Hi A.,
I think the problem is that FR is trying to use more db connections than
the ones available.
You have to check MSSQL configuration and raise your incoming
connections limit.
Regards,
Francesco Cristofori.
-
List info/subscribe/unsubscribe? See
hi,
thanks for your quick answer.
On Thu, January 3, 2008 11:39, liran tal wrote:
First you should decide what you want to load balance, the freeradius
servers,
the database servers or both?
I'd like to load balance both. Or isn't their any need for?
Important is that the database is
Hi Sebastian,
But the most important thing for me is, if I get any trouble
if both radius servers will write their accounting records
into the same database.
I'm not running postgres, but the concepts are the same.
I set up a mysql replication (every dbms is slave of the other one) and
hi,
your database is too slow to handle all the accounting in real time.
hence the error messages. hence the lack of accounting
either speed the DB up - and/or add more handles - or move to putting
the details in in 'after real time' - eg with SQL-Relay - putting
them into a file then using
Hello,
I just managed to authenticate with rlm_perl and logging via sql.
But i got a few problems which i can not slove yet.
First of all when i run freeradius with -x parameter.. I see some error
messages as :
rlm_sql_log (sql_log): Processing sql_log_accounting
perl_pool: item 0x801243e0
Hey Sebastian,
I am unsure what your end goal is but consider the following:
The FreeRADIUS serves will be load balanced by something like LVS,
where you'd have a single IP address shared by both servers,
requests will go through either of them (not both). Or you can go
for the fail-over
liran tal wrote:
Hey Mark,
On Jan 3, 2008 11:57 AM, Mark J Elkins [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] wrote:
Radius may have been installed with dialupadmin - which may fit your
requirements. http://www.freeradius.org/dialupadmin.html
(I don't use it myself - already
Hey Mark,
On Jan 3, 2008 1:01 PM, Mark J Elkins [EMAIL PROTECTED] wrote:
liran tal wrote:
Hey Mark,
On Jan 3, 2008 11:57 AM, Mark J Elkins [EMAIL PROTECTED]
mailto:[EMAIL PROTECTED] wrote:
Radius may have been installed with dialupadmin - which may fit
your
Dear Alan,
I want to check some thing.
When i got the error ( There are no DB handles to use ) in my log file,
will the request be discarded and the router must resend it again or the
RADIUS will buffer the request and wait till a DB
connection is free to use and then process the
That's certainly a feature of some Cisco WAPs.
If anyone knows of a supplicant that does anything *useful* with
EAP-Notification (like, you know, notify the user) then that would be
interesting to hear :-)
josh.
-Original Message-
From:
[EMAIL PROTECTED]
org
[mailto:[EMAIL
Hi,
Running a packet capture of an EAP TTLS session against FR cvs head,
noticed EAP Notifcation packets are being sent.
The type-data appears to match that of the Reply-Message. Is this a
feature of rlm_eap that I missed before,
or is the NAS being clever about it's interpretation of the
Hi,
When trying to connect from VPN client with chap method I get the following
error messages from VPN server
- GRE: Bad checksum from pppd
- rc_avpair_new: unknown attribute
When testing without radius plug-in (chap-secret file) work fine
I'm using pptp version
Josh Howlett wrote:
That's certainly a feature of some Cisco WAPs.
If anyone knows of a supplicant that does anything *useful* with
EAP-Notification (like, you know, notify the user) then that would be
interesting to hear :-)
wpa_supplicant supports it; changelog says it was added back in
I'm doing this with no problem.
