event-timestamp 3gpp2 attribute 41

2004-07-02 Thread Alexander Serkin
Event-Timestamp occasionally is defined as date while in RFC 2869 it is integer: ... Value The Value field is four octets encoding an unsigned integer with the number of seconds since January 1, 1970 00:00 UTC. ... 3GPP2 Attribute 41 is called 3GPP2-R-P-Session-ID. Silently

Acct-Start-Time and radclient ??

2004-07-02 Thread nsinit
Hi, I set the following attribute when using the radtest to send accounting-requet packets: echo Acct-Start-Time = \2002-06-23 18:33:23\ but the radclient display: Sending Accounting-Request of id 3 to 127.0.0.1:1813 .

ERROR freeradius compilation

2004-07-02 Thread apellido jr., wilfredo p.
Freebsd 4.10 Freeradius latest development CVS July 07, 2004 gmake[1]: Entering directory `/usr/local/radiusd/libltdl' /bin/sh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -pthread -D_THREAD_SAFE -DOPENSSL _NO_KRB5 -Wall -D_GNU_SOURCE -g -Wshadow -Wpointer-arith

Re: ERROR freeradius compilation

2004-07-02 Thread Paul Hampson
On Fri, Jul 02, 2004 at 04:45:53PM +0800, apellido jr., wilfredo p. wrote: Freebsd 4.10 Freeradius latest development CVS July 07, 2004 gmake[1]: Entering directory `/usr/local/radiusd/libltdl' /bin/sh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -pthread

RE: Can't get rlm_ldap to compile

2004-07-02 Thread Richard Pracko
Hi, When I run the condfigure script I got this result: loading cache ./config.cache checking for gcc... (cached) gcc Too many errors encountered; the rest of the message is ignored: checking whether the C compiler (gcc ) works... yes checking whether the C compiler (gcc ) is a

Re: ERROR freeradius compilation

2004-07-02 Thread Gary McKinney
Hmmm - Yep ... I wonder if the problem is the DATE ( CVS July 7, 2004 )... Actually Alan answered this question a couple of days ago... Has to do with the newer version of libtool... The current fix is to go into the libtldl source directory per Alan and perform the following:

Re: Max TNT not respecting my Default profile

2004-07-02 Thread Gary McKinney
Drew, Check to make sure the Ascend you have uses the Ascend-VSA attributes, if not I think there is a setting in the ascend configuration for the ascend to use the VSA attributes... See the file ascend in the docs section of the source directory for the freeradius server - it discusses this very

ERROR freeradius compilation

2004-07-02 Thread apellido jr., wilfredo p.
Just part of the error solved, i got new one after trying to change The solution is to edit libltdl/Makefile, and change: top_builddir = . to: top_builddir = ./.. here's the new one: ../../lib/.libs/libradius.so: undefined reference to `pthread_mutex_unlock' ../../lib/.libs/libradius.so:

User-Name and EAP Message attributes

2004-07-02 Thread Anj
Hello, I am using freeRadius version 1.0.0-pre3 and I found that if the User-Name is not matching with Type-Data field in EAP-Identity/Response then Access Reject is being sent and following error is being displayed. Identity does not match User-Name, setting from EAP Identity. In RFC 3579, it

Re: User-Name and EAP Message attributes

2004-07-02 Thread Michael Griego
On Fri, 2004-07-02 at 07:10, Anj wrote: In some cases, Domain Name is stripped from User-Name and sent to Radius Server. In that case, User-Name would not match with Type-Data field of EAP-Identity/Response. It's a security piece. Since authorizations are based on the User-Name, the server

LDAP and Active Directory

2004-07-02 Thread marc\.jaeger
Hi, This may look like a reccuring question, but I've checked the whole mailing list and many other websites but this isn't clear to me. I'm currently working on a gateway using a very poor but strong configuration of free radius. This gateway has installed the minimal configuration to made it

Re: Max TNT not respecting my Default profile

2004-07-02 Thread Alan DeKok
Drew Weaver [EMAIL PROTECTED] wrote: Sorry to bother you guys with this.. I just noticed that this command Ascend-Idle-Limit = 900 appears to have no effect on the length of time our Ascend Max TNT will allow a user to be idle. So use the standard attribute Idle-Timeout Alan DeKok.

Re: Acct-Start-Time and radclient ??

2004-07-02 Thread Alan DeKok
nsinit [EMAIL PROTECTED] wrote: I set the following attribute when using the radtest to send accounting-requet packets: echo Acct-Start-Time = \2002-06-23 18:33:23\ The format of the date is very particular. Look at the date string the server prints out, and give it

Re: ippool with non subsequent address ranges

2004-07-02 Thread Daniel Eyholzer
On Thu, 1 Jul 2004 12:27:22 +0300 (EEST) Kostas Kalevras [EMAIL PROTECTED] wrote: Do a cvs update on the ippool module or wait for tomorrow's CVS snapshot. Then you can set Pool-Name to DEFAULT and it will match all of the ippool module instances. I have tested the updated ippool module, but

Problems with certificate generation for EAP-TLS

2004-07-02 Thread Cool Man
Hi, I have followed the instruction of Freeradius eap-tls how to by Raymond McKay. When I run the certificate generation scripts I get these errors and the created file root.pem and root.pl2 both are empty. Is there any one who encountered with this problem.

