Re: couldn't link driver rlm_sql_mysql

2011-09-28 Thread gary
Hi All It solved after re-install freeradius. I guess installing freeradius-mysql library then freeradius in sequence is correct installation. (or do someways like ld command to link it? But I did ld it didn't work) Best Regards Gary - Original Message - From: gary To:

Re: couldn't link driver rlm_sql_mysql

2011-09-28 Thread Arran Cudbard-Bell
On 28 Sep 2011, at 08:17, gary wrote: Hi All It solved after re-install freeradius. I guess installing freeradius-mysql library then freeradius in sequence is correct installation. (or do someways like ld command to link it? But I did ld it didn't work) Um yes, FreeRADIUS needs to build

Re: couldn't link driver rlm_sql_mysql

2011-09-28 Thread Alan DeKok
gary wrote: I am setting up freeradius 2.1.11+mysql 5.5.16 on Fedora 13. Executing command radiusd -X it says could not link driver rlm_sql_mysql(read as below). It not worked even I install freeradius-mysql library but I can find the driver rlm_sql_mysql.so in /usr/lib/freeradius folder.

[mschap] FAILED: MS-CHAP2-Response is incorrect

2011-09-28 Thread sekchel lee
mysql select * from radcheck; +++---+++ | id | username | attribute | op | value | +++---+++ | 1 | testuser | User-Password | := |

Re: [mschap] FAILED: MS-CHAP2-Response is incorrect

2011-09-28 Thread Arran Cudbard-Bell
On 28 Sep 2011, at 09:50, sekchel lee wrote: mysql select * from radcheck; +++---+++ | id | username | attribute | op | value |

Re: FR, SQL backend and Foreign keys

2011-09-28 Thread Fabien COMBERNOUS
On 27/09/2011 11:25, Alan DeKok wrote: Fabien COMBERNOUS wrote: In the samples schema.sql proposed for SQL backend, no foreign keys are used. Any reason ? The schema is designed to be simple. What foreign keys would you propose it use? here a patch proposed : --- schema_orig.sql

Re: FR, SQL backend and Foreign keys

2011-09-28 Thread Alan DeKok
Fabien COMBERNOUS wrote: here a patch proposed : A bit of explanation would help. It looks reasonable, but I'd want someone to try it before putting it into the server. --- schema_orig.sql2011-09-28 10:42:08.0 +0200 *PLEASE* use full paths. There are 4-5 SQL backends in

Re: Enforcing Login-Time on NAS

2011-09-28 Thread shiv
I tried this, but ran into another basic issue. How to collect the results of an SQL query into an array? for example: Tmp-String-0 = %{sql:SELECT `logintime`,`hotspotname`,`rtrmac` FROM `hotspotview` WHERE `status`='UP'} doesnt give me an array. The unlang manual does mention arrays but with this

Re: FR, SQL backend and Foreign keys

2011-09-28 Thread Fajar A. Nugraha
On Wed, Sep 28, 2011 at 3:50 PM, Fabien COMBERNOUS fcombern...@kezia.com wrote:  # Table structure for table 'radgroupcheck' @@ -117,8 +117,10 @@   username varchar(64) NOT NULL default '',   groupname varchar(64) NOT NULL default '',   priority int(11) NOT NULL default '1', -  KEY username

Re: distributed authentification scheme advice needed

2011-09-28 Thread Zeus V Panchenko
thanks for quick reply Arran Cudbard-Bell (a.cudba...@freeradius.org) [11.09.28 08:28] wrote: Yes, home server pools let you specify a 'fallback' home server which can point to a virtual server. It should be working in v2.1.x but is currently broken in 3.x. See proxy.conf for details.

