Sleep before a response?

2009-06-10 Thread Stephen Bowman
I have a broken NAS with a bad race condition, and need to delay responses to it (like sleep 1;). Is there an easy method (maybe via unlang?) to do this? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Proxy everything but eap-md5 via Unlang?

2009-04-07 Thread Stephen Bowman
Is there a way to match on the EAP type in unlang? I need to be able to proxy everything except incoming eap-md5 requests (which need to be handled remotely). - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Forging a RADIUS request within a module

2008-12-12 Thread Stephen Bowman
On Fri, Dec 12, 2008 at 7:45 AM, Geoffroy ARNOUD geo.arn...@gmail.comwrote: During authentication process, I need to send an Accounting-Start to a network equipment Just out of interest - what is network equipment going to do with the accounting request? It's a network filtering

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Stephen Bowman
have created a dictionary.slipstream file with the following: VENDOR Slipstream 7000 ATTRIBUTE SlipStream-Auth True string Slipstream However, that will not authenticate the slip client. If I hardcode the attribute into the auth_reply query, the client is then authenticated. (Query =

Re: FreeRadius and MySql custom attributes

2008-11-05 Thread Stephen Bowman
authorize_reply_query = SELECT '',Username,'Profile',Profiles,':=' FROM radius_auth WHERE Username = '%{SQL-User-Name}' It's doing exactly what you tell it to do. query: SELECT '',Username,'Profile',Profiles,':=' FROM radius_auth WHERE Username = '[EMAIL PROTECTED]' There's the query

Re: Freeradius error: Discarding conflicting packet

2008-11-04 Thread Stephen Bowman
But what do you mean for fix the nas? Should I use another brand/model of AP? What I am trying to tell you is are the about of 30 AP's that I am using broken? Yes. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP - TLS Client Certification Stored Removable Media

2008-11-04 Thread Stephen Bowman
On Tue, Nov 4, 2008 at 11:18 AM, Aydın KOÇAK [EMAIL PROTECTED] wrote: Hello All; I have a question about EAP - TLS . How can I configure client certification stored from removable media (ex: usb memor, smartcard, etc..). I have already used EAP - TLS with client certification stored on

Re: Error in the negotiations certificates

2008-10-17 Thread Stephen Bowman
On Fri, Oct 17, 2008 at 4:00 PM, Martin Silvero [EMAIL PROTECTED]wrote: and that I did when I run radiusd-X I get an error in the inicializacion modules: eap.conf: How about the output from radiusd -X? You commented out md5 from eap.conf, but you are likely still trying to instantiate

Re: Username Rewrites based on Hint / Realm

2008-10-15 Thread Stephen Bowman
On Wed, Oct 15, 2008 at 3:52 PM, Javier Fox [EMAIL PROTECTED] wrote: Hi folks, I have a bit of a conundrum trying to implement FreeRadius for a system where users from multiple ISP names must all authenticate in the same place, and I'm hoping a more experienced user can shed some light. In

Re: Username Rewrites based on Hint / Realm

2008-10-15 Thread Stephen Bowman
2008/10/15 Javier Fox [EMAIL PROTECTED] I've tried every permutation of the 'if' line I can think of - quotes, no quotes, single-equal, double-equal, equal-tilde - but FreeRadius still doesn't like that 'if' line, and errors out with Line is not in 'attribute = value' format on startup.

Re: AW: AW: AW: AW: Problem with ntlm_auth

2008-10-09 Thread Stephen Bowman
On Thu, Oct 9, 2008 at 10:46 AM, Alan DeKok [EMAIL PROTECTED]wrote: [EMAIL PROTECTED] wrote: And how can I do that? I cannot find something like that via Google :( Ask the Samba people? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RLM-EAP-MD5 compilation problem

2008-09-29 Thread Stephen Bowman
rlm_eap_md5.c:24:22: error: autoconf.h: No such file or directory rlm_eap_md5.c:31:24: error: rad_assert.h: No such file or directory First, fix your paths/includes to resolve those dependencies. Then see what can't link. Also, compile against 2.1.1 (it won't fix this, but it's better in

Re: RLM-EAP-MD5 compilation problem

2008-09-29 Thread Stephen Bowman
On Mon, Sep 29, 2008 at 1:46 PM, Stephen Bowman [EMAIL PROTECTED] wrote: rlm_eap_md5.c:24:22: error: autoconf.h: No such file or directory rlm_eap_md5.c:31:24: error: rad_assert.h: No such file or directory First, fix your paths/includes to resolve those dependencies. Then see what

Re: RLM-EAP-MD5 compilation problem

2008-09-29 Thread Stephen Bowman
On Mon, Sep 29, 2008 at 2:44 PM, Andre Dieball [EMAIL PROTECTED]wrote: Hi Stephen the files mentioned are not in the list of file (not even in the package) which I need to copy to the freeradius sources, which leads me to the thought, that they might haven been part of freeradius 1.x but

Re: SLM248G switch

2008-09-26 Thread Stephen Bowman
On Fri, Sep 26, 2008 at 3:05 PM, David Blackman [EMAIL PROTECTED] wrote: I have purchased a Linksys SLM248G switch that has 802.1x support. I am new to radius server and would like to use this switch to authenticate ports for a lab to a freeradius server. I have installed freeradius 2.1.0 on

User-Profile per user per NAS via LDAP?

2008-07-22 Thread Stephen Bowman
Running version 2.0.5, with LDAP backend for authentication/authorization. Needed functionality: A single user account needs a different ldap/radius profile depending on which huntgroup the request is coming in on... the reason is that each user has a different Framed-IP-Address for each VPN

Re: EAP-TLS - Authenticating only certain users

2007-02-17 Thread Stephen Bowman
in the users file? Also - is there a way to define a different users file per NAS? On 2/17/07, Alan DeKok [EMAIL PROTECTED] wrote: Stephen Bowman wrote: When using EAP-TLS as the only method in freeradius, is there a way to define a list of allowed users, perhaps by the CN on their client

EAP-TLS - Authenticating only certain users

2007-02-16 Thread Stephen Bowman
When using EAP-TLS as the only method in freeradius, is there a way to define a list of allowed users, perhaps by the CN on their client certificate? I want it so that not *everyone* who has a certificate signed by the CA list can authenticate, but rather a select few (of which I know the CN of

EAP-TLS - CRL Checking - Expired?

2006-11-06 Thread Stephen Bowman
We're using FreeRadius as the EAP server in a wireless environment. All clients have smart cards, so as such we're using EAP-TLS. My question is in relation to CRL checking. I currently download CRLs nightly, but over the weekend it looks like perhaps the CRL download failed as nobody could