Re: freeradius ldap auth "sort of" working ?

2013-07-01 Thread Arran Cudbard-Bell
no" in modules/ldap. and make sure 'pap' is listed in authorize. If the password you're using in radtest is correct, this will work. If it isn't then authentication will continue to fail. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Repurposing PW_TYPE_DEPRECATED

2013-06-30 Thread Arran Cudbard-Bell
n and do the migration manually. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: inactive users can authenticate

2013-06-28 Thread Arran Cudbard-Bell
testing auth request was PAP, mschap will never be called for > this, so you're stuck basically. Seeing as it's a string value, can't he just pull it out of the directory using the attribute map and check it with a regex? Or is it more complicated than that? -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: inactive users can authenticate

2013-06-28 Thread Arran Cudbard-Bell
ion 3. The old code was so bad, it had gotten to the point where it was impossible to maintain. Out of the 50 odd modules which ship with the server, rlm_ldap was one of only two that got this treatment (the other one was rlm_krb5). -Arran Arran Cudbard-Bell FreeRADIUS Development Tea

Re: Authenticate without password or wrong password

2013-06-27 Thread Arran Cudbard-Bell
to do Mac-Auth basically? http://wiki.freeradius.org/guide/Mac%20Auth Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: inactive users can authenticate

2013-06-26 Thread Arran Cudbard-Bell
ange the behaviour so I don't think they're the cause. Weird. Well if no one on the list can spot an obvious issue it's probably worth upgrading to 3.0.0 and using the module there. It's much better. else, have you tried the same query with something like ldapsearch? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authenticate without password or wrong password

2013-06-26 Thread Arran Cudbard-Bell
roup and > if the user is in that group I am to authenticate them even if they don't > provide password or the password they provide is not true. What type of authentication? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Users credentials?

2013-06-25 Thread Arran Cudbard-Bell
us let me send > this credentials with a php app in the background? See rlm_exec. > Last question, can I close user connection went ever I want to? > example, if user don't accept our terms close his connection automatically. > Google RADIUS packet of disconnect. Arran Cudb

Re: github & freeradius.org

2013-06-25 Thread Arran Cudbard-Bell
;s the summary of 2.2.1 > 3.0.0 https://github.com/FreeRADIUS/freeradius-server/blob/master/doc/ChangeLog Here's the summary of 2.2.0 > 2.2.1 https://github.com/FreeRADIUS/freeradius-server/blob/v2.x.x/doc/ChangeLog Arran Cudbard-Bell FreeRADIUS Development Team - List in

Re: Building RPMS from main branch 3.x relase

2013-06-23 Thread Arran Cudbard-Bell
ion numbers, > patches, libray file names) until the changes were pushed by Fajar on May 9th. Feel free to cherry-pick them across. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mac-auth. authorized_macs file sintax

2013-06-21 Thread Arran Cudbard-Bell
'. Do you actually understand what you're trying to do? -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mac-auth. authorized_macs file sintax

2013-06-21 Thread Arran Cudbard-Bell
P-TLS if you want host (rather than user) > based authentication on wireless. Yes.. but the files module still should be returning noop if there's valid entry for that key value. and you can do: authorize_macs if (!noop) { update control { Auth-type := Accept

Re: Mac-auth. authorized_macs file sintax

2013-06-21 Thread Arran Cudbard-Bell
> > What's wrong? Which version of the server are you using? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Log auth message

2013-06-21 Thread Arran Cudbard-Bell
module = ""; request->component = ""; - if (debug_flag) request->radlog = radlog_request; + request->radlog = radlog_request; return request; } Should fix it. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_securid

2013-06-20 Thread Arran Cudbard-Bell
k.in, pull and re-run configure and it should work. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Log auth message

2013-06-20 Thread Arran Cudbard-Bell
On 20 Jun 2013, at 14:32, "BALSIANOK, Peter" wrote: > Answer is simple, i don`t know how :) ( i don`t have propert skills ) http://beej.us/guide/bggdb/ -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: User disconnect

2013-06-20 Thread Arran Cudbard-Bell
level locking on update. It is the WRONG engine to use for tables which require regular updates. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Log auth message

