ldap: multiple radius profiles

2013-09-02 Thread Hachmer, Tobias
Dear listmembers, I have following setup: - Centos 6.4 - freeradius version: radiusd: FreeRADIUS Version 2.1.12, for host x86_64-redhat-linux-gnu, built on Oct 3 2012 at 01:22:51 - authorization authentication in ldap (openldap) What I am trying to achieve is: -

Re: ldap: multiple radius profiles

2013-09-02 Thread Arran Cudbard-Bell
I don’t know how to configure FreeRADIUS to read the “radiusGroupName” attribute and attach the configured return Items to the return list. *configured reply items to the reply list. Using unlang I am able to do this: if(Ldap-Group ==

Re: Fwd: radiusclient-ng in Debian

2013-09-02 Thread Daniel Pocock
The FTP masters just accepted the new freeradius-client package, it should be available to install now using apt-get I've opened a bug request for removal of the radiusclient-ng package from the Debian archive On 19/07/13 19:25, Daniel Pocock wrote: On 15/07/13 23:21, Daniel Pocock wrote:

Re: client code for long extended attributes?

2013-09-02 Thread Daniel Pocock
On 20/07/13 14:56, Alan DeKok wrote: Daniel Pocock wrote: Should this code be shared with the client project freeradius-client? No. The freeradius-client code is pretty bad. Or is it preferred to build a new client (or shared library) from the freeradius-server repository eventually?

Re: client code for long extended attributes?

2013-09-02 Thread Alan DeKok
Daniel Pocock wrote: Could you please clarify that - it is possible to build a client library from the server source tarball? Yes. RedHat already packages libfreeradius-radius as a separate RPM, IIRC. In Debian, I see libfreeradius2 built from the server source tarball but that appears to

Re: Fwd: radiusclient-ng in Debian

2013-09-02 Thread Alan DeKok
Daniel Pocock wrote: The FTP masters just accepted the new freeradius-client package, it should be available to install now using apt-get I've opened a bug request for removal of the radiusclient-ng package from the Debian archive Thanks. Alan DeKok. - List info/subscribe/unsubscribe?

Re: Rlm_perl in func_authenticate

2013-09-02 Thread Mehdi Ravanbakhsh
thanks for your replay On Sep 2, 2013 12:36 AM, Alan DeKok al...@deployingradius.com wrote: Mehdi Ravanbakhsh wrote: i have some problem in Understanding of capability of Rlm_perl in authenticate ... if i use this : DEFAULT Auth-Type = Perl Fall-Through = yes then all

Re: eap-tls ignore client cert expiry check - crazy idea?

2013-09-02 Thread ken.farrington
Hi All, Just to let you all know I did get all my setup working (took me a while being not a linux guru) but it does work as expected. Just in case anyone was wondering :) Many thanks all Ken :) On 29 August 2013 at 16:05 ken.farrington ken.farring...@802.co.uk wrote: Hi All, Is there a

AW: ldap: multiple radius profiles

2013-09-02 Thread Hachmer, Tobias
I don't know how to configure FreeRADIUS to read the radiusGroupName attribute and attach the configured return Items to the return list. *configured reply items to the reply list. Of course, sorry for inaccuracy. I want to manage these profiles also in ldap. Is this possible? Well yes,