Re: Clear Text PAP passwords - how to enable

2009-10-18 Thread Alan DeKok
Alex M wrote: we keep upgrading FR servers and i got stuck with problem where I need PAP (I think) well i need clear text password and its not working for my user. When i send request through NTRAdping w/ CHAP all works well but when I'm using device as NAS nothing works :( I hope some one

Re: over 30 radiusd processes - more information

2009-10-18 Thread Craig Campbell
I've continued to try an investigate the root cause of this, and the last run behaved slightly differently - the parent process seems to have terminated, and there are more messages in the radius log. There were four (4) hung processes left over. I have attached the radius.log file below, as

Re: Clear Text PAP passwords - how to enable

2009-10-18 Thread Ivan Kalik
hey all we keep upgrading FR servers and i got stuck with problem where I need PAP (I think) well i need clear text password and its not working for my user. When i send request through NTRAdping w/ CHAP all works well but when I'm using device as NAS nothing works :( I hope some one can

Re: over 30 radiusd processes - more information

2009-10-18 Thread Ivan Kalik
I've continued to try an investigate the root cause of this, and the last run behaved slightly differently - the parent process seems to have terminated, and there are more messages in the radius log. There were four (4) hung processes left over. I have attached the radius.log file below,

Re: over 30 radiusd processes - more information

2009-10-18 Thread Alan DeKok
Craig Campbell wrote: I have attached the radius.log file below, as well as gdb sessions for the hung processes showing the results of the gd 'bt' and 'list' commands. The log is interesting. Sat Oct 17 02:01:25 2009 : Error: WARNING: Unresponsive child for request 165616, in module sql

Re: over 30 radiusd processes - more information

2009-10-18 Thread Craig Campbell
. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ Information from ESET Smart Security, version of virus signature database 4519 (20091018) __ The message was checked by ESET Smart Security. http

Re: over 30 radiusd processes - more information

2009-10-18 Thread Ivan Kalik
I think you may be 'jumping the gun' a wee bit. The system currently has over 13,000 active sessions. There were some odd accounting packets, but the vast majority were valid. These could be configuration errors or hack attempts (investigating). Something broke at 2am. Before that you had a

Re: Clear Text PAP passwords - how to enable

2009-10-18 Thread Alex M
Password is in SQL table raddcheck Also will take a look at that FAQ I know i had the same problem w. FR 1.5 and there I just had to take out DEFAULT Auth-Type: system so that we don't look for system password but I didnt find anything like that on FR 2 On Sun, Oct 18, 2009 at 10:43 AM, Ivan

Segmentation fault

2009-10-18 Thread Anusha K
Please help me i'm facing problem installing radius on Ubuntu 8.04 - the Hardy Heron. It shows segementation fault. anu...@anusha-desktop:/$ sudo freeradius start -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file:

Re: Segmentation fault

2009-10-18 Thread Alan DeKok
Anusha K wrote: Please help me i'm facing problem installing radius on Ubuntu 8.04 - the Hardy Heron. It shows segementation fault. anu...@anusha-desktop:/$ sudo freeradius start -X What is freeradius start? Alan DeKok. - List info/subscribe/unsubscribe? See

Windows client MS-chap auto-reauthentication

2009-10-18 Thread Vieri
Hello, I'm connecting Windows clients to a LAN via Linksys access points and a Freeradius server. I'm using EAP/TLS with certificates installed on the clients and in modules/mschap I defined: ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --username=%{Stripped-User-Name:-%{User-Name:-None}}

Re: Windows client MS-chap auto-reauthentication

2009-10-18 Thread Ivan Kalik
why XP re-authenticates automatically and how to disable it? b It's made that way. Why? Ask Microdoft. You can't disale it. You can remove cached credentials by hacking the registry - search Microsoft knowldgebase if you want to know how. why Vista doesn't behave the same way? Because people

Re: Windows client MS-chap auto-reauthentication

2009-10-18 Thread Alan Buxey
hi, XP caches successful connections - Vista does too IIRC so I'm not sure why you are seeing different behaviour.. anyhow..you can clear the credentials by blatting a registry on eg logout or login. the RADIUS server wont see the difference between std login and cached login as the client sends

Re: over 30 radiusd processes - more information

2009-10-18 Thread Alan Buxey
Hi, 1) Could bad accounting packets cause the radiusd process to EXIT? 2) Could bad accounting packets result in hung child processes (as seen in the gdb output after the radius log file)? I'd say yes. we ensure that bad packets dont hit our accounting servers eg accounting {

Re: Windows client MS-chap auto-reauthentication

2009-10-18 Thread Arran Cudbard-Bell
Alan Buxey wrote: hi, XP caches successful connections - Vista does too IIRC so I'm not sure why you are seeing different behaviour.. anyhow..you can clear the credentials by blatting a registry on eg logout or login. the RADIUS server wont see the difference between std login and cached

Re: Windows client MS-chap auto-reauthentication

2009-10-18 Thread Arran Cudbard-Bell
The windows supplicant should remove cached credentials if you return an EAP-Failure before the EAP type is negotiated. * EAP Method signature.asc Description: OpenPGP digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Clear Text PAP passwords - how to enable

2009-10-18 Thread Alex M
My SQL include and module authorization is enabled in instantiate section Im not 100% sure what virtual server do in new radius. I guess you are probably right about that fact that my radius is not accsesing SQL to see the users there,.. so since my Include is enabled i guess i need to figure out

[no subject]

2009-10-18 Thread INACIO ALVES
I'm trying configure the freeRADIUS on my wireless network but i'm having problems. My scnario: Debian Lenny+MySQL5.0+freeRADIUS 2.1.7 clients - ((( AP ))) [freeRADIUS server] When I execute the radiustest I get rad_recv: Access-Accept packet from host 127.0.0.1 port 1812,

Re: No NAS-Port seen warning

2009-10-18 Thread Robert White
There's no such path in /etc/raddb I'm running version 1.1.3 2009/10/16 Patric patri...@gmail.com Robert White wrote: Hey, Or can I make rlm_acct_unique look for Quintum-NAS-Port instead of just NAS-Port? Yup, just update modules/acct_unique HTH Patric - List

How to configure Wrong Message-Authenticator in Free-radius server response

2009-10-18 Thread Venseen
Hi, I have to insert cooked Message-authenticator in Free-radius srver Message, I tried to insert it in the users file in raddb. But, the configured value is not observed in the Access Accept packets for the Radius Server. Changes in raddb/users: hp Cleartext-Password := hp123

mysql radgroupcheck, deny access

2009-10-18 Thread Michael Bowe
I had some older Debian 4.0 (etch) servers, with freeradius v1.1.3 installed from packages. I then upgraded to Debian 5.0 (lenny), which comes with freeradius v2.0.4 After upgrading I ran into some problems with my radgroupcheck rules. In radgroupcheck, I have some rules to restrict which NAS