2013-06-20 Thread Arran Cudbard-Bell
On 20 Jun 2013, at 13:24, "BALSIANOK, Peter" wrote: > Hi, > > I have added test code into radius sourec code: > > radiusd@tdrad1test:~/freeradius-server-3.0.0$ diff -uN src/main/auth.c.orig > src/main/auth.c > --- src/main/auth.c.orig 2013-06-20 14:21:41.610790604 +0200 > +++ src/main/au

Re: Setting VLAN based on ldap attribute id

2013-06-20 Thread Arran Cudbard-Bell
mple of setting the the VLAN in the default configuration. In post-auth you can add something like if (reply:Tunnel-Private-Group-ID) { update reply { Tunnel-Type := "VLAN" Tunnel-Medium-Type := "IEEE-802" } } Or in v2 you can us

Re: User disconnect

2013-06-20 Thread Arran Cudbard-Bell
pened session > > 5°)here is the user session closing script No, this is ridiculously over complicated, if your NAS supports interim updates just do it how I said. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: User disconnect

2013-06-20 Thread Arran Cudbard-Bell
use cron, and call whatever client binary is appropriate for your database. Do whatever you think is appropriate. Personally i'd go for cron, but some people like to have the server be self maintaining. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscrib

Re: User disconnect

2013-06-20 Thread Arran Cudbard-Bell
You need to run an expiration query so the session is marked > closed when freeradius doesn't hear from the NAS for a certain amount of > time. The schema/scripts in 3.0 have been modified to record this. You should be able to run multiple update statements on receiving a stop, so the data

Re: call exec when proxy authentication success

2013-06-19 Thread Arran Cudbard-Bell
y the Post-Proxy-Type section, it might work in 2.0, if it doesn't I know there's a way to get the proxy response code, I just can't remember what it is. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: call exec when proxy authentication success

2013-06-19 Thread Arran Cudbard-Bell
emember if it's supported in 2.0.0. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm_sql_freetds / rlm_sql_sybase

2013-06-18 Thread Arran Cudbard-Bell
advantage to setting client version dynamically (let me know if you want/need this). -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: building new module with external library dependencies

2013-06-17 Thread Arran Cudbard-Bell
is most definitely a developers list question. Please post future responses to that list. Firstly, what version are you using? 2.xx and 3.00 have different build systems. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mysql xlat help

2013-06-14 Thread Arran Cudbard-Bell
> p) parm , upm s}" > } > > i am calling module sql_gowifi form authorize section of sites-enabled/default > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mysql xlat help

2013-06-14 Thread Arran Cudbard-Bell
for sql2 and your query for sql_gowifi. The reason for using two instances is to avoid creating an expansion loop. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mysql xlat help

2013-06-14 Thread Arran Cudbard-Bell
t the sql_user_name field is blank run the server with -Xx and post the debug output. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Mysql xlat help

2013-06-14 Thread Arran Cudbard-Bell
username remains blank > > when i run the sql query above in mysql server it returns the correct > username please help Post full config for the sql module (sans queries) and debug output. Please. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Exec problems in FR3.0

2013-06-14 Thread Arran Cudbard-Bell
On 14 Jun 2013, at 13:39, "Franks Andy \(RLZ\) IT Systems Engineer" wrote: > Thanks Arran, > If you get a chance, don't suppose you'd be able to check out the : > - freetds error I got with unixodbc (get_vtable or something) in v3 Yes i'll look at that. > Or the lack of makefile.in / config

Re: IPv6 Pool

2013-06-14 Thread Arran Cudbard-Bell
6. > >> Actually, I’m pretty lost and I don’t know where to start. > > I'm not sure, either. I haven't done any investigation into the v6 world. > > Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html Arran Cu

Re: Freeradius 3.0 build process different from 2.0?

2013-06-14 Thread Arran Cudbard-Bell
onfigure && make && make install R=$ROOT > as before. There are a few more considerations if you want it to just work as before. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 3.0 build process different from 2.0?

