wifi / mac authentication

2005-10-20 Thread Nick B
hello im using freeradius 1.02-4 (debian) if i have my access points set for mac address authentication via radius what settings do i require on the freeradius end? currently in my DB i have it setup as this groupname: Enabled Auth-Type :=Local Compression used: :=Van-Jacobsen-TCP-IP Service

adding a nas via dialupadmin

2005-10-20 Thread Nick B
Hello while adding a NAS thru dialupadmin i noticed that the changes dont take effect unless the freeradius process is restarted is this intended? or is something wrong with my config I.E. i added 192.168.0.1 /as a NAS but when i tried to authenticate with the nas , the debug showed it

Re: Realm users authentication failure

2005-10-20 Thread Luca Corti
On Wed, 2005-10-19 at 19:28 -0400, Alan DeKok wrote: +-+-+---+--++ | id | UserName| Attribute | Value| op | +-+-+---+--++ | 376 | [EMAIL PROTECTED] | User-Password | password | == |

Re: wifi / mac authentication

2005-10-20 Thread A . L . M . Buxey
Hi, Now when a wireless client trys to connect will the NAS sends the mac address and does it append the NAS password or do you supply a specific password for the mac address? when it authenticates the Wireless client will they have internet access (obtained ip/dhcp etc all thru the nas)

Re: Realm users authentication failure

2005-10-20 Thread Luca Corti
On Thu, 2005-10-20 at 09:17 +0200, Luca Corti wrote: On Wed, 2005-10-19 at 19:28 -0400, Alan DeKok wrote: +-+-+---+--++ | id | UserName| Attribute | Value| op | +-+-+---+--++ | 376

RLM_IPPOOL bug?

2005-10-20 Thread magmike
my radiusd uses rlm_ippool. Sometimes ippool gives one ip for two different users simultaneously. here output of rlm_ippool_tool. # rlm_ippool_tool -va /etc/raddb/pools/db.pool-1-pool1* | grep X.Y.Z.170 NAS:192.168.0.1 port:0xde - ipaddr:X.Y.Z.170 active:1 cli:0 num:1 NAS:192.168.0.1

DB Server Advice

2005-10-20 Thread Abdul Lateef
Hi all, We have very big voip traffic, and currently we were using mysql DB with the following server configurations, But we are getting lot of problems some time the devise are failed, some time the database is slow…. Etc. The current configuration is: OS: Red Hat Enterprise Linux ES 3

Re: DB Server Advice

2005-10-20 Thread A . L . M . Buxey
Hi, The current configuration is: OS: Red Hat Enterprise Linux ES 3 PROCESSOR: Dual 3.2 GHz Intel Xeon MEMORY : 2GB DDR RAM Hard Drive: 2 x 36.4GB SCA Ultra 160 SCSI Hard Drive (RAID 1) RAID CONTROLLER CHASSIS: 2U BACKUP AGENT: Legato Managed Backup Agent NETWRK: Aggregate

Re: DB Server Advice

2005-10-20 Thread Nicolas Baradakis
Abdul Lateef wrote: We have very big voip traffic, and currently we were using mysql DB with the following server configurations, But we are getting lot of problems some time the devise are failed, some time the database is slow…. Etc. I don't think that buying expensive hardware is a long

Re: ntlm_auth and machine authentication (workaround)

2005-10-20 Thread Michael Griego
See the list postings from earlier in the day... If you grab the latest CVS snapshot, you don't have to use the Perl wrapper as the rlm_mschap module will do the name rewriting for you. --Mike Roy Hooper wrote: After spending a fair bit of time searching list archives and google results,

getting this in error log

2005-10-20 Thread Global Net, LLC
Error: Invalid operator for item Password: reverting to '==' New setup using a text file for auth when doing a test login from the console with the radtest login seems to go ok. but when the nas is sending the users info I am getting entrys like above in the log file and not sure where to

Many thanks

2005-10-20 Thread Iandc Davies
To all, Well, after months of trying to get this working and integrated into our system, guess what .. I've managed it with the help of you lovely people to finally get this working with the aide also of lots and lots of full strength coffee and severe lack of excercise. Many thanks to the

Vendor Specific Attributes

2005-10-20 Thread Daniel Corbe
Hello, How do you get FreeRADIUS to stop ingoring VSAs? I have a box that's sending them and FreeRADIUS is simply ignoring them in rad_recv rad_recv: Accounting-Request packet from host 10.10.0.90:1068, id=0, length=58 NAS-Identifier = acme-sd Acct-Status-Type = Accounting-On

RE: Vendor Specific Attributes

2005-10-20 Thread Guy Davies
Which VSAs are you sending in the accounting packet? Are they correctly enumerated in a dictionary file? Is the dictionary file referenced in the main dictionary file? Can you send us the accounting packet you're seeing? Rgds, Guy -Original Message- From: [EMAIL PROTECTED]

accounting scripts ?

