RE: Handler failed in EAP/peap

2004-09-09 Thread Hugo Sousa
Sorry for the delayed reply. I didn't understand where the problem is. Anyone could be kind to help me??! Regards, Hugo Sousa SysAdmin / NetworkAdmin http://www.netsystems.pt Portugal -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Willey Kurt D

bugreport: freeradius 1.0.0 crash with ippool if module was not built

2004-09-09 Thread Pasi Kärkkäinen
Hi! I just installed freeradius 1.0.0 on Debian GNU/Linux 3.0 (woody) and I didn't remember to install libgdbm-dev so ippool-module was not built. I didn't notice this, and tried to use ippools. I specified them in the radiusd.conf and the result is that freeradius crashes (segmentation fault)

Re: Freeradius-Users digest, Vol 1 #3714 - 7 msgs

2004-09-09 Thread zack musa
I'm sorry becoze I'm a beginner and delivered u guys this question. I tried to use mysql for my freeradius 0.9.2 after I entered radiusd -X, something like this occur. rlm_sql_mysql: Couldn't connect socket to MySQL server [EMAIL PROTECTED]:radius . . rlm_sql_mysql: Mysql error 'Access denied for

Re: SegFault/missing libssl for EAP/TLS

2004-09-09 Thread Stefan . Neis
Robert Schultz schrieb: Hello. I am trying to run freeRADIUS 1.0.0 with openssl 0.9.7d. While doing ./configure --with-openssl-libraries=/usr/local/lib --with-openssl-includes= /usr/local/include or ./configure --with-openssl-libraries=/usr/local/openssl/lib --with-openssl-i

Re: SegFault/missing libssl for EAP/TLS

2004-09-09 Thread Robert Schultz
From: Stefan Neis Robert Schultz schrieb: Hello. I am trying to run freeRADIUS 1.0.0 with openssl 0.9.7d. While doing ./configure --with-openssl-libraries=/usr/local/lib --with-openssl-includes= /usr/local/include or ./configure --with-openssl-libraries=/usr/local/openssl/lib --with-openssl-i

Class attribute

2004-09-09 Thread Lopez, A.
Hello all, I have redefined the 'Class' attribute as a string in the /etc/freeradius/dictionary file so that the predefined attribute (octets) is overridden, adding the following line: ATTRIBUTE Class 25 string However, it seems that this change it is not taken into account and when

Re: bugreport: freeradius 1.0.0 crash with ippool if module was not built

2004-09-09 Thread Alan DeKok
Pasi =?iso-8859-1?Q?K=E4rkk=E4inen?= [EMAIL PROTECTED] wrote: I didn't notice this, and tried to use ippools. I specified them in the radiusd.conf and the result is that freeradius crashes (segmentation fault) while starting.. It's a libltdl thing. Don't worry about it. Alan DeKok. -

Re: Class attribute

2004-09-09 Thread Alan DeKok
Lopez, A. [EMAIL PROTECTED] wrote: I have redefined the 'Class' attribute as a string in the /etc/freeradius/dictionary file so that the predefined attribute (octets) is overridden, adding the following line: Why? ATTRIBUTE Class 25 string However, it seems that this

rlm_eap: Handler failed in EAP/peap

2004-09-09 Thread Hugo Sousa
Title: rlm_eap: Handler failed in EAP/peap Hello, I'm trying to authenticate a XP SP2. I'm using, for testing only, the root username and password. And the result is on the bottom. What could be the problem? Waking up in 6 seconds... rad_recv: Access-Request packet from host

Re: rlm_eap: Handler failed in EAP/peap

2004-09-09 Thread Michael Griego
Try sending the *entire* debug output. You're only sending the part that occurs *after* the *real* error. The true error is happening earlier in the authentication sequence. --Mike On Thu, 2004-09-09 at 08:21, Hugo Sousa wrote: Hello, I'm trying to authenticate a XP SP2. I'm using, for

Re: radutmp is not written

2004-09-09 Thread markus . winkler
Alan, The server writes data to radutmp ONLY if it receives accounting packets. Check that the server is receiving accounting packets... checked it and found, that the firewall blocked port 1813... Didn't know that. Now the radutmp-file ist maintained very well. One more question, as

RE: rlm_eap: Handler failed in EAP/peap

2004-09-09 Thread Hugo Sousa
Any ideia now? Here is the full log. Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file: /usr/local/etc/raddb/clients.conf Config: including file: /usr/local/etc/raddb/snmp.conf

Re: Bug in valuepair.c paircmp?