2013-06-14 Thread Arran Cudbard-Bell
27;d like to get going with a proper package for FR 3.0. Go for it. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Duplicated records in RADACCT with differents delay times

2013-06-14 Thread Arran Cudbard-Bell
same user more than one use > when should appear only one. Add a unique index on AcctUniuqeId. It's required for the rlm_sql module to work correctly. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Exec problems in FR3.0

2013-06-14 Thread Arran Cudbard-Bell
On 14 Jun 2013, at 10:09, Franks Andy (RLZ) IT Systems Engineer wrote: > Thanks Phil, I need to get my head around the coding side of this a bit > more! I'll look at this seeing as I broke it. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsub

Re: MSSQL using unixodbc and truncation of characters

2013-06-13 Thread Arran Cudbard-Bell
On 13 Jun 2013, at 13:56, Arran Cudbard-Bell wrote: >> >> I'm stuck, any ideas. Sorry to spam the mailing list so much but I've >> reached the limit of my knowledge on this one.. > > Ok, i'll take a closer took at it tonight. > Um, apparently the

Re: MSSQL using unixodbc and truncation of characters

2013-06-13 Thread Arran Cudbard-Bell
> > I'm stuck, any ideas. Sorry to spam the mailing list so much but I've reached > the limit of my knowledge on this one.. Ok, i'll take a closer took at it tonight. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http:/

Re: MSSQL using unixodbc and truncation of characters

2013-06-12 Thread Arran Cudbard-Bell
was hoping to try it and > possibly the iodbc driver as well instead of odbc, unless I'm off on the > wrong track It does in 3.0. I made sure all the modules we kept were properly integrated into the build system and built without warnings. -Arran Arran Cudbard-Bell FreeRADIUS Deve

Re: MSSQL using unixodbc and truncation of characters

2013-06-12 Thread Arran Cudbard-Bell
On 12 Jun 2013, at 17:47, "Franks Andy \(RLZ\) IT Systems Engineer" wrote: > Sorry, FR version 2.2.1. Could you try version 3? I cleaned some of that code up a while back, it may be fixed. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscr

Re: MSSQL using unixodbc and truncation of characters

2013-06-12 Thread Arran Cudbard-Bell
On 12 Jun 2013, at 17:42, Franks Andy (RLZ) IT Systems Engineer wrote: > Hi all, > > I may again being doing something wrong but I’ve noticed an odd problem. > I’ve connected up using the freetds libraries to an MSSQL server. What version are you using? Arran Cudbard-Bell

Re: [SPAM] FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

2013-06-08 Thread Arran Cudbard-Bell
On 8 Jun 2013, at 10:30, nicolas@ricoh-industrie.fr wrote: > I have the same problem after upgrade Freeradius to version 3. > Before, ntlm worked very well but it seems that the new version used the ntlm > module differently. Thanks for flagging your email appropriately. Arra

Re: FreeRadius with Jradius module

2013-06-06 Thread Arran Cudbard-Bell
e? And how do > you handle this? And I would like to know if Jradius would be supported in > later releases? Well it's been removed entirely from version 3 pending a rewrite... Would you like to volunteer? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe

Re: [ANN] Version 3.0.0-beta1

2013-06-04 Thread Arran Cudbard-Bell
stall', but only when not staging the server for packaging. Packages need to run it on installation. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

[ANN] Version 3.0.0-beta1

2013-06-04 Thread Arran Cudbard-Bell
ould use these macros instead of calling radlog* directly. https://github.com/FreeRADIUS/freeradius-server/blob/master/src/include/log.h * Use OpenSSL hashing functions when available. * Sever now builds with no warnings on most platforms. * New RADIUS encoder/decoder. Arran Cudbard-Bell FreeRADIUS Dev

Re: talloc.h not found but libtalloc-dev is installed

2013-05-31 Thread Arran Cudbard-Bell
On 31 May 2013, at 10:05, Arran Cudbard-Bell wrote: > > On 31 May 2013, at 09:03, Alan DeKok wrote: > >> Phil Mayers wrote: >>> Looks like it's trying to use a clang argument with gcc. Probably >>> related to commit 4cbe9552c >> >> Yeah. Cl

Re: talloc.h not found but libtalloc-dev is installed

2013-05-31 Thread Arran Cudbard-Bell
eck to see if that really was clang. Because you shouldn't need to, it was intentional. With -Werror GCC should warn (and therefore fail) if the argument isn't supported. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Free Radius SNMP support

2013-05-31 Thread Arran Cudbard-Bell
; will be there. Also wanted to know whether using free Radius traps can be > send to NMS. If possible what are the options available. Someone contributed a perl script that used status-server messages to query the state of various counters in the server. The events system in 3.0 can be used to se

