Re: Windows Client Authentification bevore Domain logon

2005-08-23 Thread Steven Atkinson
At 16:26 22/08/05, you wrote: Hi, i sucessfully installed a Radius authentificated Network with EAP-TLS Authentifikation. But I cant get logon to my Domain Controller when themachines boot up.. Ok, I know this Problem is not new, but is there any chance to solve this problem without additional

Netscreen and Freeradius.

2005-08-23 Thread Maqbool Hashim
Hi, Has anyone used Radius for authentication with the Netscreens? It works fine, however there is one problem. Root-Admin for Radius authentication is no longer supported. This is the value of the NS-Admin-Privilege attribute in the Netscreen dictionary file which gives full access to

best place for logic - users file or custom module?

2005-08-23 Thread Tariq Rashid
hi, i'm planning a significant migration from a different radius server (Radiator, perl based). one advantage of that server is that it is very easy to code custom hooks to apply business logic to post-(ldap)-search and post-auth points of the radius sequence. the disadvantage is the

EAP-MD5 usage

2005-08-23 Thread Bilal Shahid
Hello, I have a question about EAP-MD5 usage. Would appreciate any help. I am using FreeRADIUS as the Authentication Server with Open1X Supplicant. When I set Supplicant Identity different from EAP-MD5 username, the RADIUS Server sends my Supplicant an Access-Reject. My questions are the

piping radacct details to a script

2005-08-23 Thread marc racal
hi all, is there a way to pipe radacct details to a script before it writes to the log file? how do you do this? thanks. regards, marc -- Get Firefox! http://tinyurl.com/cocg2 The browser you can trust. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Windows Client Authentification bevore Domain logon

2005-08-23 Thread Armin Krämer
Hi, thanks for your email!Ok, i tried it out but i have some problems. If i use the DWORT String you sent me it has no efekkt. I found an other DWORT Key which Sounds "AuthMode" and with this DWORT he only tries to authentificate with the machine account. Maybe you have made a typing mistake in

Re: Windows Client Authentification bevore Domain logon

2005-08-23 Thread User Test
System pocztowy Galtex S.A. informuje, iz Twoja wiadomosc zostala odebrana Wiadomosc wygenerowana automatycznie przez system pocztowy uzytkownika belskia Prosze na ta wiadomosc nie odpowiadac. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

build problem - mysql header files not found

2005-08-23 Thread Ben Dowling
Hi, I am having a problem building freeradius-1.04 on linux. I have installed mysql 4.1.10 but when running make it bails out complaining that mysql.h and errmsg.h cannot be found. The files can be located in /usr/local/mysql/include. As a hack I copied these files into the corresponding

Re: best place for logic - users file or custom module?

2005-08-23 Thread Thor Spruyt
Tariq Rashid wrote: hi, i'm planning a significant migration from a different radius server (Radiator, perl based). You might have a look at the rlm_perl module (persistent perl module to intervene in multiple stages). It's not marked stable yet, but it should be soon and it should be working

Re: best place for logic - users file or custom module?

2005-08-23 Thread Alan DeKok
Tariq Rashid [EMAIL PROTECTED] wrote: hi, i'm planning a significant migration from a different radius server (Radiator, perl based). That's good to hear! our tests with freeradius show a much lighter server - its faster, and easier on memory and cpu. however the downside is that applying

Re: EAP-MD5 usage

2005-08-23 Thread Alan DeKok
Bilal Shahid [EMAIL PROTECTED] wrote: I am using FreeRADIUS as the Authentication Server with Open1X Supplicant. When I set Supplicant Identity different from EAP-MD5 username, the RADIUS Server sends my Supplicant an Access-Reject. Yes. See the configuration for the eap module. 1-

RE: best place for logic - users file or custom module?

2005-08-23 Thread Tariq Rashid
is python more stable than the support for perl? i have much more experience in python than perl. also is the perl/python stuff persistent - or is the interpreter invoked for every request? i am asking as i think this is the main reason for Radiator's performance issues - in theory even a big

Re: piping radacct details to a script

2005-08-23 Thread Alan DeKok
marc racal [EMAIL PROTECTED] wrote: is there a way to pipe radacct details to a script before it writes to the log file? how do you do this? What log file? There are many. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: best place for logic - users file or custom module?

2005-08-23 Thread Nicolas Baradakis
Tariq Rashid wrote: i'd like some advide on the best place to implement this logic. for example - a common scenario is for a request to come from A, and the reply to A contains instructions to extend a tunnel to a second device B. A second query from B is then received. Use huntgroups to

MySQL radacct not updated

2005-08-23 Thread sean
Hi, I have a strange problem with MySQL and FreeRadius. The system had been performing perfectly but it is no longer updating radacct. The result is that when users login the counter on their login page counts down their remaining time. But when they logout and then login again the counter is

ldap_connections_number

2005-08-23 Thread Benedikt Panzer
Hello, it seems to me the FR doesn't open as many connections as in ldap_connections_number specified. Even tough there are many RADIUS requests in the queue (they have to be) and I allowed 50 connections to the ldap server FR opens justs 1 or 2. Why? That wouldn't bother me usually. But my

Re: best place for logic - users file or custom module?