2004-09-09 Thread Alan DeKok
Mitchell, Michael [EMAIL PROTECTED] wrote: However, in valuepair.c we have: regmatch_t rxmatch[9]; compare =3D regexec(reg, (char *)auth_item-strvalue, 16, rxmatch, 0); Ie nmatch is 16, but the size of the pmatch array is only 9. This causes a bus error

Re: rlm_ippool and NAS-Port missing in access-request

2004-09-09 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I understand there is quite a lot of Radius Clients (i.e. NAS) sending some other standard Radius attributes instead of the NAS-Port in Access Request. So, why not implement this feature en significantly expand the application area of this powerfull Radius Server ?

RE: rlm_eap: Handler failed in EAP/peap

2004-09-09 Thread Michael Griego
rlm_mschap: No User-Password configured. Cannot create LM-Password. rlm_mschap: No User-Password configured. Cannot create NT-Password. rlm_mschap: Told to do MS-CHAPv2 for root with NT-Password rlm_mschap: FAILED: No NT/LM-Password. Cannot perform authentication. rlm_mschap: FAILED:

RE: rlm_eap: Handler failed in EAP/peap

2004-09-09 Thread Hugo Sousa
How can I do that in the users file? The root user is a Linux user. Btw... How can I redirect the users from a REALM to an LDAP server? Regards Hugo Sousa SysAdmin / NetworkAdmin http://www.netsystems.pt Portugal -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL

RE: rlm_ippool and NAS-Port missing in access-request

2004-09-09 Thread v . a . leikin
Well, this exactly what I'd like to do: to build a one and to get it working... But I need some help from developers. So who wants cooperate ? Any help/hints are welcome Thanks Victor -Oorspronkelijk bericht- Van: Alan DeKok [mailto:[EMAIL PROTECTED] Verzonden: donderdag 9 september

RE: rlm_eap: Handler failed in EAP/peap

2004-09-09 Thread Guy Davies
Hi Hugo, You *can't* use SYSTEM passwords to authenticate using MS-CHAPv2. MS-CHAPv2 requires the AAA server to be able to obtain the clear text password (from a local file or some other source) or a password in NT-Password format. If it cannot get them, then it is unable to check that

LDAP

2004-09-09 Thread Hugo Sousa
Title: LDAP Hi, I have an Active Directory (LDAP) domain called office.systems.pt . How can I configure FR to validate users against this Windows 2000 AD Server? Can you show me all the configs that I have to make on the .conf files? I'm trying to do this from scratch but it's very

Re: rlm_ippool and NAS-Port missing in access-request

2004-09-09 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Well, this exactly what I'd like to do: to build a one and to get it working... But I need some help from developers. So who wants cooperate ? Any help/hints are welcome http://lists.cistron.nl/pipermail/freeradius-users/2004-June/032911.html Alan DeKok. - List

Web Interface -- radius.cgi

2004-09-09 Thread Marco C. Coelho
I've searched the archives and didn't find much on web interfaces. We're trying to move from IC-Radius to FreeRadius. We looked at DialupAdmin and didn't think the interface would work well with our front office staff. Does anyone use IC-Radius radius.cgi to maintain the mysql users database

Re: Web Interface -- radius.cgi

2004-09-09 Thread Kostas Kalevras
On Thu, 9 Sep 2004, Marco C. Coelho wrote: I've searched the archives and didn't find much on web interfaces. We're trying to move from IC-Radius to FreeRadius. We looked at DialupAdmin and didn't think the interface would work well with our front office staff. Could you explain why you

Re: SegFault/missing libssl for EAP/TLS

2004-09-09 Thread Alan DeKok
Robert Schultz [EMAIL PROTECTED] wrote: I am a bit confused about the openssl-dirs, as /usr/local/openssl/lib is empty. Then you probably don't have the right version of OpenSSL installed. What is supposed to be inside the path mentioned in CFLAGS (or --with-openssl-[libraries/includes]?