Re: Updating the n'th occurance of an attribute

2013-05-31 Thread Arran Cudbard-Bell
I just wanted to check whether we can update attributes in the same > way? I mean something like this: > > update reply { > Attribute-Name[index] := new_value > } It's planned for a future version as part of the nested attribute syntax. Arran Cudbard-Bell FreeRADIUS D

Re: talloc.h not found but libtalloc-dev is installed

2013-05-31 Thread Arran Cudbard-Bell
ine with the versions of GCC I have (4.2.1, 4.7, 4.8). I think the lesson to take away from this, is that GCC is a steaming pile of shit. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: segmentation fault in rlm_preprocess

2013-05-30 Thread Arran Cudbard-Bell
> > > it looks like a bug in src/modules/rlm_preprocess/rlm_preprocess.c but we're > not so sure about the resolution; has anyone encountered/solved the same > issue? This should be on devel, but nevermind. Should be fixed, can you check? -Arran Arran Cudbard-Bell Fr

Re: Freeradius with Protobuf

2013-05-30 Thread Arran Cudbard-Bell
of the server: https://github.com/rssh/freeradius-server/commit/d71384f2e2fb6ebf5fe182c36448f04f222de560 -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radclient receives response messages from different source port than destination port of request messages

2013-05-30 Thread Arran Cudbard-Bell
t of the > responses? Yes. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius: change user passwords through pam_radius

2013-05-27 Thread Arran Cudbard-Bell
On 27 May 2013, at 18:03, Arran Cudbard-Bell wrote: > > On 27 May 2013, at 15:26, Roberto Carna wrote: > >> Dear, I have a Linux box authenticating SSH users against Freeradius. It >> works OK. >> >> When the users go into the Linux box via SSH, I need th

Re: Freeradius: change user passwords through pam_radius

2013-05-27 Thread Arran Cudbard-Bell
rds never chages and I get this error: > > Password: > New password: > New password (again): > Enter new UNIX password: > Retype new UNIX password: > passwd: Authentication token manipulation error > passwd: password unchanged > > is it possible to do what I want ?? No

Re: MySQL Cluster as back-end for FreeRadius

2013-05-22 Thread Arran Cudbard-Bell
IIRC you need to use the cluster client library to get all the advantages of MySQL cluster, the rlm_sql module doesn't currently support it, but it should be fairly trivial to write another driver if you're up for the challenge. The hardest part would be figuring out the correct build pr

Re: Unlang clarification

2013-05-20 Thread Arran Cudbard-Bell
he server to send an EAP-Failure message, with a static and probably incorrect ID. Removing any instances of User-Name from the reply, and setting an invalid value for the message authenticator which would be overwritten anyway. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: reference to check items using unlang

2013-05-20 Thread Arran Cudbard-Bell
g unlang and if > not then ignore it. > By the way I know that I can do that by querying sql in unlang but I > wondering if there is a better way for doing that. > control: Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang equivalent of radlog

2013-05-19 Thread Arran Cudbard-Bell
or you can use 'reference' which is used as a configuration path, and selects one of multiple other format type config items. How you use them is up to you, and what you're trying to do. I believe linelog can also log to syslog. -Arran Arran Cudbard-Bell FreeRADIUS Development

Re: Any One-Time password system.

2013-05-16 Thread Arran Cudbard-Bell
The two systems are *designed* to be incompatible. > > But only ms-chap supports data encryption. I want to use OTP and MPPE > simulteniosly. But MPPE without ms-chap cann`t exist. Am I right? What are you actually trying to use this with? 802.1X/WPA2-Enterprise or for VPN authenticat

Re: FreeRadius Ceritificate Migration

2013-05-13 Thread Arran Cudbard-Bell
something comprehensible and which > follows the rules of the list (i.e. include the output of radiusd -X). And no html! * I'm still trying to work out where to insert that into sentences. I think it's to add emphasis/agreement, but even after four months i'm still not ent

Re: some error in log file

2013-05-04 Thread Arran Cudbard-Bell
cooling ducts of your RADIUS server? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Adding variable to logs

2013-04-30 Thread Arran Cudbard-Bell
t-Unique-Session-Id = "f538381d8187adf7" >Timestamp = 1367315408 > > > Is NAS-PORT-TYPE not being included in the log because it's null? It's probably not being included because it wasn't present in the Accounting-Request. Also It's a