Re: ippool with non subsequent address ranges

2004-07-02 Thread Kostas Kalevras
On Fri, 2 Jul 2004, Daniel Eyholzer wrote: On Thu, 1 Jul 2004 12:27:22 +0300 (EEST) Kostas Kalevras [EMAIL PROTECTED] wrote: Do a cvs update on the ippool module or wait for tomorrow's CVS snapshot. Then you can set Pool-Name to DEFAULT and it will match all of the ippool module

Re: Problems with certificate generation for EAP-TLS

2004-07-02 Thread Michael Schwartzkopff
-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Am Freitag, 2. Juli 2004 16:19 schrieb Cool Man: Hi, I have followed the instruction of Freeradius eap-tls how to by Raymond McKay. When I run the certificate generation scripts I get these errors and the created file root.pem and root.pl2

Re: Why radius when I have LDAP?

2004-07-02 Thread Kostas Kalevras
On Thu, 1 Jul 2004, Hans wrote: Hello, This may seem a little strange question. I have my Linux(suse8.2) boxes handle login requests using an LDAP server. The LDAP provides all that's needed, that is username/password, userid, groupid, homedir etc. I could use radius to authenticate

RE: Max TNT not respecting my Default profile

2004-07-02 Thread Drew Weaver
Alan, I assume Idle-Timeout = 900 Means that after 900 seconds (15min) of the connection being idle it will drop? I have it set that way right now and this connection I made has been active for 44 minutes (idle) Any ideas? -Drew -Original Message- From: Alan DeKok [mailto:[EMAIL

Re: LDAP and Active Directory

2004-07-02 Thread Dustin Doris
Hi, This may look like a reccuring question, but I've checked the whole mailing list and many other websites but this isn't clear to me. I'm currently working on a gateway using a very poor but strong configuration of free radius. This gateway has installed the minimal configuration to

Re: Max TNT not respecting my Default profile

2004-07-02 Thread Chris Brotsos
On Jul 2, 2004, at 10:40 AM, Drew Weaver wrote: Alan, I assume Idle-Timeout = 900 Means that after 900 seconds (15min) of the connection being idle it will drop? I have it set that way right now and this connection I made has been active for 44 minutes (idle) You might have a setting on the

Re: Rejecting connections

2004-07-02 Thread Alan DeKok
Lew A [EMAIL PROTECTED] wrote: To do this I had to setup some xlat functions, but we're having a problem. If say we have a customer tester, he doesn't have any static assignments, but he decided to connect to us with a P, it would return a static assignment of 255.255.255.255 (basically a null

Re: Rejecting connections

2004-07-02 Thread Lew A
On Fri, 2 Jul 2004, Alan DeKok wrote: Lew A [EMAIL PROTECTED] wrote: To do this I had to setup some xlat functions, but we're having a problem. If say we have a customer tester, he doesn't have any static assignments, but he decided to connect to us with a P, it would return a static

Re: Max TNT not respecting my Default profile

2004-07-02 Thread Alan DeKok
Drew Weaver [EMAIL PROTECTED] wrote: I assume Idle-Timeout = 900 Means that after 900 seconds (15min) of the connection being idle it will drop? It should. I have it set that way right now and this connection I made has been active for 44 minutes (idle) Any ideas? Ask the NAS

Re: Max TNT not respecting my Default profile

2004-07-02 Thread Joshua Coombs
Means that after 900 seconds (15min) of the connection being idle it will drop? It should. I have it set that way right now and this connection I made has been active for 44 minutes (idle) Ran into something similar on a different TAOS varient, a Stinger. Turns out you can control how the

Re: ERROR freeradius compilation

2004-07-02 Thread Alan DeKok
apellido jr., wilfredo p. [EMAIL PROTECTED] wrote: here's the new one: ../../lib/.libs/libradius.so: undefined reference to `pthread_mutex_unlock' ../../lib/.libs/libradius.so: undefined reference to `pthread_mutex_lock' ../../lib/.libs/libradius.so: undefined reference to

Problems with Calling-Station-Id and Using the exec module

2004-07-02 Thread Grant, Alastair Ian
Hello, We are using freeradius to do authentication on username/password as well as MAC Address. Users are stored in an LDAP directory and authenticating using an LDAP bind (with EAP-TTLS/PAP) and using the checkItem to check the Calling-Station-Id (MAC). I had everything working well without

ldap.attrmap core dump

2004-07-02 Thread Lew A
Hello, Not a big deal to me, but I was screwing around with the ldap.attrmap, and i removed all but one replyItem (basically because i have a service that we only need on reply from, and the rest of everything can be ignored... anyways, it core dumped. It works fine with only one checkItem. let

Re: ippool with non subsequent address ranges

2004-07-02 Thread Kostas Kalevras
On Fri, 2 Jul 2004, Daniel Eyholzer wrote: On Thu, 1 Jul 2004 12:00:21 +0200 Daniel Eyholzer [EMAIL PROTECTED] wrote: Thanks for your reply, Kostas, I will try that. But which pool will it choose first by default, will it be the first one listed in the post-auth section? I'm asking that

RE: Freeradius using leap and ldap

2004-07-02 Thread Tony Sciortino
Original Message Follows From: Tony Sciortino [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Freeradius using leap and ldap Date: Thu, 1 Jul 2004 00:24:14 -0400 I am very close to getting freeradius to work with leap and ldap but I can not seem to close the