sqlcounter help

2010-09-06 Thread Mordor Networks
Dear Gentlemen I'm having a problem with my daily count : sqlcounter chillispot_max_bytes_daily { counter-name = ChilliSpot-Max-Total-Octets check-name = ChilliSpot-Max-Total-Octets reply-name = ChilliSpot-Max-Total-Octets sqlmod-inst = sql key = User-Name reset = daily query = SELECT

EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
Hi All, I have a proxy setup ( proxy server 192.168.6.134) where users are proxied to home server (192.168.7.40). Host IP address = 192.168.6.181 FreeRADIUS version 2.1.9 User authentication using radclient works fine when I issue following command echo

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan DeKok
Chidanand Gangur wrote: I have a proxy setup ( proxy server 192.168.6.134) where users are proxied to home server (192.168.7.40). Host IP address = 192.168.6.181 FreeRADIUS version 2.1.9 ... I get following response on my proxy server Why not look on the home server to see what the

Re: sqlcounter help

2010-09-06 Thread Alan DeKok
Mordor Networks wrote: It is disconnecting the user if limit is reached but user can connect again like it is not stopping the account, now if i replace the query with #query = SELECT (SUM(AcctInputOctets)+SUM(AcctOutputOctets)) FROM radacct WHERE UserName='%{%k}' that will disconnect the

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan Buxey
Hi, snip Sending Access-Request of id 177 to 192.168.7.40 port 1812 cut rad_recv: Access-Reject packet from host 192.168.7.40 port 1812, id=177, length=47 seems quite simple. the home server that you proxied the request to has rejected it. check the logs on that server to see why - i

Re: Logging ntlm authentication

2010-09-06 Thread Sion
On Fri, Sep 3, 2010 at 10:30 PM, Alan DeKok al...@deployingradius.com wrote: Sion wrote: This had actually crossed my mind but I had tried testing this in the post-auth section as well. What section should I do this in? Would something like this work? update outer {                

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
I do not have raduser configured in my proxy users file. If it is configuration problem on the Home-Server why does it work if I use radeapclient/radclient. I see following on my host on running eapol_test. Whay is NAS-IP-Address set as 127.0.0.1 in this case? Reading configuration file

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan Buxey
Hi, I see following on my host on running eapol_test. Whay is NAS-IP-Address set as 127.0.0.1 in this case? you cannot debug and fix RADIUS issues by looking at the client. NAS-IP-Address is 127.0.0.1 because thats what it is. you are a local machine. alan - List info/subscribe/unsubscribe?

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan Buxey
hi, I will repeat the advice given before - look at the logs of the RADIUS server which is actually doing the authentication. you cannot get joy anywhere else. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Logging ntlm authentication

2010-09-06 Thread Alan DeKok
Sion wrote: I've also tried outer.reply, but I'm still not seeing it show up in my logs. sigh And the debug log says... ? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Pre release of 2.1.10

2010-09-06 Thread Alan DeKok
It's been a few weeks since the last pre release of 2.1.10. I've put another one up on the web at: http://git.freeradius.org/pre/ Please test it out, and give feedback on issues / benefits. The file doc/ChangeLog contains all of the changes and new features in the server. For a

Re: Pre release of 2.1.10

2010-09-06 Thread Alan Buxey
Hi, Please test it out, and give feedback on issues / benefits. The file doc/ChangeLog contains all of the changes and new features in the server. fails to compile on older redhats with python : gmake[6]: Leaving directory `/usr/src/freeradius-server-2.1.10/src/modules/rlm_preprocess'

Re: Logging ntlm authentication

2010-09-06 Thread Sion
On Mon, Sep 6, 2010 at 12:54 PM, Alan DeKok al...@deployingradius.com wrote: Sion wrote: I've also tried outer.reply, but I'm still not seeing it show up in my logs.  sigh  And the debug log says... ? rad_recv: Access-Request packet from host 192.168.196.13 port 32768, id=113, length=175

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
At present I have removed Proxy from my set up and have directly connected my host to AD (IIS server) I have configured raduser on it I have added my host IP as its RADIUS client and on issuing following command eapol_test -c /tmp/eapol.conf -a 192.168.7.40 -p 1812 -s testing123 My home server

Save Passwords Encrypted in DB

2010-09-06 Thread Nasser Heidari
Hi, I want to save encrypted passwords in DB. As I reviewed mailing list , it looks that I don't need major changes on my Freeradius and DB records. Currently my users password in database is like this : ++---+--++-- + | id

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Alan DeKok
Chidanand Gangur wrote: My home server is an Microsoft IIS server, all I get from its logs is following: Sorry, you need to ask Microsoft how to debug their software. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Save Passwords Encrypted in DB

2010-09-06 Thread Alan DeKok
Nasser Heidari wrote: But no success, also I add Password-With-Header := {crypt} to my sql.conf but no success ! Do I missing something ? See the FAQ for it doesn't work Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Phil Mayers
On 09/06/2010 03:00 PM, Chidanand Gangur wrote: At present I have removed Proxy from my set up and have directly connected my host to AD (IIS server) This isn't a FreeRadius question. Ask on an NPS/IAS server mailing list. But... From distant memory, MD5 password support requires reversible

RE: Save Passwords Encrypted in DB

2010-09-06 Thread Nasser Heidari
r...@tradius:~# cat /etc/raddb/users DEFAULT Auth-Type := Local, Simultaneous-Use := 1 Fall-Through = Yes -- r...@tradius:~# radtest nasser plainpass 127.0.0.1:1812 1700 adminsecret Sending Access-Request of id 155 to 127.0.0.1 port 1812

RE: Save Passwords Encrypted in DB

2010-09-06 Thread Nasser Heidari
I've found the problem, it was a mistake in my users file. I just changes Auth-Type to PAP : r...@tradius mailto:r...@tradius :~# cat /etc/raddb/users DEFAULT Auth-Type := PAP, Simultaneous-Use := 1 Fall-Through = Yes Thanks From:

Re: Save Passwords Encrypted in DB

2010-09-06 Thread Alan DeKok
Nasser Heidari wrote: r...@tradius:~# cat /etc/raddb/users DEFAULT Auth-Type := Local, Simultaneous-Use := 1 Fall-Through = Yes sigh See the FAQ for how to set up a sample entry in the users file. Try also *reading* the debug log you posted. Alan DeKok. - List

Re: EAP-MD5 testing with radeapclient and eapol_test

2010-09-06 Thread Chidanand Gangur
Thanks Phil, I would definitely explore on the pointer you mentioned. I am sorry folks to ask IIS question on this mailing list I was little frustrated. Thanks, Chidanand On Mon, Sep 6, 2010 at 10:17 PM, Phil Mayers p.may...@imperial.ac.ukwrote: On 09/06/2010 03:00 PM, Chidanand Gangur