freeradius redundancy

2011-05-23 Thread Student University
Hi , i need to deploy two redundant Freeradius servers , anyone have like experience to share ,,, Thanks in Advance ,,, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Login access-request results to syslog

2011-05-23 Thread Angel L. Mateo
Service-Type = Login-User server sistemas { +- entering group authorize {...} [sistemas_log] expand: /var/log/freeradius/radacct/%{Client-IP-Address}/sistemas_log-%Y%m%d - /var/log/freeradius/radacct/155.54.67.15/sistemas_log-20110523 [sistemas_log] /var/log/freeradius/radacct/%{Client-IP-Address

Re: freeradius redundancy

2011-05-23 Thread Fajar A. Nugraha
On Mon, May 23, 2011 at 5:16 PM, Student University studen...@gmail.com wrote: Hi , i need to deploy two redundant Freeradius servers , anyone have like experience to share ,,, Er... just do it (r)? Seriously, just try it yourself with the help of existing documentation (default config

Can't add a $ sign to the ldap search

2011-05-23 Thread Alexandros Gougousoudis
Hi, I tried to change the ldap-searchfilter in the ldap module, to search for a username user and user$ in LDAP, if user is given. This is neccecary to authenticate my workstations and users via LDAP. This is my filter definition in the ldap module: filter =

Can't add a $ sign to the ldap search

2011-05-23 Thread Alexandros Gougousoudis
Hi, I tried to change the ldap-searchfilter in the ldap module, to search for a username user and user$ in LDAP, if user is given. This is neccecary to authenticate my workstations and users via LDAP. This is my filter definition in the ldap module: filter =

Re: Login access-request results to syslog

2011-05-23 Thread Alan DeKok
Angel L. Mateo wrote: ... reference = %{%{Packet-Type}:-format} Which is *always* the request packet. Use %{reply:Packet-Type} for the reply. You'll have to find a way to switch the reference based on request or reply. Maybe configure two versions of the linelog module. Alan

Re: freeradius redundancy

2011-05-23 Thread Alexander Clouter
Student University studen...@gmail.com wrote: i need to deploy two redundant Freeradius servers , anyone have like experience to share ,,, If your network topology can support it (speak to your network sysadmin) then you can get the ether to do the failover/high-availability without

Re: Can't add a $ sign to the ldap search

2011-05-23 Thread Phil Mayers
On 05/23/2011 01:07 PM, Alexandros Gougousoudis wrote: Hi, I tried to change the ldap-searchfilter in the ldap module, to search for a username user and user$ in LDAP, if user is given. This is neccecary to authenticate my workstations and users via LDAP. This is my filter definition in the

Re: Authentication issues with Win7 and WPA/WPA2 Enterprise

2011-05-23 Thread Simon L.
Hi again, now i got a real Problem. ... The debug you sent contains no reject. Please send a debug for this case. I will generate a separate log for the WPA2 scenario soon. I have no problems with WPA/2 and local authentication anymore. But now I try to proxy the

Re: Authentication issues with Win7 and WPA/WPA2 Enterprise

2011-05-23 Thread Phil Mayers
On 05/23/2011 06:53 PM, Simon L. wrote: Please have a look at my new, attached debug log. The server you are proxying to sends a reject. Fix that server. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can't add a $ sign to the ldap search

2011-05-23 Thread Alexandros Gougousoudis
Hi Phil, filter = (|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(uid=%{%{Stripped-User-Name}:-%{User-Name}}\$)) Don't do that. Instead try: filter = (uid=%{mschap:User-Name}) Hm, this is not working. I also don't get the point, why the username in mschap is mangled to have a $ or not? The

Re: Can't add a $ sign to the ldap search

2011-05-23 Thread Phil Mayers
On 05/23/2011 08:46 PM, Alexandros Gougousoudis wrote: Hi Phil, filter = (|(uid=%{%{Stripped-User-Name}:-%{User-Name}})(uid=%{%{Stripped-User-Name}:-%{User-Name}}\$)) Don't do that. Instead try: filter = (uid=%{mschap:User-Name}) Hm, this is not working. I also don't get the point, why

DHCP+radius

2011-05-23 Thread Umut Arus
Hi, I would like to MAC filtering on a DHCP system with LDAP. I think, radius may work as a DHCP server. There are some methods as radius proxy or some experimental ways. What is the best way to do MAC filtering? What is your suggestion? thanks, - List info/subscribe/unsubscribe? See

Authentication Problem

2011-05-23 Thread john decot
Hi , I have been using freeradius-server-2.1.10 . Dialupadmin is using for web based administration. It was working fine till yesterday. I have changed added attribute to check Max-All-Session. Then I have face problem of No authenticate method (Auth-Type) found for the request:

Re: Authentication Problem

2011-05-23 Thread Fajar A. Nugraha
On Tue, May 24, 2011 at 9:20 AM, john decot johnde...@yahoo.com wrote: Hi ,    I have been using freeradius-server-2.1.10 . Dialupadmin is using for web based administration. It was working fine till yesterday. I have changed added attribute to check Max-All-Session.  Then I have face problem

Re: Authentication Problem

2011-05-23 Thread john decot
From: Fajar A. Nugraha l...@fajar.net To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tue, May 24, 2011 8:15:42 AM Subject: Re: Authentication Problem On Tue, May 24, 2011 at 9:20 AM, john decot johnde...@yahoo.com wrote: Hi ,

Re: Authentication Problem

2011-05-23 Thread john decot
I have backup from working server but still not working Please find the log: success Log: Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1 port 52710, id=55, length=59 User-Name = rajnish User-Password = rajnish123 NAS-IP-Address = x.x.x.x NAS-Port = 0 # Executing

RE: Authentication Problem

2011-05-23 Thread Tim Sylvester
From: freeradius-users-bounces+tim.sylvester=networkradius@lists.freeradius.or g [mailto:freeradius-users-bounces+tim.sylvester=networkradius.com@lists.freer adius.org] On Behalf Of john decot Sent: Monday, May 23, 2011 9:36 PM To: FreeRadius users mailing list Subject: Re: