Re: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user

2010-04-23 Thread Alan DeKok
Johnny R wrote: * is the cipher login/password which comes from CopSpot(or any captive portal) deciphered before ipcop sends it to freeradius-server? (It's a kind of question which can not be asked here but ... never know) I have no idea what that means. * the

Users file or mysql database; radpostauth table

2010-04-23 Thread David Seira
Hi all! I'm trying to implement a freeradius server and I have several questions. The freeradius version used is 2.1.8. First of all, I want to put a freeradius to manage a net with about 400~500 users. I don't know which method for manage users choose; users file or mysql database? I think

Re: Using Nas IP Adress as client key

2010-04-23 Thread Alan DeKok
Johan Meiring wrote: This works very well, but has a few irritating (not showstopping) side effects. 1) Sometimes we have more than one Nas behind the same natted connection. This means that they all have to have the same shared secret. 2) Also it happens that a different Nas ends

Re: Multiple instance of proxy

2010-04-23 Thread Alan DeKok
brisston...@free.fr wrote: I have a question about proxy request with freeradius : is it possible to run multiple instance of proxy (not the same but the same daemon) which use different realm configuration. Yes. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Users file or mysql database; radpostauth table

2010-04-23 Thread Alan DeKok
David Seira wrote: First of all, I want to put a freeradius to manage a net with about 400~500 users. I don't know which method for manage users choose; users file or mysql database? Whatever makes you happy. I think manage users with a file is faster but the management is worse and

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread VU VAN HUNG
szymon roczniak wrote: On Thu, Apr 22, 2010 at 05:38:04PM +0700, VU VAN HUNG wrote: szymon roczniak wrote: On Thu, Apr 22, 2010 at 04:50:50PM +0700, VU VAN HUNG wrote: I know, but in the output, I see the following lines: *sql] expand: %{User-Password} - [sql] expand:

Re: Users file or mysql database; radpostauth table

2010-04-23 Thread VU VAN HUNG
Alan DeKok wrote: David Seira wrote: First of all, I want to put a freeradius to manage a net with about 400~500 users. I don't know which method for manage users choose; users file or mysql database? Whatever makes you happy. I think manage users with a file is faster but the

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread szymon roczniak
On Fri, Apr 23, 2010 at 03:22:44PM +0700, VU VAN HUNG wrote: szymon roczniak wrote: On Thu, Apr 22, 2010 at 05:38:04PM +0700, VU VAN HUNG wrote: szymon roczniak wrote: On Thu, Apr 22, 2010 at 04:50:50PM +0700, VU VAN HUNG wrote: I edited some columns' name in radius database, so users

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread VU VAN HUNG
szymon roczniak wrote: In order to have PAP or CHAP working you need your NAS to send either User-Password or CHAP-Password attribute. If you look at your log file again you'll see that both the pap and the chap module return noop, this is because these attributes are not present in the query.

Re: rlm_sql error, can't expand User-Password and Chap-Password, help me !

2010-04-23 Thread Alan DeKok
VU VAN HUNG wrote: How do I make NAS send User-Password or CHAP-Password attribute ? Read the NAS documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Users file or mysql database; radpostauth table

2010-04-23 Thread Alan DeKok
VU VAN HUNG wrote: Hi everyones, I'm a newbie in Radius. I just want to ask do I have to configure users file if use mysql to manage the users ? You don't *have* to configure a user in the users file. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Using Nas IP Adress as client key

2010-04-23 Thread Timothy
Depending on your hardware, you might want to try radsecproxy. It does currently have a 16 character password limit though Johan Meiring wrote: Hi all, The radius spec currently identifies a Nas (client) by the Nas's IP address (Packet-Src-Ip-Addres?). That is how radius works. We have a

Using Radiusclient to implement a radius client on Windows platform?

