Re: strange Exec-Program problem

2005-05-03 Thread Edgars
from the debug mode i'm getting the following: radius_xlat: '/var/radius/scripts/count.php edgars 10.5.8.103' Exec-Program: /var/radius/scripts/count.php edgars 10.5.8.103 Exec-Program output: Exec-Program: FAILED to execute /var/radius/scripts/count.php: No such file or directory

accounting question

2005-05-03 Thread luke
Hi, I have a question about radius, Is there anyone on this list that can help? I'm sure this is a very common request. I have a situation where radius accounting is logged to a mysql database. I'd like to find a way to show the accurate number of users that are currently online. Up till now

RE: accounting question

2005-05-03 Thread Jamal Taweel
I think radwho can accomplish this request -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of [EMAIL PROTECTED] Sent: Tuesday, May 03, 2005 9:38 AM To: freeradius-users@lists.freeradius.org Subject: accounting question Hi, I have a question about radius,

MAC os X and Cisco TKIP + WEP

2005-05-03 Thread Riccardo Veraldi
Hello, while all my wireless cards workes perfectly with Cisco 1200 AP I have a lot of problems with MAC os X. I configured my Cisco 1200 AP to work with TKIP+WEP128 and Open Authentication with EAP with freeradius server to support both old WEP And newer WPA clients. MAC os X airport extreeme

Certificate Revocation List (EAP/TLS)

2005-05-03 Thread freeradius
Hi, I work with freeradius 1.0.2 If I configure in the TLS section of eap.conf (without this entries the autentification process works fine) CA_path = /path check_crl = yes crl_dir = /path crl = file Not any certificate is accepted (I generate the certificates and the crl with tinyca). How

Re: MAC os X and Cisco TKIP + WEP

2005-05-03 Thread Stefan Winter
Hello, while all my wireless cards workes perfectly with Cisco 1200 AP I have a lot of problems with MAC os X. I configured my Cisco 1200 AP to work with TKIP+WEP128 and Open Authentication with EAP with freeradius server to support both old WEP And newer WPA clients. MAC os X airport

Re: Logging/accounting regardless whether Accounting-Request packet sent

2005-05-03 Thread glanzel
hello Is it somehow possible to log the details regardless whether NAS sends the request ? Nope. can somebody tell me which access points do send accounting data to the freeradius server ? AND does someone knows if there is a way to put this capabilitie (to send accounting data from

pre-proxy with attrs_filter seems to work - valid?

2005-05-03 Thread Tariq Rashid
the included docs and examples don't use the atrrs_filter module with the pre-proxy{} section in radiusd.conf. there is a post-proxy{} and that works fine. i have different instatiations (with different config files) for each pre- and post-proxy. having no replies from the list i decided to

Re: EAp/TSL authorization problem

2005-05-03 Thread Jim Seymour
Sergey Guriev [EMAIL PROTECTED] wrote: ÷ ÓÏÏÂÝÅÎÉÉ ÏÔ 3 íÁÊ 2005 10:14 Vladimir Vuksan ÎÁÐÉÓÁÌ: Thu Apr 28 11:33:53 2005 : Debug: users: Matched entry www at line 228 Are you sure that the entry on line 228 has the correct password. I am not quite sure where the [EMAIL

strange behavior with two sql instances

2005-05-03 Thread Alexander Serkin
Hello all. I've some strange radius behavior using two sql databases. I built two databases - one on the radius server itself for auth and another on separate db server for accounting. Splitted the sql.conf into sqlauth and sqlacct parts. And made changes in radiusd.conf: $INCLUDE

Post-Auth: reply values

2005-05-03 Thread Gillmann, Christian
Hello all, I'm trying to write a script for the post-auth section. In this script I need the information if the Request was successful or if it was rejected. The sql module uses the following expression: %{reply:Packet-Type} But how could I use this in my script? I've written a short script

freeradius and sip

2005-05-03 Thread Lucas Aimaretto
Hi everybody, I'm willing to remove from a sip URI (ie:sip:[EMAIL PROTECTED]) the sip: and @domain parts, but, when they arrive in the Calling-Station-Id or Called-Station-Id Attributes. How to solve this ??? I've been able to remove @domain from the Uri, but at the User-Name only. Any help

Re: Post-Auth: reply values

2005-05-03 Thread Kostas Kalevras
On Tue, 3 May 2005, Gillmann, Christian wrote: Hello all, I'm trying to write a script for the post-auth section. In this script I need the information if the Request was successful or if it was rejected. The sql module uses the following expression: %{reply:Packet-Type} But how could I use this

Re: freeradius and sip

2005-05-03 Thread Kostas Kalevras
On Tue, 3 May 2005, Lucas Aimaretto wrote: Hi everybody, I'm willing to remove from a sip URI (ie:sip:[EMAIL PROTECTED]) the sip: and @domain parts, but, when they arrive in the Calling-Station-Id or Called-Station-Id Attributes. How to solve this ??? I've been able to remove @domain from the Uri,

how to move a freeradius server ?

2005-05-03 Thread Arthur EBEL
Hi, I am using a freeradius server with EAP TLS PEAP and LDAP. No problem its works perfectly. I have ta move this service on another server (differents hostname) I don't know what to do with my certificates. I dont want to give new certificates to all my clients. Is it possible to just copy

Re: Post-Auth: reply values

2005-05-03 Thread Gillmann, Christian
I'm trying to write a script for the post-auth section. In this script I need the information if the Request was successful or if it was rejected. The sql module uses the following expression: %{reply:Packet-Type} But how could I use this in my script? I've written a short script

RE: freeradius and sip - SOLVED IT ! ...

2005-05-03 Thread Lucas Aimaretto
I'm willing to remove from a sip URI (ie:sip:[EMAIL PROTECTED]) the sip: and @domain parts, but, when they arrive in the Calling-Station-Id or Called-Station-Id Attributes. How to solve this ??? I've been able to remove @domain from the Uri, but at the User-Name only.

Exec-Program-Wait vs rlm_exec

2005-05-03 Thread mmiranda
Hi, what do you consider the best solution wheen you need to run an external program to make aditional checks when an access request in received, exec-program-wait or rlm_exec, im using exec-program-wait, sould i use rlm_exec instead, the script check some item like credit amount and returns 0 or

Re: Duplicate attribute name NAS-Port-Id

2005-05-03 Thread Silent Man
Hi everybody, I've followed all the step to install FreeRadius and the Radius client Library found in this HowTo http://www.iptel.org/ser/doc/ser_radius/ser_radius.html, but when I test it with this command : # radclient -f digest localhost auth MySecret I'm getting this error message :

Re: Duplicate attribute name NAS-Port-Id

2005-05-03 Thread Alan DeKok
Silent Man [EMAIL PROTECTED] wrote: radclient: dict_init: /usr/local/etc/radiusclient-ng/dictionary[33]: dict_addattr: Duplicate attribute name NAS-Port-Id You are having radclient, from the FreeRADIUS source, read a dictionary file from the radiusclient package. Don't do that. Alan

RE: acctsessiontime

2005-05-03 Thread Mitchell, Michael J
Hi Luke, It's being updated by Alive (Intermin Accounting) requests coming from your NAS at 15 minute intervals. So the answer to your question is no, the RADIUS server cannot continue to update this field for you after the session has ended. Question is, why would you want it to be updated