RE: version error rlm_exec module

2011-04-01 Thread Raheel Itrat
Hi, Well there are hundreds of files with 1.1.7 specially in /usr/local/lib, I tried to use something like rm *1.1.7.* and there are things like radtest depoending on the previous version files which are no more there since i removed them :S

Re: access challenge on empty password

2011-04-01 Thread izotov
I did not configure so (it must be a default). Where is that configuration entry? -- View this message in context: http://freeradius.1045715.n5.nabble.com/access-challenge-on-empty-password-tp4273381p4274862.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

Re: access challenge on empty password

2011-04-01 Thread Alan DeKok
izotov wrote: I did not configure so (it must be a default). Where is that configuration entry? Have you tried running the server in debugging mode as suggested in the FAQ, README, INSTALL, man page, and daily on this list? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Freeradius mysql acct copy

2011-04-01 Thread Alexander Kosykh
Is it right that my freeradius go down after home server was down? Regards, Alexander. 2011/3/31 Fajar A. Nugraha l...@fajar.net On Thu, Mar 31, 2011 at 2:45 PM, Alexander Kosykh avkos...@gmail.com wrote: Hi. I need to copy acct packets to my billing server and save acct in standart

Re: sqlcounter returning Gigawords?

2011-04-01 Thread Alan DeKok
YvesDM wrote: We 're about to upgrade our radius which is still running 1.1.7 We use monthly datalimits so we patched the sqlcounter in order to make it reply max 4GB of left quota (to avoid wrapping), even if the user still has 10GB quota left. Of course this results in a logged out user

Re: access challenge on empty password

2011-04-01 Thread izotov
Alan DeKok-2 wrote: Have you tried running the server in debugging mode as suggested in the FAQ, README, INSTALL, man page, and daily on this list? Yes, I always do so. But this time it did not help me to find the answer. -- View this message in context:

Re: access challenge on empty password

2011-04-01 Thread Fajar A. Nugraha
On Fri, Apr 1, 2011 at 3:43 PM, izotov karoly.arnhof...@gmail.com wrote: Alan DeKok-2 wrote:   Have you tried running the server in debugging mode as suggested in the FAQ, README, INSTALL, man page, and daily on this list? Yes, I always do so. But this time it did not help me to find the

Re: freeradius 2.1.10 WARNING: Internal sanity check failed

2011-04-01 Thread joanroldan
Hi, I have followed your advise and I went back to the default config. I have read the: http://deployingradius.com/documents/configuration/certificates.html And I have followed it step by step. Testing first the PAP auth with an entry in users.conf and it worked fine. Next I add the Wireless

Re: version error rlm_exec module

2011-04-01 Thread Marinko Tarlac
I didn't have any problems with those files... If you installed FR from distro repo try to remove it with yum, apt-get, For ./configure, make, make install you can simple remove raddb dir... This work for me because I tried every combination for upgrade and downgrade On 4/1/2011

Question about authentication

2011-04-01 Thread matteo
Hello list, suppose I want to authenticate a device capable of using PEAP with EAP-MS-CHAP v2 or EAP-GTC and TTLS with EAP-MS-CHAP v2 or MS-CHAPv2 and I have user password stored in LDAP (linux) with the crypt scheme and freeradius server 2.1.9. Is there any mechanism to successfully

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Thomas Wunder
On Wednesday 30 March 2011 15:52:31 Phil Mayers wrote: First, there's no need to email me directly; I read the list. I totally agree with you I just missed to exchange the recipient address (and after noticing that i also sent it to the list)... sorry! You *only* set: with_ntdomain_hack =

Re: access challenge on empty password

2011-04-01 Thread izotov
http://freeradius.1045715.n5.nabble.com/file/n4275090/radius.log radius.log Fajar A. Nugraha-2 wrote: if you have a problem, post the output of debug mode (radiusd -X) I am sorry. I try to get the rhythm. Log is attached. -- View this message in context:

Re: Question about authentication

2011-04-01 Thread Alan DeKok
matteo wrote: Hello list, suppose I want to authenticate a device capable of using PEAP with EAP-MS-CHAP v2 or EAP-GTC and TTLS with EAP-MS-CHAP v2 or MS-CHAPv2 and I have user password stored in LDAP (linux) with the crypt scheme and freeradius server 2.1.9. Is there any mechanism to

Re: Installing to pfsense

2011-04-01 Thread Brian Candler
On Wed, Mar 30, 2011 at 06:37:59PM -0400, Franz wrote: /usr/local/etc/raddb/sql.conf[22]: Instantiation failed for module sql /usr/local/etc/raddb/sites-enabled/inner-tunnel[131]: Failed to load module sql. /usr/local/etc/raddb/sites-enabled/inner-tunnel[47]: Errors parsing

Re: same username different password on different NAS

2011-04-01 Thread Brian Candler
On Wed, Mar 16, 2011 at 01:16:22PM -0700, Richard Thornton wrote: Without using virtual servers, is there a way to link the username manager to the NAS name or IP of the location? Yep. I suggest you first map the NAS-IP-Address to a Huntgroup-Name (see the 'preprocess' module and

Re: sqlcounter returning Gigawords?

