Re: Eduroam FreeRadius not working so well

2012-12-05 Thread Alan Buxey
In the first instance, upgrade. There is a major security problem with 2.1.x release. Get 2.2.x onto your system asap. What are your NAS (cisco controllers) timeouts? Is this box a pure proxy or does it do authentication too? Have you enabled ciscos status-check system so it knows the RADIUS

Re: Define New Attribute

2012-12-05 Thread Alexandre J. Correa (Onda)
Doesn´t work.. preacct { preproccess acct_unique suffix sql.authorize } accouting { if (Check-Quota == 1) { if (Acct-Status-Type == Start) { onda_startquota } elsif (Acct-Status-Type ==

Re: Define New Attribute

2012-12-05 Thread Alan DeKok
Alexandre J. Correa (Onda) wrote: I need to track some type of 'user group'. i´m doing this to not overload my database servers. Then you need to upgrade your database. into the radgroupreply table i need to 'create' one attribute like: Check-Bandwidth := [0,1] i added this attribute

Ubuntu package from Master branch

2012-12-05 Thread Olivier Beytrison
Hi there, I'm back at work, and i'll focus myself again for the next few days to get those packages working. after commit 2a8c11646b660b0c52eab9fa8e9e8cff3603f262 which move rlm_ldap to the new config based attribute map, we need to remove ldap.attrmap from raddb/Makefile and the corresponding

Re: FreeRadius Running Error

2012-12-05 Thread Alan DeKok
QASIM RAO wrote: sir i have upgraded my free radius version to freeradius-server 2.2 it runs fine.. now i change rlm_sql module of my older version Why? That makes absolutely no sense. when i run make command it gives following errors... You need to understand programming before

Re: Git master branch Debian build

2012-12-05 Thread Alan DeKok
Zenon Mousmoulas wrote: My understanding of the above is that (a) Boilermake seems to work on Ubuntu, no idea why. Because it's working as designed. (a) Boilermake is unusable on Debian, so once the old build system is phased out, package builds will be impossible. sigh Or, you can

Re: Ubuntu package from Master branch

2012-12-05 Thread Arran Cudbard-Bell
@@ -11,7 +11,7 @@ include ../Make.inc # FILES = acct_users attrs attrs.access_reject attrs.accounting_response \ attrs.pre-proxy clients.conf dictionary templates.conf \ - experimental.conf hints huntgroups ldap.attrmap \ + experimental.conf hints

Logging Access-Challenge in detail log

2012-12-05 Thread John Carter
Hi, We're using 2.1.12. We require a full log of everything that gets sent between a controller and freeradius. We've configured detail.log, inner-tunnel and default to log authentications and replies which work for us, but is there any way to also log Access-Challenge? I've read some very old

Re: Define New Attribute

2012-12-05 Thread Phil Mayers
On 12/05/2012 12:53 PM, Alexandre J. Correa (Onda) wrote: Finished request 0. Going to the next request Waking up in 4.9 seconds. rad_recv: Accounting-Request packet from host 192.168.2.200 port 55834, id=129, length=149 Service-Type = Framed-User Framed-Protocol = PPP As

Re: Git master branch Debian build

2012-12-05 Thread Zenon Mousmoulas
On 05/12/2012 3:44 μ.μ., Alan DeKok wrote: Zenon Mousmoulas wrote: My understanding of the above is that (a) Boilermake seems to work on Ubuntu, no idea why. Because it's working as designed. Any clue as to what is special about Ubuntu 12.04 that enables boilermake to work? The same or

Re: Git master branch Debian build

2012-12-05 Thread Zenon Mousmoulas
On 05/12/2012 4:57 μ.μ., Zenon Mousmoulas wrote: A fellow DD noted private libraries, as in /usr/lib/freeradius, are not s/fellow DD/friend, who happens to be a DD/ Minor correction! I am not a Debian developer. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Authenticating users checking Huntgroup-Name in unlang

2012-12-05 Thread suggestme IT
Hi, I have set FreeRadius 2.1.12 Server, and configured it to authorize and authenticate users that are in Active Directory and users file. I have tested in real wireless environment to authenticate users from Active Directory users file and it is successful. But according to our

Accounting with Freeradius.