Re: how to remove some character from end of user name

2013-04-27 Thread Arran Cudbard-Bell
On 27 Apr 2013, at 14:27, Mehdi Ravanbakhsh wrote: > Dear Arran Cudbard-Bell > > thanks for your reply > > can i use it in hint file ? No. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: how to remove some character from end of user name

2013-04-27 Thread Arran Cudbard-Bell
User-Name := "%{1}" } } } Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: wireshart shows wrong information

2013-04-25 Thread Arran Cudbard-Bell
vps,pairmake("3GPP2-Prepaid-Acct-Quota-VolumeQuota","100", > T_OP_EQ)); > pairadd(&request->reply->vps,pairmake("3GPP2-Prepaid-Acct-Quota-VolumeThreshold","100", > T_OP_EQ)); How do you even hit 't' from there... Want to provide that pcap file? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unlang and optimization

2013-04-25 Thread Arran Cudbard-Bell
butes like this is slated for deprecation in 3.0/1, at which point we'll just standardise on xlat function calls for all the comparisons. > switch LDAP-Group { > case "cn=violations,ou=groups,o=mycorp" { > update request { > Tmp-String-0 := "VIOLATORS&qu

Re: Best way to select multiple NAS-Port-Ids

2013-04-25 Thread Arran Cudbard-Bell
On 25 Apr 2013, at 10:37, Arran Cudbard-Bell wrote: > > On 25 Apr 2013, at 08:54, Alan DeKok wrote: > >> Franks Andy (RLZ) IT Systems Engineer wrote: >>> I have a hopefully fairly straightforward question. We have a network >>> switch, a procurve 540

Re: Best way to select multiple NAS-Port-Ids

2013-04-25 Thread Arran Cudbard-Bell
update request { Tmp-Integer-0 = "0x%{hex:Tmp-String-1}" } update request { Nas-Port := "%{expr:( %{2} * 100 ) + %{Tmp-Integer-0}}" } } } DEFAULT NAS-Port >= , NAS-Port <= Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to access Chap-Password

2013-04-19 Thread Arran Cudbard-Bell
password from a CHAP-Password attribute, that's the point. If you have access to a reference copy of the user's password the server can perform the same hashing, and compare the output with the value provided in CHAP-Password. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - L

Re: How to access Chap-Password

2013-04-19 Thread Arran Cudbard-Bell
On 19 Apr 2013, at 16:30, Mehdi Ravanbakhsh wrote: > Hi All > > how i can access chap password in site-available ? > > i use %{%{User-Password}:- Chap-Password} but if user use chap for > AUTH i just get "Chap-Password" . *sigh* %{%{User-Password}:-%{Chap-Pas

Re: Couldn't init oracle OCI environment

2013-04-19 Thread Arran Cudbard-Bell
: Failed to connect to any SQL server. > > How do i do that ??? please help > You try the new code in FreeRADIUS master branch and see if it fixes the issue or at least provides sane debug output. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Normalising the User-Name AVP in an Access-Accept

2013-04-18 Thread Arran Cudbard-Bell
> > Agreed, the main concern for me would be leakage via wireless. > > I see the main purpose of identity privacy with PKI EAPs being to > protect the identity from being trivially snooped by an outsider. > > With federations, I think it would be perfectly reasonable to expect > and require the

Re: Setting different IDLE-TIMEOUTS based on IP Address

2013-04-17 Thread Arran Cudbard-Bell
disk look good to me. 'huntgroups' is not a module, nor is it a config file. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS using InnoDB.

2013-04-17 Thread Arran Cudbard-Bell
ADIUS' performance. I believe the schemas in the branch HEADs already use Innodb? Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Volume Control

2013-04-17 Thread Arran Cudbard-Bell
On 17 Apr 2013, at 05:27, Russell Mike wrote: > Hi Aran, thanks for clarification through your response > If I understand your answer is that you are saying is that currently as is > freeRadius is using 64bits data types in some areas and not in others, am I > Right?. Also is it possible to al

Re: Volume Control

2013-04-16 Thread Arran Cudbard-Bell
> What Freeraidus is using currently as to keep track. Is it 64bit or 32bit. FreeRADIUS makes liberal use of 64bit data types. -Arran Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 3 & LDAP Generic Attributes

