Re: reauth-problem with WPA2-tls

2010-06-06 Thread Alan DeKok
Andreas Hartmann wrote: See http://bugs.freeradius.org/bugzilla/show_bug.cgi?id=81 Where you file a bug against FreeRADIUS for an OpenSSL issue. I understand that FreeRADIUS is affected. But... It does not work for me. There seem to be problems with the session-handling, which should be

Re: little sql help required

2010-06-06 Thread Alan DeKok
Strong, Mark wrote: I've got two servers, each with its own mysql db (replicated to each other), and I'd like freeradius to fail over to the other boxes mysql server if its local one dies. $ man unlang You can use a simpler config than that, I think. So I'd like to understand what that

Re: username and attributes

2010-06-06 Thread Alan DeKok
rosect...@yahoo.com wrote: I have two users (u1 and u2) and want to use PEAP to auth them. For each user, I will return an attribute. For example, attr1 for u1 and attr2 for u2. An interesting thing is that, when my out-tunnel user name is anonymous, I do not see any attribute be returned

Re: radtest and IPv6 support

2010-06-06 Thread Alan DeKok
Panagiotis Georgopoulos wrote: I am trying to use radtest to test my freeradius configuration over IPv6. I have configured IPv6 on my freeradius server and a client machine from which I am firing radtest. However when I issue “radtest bob hello 2001:db95::100 100 testing123” on

Re: backup of external proxy

2010-06-06 Thread Alan DeKok
Fred MAISON wrote: When proxing some eap-type by real to an external radius, is it possible to configure a normal and a backup proxy server ? Yes. That's why there are home_server_pools. You can configure them as failover. See the comments in raddb/proxy.conf. I saw (in proxy.conf

Re: Restricting certain users access to certain NAS devices

2010-06-06 Thread Alan DeKok
Whitmarsh Mark (Leeds Teaching Hospitals NHS Trust) wrote: Thanks Alan. I've got that bit working now. However, I can't get my check on the NAS-IP-Address attribute to work. I now have this config: OK... that should configure two groups. File sites-enabled/default - post-auth section

Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread superataru -
Hi all. I'm pretty new with Freeradius, but it seems matching my targets :-) I set Freeradius with mysql server and Daloradius Management. After some troubles to install FR, it worked fine, at least as basical startup: i can authenticate remote users! For real it works if i use

RE: Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread Tim Sylvester
I set Freeradius with mysql server and Daloradius Management. After some troubles to install FR, it worked fine, at least as basical startup: i can authenticate remote users! OK. For real it works if i use /raddb/clients.conf file, setting readclients = yes in /raddb/sql.conf. Once i set it to

Re: reauth-problem with WPA2-tls

2010-06-06 Thread Andreas Hartmann
Alan DeKok schrieb: Andreas Hartmann wrote: See http://bugs.freeradius.org/bugzilla/show_bug.cgi?id=81 Where you file a bug against FreeRADIUS for an OpenSSL issue. I understand that FreeRADIUS is affected. But... It does not work for me. There seem to be problems with the

RE: Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread superataru -
Thank you for reply. I found the problem. I missed a field during nas table analysis. The field was server, varchar(64). I added it. I had also to - clear clients.conf from NAS manually added to avoid duplicates; - set one NAS address, formerly added, as Host address instead of subnet. Now it

Re: Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread superataru -
I bag your pardon . . . i forget to turn to no the value in sql .conf. Once i did . . . non authentication . . . What i obtain with radiusd -X is . . . *Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file

Re: Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread superataru -
I bag your pardon . . . i forget to turn to no the value in sql .conf. Once i did . . . non authentication . . . What i obtain with radiusd -X is . . . *Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on command file

Re: Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread Alan Buxey
Hi, So no problems with tables structure, but some misconfiguration with data. as per previous email sent to you from another perosn helping you radiusd -X it will show you where the problem is - or send the output to the list because otherwise we can do little but make random guesses :-(

Re: log loading of configuration files [was Re: Accounting to MySQL not working]

2010-06-06 Thread Josip Rodin
On Wed, Jun 02, 2010 at 01:46:02PM +0200, Alan DeKok wrote: When they run it with -X, they'll see the packets as they come in and that's good for the debugging of the per-request logic, but a lot of this initial text will scroll down the screen as if everything in it is all right, and they

RE: little sql help required

2010-06-06 Thread Strong, Mark
Strong, Mark wrote: I've got two servers, each with its own mysql db (replicated to each other), and I'd like freeradius to fail over to the other boxes mysql server if its local one dies. $ man unlang You can use a simpler config than that, I think. doc/configurable_failover

RE: Freeradius is unable to read NAS table in mysql db

2010-06-06 Thread Tim Sylvester
I bag your pardon . . . i forget to turn to no the value in sql .conf. Which value did you set to no? Once i did . . . non authentication . . . What i obtain with radiusd -X is . . . Listening on authentication address * port 1812 Listening on accounting address * port 1813 Listening on