strange parser bug.

Hello. I'm installed FreeRADIUS 1.0.1. And got strange parse config bug If i'm used section from wrong.conf., i'm got : reread_config: reading radiusd.conf Config: including file: /etc/raddb/clients.conf Config: including file: /etc/raddb/cakesql.conf /etc/raddb/radiusd.conf[195]: Unexpected

Re: Problem with nostrip

Alan DeKok wrote: George Chelidze [EMAIL PROTECTED] wrote: as I haven't specified nostrip directive I thought radius would query database with User-Name = 'test' but it uses User-Name = '[EMAIL PROTECTED]'. I looked at debug output and I found that 'test' is assigned to Stripped-User-Name,

Double quoting in sql?

Hi! I've upgraded recently from 0.9.3 to 1.0.1. There seems to be one small problem in the sql module: a Username seems to be quoted two times, first when setting sql_user_name, then when doing the xlat on the whole query. Am I just missing a config change? From the sample config I can see no

EAP-GTC possible outside EAP-PEAP or EAP-TTLS ?

Hi is it possible to use EAP-GTC outside EAP-PEAP or EAP-TTLS ? My Idea would be to first authenticate user and pw over eap-md5 and then in a second step to send a GTC challenge and controll the GTC answer. Anyone has an idea ? Thank you in advance ! - List info/subscribe/unsubscribe? See

Re: Double quoting in sql?

On Fri, Sep 24, 2004 at 09:39:07AM +0200, Oliver Graf wrote: I've upgraded recently from 0.9.3 to 1.0.1. There seems to be one small problem in the sql module: a Username seems to be quoted two times, first when setting sql_user_name, then when doing the xlat on the whole query. Am I just

Re: Double quoting in sql?

On Fri, Sep 24, 2004 at 09:39:07AM +0200, Oliver Graf wrote: Hi! I've upgraded recently from 0.9.3 to 1.0.1. There seems to be one small problem in the sql module: a Username seems to be quoted two times, first when setting sql_user_name, then when doing the xlat on the whole query. IIRC

Re: Double quoting in sql?

On Fri, Sep 24, 2004 at 02:31:47PM +0400, Alexander M. Pravking wrote: On Fri, Sep 24, 2004 at 09:39:07AM +0200, Oliver Graf wrote: Hi! I've upgraded recently from 0.9.3 to 1.0.1. There seems to be one small problem in the sql module: a Username seems to be quoted two times, first when

Re: Free-Radius install on Solaris

Mitchell, Michael schrieb: Hi Steven, First things to check: 1) Did the eap module/sub modules actually build? Check the installation lib directory for rlm_eap*. I found that using the Sun Workshop C compiler, several modules do not build as they rely on gcc features (in particular

Re: Double quoting in sql?

On Fri, Sep 24, 2004 at 12:39:09PM +0200, Oliver Graf wrote: It does not seem that the change which causes this is in rlm_sql.c. I guess it is to search in variable expansion of main/xlat.c. But I currently fail to see the change between 0.9.3 and 1.0.1 where this happened... perhaps I will

Re: Double quoting in sql?

On Fri, Sep 24, 2004 at 03:04:56PM +0400, Alexander M. Pravking wrote: On Fri, Sep 24, 2004 at 12:39:09PM +0200, Oliver Graf wrote: It does not seem that the change which causes this is in rlm_sql.c. I guess it is to search in variable expansion of main/xlat.c. But I currently fail to see

Proxy accounting problem

Hi, i'm having a proxy problem with newer freeradius versions. While 0.9.2 as a proxy send an accounting response for a request which wasn't to be proxied and with an empty accounting section (in radiusd.conf), newer versions at least everything = snapshot 2004/21/06 and = 1.0.1 just ignore

RE: Free-Radius install on Solaris

Subject: RE: Free-Radius install on Solaris Date: Fri, 24 Sep 2004 09:49:29 +1000 From: Mitchell, Michael [EMAIL PROTECTED] To: [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] Hi Steven, First things to check: 1) Did the eap module/sub modules actually build? Check the installation lib directory

rlm_eap_tls compilation problem

Hi, anybody can help me with the compilation of rlm_eap_tls ? Freeradius version is 0.9.3, latest-snapshot of openssl: openssl-0.9.7-stable-SNAP-20040923.tar.gz $ LDFLAGS "-L/usr/local/openssl/lib" CPPFLAGS="-I/usr/local/openssl/include" ./configure --localstatedir=/var --sysconfdir=/etc

Re: strange parser bug.

Norguhtar [EMAIL PROTECTED] wrote: If i'm used section from right.conf, i'm got : /usr/sbin/check-radiusd-config: line 55: 14747 Killed Don't run check-radiusd-config. It won't work in 1.0.x, and should have been deleted. Alan DeKok. - List info/subscribe/unsubscribe?

Re: Problem with nostrip

George Chelidze [EMAIL PROTECTED] wrote: Please read sql.conf, and look for sql_user_name sql_user_name = %{User-Name} but As I understatnd User-Name should be equal Stripped-User-Name, seems I am wrong... No. They are different attributes. Go back and read the REST of sql.conf,

Re: Double quoting in sql?

Oliver Graf [EMAIL PROTECTED] wrote: I've upgraded recently from 0.9.3 to 1.0.1. There seems to be one small problem in the sql module: a Username seems to be quoted two times, first when setting sql_user_name, then when doing the xlat on the whole query. Am I just missing a config change?

Re: EAP-GTC possible outside EAP-PEAP or EAP-TTLS ?