2013-04-12 Thread Arran Cudbard-Bell
On 12 Apr 2013, at 15:21, Arran Cudbard-Bell wrote: > > On 12 Apr 2013, at 15:00, Nicholas Lemberger wrote: > >> The ldap.attrmap syntax in FR2 was: >> checkItem $GENERIC$ radiusCheckItem >> replyItem $GENERIC$

Re: Freeradius 3 & LDAP Generic Attributes

2013-04-12 Thread Arran Cudbard-Bell
case > syntax made in the rlm_ldap attribute mapping... I was thinking just adding a valuepair_attr = "blah" config item in the ldap config and then doing exactly what you suggested above. It's not much work, i'll take a look at it later today or tomorrow. -Arran Arran Cudbard-

Re: how can detect the cues of reject

2013-04-12 Thread Arran Cudbard-Bell
7;s only reliably populated in 3.0. Arran Cudbard-Bell FreeRADIUS Development Team - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: compile with ldap support

2013-04-10 Thread Arran Cudbard-Bell
archives but I couldn’t find anything. It'll build it by default if you have the libldap headers installed. Check the output of configure to verify it's actually building rlm_ldap. Arran Cudbard-Bell FreeRADIUS Development Team Please contribute documentation: http://wiki.freeradius.

Re: Freeradius 3 & LDAP Generic Attributes

2013-04-10 Thread Arran Cudbard-Bell
no real reason not to. Could you remind me what the value format was? > While we do often create a special LDAP attribute for what we need, > the generic attributes in FR2 made testing and certain one-off > configurations much quicker. Ok. Arran Cudbard-Bell FreeRADIU

Re: How to configure RADIUS +LDAP using SASL/Certificate based binding instead of usernames and passwords

2013-04-10 Thread Arran Cudbard-Bell
> There are other ways to establish the trust between radiusd and LDAP beside > simple binds which do not involve passwords. All of these use SASL in some > form. Unfortunately rlm_ldap does not support them. I know Alan rewrote > rlm_ldap recently for the upcoming 3.0 version, > I don't know if

Re: freeradius in cloud using openstack

2013-04-10 Thread Arran Cudbard-Bell
On 10 Apr 2013, at 10:04, faizal ghazali wrote: > Hi, > > can anybody here teach me how to install freeradius in openstack > infrastructure? No. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: sql checkval Operator which work with Value comma (,)

2013-04-10 Thread Arran Cudbard-Bell
On 10 Apr 2013, at 08:15, EasyHorpak.com wrote: > Dear All Jesus Fuck, what the hell are those hideously coloured blinking things at the bottom of your email. You're trying to advertise using your signature?! Have you any idea how completely inappropriate that is on a support list? -Arran -

Re: Problem with login in FR wiki

2013-04-05 Thread Arran Cudbard-Bell
On 5 Apr 2013, at 12:18, Leo Combes wrote: > I'm trying to post on FR WIKI with an openID account, as I try to log > in with my ID I get an "Authentication failed - Insufficient data from > authentication provider, name not provided or empty" error. The same > happens to me when I try to log in

Re: How to check MODULE RETURN CODES

2013-03-29 Thread Arran Cudbard-Bell
On 29 Mar 2013, at 14:57, Mehdi Ravanbakhsh wrote: > Hi all > > How can i check MODULE RETURN CODES in unlang? > > for example if SQL module in authorize section return notfound sql if (notfound) { } -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: New/updated dictionary files for Meru and Trapeze

2013-03-28 Thread Arran Cudbard-Bell
On 28 Mar 2013, at 10:45, "John Carter" wrote: > Sorry, never used Git. Is it essential? No. It's just easier for us if you submit patches via GitHub. That said the patch is small so it's not that much of an issue. Merged into Master and v2.x.x so the changes will get included in 2.2.1 -Arra

Re: New/updated dictionary files for Meru and Trapeze

2013-03-28 Thread Arran Cudbard-Bell
On 28 Mar 2013, at 10:35, John Carter wrote: > Hi, > > Please find attached a brand-new Meru dictionary file and an updated Trapeze > dictionary file (updated based on 2.2.0). > > Do you want diffs? > No... a pull request on GitHub would be nice though :) -Arran - List info/subscribe/un

Re: ippool-dhcp and Oracle

2013-03-25 Thread Arran Cudbard-Bell
On 25 Mar 2013, at 02:57, Arran Cudbard-Bell wrote: > >> I am not sure what is happening here so I will have to do some reading. > > Fixed. Git pull. Or would have been if git push hadn't hung... Sorry GitHub has been really flakey lately. -Arran - List info/subscr

Re: ippool-dhcp and Oracle

2013-03-25 Thread Arran Cudbard-Bell
> I am not sure what is happening here so I will have to do some reading. Fixed. Git pull. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Setting up EAP-TLS as the ONLY authentication mechanism?

