R: freeradius sql server with high loads

2008-01-03 Thread Francesco Cristofori
Hi A., I think the problem is that FR is trying to use more db connections than the ones available. You have to check MSSQL configuration and raise your incoming connections limit. Regards, Francesco Cristofori. - List info/subscribe/unsubscribe? See

Re: Radius Load-Balancing concept

2008-01-03 Thread Sebastian Ganschow
hi, thanks for your quick answer. On Thu, January 3, 2008 11:39, liran tal wrote: First you should decide what you want to load balance, the freeradius servers, the database servers or both? I'd like to load balance both. Or isn't their any need for? Important is that the database is

R: Radius Load-Balancing concept

2008-01-03 Thread Francesco Cristofori
Hi Sebastian, But the most important thing for me is, if I get any trouble if both radius servers will write their accounting records into the same database. I'm not running postgres, but the concepts are the same. I set up a mysql replication (every dbms is slave of the other one) and

Re: freeradius sql server with high loads

2008-01-03 Thread A . L . M . Buxey
hi, your database is too slow to handle all the accounting in real time. hence the error messages. hence the lack of accounting either speed the DB up - and/or add more handles - or move to putting the details in in 'after real time' - eg with SQL-Relay - putting them into a file then using

[no subject]

2008-01-03 Thread Oguzhan Kayhan
Hello, I just managed to authenticate with rlm_perl and logging via sql. But i got a few problems which i can not slove yet. First of all when i run freeradius with -x parameter.. I see some error messages as : rlm_sql_log (sql_log): Processing sql_log_accounting perl_pool: item 0x801243e0

Re: Radius Load-Balancing concept

2008-01-03 Thread liran tal
Hey Sebastian, I am unsure what your end goal is but consider the following: The FreeRADIUS serves will be load balanced by something like LVS, where you'd have a single IP address shared by both servers, requests will go through either of them (not both). Or you can go for the fail-over

Re: query

2008-01-03 Thread Mark J Elkins
liran tal wrote: Hey Mark, On Jan 3, 2008 11:57 AM, Mark J Elkins [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Radius may have been installed with dialupadmin - which may fit your requirements. http://www.freeradius.org/dialupadmin.html (I don't use it myself - already

Re: query

2008-01-03 Thread liran tal
Hey Mark, On Jan 3, 2008 1:01 PM, Mark J Elkins [EMAIL PROTECTED] wrote: liran tal wrote: Hey Mark, On Jan 3, 2008 11:57 AM, Mark J Elkins [EMAIL PROTECTED] mailto:[EMAIL PROTECTED] wrote: Radius may have been installed with dialupadmin - which may fit your

There are no DB handles to use

2008-01-03 Thread Amr el-Saeed
Dear Alan, I want to check some thing. When i got the error ( There are no DB handles to use ) in my log file, will the request be discarded and the router must resend it again or the RADIUS will buffer the request and wait till a DB connection is free to use and then process the

RE: EAP Notification

2008-01-03 Thread Josh Howlett
That's certainly a feature of some Cisco WAPs. If anyone knows of a supplicant that does anything *useful* with EAP-Notification (like, you know, notify the user) then that would be interesting to hear :-) josh. -Original Message- From: [EMAIL PROTECTED] org [mailto:[EMAIL

EAP Notification

2008-01-03 Thread Arran Cudbard-Bell
Hi, Running a packet capture of an EAP TTLS session against FR cvs head, noticed EAP Notifcation packets are being sent. The type-data appears to match that of the Reply-Message. Is this a feature of rlm_eap that I missed before, or is the NAS being clever about it's interpretation of the

Problem with pptp and freeradius

2008-01-03 Thread Danny Milshtein
Hi, When trying to connect from VPN client with chap method I get the following error messages from VPN server - GRE: Bad checksum from pppd - rc_avpair_new: unknown attribute When testing without radius plug-in (chap-secret file) work fine I'm using pptp version

Re: EAP Notification

2008-01-03 Thread Arran Cudbard-Bell
Josh Howlett wrote: That's certainly a feature of some Cisco WAPs. If anyone knows of a supplicant that does anything *useful* with EAP-Notification (like, you know, notify the user) then that would be interesting to hear :-) wpa_supplicant supports it; changelog says it was added back in

RE: Radius Load-Balancing concept

2008-01-03 Thread Duane Cox
I'm doing this with no problem. I have 2 freeradius servers both writing/reading the same dbms I have split my load up so some NASes use one radiusd as a primary and the other as the secondary. Then reversed that role for other NASes. It gives a nice balance and if one were to fail, they just

Authentication type (ldap, users, etc) per client or user?

2008-01-03 Thread falz
Hello, I have a FreeRADIUS server working properly with an LDAP backend. I've brought some user config into the 'users' file for a legacy system we're migrating to this server. However, I cannot seem to find the appropriate way to have FreeRADIUS map clients to a specific authentication type. In

Re: Authentication type (ldap, users, etc) per client or user?

