Re: proxy authentication

2006-12-28 Thread Patric
Dubi Lego wrote: we need also to be notified on any attempt of a user to authenticate through the RADIUS. Are you familiar with any solution to do that? Thanks in advance for your help, Dubi You could create a script that logs any authentication attempts to a file/table, and execute the

Re: proxy authentication

2006-12-28 Thread Owen DeLong
I would think that you could cobble together an rlm_perl module that would log the contents of whatever hashes you are interested in to another server by whatever means you wish, then return MODULE_OK without modifying any of the data in the hashes. Owen On Dec 27, 2006, at 11:39 PM, Dubi Lego

Re: problem with NT-Password and LDAP

2006-12-28 Thread Ana Gallardo Gómez
Ana Gallardo Gómez wrote: Hello, my problem is, i have a Freeradius server that retrieves the authentication information from an OpenLDAP server; in this server the NT-Password atributte has 252 characters (32 characters from NT-hash + white spaces) Why not just update the entries in

FreeRadius overview

2006-12-28 Thread David Covert
I have gotten freeRadius working with a mikrotik NAS using the users flat file (hooray for me! g). Now I need to have the freeRadius server reference a MS-SQL db server rather than the users file on the freeRadius server. I am quite fuzzy about the process tho. I am hoping for some basic

Re: proxy authentication

2006-12-28 Thread Alan DeKok
Dubi Lego wrote: Our solution is to provide lawful information, according to a Court request on user's activity on the net. In order to do that we need to intercept their AAA activity and the actual data activity. That's a requirement, not a solution. The solution to that problem is, as I

Re: problem with NT-Password and LDAP

2006-12-28 Thread Alan DeKok
Ana Gallardo Gómez wrote: Well, I can not modify the LDAP server, I only can use it, so, while I ask the LDAP administrator to modify this atribute, I would like to modify in Freeradius server. OK, use the perl module to re-write the attribute. There is an example.pl distributed with the

Re: FreeRadius overview

2006-12-28 Thread Alan DeKok
David Covert wrote: How do you tell freeRadius to reference an external MS-SQL db rather than the local users flat file? $ ls raddb/*sql.conf $ grep sql raddb/radiusd.conf $ cat doc/rlm_sql Alan DeKok. -- http://deployingradius.com - The web site of the book

NAS support for disconnect methods

2006-12-28 Thread Daniel Lark
I am in the process of developing a generalized disconnect methodology for disconnects. While I know definitely that Cisco NAS with an IOS = 12.1 will support POD, does anyone out there know what equipment supports disconnects through SNMP or POD. I have equipment all over the map and need to plan

Re: FreeRadius overview

2006-12-28 Thread Gaddis, Jeremy L.
On 12/28/06, David Covert [EMAIL PROTECTED] wrote: I have gotten freeRadius working with a mikrotik NAS using the users flat file (hooray for me! g). Now I need to have the freeRadius server reference a MS-SQL db server rather than the users file on the freeRadius server. I am quite fuzzy about

Re: FreeRadius overview

2006-12-28 Thread Gaddis, Jeremy L.
On 12/28/06, David Covert [EMAIL PROTECTED] wrote: I have gotten freeRadius working with a mikrotik NAS using the users flat file (hooray for me! g). Now I need to have the freeRadius server reference a MS-SQL db server rather than the users file on the freeRadius server. I am quite fuzzy about

Re: FreeRadius overview

2006-12-28 Thread Dennis Skinner
David Covert wrote: I have gotten freeRadius working with a mikrotik NAS using the users flat file (hooray for me! g). Now I need to have the freeRadius server reference a MS-SQL db server rather than the users file on the freeRadius server. I am quite fuzzy about the process tho. I am

Re: FreeRadius overview

2006-12-28 Thread Hernan Antolini
David, start with rlm_sql at source_directory/doc, check also your sql.conf in your installation etc/raddb directoryit help me also this one to start http://www.frontios.com/freeradius.html (for mysql). I hope it helpsif you're about using ms-sql check also mssql at

Very big user database

2006-12-28 Thread Felipe Neuwald
Hi folks, I put to work our new freeradius server, and I'm getting this message on my /var/log/radius.log: Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 Thu Dec 28 15:47:15 2006 : Info: rlm_sql (sql): There are no DB handles to

Re: NAS support for disconnect methods

2006-12-28 Thread Kevin Bonner
On Thursday 28 December 2006 12:04, Daniel Lark wrote: I am in the process of developing a generalized disconnect methodology for disconnects. While I know definitely that Cisco NAS with an IOS = 12.1 will support POD, does anyone out there know what equipment supports disconnects through SNMP

Very big user database (solved)

2006-12-28 Thread Felipe Neuwald
Oops, sorry.. solved: [EMAIL PROTECTED] /usr/local/etc/raddb]# cat sql.conf | grep num_sql_socks num_sql_socks = 15 Increased from 5 to 15. Thanks, Felipe. --- Hi folks, I put to work our new freeradius server, and I'm getting this message on my /var/log/radius.log:

Re: FreeRadius overview

2006-12-28 Thread Dennis Skinner
David Covert wrote: Ok, I almost get it... question: The mssql.conf file has an entry like this: #Database table configutation radius_db = radius I assume that radius refers to a pre-determined schema that freeRadius That is not a schema, that is the database name. As in: SELECT

Re: PEAP+PAM or MySQL possible?

2006-12-28 Thread Alan DeKok
Matt Goebel wrote: I'd like to move to WPA Enterprise EAP/PEAP from EAP/TLS. That way there are no client certificates to deal with and I can instead just use usernames/passwords. I don't, however, want either OpenLDAP or AD to do it. Both would be overkill for my needs and just add an