Re: Help on adding value to mysql

2009-10-19 Thread Simone Felici
No ideas to help me a little? At least to know if what described is possible. Thank's Simon Simone Felici ha scritto in data 16/10/2009 11.26: Hello to all, I've freeradius installed on a CentOS 4.5: freeradius-1.1.5-0. I would like to add a new field to my radacct table to log a new value

Re: Windows client MS-chap auto-reauthentication

2009-10-19 Thread Vieri
--- On Sun, 10/18/09, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: XP caches successful connections - Vista does too IIRC so I'm not sure why you are seeing different behaviour.. anyhow..you can clear the credentials by blatting a registry on eg logout or login. OK, thanks for the

Re:

2009-10-19 Thread nf-vale
Check your proxy / realms configuration. The reason why it fails is described in the logs: Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the request. Not performing PAP. Sun Oct 18 19:20:54 2009 : Info: ++[pap] returns noop Sun Oct 18 19:20:54 2009 : Info: WARNING: You set

Re: No NAS-Port seen warning

2009-10-19 Thread Alan Buxey
Hi, There's no such path in /etc/raddb I'm running version 1.1.3 if you upgrade to 2.1.7 then there will be such a $PATH and file :-) okay - you need to look in the main radiusd.conf file for where the uniq line is mentioned - however, i cant recall whether you can just slap that new NAS-Port

Re: How to configure Wrong Message-Authenticator in Free-radius server response

2009-10-19 Thread Alan DeKok
Venseen wrote: Hi, I have to insert cooked Message-authenticator in Free-radius srver Message, You will need to edit the source code to do this. FreeRADIUS does *not* generate invalid Message-Authenticators. Alan DeKok. - List info/subscribe/unsubscribe? See

Re:

2009-10-19 Thread Ivan Kalik
I'm trying configure the freeRADIUS on my wireless network but i'm having problems. My scnario: Debian Lenny+MySQL5.0+freeRADIUS 2.1.7 clients - ((( AP ))) [freeRADIUS server] When I execute the radiustest I get rad_recv: Access-Accept packet from host 127.0.0.1 port

Re: No NAS-Port seen warning

2009-10-19 Thread Ivan Kalik
There's no such path in /etc/raddb I'm running version 1.1.3 Upgrade. That version is many years out of date. In 1.1.3 module will be in radiusd.conf. Ivan Kalik Kalik Informatika ISP - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mysql radgroupcheck, deny access

2009-10-19 Thread Ivan Kalik
I had some older Debian 4.0 (etch) servers, with freeradius v1.1.3 installed from packages. I then upgraded to Debian 5.0 (lenny), which comes with freeradius v2.0.4 After upgrading I ran into some problems with my radgroupcheck rules. In radgroupcheck, I have some rules to restrict which

Re: Several virtual servers with different log files?

2009-10-19 Thread Francisco Javier Valdera Garcia
Alan DeKok wrote: Francisco Javier Valdera Garcia wrote: Hi, I have a freeRadius 2.1.7 server with three virtual servers listening to different kinds of clients. I would like to know whether it is possible to define different log files for these virtual servers, instead of the global log

Re: Clear Text PAP passwords - how to enable

2009-10-19 Thread Alan Buxey
Hi, My SQL include and module authorization is enabled in instantiate section Im not 100% sure what virtual server do in new radius. I guess you are probably right about that fact that my radius is not accsesing SQL to see the users there,.. so since my Include is enabled i guess i need to

Re: HINTS and EAP correspondence issue.

2009-10-19 Thread Matthieu Lazaro
Matthieu Lazaro a écrit : Hello list, I have a little question about hints and EAP. Trying to set up machine authentification, I have been able to rewrite my user-name to match my requirements in my Open ldap: get rid of the host/ and add $ ( host/machinename -- machinename$) using hints.

Re: HINTS and EAP correspondence issue.

2009-10-19 Thread Ivan Kalik
Trying to set up machine authentification, I have been able to rewrite my user-name to match my requirements in my Open ldap: get rid of the host/ and add $ ( host/machinename -- machinename$) using hints. But it ends up with this error after ldap authorisation: [eap] Identity does not match

how to get a UserName from a Pool

2009-10-19 Thread Alisson
Hi, I need to redirect a customer to a page with the pool and I need to get his UserName. I tougth to use the MK API to acess, I used the NASIPAddress, UserName and Password, The redirect and acess MK API its easy, but my problem is how to get the UserName of one customer if I have alot of

Re: HINTS and EAP correspondence issue.

