EAP-TLS and accounting are incompatible

2006-01-10 Thread Marcos González
Hello, my name is Marcos, I wrote to this list some weeks ago. My problem was the freeradius accountingwas working onlyfor session time but input-octets and output-octets attributes weren't being sent by the NAS to the freeradius server. I was using EAP-TLS authentication. The NAS is a Cisco

Re: Freeradius 1.1.0 Mysql 5.x

2006-01-10 Thread Nicolas Baradakis
Chadwick Sorrell wrote: On 1/9/06, Nicolas Baradakis [EMAIL PROTECTED] wrote: It looks like a local setup issue: you should double-check if the version of the libmysqlclient binaries matches the version of the libmysqlclient headers on your system. PHP is accessing Mysql fine, well more

problems with CHAP authentication

2006-01-10 Thread Przemysław Backiel
Hello, I have big problem with CHAP in Freeradius. I tried versions 1.0.2 and 1.0.5 and I heve the same error. While I'm loging using Rasppoe I have errors in freeradius debug: rad_recv: Access-Request packet from host 127.0.0.1:2294, id=219, length=88 Service-Type = Framed-User

how to compile freeradius without ssl

2006-01-10 Thread Alvaro Quiñones
Hi I want to compile freeradius without ssl, i tried with ./configure --disable-ssl ./configure --disable-openssl ./configure --without-ssl ./configure --without-openssl however always i see checking for regex.h... yes checking for openssl/ssl.h... no checking for off_t... yes how can i compile

Re: Freeradius 1.1.0 Mysql 5.x

2006-01-10 Thread Chadwick Sorrell
Nicolas, As soon as I remove the --disable-static from the configure it seems to work fine. What do you think could be causing that? Thanks, Chad On 1/10/06, Nicolas Baradakis [EMAIL PROTECTED] wrote: Chadwick Sorrell wrote: On 1/9/06, Nicolas Baradakis [EMAIL PROTECTED] wrote: It looks

RE: Cisco to FreeRadius to AD-LDAP authentication

2006-01-10 Thread Dickson, John
My question is, how do I get an Accept from the request and is there a way around the basedn naming conventions that will alllow FreeRadius to work with Windowz? The issue here isn't with basedn naming conventions. It's that you haven't set up FreeRADIUS to ask AD about authenticating

possible ascend data filter problems

2006-01-10 Thread Chuck
i have been working with our upstream dialup provider for a week now and he has come to the conclusion that freeradius is passing the data as ascii rather than abinary. his tests used flat files while we use mysql. the filters we define are listed below from our support tech's email:

Re: how to compile freeradius without ssl

2006-01-10 Thread Nicolas Baradakis
Alvaro Quiñones wrote: I want to compile freeradius without ssl, i tried with ./configure --disable-ssl ./configure --disable-openssl ./configure --without-ssl ./configure --without-openssl however always i see checking for regex.h... yes checking for openssl/ssl.h... no checking for

AW: Noone anny idea fot -- TLS Athentifikation before Domain, Logon XP?

2006-01-10 Thread Armin Krämer
I posted 3 days ago an mesage with 2 logfiles out of radius. Because this is a part of my Projekt for my final exam as an IT-Engineer it is verry important for me getting this working. Maybe someone of you has any further idea? Or would it be better to contact the openssl Team for this issue? You

Re: openLDAP vs.mySQL

2006-01-10 Thread Nicolas Baradakis
Carlo Prestopino wrote: In these day we are developing the prepaid solution for Wi-Fi access (scratch cards), but completely with mySQL, because it is simpler to use (tables radacct, radcheck, etc... are already built) and develop. As we arrive to a stable solution it is my intention to move

Re: openLDAP vs.mySQL

2006-01-10 Thread Dusty Doris
The only statement that matters is whether you are familiar with either MySQL or LDAP. I don't agree with the other assertions about performance and distributed model of storage. The MySQL database of users can be replicated so each RADIUS server query a local slave database. There is no

Re: how to compile freeradius without ssl

2006-01-10 Thread Sean
Hi, If you are using FreeRadius to manage WiFi hotspots with Chillispot I have a PHP login script that works without SSL. Email me if you want a copy. Regards, Sean Bracken http://swarmhotspots.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: MySQL settings causing FreeRADIUS to segfault

2006-01-10 Thread Nicolas Baradakis
[EMAIL PROTECTED] wrote: I've tried following several different guides I've found on the net for setting up FreeRADIUS and MySQL and each time, I get the same results. Whenever, I enable anything regarding SQL in radiusd.conf and start up radiusd in debug mode (radiusd -X), FreeRADIUS

x99 Token Module Problems

2006-01-10 Thread David Mitchell
Greetings, I'm working on using FreeRadius to authenticate to our Cisco devices using CryptoCards. I've run into a couple of snags which I don't think can be fixed easily via configuration but will require code changes. Before I start doing anything code-wise, I wanted to see if anybody knew

Re: AW: Noone anny idea fot -- TLS Athentifikation before Domain, Logon XP?

