problem. User-Password=password Please try using Cleartext-Password :=

Re: password encryption problem

2009-07-31 Thread Hegedus Gabor
Hegedus Gabor wrote: Nicolas Goutte wrote: Am 31.07.2009 um 15:13 schrieb Hegedus Gabor: Hi all! I have a problem, I want to authenticate console users in cisco switches. In the 2960, the switch send the password in cleartext, nothing problem. User-Password=password Please try using

Unknown attribute Max-All-Session

2009-07-31 Thread boroba --
hi all ; i have installed freeradius on centos 5.2 he are packege installed: freeradius-1.1.3-1.4.el5 freeradius-mysql-1.1.3-1.4.el5 and i follow the document http://wiki.freeradius.org/Rlm_sqlcounter and when i start radius i get error [r...@squid raddb]# radiusd -x Starting - reading

Re: Unknown attribute Max-All-Session

2009-07-31 Thread Ivan Kalik
i have installed freeradius on centos 5.2 he are packege installed: freeradius-1.1.3-1.4.el5 freeradius-mysql-1.1.3-1.4.el5 Upgrade. sqlcounter was experimental then. http://wiki.freeradius.org/Red_Hat_FAQ Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See

RE: Unknown attribute Max-All-Session

2009-07-31 Thread boroba --
From: flac...@hotmail.com To: flac...@hotmail.com Subject: RE: Unknown attribute Max-All-Session Date: Fri, 31 Jul 2009 15:56:03 + thanks for reply i have install freeradius2 and configure it like http://wiki.freeradius.org/Rlm_sqlcounter and i get error when i start it. Fri

RE: Unknown attribute Max-All-Session

2009-07-31 Thread Ivan Kalik
i have install freeradius2 and configure it like http://wiki.freeradius.org/Rlm_sqlcounter and i get error when i start it. Fri Jul 31 15:55:36 2009 : Info: rlm_sql (sql): Driver rlm_sql_mysql (module rlm_sql_mysql) loaded and linked Fri Jul 31 15:55:36 2009 : Info: rlm_sql (sql):

load-balance behavior

2009-07-31 Thread Alexandre Chapellon
Hello the list, Does the load-balance type in home_server_pool can handle when one the home_server of the pool is down? Does it loose tickets in such a situation or can i consider it as a fail-over pool too? thx - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: load-balance behavior

2009-07-31 Thread Alan DeKok
Alexandre Chapellon wrote: Does the load-balance type in home_server_pool can handle when one the home_server of the pool is down? Yes. Does it loose tickets in such a situation or can i consider it as a fail-over pool too? load-balance for home_server_pools will skip home servers that

RE: Freeradius and memory usage

2009-07-31 Thread Roy Kartadinata
An update on this issue, I was finally able to split the detail file log into hourly by adding another entry to modules/detail.log file. So far the memory usage is still increasing but in a much slower rate. Marinko Tarlac wrote: Maybe detail file is to large ? I had a similar problem when

Restart radiusd after new user added

2009-07-31 Thread Blalock, Paul (NCC)
I am setting up freeradius, and am having issues with adding users and having to restart radiusd to pick up the new users. Is sql the only other way to go, or is there a way to point the users file to another directory? Also, is there a way to have username passwords formatted as (user pass) or

Re: Restart radiusd after new user added

2009-07-31 Thread Alexandre Chapellon
Le vendredi 31 juillet 2009 à 14:45 -0500, Blalock, Paul (NCC) a écrit : I am setting up freeradius, and am having issues with adding users and having to restart radiusd to pick up the new users. Is sql the only other way to go, or is there a way to point the users file to another directory?

Re: Restart radiusd after new user added

2009-07-31 Thread Alexandre Chapellon
Please reply to the list. Le vendredi 31 juillet 2009 à 16:17 -0500, Paul Blalock a écrit : I tried the radmin hup files, command, with no luck. The command was accepted, but it did nothing. What version of freeradius are you runing? If you have 2.1.1 or greater, just activate the

Problem configuring CoA

2009-07-31 Thread DILLIOTT Tony
Hi * I am trying to get COA server running with 2.1.6. After downloading and successfully installing on Redhat Linux setup, I have not been able to get COA to work at all. After a lot of investigation, I have found a discrepency with the clients.conf file in the tar file I downloaded in

Re: Freeradius and memory usage

2009-07-31 Thread Marinko Tarlac
Hi Well I don't use is.. Only in case I need to debug something... I have a small problem with triggering AccountingOff query (I don't know what causes this) which closes all opened sessions in database... Now I found a work around for this... You can try to increase Interim-update

RE: Freeradius and memory usage

2009-07-31 Thread Roy Kartadinata
Marinko Tarlac wrote: Hi Well I don't use is.. Only in case I need to debug something... I have a small problem with triggering AccountingOff query (I don't know what causes this) which closes all opened sessions in database... Now I found a work around for this... You can try to

radwho error: Is this minor typo error in rpm packaging?

2009-07-31 Thread Deepak
Hi, I have rpm based freeradius package installed in my CentOS 5.3 box. In the course of experimentation, I noticed that radwho gives me following error: == /var/log/radius/sradutmp: No such file or directory == I guess this is a minor typo error in rpm package. Actually radwho