2011-04-01 Thread YvesDM
On Fri, Apr 1, 2011 at 10:40 AM, Alan DeKok al...@deployingradius.com wrote:  The latest version has rlm_expr, which is 64-bit clean.  You can use it to split the counters into 32-bit pieces.  Alan DeKok. Tnx Alan, will check it out. - List info/subscribe/unsubscribe? See

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Phil Mayers
On 01/04/11 11:08, Thomas Wunder wrote: On Wednesday 30 March 2011 15:52:31 Phil Mayers wrote: First, there's no need to email me directly; I read the list. I totally agree with you I just missed to exchange the recipient address (and after noticing that i also sent it to the list)... sorry!

Re: multiple authentication methods

2011-04-01 Thread Alan DeKok
Nick Kalen wrote: looking at the docs, it looks like it's not possible to try to authenticate against a local LDAP server and in case it failes send it to another radius server? That won't work. Maybe in 3.0. Alan DeKok. - List info/subscribe/unsubscribe? See

Dial up error and freeraius is down

2011-04-01 Thread Robin
Hi Friends, I met a problem with FreeRADIUS2.1.9 (Mysql+centos, about 500 pppoe users)as below: In general, I found some users couldn't dial to radius and log information as below - Fri Apr 1 19:22:09 2011 : Error: Discarding duplicate request from client mpth12 port 40039 - ID:

RE: Dial up error and freeraius is down

2011-04-01 Thread Mark Holmes
Hi, - Brand width is insufficient from pppoe server to radius server; - Server running radius of capability is insufficient. You don't say what bandwith etc you are on or what spec the server is, but unless it's pretty low end I'd be surprised if that was the issue if you

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Thomas Wunder
Hi, call it crude or whatever you want ;-) but that was my last resort: After fiddling with the code of rlm_mschap I found that all I need to do is to comment out line 1201 of rlm_mschap.c (where it says 'return RLM_MODULE_REJECT;') Maybe it has something to do with the conditions (which look a

RE: MLPPP Acct-Session-Id

2011-04-01 Thread Jay Kuhne (jkuhne)
Forgot to mention, also attempted with Acct-Multi-Session-Id, which was in the accounting record but same result. -Original Message- From: freeradius-users-bounces+jkuhne=cisco@lists.freeradius.org [mailto:freeradius-users-bounces+jkuhne=cisco@lists.freeradius.org] On Behalf Of

Re: Strip off the domain part from the User-Name

2011-04-01 Thread Phil Mayers
On 01/04/11 13:43, Thomas Wunder wrote: [mschap] No Cleartext-Password configured. Cannot create LM-Password. [mschap] Found NT-Password [mschap] ERROR: User-Name (winmac\tom1) is not the same as MS-CHAP Name (tom1) from EAP-MSCHAPv2 What client are you using? It's sending: EAP-Identity

RE: Dial up error and freeraius is down

2011-04-01 Thread Robin
Actually, I think I have enough bandwidth to handle 500 users request. But I can't understand what reason due to the problem and report these info in log. Thanks. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org

Re: Dial up error and freeraius is down

2011-04-01 Thread Alan Buxey
Hi, - Fri Apr 1 19:22:09 2011 : Error: Discarding duplicate request from client mpth12 port 40039 - ID: 129 due to unfinished request 10524 - Fri Apr 1 19:22:10 2011 : Error: Discarding conflicting packet from client mpth12 port 40039 - ID: 129 due to recent request

Oracle reconnection for free radius

2011-04-01 Thread Jaikanth Krishnaswamy
Hi, I have setup free radius freeradius-server-2.1.10 with an oracle back end as suggested on in the documentation. Is there a setting for Oracle connectivity retries from the free- radius S/W ie. If Oracle Server is down does freeradius retry connection after a configurable amount of time?If so

RE: Dial up error and freeraius is down

2011-04-01 Thread Robin
Hi, If I can understand it, my freeradius for some reason has slowed due to response behind time? Thanks. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org [mailto:freeradius-users-bounces+freeradius=itpm@lists.freeradius.org] On

Re: Dial up error and freeraius is down

2011-04-01 Thread Fajar A. Nugraha
On Sat, Apr 2, 2011 at 9:20 AM, Robin freerad...@itpm.net wrote: Hi, If I can understand it, my freeradius for some reason has slowed due to response behind time? I don't understand what you mean by my freeradius for some reason has slowed due to response behind time, but like Alan said, the

RE: Dial up error and freeraius is down

2011-04-01 Thread Robin
Hi, Thanks your suggestion. I will clean records from radacct and check my reporting system if it effect freeradius operations. Robin -Original Message- From: freeradius-users-bounces+freeradius=itpm@lists.freeradius.org