Re: problem with chillispot

2011-09-07 Thread Aceror
Try in localhost to see if work. radtest testuser passwd localhost 1812 test123 if (in locahost) dont work then (change the share passwd to only numbers to see if the system works and try again) radtest testuser passwd localhost 1812 123456 if (works) then (try with a laptop in the same

SQL IP Pool Control Attribute Placement

2011-09-07 Thread Det Det
Hi, For the sqlippool, http://wiki.freeradius.org/Rlm_sqlippool, which table should the below control attribute be placed on? It says, it is not a reply attribute, does it then go to radcheck/radgroupcheck table? DEFAULT Pool-Name := main_pool Fall-Through = Yes thanks, det - List

Re: SQL IP Pool Control Attribute Placement

2011-09-07 Thread Fajar A. Nugraha
On Wed, Sep 7, 2011 at 2:45 PM, Det Det det.explo...@yahoo.com wrote: Hi, For the sqlippool, http://wiki.freeradius.org/Rlm_sqlippool, which table should the below control attribute be placed on? It says, it is not a reply attribute, does it then go to radcheck/radgroupcheck table? DEFAULT

rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Martin
Hi, I am trying CoA and DM with Alvarion ASN-GW and all the time I see Shared secret is incorrect for the AcK/NaK messagess received from the ASN. With other AAA, based also on FR, it is not happeing. No.     Time        Source                Destination           Protocol Info       1

Re: CoA proxying again

2011-09-07 Thread Alan DeKok
Johan Meiring wrote: This would essentially automatically add a coa home server for the client?? If it was configured, yes. This would also be a GREAT feature for me. How far is 3.0 off? I keep saying a month or two... 2.12 (or 2.13) maybe? Ideally, no. New features are hard to do

Re: rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Alan DeKok
Martin wrote: I am trying CoA and DM with Alvarion ASN-GW and all the time I see Shared secret is incorrect for the AcK/NaK messagess received from the ASN. So you post a text packet dump, rather than radiusd -X. Why? What's wrong with posting the debug output as suggested *everywhere*?

Freeradius and LDAP keepalive

2011-09-07 Thread Angel L. Mateo
Hello, I have a freeradius 2.1.10 running in a ubuntu (10.04) server. My users are in a ldap directory. The problem I have is that openldap server has an idle timeout (if there is more than this time with an idle connection, openldap closes the connection). So I want to know if there is

RADIUS Disconnect request support in free radius client -1.1.6

2011-09-07 Thread vikraman.p36
Hi , I am looking into Free radius client (freeradius-client-1.1.6) library code for using in our project. Please let me know if the Free radius client supports processing of the disconnect request message from RADIUS server which is defined in the RFC 5176. Thanks, Vikraman Please do

Re: Freeradius and LDAP keepalive

2011-09-07 Thread Alan DeKok
Angel L. Mateo wrote: I have a freeradius 2.1.10 running in a ubuntu (10.04) server. My users are in a ldap directory. The problem I have is that openldap server has an idle timeout (if there is more than this time with an idle connection, openldap closes the connection). So I want

Re: Freeradius and LDAP keepalive

2011-09-07 Thread Angel L. Mateo
El 07/09/11 13:02, Alan DeKok escribió: Angel L. Mateo wrote: I have a freeradius 2.1.10 running in a ubuntu (10.04) server. My users are in a ldap directory. The problem I have is that openldap server has an idle timeout (if there is more than this time with an idle connection,

Re: Freeradius and LDAP keepalive

2011-09-07 Thread Alan DeKok
Angel L. Mateo wrote: I didn't find any 2.1.12 freeradius version (the latest version at freeradius web is 2.1.11). In 2.1.11 (and 2.1.10) the options I have found that could be related are: 2.1.12 will be released soon. * ldap_connections_number: number of active ldap connections

Re: rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Alan DeKok
Martin wrote: I forgot about radius -X. sigh If you're going to make it hard to help you, I'm just going to delete your posts. The debug output you posted is *useless*. You claimed it had problems when receiving packets. So to help, you post a debug output... where it doesn't receive

Re: rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Martin
This is the debug output of radclient command:  echo User-Name='{am=1}543b4dac6723e8bb0156ba2bbde13...@alvarion.ro', WiMAX-AAA-Session-Id = 18ed983f3c2371c6f4bc692e0c89dffe,Calling-Station-Id = 00-17-c4-3d-41-ea | /usr/local/freeradius2.10/bin/radclient -c '1' -n '3' -r '3' -t '3' -s -xx