2005-10-20 Thread Frank Bonnet
Hello I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform some simple statistics ? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

counter with Session Octet Limit

2005-10-20 Thread Seferovic Edvin
Hello, I am using freeRadius 1.0.2, and I would like to limit weekly bandwidth for my VPN ( pptp ) users. So Ive changed the example counter part in my radiusd.conf counter weekly_traffic { filename = ${raddbdir}/db.weekly key = User-Name count-attribute = Acct-Input-Octets

Re: accounting scripts ?

2005-10-20 Thread Alan DeKok
Frank Bonnet [EMAIL PROTECTED] wrote: I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform some simple statistics ? radiusreport. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accounting scripts ?

2005-10-20 Thread Miguel
Frank Bonnet wrote: Hello I'm searching for scripts that are able to parse the radacct/xxx.xxx.xxx.xxx/detail-xxx file to perform some simple statistics ? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html what do you mean with parsing?, i got

Preside RADIUS Export

2005-10-20 Thread Samson Martinez
Hello, We have an older NT 4 server running an installation of Preside RADIUS with a multitude of users profiles. Ive exported the users to a .rif file is this something that can somehow be imported into a freeRADIUS install? Ill search for the how if it is possible. Many thanks!

Freeradius and What's Up Gold Question

2005-10-20 Thread Linda Pagillo
Hi everyone: I'm going to try to explain this as best I can. I'm using Freeradius 1.0.5 on a Linux Redhat 9 server. I have a network monitoring program on another computer called What's Up Gold. It is made by a company called Ipswitch. There is a setting in the WUG program that lets you

Re: wifi / mac authentication

2005-10-20 Thread Nick B
Im quite aware of what is being sent and what is shown via debug mode. unfortunatly i dont have access to the specific NAS in question so i cant see what attributes are being sent so im restricted to testing from computer to computer instead of the actual NAS to radius. and My personal

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Alan DeKok
Linda Pagillo [EMAIL PROTECTED] wrote: This is how Ipswitch explains how it works: What we specified for a test is an INVALID test for the userid TEST as it not encoded using the secret key. Then what we expect back is a response telling us the userid doesn't exist. This isn't how RADIUS

PAM radius client usage

2005-10-20 Thread nagaraj
Hi, Does PAM radius client need shared library support to be able to work ? I could port successfully PAM radius client to Router platform which has shared library support. However I need to port the same PAM radius client to other router platforms which do not have shared library support. Has

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Linda Pagillo
Thank you once again Mr.DeKok. I have already added the secret to my clients.conf entry. I also already checked into adding the shared secret to WUG and there is no way to do this, so i'm told. Is there another way around this problem? Perhaps i have my clients.conf entry incorrect. Here is

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Duane Cox
If you can't change the shared secret in WUG then change the secret in your clients.conf to match what is in WUG. Or better yet, abandon WUG and it's windows platform and use www.intermapper.com It is a MUCH better product and works just fine with freeradius, I'm doing so here. It also runs

Re: Freeradius and What's Up Gold Question

2005-10-20 Thread Duane Cox
If you can't change the shared secret in WUG then change the secret in your clients.conf to match what is in WUG. Or better yet, abandon WUG and it's windows platform and use www.intermapper.com It is a MUCH better product and works just fine with freeradius, I'm doing so here. It also runs

Re: wifi / mac authentication

2005-10-20 Thread Alan DeKok
Nick B [EMAIL PROTECTED] wrote: Im quite aware of what is being sent and what is shown via debug mode. unfortunatly i dont have access to the specific NAS in question so i cant see what attributes are being sent Uh, no. Debug mode shows you what attributes are being sent. My question

RE: wifi / mac authentication

2005-10-20 Thread Edward Rempala
I know with the AP-600 the password is the same as the NAS password. Edward -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, October 20, 2005 8:01 PM To: FreeRadius users mailing list Subject: Re: wifi / mac authentication

return ALL the AVPs for a username that belongs multiple groups

2005-10-20 Thread Lenir
Hello list, I have a user that belongs to multiple groups, lets say in the usergroup table, I have username Paul_S that belongs to Group1, Group2 and Group3 (using a different row for each group membership). In the radgroupreply table, I have multiple different attributes for each group. When I