Re: radutmp is not written

2004-09-09 Thread Alan DeKok
[EMAIL PROTECTED] wrote: But if I'm using Multilink PPP, then in 9 of 10 cases I'm still allowed to use both channels - and that's not want I want. That's multilink, and logically only 1 session. I searched and found the parameter Port-Limit, but it seems, that it this doesn't have any

LDAP (continued...)

2004-09-09 Thread Hugo Sousa
Title: LDAP (continued...) My Windows 2000 domain is office.netsystems.pt. The user I'm using is administrator. Is this wrong? ldap { server = 192.168.2.1 identity = cn=administrator,dc=office,dc=netsystems,dc=pt password = password basedn = dc=office,dc=netsystems,dc=PT

Re: LDAP (continued...)

2004-09-09 Thread Tiago Fernandes
viva, On Thu, 9 Sep 2004 19:06:22 +0100 Hugo Sousa [EMAIL PROTECTED] wrote: My Windows 2000 domain is office.netsystems.pt. The user I'm using is administrator. Is this wrong? ldap { server = 192.168.2.1 identity =

Re: Web Interface -- radius.cgi

2004-09-09 Thread Marco C. Coelho
Kostas Kalevras wrote: On Thu, 9 Sep 2004, Marco C. Coelho wrote: I've searched the archives and didn't find much on web interfaces. We're trying to move from IC-Radius to FreeRadius. We looked at DialupAdmin and didn't think the interface would work well with our front office staff. Could

RE: LDAP (continued...)

2004-09-09 Thread sousa.hugo
I'm using the Domain ADMINISTRATOR account, so it should have access to everything. I think the problem is in one of this lines: identity = cn=administrator,dc=office,dc=netsystems,dc=pt password = password basedn = dc=office,dc=netsystems,dc=PT Is the syntax incorrect? My domain is called

radiusd only starting a single instance?

2004-09-09 Thread James Nedila
OS: Debian Linux 3.0 Freeradius version: snapshot-20040506 snapshot-20040909 For some reason, radiusd has decided to run in a single instance, instead of starting multiple servers. Here is the relevant thread-pool configuration from radiusd.conf: thread pool { start_servers = 5

Cant Get Called Number

2004-09-09 Thread Ugur GUNCER
Hi Every, I have a problem with getting called number Here is my radius debug log Acct-Session-Id = 0006AFF5 Calling-Station-Id = 5357879878 Called-Station-Id = 35 h323-setup-time = h323-setup-time=*09:20:26.801 UTC Thu Apr 11 2002 h323-gw-id =

RE: LDAP (continued...)

2004-09-09 Thread Dustin Doris
On Thu, 9 Sep 2004, sousa.hugo wrote: I'm using the Domain ADMINISTRATOR account, so it should have access to everything. I think the problem is in one of this lines: identity = cn=administrator,dc=office,dc=netsystems,dc=pt password = password basedn = dc=office,dc=netsystems,dc=PT Yes

RE: LDAP (continued...)

2004-09-09 Thread sousa.hugo
I don't have an LDAP browser. It's a simple Windows 2000 Server with AD installed. How can I install the LDAP browser so that my FR works? Please give me an ideia :-) -Original Message- From: [EMAIL PROTECTED] on behalf of Dustin Doris Sent: Fri 9/10/2004 1:27

Re: rlm_ippool and NAS-Port missing in access-request

2004-09-09 Thread Alexander Serkin
I can live without it. Already. -- Alexander Alan DeKok wrote: [EMAIL PROTECTED] wrote: Well, this exactly what I'd like to do: to build a one and to get it working... But I need some help from developers. So who wants cooperate ? Any help/hints are welcome