Re: FR, SQL backend and Foreign keys

2011-09-28 Thread Fabien COMBERNOUS
On 28/09/2011 11:52, Fajar A. Nugraha wrote: On Wed, Sep 28, 2011 at 3:50 PM, Fabien COMBERNOUS fcombern...@kezia.com wrote: # Table structure for table 'radgroupcheck' @@ -117,8 +117,10 @@ username varchar(64) NOT NULL default '', groupname varchar(64) NOT NULL default '', priority

Re: distributed authentification scheme advice needed

2011-09-28 Thread Arran Cudbard-Bell
On 28 Sep 2011, at 12:11, Zeus V Panchenko wrote: thanks for quick reply Arran Cudbard-Bell (a.cudba...@freeradius.org) [11.09.28 08:28] wrote: Yes, home server pools let you specify a 'fallback' home server which can point to a virtual server. It should be working in v2.1.x but is

Re: FR, SQL backend and Foreign keys

2011-09-28 Thread Fabien COMBERNOUS
On 28/09/2011 11:45, Alan DeKok wrote: Fabien COMBERNOUS wrote: here a patch proposed : A bit of explanation would help. Foreign key : add a username in radusergroup table needs to exist in radcheck table and be equal. On cascade : if you update ou delete a username in radcheck table, the

Re: distributed authentification scheme advice needed

2011-09-28 Thread Alan DeKok
Zeus V Panchenko wrote: but than, I need configure EAP/TLS on fallback.radius.my.domain identical to core.radius.my.domain one, correct? Yes. Just copy the config the files. since without the same server certificates my clients will not be able authenticate with

Last call for 2.1.12

2011-09-28 Thread Alan DeKok
I've put new images of 2.1.12 on the web site: http://git.freeradius.org/pre/ If there are no objections, I will release 2.1.12 on Friday, using those exact files. Please test report any show-stoppers. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Communigate with PEAP-MSCHAPv2

2011-09-28 Thread Arran Cudbard-Bell
On 28 Sep 2011, at 13:46, Rosario Lumia wrote: Hi to all, I have a problem using freeradius 2.1.8. I have an auth server that is a Communigate 5.3 mail server. I'd want my windows clients can use a PEAP/MSCHAPv2 default auth schema but it seems not working. With TTLS/PAP-MSCHAPv1 it

Postgresql undefined symbol PQinitSSL

2011-09-28 Thread Thor Spruyt
Hi, I have the same problem with both 2.1.11 and 2.1.12-pre ... I'm on CentOS 4.6 with following RPMs: $ rpm -qa | grep devel glibc-devel-2.3.4-2.39 krb5-devel-1.3.4-60.el4_7.2 mysql-devel-5.0.54-1.el4.centos openssl-devel-0.9.7a-43.17.el4_8.5 kernel-smp-devel-2.6.9-67.0.4.EL

Re: Postgresql undefined symbol PQinitSSL

2011-09-28 Thread Alan DeKok
Thor Spruyt wrote: Any ideas on what could be the problem here or any solution or tips on where to look further? FreeRADIUS is built with Postgresql SSL. So it assumes that Postgresql can do SSL, too. The simple fix is to go to the sql_postgresql.c file, and delete the code which refers

Re: Postgresql undefined symbol PQinitSSL

2011-09-28 Thread Thor Spruyt
Hi Alan, Yes, I removed the code and then it runs ;-) Thanks, Thor. - Original Message - From: Alan DeKok al...@deployingradius.com To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Wednesday, September 28, 2011 3:28:14 PM GMT +01:00 Amsterdam / Berlin /

Re: Communigate with PEAP-MSCHAPv2

2011-09-28 Thread Rosario Lumia
2011/9/28 Arran Cudbard-Bell a.cudba...@freeradius.org On 28 Sep 2011, at 13:46, Rosario Lumia wrote: Hi to all, I have a problem using freeradius 2.1.8. I have an auth server that is a Communigate 5.3 mail server. I'd want my windows clients can use a PEAP/MSCHAPv2 default auth schema

Re: Communigate with PEAP-MSCHAPv2

2011-09-28 Thread Rosario Lumia
Ok. I answered to myself. Thanks again! RL 2011/9/28 Rosario Lumia ery...@gmail.com 2011/9/28 Arran Cudbard-Bell a.cudba...@freeradius.org On 28 Sep 2011, at 13:46, Rosario Lumia wrote: Hi to all, I have a problem using freeradius 2.1.8. I have an auth server that is a Communigate

