NAS in sql and returning specific VSAs

2011-11-07 Thread Vincent, Fabien
Hi all, I have one question about Free Radius and NAS in sql database. I return to the NAS some VSAs depending LDAP User-Group like this : Fabien VINCENT Ingénieur Réseaux Sécurité / ASSR Produits Niveau 3 - Infrastructure Produits mailto:fabien.vinc...@coreye.fr

RE: NAS in sql and returning specific VSAs

2011-11-07 Thread Vincent, Fabien
Sorry, CTRL+Enter is not a good keyboard on Monday Morning ;) So, I return to the NAS some VSAs depending LDAP Group like this : if (Ldap-Group == MyGroup) { update reply { # Rules for Cisco Routeurs Service-Type = NAS-Prompt-User cisco-avpair = shell:priv-lvl=15 # Rule for 3Com

EAP-TLS or EAP-TTLS

2011-11-07 Thread Panagiotis Georgopoulos
Hello all, I have a policy in my post-auth that calculates a hash function based on the real-identify of the user. The idea is that if the request is EAP-TTLS then I want to use the User-Name property of the inner tunnel, whereas if the request is for EAP-TLS I want to use

Re: EAP-TLS or EAP-TTLS

2011-11-07 Thread Phil Mayers
On 07/11/11 16:24, Panagiotis Georgopoulos wrote: Hello all, I have a policy in my post-auth that calculates a hash function based on the real-identify of the user. The idea is that if the request is EAP-TTLS then I want to use the User-Name property of the inner tunnel, whereas if the request

Re: Build RPM

2011-11-07 Thread Fred
Hi Francois Did you ever tried to build current freeradius-2.1.12 on CentOS 6 ? ./configure make make install is OK for build, install and run, but rpmbuild -ba using you spec fails (same for my own spec ...) : Here is a small extract of the build log (full log is available if needed) ::

Re: Build RPM

2011-11-07 Thread Francois Gaudreault
Hi, It works for me on CentOS 6, I am using the same .spec (with only the module name changed from freeradius2 to freeradius). I am not an expert, but I guess the issue is with libtool, what is the libtool version you have installed? On 11-11-07 12:23 PM, Fred wrote: Hi Francois Did you

Re: Build RPM

2011-11-07 Thread Fred MAISON
Hi, He are my libtool versions : libtool-2.2.6-15.5.el6.x86_64 libtool-ltdl-2.2.6-15.5.el6.x86_64 libtool-ltdl-devel-2.2.6-15.5.el6.x86_64 regards, Fred MAISON Le lundi 07 novembre 2011 à 13:23 -0500, Francois Gaudreault a écrit : Hi, It works for me on CentOS 6, I am using the same .spec

Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
accounting from file /etc/raddb/sites-enabled/default Mon Nov 7 15:52:31 2011 : Info: +- entering group accounting {...} Mon Nov 7 15:52:31 2011 : Info: [detail] expand: /var/log/radius/radacct/detail-%Y%m%d - /var/log/radius/radacct/detail-2007 Mon Nov 7 15:52:31 2011 : Info: [detail] /var

Re: Build RPM

2011-11-07 Thread Francois Gaudreault
I just tested using my spec, and it works perfectly (I have the same libtool packages). Did you change something in the spec? On 11-11-07 3:36 PM, Fred MAISON wrote: Hi, He are my libtool versions : libtool-2.2.6-15.5.el6.x86_64 libtool-ltdl-2.2.6-15.5.el6.x86_64

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Alan DeKok
Gary T. Giesen wrote: Mon Nov 7 15:51:12 2011 : Info: [sql-acct] stop packet with zero session length. [user 'u...@realm.com', nas '10.99.0.39'] Read raddb/sites-available/default. Look for zero. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Build RPM

2011-11-07 Thread Fred MAISON
I just comment the cert patch. I also had to edit some lines in the spec cutted by my mailer. The corrected spec works fine on CentOS 5.7 but still not on CentOS6 .. I am doing a new fresh-install of my CentOS6 x86_64 VM rpmbuild env ... Regards, Le lundi 07 novembre 2011 à 16:14 -0500,

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
Uncommenting: if (noop) { ok } solved the issue. Thank you very much. GG On Mon, Nov 7, 2011 at 4:20 PM, Alan DeKok al...@deployingradius.com wrote: Gary T. Giesen wrote: Mon Nov  7 15:51:12 2011 : Info: [sql-acct] stop packet with zero session length. [user

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
I spoke too soon, that does not seem to have solved the issue On Mon, Nov 7, 2011 at 4:49 PM, Gary T. Giesen gie...@snickers.org wrote: Uncommenting:        if (noop) {                ok        } solved the issue. Thank you very much. GG On Mon, Nov 7, 2011 at 4:20 PM, Alan DeKok

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Gary T. Giesen
I made the change to the configuration, watch the server go a little nuts with writing SQL to the database, and then it stops, and I'm still stuck with a detail.work file that's not getting processed... On Mon, Nov 7, 2011 at 5:46 PM, Gary T. Giesen gie...@snickers.org wrote: I spoke too soon,

RE: EAP-TLS or EAP-TTLS

2011-11-07 Thread Panagiotis Georgopoulos
Hi Phil, Thanks for your reply. Please see below. On 07/11/11 16:24, Panagiotis Georgopoulos wrote: Hello all, I have a policy in my post-auth that calculates a hash function based on the real-identify of the user. The idea is that if the request is EAP-TTLS then I want to

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Fajar A. Nugraha
On Tue, Nov 8, 2011 at 5:47 AM, Gary T. Giesen gie...@snickers.org wrote: I made the change to the configuration, watch the server go a little nuts with writing SQL to the database, and then it stops, and I'm still stuck with a detail.work file that's not getting processed... As usual, if

Re: Buffered SQL Setup Not Reading Detail File

2011-11-07 Thread Alan DeKok
Gary T. Giesen wrote: I made the change to the configuration, watch the server go a little nuts with writing SQL to the database, and then it stops, and I'm still stuck with a detail.work file that's not getting processed... As always, debug mode. You can use raddebug to debug a running