Re: LDAP Authentication bind as user issue

2011-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2011, at 02:26, DaveA wrote: I've tried a few more things and still no luck... Yes you need run the ldap module's authenticate method. There's a configuration option in LDAP which allows it to set Auth-Type LDAP, that needs to be set to yes. Then you need to create an Auth-Type

Re: Problem with rml_sqlcounter with GigaByte datavolume

2011-09-12 Thread nfourel
Thanks for your reply but I can't find any version 3.x.x of freeRADIUS. Where can I find it ? Nicolas -- View this message in context: http://freeradius.1045715.n5.nabble.com/Problem-with-rml-sqlcounter-with-GigaByte-datavolume-tp4455164p4793455.html Sent from the FreeRadius - User mailing list

Re: Problem with rml_sqlcounter with GigaByte datavolume

2011-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2011, at 10:20, nfourel wrote: Thanks for your reply but I can't find any version 3.x.x of freeRADIUS. Where can I find it ? http://git.freeradius.org/ 3.x.x is currently in development on the master branch. -Arran Arran Cudbard-Bell a.cudba...@freeradius.org RADIUS - Waging

Re: NAS IP Address

2011-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2011, at 13:58, 2394263740 wrote: Hello, I'm using free radius server 2.1.11 on Linux Enterprise Server 6.1. OS: Linux Enterprise Server 6.1 Radius: free radius server 2.1.11 Database: Mysql The WIFI routers we're using are in diffirent private networks, behind the internet

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2011, at 16:04, Sallee, Stephen (Jake) wrote: @ everyone We have about 100 NAS entries in our clients.conf file, it makes the file a bear to deal with but the server seems to handle it fine. We will be expanding our infrastructure soon and the number of NAS entries will

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Arran Cudbard-Bell
Fone: 254-295-4658 Phax: 254-295-4221 Nice :) Arran Cudbard-Bell a.cudba...@freeradius.org RADIUS - Waging war on ignorance and apathy one Access-Challenge at a time. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Bruce Nunn
If the network your APs are on is physically secure, and you don't need accounting for individual APs, you can use netmasks to define clients in the clients.conf file. - Original Message - From: Sallee, Stephen (Jake) jake.sal...@umhb.edu To: freeradius-users

RE: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Gary Gatten
Yup. One could create a management / auth VLAN of sorts. Set the source port for RADIUS/Auth/etc. to be said VLAN. In theory then you would need only a single network entry in clients conf, and if you wish, reject traffic from any other unauthorized nets / IP's. We do something similar as

Re: Problem with rml_sqlcounter with GigaByte datavolume

2011-09-12 Thread nfourel
Many thanks, I am going to try it ! Nicolas -- View this message in context: http://freeradius.1045715.n5.nabble.com/Problem-with-rml-sqlcounter-with-GigaByte-datavolume-tp4455164p4794470.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe?

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Arran Cudbard-Bell
On 12 Sep 2011, at 16:41, Bruce Nunn wrote: If the network your APs are on is physically secure, and you don't need accounting for individual APs, you can use netmasks to define clients in the clients.conf file. Why would using a shared, shared secrets or netmasks mess with accounting?

Re: Unable to Authenticate with SHA Password

2011-09-12 Thread Alan DeKok
Rajkumar balaji wrote: Hi All, I am unable to authenticate the When I send SHA password to the FreeRADIUS. I have configured SHA-Password := admin123 in the users file. That's not a SHA password. It's a clear-text password. My Password is admin123 and after SHA messagedigest its

Re: LDAP Authentication bind as user issue

2011-09-12 Thread DaveA
Ive already set Auth-Type := LDAP by putting it in the users file. As for the rest, I have what you suggest... authenticate { Auth-Type LDAP { ldap.netid } Dave -- View this message in context:

Troubleshooting FreeRadius +LDAP

2011-09-12 Thread Ricardo Sousa
Greetings list users, I'm trying setup FreeRadius to work with LDAP in a deployment of ClearOS and have followed this How-To http://www.clearfoundation.com/docs/howtos/setting_up_freeradius2_to_use_ldap and this How-To http://deployingradius.com/documents/configuration/pap.html with success,

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Christ Schlacta
On 9/12/2011 07:21, Arran Cudbard-Bell wrote: On 12 Sep 2011, at 16:04, Sallee, Stephen (Jake) wrote: @ everyone We have about 100 NAS entries in our clients.conf file, it makes the file a bear to deal with but the server seems to handle it fine. We will be expanding our infrastructure

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Arran Cudbard-Bell
Last I heard, you could NOT dynamically add NASs without restarting clients.conf as NAS entries are only read once on startup. Has this changed? Yes, FreeRADIUS will now load clients dynamically from clients or from a database, or an LDAP directory, or off a 5 1/4 floppy, a usb key shaped

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Alan DeKok
Christ Schlacta wrote: Last I heard, you could NOT dynamically add NASs without restarting clients.conf as NAS entries are only read once on startup. Has this changed? I *did* respond to your message. Please read the messages on this list. Even if this has not changed, the advantages of

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Fajar A. Nugraha
On Tue, Sep 13, 2011 at 2:42 AM, Alan DeKok al...@deployingradius.com wrote: Christ Schlacta wrote: Even if this has not changed, the advantages of storing NASs in a table is pretty significant.  make changes, call quick restart script, done.  Uh... no.   My message (again) talked about

Re: Best Practices - maximum NAS entries in clients.conf

2011-09-12 Thread Christ Schlacta
On 9/12/2011 12:41, Arran Cudbard-Bell wrote: Last I heard, you could NOT dynamically add NASs without restarting clients.conf as NAS entries are only read once on startup. Has this changed? Yes, FreeRADIUS will now load clients dynamically from clients or from a database, or an LDAP

Re: Custom function to update Session-Timeout

2011-09-12 Thread denzx
Hi, I am new in this mailing list. I have similar situation too, I need counting something before decide to send session-timeout to NAS in accounting section. The purpose is disconnect online-user by updating his current Session-Timeout with lower value. Unfortunately, its still not working. My