2009-10-19 Thread Matthieu Lazaro
Ivan Kalik a écrit : Trying to set up machine authentification, I have been able to rewrite my user-name to match my requirements in my Open ldap: get rid of the host/ and add $ ( host/machinename -- machinename$) using hints. But it ends up with this error after ldap authorisation: [eap]

Re: how to get a UserName from a Pool

2009-10-19 Thread Ivan Kalik
Hi, I need to redirect a customer to a page with the pool and I need to get his UserName. I tougth to use the MK API to acess, I used the NASIPAddress, UserName and Password, The redirect and acess MK API its easy, but my problem is how to get the UserName of one customer if I have alot

Re: how to get a UserName from a Pool

2009-10-19 Thread Alisson
but, how I get the Calling Station Id ? 2009/10/19 Ivan Kalik t...@kalik.net Hi, I need to redirect a customer to a page with the pool and I need to get his UserName. I tougth to use the MK API to acess, I used the NASIPAddress, UserName and Password, The redirect and acess MK

AW: Freeradius-Users Digest, Vol 54, Issue 86

2009-10-19 Thread INACIO ALVES
Thanks to all, But, how I said, I don't need proxy, Then I have commented the line proxy proxy_requests  = no #$INCLUDE proxy.conf See http://pastebin.com/m52c747e3 to my radiusd.conf Therefore, I don't know why the log is Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the

RE:

2009-10-19 Thread INACIO ALVES
Thanks to all, But, how I said, I don't need proxy, Then I have commented the line proxy proxy_requests  = no #$INCLUDE proxy.conf See http://pastebin.com/m52c747e3 to my radiusd.conf Therefore, I don't know why the log is Sun Oct 18 19:20:54 2009 : Info: [pap] No clear-text password in the

RE:

2009-10-19 Thread Ivan Kalik
But, how I said, I don't need proxy, Then I have commented the line proxy proxy_requests  = no #$INCLUDE proxy.conf ... and broke the server (inner-tunnel processing). Well done! Now put it back the way it was. Peap works by doing internal proxy to LOCAL realm. So, you *do* need to proxy.

AW: Freeradius-Users Digest, Vol 54, Issue 89

2009-10-19 Thread INACIO ALVES
Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). The next step is migrate my users to MySQL  or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and files. Is this? Second. I set the   

RE: Freeradius-Users Digest, Vol 54, Issue 89

2009-10-19 Thread INACIO ALVES
Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL  or PostgreSQL database. So I need alter the file sites-available/default to include

RE: RE: ,

2009-10-19 Thread INACIO ALVES
Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL  or PostgreSQL database. So I need alter the file sites-available/default to include

Re: Clear Text PAP passwords - how to enable

2009-10-19 Thread Alex M
ok now since i know where autorize and authenticate and accounting modules went i feel much better =) But I still got small problem, when i run in de debug mode i saw this warning. I'm not fully sure what it asks me to do? Any advice on this? ++[pap] returns updated Found Auth-Type = PAP

Re: Clear Text PAP passwords - how to enable

2009-10-19 Thread Alan Buxey
Hi, But I still got small problem, when i run in de debug mode i saw this warning. I'm not fully sure what it asks me to do? Any advice on this? its fairly clear isnt it? the error is written very clearly. follow the advice. !!! Please update your configuration so that the known good !!!

how to call an external script

2009-10-19 Thread aangles
Hello, I want freeradius calls an external script and send to it the User-Name it gets from the NAS in an access-request radius packet. So I am using the echo module, I configure as: # # The name of the program to execute, and it's # arguments. Dynamic translation is done

RE:

2009-10-19 Thread INACIO ALVES
Thanks Ivan Kalik, Now my server is authenticating the users (Linux and Windows). First. How I reply to my email go in the thread. I need set some attribute? Second. The next step is migrate my users to MySQL  or PostgreSQL database. So I need alter the file sites-available/default to include

RE:

2009-10-19 Thread Ivan Kalik
How I reply to my email go in the thread. I need set some attribute? No, just reply to the message with your title. The next step is migrate my users to MySQL  or PostgreSQL database. So I need alter the file sites-available/default to include the line sql and remove the lines unix and

Re: how to call an external script

2009-10-19 Thread Ivan Kalik
I want freeradius calls an external script and send to it the User-Name it gets from the NAS in an access-request radius packet. So I am using the echo module, I configure as: # # The name of the program to execute, and it's # arguments. Dynamic translation is done on

RE: Check_item still wraps at 4gb

2009-10-19 Thread Neville
Hi Marcel, Are you able to share your work around, because I have the same problem. Either on-list or direct email? Thx Nev- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Windows client MS-chap auto-reauthentication

2009-10-19 Thread Doc Phillips
Hello, I tried asking the post with no response but was hoping you could assist in my search. I'm currently running a M$ implementation of radius (IAS) for a small number of users/computers (roughly 300 users and 700 devices all microsoft based). I'm trying to prevent rogue devices from

IP address assignment for the authenticated users in Free radius

2009-10-19 Thread Anoop C
Hi We are running EAP-TLS authentication for office users using WiFi network. This is a certificate based authentication and we are using Free RADIUS. I would like to know whether we can assign IP address dynamically to the users through FREE RADIUS server ie RADIUS server works as DHCP