Re: Password Problem

2006-08-04 Thread PhilT
I Do not understand how to set this up for chillispot. How do I tell the server the passwords are crypted? And if I shouldn't use CHAP, what should I use, and how do I change it? I can't seem to get my head wrapped around the man at the minute. Sorry for being a noob, but this is my first

Re: FR-1.1.2 dies with error

2006-08-04 Thread Alexander Serkin
Alan DeKok пишет: It's probably because your DB is slow. See the logs for messages about unresponsive child. The code path to the assertion is taken only when the request has been marked done, but there is still a child thread blocked, and working on it. Either fix the DB, or delete the

NAS-ID missing in 1.1.2?

2006-08-04 Thread Drew S. Dupont
Has this attribute been intentionally left out of 1.1.2? In my 1.1.1 build it works as a user attribute in the users file. But in 1.1.2, it complains about not finding it. It is not listed in any dictionary in 1.1.1 or 1.1.2 so I would assume it was internal to the server itself. Fri Aug 4

EAP-TTLS + LDAP + PAP with encrypted password

2006-08-04 Thread wekz
Hi all, I've been trying to get over this configuration but without any success. I'm using freeradius-1.1.1.First I had this working with eap-tls and peap for authentication and ldap for authorization, it was working quite well. As I have to integrate this configuration with an ldap that has

Re: Freeradius + OpenLDAP - user password problem

2006-08-04 Thread Stuckzor
Thanks to you too. I noticed some people feel offended by my attitude, so let me apologize - i don't mean to be a smartass, and i definetly don't have any doubts in your knowledge, but i'm a young computer engineer (first months of work) and when things get hard for me i can get a little pushy

monitoring freeradius with snmp

2006-08-04 Thread Andy Ford
Hi, I have a requirement to monitor freeradius with snmp. According to the freeradius web site and other sources I've done the following... 1. compiled freeradius with the '--with-snmp' option 2. modified the freeradius snmp.conf file to include smux_password = verysecret 2. modified the

Re: NAS-ID missing in 1.1.2?

2006-08-04 Thread Alan DeKok
Drew S. Dupont [EMAIL PROTECTED] wrote: Has this attribute been intentionally left out of 1.1.2? In my 1.1.1 build it works as a user attribute in the users file. But in 1.1.2, it complains about not finding it. Prior to 1.1.2, unknown attributes in the users file were silently ignored.

Re: Freeradius + OpenLDAP - user password problem

2006-08-04 Thread Alan DeKok
Stuckzor [EMAIL PROTECTED] wrote: Now i configured radius to use EAP-PEAP and i tought i have only 1 step left to take - make OpenLDAP use NT hash passwords (already know how to do that), but damn, that no dialup access attribute error strikes again with radtest:( From the ldap section of

Access to wiki?

2006-08-04 Thread John Horne
Hello, Is there a problem with the freeradius wiki (http://wiki.freeradius.org)? I am trying to sort out a problem and came across a reference to the wiki page. However my browser just sits there when trying to access the page. I can resolve the DNS name and ping it; just not access it.

Re: noob with some questions

2006-08-04 Thread Alan DeKok
P. K. [EMAIL PROTECTED] wrote: This thread has already dragged out beyond reason but I feel since I'm being attacked I should defend myself. You posted two messages, and didn't get much response. You then posted an insulting message about how people here sucked, how the documentation

Auth-Type:Local password change problem.

2006-08-04 Thread 나종현
Auth-Type : Local users file consist user_name / password. this file modify? how to change password ? ☞ 실시간 메일 알림! 이제 U2에서~ 악성코드 무료 치료 기능, SMS 100건 무료 제공! ☜ - List info/subscribe/unsubscribe? See

Re: noob with some questions

2006-08-04 Thread Eric Hilden
What a poor attitude and even more, Free support is dedicated by those with Free time. Think twice before bitching about someones work when they have already posted the how to and know how to do it. If you don't understand it that is fine and pay someone for the service. I have no problem with

Re: Auth-Type:Local password change problem.

2006-08-04 Thread Lin Richardson
Are you using the local user password from the operating system on the freeradius server? I think you need to change the Unix/Linux/BSD password for that user on the box.I thought that Auth-Type : File was the one that used the users file. Other more knowledgeable users may correct me.regards,Lin

freeradius function

2006-08-04 Thread Lin Richardson
Hello All,Is there a succinct way to describe how freeradius processes requests? sort of a high level overview?Like: The radiusd daemon is running and receives a valid requestIt parses out attributes passed in with the request ... and then...That is the point where I'd like some clarification...

