rlm_perl link error

2006-09-18 Thread Alexander Serkin
Hi, i'm getting the following error while building rlm_perl module: make[6]: Entering directory `/opt/fr/src/freeradius-1.1.3/src/modules/rlm_perl' /opt/fr/src/freeradius-1.1.3/libtool --mode=link gcc -release 1.1.3 \ -module -export-dynamic -o rlm_perl.la \ -rpath /opt/fr/lib

FreeRadius 1.13 support Dual Stack IPv4/IPv6 ?????

2006-09-18 Thread 나종현
FreeRadius 1.13 support Dual Stack ?? No compile ... IPv4 / IPv6 support? ☞ 카트라이더가 지겹다면? 이제는 인라인 레이싱게임 Xplay! ☜ - List info/subscribe/unsubscribe? See

Re: FreeRadius 1.13 support Dual Stack IPv4/IPv6 ?????

2006-09-18 Thread Stefan Winter
Hi, thank you for not using HTML E-Mails in the future. FreeRadius 1.13 support Dual Stack ?? FreeRADIUS 1.1.3 does not particularly care if the host it runs on is dual-stack. It will work just fine, but only use the IPv4 stack of the machine.   IPv4 / IPv6 support? It will also transport

Re: FreeRadius 1.13 support Dual Stack IPv4/IPv6 ?????

2006-09-18 Thread Peter Nixon
On Mon 18 Sep 2006 11:46, Stefan Winter wrote: FreeRADIUS 1.1.3 does not particularly care if the host it runs on is dual-stack. It will work just fine, but only use the IPv4 stack of the machine.   IPv4 / IPv6 support? It will also transport IPv6 RADIUS attributes. It will NOT send

different NAS types with different parameters

2006-09-18 Thread Michael Messner
hey list, we have switches from enterasys and access points from cisco, now we have configured the parameters like this example in the users file: DEFAULT LDAP-Group == CN=xadmins,CN=users,DC=isalab,DC=local Filter-ID == Enterasys:version=1:policy=xadmins, Tunnel-Type:1 = 13,

Re: FreeRadius 1.13 support Dual Stack IPv4/IPv6 ?????

2006-09-18 Thread Stefan Winter
Hi, Given that this appears to be a FAQ (Especially from SE Asia where they have IPv6 deployments) I have added it to the FAQ: Great! Please feel free to edit the entry for clarity :-) No need for that. I couldn't have said it any better. Oh, wait... :-) Stefan -- Stefan WINTER RESTENA

Re: different NAS types with different parameters

2006-09-18 Thread Michael Schwartzkopff
Am Montag, 18. September 2006 10:59 schrieb Michael Messner: hey list, we have switches from enterasys and access points from cisco, now we have configured the parameters like this example in the users file: DEFAULT LDAP-Group == CN=xadmins,CN=users,DC=isalab,DC=local Filter-ID

Re: different NAS types with different parameters

2006-09-18 Thread Peter Nixon
On Mon 18 Sep 2006 11:59, Michael Messner wrote: hey list, we have switches from enterasys and access points from cisco, now we have configured the parameters like this example in the users file: DEFAULT LDAP-Group == CN=xadmins,CN=users,DC=isalab,DC=local Filter-ID ==

Freeradius IODBC bug?

2006-09-18 Thread Angelo Compagnucci
Hi to all! I'm desperate ;( ... I have to work with a MS SQL server from freeradius. Debian team removed feeradius-unixodbc (i've used only unixodbc until now) from repos and i installed freeradius-unixodbc. When i launch freeradius -X i see this errors (with trace enabled):

Problems in EAP-TLS in new Windows XP clients

2006-09-18 Thread Jose Marcos Lopez Caravaca
Hi. I have been stuck in this problem for a quite a long time, I hope you can help me. I have a wireless network using WPA-Enterprise, with EAP-TLS using radius 1.0.2. The system has been working good so far, using Windows XP clients and Linux with wpasupplicant with no problems. On the

What kind of error in client-cert using EAP?

2006-09-18 Thread Alexandros Gougousoudis
Hi, I have trouble with one XP-SP2 client, using a certificate to make 802.1x Auth over EAP-TLS. The cert is a machine cert. On the serverside I get this (using -X -A) in authenticate: modcall: entering group authenticate for request 33 rlm_eap: Request found, released from the list

FEERADIUS and SUN Directory server groups

2006-09-18 Thread Petr \Qaxi\ Klíma
Hello I am using freeradius (1.0.1) with SUN directory server (5.2) Authentication (username:password) works well but I do not know how to use LDAP for group mapping (to Ldap-Group). The problem: in SUN DS there are groups defined in two ways (If you use SUN JES system)

Re: Problems in EAP-TLS in new Windows XP clients

2006-09-18 Thread Alexandros Gougousoudis
Hi Jose, On the last month I'm having problems making new Windows XP clients connect to the network, even when old instalations of Windows XP SP2 are working good so far. The OEM Windows XP on the thats interessting, because I posted the error on the list a couple of minutes ago. After

Re: FEERADIUS and SUN Directory server groups

2006-09-18 Thread Kostas Kalevras
Petr Qaxi Klíma wrote: Hello I am using freeradius (1.0.1) with SUN directory server (5.2) Authentication (username:password) works well but I do not know how to use LDAP for group mapping (to Ldap-Group). The problem: in SUN DS there are groups defined in two ways (If you use SUN JES

SOLVED Freeradius IODBC bug?

