Re: Stop Logging in radpostauth table

2011-10-25 Thread Det Det
hey thanks! that did it. From: Arran Cudbard-Bell a.cudba...@freeradius.org To: Det Det det.explo...@yahoo.com; FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, October 24, 2011 6:09 PM Subject: Re: Stop Logging in radpostauth

Why is not writting in second detail file?

2011-10-25 Thread tonimanel
] returns noop # Executing section accounting from file /etc/freeradius/sites-enabled/default +- entering group accounting {...} [detail]expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d - /var/log/freeradius/radacct/192.168.1.7/detail-20111025 [detail] /var/log/freeradius

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
I have check that I had not defined the pool as acct_pool, for this reason server's type was wrong. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Why-is-not-writting-in-second-detail-file-tp4935451p4935604.html Sent from the FreeRadius - User mailing list archive at

Re: Authorising Clients by Calling Station ID Not IP

2011-10-25 Thread Johan Meiring
On 2011/10/24 09:06 PM, Jennyanydots Napoleon Shoehorn wrote: OH! I've looked too many lines of code over the last week. I have no idea how to patch but will investigate. Was thinking we might have to use nas-id instead. The ultimate intention was to use the mac address of the nas and a

eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Fred
Hi all, I have a configuration with 2 wifi instances : * default inner-tunnel for internal users * partners partners.inner-eap for partners users. for internal user, I have an eap.conf for outer and inner.eap.conf for inner for partners, I have a partners.eap. with eap partners.eap

Re: Why is not writting in second detail file?

2011-10-25 Thread Fajar A. Nugraha
On Tue, Oct 25, 2011 at 4:01 PM, tonimanel antoniofernan...@fabergames.com wrote: Yes, I knew that code is to define a reader. Thanks. ;) I think that this function incorrectly (I have some mistake) because when I list /var/log/freeradius/radacct, not appears second_detail file. Did you read

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
Thanks for your answer. I hadn't put update control inside accounting. Now, accounting packets are write, but with different time in acctstarttime and acctstoptime fields. This fields should to have the same values (I would like to get this). -- View this message in context:

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
I have got the same result writting update control inside of preacct. This is proxy configuration, but I don't want a proxy configuration, I would like to get a copy-acct-to-home-server configuration with the same set of information in radacct table. I have configured proxy.conf because in

update RAD_REPLY with += in rlm_perl

2011-10-25 Thread Energ
hi all! how do i update RAD_REPLY correctly with perl if i want to add addtiotional Cisco-AVPair in reply? lets say user profile has Cisco-AVPair=something1. I can have multiple of those by adding to user profile another pair like this Cisco-AVPair+=something1. But how to do the same while

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Phil Mayers
On 25/10/11 10:54, Fred wrote: rlm_eap: SSL error error:140DB111:SSL routines:SSL_CTX_set_session_id_context:ssl session id context too long Ugh. OpenSSL really is a horrible, horrible piece of software. Are you sure there is absolutely no other change than going from 2.1.11 to 2.1.12 -

Build RPM

2011-10-25 Thread Victor Guk
Hi, I want to install freeradius on RHEL5. I downloaded tar.bz2.(version 2.1.12) Run *rpmbuild -ba freeradius.spec*, but get an error: . . Requires(rpmlib): rpmlib(CompressedFileNames) = 3.0.4-1 rpmlib(PayloadFilesHavePrefix) = 4.0-1 ?? ?(?) (?):

Re: Build RPM

2011-10-25 Thread Phil Mayers
On 25/10/11 12:37, Victor Guk wrote: Hi, I want to install freeradius on RHEL5. I downloaded tar.bz2.(version 2.1.12) Run *rpmbuild -ba freeradius.spec*, but get an error: There are freeradius2 RPMs in the RHEL channels. I suggest you either: a. Install one of those, or b. Download the

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Alan DeKok
Phil Mayers wrote: Ugh. OpenSSL really is a horrible, horrible piece of software. Yup. I'll roll a patch up for the underlying issue. It's odd that no-one else is seeing it though. I've taken your fix from github and added it to v2.1.x master branches. Alan DeKok. - List

Re: update RAD_REPLY with += in rlm_perl

2011-10-25 Thread Bjørn Mork
Energ po...@ponch.ru writes: how do i update RAD_REPLY correctly with perl if i want to add addtiotional Cisco-AVPair in reply? lets say user profile has Cisco-AVPair=something1. I can have multiple of those by adding to user profile another pair like this Cisco-AVPair+=something1. But how

Re: Build RPM

2011-10-25 Thread John Dennis
On 10/25/2011 07:47 AM, Phil Mayers wrote: On 25/10/11 12:37, Victor Guk wrote: Hi, I want to install freeradius on RHEL5. I downloaded tar.bz2.(version 2.1.12) Run *rpmbuild -ba freeradius.spec*, but get an error: There are freeradius2 RPMs in the RHEL channels. I suggest you either: a.

Re: Build RPM

2011-10-25 Thread Francois Gaudreault
Hi, The spec is a bit buggy, I had to make some tweaks to make it work (minor tweaks). Let me know if you would like to have them. We are maintaining the latest RPMs (core,perl,mysql,utils) in our PacketFence repositories for RHEL5 and RHEL6, if you want...

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Fred
Hi Alan, While waiting for a fix on github, (I will not be able to rebuild my servers today) I try to make a workaround, as due to this SSL problem, I cannot have anymore default eap config including virtual_server = inner-tunnel partners eap config including some virtual_server =

Re: update RAD_REPLY with += in rlm_perl

2011-10-25 Thread Energ
Thank you, Bjørn Mork! -- View this message in context: http://freeradius.1045715.n5.nabble.com/update-RAD-REPLY-with-in-rlm-perl-tp4935794p4936231.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List info/subscribe/unsubscribe? See

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Phil Mayers
On 25/10/11 14:25, Fred wrote: Hi Alan, While waiting for a fix on github, (I will not be able to rebuild my servers today) I try to make a workaround, as due to this SSL problem, I cannot have anymore As per my email - there are other options. You can make your EAP module name shorter; or

FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Pierre Rondou
: # echo Message-Authenticator = 0x00 | radclient 127.0.0.1 acct testing123 -c 250 temp wc -l temp wc -l /var/log/freeradius/radacct/127.0.0.1/detail-20111025 250 temp 84224 /var/log/freeradius/radacct/127.0.0.1/detail-20111025 This only happen when using FreeRadius in Multithread

Re: Why is not writting in second detail file?

2011-10-25 Thread tonimanel
I have got the same result writting update control inside of preacct. This is proxy configuration, but I don't want a proxy configuration, I would like to get a copy-acct-to-home-server configuration with the same set of information in radacct table. I have configured proxy.conf because in

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Alan DeKok
Pierre Rondou wrote: The problem is that the server seems to lose accounting packets in Multithread mode It's possible that you're simply sending packets too fast. If the server doesn't read them from the socket quickly enough, the kernel will simply discard them. Logging with module

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Pierre Rondou
Hello Alan, See answers inline Regards, Pierre Alan DeKok a écrit : Pierre Rondou wrote: The problem is that the server seems to lose accounting packets in Multithread mode It's possible that you're simply sending packets too fast. If the server doesn't read them from the socket

Free Radius 2.1.10 ubuntu 10.10 Multiple RootCA

2011-10-25 Thread Kris Armstrong
I am trying to configure free radius with multiple ROOT CA's. This is not a products environment it is purely a test environment. We need the ability to test out products against freeradius and other radius servers. using multiple different certificate sizes and ROOT CA's. I currently have the

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Fred
Hi Phil, Unfortunately, shortening eap module instance name to eap2 seems to give same result. Best regards, Fred 2011/10/25 Phil Mayers p.may...@imperial.ac.uk: On 25/10/11 14:25, Fred wrote: Hi Alan, While waiting for a fix on github, (I will not be able to rebuild my servers today) I try

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Fred
radiusd -X follows : FreeRADIUS Version 2.1.12, for host x86_64-redhat-linux-gnu, built on Sep 27 2011 at 11:59:05 Copyright (C) 1999-2009 The FreeRADIUS server project and contributors. There is NO warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. You may

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Alan DeKok
Pierre Rondou wrote: It's possible that you're simply sending packets too fast. If the server doesn't read them from the socket quickly enough, the kernel will simply discard them. Well, then, why is this only happening in the multi-thread mode? If it was a kernel issue, wouldn't it

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Alan DeKok
Fred wrote: Hi Phil, Unfortunately, shortening eap module instance name to eap2 seems to give same result. See http://git.freeradius.org/ Grab the v2.1.x branch. It should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Free Radius 2.1.10 ubuntu 10.10 Multiple RootCA

2011-10-25 Thread Alan DeKok
Kris Armstrong wrote: I am trying to configure free radius with multiple ROOT CA's. This is not a products environment it is purely a test environment. We need the ability to test out products against freeradius and other radius servers. using multiple different certificate sizes and ROOT

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Phil Mayers
On 25/10/11 16:10, Fred wrote: cache { enable = no lifetime = 6 max_entries = 8192 name = A } } rlm_eap: SSL error error:140DB111:SSL routines:SSL_CTX_set_session_id_context:ssl session id context too long I don't know why this isn't working. The

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Bjørn Mork
Alan DeKok al...@deployingradius.com writes: Pierre Rondou wrote: It's possible that you're simply sending packets too fast. If the server doesn't read them from the socket quickly enough, the kernel will simply discard them. Well, then, why is this only happening in the multi-thread

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Alan DeKok
Bjørn Mork wrote: File locking problem when multiple threads are attempting to update the same file? Maybe... the detail file is marked not thread-safe, which means that the server core takes care of locking it. i.e. only one thread at a time will be inside of the detail module. Alan

Re: eap module change between 2.1.11 2.1.12 ?

2011-10-25 Thread Fred
Phil, Yes, I am sure, but I don't have traces on hand... I will try to get some radiusd -X on 2.1.11 ASAP, as I can't do it now because I try to find a solution as I have to restart production in the next few hours ... Anyway, Thank a lot for your kind help attempts. Fred 2011/10/25 Phil Mayers

Freeradius rlm_sql: Failed to create the pair: Invalid TLV specification (WiMAX MS)

2011-10-25 Thread James T. Mugauri
Hi, I am running 2.1.12 in an attempt to auth Wimax users. However I am having difficulty defining TLVs for WiMAX-QoS-Descriptor and associated WiMAX-Packet-Flow-Descriptor I used a post on the matter in the freeradius mailing list which suggested something to the effect of: INSERT INTO

Fwd: Need help on ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2011-10-25 Thread Stephen Kwok
Hi, I am a newbie to FreeRADIUS and I have run into a problem during the setup. I have spent some time on researching for an answer online, but I got no luck. I have described the problem as below. Could anyone please let me know what went wrong? Thank you so much in advance. Stephen OS: Mac

Re: Fwd: Need help on ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2011-10-25 Thread Alan DeKok
Stephen Kwok wrote: I am a newbie to FreeRADIUS and I have run into a problem during the setup. I have spent some time on researching for an answer online, but I got no luck. I have described the problem as below. Could anyone please let me know what went wrong? Thank you so much in

Re: Freeradius rlm_sql: Failed to create the pair: Invalid TLV specification (WiMAX MS)

2011-10-25 Thread Alan DeKok
James T. Mugauri wrote: I am running 2.1.12 in an attempt to auth Wimax users. However I am having difficulty defining TLVs for WiMAX-QoS-Descriptor and associated WiMAX-Packet-Flow-Descriptor You just add the attributes, and the server will take care of encapsulating them in TLVs. This

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Andrej
On 26 October 2011 04:48, Bjørn Mork bj...@mork.no wrote:   If the server is too slow to process requests, the kernel will throw away the UDP packets.  This happens when the server is slow... whether it's threaded or not. But then the client won't get the acks and retransmit.  If I understood

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Bjørn Mork
Andrej andrej.gro...@gmail.com writes: On 26 October 2011 04:48, Bjørn Mork bj...@mork.no wrote:   If the server is too slow to process requests, the kernel will throw away the UDP packets.  This happens when the server is slow... whether it's threaded or not. But then the client won't get

Re: FreeRadius Losing packets in Multi-Threads mode

2011-10-25 Thread Alan Buxey
Hi, But then the client won't get the acks and retransmit.  If I understood correctly, then the problem is the packets *are* acked but not logged. Maybe my whole understanding of UDP is flawed, I thought the whole point of using UDP instead of TCP is not to have ACKS and retransmits? at

Re: Free Radius 2.1.10 ubuntu 10.10 Multiple RootCA

2011-10-25 Thread John Dennis
On 10/25/2011 11:07 AM, Kris Armstrong wrote: I am trying to configure free radius with multiple ROOT CA's. This is not a products environment it is purely a test environment. We need the ability to test out products against freeradius and other radius servers. using multiple different

Re: Fwd: Need help on ERROR: No authenticate method (Auth-Type) found for the request: Rejecting the user

2011-10-25 Thread Alan Buxey
Hi, OS: Mac OSX 10.6.8 FreeRADIUS version:�2.1.12 Steps taken: snip okay. so you downloaded the software, extracted it, then built it... great. did you note what happened when you 'make install' ? Starting�-�reading�configuration�files�...�

Re: Why is not writting in second detail file?

2011-10-25 Thread Fajar A. Nugraha
Don't post the same message twice if you just want a faster response. It's rude. If anything, it'd discourage others from even trying to help you, On Tue, Oct 25, 2011 at 9:47 PM, tonimanel antoniofernan...@fabergames.com wrote: I have got the same result writting update control inside of