Use of Service type attribute

2006-04-26 Thread Chandra mohan
Hi, I am developing a RADIUS client for our embedded product. I would like the Radius client implementation to support the association of privilege level with individual accounts, e.g. the account normal_user has a privilege that allows read-only access while account admin_user has a privilege

Use of Service type attribute

2006-04-26 Thread Chandra mohan
Hi, I am developing a RADIUS client for our embedded product. I would like the Radius client implementation to support the association of privilege level with individual accounts, e.g. the account normal_user has a privilege that allows read-only access while account admin_user has a privilege

freeradius, deb (sid)

2006-04-26 Thread Gabor Szelei
Hiall, I'd like to use freeradius with PEAP. from freeradius -X: rlm_eap: Loaded and initialized type gtc rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open shared object file: No such file or directory rlm_eap_tls.so seems to be missing. Does anyone know some debian source to

assign a value to an attribute via a script

2006-04-26 Thread Philippe Bacquaert
Hello, I'm searching how to use a script to modify the value of an attribute. When I try the example of radiusd.conf : Attribute-Name = `%{echo:/path/to/program args}` In my test I try to use a script to assign an IP address to the Attribute Framed-IP-Address : Framed-IP-Address =

Re: Create and Send attributes

2006-04-26 Thread Phil Mayers
Carlos Peñafiel wrote: Hello!!! I want to send from my radius server several attributes to the client, but I've been looking at the documenation. I can do that if my attribute-ID is between 1 and 100 (I guess, maybe is it 256), but also the documentation says that a new attribute has to have

Re: Use of Service type attribute

2006-04-26 Thread Phil Mayers
Chandra mohan wrote: Hi, I am developing a RADIUS client for our embedded product. I would like the Radius client implementation to support the association of privilege level with individual accounts, e.g. the account normal_user has a privilege that allows read-only access while account

Execute scripts

2006-04-26 Thread Andrzej Żmijewski
I'm new in FreeRadius. I want to make my own log on script which will execute same bash functions. Is it possible?? Andrew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Messenger

2006-04-26 Thread sami aa
Dear all, I am using freeradius 1.1.1 to authenticate SIP users. Using Windows Messenger as SIP phone is very important for me. I tested my servers(Sip proxy and freeradius) with free SIP phones and everything is OK. But with windows messenger I face some problems. I think the Function that

EAP TLS authentification

2006-04-26 Thread Philippe Chataigner
Hello, After an authentification with a certificate, the user-name who is return is the common name of the certificate. How can i do to use another field (subject, email, serial number...) because some person can have a same common name ? Thanks in advance - List info/subscribe/unsubscribe?

Re: freeradius, deb (sid)

2006-04-26 Thread Nicolas Baradakis
Gabor Szelei wrote: I'd like to use freeradius with PEAP. [...] rlm_eap_tls.so seems to be missing. Does anyone know some debian source to get it with it? Debian doesn't distribute a binary version of the rlm_eap_tls module because the OpenSSL license is incompatible with the GPL.

Réf. : Freeradius-Users Digest, Vol 12, Issue 98

2006-04-26 Thread JVUVANT Yahoo
Hi Iam using actuallyfreeradius wich work fine for linux box with one if (eth0).I'veadded another if(eth1) for some applications else. But whe I run radiusd -X -A, freeradius doesn't start correctly, ie. log stop reading at clients file. so My question is how to start freeradius en

Re: freeradius request to DHCP

2006-04-26 Thread Paulo Cabrita
Hello. There's also another solution. You can execute a shell script that contacts your DHCP server sending the Macaddress. That way, you can give whatever IP address you want. Check a shell called OMAPI in order to interact with the ISC DHCPd. Alan DeKok wrote: "Philippe Bacquaert"

RE: Re: Create and Send attributes

2006-04-26 Thread Carlos Peñafiel
Carlos Peñafiel wrote: Hello!!! I want to send from my radius server several attributes to the client, but I've been looking at the documenation. I can do that if my attribute-ID is between 1 and 100 (I guess, maybe is it 256), but also the documentation says that a new attribute has to

Re: Use of Service type attribute

2006-04-26 Thread Alan DeKok
Chandra mohan [EMAIL PROTECTED] wrote: Is it possible to use Service-Type attribute for this purpose, with Login value for normal_user and Administrative for admin_user. Please clarify. Yes. To a large extent, your client can interpret the attributes however it wishes. Alan DeKok. -

Re: freeradius, deb (sid)

2006-04-26 Thread Alan DeKok
Gabor Szelei [EMAIL PROTECTED] wrote: rlm_eap_tls.so seems to be missing. Does anyone know some debian source to get it with it? There is no debian package. But you can use the files in debian/ that come with FreeRADIUS to build your own. Alan DeKok. - List info/subscribe/unsubscribe?

Re: Réf. : Freeradius-Users Digest, Vol 12 , Issue 98

2006-04-26 Thread Alan DeKok
JVUVANT Yahoo [EMAIL PROTECTED] wrote: But whe I run radiusd -X -A, freeradius doesn't start correctly, ie. log stop reading at clients file. And what does debugging mode say? What has to be put in the documentation in order to convince people to run the server in debugging mode, and to

Re: Create and Send attributes

2006-04-26 Thread Alan DeKok
=?iso-8859-1?B?Q2FybG9zIFBl8WFmaWVs?= [EMAIL PROTECTED] wrote: I am trying to do something like amount of quality of service that a user have. What does that mean? I have the control over the radius client because I am using a HostAP, but looking at the documentation and on Google, I

Proxy failure

2006-04-26 Thread Axel Seguin
/radacct/10.3.1.60/auth- detail-20060426' rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/ auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/ 10.3.1.60/auth-detail-20060426 modcall[authorize]: module auth_log returns ok for request 105 rlm_realm: Looking up realm

RE: Re: Use of Service type attribute

2006-04-26 Thread Carlos Peñafiel
=?iso-8859-1?B?Q2FybG9zIFBl8WFmaWVs?= [EMAIL PROTECTED] wrote: I am trying to do something like amount of quality of service that a user have. What does that mean? Im sorry for my English. I want to have a variable (attribute) saying that for each user who has authorization using the

Re: freeradius, deb (sid)

2006-04-26 Thread Gabor Szelei
Hi, You might download FreeRADIUS 1.1.1 and build a Debian package from sources. I've tried, but faild to collect all the needed modules. Which version of libcrypt is need? Which version of openlls is needed? Can I find ldap headers from deb ? Is there some page about dependency requirments?

FreeRADIUS and SIP-AVP

2006-04-26 Thread Helge Waastad
Hi, I was just wondering if it is possible to return an attribute more than once in a RADIUS reply? I.e, for OpenSER I for instance would like to return: SIP-AVP=rpid:1234567 SIP-AVP=voicemail:888 I've tried to use rlm_perl and script to add SIP-AVP more than once,

Re: Proxy failure

2006-04-26 Thread Alan DeKok
Axel Seguin [EMAIL PROTECTED] wrote: My Radius sends the request 5 times to the other Radius server and then gives up marking the server dead (but it is not). Then why isn't it responding? Are there firewall rules that filter out the response or request? Why is there a

Re: assign a value to an attribute via a script

2006-04-26 Thread Alan DeKok
Philippe Bacquaert [EMAIL PROTECTED] wrote: I'm searching how to use a script to modify the value of an attribute. See scripts/exec-program-wait for an example. In my test I try to use a script to assign an IP address to the Attribute Framed-IP-Address : Framed-IP-Address =

Re: Messenger

2006-04-26 Thread Alan DeKok
sami aa [EMAIL PROTECTED] wrote: I am using freeradius 1.1.1 to authenticate SIP users. Using Windows Messenger as SIP phone is very important for me. I tested my servers(Sip proxy and freeradius) with free SIP phones and everything is OK. But with windows messenger I face some problems. I

Re: Execute scripts

2006-04-26 Thread Alan DeKok
=?Windows-1250?Q?Andrzej_=AFmijewski?= [EMAIL PROTECTED] wrote: I'm new in FreeRadius. I want to make my own log on script which will execute same bash functions. Is it possible?? read radiusd.conf. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: EAP TLS authentification

2006-04-26 Thread Alan DeKok
[EMAIL PROTECTED] (Philippe Chataigner) wrote: After an authentification with a certificate, the user-name who is return is the common name of the certificate. How can i do to use another field (subject, email, serial number...) because some person can have a same common name ? Edit the

Re: FreeRADIUS and SIP-AVP

2006-04-26 Thread Alan DeKok
Helge Waastad [EMAIL PROTECTED] wrote: I was just wondering if it is possible to return an attribute more than once in a RADIUS reply? Read man users, which documents exactly how to do that. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html