2006-09-18 Thread Angelo Compagnucci
Dear Freeradius developers and Users, After some code deep analysis, I've found a bug in the rlm_sql_iodbc module. The module doesn't search the DSN name in the server attribute, but in radius_db one. All the documentation included with Freeradius, the wiki an other source doesn't report

Re: {POSSIBLE FRAUD ATTEMPT!} {Disarmed} Re: denying access to user from device

2006-09-18 Thread Rob Shepherd
Lin Richardson wrote: Where is your files declaration in the authorize section? Yes of course. My authorize section missed out 'files' so raddb/users was never read. Thanks to Alan D. and Lin R. for pointing this out. Working great now... Thanks again. Rob -- Rob Shepherd | Computer

Re: rlm_perl link error

2006-09-18 Thread Nicolas Baradakis
Alexander Serkin wrote: i'm getting the following error while building rlm_perl module: [...] gcc -shared -Wl,-h -Wl,rlm_perl-1.1.3.so -o .libs/rlm_perl-1.1.3.so .libs/rlm_perl.o -R/opt/fr/src/freeradius-1.1.3/src/lib/.libs -R/opt/fr/lib

Troubel with Cisco Aironet 1130 and MAC authentication

2006-09-18 Thread Christoffer Dahl Petersen
Hi! I'm trying to get a Cisco Aironet 1130 to do MAC authentication with freeradius and a pgsql as backend. I Have made my own table in the pgsql witch looks like this: radius= select * from maskiner; mid | mnavn | mmac | mpwd | mattr | mop

Re: FEERADIUS and SUN Directory server groups

2006-09-18 Thread Petr \Qaxi\ Klíma
Kostas Kalevras napsal(a): Petr Qaxi Klíma wrote: filteredgroup === $ ldapsearch cn=gprs_filter dn: cn=gprs_filter,ou=Groups,dc=myorg cn: gprs_filter objectClass: groupofurls objectClass: groupofuniquenames objectClass: top objectClass:

Create-users.pl

2006-09-18 Thread Nico Gazzano
Ive used this script to generate a list of users, the script creates about 7 different files. What do I do with these now? I assume that the contents of radius.user will have to be added to the users file, but what of the other 6 files? Nico Gazzano Network Systems Admin MIS Choice

Re: What kind of error in client-cert using EAP?

2006-09-18 Thread Alan DeKok
Alexandros Gougousoudis [EMAIL PROTECTED] wrote: TLS_accept:error in SSLv3 read client certificate A ... Which indicates that there is a problem in the client-cert. No. It means that there is NO client cert. The authentication process continues, so it's obviously not a catastrophic

Re: Create-users.pl

2006-09-18 Thread Alan DeKok
Nico Gazzano [EMAIL PROTECTED] wrote: I've used this script to generate a list of users, the script creates about 7 different files. What do I do with these now? I assume that the contents of radius.user will have to be added to the users file, but what of the other 6 files? First, why

users fil vs sql

2006-09-18 Thread Keith Woodworth
Ive got things working using 1.1.3, username in radcheck with crypt-password, using auth-type = Local in radgroupcheck. I'm using the flat Users file with a simple 6 line Default entry to make it all work. On my test bed this has been working quite well for the last 3 days. While this is ok, how

RE: Create-users.pl

2006-09-18 Thread Nico Gazzano
I'm using the script because I am having an extremely difficult time getting dialupadmin to come up so that I could use it. That is a whole different issue in itself that I have to fix at a later time. Right now I'm working on a time constraint NetReg project that needs to be done last week.

Proxy.conf

2006-09-18 Thread Cliff Hayes
Hello, --1-- I am running FreeRADIUS 1.1.2 with MySQL database support. When I comment out the include line for proxy.conf, my users can no longer authenticate. The logs show their entire username + realm instead of just the username. I figure it is because it can't strip the realm anymore

RE: Pattern Matching in users file

2006-09-18 Thread Garber, Neal
Which says you *can* use them. It doesn't say you *can'*t use anything else. Thanks Alan. As always, I appreciate you taking the time to offer your insight. Currently, the Wiki, README and sample file only mention the example of testing username using prefix/suffix. If a more generic