Re: Communigate with PEAP-MSCHAPv2

2011-09-28 Thread Arran Cudbard-Bell
On 28 Sep 2011, at 16:10, Rosario Lumia wrote: 2011/9/28 Arran Cudbard-Bell a.cudba...@freeradius.org Sorry, do you mean I have to store in my mailserver cleartext or Md4 passoword? I'm saying that in order to do PEAP/MSHCHAPv2 you have to have access to the Cleartext-Password or

Re: FreeRADIUS Beginner's Guide

2011-09-28 Thread Alexander Clouter
Ian Pilcher arequip...@gmail.com wrote: I'm a complete newbie to RADIUS, looking to make use of the features of my new smart switches and wireless access point to secure my home network, so the title certainly sounds right. Has anyone had a look at this book yet? If so, what are your

Duplicate Start packets in RadAcct table

2011-09-28 Thread zwolfinger
I am seeing duplicate START packets in the RadAcct table. When a STOP packet is received, it applies to only one of the duplicated START packets, leaving a phantom START packet. Debug (/usr/sbin/freeside -Xx) appears to show the START packet only being received and inserted in the table once.

2.1.11 inexplicable crash

2011-09-28 Thread DaveA
Hello, After upgrading to FreeRadius version 2.1.11 on RHEL6, I am seeing the following in radius.log right before the process terminates: Wed Sep 28 11:16:12 2011 : Error: Child PID 30242 is taking too much time: forcing failure and killing child. Wed Sep 28 11:16:12 2011 : Error: Child PID

Re: 2.1.11 inexplicable crash

2011-09-28 Thread Alan DeKok
DaveA wrote: After upgrading to FreeRadius version 2.1.11 on RHEL6, I am seeing the following in radius.log right before the process terminates: ... Wed Sep 28 11:16:13 2011 : Error: Request 179116 has been waiting in the processing queue for 8 seconds. Check that all databases are running

Re: 2.1.11 inexplicable crash

2011-09-28 Thread DaveA
Hi Alan, Thanks for your fast response. By server, do you mean FreeRadius or the back end? Dave -- View this message in context: http://freeradius.1045715.n5.nabble.com/2-1-11-inexplicable-crash-tp4849607p4849700.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

Re: 2.1.11 inexplicable crash

2011-09-28 Thread Alan DeKok
DaveA wrote: Thanks for your fast response. By server, do you mean FreeRadius or the back end? sigh The message says: Check that all databases are running properly! What does that mean to you? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: 2.1.11 inexplicable crash

2011-09-28 Thread DaveA
Not enough. The log saying database and you saying server doesn't help me either. This single server uses different databases depending on the request. Currently ldap, AD and flat files. Nothing has changed except the version I'm using. Dave -- View this message in context:

Re: 2.1.11 inexplicable crash

2011-09-28 Thread Alan DeKok
DaveA wrote: Not enough. The log saying database and you saying server doesn't help me either. I suppose words like server and database aren't clear enough. This single server uses different databases depending on the request. Currently ldap, AD and flat files. Nothing has changed except

Re: 2.1.11 inexplicable crash

2011-09-28 Thread DaveA
The solution was to reduce the amount of logging and add another CPU to the VM. Thanks. -- View this message in context: http://freeradius.1045715.n5.nabble.com/2-1-11-inexplicable-crash-tp4849607p4850387.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

++[mschap] returns reject

2011-09-28 Thread scoth
I'm stuck in my testing. I have configured and reconfigured my freeradius and keep getting back to the same error: [mschap] ERROR: User-Name (RC24558\jojo) is not the same as MS-CHAP Name (jojo) from EAP-MSCHAPv2 I was able to use the mschap-username to successfully authenticate to ldap but then

Re: ++[mschap] returns reject

2011-09-28 Thread Alan DeKok
scoth wrote: I'm stuck in my testing. I have configured and reconfigured my freeradius and keep getting back to the same error: [mschap] ERROR: User-Name (RC24558\jojo) is not the same as MS-CHAP Name (jojo) from EAP-MSCHAPv2 That data is sent by the Windows box, and isn't under the