Re: Freeradius-Users Digest, Vol 63, Issue 97

2010-07-28 Thread ping
I constently get this error: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user why? On 07/28/2010 08:07 AM, freeradius-users-requ...@lists.freeradius.org wrote: Send Freeradius-Users mailing list submissions to

/etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812

2010-07-28 Thread Edi Sujono
Dear sir, I had installed freeradius on ubuntu 9.04, but got an error when applying the command : freeradius -X the result of freeradius -X command as per attachement file. Your attention and help would be highly appreciated. Thanks best regards, Edi Sujono FreeRADIUS Version 2.1.0, for

Re: /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812

2010-07-28 Thread Alan Buxey
Hi, Failed binding to socket: Address already in use /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812 fairly obvious - somethings already running on that port. suggest that the system is already starting the daemon... use the system scripts to stop the process

Re: /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812

2010-07-28 Thread Edi Sujono
--- Pada Rab, 28/7/10, Alan Buxey a.l.m.bu...@lboro.ac.uk menulis: Dari: Alan Buxey a.l.m.bu...@lboro.ac.uk Judul: Re: /etc/freeradius/radiusd.conf[236]: Error binding to port for 0.0.0.0 port 1812 Kepada: FreeRadius users mailing list freeradius-users@lists.freeradius.org Cc: Edi Sujono

Re: Freeradius-Users Digest, Vol 63, Issue 97

2010-07-28 Thread John Dennis
Please use proper etiquette on this list. Do not reply to digests (it plays havoc with threading). Do properly quote relevant material and trim the irrelevant material. Thank you. -- John Dennis jden...@redhat.com Looking to carve out IT costs? www.redhat.com/carveoutcosts/ - List

Re: incorrect auth-type

2010-07-28 Thread Alan DeKok
Sallee, Stephen (Jake) wrote: You will see that the user is found and authenticated by the ntlm_auth_Cru module, however the user is still rejected bec the server says no auth-type was configured for the request. Any help is appreciated. Yes, because you didn't put the configuration into

Re: Passing variables from inner tunnel

2010-07-28 Thread Alexander Clouter
Hi, newtownz jean...@sympatico.ca wrote: I'm trying to pass the value of LDAP-UserDn from the inner-tunnel to the default server. I have read unlang and also tried many combinations including update outer.control from the inner tunnel and nothing worked... I'm pretty sure I saw this too

Re: Error: ASSERT FAILED threads.c[406]

2010-07-28 Thread Boian Jordanov
On Jul 26, 2010, at 8:00 PM, Meyers, Dan wrote: and what's happening in the perl is still something I need to investigate (and is probably thread related), or should the fix also stop me getting unresponsive children in the perl accounting method? Using threaded perl with DB is a little

Re: Passing variables from inner tunnel

2010-07-28 Thread newtownz
Hi, Thank your for your answer. Just return User-Name in the reply and do a repeat LDAP query on your outer layer; doing a 'cn' lookup should be instantaneous... I'm a little puzzled on how to accomplish this! Regards Jean -- View this message in context:

Proxying creates 200 Attributes resulting in DoS warning

2010-07-28 Thread Marius Pesé
After spending some more time on our FreeRadius2 project it managed once again to leave me clueless. The error message: WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in request (received 201, max 200 are allowed). Googleing showed that it most likely is the result

Re: Proxying creates 200 Attributes resulting in DoS warning

2010-07-28 Thread Alan DeKok
Marius Pesé wrote: After spending some more time on our FreeRadius2 project it managed once again to leave me clueless. The error message: WARNING: Possible DoS attack from host 196.25.xxx.xx: Too many attributes in request (received 201, max 200 are allowed). See the security section

Re: Passing variables from inner tunnel

2010-07-28 Thread Alan DeKok
newtownz wrote: Hi, Thank your for your answer. Just return User-Name in the reply and do a repeat LDAP query on your outer layer; doing a 'cn' lookup should be instantaneous... I'm a little puzzled on how to accomplish this! In the inner-tunnel virtual server: authorize {

Re: Passing variables from inner tunnel

2010-07-28 Thread newtownz
Hi, I think I understand the problem here, there are multiple request done to freeradius in the process of authenticating the user and since I'm trying to access the variable that was set in the previous request it is simply empty... Jean -- View this message in context:

Re: Passing variables from inner tunnel

2010-07-28 Thread newtownz
HI, Since I need to have the LDAP-UserDn in the post-auth section of the default-server is there a way to execute a LDAP query in this part? Jean -- View this message in context: http://old.nabble.com/Passing-variables-from-inner-tunnel-tp29279811p29287788.html Sent from the FreeRadius -

Solaris 10 1.13 FreeRadius

2010-07-28 Thread Kory Wheatley
Will LDAP failover work on Solaris 10 with FreeRadius 1.1.3 ? This is the default that comes with Solaris or do we need to upgrade FreeRadius. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius-Users Digest, Vol 63, Issue 95

2010-07-28 Thread Tom Leach
Alan, changing from User-Password to Password-With-Header brought back the 'No known good password' error. I'm going through the rlm_pap.c code to try to see what's going on here. I haven't found any docs yet on what the various mapping possibilities are and what they do. Do you have a

Re: Another LDAP/RADIUS integration problem.

2010-07-28 Thread Tom Leach
Grr, off on a goose chase. Problem isn't in rlm_pap.c, but rlm_ldap.c. rlm_ldap only likes the Cleartext-Password and User-Password attributes. Would it be a bad thing to patch rlm_ldap.c to also work with Password-With-Header? If not, then I guess I'll have to use User-Password in the

Re: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Mike
Johan Meiring wrote: On 2010/07/21 11:00 AM, Alan DeKok wrote: authorize { ... if (ADSL-Agent-Circuit-Id \ (%{sql: select ...})) { update control { Auth-Type := Accept } } else { reject } } I disagree with the logic

RE: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Tim Sylvester
Try the following: Add this to the top of the Authorize section: authorize { if ADSL-Agent-Circuit-Id { update request { User-Name := %{ADSL-Agent-Circuit-Id} User-Password := %{ADSL-Agent-Circuit-Id} }

send radius response without request

2010-07-28 Thread Sallee, Stephen (Jake)
Is it possible to have FreeRADIUS send a radius response without first receiving a request, provided I can feed it the same information the request would have? OR Is it possible for FreeRADIUS to see the request come from one host and have the response go to another? Jake Sallee Godfather Of

Re: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Mike
Tim Sylvester wrote: Try the following: Add this to the top of the Authorize section: if ADSL-Agent-Circuit-Id { update request { User-Name := %{ADSL-Agent-Circuit-Id} User-Password := %{ADSL-Agent-Circuit-Id}

RE: freeradius and ADSL-Agent-Circuit-Id

2010-07-28 Thread Tim Sylvester
Tim Sylvester wrote: Try the following: Add this to the top of the Authorize section: if ADSL-Agent-Circuit-Id { update request { User-Name := %{ADSL-Agent-Circuit-Id} User-Password :=