=?iso-8859-1?Q?Geissb=FChler=2C_Hannes?= [EMAIL PROTECTED] wrote: is it possible to use EAP-GTC outside EAP-PEAP or EAP-TTLS ? Yes. But it hasn't been well tested. My Idea would be to first authenticate user and pw over eap-md5 and then in a second step to send a GTC challenge and controll

Re: Proxy accounting problem

Stephan Jaeger [EMAIL PROTECTED] wrote: i'm having a proxy problem with newer freeradius versions. While 0.9.2 as a proxy send an accounting response for a request which wasn't to be proxied and with an empty accounting section (in radiusd.conf), newer versions at least everything =

Re: rlm_eap_tls compilation problem

Lara Adianto [EMAIL PROTECTED] wrote: anybody can help me with the compilation of rlm_eap_tls ? Freeradius version is 0.9.3, latest-snapshot of openssl: openssl-0.9.7-stable-SNAP-20040923.tar.gz Why are you using 0.9.3? Use 1.0.1 Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Problem with nostrip

Hello Alan, Alan DeKok wrote: George Chelidze [EMAIL PROTECTED] wrote: Please read sql.conf, and look for sql_user_name sql_user_name = %{User-Name} but As I understatnd User-Name should be equal Stripped-User-Name, seems I am wrong... No. They are different attributes. I know they are

Re: Free-Radius install on Solaris

On Fri 24-Sep-04 at 1032 EDT, Alan DeKok wrote: Stephen Donovan [EMAIL PROTECTED] wrote: Check the installation lib directory for rlm_eap*. I found that using the Sun Workshop C compiler, several modules do not build as they rely on gcc features (in particular zero length arrays). Can

eap-smartcard

Hi, Somebody known if freeradius have (plans for) support it: http://ietfreport.isoc.org/ids/draft-urien-eap-smartcard-06.txt Thanks, ./nelson -murilo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxy accounting problem

Hi, thanks, for your fast answer. On Fri, 2004-09-24 at 10:29 -0400, Alan DeKok wrote: Stephan Jaeger [EMAIL PROTECTED] wrote: i'm having a proxy problem with newer freeradius versions. While 0.9.2 as a proxy send an accounting response for a request which wasn't to be proxied and with

Re: Free-Radius install on Solaris

Mike Markowski [EMAIL PROTECTED] wrote: I think this was the only one of those we ran into on Solaris: src/modules/rlm_passwd/rlm_passwd.c, line 33 (in v1.0.1), var 'field': Fixed, thanks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Proxy accounting problem

Stephan Jaeger [EMAIL PROTECTED] wrote: But it's not possible to get only one detail file with the local tickets? Yes. You can set Acct-Type for the non-proxied requests, and have a sub-section of accounting{}, with that Acct-Type, and put detail inside of it. Alan DeKok. - List

Re: Proxy accounting problem

On Fri, 2004-09-24 at 11:10 -0400, Alan DeKok wrote: Stephan Jaeger [EMAIL PROTECTED] wrote: But it's not possible to get only one detail file with the local tickets? Yes. You can set Acct-Type for the non-proxied requests, and have a sub-section of accounting{}, with that Acct-Type,

accounting errors with pppd

I got darkness on this question Thursday, thought I'd give it another try today?? We are running freeradius 1.0.0 on an AMD box. We are authenticating PPD session on the local machine. PPP Users are getting authenticated and allowed through the box: however, when the PPP session goes down

Re: Wireless Network

You can use a wireless access point that supports 802.1q. I know that the HP J8130A WAP 420 supports this, and I believe the Cisco's and some 3Com do as well. Assign your private network users some additional attributes. For example, the following 3 additional attributes will direct the WAP to

Re: accounting errors with pppd

Marco C. Coelho [EMAIL PROTECTED] wrote: I got darkness on this question Thursday, thought I'd give it another try today?? It's a problem with PPPd. Nothing you do to FreeRADIUS can fix it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: raddump RADIUS packet analyzer

Jonathan Moore [EMAIL PROTECTED] wrote: I'd like to announce the availability of the raddump RADIUS packet analyzer which may be useful for debugging your RADIUS infrastructure. Please see the project homepage at https://sourceforge.net/projects/raddump/ for more details. Doesn't tcpdump

Re: eap-smartcard

Nelson, maybe this link help you, http://www.infres.enst.fr/~urien/security/ Badra - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Segfault in radrelay on FR 1.0.1

Kevin Bonner [EMAIL PROTECTED] wrote: I sent radrelay a TERM and saw that there were a few records left in the detail file that needed to be pushed. Installed version 1.0.1, and radrelay kept segfaulting when trying to start. Running through gdb, I tracked it down to an invalid entry in the

Re: raddump RADIUS packet analyzer

-BEGIN PGP SIGNED MESSAGE- Hash: SHA1 Ah, you are right -- tcpdump does decode them (I hadn't realized this when I wrote raddump). If I may say so, though, having just looked at tcpdump's output, it doesn't decode them in a way that's particularly easy to read. That's clearly a matter

Secret as variable

Hello, has Secret its variable? Alan DeKok wrotes that every available variable is showed by freeradius -x, but User-Password (as well as Secret?) is not showed in debug. Maybe because of security. I red doc/variables.txt also and it looks not. Regards, Zdenek Svarc - List

no User-Password attribute with Digest

Hello, I'm setting up a SER (sip express router) box. I've got FreeRadius 0.9.3 using MySQL for the backend. I've uncommented the digest lines in the radiusd.conf file and appended the dictionary.ser to the main dictionary file. Here are my tables: radcheck: UserName: [EMAIL PROTECTED]

Re: accounting errors with pppd

Hi, PPP Users are getting authenticated and allowed through the box: however, when the PPP session goes down PPP is not clearing them in RadAcct. They are allowed back in, and a radwho shows two sessions for the same user, but a ps on the system only shows the current actually