Re: FreeRadius 2.7 virtual memory

2009-12-16 Thread Alan DeKok
Dinh Pham Cong wrote: Hi all, My Radiusd seems to take a lot of virtual memory. Here is what shows up in top command 4799 mysql 15 0 2606m 697m 3616 S 50.6 4.3 31:46.85 mysqld 14959 root 15 0 10.1g 46m 1456 S 11.1 0.3 1:24.67 radiusd Do you think that I have kind of

RE: accounting

2009-12-16 Thread Santiago Balaguer García
1. Can freeradius log accounting info in a local file, meaning not to use a sql database? If yes, how to enable that and where the log files will be (configurable?) You needn't use a database if you do ot want. Depend on the level of the detail you want there is the var/log/freeradius

Re: Rejecting User By their Calling-Station-Id (Mac Address)

2009-12-16 Thread Alan DeKok
Alex M wrote: Well i guess i'm back to my problem :( I tried group thing and i'm getting som strange un-constant results :( Can some one tell me how the logic works for groupcheck? Why? You were given a simple solution. I suggest trying that. Trying to figure out how to get groups to do

Re: Managing the RADIUS database

2009-12-16 Thread Alan DeKok
Steve Bertrand wrote: I'm curious to know what you use to manage your RADIUS database, particularly the accounting tables. cron, and custom Perl scripts. Since then, I've written (ie. been writing) an ISP mgmt/accounting system that relies very heavily on the RADIUS accounting information

Re: Accounting question

2009-12-16 Thread Alan DeKok
David Peterson wrote: What I am not understanding at this point is how the authentication works with the username hashed or using hex stuff but the accounting doesn't. You can see on this debug that the username looks the same when its authenticated as it does when it's used for accounting

Re: FreeRadius 2.7 virtual memory

2009-12-16 Thread Dinh Pham Cong
Hi Alan The version I am using is 2.1.7 Regards, Dinh On Wed, Dec 16, 2009 at 3:24 PM, Alan DeKok al...@deployingradius.comwrote: Dinh Pham Cong wrote: Hi all, My Radiusd seems to take a lot of virtual memory. Here is what shows up in top command 4799 mysql 15 0 2606m 697m

Help on debugging Freeradius

2009-12-16 Thread Dinh Pham Cong
Hi all, My Freeradiusd 2.1.7 got crashed a lot of times today so I decided to run radiusd in gdb /etc/init.d/radiusd stop # gdb /usr/local/sbin/radiusd GNU gdb Fedora (6.8-27.el5) Copyright (C) 2008 Free Software Foundation, Inc. License GPLv3+: GNU GPL version 3 or later

Re: Help on debugging Freeradius

2009-12-16 Thread Dinh Pham Cong
Hi, I can view thread information of radiusd process by attaching its process ID into gdb as follows gdb -q - 19201 After that (gdb) bt #0 0x0037ed8cc4c2 in select () from /lib64/libc.so.6 #1 0x2aefb56dd817 in fr_event_loop (el=0x72848a0) at event.c:378 #2 0x0041a877 in main

Re: radiusd -X

2009-12-16 Thread kachin Agarwal
Hi, After a lot of investigation, i have found the reason for my low auth-rate. The auth-rate i m gettin now is 3/sec. so approx. 330 ms per authentication. this is a radiusd -X : eap] processing type peap [peap] processing EAP-TLS [peap] eaptls_verify returned 7 [peap] Done initial

Re: radiusd -X

2009-12-16 Thread Paul Ryszka
Hi, Get yourself hardware SSL accelerator card supported by openssl libraries or increase cpu speed. On Wed, 2009-12-16 at 15:38 +0530, kachin Agarwal wrote: Hi, After a lot of investigation, i have found the reason for my low auth-rate. The auth-rate i m gettin now is 3/sec. so

Re: radiusd -X

2009-12-16 Thread kachin Agarwal
Hey, I am new to this.. wat does this hardware SSL accelerator card do???  where do u get this??? Thanks Regards, Kachin The INTERNET now has a personality. YOURS! See your Yahoo! Homepage. http://in.yahoo.com/- List info/subscribe/unsubscribe? See

Re: windows domain\user change to u...@domain

2009-12-16 Thread Alan Buxey
Hi, in the /etc/raddb/modules/realm file, realm ntdomain { format = prefix delimiter = \\ } In the proxy.conf realm H1 { type = radius nostrip authhost= 1.2.3.4:1812http://1.2.3.4:1812/ accthost=