Re: Proxy.conf

2006-09-18 Thread Alan DeKok
Cliff Hayes [EMAIL PROTECTED] wrote: When I comment out the include line for proxy.conf, my users can no longer authenticate. The logs show their entire username + realm instead of just the username. I figure it is because it can't strip the realm anymore because it doesn't know what the

Re: users fil vs sql

2006-09-18 Thread Alan DeKok
Keith Woodworth [EMAIL PROTECTED] wrote: While this is ok, how does radius get configured to use the sql table to send the replies, not the users file? Look in radiusd.conf for sql. You have to configure the SQL module. Ive tried commenting out all the files entries in radiusd.conf but

Re: Pattern Matching in users file

2006-09-18 Thread Alan DeKok
Garber, Neal [EMAIL PROTECTED] wrote: Did I miss something? No. The hints file is just does more than it's documented to do. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See

Re: ERROR! Proxy listen.c error

2006-09-18 Thread Alan DeKok
Guilherme Franco [EMAIL PROTECTED] wrote: Using Proxy, when user mistypes the password, radiusd -X crashes with Assertion failed in listen.c, line 558 I don't see that here... Are you HUP'ing the server? Alan DeKok. -- http://deployingradius.com - The web site of the book

RE: Radius dies, on certificate verification

2006-09-18 Thread Christopher, Paul
Does anyone know of any documentation on how to setup EAP-MSChapv2 authentication? I have tried deployradius.com and viki but have not found anything. Any insight would be greatly appreciated. Thanks, Paul. This e-mail message, including any attachments, is for the sole use of the intended

Re: ERROR! Proxy listen.c error

2006-09-18 Thread Guilherme Franco
Hello, Mr. DeKok, I've figured out that this problem only appears if I do a test aaa ppp user password from Juniper's ERX (and only if proxying is used). I was worried about this, but when I tested with the user authenticating from an ADSL modem, there are no problems. So, might be just

Fwd: VSA does not work when using PROXY

2006-09-18 Thread Guilherme Franco
Hello, I've just managed to make it work using := instead of == in attrs file. :) -- Forwarded message -- From: Guilherme Franco [EMAIL PROTECTED] Date: Sep 15, 2006 3:51 PM Subject: VSA does not work when using PROXY To: FreeRadius users mailing list

Re: Radius dies, on certificate verification

2006-09-18 Thread Alan DeKok
Christopher, Paul [EMAIL PROTECTED] wrote: Does anyone know of any documentation on how to setup EAP-MSChapv2 authentication? I have tried deployradius.com and viki but have not found anything. Any insight would be greatly appreciated. You configure a password, and it works. I just tried it

Authenticating users on cisco 3750 switch

2006-09-18 Thread Jean-Francois Fortin
Hi, We are trying to use freeradius as authentication system to allow users to connect to our cisco switch (3750) for management. The radius server is running ok, we can authenticate Cisco ASA, BigIP LB against it. But when trying with the 3750, we see that the radius server accept the

sqlippool not working

2006-09-18 Thread Guilherme Franco
Hi Peter, Like you told me before, you did some cleanups in the sqlippool.conf. Well, I've tried to install todays freeradius CVS, and it installed without the sqlippool module, don't know why. So, I've compiled it manually from freeradius-snapshot-20060918/src/modules/rlm_sqlippool/ OK

Re: ERROR! Proxy listen.c error

2006-09-18 Thread Alan DeKok
Guilherme Franco [EMAIL PROTECTED] wrote: I was worried about this, but when I tested with the user authenticating from an ADSL modem, there are no problems. So, might be just another of ERX's crazy behaviors. Still... it shouldn't kill the server. Alan DeKok. --

RE: Proxy.conf

2006-09-18 Thread Cliff Hayes
Ok. Thanks. I'm trying to learn. The instructions in radiusd.conf say the following: # To disable proxying, change the yes to no, and comment the # $INCLUDE line. Here's the issue -- how can I comment out the include line if that is what causes my problem. I want to disable proxying. I

Re: Write access to the wiki

2006-09-18 Thread Kevin Bonner
On Monday 18 September 2006 01:12, Graham Beneke wrote: Is access to the wiki exclusive?? I wanted to start working on a sqlcounter page since the current documentation is rather lacking and I plan to 'journal' my exploits in figuring it out... But I can't seem to find the register link that

Re: Proxy.conf

2006-09-18 Thread Alan DeKok
Cliff Hayes [EMAIL PROTECTED] wrote: The instructions in radiusd.conf say the following: # To disable proxying, change the yes to no, and comment the # $INCLUDE line. Here's the issue -- how can I comment out the include line if that is what causes my problem. I want to disable

No matching entry in the database

2006-09-18 Thread Federico Wenner
Dear friends, I have a problem activating users in the freeRadius server (with PCLinuxOS, MySQL Database): Username monkey Passwd quikec Getting the following radius.log : ** Mon Sep 18 16:35:56 2006 : Info: rlm_sql (sql): No matching entry in the database for