Re: Testing pre-2.2.0

2012-08-09 Thread Matthew Newton
Hi, On Wed, Aug 08, 2012 at 09:26:55PM +0200, Alan DeKok wrote: Stefan Winter wrote: It's running only since a few minutes, so hard to make a long-term prediction, but at least there's no immediate problem in sight. Thanks. I'll try to get the release out this week. (finally) Just

Re: Testing pre-2.2.0

2012-08-09 Thread Alan DeKok
Matthew Newton wrote: Just noticed, this fix needs cherry-picking from master into v2.1.x: Done, thanks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: SSH to Cisco Devices

2012-08-09 Thread Alan DeKok
Michael Schwartzkopff wrote: I know it is possible to use FreeRADIUS to authenticate SSH access to Cisco devices with username/password scheme. Cisco's IOS in version 15 also offers the private/public key authentication scheme. That is not standardized in RADIUS. Is is possible to

RE: SSH to Cisco Devices

2012-08-09 Thread James S. Smith
You definitely can. The Cisco configuration would look like this: ! version 15.0 ! aaa new-model aaa group server radius FreeRadius server 192.168.0.1 auth-port 1812 acct-port 1813 ip radius source-interface Vlan10 aaa authentication login default group FreeRadius local aaa authorization exec

Re: Online Users

2012-08-09 Thread Alan DeKok
Shawky Skaff wrote: On the online users gui page of dialup admin, there are serveral columns, one of the columns states “name”, which is after the caller ID column. I would like to know where this comes from, I have set the name on the user info page, but it doesn’t seem like that works.

sql_log and Accounting On/Off

2012-08-09 Thread Stefan Winter
Hello, I'm currently migrating a number of direct accounting sql module calls to delayed writes using sql_log. I noticed that sql_log has statements for Start, Stop, Alive (and Post-Auth, about which I don't care at that point). The real SQL modules have accounting_on_off_query, too. I wonder

Re: sql_log and Accounting On/Off

2012-08-09 Thread Stefan Winter
Hi, I wonder how to send stuff to sql_log when an On/Off arrives... guessing that I'm simply overlooking something. Looking at the code: could it be that I can just use Accounting-On and Accounting-Off as keys, because the code seems to reference the values of Acct-Status-Type? That would be

Re: sql_log and Accounting On/Off

2012-08-09 Thread Stefan Winter
Hi, That would be cute; but it's hard to find - one has to go into the code. So if I'm right with that, could the documentation in modules/sql_log be updated for 2.2.0? At least adding it as an example like the others would be nice. Ah, man 5 rlm_sql_log. Right. Sorry for the noise. Anyway,

Re: sql_log and Accounting On/Off

2012-08-09 Thread Fajar A. Nugraha
On Thu, Aug 9, 2012 at 7:53 PM, Stefan Winter stefan.win...@restena.lu wrote: Hi, That would be cute; but it's hard to find - one has to go into the code. So if I'm right with that, could the documentation in modules/sql_log be updated for 2.2.0? At least adding it as an example like the

Segmentation fault in rlm_pap

2012-08-09 Thread Urban Loesch
Hi, I'm new to the list. I'm currently migrating from Radiator to Freeradius with MySQL Database Backend for Authentication and Accounting. User-passwords are stored in mysql db with SMD5. I have installed latest freeradius from debian squeeze repositories: ii freeradius

Re: Segmentation fault in rlm_pap

2012-08-09 Thread Alan DeKok
Urban Loesch wrote: [pap] login attempt with password 232nr4Cs [pap] Using SMD5 encryption. [pap] Normalizing SMD5-Password from base64 encoding Segmentation fault Oops. My guess is that the SMD5 password isn't correctly formed. Can you share it? After the crash above I tried to run

Re: Segmentation fault in rlm_pap

2012-08-09 Thread Urban Loesch
Hi Alan, thanks for your fast reply. If you need any further info please let me know. A copy of the SMD5 password. This is the whole raw data from db: id usernameattribute op value 4105urban@1 SMD5-Password :=

Re: Segmentation fault in rlm_pap

2012-08-09 Thread John Dennis
On 08/09/2012 09:34 AM, Urban Loesch wrote: Hi, I'm new to the list. I'm currently migrating from Radiator to Freeradius with MySQL Database Backend for Authentication and Accounting. User-passwords are stored in mysql db with SMD5. FWIW, we've gotten a couple of bug reports of segfaults

Re: Segmentation fault in rlm_pap

2012-08-09 Thread Alan DeKok
John Dennis wrote: FWIW, we've gotten a couple of bug reports of segfaults using EAP, they are described in this bugzilla (which includes a stacktrace and debug output). https://bugzilla.redhat.com/show_bug.cgi?id=827858 This is typically caused by having discordant versions of OpenSSL

Cisco integration with priv-lvl=15 vs. priv-lvl=0

2012-08-09 Thread Casho, Craig L
Basically, how does one go about configuring the radius server to forward requests to the Redhad LDAP server with these attributes. Thanks, - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html