Re: Authorization via LDAP and Files, Authentication via LDAP

2004-10-15 Thread Michael Kopp
Alan DeKok aland[AT]ox.org wrote: Michael Kopp michael.kopp[AT]gmx.net wrote: radiusd.conf[1559] Unknown configuration directive ldap in authorize section. ... ldap{ Try putting a space in between ldap and { Alan DeKok. hmm, same error as before , ...

unsubscribe

2004-10-15 Thread Abhijit Lahiri
- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

sql group checks

2004-10-15 Thread Alexander Serkin
Hi. could anybody explain me what exactly FR does with group checks working with SQL (Oracle in my case) ? I see group_membership_query in sql.conf, but i do not see that FR uses it in debug: rad_recv: Access-Request packet from host 127.0.0.1:50893, id=174, length=78 User-Name = [EMAIL

Concurrent logins...

2004-10-15 Thread Evert Meulie
Hi everyone! Is it possible within freeradius and/or dialup_admin to define that open sessions (if any) of users who are a member of certain group get closed when a new one gets opened? We sometimes end up with more than one session for some users here, and that kinda screws up the

Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Ahmad Cheikh Moussa
Hi! I have freeradius 1.0.1 on Solaris 9. I have problems authenticating users via Cisco NAS and via Cisco Access Points. The radius config ran under freeradius 0.9.3 without any problem. Here the debug outputs : users file : nutest1 Auth-Type:= Local, User-Password == geheim Service-Type

Re: Concurrent logins...

2004-10-15 Thread Kostas Kalevras
On Fri, 15 Oct 2004, Evert Meulie wrote: Hi everyone! Is it possible within freeradius and/or dialup_admin to define that open sessions (if any) of users who are a member of certain group get closed when a new one gets opened? We sometimes end up with more than one session for some users

Re: sql group checks

2004-10-15 Thread Kostas Kalevras
On Fri, 15 Oct 2004, Alexander Serkin wrote: Hi. could anybody explain me what exactly FR does with group checks working with SQL (Oracle in my case) ? I see group_membership_query in sql.conf, but i do not see that FR uses it in debug: rad_recv: Access-Request packet from host

Re: Concurrent logins...

2004-10-15 Thread Evert Meulie
Kostas Kalevras wrote: On Fri, 15 Oct 2004, Evert Meulie wrote: Hi everyone! Is it possible within freeradius and/or dialup_admin to define that open sessions (if any) of users who are a member of certain group get closed when a new one gets opened? We sometimes end up with more than one session

RE: Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Mitchell, Michael
Here's two hints: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user The authorize section didn't find the user anywhere (eg in etc/raddb/users file), or anything else to tell it what authentication method to use for the user. And: Login

Re: Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Ahmad Cheikh Moussa
Hi! The authorize section didn't find the user anywhere (eg in etc/raddb/users file), or anything else to tell it what authentication method to use for the user. The problem is not the authorize section. The user got an reject, because in the user-password stand something strange and not the

user lost connectivity

2004-10-15 Thread Edgars
Hello, is there anyway how to write acctstoptime when the user is loosing connectivity with his NAS? After this happens the user is promted to login again but the previous acctstoptime stays blank. Edgars - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: user lost connectivity

2004-10-15 Thread Kyriaki Gali
This is a problem i don't know if there is a way to fix this but I suggest in radacct table to insert a field to get the disconnect cause, so if you haven't AcctStopTime you will know why. Or check for how long your cdr is without an AcctStopTime. Kyriaki Gali, IT Applications Specialist

[Fwd: Re: user lost connectivity]

2004-10-15 Thread Edgars
i already have such a filed in radacct and it's staying to NULL value if this happens. Edgars Kyriaki Gali wrote: This is a problem i don't know if there is a way to fix this but I suggest in radacct table to insert a field to get the disconnect cause, so if you haven't AcctStopTime you will know

Re: Re: user lost connectivity]

2004-10-15 Thread Kyriaki Gali
yes i know it is a problem and i don't know if we can do something else. I have the same problem also so if you find anything please let me know. regards, Kyriaki Gali, IT Applications Specialist Kinetix Tele.com Support Center, Tel Fax: +30 2310 256140 GSM: +30 6947 723737

Re: Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Stefan . Neis
Ahmad Cheikh Moussa schrieb: Believe me, I checked the shared secret one hundred time. The shared secret is correct. I still believe that there is a problem to decode the send password. Which still hints at a bad secret... I don't really know how sensitive your cisco box or even freeradius

Re: Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Stefan . Neis
Ahmad Cheikh Moussa schrieb: Believe me, I checked the shared secret one hundred time. The shared secret is correct. I still believe that there is a problem to decode the send password. Which still hints at a bad secret... I don't really know how sensitive your cisco box or even freeradius

Re: Concurrent logins...