2005-08-23 Thread Thor Spruyt
Tariq Rashid wrote: is python more stable than the support for perl? i have much more experience in python than perl. rlm_python is not marked stable yet either. I don't know about it's stability, but I haven't seen much about rlm_python on the maillist, so maybe support could be very low;

Re: MySQL radacct not updated

2005-08-23 Thread Thor Spruyt
sean wrote: Hi, I have a strange problem with MySQL and FreeRadius. The system had been performing perfectly but it is no longer updating radacct. The result is that when users login the counter on their login page counts down their remaining time. But when they logout and then login

problems with the detail file

2005-08-23 Thread jgruwell
Hello, I am running freeradius version 1.0.4 on Fedora Core 4. I have a problem with the detail file that writes to the radacct directory. I noticed that this log file is setup to write by default. I have uncomment the appropriate lines to have the auth-detail and replay-detail log files

Re: FreeRADIUS 1.0.4: SEGMENTATION FAULT

2005-08-23 Thread Alan DeKok
BugBuster [EMAIL PROTECTED] wrote: Running FreeRADIUS in debug mode (radiusd -sfxxyz -l stdout) I get the Segmentation fault message (more details is in .txt attachment). You've included everything but the information requested in doc/bugs. My bet is that this is bug #98

Re: best place for logic - users file or custom module?

2005-08-23 Thread Alan DeKok
Tariq Rashid [EMAIL PROTECTED] wrote: is python more stable than the support for perl? i have much more experience in python than perl. See bugs.freeradius.org for an updated python module. There's been no feedback about it, so I'm leery of adding it in until people say it works. also is

Re: ldap_connections_number

2005-08-23 Thread Alan DeKok
Benedikt Panzer [EMAIL PROTECTED] wrote: Even tough there are many RADIUS requests in the queue (they have to be) and I allowed 50 connections to the ldap server FR opens justs 1 or 2. Why? When you're binding as a user, for authentication, you can't re-use the same connection for multiple

Re: Mobile phone authentification

2005-08-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: I'd like to use FREERADIUS as an authentification method for mobile phones, but I'm not sure First, it's not authentification, it's authentication, without an f. Now I was told that RADIUS is the solution. RADIUS is able to detect the actual sender information and

Example of Mac OS X EAP-TLS process?

2005-08-23 Thread Landon Cox
I've got a good, working FreeRadius running EAP-TLS on a SuSE 9.2 box. I've had good luck with WPA supplicants for XP SP2 and several vendor PCMCIA card supplicants - all on XP SP2. I've been trying to get an OS X (Tiger) machine up with the same type of setup, but each time I set the

Re: freeradius + MySQL not working after upgrade from 1.0.1

2005-08-23 Thread marc-ml
I now have two servers with the same freeradius configuration (minus minor changes from the upgrade) and the same MySQL database with one running version 1.0.1 (which works) and the other running 1.0.4 (which does not work). Comparing the logs produced by radiusd -X, I see that the only

Re: freeradius + MySQL not working after upgrade from 1.0.1

2005-08-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Could it be something to do with the X-Ascend-Data-Filter abinary format? Perhaps a configuration option for that introduced after 1.0.1? This is the output from running radtest between the two servers with different freeradius versions (just showing the

Re: piping radacct details to a script

2005-08-23 Thread marc racal
On 8/24/05, Alan DeKok [EMAIL PROTECTED] wrote: marc racal [EMAIL PROTECTED] wrote: is there a way to pipe radacct details to a script before it writes to the log file? how do you do this? What log file? There are many. radacct details logs. -marc -- Get Firefox!

Re: piping radacct details to a script

2005-08-23 Thread Alan DeKok
marc racal [EMAIL PROTECTED] wrote: What log file? There are many. radacct details logs. Thanks for keeping your answer as short and as cryptic as possible. It really gives people incentive to answer you. 1) The only reference to radacct in the server is in SQL. 2) there is no

Re: freeradius + MySQL not working after upgrade from 1.0.1

2005-08-23 Thread marc-ml
Problem solved. I had been compiling versions 1.0.1 without enabling Ascend binary support. Are you sure you didn't edit the dictionaries? Are you sure there's no other attribute 242, of type octets? Are you sure you're using the 1.0.4 dictionaries with 1.0.4? I was in the process of

Re: freeradius + MySQL not working after upgrade from 1.0.1

2005-08-23 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Problem solved. I had been compiling versions 1.0.1 without enabling Ascend binary support. It should probably be enabled by default. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html