Re: radmin del client error

2011-08-24 Thread tohaikmeng
Hello Arran, I have built the master copy from git and tested. The result still the same. Not fixed. :) Alex -- View this message in context: http://freeradius.1045715.n5.nabble.com/radmin-del-client-error-tp4725176p4729575.html Sent from the FreeRadius - User mailing list archive at

Documentation about Freeradius + Openldap

2011-08-24 Thread Alejandro Gandara
Hi list, Im new in this list and implementig Freeradius. Im installing and configuring Freeradius 2.1.10 over Linux Debian Squeeze. We have designed a quite difficult architecture to authenticate users. I've been looking for many hours for advance and specific documentation to manage freeradius,

Re: Realm parsing and \r = =0D

2011-08-24 Thread Alexander Clouter
Rich Graves rgra...@carleton.edu wrote: I've got freeradius-2.1.10-5.el6.x86_64 on fully patched RHEL6.1. PEAP+MSCHAPv2 for wireless 802.1x, intending to federate with eduroam. Within a day, I had the configuration I wanted, or so I thought. Empty stanzas for realms u...@carleton.edu,

OT: Cisco Disconnect-Request packets

2011-08-24 Thread Jonathan Gazeley
Hi all, Not directly related to FreeRADIUS but I gather people here have some experience with Cisco WiSMs and 802.1x. I'm trying to use radclient to craft a Disconnect-Request packet to disconnect a user on an 802.1x network. I've checked the RFCs for the Disconnect-Request packets and I

Re: radmin del client error

2011-08-24 Thread Arran Cudbard-Bell
Ok couple of things, did you actually try radmin -e del client ipaddr 192.168.169.74? could you run it in interactive mode and see if you get the same result? -Arran On 24 Aug 2011, at 12:28, tohaikmeng wrote: Hello Arran, Thanks for double checking this. It's weird. Below is what i got.

Re: OT: Cisco Disconnect-Request packets

2011-08-24 Thread Arran Cudbard-Bell
On 24 Aug 2011, at 12:31, Jonathan Gazeley wrote: Hi all, Not directly related to FreeRADIUS but I gather people here have some experience with Cisco WiSMs and 802.1x. I'm trying to use radclient to craft a Disconnect-Request packet to disconnect a user on an 802.1x network. I've

Re: radmin del client error

2011-08-24 Thread Bjørn Mork
Arran Cudbard-Bell a.cudba...@freeradius.org writes: Hi Alex, I just built from master myself And it seems to be working fine for me... radmin del client ipaddr 192.168.1.1 ERROR: No such client radmin del client del client ipaddr ipaddr - Delete a dynamically created client radmin del

Re: radmin del client error

2011-08-24 Thread Bjørn Mork
tohaikmeng tohaikm...@live.com writes: [root@FC-O ~]# radmin -e del client ipaddr ERROR: Must specify ipaddr [root@FC-O ~]# radmin -e del client ipaddr ipaddr 192.168.169.74 ERROR: Client 192.168.169.74 was not dynamically defined. Yes, that looks true even with yesterday's patch, provided

Re: radmin del client error

2011-08-24 Thread tohaikmeng
Hello Arran, Yes. I did. Is there anything i did wrongly? [root@FC-O ~]# radmin -e del client ipaddr 192.168.169.74 ERROR: Must specify ipaddr [root@FC-O ~]# radmin radmin 3.0.0 - FreeRADIUS Server administration tool. Copyright (C) 2008 The FreeRADIUS server project and contributors. There is

Re: radmin del client error

2011-08-24 Thread Arran Cudbard-Bell
On 24 Aug 2011, at 12:50, Bjørn Mork wrote: tohaikmeng tohaikm...@live.com writes: [root@FC-O ~]# radmin -e del client ipaddr ERROR: Must specify ipaddr [root@FC-O ~]# radmin -e del client ipaddr ipaddr 192.168.169.74 ERROR: Client 192.168.169.74 was not dynamically defined. Yes, that

Re: radmin del client error

2011-08-24 Thread Arran Cudbard-Bell
Alex, Could you make sure you're running 3.0 of the server as well... the validation logic is in the server not the radmin client... -Arran On 24 Aug 2011, at 12:57, tohaikmeng wrote: Hello Arran, Yes. I did. Is there anything i did wrongly? [root@FC-O ~]# radmin -e del client ipaddr

Re: radmin del client error

2011-08-24 Thread tohaikmeng
Hello Arran, The method that I use to add dynamic client is via radmin -e add client file file? I read site-available/dynamic-clients. But I can't find the link that trigger radius daemon to add the dynamic client definition file. I named the client ip as file name instructed and placed in the

Re: radmin del client error

2011-08-24 Thread Alan DeKok
tohaikmeng wrote: I read site-available/dynamic-clients. But I can't find the link that trigger radius daemon to add the dynamic client definition file. I named the client ip as file name instructed and placed in the appointed client definition directory. Is there any steps that I missed out?

Re: Documentation about Freeradius + Openldap

2011-08-24 Thread Alan DeKok
Alejandro Gandara wrote: Im new in this list and implementig Freeradius. Im installing and configuring Freeradius 2.1.10 over Linux Debian Squeeze. We have designed a quite difficult architecture to authenticate users. I've been looking for many hours for advance and specific documentation

Re: Documentation about Freeradius + Openldap

2011-08-24 Thread Alejandro Gandara
Hi, Thanks for your answer. For exemple: We need to learn how assign IP or HOSTNAME ACCESS LIST to a user taken from ldap. assing Static IP or Dinamic IP to a user or group taken from ldap. integrate this with Openvpn with freeradiusplugin. know if a profile is stored in a

Re: Documentation about Freeradius + Openldap

2011-08-24 Thread Alan DeKok
Alejandro Gandara wrote: We need to learn how assign IP or HOSTNAME ACCESS LIST to a user taken from ldap. assing Static IP or Dinamic IP to a user or group taken from ldap. Read raddb/ldap.attrmap and doc/ldap_howto. The LDAP attributes map to RADIUS attributes, including IP address.

Re: compiling pam radius module

2011-08-24 Thread g17jimmy
I'm sure this won't surprise anyone, but the problem had nothing to do with radius. I had only entered the radius module in the pam config for ssh, but I had a kerberos config in the system auth pam config. When I enabled debug for the radius module I saw the kerberos realm info being passed in

Re: OT: Cisco Disconnect-Request packets

2011-08-24 Thread James J J Hooper
On 24/08/2011 11:31, Jonathan Gazeley wrote: Hi all, Not directly related to FreeRADIUS but I gather people here have some experience with Cisco WiSMs and 802.1x. I'm trying to use radclient to craft a Disconnect-Request packet to disconnect a user on an 802.1x network. I've checked the RFCs

Re: OT: Cisco Disconnect-Request packets

2011-08-24 Thread Arran Cudbard-Bell
radclient -xs -f /tmp/disconnect.txt 172.17.107.210:3799 disconnect secret Sending Disconnect-Request of id 7 to 172.17.107.210 port 3799 User-Name = testu...@bristol.ac.uk Calling-Station-Id = 89:c6:65:99:39:52 Service-Type = Login-User rad_recv: Disconnect-ACK packet

Adding default Realms in users without Realms

2011-08-24 Thread joao...@gmail.com
Hello everybody I have a doubt and I'm not finding answers on the Internet. I have a freeradius server operating normally, it is a proxy for several Realms, with each Realm leads the user to a different authentication database, so far okay. What I need now is to get users coming to the radius

Re: Adding default Realms in users without Realms

2011-08-24 Thread Arran Cudbard-Bell
On 24 Aug 2011, at 20:42, joao...@gmail.com wrote: Hello everybody I have a doubt and I'm not finding answers on the Internet. I have a freeradius server operating normally, it is a proxy for several Realms, with each Realm leads the user to a different authentication database, so far

Re: Adding default Realms in users without Realms

2011-08-24 Thread joao...@gmail.com
Well the way we suggested to me you did not, however based on what you gave me I made a small change and it worked. Put this in the authorize. if(User-Name !~ /@/){ update request { Realm := myrealm } } I wonder how I would

Re: Adding default Realms in users without Realms

2011-08-24 Thread Arran Cudbard-Bell
On 24 Aug 2011, at 21:34, joao...@gmail.com wrote: Well the way we suggested to me you did not, however based on what you gave me I made a small change and it worked. Put this in the authorize. The way I suggested will work if you put it at the top of authorize before calling any of the

Re: Adding default Realms in users without Realms

2011-08-24 Thread joao...@gmail.com
OK Thanks for the tips, helped me a lot. 2011/8/24 Arran Cudbard-Bell a.cudba...@freeradius.org: On 24 Aug 2011, at 20:42, joao...@gmail.com wrote: Hello everybody I have a doubt and I'm not finding answers on the Internet. I have a freeradius server operating normally, it is a proxy for

Fwd: Auth configuration help

2011-08-24 Thread Dom
Original Message Subject:Auth configuration help Date: Wed, 24 Aug 2011 21:53:46 -0400 From: Dom dvers...@tekcorner.ca To: freeradius-users@lists.freeradius.org I was hoping someone could help. We have a cisco 3825 with radius server pointed to our

Re: Fwd: Auth configuration help

2011-08-24 Thread Alan DeKok
Dom wrote: I was hoping someone could help. We have a cisco 3825 with radius server pointed to our freeradius installation. When I test radius authentication using NTRadping using CHAP authentication everything works fine. However when we try to connect via a standard dsl connection we

RE: Auth configuration help

2011-08-24 Thread Tim Sylvester
You NAS is sending the password in clear text and is not doing CHAP, so the RADIUS server needs to find either a clear text password or a hashed password. Where are you storing usernames/passwords? Make sure that you have an entry with for User-Name = aew...@domain.ca and Cleartext-Password :=