2008-01-03 Thread falz
On Jan 3, 2008 10:18 AM, Alan DeKok [EMAIL PROTECTED] wrote: falz wrote: I have a FreeRADIUS server working properly with an LDAP backend. I've brought some user config into the 'users' file for a legacy system we're migrating to this server. However, I cannot seem to find the appropriate

Re: EAP Notification

2008-01-03 Thread Arran Cudbard-Bell
Stefan Winter wrote: Hi, Running a packet capture of an EAP TTLS session against FR cvs head, noticed EAP Notifcation packets are being sent. The type-data appears to match that of the Reply-Message. Is this a feature of rlm_eap that I missed before, or is the NAS being clever about it's

Re: mschapv2 problem

2008-01-03 Thread A . L . M . Buxey
hi, we need to see the output of the radiusd -X - the config file looks fine(!) we also need to know HOW you are trying to use MSCHAPv2 - where is your authentication done? users file? DB, ntlm_auth etc etc alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring LDAP for query ONLY...

2008-01-03 Thread Eric Martell
Hi Alan, Can you please help me out with the LDAP query? I am still stuck with the issue. Your response will be greatly appreciated. Thanks and Regards, Eric. --- Alan DeKok [EMAIL PROTECTED] wrote: Phil Mayers wrote: Slightly confusing, there are two ways to do this: This should be

Virtual Hosts conflicting

2008-01-03 Thread Nicholas Hall
/radius/radacct/38.119.185.62/auth-detail-20080103 rlm_detail: /usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /usr/local/var/log/radius/radacct/38.119.185.62/auth-detail-20080103 expand: %t - Thu Jan 3 15:19:46 2008 ++[auth_log] returns ok rlm_ldap

Re: Virtual Hosts conflicting

2008-01-03 Thread Alan DeKok
Nicholas Hall wrote: *My Goal*: PAP on legacy port 1645, CHAP on 1812 working simultaneously. All you need to do is to configure two listen sections. This can be done in 1.1.7. You don't need two virtual servers. *My Environment*: FreeRADIUS 2.0.0-pre2, LDAP user database, MySQL

Re: Configuring LDAP for query ONLY...

2008-01-03 Thread Alan DeKok
Eric Martell wrote: Hi Alan, Can you please help me out with the LDAP query? I am still stuck with the issue. What problem is left to solve? i.e. I read and answer a *lot* of email. I don't recall much past what's on my screen right now... Alan DeKok. - List

Re: Authentication type (ldap, users, etc) per client or user?

2008-01-03 Thread Alan DeKok
falz wrote: Radius Client A uses rlm_ldap, Radius Client B uses 'files' for the livingston-style 'users' file. What I have now is Client A works fine with LDAP, but it seems to be a default across the system. Client B always talks to LDAP, it doesn't seem to read from the user's file. If

Re: Radius Load-Balancing concept

2008-01-03 Thread liran tal
Hey Duane, On Jan 3, 2008 4:31 PM, Duane Cox [EMAIL PROTECTED] wrote: I'm doing this with no problem. I have 2 freeradius servers both writing/reading the same dbms In a case where the entire transaction goes through one server it's ok, but if it gets split up through the two of them, then

Re: Authentication type (ldap, users, etc) per client or user?

2008-01-03 Thread falz
On Jan 3, 2008 3:45 PM, Alan DeKok [EMAIL PROTECTED] wrote: If you want to use one OR the other, try the following: authorize { ... group { files { ok = return } ldap } ... }

freeradius sql server with high loads

2008-01-03 Thread A.Dupont
Hello, I'm using freeradius 1.1.7 with sql server 2005, the problem is that I don't find all accounting in database, freeradius doesn't send ack for all accounting tickets (it sends 300 for 4000 tickets from 10 NAS), can you tell me what is the prob? here is a part of my radiusd.conf:

Re: Radius Load-Balancing concept

2008-01-03 Thread liran tal
Hey Sebastian, I think that you are making a rather not too complicated task very complicated with your view of the clustered solution. First you should decide what you want to load balance, the freeradius servers, the database servers or both? I also don't understand the need for some NASes

mschapv2 problem

2008-01-03 Thread Cristian Novac
Hello all, I am trying to authenticate to freeradius using ttls with mschapv2 and i don't succeed; Attached is my eap.conf file; If you think something is wrong there or something should be added please tell me; also if you think other files should be configured as well. Thank you in advance!

Freeradius support

2008-01-03 Thread Andreas Moroder
Hello, I asked Kostas Kalevras for paid support. I got support from him in November but since then I get no answer to my mails. Maybe he reads this mailing list and answers to my mails or anyone that is in contact with him can ask him to answer. Happy New Year Andreas - List