2012-12-05 Thread Tzvika Gelber
I have one Freeradius server that i need to give to an outsource client of mine, the problem is that he is not a very Linux oriented (to put it gently) and have even less skills in any form of SQL. he is going to cover some of our tests and some of them are the accounting side of connected

Python access to attribute lists

2012-12-05 Thread Duarte Fonseca
Hi, Just wondering if someone can confirm something for me. The python module only passes the the request attribute list (not the reply, proxy-reply, control lists) to the python script, is that correct? Would it be possible to modify the module to pass the remaining lists to the python code?

Re: Eduroam FreeRadius not working so well

2012-12-05 Thread Mike Diggins
On Wed, 5 Dec 2012, Alan Buxey wrote: In the first instance, upgrade. There is a major security problem with 2.1.x release. Get 2.2.x onto your system asap. This is the RedHat RPM which I believe are maintained by RedHat. Hopefully they've back ported any major security issues! What

Re: share variables in perl script (rlm_perl)

2012-12-05 Thread laurent . feron
only 1 thread ? what 's about performance? yes, many thanks, i will look at your code Regards, Laurent - Mail original - De: Thomas Glanzmann tho...@glanzmann.de À: FreeRadius users mailing list freeradius-users@lists.freeradius.org Envoyé: Samedi 1 Décembre 2012 16:11:35 Objet: Re: share

Re: Python access to attribute lists

2012-12-05 Thread laurent . feron
Moreover, the request list is a read only list. I wanted to modify the user-name in the authorization function in python, but you cannot, only rlm_perl is able to do that. Yes, if someone could enhance the rlm_python it will be great. I looked at the rlm_python source code, but it is too

Re: Python access to attribute lists

2012-12-05 Thread Phil Mayers
On 12/05/2012 05:59 PM, laurent.fe...@free.fr wrote: Moreover, the request list is a read only list. I wanted to modify the user-name in the authorization function in python, but you cannot, only rlm_perl is able to do that. Yes, if someone could enhance the rlm_python it will be great. I looked

Re: Python access to attribute lists

2012-12-05 Thread Alan Buxey
Hi, I wonder if a better option wouldn't be something like rlm_unixsocket which passes the request down a unix socket in a standard format, and takes the reply in the same way. Then the various interpreters could run out-of-process. I was thinking about the same thing the other day after the

Re: Eduroam FreeRadius not working so well

2012-12-05 Thread Alan Buxey
Hi, This is the RedHat RPM which I believe are maintained by RedHat. Hopefully they've back ported any major security issues! got the changelog for the 2.1.12 RPM release you are running? It does both autentication and proxy and I do have status-check enabled. On the contraller I increased

Re: Eduroam FreeRadius not working so well

2012-12-05 Thread John Dennis
On 12/05/2012 12:02 PM, Mike Diggins wrote: On Wed, 5 Dec 2012, Alan Buxey wrote: In the first instance, upgrade. There is a major security problem with 2.1.x release. Get 2.2.x onto your system asap. This is the RedHat RPM which I believe are maintained by RedHat. Hopefully they've back

Re: Eduroam FreeRadius not working so well

2012-12-05 Thread Mike Diggins
On Wed, 5 Dec 2012, John Dennis wrote: On 12/05/2012 12:02 PM, Mike Diggins wrote: On Wed, 5 Dec 2012, Alan Buxey wrote: In the first instance, upgrade. There is a major security problem with 2.1.x release. Get 2.2.x onto your system asap. This is the RedHat RPM which I believe are

Re: Eduroam FreeRadius not working so well

2012-12-05 Thread Mike Diggins
This is my proxy.conf. The only value I've adjusted so far is response window (from 20 down to 5). Otherwise, I believe it's configured correctly to failover between the two home servers. I'll have to work on the debugs. proxy server { default_fallback= yes } home_server