Re: Apache Authentication

You need some kind of gateway device. I've used Nomadix (www.nomadix.com) with success. You also get some open source gateway program running on linux called SAB Gateway. You can find this at sourceforge. Barry - Original Message - From: Callum McGillivray To: [EMAIL

Cisco Authorization failed

Hi , I run the debug on router and checked it is giving the message like No appropriate authorization type for user Pls tell me how to proceed ? and where could be the problem. Thanks in advance Nagesh Boyina --- Outgoing mail is certified Virus Free. Checked by AVG anti-virus system

RE: Failing debuild

*** Warning: Linking the shared library rlm_eap_peap.la against the loadable module *** rlm_eap_tls.so is not portable! This isn't a problem. No ? I was talking about the method do create deb packages . Well at the end of process I' can't find rel_eap_tls library among the shared ones, and

Re: Compiling Freeradius-1.0.0-pre3

it seems that you have no development librarys for mysql installed. what system are you working on? redhat? debian? ... regards Raimund Am Don, den 01.07.2004 schrieb sarky um 4:06: the make process is quitting when it gets to the sql bit i have pasted the lines, i am trying to compile a

How to check several informations before access-accept

Hello, As the title says, I need to check some information in a database before accepting a request. In fact, I would like to give access-request packet to the radius server with some more attribute, to simplify, a folder name for example. I think I will put lots of information in on

Discard a Package if REALM does not match a realm in proxy.conf

Hello! Is it possible to tell the radius Server to not process a packet further if the realm does not match a realm defined in the proxy.conf file? We have a database system which creates realms on demond in a realm table if a new realm occures, so we do not have to define the realm twice, first

Accounting Problem with Cisco WDS

Hello, When WDS is activated, all EAP requests coming from APs are proxied by the WDS master, there's no authentication problem (it works fine with TTLS/PAP and PEAP/MS-CHAPv2) but the username in the accounting detail files is replaced by the MAC address of the supplicant (the same as

ippool with non subsequent address ranges

Hi there I am using FreeRADIUS Version 0.9.3 and I need to set up an ippool with addresses that are not subsequent. I have two ranges of addresses, say 192.168.2.0/24 and 192.168.6.0/24. According to what I have read I can set only one range-start and one range-stop parameter for a single

Re: ippool with non subsequent address ranges

On Thu, 1 Jul 2004, Daniel Eyholzer wrote: Hi there I am using FreeRADIUS Version 0.9.3 and I need to set up an ippool with addresses that are not subsequent. I have two ranges of addresses, say 192.168.2.0/24 and 192.168.6.0/24. According to what I have read I can set only one range-start

Re: problems with radius accounting when using mysql

Anson Rinesmith wrote: Run radius in debug mode (radiusd -X) and see if you can figure out what is happening. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Maqbool Hashim Sent: Wednesday, June 30, 2004 11:24 AM To: [EMAIL PROTECTED]

Accounting and SQL, help!

Anson Rinesmith wrote: Run radius in debug mode (radiusd -X) and see if you can figure out what is happening. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Maqbool Hashim Sent: Wednesday, June 30, 2004 11:24 AM To: [EMAIL PROTECTED]

Re: ippool with non subsequent address ranges

On Thu, 1 Jul 2004 12:27:22 +0300 (EEST) Kostas Kalevras [EMAIL PROTECTED] wrote: Do a cvs update on the ippool module or wait for tomorrow's CVS snapshot. Then you can set Pool-Name to DEFAULT and it will match all of the ippool module instances. Thanks for your reply, Kostas, I will try

Re: Accounting and SQL, help!

Are you sure the NAS is sending accounting packets gm... - Original Message - From: Maqbool Hashim [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Thursday, July 01, 2004 5:46 AM Subject: Accounting and SQL, help! Anson Rinesmith wrote: Run radius in debug mode (radiusd -X) and

Re: Accounting and SQL, help!

I installed cvs snapshot that is avaible for today. It is showing error with rlm_eap. How can I disable it. and What will be consequences of disabling it PLEASE HELP ME ASAP. Amit - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting and SQL, help!