2013-03-23 Thread Arran Cudbard-Bell
On 23 Mar 2013, at 23:32, Thomas Hruska wrote: > On 3/23/2013 3:54 PM, Alan DeKok wrote: >> Thomas Hruska wrote: > >> Read proxy.conf. > > [Sigh] I have. It doesn't make sense to me. Why enable it as a default if > it isn't necessary for basic functionality? Hopefully you can see how th

Re: ippool-dhcp and Oracle

2013-03-23 Thread Arran Cudbard-Bell
On 23 Mar 2013, at 12:22, Бен Томпсон wrote: > Hello Everyone > > Could anyone advise me what would be required to us dhcp-ippool with > Oracle? I had a quick look through the files in git and it seems to me > that the only thing missing is queries.conf? > > If that is all that is required I a

Re: [Help] Is that possible to change the reject message that appears at the Windows Pop Up

2013-03-21 Thread Arran Cudbard-Bell
On 21 Mar 2013, at 15:56, David Mitton wrote: > Quoting Arran Cudbard-Bell : > >> >> On 21 Mar 2013, at 13:26, Jouni Malinen wrote: >> >>> On Mon, Mar 18, 2013 at 8:42 PM, Arran Cudbard-Bell >>> wrote: >>>> The old HP switche

Re: [Help] Is that possible to change the reject message that appears at the Windows Pop Up

2013-03-21 Thread Arran Cudbard-Bell
On 21 Mar 2013, at 13:26, Jouni Malinen wrote: > On Mon, Mar 18, 2013 at 8:42 PM, Arran Cudbard-Bell > wrote: >> The old HP switches used to convert the Reply-Message into an >> EAP-Notification and send it after the EAP-Success or EAP-Failure. > > This is no

Vote on the new FreeRADIUS logo

2013-03-20 Thread Arran Cudbard-Bell
Currently in the final round of selecting a new logo, please vote on the poll here to select your favourite, you don't need to register. http://99designs.ca/logo-design/vote-5wpx8t -Arran Arran Cudbard-Bell FreeRADIUS Development Team Please contribute documentation:

Re: cuncurrent-session control

2013-03-19 Thread Arran Cudbard-Bell
On 19 Mar 2013, at 18:15, Mehdi Ravanbakhsh wrote: > Hello ALL > > I have Some problem in using Unlang. > > I need to call some function in PostgreSQL database send some parameter from > request attribute to it , get replay from function and then change some > check attribute item (such as

Re: [Help] Is that possible to change the reject message that appears at the Windows Pop Up

2013-03-18 Thread Arran Cudbard-Bell
On 18 Mar 2013, at 12:07, a.l.m.bu...@lboro.ac.uk wrote: > hi, > > we would all love to be able to send a relevant error message to our > clients if they fail to authenticate (either locally or remotely). > but we cant. :-( The old HP switches used to convert the Reply-Message into an EAP-Notif

Re: Add LDAP groups as extra attributes

2013-03-15 Thread Arran Cudbard-Bell
On 15 Mar 2013, at 08:43, Robin Helgelin wrote: > On 14 mar 2013, at 18:44, Arran Cudbard-Bell wrote: >> >> That'd be the LDAP-UserDN attribute… > > I know, but that attribute isn't presented to the python function call. Is > there another way such as

Re: Ldap + freeradius... Again

2013-03-14 Thread Arran Cudbard-Bell
On 14 Mar 2013, at 22:52, fernando@gmail.com wrote: > Ok man, > keep dont help too much, ill try again, > the documentation dont helped before and i guess this will not help again... > im keep saying dont need to be rude man, do you born everything? 2 months ago > i never used a linux pc, no

<    1   2   3   4   5   6   7   8   9   10   >