Re: monitoring freeradius with nagios

2007-01-17 Thread Keith Woodworth
On Wed, 17 Jan 2007, Mike wrote: |-All, |-When trying to use the radauth tool from nagios to monitor |-freeradius, I get the following in the freeradius log: |- |-Error: WARNING: Malformed RADIUS packet from host ... too long (length |-18432 maximum 4096) |- |-radtest seems to be ok. has anyone

Nortel Shasta BSN

2006-10-05 Thread Keith Woodworth
Anyone using a Nortel Shasta with FreeRadius? I'd like to cutover the PPPoE customers on the Shasta from an old Livingston radius server to our FR server. Thanks, Keith - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: users fil vs sql

2006-09-19 Thread Keith Woodworth
On Mon, 18 Sep 2006, Alan DeKok wrote: |-Keith Woodworth [EMAIL PROTECTED] wrote: |- While this is ok, how does radius get configured to use the sql table to |- send the replies, not the users file? |- |- Look in radiusd.conf for sql. You have to configure the SQL |-module. Snip from

Message in radiusd -X

2006-09-19 Thread Keith Woodworth
Module: Loaded exec exec: wait = yes exec: program = (null) exec: input_pairs = request exec: output_pairs = (null) exec: packet_type = (null) rlm_exec: Wait=yes but no output defined. Did you mean output=none? Module: Instantiated exec (exec) Any harm in the above message? - List

Re: users fil vs sql

2006-09-19 Thread Keith Woodworth
On Tue, 19 Sep 2006, Alan DeKok wrote: |-Keith Woodworth [EMAIL PROTECTED] wrote: |- This has been uncommented in radiusd.conf since the start. Which part of |- the SQL module needs to be configured? I'm not grokking that part. |- |- See *all* references to sql in radiusd.conf. See doc/rlm_sql

users fil vs sql

2006-09-18 Thread Keith Woodworth
Ive got things working using 1.1.3, username in radcheck with crypt-password, using auth-type = Local in radgroupcheck. I'm using the flat Users file with a simple 6 line Default entry to make it all work. On my test bed this has been working quite well for the last 3 days. While this is ok, how

Re: PAP questions.

2006-09-13 Thread Keith Woodworth
On Sat, 9 Sep 2006, Keith Woodworth wrote: |-|- |-|- And while Radius seems to send an Access-Accept, the dialup user gets an |-|- error 691 password invalid. |-|- |-|- Because you're not sending the same reply attributes as in the |-|-previous example. Fix that. |-|- |-|- Again I get Access

Re: PAP questions.

2006-09-09 Thread Keith Woodworth
On Sat, 9 Sep 2006, Alan DeKok wrote: |-Keith Woodworth [EMAIL PROTECTED] wrote: |- Anyway here is the error: |- |- radiusd.conf: PAP modules aren't allowed in 'authorize' sections -- they |- have no such method. |- |- That's in 1.1.3. In 2.0, that is allowed. That error was from 1.1.2, now

Re: PAP questions.

2006-09-09 Thread Keith Woodworth
|- |- And while Radius seems to send an Access-Accept, the dialup user gets an |- error 691 password invalid. |- |- Because you're not sending the same reply attributes as in the |-previous example. Fix that. |- |- Again I get Access-Accept, but a 691 password error on the client side. |- |-

Re: PAP questions.

2006-09-07 Thread Keith Woodworth
On Tue, 22 Aug 2006, Alan DeKok wrote: |-Keith Woodworth [EMAIL PROTECTED] wrote: |- One of the things I did try was add PAP to the authorize section, but |- radius failed to start when I did that. |- |- And the error message was...? Had to put this project a side for the last 2 weeks...Hate

Re: PAP questions.

2006-08-22 Thread Keith Woodworth
On Tue, 22 Aug 2006, Phil Mayers wrote: |-Keith Woodworth wrote: |- |- Been trying to do PAP authentication with the crypt'd password stored in |- mysql. We, unfortunately have to do PAP. |- |- This has been done for the most part and works, but I had to go against |- what deployingradius.com

Scripts.

2006-08-19 Thread Keith Woodworth
Just a note to anyone moving from ICRadius to FreeRadius, the radacct table, while having a 4 extra fields in the structure in FR than IC, Ive been able to use the perl scripts I wrote to massage and pull data out of them with no modification to the scripts. Kind of nice to say the least. Also

PAP/mysql/crypt stuff

2006-08-17 Thread Keith Woodworth
After working on this off and on for the last few days I believe I have gotten authentication working using a Crypt'd password stored in mysql but want to run this by to make sure I did it right. I setup a user in radcheck: tester | Crypt-Password | == | gmxwp4dfOcHAI In radgroupreply:

mySQL auth

2006-08-11 Thread Keith Woodworth
We are consolidating servers and moving from a BSD/OS and ICRadius setup and auth'ing via passwd file to FreeBSD. I have run into an issue with authenticating and how I should do it. Our old setup had a web interface designed 7 yrs ago, written in C, which the developer is no longer around and

Re: mySQL auth

2006-08-11 Thread Keith Woodworth
On Fri, 11 Aug 2006, Alan DeKok wrote: |-Keith Woodworth [EMAIL PROTECTED] wrote: |- Will FreeRadius auth via mySQL using the unix crypt? |- |- No... but it will read crypt'd passwords from the DB, and use them |-for authentication. Thats basically what I want, but didnt know now to express