2004-10-15 Thread Kostas Kalevras
On Fri, 15 Oct 2004, Evert Meulie wrote: Kostas Kalevras wrote: On Fri, 15 Oct 2004, Evert Meulie wrote: Hi everyone! Is it possible within freeradius and/or dialup_admin to define that open sessions (if any) of users who are a member of certain group get closed when a new one gets

Re: sql group checks

2004-10-15 Thread Kostas Kalevras
On Fri, 15 Oct 2004, Alexander Serkin wrote: Hi. could anybody explain me what exactly FR does with group checks working with SQL (Oracle in my case) ? I see group_membership_query in sql.conf, but i do not see that FR uses it in debug: group_membership_query is used for Sql-Group attribute

Re: Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Ahmad Cheikh Moussa
Hi! The shared secret is test123. I don't think that this password is a problem. All radius files are edited via vi editor. The same config with freeradius 0.9.3 runs without any problems. I don't think that suddenly the Cisco NAS do something other than before with freeradius 0.9.3. Regards,

Re: sql group checks

2004-10-15 Thread Alexander Serkin
Kostas Kalevras wrote: On Fri, 15 Oct 2004, Alexander Serkin wrote: Hi. could anybody explain me what exactly FR does with group checks working with SQL (Oracle in my case) ? I see group_membership_query in sql.conf, but i do not see that FR uses it in debug: group_membership_query is used for

Re: sql group checks

2004-10-15 Thread Michael Griego
What version of FR are you using? If you are using a current CVS snapshot, then the group_membership_query is actually used to determine group membership during SQL authorization as well. With a modified group_membership_query using the PRIORITY column to sort the results (as can be seen in the

DSLAM equipment

2004-10-15 Thread Bruce Bushby
looking for anybody who has DSLAM experience at any level who could answer a few questions? I'm after example AAA data in order to understand how ADSL auths to the DSLAM equipment ; and if I purchase a VPC from, say British Telecom, will they update every DSLAM with the new VPC details? I ask

Re: setting User-Name to 'modified' mac address

2004-10-15 Thread Alan DeKok
Jose Guevarra [EMAIL PROTECTED] wrote: I have freeradius authenticating mac addresses listed in a MySQL database. It works! But, the mac address passed by the client(hp 2650) is in the form 00-00-00-00-00-00. I set the 'user name' to the 'calling station id' in the 'hints' file like so

Re: Installing freeRadius on RH Linux 9.0

2004-10-15 Thread Alan DeKok
Gene Rouse [EMAIL PROTECTED] wrote: When I run make on freeRADIUS 1.0.1 I get all kinds of missing attribute warnings. Are you willing to post the exact errors, or do you want to make us guess? I've never seen any kind of errors like the ones you're talking about. The make program

Re: Authorization via LDAP and Files, Authentication via LDAP

2004-10-15 Thread Alan DeKok
Michael Kopp [EMAIL PROTECTED] wrote: Try putting a space in between ldap and { hmm, same error as before , Weird. It's supposed to work. I'll take a look at it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Authentication erros on freeradius 1.0.1 on Solaris 9

2004-10-15 Thread Alan DeKok
Ahmad Cheikh Moussa [EMAIL PROTECTED] wrote: The shared secret is test123. I don't think that this password is a problem. All radius files are edited via vi editor. The same config with freeradius 0.9.3 runs without any problems. I don't think that suddenly the Cisco NAS do something other

Installing freeRadius on RH Linux 9.0

2004-10-15 Thread Gene Rouse
Below I have included the error messages. I get. gmake[11]: Entering directory `/root/freeradius-1.0.1/src/modules/rlm_sql/drivers/rlm_sql_mysql' [ xrlm_sql_mysql = x ] || /root/freeradius-1.0.1/libtool --mode=install /root/freeradius-1.0.1/install-sh -c -c rlm_sql_mysql.la

RE: Installing freeRadius on RH Linux 9.0

2004-10-15 Thread Berry, William
Title: RE: Installing freeRadius on RH Linux 9.0 Gene .. I had the same type errors until I made sure the mysql_devel RPM was installed .. Even then my make process completed with messages such as sql_mysql.o sql_mysql.c:39:20: errmsg.h: No such file or directory sql_mysql.c:40:19:

RE: PEAP with MSCHAPV2 (windows xp remembers the username/passwor d in cache)

2004-10-15 Thread Khurram Jahangir
Thanks alot Peter, it worked for me. I really appreciate your help. Regards Khurram --- Peter Hicks [EMAIL PROTECTED] wrote: No it is not possible, according to MS at least. Their article is at http://support.microsoft.com/default.aspx?scid=kb;en-us;823731 You could create a login script

Re: Authorization via LDAP and Files, Authentication via LDAP

2004-10-15 Thread Michael Kopp
Hi all, I installed Freeradius 0.9.3 on the same box, and did a test for the notfound=return and it worked in that version, in Version 1.0.1 it is not working, could somebody ackknowledge that ? If it is a bug, could somebody fix it, (maybe for FR 1.0.2) or give me some hints at which files I

RE: Installing freeRadius on RH Linux 9.0

2004-10-15 Thread Gene Rouse
No. -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Friday, October 15, 2004 4:04 PM To: [EMAIL PROTECTED] Subject: Re: Installing freeRadius on RH Linux 9.0 Gene Rouse [EMAIL PROTECTED] wrote: Below I have included