mrtg

2005-06-09 Thread Micko
HI! I use FreeRADIUS as proxy. I would like to know if I can create mrtg using snmp on how many users are currently connected? Thank you! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Database connection failure and retry

2005-06-09 Thread Ming-Ching Tiew
A little while ago I posted about in my configuration, using unixodbc/freetds, we noticed that database/network failure causes permanent disability in radius server to stop logging and I was given the reply that it is in the feature of radius server to retry upon failure. So there is a

RE: How to? - use/configure winbind/ntlm_auth for Windows authentication

2005-06-09 Thread Pete Flynt
Thanks for your solution. I think this will be helpful for some people. I'll try this on next opportunity. But does it provide Single-Sign-On possibility with windows credentials like PEAP MSCHAPv2? I've finally managed to get the ntlm_auth working. When one knows how to do it, it is very

Strange Group Reply

2005-06-09 Thread Fabrice Delambre
Hi, I'm getting a strange reply from the server : versions are FreeRadius 1.02 + MySQL 3.23 . Basic authentication works. Problem comes from radgroupreply : my user 'test' authenticates but when I add an entry like : Username : test Attribute : Class Value : 34 in the radgroupreply table, the

RADIUS Authentication

2005-06-09 Thread Ferreira, André
Title: RADIUS Authentication If RADIUS receives and ACCESS-REQUEST packet, but RADIUS does not authenticate against its own database but an external server, does it also send an ACCESS-REQUEST to the external server? And does the external server send and ACCESS-ACCEPT with REPLY_MESSAGE

[Freeradius 1.0.3] failed to lilnk to module 'rlm_eap'

2005-06-09 Thread Pete Flynt
Hi list, I've configure freeradius to compile with --confsysdir=/etc/ --disable-shared. When running radiusd -X -A Im getting this error line: radiusd.conf[9] Failed to link to module 'rlm_eap': /usr/local/lib/rlm_eap.a: invalid ELF header What does this mean? Pete

Re: RADIUS Authentication

2005-06-09 Thread Alexandre Coninx
On Thu, Jun 09, 2005, Ferreira, André wrote: If RADIUS receives and ACCESS-REQUEST packet, but RADIUS does not authenticate against its own database but an external server, does it also send an ACCESS-REQUEST to the external server? If your external server is a RADIUS server,

db model

2005-06-09 Thread Thomas Huber
Hi, I am building the clients list from the nas table and experienced some problems: 1) There is not nas_query prepared int the configuration file. Would it be supported? 2) select * from nas; does not return the records in the right order. I think the clients list is built from the

Re: Authenticate/Attributes based on NAS-IP-Address

2005-06-09 Thread Graeme Hinchliffe
Hiya, Use Client-IP rather than NAS-IP as NAS-IP can be spoofed. Graeme On Wed, 2005-06-08 at 15:30 -0700, N White wrote: Graeme Hinchliffe wrote: Hiya perhaps you could do it using huntgroups. Put the static attributes for the user in the radreply table, then assign

RE: syslog

2005-06-09 Thread Miguel Sennoun
Thank you for the reply -Message d'origine- De : [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] De la part de Craig Huckabee Envoyé : mercredi 8 juin 2005 13:29 À : FreeRadius users mailing list Objet : Re: syslog Set log_destination = syslog and log {

Relocation Error

2005-06-09 Thread Normando Marcolongo
Hi! I've the same error as in the thread http://lists.cistron.nl/pipermail/freeradius-users/2005-April/thread.html#43044: freeradius: relocation error: /usr/lib/perl/5.8/auto/IO/IO.so: undefined symbol: Perl_Tstack_sp_ptr nobody seemed to pinpoint the problem. I've Debian 3.1 and one perl

segmentation fault

2005-06-09 Thread yuniva wati
hello freeradius users, I have configure my freeradius for accounting but when I run it using : [EMAIL PROTECTED] raddb]# /usr/local/radius/sbin/radiusd -sfxxyz -l stdout Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file:

Problem getting FR/MySQL to work with CHAP

2005-06-09 Thread Rens Houben
Hello all, Due to a policy change with MCI we now have to change our authentication/authorization scheme for dial-in users to CHAP, but for some reason I just gan't get it to work. I've checked mailing list archives and google, and as far as I can see I've done everything right,

Re: syslog

2005-06-09 Thread Craig Huckabee
Miguel Sennoun wrote: Set log_destination = syslog and log { syslog_facility = daemon } I tried, but it seems not write radius logs in syslog Just to be clear - which radius logs are you trying to redirect and did you make sure that syslog is running/configured correctly ?

Re: segmentation fault

2005-06-09 Thread Fabrice Delambre
On Thu, 2005-06-09 at 05:21 -0700, yuniva wati wrote: hello freeradius users, I have configure my freeradius for accounting but when I run it using : [EMAIL PROTECTED] raddb]# /usr/local/radius/sbin/radiusd -sfxxyz -l stdout Starting - reading configuration files ... reread_config:

is it possible to only allow users with a valid host ip?