I have 2 freeradius servers both writing/reading the same dbms
I have split my load up so some NASes use one radiusd as a primary and the
other as the secondary. Then reversed that role for other NASes. It gives
a nice balance and if one were to fail, they just
Hello,
I have a FreeRADIUS server working properly with an LDAP backend. I've
brought some user config into the 'users' file for a legacy system
we're migrating to this server. However, I cannot seem to find the
appropriate way to have FreeRADIUS map clients to a specific
authentication type. In
On Jan 3, 2008 10:18 AM, Alan DeKok [EMAIL PROTECTED] wrote:
falz wrote:
I have a FreeRADIUS server working properly with an LDAP backend. I've
brought some user config into the 'users' file for a legacy system
we're migrating to this server. However, I cannot seem to find the
appropriate
Stefan Winter wrote:
Hi,
Running a packet capture of an EAP TTLS session against FR cvs head,
noticed EAP Notifcation packets are being sent.
The type-data appears to match that of the Reply-Message. Is this a
feature of rlm_eap that I missed before,
or is the NAS being clever about it's
hi,
we need to see the output of the radiusd -X - the config file
looks fine(!) we also need to know HOW you are trying to use
MSCHAPv2 - where is your authentication done? users file?
DB, ntlm_auth etc etc
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi Alan,
Can you please help me out with the LDAP query? I
am still stuck with the issue.
Your response will be greatly appreciated.
Thanks and Regards,
Eric.
--- Alan DeKok [EMAIL PROTECTED] wrote:
Phil Mayers wrote:
Slightly confusing, there are two ways to do this:
This should be
/radius/radacct/38.119.185.62/auth-detail-20080103
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to
/usr/local/var/log/radius/radacct/38.119.185.62/auth-detail-20080103
expand: %t - Thu Jan 3 15:19:46 2008
++[auth_log] returns ok
rlm_ldap
Nicholas Hall wrote:
*My Goal*: PAP on legacy port 1645, CHAP on 1812 working simultaneously.
All you need to do is to configure two listen sections. This can be
done in 1.1.7. You don't need two virtual servers.
*My Environment*: FreeRADIUS 2.0.0-pre2, LDAP user database, MySQL
Eric Martell wrote:
Hi Alan,
Can you please help me out with the LDAP query? I
am still stuck with the issue.
What problem is left to solve?
i.e. I read and answer a *lot* of email. I don't recall much past
what's on my screen right now...
Alan DeKok.
-
List
falz wrote:
Radius Client A uses rlm_ldap, Radius Client B uses 'files' for the
livingston-style 'users' file. What I have now is Client A works fine
with LDAP, but it seems to be a default across the system. Client B
always talks to LDAP, it doesn't seem to read from the user's file.
If
Hey Duane,
On Jan 3, 2008 4:31 PM, Duane Cox [EMAIL PROTECTED] wrote:
I'm doing this with no problem.
I have 2 freeradius servers both writing/reading the same dbms
In a case where the entire transaction goes through one server it's ok,
but if it gets split up through the two of them, then
On Jan 3, 2008 3:45 PM, Alan DeKok [EMAIL PROTECTED] wrote:
If you want to use one OR the other, try the following:
authorize {
...
group {
files {
ok = return
}
ldap
}
...
}
Hello,
I'm using freeradius 1.1.7 with sql server 2005, the problem is that I don't
find all accounting in database, freeradius doesn't send ack for all accounting
tickets (it sends 300 for 4000 tickets from 10 NAS), can you tell me what is
the prob?
here is a part of my radiusd.conf:
Hey Sebastian,
I think that you are making a rather not too complicated task very
complicated
with your view of the clustered solution.
First you should decide what you want to load balance, the freeradius
servers,
the database servers or both?
I also don't understand the need for some NASes
Hello all,
I am trying to authenticate to freeradius using ttls with mschapv2 and i
don't succeed;
Attached is my eap.conf file; If you think something is wrong there or
something should be added please tell me; also if you think other files
should be configured as well.
Thank you in advance!
Hello,
I asked Kostas Kalevras for paid support. I got support from him in
November but since then I get no answer to my mails.
Maybe he reads this mailing list and answers to my mails or anyone that
is in contact with him can ask him to answer.
Happy New Year
Andreas
-
List
29 matches
Mail list logo