Re: unlang after chap returns reject

2009-12-16 Thread Alan Buxey
Hi, i try this unlang in chap authenticate { snip you seem to have ignored the 3 lines directly above what you cut and pasted... I'll remind you # Please do not put unlang configurations into the authenticate # section. Put them in the post-auth section instead. That's what # the

Re: Problem with EAP TLS authentication in Freeradius

2009-12-16 Thread senthil kumar
Hi I have copied MAKE file from the 2.1.8 pre version.But not able to generate certificates. When I try to run ./bootstrap , it throws error related to MAKE.in file Please let me know the procedure to generate a certificate. Regards Senthil On Wed, Dec 9, 2009 at 1:00 AM, t...@kalik.net

Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool.

2009-12-16 Thread Gökhan ORHON
Help, again message here, Note: I test Cisco Secure ACS, no problem. But freeradius not release pool ips. Thank you. Hello, I have a big problem please HELP. I newbee for Radius, I am use freeradius 2.x on the Suse 11.1. (Vmware ESXi 3.5) I use ippool. (254 IP) I have a gprs POS

FreeRadius 2.1.7 crashes

2009-12-16 Thread Dinh Pham Cong
Hi all, I had run FreeRadius 2.1.7 in gdb and got this core dump Program received signal SIGSEGV, Segmentation fault. [Switching to Thread 0x2aac59f0e940 (LWP 23452)] 0x00309a85306b in ?? () from /usr/lib64/mysql/libmysqlclient_r.so.15 (gdb) bt #0 0x00309a85306b in ?? () from

Re: unlang after chap returns reject

2009-12-16 Thread EasyHorpak.com
Alan Buxey wrote: Hi, i try this unlang in chap authenticate { snip you seem to have ignored the 3 lines directly above what you cut and pasted... I'll remind you # Please do not put "unlang" configurations into the "authenticate" # section. Put them in the

[SOLVED] [PARTIALLY] Request for directions: WinXP + Samba + LDAP + 802.1x

2009-12-16 Thread Fabiano Caixeta Duarte
Well, default eap module knows about this type. Have you been playing with eap.conf? I touched, yes. But I had stripped mschap conf from default vhost and that was just wrong... Now everything is partially working. If client has already logged on (auth info cached by XP), he needs to restart

Re: unlang after chap returns reject

2009-12-16 Thread Arran Cudbard-Bell
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 chap { reject = 1 } I try search about unlang and write it to accept user even though wrong password and chap reject. i need to set wrong password user to ip group and then redirect them to html explain about the problem. i try

RE: Accounting question

2009-12-16 Thread David Peterson
OK I added the reply update and see the acknowledgement go out: Sending Access-Accept of id 8 to 172.16.4.2 port 1812 Service-Type = Framed-User User-Name = testtest Framed-Filter-Id = Bronze Class = 0x7465737474657374 EAP-Message = 0x03080004

Re: windows domain\user change to u...@domain

2009-12-16 Thread tnt
Have already uncomment (remove the # infront of the ntdomain under /etc/raddb/sites-enabled/default), still not working. H1\user1 get proxy to NULL realm instead of H1 realm. Post the debug with nidomain enabled. Do you have NULL realm defined in proxy.conf? Ivan Kalik - List

Re: Problem with EAP TLS authentication in Freeradius

2009-12-16 Thread tnt
I have copied MAKE file from the 2.1.8 pre version.But not able to generate certificates. When I try to run ./bootstrap , it throws error related to MAKE.in file Please let me know the procedure to generate a certificate. Read the README file in certs directory. Ivan Kalik - List

Re: Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool.

2009-12-16 Thread tnt
Note: I test Cisco Secure ACS, no problem. But freeradius not release pool ips. Thank you. Because it will not release IPs without notification that user is offline (accounting stop packet). If you want limited lifespan of assigned IP address don't use ippool - use dhcp. Ivan Kalik - List

FreeRadius won't start with my configs

2009-12-16 Thread J Brandon Polley
I can't get FreeRadius to start. No other instance of FreeRadius is running when I try to start FreeRadius. I'm using FreeRadius 1.1.7-21.4.47 Here is my debug info when I enter radiusd -x Module: Loaded exec rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module:

Re: FreeRadius won't start with my configs

2009-12-16 Thread Nicolas Goutte
Am 16.12.2009 um 20:39 schrieb J Brandon Polley: I can't get FreeRadius to start. No other instance of FreeRadius is running when I try to start FreeRadius. I'm using FreeRadius 1.1.7-21.4.47 Here is my debug info when I enter radiusd -x Module: Loaded exec rlm_exec: Wait=yes but no

rlm_perl

2009-12-16 Thread Коньков Евгений
Hello, Freeradius-users. How to send multiple parametrs with perl like next: 1) $RAD_REPLY{'mpd-table-static'}= 14=192.168.1.7 2; 2) $RAD_REPLY{'mpd-table-static'}= 15=192.168.1.7 3; now 1 is overriden with 2. -- С уважением, Коньков

Re: rlm_perl

2009-12-16 Thread Bjørn Mork
Коньков Евгений kes-...@yandex.ru writes: How to send multiple parametrs with perl like next: 1) $RAD_REPLY{'mpd-table-static'}= 14=192.168.1.7 2; 2) $RAD_REPLY{'mpd-table-static'}= 15=192.168.1.7 3; $RAD_REPLY{'mpd-table-static'} = [14=192.168.1.7 2, 15=192.168.1.7 3]; Bjørn -

RE: Trying to get tunneling to work

2009-12-16 Thread Mike Bernhardt
-Original Message- From: t...@kalik.net [mailto:t...@kalik.net] Sent: Thursday, December 10, 2009 5:05 PM To: FreeRadius users mailing list Subject: Re: Trying to get tunneling to work I am trying to set up freeradius to proxy requests 802.11 MSCHAPv2 to an IAS server. The IAS

RE: Trying to get tunneling to work

2009-12-16 Thread Mike Bernhardt
Sorry about the delay, I haven't been able to get back to this until today. I'm using 2.1.7. -Original Message- From: Alan DeKok [mailto:al...@deployingradius.com] Sent: Thursday, December 10, 2009 11:03 PM To: FreeRadius users mailing list Subject: Re: Trying to get tunneling to work

Re: Rejecting User By their Calling-Station-Id (Mac Address)

2009-12-16 Thread Alex M
ok fair enough =) will go dig config file... How can I send the reason for rejection? Just add reply command somewhere along the lines? Can I link reply message to the reply message associated with reply in groups? Tnx again! On Wed, Dec 16, 2009 at 3:25 AM, Alan DeKok

Re: Freeradius db.ippool is FULL Error : rlm_ippool: No available ip addresses in pool.

2009-12-16 Thread Alan DeKok
Gökhan ORHON wrote: Help, again message here, Note: I test Cisco Secure ACS, no problem. But freeradius not release pool ips. Thank you. You have been very careful to *not* follow the instructions in the FAQ. You have been very careful to *not* pay attention to the responses on this

Re: Trying to get tunneling to work

2009-12-16 Thread Alan DeKok
Mike Bernhardt wrote: Sorry about the delay, I haven't been able to get back to this until today. I'm using 2.1.7. OK, that issue should be fixed in 2.1.8. We should release it this week. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius 2.1.7 crashes

2009-12-16 Thread Alan DeKok
Dinh Pham Cong wrote: Do you think that it is MySQL client library bug? How can I do now? It looks like a MySQL client library bug. I'd suggest asking MySQL about it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius 2.7 virtual memory

2009-12-16 Thread Alan DeKok
Dinh Pham Cong wrote: Hi Alan The version I am using is 2.1.7 Try 2.1.8 when it comes out. It has some fixes which should help. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting question

2009-12-16 Thread Alan DeKok
David Peterson wrote: However the NAS is overrriding the username and replying with: ... Buy a NAS that works. Any other thoughts? Follow the other suggestions that would solve the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang after chap returns reject [RESOLVED]

2009-12-16 Thread EasyHorpak.com
Arran Cudbard-Bell wrote: -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 chap { reject = 1 } I try search about unlang and write it to accept user even though wrong password and chap reject. i need to set wrong password user to ip group and then redirect them to html explain

Bugzilla with freeradius support

2009-12-16 Thread freeradius
I see that bugzilla has added Freeradius support. Went looking for any type of guide, and seems obscured by freeradius using bugzilla for bug tracking. Can someone point me to anything that has pointers for using freeradius to support my bugzilla implementation? Rick Rick Steeves

Re: Bugzilla with freeradius support

2009-12-16 Thread Alan DeKok
freerad...@corwyn.net wrote: I see that bugzilla has added Freeradius support. Went looking for any type of guide, and seems obscured by freeradius using bugzilla for bug tracking. Search for bugzilla radius. Can someone point me to anything that has pointers for using freeradius to