Gary McKinney wrote: Are you sure the NAS is sending accounting packets gm... H... I'll check that out using ethereal, thanks. However I am seeing the following being logged to files: modcall: entering group post-auth for request 2 radius_xlat:

Waking up in N seconds

Hello, Where I can find the discription of "Waking up in N seconds" ? What does it mean and how I can control it ? Excuse for my bad English, please. [EMAIL PROTECTED]

RE: Failing debuild

This isn't a problem. You were right. Cause of error in deb creating is failure of relinking stage: *** Warning: Linking the shared library rlm_eap_peap.la against the loadable module *** rlm_eap_tls.so is not portable! gcc -shared .libs/rlm_eap_peap.o .libs/peap.o -Wl,--rpath

NULL file in logdir

What means file named NULL in logdir? It's created by radiusd after start and is filled continuously by my users' names, NAS addresses and framed-ip-addresses divided by ':'. Radius (0.9.3) is built with mysql support (authacct). Found nothing in docs and mail archive. -- Alexander - List

Re: NULL file in logdir

oops. sorry, this is wtmp file when its name is not defined in config. Alexander Serkin wrote: What means file named NULL in logdir? It's created by radiusd after start and is filled continuously by my users' names, NAS addresses and framed-ip-addresses divided by ':'. Radius (0.9.3) is built with

Waking up in N seconds

Hello, Where I can find the discription of Waking up in N seconds ? What does it mean and how I can control it ? Excuse for my bad English, please. [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Compiling FreeRADIUS CVS on FreeBSD -- dismal failures

Chris Shenton [EMAIL PROTECTED] wrote: Makes sense. I delete all my old freeradius stuff, blow-away the CVS, and re-get via cvs. To keep things really simple I do ./configure then make, it fails: ... This is the same problem seen in a message I replied to yesterday. The libltdl

CHAP Authentication

I have configured freeradius-0.9.3 and mysql reading http://www.frontios.com/freeradius.html and it works! Now I have to configure chap authentication on my freeradius server. How to configure chap authentication on server with freeradius-0.9.3 and mysql? I am not a english native speaker, i

Open source RADIUS Java client

Hi,Is there any client side open source libraries for RADIUS authentication etc? Preferably I would like something in Java where I call a method and then this is turned into a RADIUS network packet request. Do you know any such libraries?Sincerly,Martin Olsson - List info/subscribe/unsubscribe?

Re: Discard a Package if REALM does not match a realm in proxy.conf

Raimund Sacherer [EMAIL PROTECTED] wrote: Is it possible to tell the radius Server to not process a packet further if the realm does not match a realm defined in the proxy.conf file? In 1.0.0, you can configure the realms module to ignore_null ignore_default. You can then use configurable

Re: Accounting Problem with Cisco WDS

Christophe Saillard [EMAIL PROTECTED] wrote: I use this configuration to rewrite the tunneled identity in accounting otherwise I get anonymous for all usernames, it works without WDS If it works for your other NASes, but not that one, then the problem is in the NAS. FreeRADIUS is

Re: CHAP Authentication

Monica Messa [EMAIL PROTECTED] wrote: I have configured freeradius-0.9.3 and mysql reading http://www.frontios.com/freeradius.html and it works! Now I have to configure chap authentication on my freeradius server. How to configure chap authentication on server with freeradius-0.9.3 and mysql?

Re: Accounting and SQL, help!

Amit Gupta [EMAIL PROTECTED] wrote: I installed cvs snapshot that is avaible for today. It is showing error with rlm_eap. How can I disable it. and What will be consequences of disabling it Delete the directory, and build the server. You'll also have to comment out the references to eap in

Re: Accounting and SQL, help!

Maqbool Hashim [EMAIL PROTECTED] wrote: modcall[post-auth]: module reply_log returns ok for request 2 modcall: group post-auth returns ok for request 2 Is there not a way to get that logged to sql database? No, You're still looking at authentication requests. You can look at them

Re: Failing debuild

marco [EMAIL PROTECTED] wrote: gcc -shared .libs/rlm_eap_peap.o .libs/peap.o -Wl,--rpath -Wl,/usr/lib/freeradius -L/root/downloads/freeradi us-snapshot-20040629/debian/freeradius/usr/lib/freeradius -L/usr/lib/freerad ius -lradius -lrlm_eap_tls As time goes by, my hatred of libtool grows

Re: rlm_sql, db_postgresql.sql ,v 1.16 2004/02/29, dictionary table question

[EMAIL PROTECTED] wrote: - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_sql, db_postgresql.sql ,v 1.16 2004/02/29, dictionary table question

[EMAIL PROTECTED] wrote: I create billing based on FreeRadius and PostgreSQL for ISP, and it would be nice to know some about dictionary table that will be probably used in future releases of FreeRADIUS to create compatible billing system. As the text you posted already says, FreeRADIUS

Re: CHAP Authentication

How to configure chap authentication on server with freeradius-0.9.3 and mysql? It comes configured to do CHAP authentication. Try it. I knew that it will work, but I was not sure! Thank you for your help, Monica M. - List info/subscribe/unsubscribe? See

Why radius when I have LDAP?

