Re: References for New RADIUS Names/Old RADIUS Names

2011-09-08 Thread Det Det
thanks! :) From: Fajar A. Nugraha l...@fajar.net To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, September 8, 2011 1:48 PM Subject: Re: References for New RADIUS Names/Old RADIUS Names On Thu, Sep 8, 2011 at 12:44 PM,

Re: Freeradius and LDAP keepalive

2011-09-08 Thread Angel L. Mateo
Thank you. I have tried those options, but they doesn't work for me. The problem is that they configure freeradius to send TCP Keepalive messages over the connection, but these packets are just TCP packets, they don't content any ldap command, so openldap idle_timeout is still applied. --

RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread vikraman.p36
Hi , I have downloaded and installed RADIUS server -2.1.11 and RADIUS client-1.1.6. To run the server I used the command radiusd -X. Please let me know the configuration part for RADIUS client , run RADIUS client, in which file I need to specify the username ,password and secret password.

Re: RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 3:23 PM, vikraman@wipro.com wrote: Hi , I have downloaded and installed RADIUS server -2.1.11 and RADIUS client-1.1.6. To run the server I used the command radiusd –X. Please let me know the configuration part for RADIUS client , run RADIUS client, in which

Re: RADIUS client configuratio-1.1.6n steps

2011-09-08 Thread Fajar A. Nugraha
On Thu, Sep 8, 2011 at 3:53 PM, vikraman@wipro.com wrote: Fajar, Thanks for your response. I am trying to run a sample RADIUS client and server program. In that case, it's MUCH easier NOT to use radiusclient, but rather just use radtest (and possibly also radclient) included in

Re: you have already logged in

2011-09-08 Thread Arran Cudbard-Bell
Interestingly Apple Mail detected this message as junkmail. You've not provided anywhere near enough information for anyone to help you. run the server in debug mode and send the logs. If its a production server you can pass it multiple -x arguments to increase the log verbosity. -Arran

Re: Freeradius and LDAP keepalive

2011-09-08 Thread Alan DeKok
Angel L. Mateo wrote: Thank you. I have tried those options, but they doesn't work for me. The problem is that they configure freeradius to send TCP Keepalive messages over the connection, but these packets are just TCP packets, they don't content any ldap command, so openldap idle_timeout

PAP-ascii (is it safe to use)?

2011-09-08 Thread Matthew Benjamin
Can someone tell me if PAP-ASCII is safe to use as an password encryption protocol? -- mB. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: PAP-ascii (is it safe to use)?

2011-09-08 Thread Arran Cudbard-Bell
On 8 Sep 2011, at 16:56, Matthew Benjamin wrote: Can someone tell me if PAP-ASCII is safe to use as an password encryption protocol? No. Arran Cudbard-Bell a.cudba...@freeradius.org RADIUS - Half the complexity of Diameter - List info/subscribe/unsubscribe? See

RE: PAP-ascii (is it safe to use)?

2011-09-08 Thread Lovaas,Steven
Matthew, PAP is an authentication protocol. ASCII is a letter-encoding scheme. Neither one is an encryption protocol. Passing ASCII over PAP is called clear text... Steve From: freeradius-users-bounces+steven.lovaas=colostate@lists.freeradius.org

racct and radpostauth

2011-09-08 Thread andreapepa
Hi all, I'm testing freeradius 2 on a debian 6 with postgresql db. My question is about the correlation beetwen the tables in subject, how can i correlate records without using timestamp but maybe a unique session id? I think this would be helpful when listing online users, for example when

Re: racct and radpostauth

2011-09-08 Thread Alan DeKok
andreapepa wrote: My question is about the correlation beetwen the tables in subject, how can i correlate records without using timestamp but maybe a unique session id? Use the unique session ID. I think this would be helpful when listing online users, for example when there is no

Error in dialupadmin

2011-09-08 Thread Alberto Mijares
Hi, This is my first time using FreeRADIUS. It's running on Debian 6 and yesterday I installed freeradius-dialupadmin package. Read HOWTO.gz and README.Debian, and still not working. Home page looks fine but when I go to Accounting or New User button it shows an error DEBUG(SQL,MYSQL DRIVER):

Re: racct and radpostauth

2011-09-08 Thread Arran Cudbard-Bell
On 8 Sep 2011, at 17:48, Alan DeKok wrote: andreapepa wrote: My question is about the correlation beetwen the tables in subject, how can i correlate records without using timestamp but maybe a unique session id? Use the unique session ID. I think this would be helpful when listing

Odd issue with auth-type:ldap

2011-09-08 Thread Michael Holstein
Using .. FreeRADIUS Version 2.0.4, for host i486-pc-linux-gnu, built on Sep 7 2008 at 23:35:34 ^^ .. that is what Debian 5.0.6 (Lenny) had in packages. I have LDAP enabled as an auth-type (for ipsec-tools using libradius, since it sends cleartext password and I have AD as backend). I also

Re: Odd issue with auth-type:ldap

2011-09-08 Thread Arran Cudbard-Bell
Debugging what goes on in the background, the underlying complaint is must bind to perform.. in case #2. The first case (from a pcap trace) does to the search as defined user (in radiusd.conf) and then bind as the found DN, so it's not as if debugging forces a valid return on all

Error in Activation Attribute

2011-09-08 Thread Det Det
Hi, I have Activation attribute in radcheck table (which has a date VALUE) in old RADIUS server. I don't find this attribute in FreeRADIUS. I get this error. any idea? Failed to create the pair: Invalid octet string Mar 09 2010 for attribute name Activation thanks det - List