2010-04-23 Thread Joshua Lim
Hi I'm a newbie, hope someone can help me. I'm trying to implementing a radius client on Windows platform to work with freeradius. I intend to use VC++ or Delphi. radiusclient is for linux platform, can i adapt it for Windows? Grateful for any pointers. :) Rgds, Joshua - List

Re: Multiple instance of proxy

2010-04-23 Thread brisstony21
Selon Alan DeKok al...@deployingradius.com: brisston...@free.fr wrote: I have a question about proxy request with freeradius : is it possible to run multiple instance of proxy (not the same but the same daemon) which use different realm configuration. Yes. Alan DeKok. - List

FreeRadius 2.1.8 and MySQL

2010-04-23 Thread John Gammons
All, I have a 2.1.8 freeradius server running and have recently added MySQL into the mix. I am attempting to authenticate a user via EAP-TTLS with a PAP inner (for simplicities sake atm). The user is valid, in the DB with Cleartext-Password, and auths fine when doing a radtest (PAP), however,

Re: Multiple instance of proxy

2010-04-23 Thread John Gammons
This configuration is located in proxy.conf. To proxy any @MYREALM1 requests to one server, and @MYREALM2 to another, you would enter something like the following in that file realm MYREALM1 { authhost= radius.company1.com:1600 accthost= radius.company1.com:1601

Re: Multiple instance of proxy

2010-04-23 Thread brisstony21
Selon John Gammons jgamm...@gmail.com: This configuration is located in proxy.conf. To proxy any @MYREALM1 requests to one server, and @MYREALM2 to another, you would enter something like the following in that file realm MYREALM1 { authhost= radius.company1.com:1600

Block access by Tunnel client IP?

2010-04-23 Thread ST Wong (ITSC)
Hi all, I'm using freeradius 2.1.3.Would like to know if it's possible to block access (maybe in users file) by checking following criteria ? Acct-Tunnel-Client-Endpoint:0 = 137.*.*.* Would anyone please help? Thanks. Regards, /ST Wong (st-w...@cuhk.edu.hk) - List

Re: Multiple instance of proxy

2010-04-23 Thread Alan DeKok
brisston...@free.fr wrote: I want to authorize the first proxy to manage realm1 and realm2 and the second proxy to manage all the realms. I don't find anything in the proxy.conf The realms are global. If you want to limit them to a particular server, you will need to check for the realms

Re: FreeRadius 2.1.8 and MySQL

2010-04-23 Thread Alan DeKok
John Gammons wrote: All, I have a 2.1.8 freeradius server running and have recently added MySQL into the mix. I am attempting to authenticate a user via EAP-TTLS with a PAP inner (for simplicities sake atm). The user is valid, in the DB with Cleartext-Password, and auths fine when doing a

Re: Block access by Tunnel client IP?

2010-04-23 Thread Alan DeKok
ST Wong (ITSC) wrote: Hi all, I'm using freeradius 2.1.3.Would like to know if it's possible to block access (maybe in users file) by checking following criteria ? Acct-Tunnel-Client-Endpoint:0 = 137.*.*.* Would anyone please help? Thanks. $ man unlang It explains how to

Re: Using Radiusclient to implement a radius client on Windows platform?

2010-04-23 Thread Alan DeKok
Joshua Lim wrote: Hi I'm a newbie, hope someone can help me. I'm trying to implementing a radius client on Windows platform to work with freeradius. I intend to use VC++ or Delphi. radiusclient is for linux platform, can i adapt it for Windows? You'll have to hack the source code. It's

Re: Using Radiusclient to implement a radius client on Windows platform?

2010-04-23 Thread Joshua Lim
Hi Alan, Thanks, how about using the pgina radius plugin? http://userpage.fu-berlin.de/~holger/radiusplugin/RADIUSplugin-0.3src.zip It has code taken from pam_radius_auth Is pam_radius_auth using radiusclient? Rgds, Joshua Alan DeKok wrote: Joshua Lim wrote: Hi I'm a newbie, hope

Re: Multiple instance of proxy

2010-04-23 Thread brisstony21
Selon Alan DeKok al...@deployingradius.com: brisston...@free.fr wrote: I want to authorize the first proxy to manage realm1 and realm2 and the second proxy to manage all the realms. I don't find anything in the proxy.conf The realms are global. If you want to limit them to a particular