2006-01-10 Thread Alan DeKok
=?iso-8859-1?Q?Armin_Kr=E4mer?= [EMAIL PROTECTED] wrote: I posted 3 days ago an mesage with 2 logfiles out of radius. Because this is a part of my Projekt for my final exam as an IT-Engineer it is verry important for me getting this working. If I help you, do I get a passing grade? In both

freeradius 1.0.4 + mysql cannot authincate

2006-01-10 Thread Jonathan Carpenter
I am running freeradius 1.0.4 + mysql 4.1.16. I have use the mysql database schema from the freeradius tar ball. Everything seems to be setup correctly I can authenticate from flat text files but not from any database usernames. Here is the output from my /usr/sbin/radiusd -X: Starting - reading

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2006-01-10 Thread Paul Khavkine
On Fri, 2005-12-30 at 15:09 -0500, Alan DeKok wrote: Paul Khavkine [EMAIL PROTECTED] wrote: So anyone have an idea how can i fugure out where the server is crasing or how to force it to produce a core dump ? Run it in debugging mode. Set ulimit. It SHOULD dump core. Alan DeKok. -

Re: MySQL settings causing FreeRADIUS to segfault

2006-01-10 Thread Sean
Hi, Have you installed the MySQL development extensions? They are essential. You also need to compile FreeRadius with experimental modules to enable MySQL. Regards, Sean http://swarmhotspots.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius 1.0.4 + mysql cannot authincate

2006-01-10 Thread Dennis Skinner
Jonathan Carpenter wrote: Config: including file: /etc/raddb/sql.conf That's good. rad_recv: Access-Request packet from host 127.0.0.1:32784 http://127.0.0.1:32784, id=125, length=58 User-Name = scooby User-Password = scooby NAS-IP-Address = 255.255.255.255

Re: freeradius 1.0.4 + mysql cannot authincate

2006-01-10 Thread Jonathan Carpenter
Here is the entry from my radius.conf authenticate { Auth-Type PAP { pap } Auth-Type CHAP { chap } } # # Pre-accounting. Decide which accounting type to use. # preacct { preprocess acct_unique suffix #files } # # Accounting. Log the accounting data. # accounting { acct_unique

Re: freeradius 1.0.4 + mysql cannot authincate

2006-01-10 Thread Lewis Bergman
Jonathan Carpenter wrote: auth: No authenticate method (Auth-Type) configuration found for the request: Rejecting the user auth: Failed to validate the user. This doesn't look promising. -- Lewis Bergman Texas Communications 4309 Maple St. Abilene, TX 79602-8044 Off. 325-691-1301 Cell

Re: possible ascend data filter problems

2006-01-10 Thread Alan DeKok
Chuck [EMAIL PROTECTED] wrote: i have been working with our upstream dialup provider for a week now and he has come to the conclusion that freeradius is passing the data as ascii rather than abinary. Hmm... that shouldn't happen. Which version are you running? That too did not change

Re: FreeRADIUS 1.0.5 rlm_ldap crashing

2006-01-10 Thread Alan DeKok
Paul Khavkine [EMAIL PROTECTED] wrote: The server is running as root, core dumps are allowed in the config, it crashes with either signal 6 or signal 11 when running with -x or -xx, does not crash when running -X Ah... your OS may not support threaded core dumps. Yuck. It sounds like a

Re: possible ascend data filter problems

2006-01-10 Thread Chuck
On Tuesday 10 January 2006 06:41 pm, Alan DeKok wrote: version 1.0.5 i may have messed up with the configuration or dictionaries i don't know. the ascend dictionary is in the directory and is included in the main dictionary. this is a gentoo installation made by simply doing emerge freeradius

Re: freeradius 1.0.4 + mysql cannot authincate

2006-01-10 Thread Alan DeKok
Jonathan Carpenter [EMAIL PROTECTED] wrote: Here is the entry from my radius.conf ... And no authorize section. From the debug log you posted, it looks like you deleted it completely. Don't do that. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: x99 Token Module Problems

2006-01-10 Thread Alan DeKok
David Mitchell [EMAIL PROTECTED] wrote: 1) Our tokens display the response in so-called 'phone number' formatting. FreeRadius knows about 4 different CryptoCard formattings according to x99passwd.sample: d7, d8, h7 and h8. Where a response would be formatted as '12345678' in d8 and

Re: freeradius 1.0.4 + mysql cannot authincate

2006-01-10 Thread Jonathan Carpenter
I have the authorize section in my radius.conf, what other authorize section do I need?On 1/10/06, Alan DeKok [EMAIL PROTECTED] wrote:Jonathan Carpenter [EMAIL PROTECTED] wrote: Here is the entry from my radius.conf...And no authorize section.From the debug log you posted, it lookslike you