Re: rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Alan DeKok
Martin wrote: This is the debug output of radclient command: echo User-Name='{am=1}543b4dac6723e8bb0156ba2bbde13...@alvarion.ro', WiMAX-AAA-Session-Id = 18ed983f3c2371c6f4bc692e0c89dffe,Calling-Station-Id = 00-17-c4-3d-41-ea | /usr/local/freeradius2.10/bin/radclient -c '1' -n '3' -r '3' -t

Re: rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Martin
I am using this command on the FR server in order to dicsconect the user on the NAS. The thing is that the NAS is using the same shared secret  for Authentication/Accounting/PoD/CoA and as you can see these messages are accepted and NAS also replyed back with Disconect-ACK.  Is there another

Re: rad_verify: Received Disconnect-ACK packet from home server with invalid signature! (Shared secret is incorrect.) for CoA, and PoD

2011-09-07 Thread Alan DeKok
Martin wrote: I am using this command on the FR server in order to dicsconect the user on the NAS. OK... that wasn't clear from the original message. The thing is that the NAS is using the same shared secret for Authentication/Accounting/PoD/CoA and as you can see these messages are

Custom function to update Session-Timeout

2011-09-07 Thread Ivaylo Petkov
Hi All, I am new to developing for Freeradius and i was hoping one of you can direct me into the right direction. I would like to have a program update the Session-Timeout on authentication request or on disconnect so that when the user receives the access accept it receives the updated

Re: Custom function to update Session-Timeout

2011-09-07 Thread Arran Cudbard-Bell
On 7 Sep 2011, at 21:28, Ivaylo Petkov wrote: Hi All, I am new to developing for Freeradius and i was hoping one of you can direct me into the right direction. I would like to have a program update the Session-Timeout on authentication request or on disconnect so that when the user

you have already logged in

2011-09-07 Thread Zero Cool
Dear All hi all.. is anybody can tell me pls about radius authentication failed if anyof my users got disconnect, he will not able to get login radius ... they got that msg you have already logged in,, im not in good that so culdnt change that option... pls help me thanks - List

Specifying Any Port for RADIUS Client

2011-09-07 Thread Det Det
Hi, I want to connect to RADIUS server using RADIUS client software, not through NAS. Using RADIUS client software such as radperf will generate different port numbers when connecting to the RADIUS server. How do I place client information in NAS table such that I am able to specify IP and any

Re: Specifying Any Port for RADIUS Client

2011-09-07 Thread Det Det
please disregard this email. I thought that the 'ports' field in 'nas' table means the 'source' port the client will use to connect to the RADIUS server when it actually means the port on the RADIUS server that the client will connect to. From: Det Det

Re: Specifying Any Port for RADIUS Client

2011-09-07 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 10:15 AM, Det Det det.explo...@yahoo.com wrote: please disregard this email. I thought that the 'ports' field in 'nas' table means the 'source' port the client will use to connect to the RADIUS server when it actually means the port on the RADIUS server that the client

Re: Specifying Any Port for RADIUS Client

2011-09-07 Thread Det Det
yeah you are right. realized that the ports value is actually not in use. it actually get the shortname not the nasname which is why i get an 'unknown client' error. i left the shortname empty. From: Fajar A. Nugraha l...@fajar.net To: FreeRadius users mailing

References for New RADIUS Names/Old RADIUS Names

2011-09-07 Thread Det Det
Hi, Any idea where I can see list of new names for those RADIUS attributes/values that's been obsoleted. Just want to confirm, for example, Framed-Filter-Id is obsolete, is Filter-Id a replacement to that? thanks! det - List info/subscribe/unsubscribe? See

Re: References for New RADIUS Names/Old RADIUS Names

2011-09-07 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 12:29 PM, Det Det det.explo...@yahoo.com wrote: Hi, Any idea where I can see list of new names for those RADIUS attributes/values that's been obsoleted. Should be share/dictionary.compat Just want to confirm, for example, Framed-Filter-Id is obsolete, is Filter-Id a

Re: References for New RADIUS Names/Old RADIUS Names

2011-09-07 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 12:44 PM, Fajar A. Nugraha l...@fajar.net wrote: On Thu, Sep 8, 2011 at 12:29 PM, Det Det det.explo...@yahoo.com wrote: Hi, Any idea where I can see list of new names for those RADIUS attributes/values that's been obsoleted. Should be share/dictionary.compat Just