Hello, This may seem a little strange question. I have my Linux(suse8.2) boxes handle login requests using an LDAP server. The LDAP provides all that's needed, that is username/password, userid, groupid, homedir etc. I could use radius to authenticate logins(user/pass), but then I would still

Using Tunnel Attributes

Hi, I've been looking at the radius attributes page and I think the tunnel attributes may be useful for something I'm trying to achieve with radius. I'll describe an example scenario below. I have a firewall which is connected to an internal network and the Internet. A freeradius server sits

RE: Failing debuild

gcc -shared .libs/rlm_eap_peap.o .libs/peap.o -Wl,--rpath -Wl,/usr/lib/freeradius -L/root/downloads/freeradi us-snapshot-20040629/debian/freeradius/usr/lib/freeradius -L/usr/lib/freerad ius -lradius -lrlm_eap_tls As time goes by, my hatred of libtool grows even more. It's turning a

Re: Accounting and SQL, help!

Thanks, I think the problem is the firewall, (Netscreen 25) is not actually sending accounting packets to RADIUS. After some research via google it appears they haven't implemented the accounting function, which is really annoying. Anyone else have experience with these firewalls? Also, I

Re[2]: rlm_sql, db_postgresql.sql ,v 1.16 2004/02/29, dictionary table question

Hi, Alan. Alan wrote 1 July 2004, 16:50:35: AD [EMAIL PROTECTED] wrote: I create billing based on FreeRadius and PostgreSQL for ISP, and it would be nice to know some about dictionary table that will be probably used in future releases of FreeRADIUS to create compatible billing system. AD

Re: Why radius when I have LDAP?

Hans wrote: Hello, This may seem a little strange question. I have my Linux(suse8.2) boxes handle login requests using an LDAP server. The LDAP provides all that's needed, that is username/password, userid, groupid, homedir etc. I could use radius to authenticate logins(user/pass), but then I

Schema file for iPlanet/Sun One Directory Servers 5.x

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hello, I converted the RADIUS-LDAPv3.txt schema file so it can be used with iPlanet/Sun One Directory Servers 5.x. I'm sure serveral people already converted it, but I couldn't find it in the web and/or mailing list, so I share it. You can download ist

Re: Schema file for iPlanet/Sun One Directory Servers 5.x

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Arne Brutschy wrote: | or simply copy it from this mail: | Ups, sorry, my stupid mail program wrapped the lines. So just download it, in case you need it. I still can't figure out why my da** Thunderbird disables the Paste Without Formatting button.

Using wildcards in realm

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Hi, I want to use wildcards in my realm for proxying. But the method posted by Alan does not work. If I set ~ DEFAULT User-Name =~ @foo, Proxy-To-Realm := foo.com I get an error: ~ WARNING: You set Proxy-To-Realm = foo.com but it is a LOCAL realm! ~

Re: Re[2]: rlm_sql, db_postgresql.sql ,v 1.16 2004/02/29, dictionary table question

Dmitriy Milashenko [EMAIL PROTECTED] wrote: BUT I still can not understand: 1. what mean field Format; Extra information, not recorded in the other fields. See the main dictionary files for examples. This information is also documented in he man page. 2. to define all possible values of

Re: Using wildcards in realm

Arne Brutschy [EMAIL PROTECTED] wrote: I want to use wildcards in my realm for proxying. But the method posted by Alan does not work. Hmm... that can happen, but I'm not sure. ~ DEFAULT User-Name =~ @foo, Proxy-To-Realm := foo.com I get an error: ~ WARNING: You set Proxy-To-Realm =

Rejecting connections

Hello, running FreeRadius 0.9.3 w/ LDAP Backend on FreeBSD 4.9p9: I have 4 Autz-Types, LDAP, SNS, POPS, PPPoE LDAP = regular auth SNS, POPS = Dialup PPPoE = DSL We have it setup and working so if a customer connects with a P, Q or S prefix they will get their static IP assignment. Basically one

Max TNT not respecting my Default profile

Version is: lt-radiusd: FreeRADIUS Version 0.9.3, for host i686-pc-linux-gnu, built on Dec 24 2003 at 09:56:24 This is my default profile listed at the bottom of my USERS file in /usr/local/etc/raddb DEFAULT Auth-Type = System Service-Type = Framed-User, Framed-IP-Address =

Test

Test... Hello!

MSSQL and unixodbc

In trying to get this box to use radius, I've now tried both freeradius-1.0.0-pre3 and 0.9.3, iODBC and unixODBC, and freetds. I'm trying to set up auth via freetds to a MSSQL server on another box. I currently have this setup working on two other servers. The only difference between each of

Re: accounting_update_query_alt ?

On Thu, Jul 01, 2004 at 09:01:02AM +0400, Alexander Serkin wrote: Hello. I wonder if there're any plans to add the accounting_update_query_alt to the sql configuration with INSERT? If not, i'll try myself. It is possible that the accounting update packet comes and AAA server did not see