Re: Simultaneous logins

2011-05-09 Thread Fajar A. Nugraha
On Mon, May 9, 2011 at 12:46 PM, Franz flam...@gmail.com wrote: What I meant on the second part is that i am using localhost on clients.conf, Please don't top-post. so now when i am just checking session with sql simul_count_query, and as soon as the request is received by server it says

Re: Simultaneous logins

2011-05-09 Thread Franz
The query is ok for my purpose, when I execute it it returns 1 when a session is active and 0 when no session is available. However when i uncomment the simul query, all logins are terminated by User-Error afer 10 seconds and not Session-Timeout after x time as it's supposed to be, if a commented

Re: Radius Database

2011-05-09 Thread SC@
Thank you -- View this message in context: http://freeradius.1045715.n5.nabble.com/Radius-Database-tp4375341p4381272.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

acct segfault in git v2.1.x

2011-05-09 Thread Alexander Clouter
Updating to git's v2.1.x to go on a post-Easter bughunt and found the following accounting packet[1] seems to segfault freeradius: tcpdump: listening on bond0, link-type EN10MB (Ethernet), capture size 65535 bytes 11:30:34.398885 IP6 (hlim 51, next-header UDP (17) payload length: 258)

Re: acct segfault in git v2.1.x

2011-05-09 Thread Alan Buxey
Hi, NAS Port Attribute (5), length: 6, Value: 0 NAS-Port 0 are you serious? ;-) Vendor Specific Attribute (26), length: 12, Value: Vendor: Unknown (14823) Vendor Attribute: 2, Length: 4, Value: ..thats an interesting one. Unknown

Re: acct segfault in git v2.1.x

2011-05-09 Thread Alan DeKok
Alexander Clouter wrote: Updating to git's v2.1.x to go on a post-Easter bughunt and found the following accounting packet[1] seems to segfault freeradius: ... #1 0x403075d8 in fnmatch () from /lib/libc.so.6 #2 0x409da598 in do_detail (instance=0x114e50, request=0x43443240,

RE: Nexus Configurations

2011-05-09 Thread Darren Shaw
Hello, Is the user you are testing with configured on the switch? No, this is my username that is allowed to access the switches. It authenticates me with AD and makes sure I belong to a certain group within AD. If so, as what type of user? Admin user. Have you tried a username which is not

Re: acct segfault in git v2.1.x

2011-05-09 Thread Alexander Clouter
Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: NAS Port Attribute (5), length: 6, Value: 0 NAS-Port 0 are you serious? ;-) Hey, *you* are the proxying it ;P Vendor Specific Attribute (26), length: 12, Value: Vendor: Unknown (14823) Vendor Attribute: 2,

Re: Simultaneous logins

2011-05-09 Thread qbik
I got it working by changing the query to count if the MAC requesting access is different than the one that got access cranted. Another question I had was if a user is allowed access only for let say 5 hours a Day, if he is connected just for 1 hour and decides to connect 3 hours later, I think

Re: acct segfault in git v2.1.x

2011-05-09 Thread James J J Hooper
On 09/05/2011 12:22, Alan DeKok wrote: Alexander Clouter wrote: Updating to git's v2.1.x to go on a post-Easter bughunt and found the following accounting packet[1] seems to segfault freeradius: ... #1 0x403075d8 in fnmatch () from /lib/libc.so.6 #2 0x409da598 in do_detail

RE: Error: User-Name is not the same as MS-CHAP name

2011-05-09 Thread Robert Mc Cready
Antivirus, version de la base des signatures de virus 6106 (20110509) __ Le message a été vérifié par ESET NOD32 Antivirus. http://www.eset.com __ Information provenant d'ESET NOD32 Antivirus, version de la base des signatures de virus 6107 (20110509) __ Le message a été

Re: acct segfault in git v2.1.x

2011-05-09 Thread Alan DeKok
James J J Hooper wrote: It now seems to create a *directory* with the name that should be the detail *file*... I've pushed a fix. The change missed one line.. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error: User-Name is not the same as MS-CHAP name

2011-05-09 Thread Alan DeKok
Robert Mc Cready wrote: I do not rewrite the User-name attribute I rewrite only the Stripped-User-Name attribute with these: No. Go READ the debug log you posted. The inner-tunnel virtual server gets: Sending tunneled request EAP-Message =

PEAP/MSCHAPv2 failing with Windows 7

2011-05-09 Thread Gary Gatten
Hello, We use Aruba Wireless gear. We're using 802.1x PEAP, MSCHAPv2, use windows credentials. Everything is working great with this setup until we started testing / trying Windows 7 clients. They fail with: Exec-Program output: Logon failure (0xc06d) Exec-Program-Wait: plaintext: Logon

Re: PEAP/MSCHAPv2 failing with Windows 7

2011-05-09 Thread Alan Buxey
Hi, I should note, it appears the Aruba gear is terminating the PEAP – FR only sees an MSCHAP request. I would change that behaviour with a quick reconfig - its possible because we have sites in the UK using Aruba kit with 'eduroam' - and 'eduroam' would break if the remote client was

Config for proxying based on auth-protocol

2011-05-09 Thread Nitin Bhardwaj
Hello , I want to configure FreeRADIUS to do the following two things: (1) Handle tunnel for PEAP authentication requested by any supplicant(s), and do mschapv2 auth with another RADIUS server. (Irrespective of the realm in the user-name) (2) Transparently proxy all other non-PEAP