2005-06-09 Thread gvdgiessen
Hi, I wonder if I can restrict (vpn)login from users in combination with their login (host) ip address. cheers, Geer -- [EMAIL PROTECTED] -- http://www.fastmail.fm - And now for something completely different… - List info/subscribe/unsubscribe? See

RE: syslog

2005-06-09 Thread Miguel Sennoun
Set log_destination = syslog and log { syslog_facility = daemon } I tried, but it seems not write radius logs in syslog Just to be clear - which radius logs are you trying to redirect and did you make sure that syslog is running/configured correctly ? I

Re: syslog

2005-06-09 Thread Craig Huckabee
Miguel Sennoun wrote: I would like to redirect all radius logs (even accounting). Well, as I mentioned accounting isn't there yet unless someone else has done it. [ SNIP ] Thank you for the extract of the radiusd.conf but in mine this section is not present. Even in the 1.0.3 conf

RE: syslog

2005-06-09 Thread Miguel Sennoun
-Message d'origine- De : [EMAIL PROTECTED] [mailto:freeradius- [EMAIL PROTECTED] De la part de Craig Huckabee Envoyé : jeudi 9 juin 2005 16:04 À : FreeRadius users mailing list Objet : Re: syslog Miguel Sennoun wrote: I would like to redirect all radius logs (even

FreeRADIUS 1.0.2 Segfaulting

2005-06-09 Thread Bubba Parker
I'm using freeradius 1.0.2 with openssl 0.9.7g, configured for PEAP, trying to authenticate a Windows XP client. The script I'm running that invokes freeradius looks like this: --snip-- #!/bin/sh -x LD_LIBRARY_PATH=/usr/local/openssl/lib LD_PRELOAD=/usr/local/openssl/lib/libcrypto.so export

Re: mrtg

2005-06-09 Thread Alan DeKok
Micko [EMAIL PROTECTED] wrote: I would like to know if I can create mrtg using snmp on how many users are currently connected? FreeRADIUS doesn't supply that information through SNMP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Database connection failure and retry

2005-06-09 Thread Alan DeKok
Ming-Ching Tiew [EMAIL PROTECTED] wrote: There is no checking whatsoever, so unixodbc driver is unable to reconnect upon failure. Ok... are you willing to supply a patch? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FW: Trouble with HTTPS and mod_auth_radius

2005-06-09 Thread Zawacki Jason D Contr AFRL/IFOS
Is there a mod_auth_radius list I can direct this question to? Thanks, Jason -Original Message- From: Zawacki Jason D Contr AFRL/IFOS Sent: Monday, June 06, 2005 11:43 AM To: 'freeradius-users@lists.freeradius.org' Subject: Trouble with HTTPS and mod_auth_radius Hey folks, I'm

RE: Problems with LDAP

2005-06-09 Thread alfonso celestino
No,rlm_ldap* was not installed,How can I install it. Thanks very much for their answers!! --- Mitchell, Michael J [EMAIL PROTECTED] escribió: Hi, Check /usr/local/radius/lib for rlm_ldap* to ensure that rlm_ldap actually built and was installed. Cheers, Mike Hello,

Re: Strange Group Reply

2005-06-09 Thread Alan DeKok
Fabrice Delambre [EMAIL PROTECTED] wrote: in the radgroupreply table, the server replies with Class := 0x3334. More generally, it does always reply with 0x33XX, XX being the value of Class in radgroupreply. 0x3334 is hex for the ASCII characters 34. The attribute is being sent back

Re: Authenticate/Attributes based on NAS-IP-Address - SOLVED

2005-06-09 Thread N White
://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html __ NOD32 1.1135 (20050609) Information __ This message was checked by NOD32 antivirus

Re: mrtg

2005-06-09 Thread Thor Spruyt
Alan DeKok wrote: Micko [EMAIL PROTECTED] wrote: I would like to know if I can create mrtg using snmp on how many users are currently connected? FreeRADIUS doesn't supply that information through SNMP. You *could* store the sessions in a database from which this info can be retrieved. --

Re: mrtg

2005-06-09 Thread Alan DeKok
Thor Spruyt [EMAIL PROTECTED] wrote: You *could* store the sessions in a database from which this info can be retrieved. Sure. Then hack the SNMP code to export it, create MIBs, etc. I'm not sure how to do this, and the demand for it is small. If someone submits patches, great.

problem with # in username

2005-06-09 Thread Christian Seitz
Hi, I want to replace our old radius server with freeradius and it seems that freeradius has all the features we need - great work! We are using freeradius 1.0.2-4 from debian unstable with a PostgreSQL database for users and logging. My problem is that some of our usernames contain a #,

Re: problem with # in username

2005-06-09 Thread Marcin Jessa
I bet this is database specific. Run radius in debug mode and see what is shown by the User-Name attribute. Try to change sql query in postgresql.conf if radius accepts correct username. Cheers, Marcin On Thu, 9 Jun 2005 20:30:03 +0200 (CEST) Christian Seitz [EMAIL PROTECTED] wrote: Hi, I

Re: mrtg

2005-06-09 Thread Kevin Bonner
On Thursday 09 June 2005 02:21, Micko wrote: HI! I use FreeRADIUS as proxy. I would like to know if I can create mrtg using snmp on how many users are currently connected? Thank you! IMO, it would be difficult for the radius server to give accurate data. MRTG should be able to query your

Re: problem with # in username

2005-06-09 Thread Kevin Bonner
On Thursday 09 June 2005 14:30, Christian Seitz wrote: Hi, I want to replace our old radius server with freeradius and it seems that freeradius has all the features we need - great work! We are using freeradius 1.0.2-4 from debian unstable with a PostgreSQL database for users and logging.

RE: FW: Trouble with HTTPS and mod_auth_radius

2005-06-09 Thread Cris Boisvert
That would be great.. I tried to work with mod_auth_radius and couldn't get it to go a while back and really wanted have a site that was only available to Authenticated users. (just my 2 cents) I was trying it out on macs running apache..(That could have been the problem) -Original