Re: freeradius function

2006-08-04 Thread Alan DeKok
Lin Richardson [EMAIL PROTECTED] wrote: Is there a succinct way to describe how freeradius processes requests? sort of a high level overview? doc/aaa.txt is about as good as it gets. That is the point where I'd like some clarification... what files does it parse as it continues, etc...?

Re: Password Problem

2006-08-04 Thread Alan DeKok
PhilT [EMAIL PROTECTED] wrote: 1. In the MySQL database do you have the Attribute set to Password and not something else, for example 11 usernamehere PASSWORD == passwordhere 2. In Freeradius users file DEFAULT Auth-Type := Local NO. Do NOT SET THAT. It's NOT NECESSARY. That point has

Re: FR-1.1.2 dies with error

2006-08-04 Thread Alan DeKok
Alexander Serkin [EMAIL PROTECTED] wrote: Do you mean just comment out line 1012 in request_list.c ? Yes. I think i'll try this first because speeding up DB is not a trivial task by now. But it's the real source of the problem... Alan DeKok. -- http://deployingradius.com -

Re: EAP-TTLS + LDAP + PAP with encrypted password

2006-08-04 Thread Alan DeKok
wekz [EMAIL PROTECTED] wrote: The user is authorized and the password is got from the ldap (rlm_ldap: Adding userPassword as User-Password, value {sha}rur+4yJuecpmc8vxS/8wAyAMNHM= op=21) In 1.1.x, you have to configure the ldap module to know about the {sha} password

Re: More documentation on Auth-Type

2006-08-04 Thread Alan DeKok
Duane Cox [EMAIL PROTECTED] wrote: Alan, great job putting the new book together. And you haven't seen the rest of the content... As an example, I've got 10 pages describing how dictionaries work, and how to create them. At this rate, the book will be 400 pages long. I am using rlm_sql for

Re: monitoring freeradius with snmp

2006-08-04 Thread Alan DeKok
Andy Ford [EMAIL PROTECTED] wrote: 1. compiled freeradius with the '--with-snmp' option Did the configure process find the SNMP information it needed? Does src/include/autoconf.h have a line like: #define WITH_SNMP 1 ? 2. modified the radiusd.conf file with snmp = yes

Re: Password Problem

2006-08-04 Thread Phil Mayers
Alan DeKok wrote: PhilT [EMAIL PROTECTED] wrote: 1. In the MySQL database do you have the Attribute set to Password and not something else, for example 11 usernamehere PASSWORD == passwordhere 2. In Freeradius users file DEFAULT Auth-Type := Local NO. Do NOT SET THAT. It's NOT NECESSARY.

Re: Password Problem

2006-08-04 Thread Alan DeKok
Phil Mayers [EMAIL PROTECTED] wrote: So many times in fact that I reckon you should add a config item that has to be set to a particular value: yes_i_understand_auth_type_and_am_prepared_to_accept_the = consequences g Or, in 2.0, simply re-name it to something else, and don't include a

Re: monitoring freeradius with snmp

2006-08-04 Thread Kevin Bonner
On Friday 04 August 2006 09:59, Andy Ford wrote: 4. started the radiusd and snmpd daemons. Sounds good so far. When you run in debug mode, does the SMUX registration work properly? You should see something similar to this: SMUX connect try 1 SMUX open oid: 1.3.6.1.4.1.3317.1.3.1 SMUX open

read_groups in cvs

2006-08-04 Thread Duane Cox
I've got mssql.conf read_groups = yes but the rlm_sql module does not process the groups. The user is found in radcheck and the check items (password) does match... and I do NOT have Fall-Through = yes in the radreply ... as per docs... (3d) 3. Group processing then begins if any of the

Re: More documentation on Auth-Type

2006-08-04 Thread Alan DeKok
Kevin Bonner [EMAIL PROTECTED] wrote: Looks great! The compatibility matrix is pretty handy as well. Thanks. Little touches like that help a lot. One thing I didn't see mentioned on the auth type page is the heavily used Auth-Type := Local. Was that consciously omitted, or are you still

Re: Password Problem

2006-08-04 Thread Lawrence Shafer
Alan DeKok wrote: Lawrence Shafer [EMAIL PROTECTED] wrote: I think it is not chillispot, because I can change the password in dialupadmin, and then check password (in dialupadmin) and it says NO It is wrong. How can I change the system to clear-text passwords? Or does it sound like a