Re: 1.0.5 + rlm_sql_mysql: Segmentation fault

2005-09-16 Thread Thomas Krause (Webmatic)
Hi Alan, Alan DeKok schrieb: Thomas Krause (Webmatic) [EMAIL PROTECTED] wrote: I've followed the instructions in the bugs file, but I'm not a programmer (so the output doesn't really helps me): ... #0 0x282f8550 in memset () from /lib/libc.so.5 (gdb) bt #0 0x282f8550 in memset () from

Time based accounting

2005-09-16 Thread Nirmal
Hi, Is there any way we can time based accounting Input/Output Octets in free radius ? Thanks in Advance Nirmal Yahoo! for Good Click here to donate to the Hurricane Katrina relief effort. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

PEAP without credentials

2005-09-16 Thread Sebastian Müller
Hi, is there a way, to tell the freeradius to accept an incoming peap request, without asking for user credentials, or to accept any credentials? Currently needed to use the credentials guest/guest. It would be simpler to accept any credentials, without loosing the encryption. Thanks Windows XP

Re: PEAP without credentials

2005-09-16 Thread [EMAIL PROTECTED]
Hello, Hi, is there a way, to tell the freeradius to accept an incoming peap request, without asking for user credentials, or to accept any credentials? No, I don't think so. Currently needed to use the credentials guest/guest. It would be simpler to accept any credentials,

Re: crash in 1.0.5

2005-09-16 Thread Norbert Wegener
Alan DeKok wrote: Norbert Wegener [EMAIL PROTECTED] wrote: Does it work in 1.0.4? Yes. Dang. I'm not sure what to suggest, other than gdb. Seems, I had an old library path on the system, sorry. Installation on a fresh machine and no further crashes. Norbert Wegener

Re: PEAP without credentials

2005-09-16 Thread Sebastian Müller
Hi, I thought the username/passwd is transfered while the shake-hand. So it wouldn't be able to reuse this transfered (encrypted or not) password for the connection? - Any maybe store it in a database for some time. I am no crypt-expert, so I don't know if the user-password is transfered crypted

Re: mssql and authenticate_query

2005-09-16 Thread Duane Cox
There is an authenticate_query variable defined in the stock mssql.conf If it's there, it's a big. It's there... I would assume it should be removed in CVS and/or logged in your bug tracking system. Do you have a mantis page? Why we're at it, why not change the example mssql.conf file to

Walled Garden for Users Without Realms.

2005-09-16 Thread McCain, Al
Hi. I was wondering if there was a way to place users in a Walled Garden if they try to Auth without a Realm. We are currently running FreeRADIUS Version 0.9.3. Our users are stored in MySQL. Company: I work for an ISP. We seem to aquire new properties every few months. Current structure :

Re: mssql and authenticate_query

2005-09-16 Thread Nicolas Baradakis
Duane Cox wrote: Why we're at it, why not change the example mssql.conf file to remove all references to FreeTDS... That should resolve _a lot_ of confusion... As always, patches are welcome. Nicolas Baradakis -- A: Yes. Q: Are you sure? A: Because it reverses the logical flow of

Re: Time based accounting

2005-09-16 Thread Alan DeKok
Nirmal [EMAIL PROTECTED] wrote: Is there any way we can time based accounting Input/Output Octets in free radius ? Post process the logs. FreeRADIUS doesn't generate the accounting data, the NAS does. So there's not much you can do to FreeRADIUS to make it log the data you need. And

Re: mssql and authenticate_query

2005-09-16 Thread Duane Cox
From: Nicolas Baradakis [EMAIL PROTECTED] Duane Cox wrote: Why we're at it, why not change the example mssql.conf file to remove all references to FreeTDS... That should resolve _a lot_ of confusion... As always, patches are welcome. Is there a mantis page or bug tracker? Nicolas

Howto strip off Domain Name

2005-09-16 Thread Sebastian Mauer
Hello there, I managed to get FreeRadius authenticating users with PEAP against a OpenLDAP Directory containing my Samba controlled domain data and users. The Users are stored with der normal username (without Domain) in the LDAP. As default the windows WLAN Client tries to authenticate with the

RE: Howto strip off Domain Name

2005-09-16 Thread Brian Johnson
Lookup realms in the docs. And people wonder why Alan is so cranky. ;-) - Brian J. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Sebastian Mauer Sent: Friday, September 16, 2005 9:43 AM To: freeradius-users@lists.freeradius.org Subject:

Re: mssql and authenticate_query

2005-09-16 Thread Nicolas Baradakis
Duane Cox wrote: Why we're at it, why not change the example mssql.conf file to remove all references to FreeTDS... That should resolve _a lot_ of confusion... As always, patches are welcome. Is there a mantis page or bug tracker? There is a bugzilla here:

PAP and clear text

2005-09-16 Thread Chuck Slate
Hi All. I have a few freeRADIUS newbie questions for you. I have always read and been told that PAP is insecure because it transmits passwords in clear text. However, If I sniff the communication between my NAS and server when PAP is used, the password is indeed obfuscated. It appears to be

Re: PAP and clear text

2005-09-16 Thread Alan DeKok
Chuck Slate [EMAIL PROTECTED] wrote: I have always read and been told that PAP is insecure because it transmits passwords in clear text. However, If I sniff the communication between my NAS and server when PAP is used, the password is indeed obfuscated. It appears to be hashed. Yes. The

RE: Howto strip off Domain Name

2005-09-16 Thread Jamie Crawford
proxy.conf realm DEFAULT { type = radius authhost = LOCAL accthost =LOCAL } [EMAIL PROTECTED] 9/16/2005 9:56:21 AM Lookup realms in the docs. And people wonder why Alan is so cranky. ;-) - Brian J. -Original Message- From:

Re: PAP and clear text

2005-09-16 Thread Michael Lecuyer
You must have missed the information in RFC 2865 (RADIUS), which is also a Fine Manual. The PAP password is XOR'd with the MD5 hash of the shared secret and the authenticator. You've been reading about the protocol prior to the RADIUS client's involvment. The same thing applies to CHAP, just

Problems with oracle

2005-09-16 Thread chabral -
Hi, I'm trying to use freeradius 1.0.1 with oracle 9i. I successfully (i think) compiled freeradius with oracle support. I've the files: /usr/local/etc/raddb/oraclesql.conf /usr/local/lib/rlm_sql_oracle-1.0.1.so /usr/local/lib/rlm_sql_oracle.so /usr/local/lib/rlm_sql_oracle.la

Re: PAP and clear text

2005-09-16 Thread Stefan . Neis
Hi, You must have missed the information in RFC 2865 (RADIUS), which is also a Fine Manual. The PAP password is XOR'd with the MD5 hash of the shared secret and the authenticator. Yes, that's a bit clearer than saying the password is hashed, since it also shows that the process is

Re: PEAP without credentials

2005-09-16 Thread Stefan . Neis
Hi, I thought the username/passwd is transfered while the shake-hand. Yes and no. I.e. it depends on the precise protocol you're using. For some of them (mostly PAP, EAP-TTLS/PAP), the password is transfered in an encrypted form. For others (CHAP, MSCHAP, EAP-MD5, PEAP), the password is

Re: Problems with oracle

2005-09-16 Thread Ilia Chipitsine
using oracle require setting enviroment variable ORACLE_HOME before you start radiusd, did You do that ? Cheers, Ilia Chipitsine Hi, I'm trying to use freeradius 1.0.1 with oracle 9i. I successfully (i think) compiled freeradius with oracle support. I've the files: