Re: Multiple input_pairs?

2006-11-02 Thread Patric
Alan DeKok wrote: Patric [EMAIL PROTECTED] wrote: Is it possible to specify multiple input pairs? No. If you want that functionality, use rlm_perl. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog -

Realm and LDAP authentication

2006-11-02 Thread Rio Yang
Hi,I wanna to authenticate user by LDAP server.But I have two LDAP servers for different group of users.For example, students or staffs, each has different realm name.Students' realm name is @ stud.test and staffs' realm name is @staf.test.Realm (@stud.test) must pass to LDAP server one to

Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Dusan Djordjevic Liste
Hi all, I am trying to install dialup admin. I followed HOWTO located in doc/ directory. I created all tables in radius database using provided .sql files in sql/ dir. Now i have 4 tables in radius database: badusers, mtotacct, totacct, userinfo. When I connect to dialup admin and try to create

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Vasea Marii
radcheck is one of the most important tables in freeradius if working with mysql! Is the table where users username, passwors and other data is stored for authenticating users when they are connecting!find! In you freeradius distribution find mysql.sql file and create the tables that are missing!

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Ali Jawad
Please note that you have to use the .sql files provided for the freeradiues server and for dialupadminOn 11/2/06, Dusan Djordjevic Liste [EMAIL PROTECTED] wrote:Hi all,I am trying to install dialup admin. I followed HOWTO located in doc/ directory. I created all tables in radius database using

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Ali Jawad
Well Ive tried dialupadmin..apart from the fact that it might be troubleling to set up...it worked just fine for me..I used it to authenicate ISP clients through pppoe..and to Dusan..as Vasea said...find the .sql file containing the tables for freeradius and import them using phpmyadmin or the

RE: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread John Longland
Title: RE: Database query failed: Table 'radius.radcheck' doesn't exist Dusan 1. I assume you did run the db_sql_mysql.sql script to create the database schema ?? This will create the majority of the schema. 2. Did you run the sql-scripts in /usr/local/dialup_admin/sql ? They are

FR-1.1.3 on solaris10 strange things

2006-11-02 Thread Alexander Serkin
Hi. We have strange behaviour on sparc solaris 10 server with fr-1.1.3 installed: without any visible reason the radiusd process goes to almost 100% CPU usage for 3-5 minutes. Then it comes back to normal state again (less than 1% CPU). Visually the 100% CPU load does not impact the system

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Dusan Djordjevic Liste
Vasea Marii wrote: radcheck is one of the most important tables in freeradius if working with mysql! Is the table where users username, passwors and other data is stored for authenticating users when they are connecting!find! In you freeradius distribution find mysql.sql file and create the

Limit access to internet by mac using freeradius

2006-11-02 Thread Ali Jawad
Hi Ive got a micro ISP with 50 clients running on pppoe and freeradius for authenication, each client has a username and password. When a customer dials through his winbox to create pppoe connection the pppoe server on the server loads radius.so to do the authenication. What I want to do now is

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Dusan Djordjevic Liste
Ali Jawad wrote: Well Ive tried dialupadmin..apart from the fact that it might be troubleling to set up...it worked just fine for me..I used it to authenicate ISP clients OK, thanks for advice, I will give it a try. through pppoe..and to Dusan..as Vasea said...find the .sql file containing

(no subject)

2006-11-02 Thread benodilo
Hi, My freeradius work fine (freeradius in server 1 + Mysql in server 2). But i have errors in my logs(see bottom LOGS 1) and all solutions i try don't solve this. I have : -Increase the number of sql connections to 10 -- num_sql_socks = 10 -Increase the time to wait before cleaning up a reply --

Two sql queries in counter module

2006-11-02 Thread Bishal
Hello all Is it possible to make two queries in sql counter module? like sqlcounter noresetcounter { driver = rlm_sqlcounter counter-name = Max-All-Session-Time check-name = Max-All-Session

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Dusan Djordjevic Liste
1. I assume you did run the db_sql_mysql.sql script to create the database schema ?? This will create the majority of the schema. 2. Did you run the sql-scripts in /usr/local/dialup_admin/sql ? They are executed in a similar fashion. Note: In my case , I got error messages when executing

Re: Database query failed: Table 'radius.radcheck' doesn't exist

2006-11-02 Thread Ali Jawad
Dear Dusan.. Please note before you proceed to phpmyprepaid that the error is msot propably related to your freeradius installation not your dialupadmin installation. Check John's response concerning that matter.On 11/2/06, Dusan Djordjevic Liste [EMAIL PROTECTED] wrote:Vasea Marii wrote:

Re: Freeradius hangs

2006-11-02 Thread Karthik R
Karthik R [EMAIL PROTECTED] wrote: When I was observing the radius log, i was typing correct username and password sometime it says access was denied because username\password invalid on the domain. I didnt see anything going wrong in the log message but i didnt understand why i got the above

RadSec

2006-11-02 Thread Manuel Sánchez Cuenca
Hello all, is RadSec implemented in FreeRadius? or it is planned to be done? Thanks in advance. -- - Manuel Sanchez Cuenca Departamento de Ingenieria de la Informacion y las Comunicaciones Facultad de Informatica. Universidad de Murcia Campus de Espinardo - 30080

freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Michael Messner
hey freeRADIUS users, next step ... testing freeRADIUS on a Solaris 10 box and I'm completely new to solaris! :-( I've started with the configure again but there are so much things missing: aclocal autoconf autoheader locate libgdbm sys/security.h sys/prctl.h prot.h sia.h siad.h krb5.h gawk

Re: freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Stieven . Struyf
did you install only the solaris core system? if so you probably need to install some additional packages.an important directory is /usr/ccs, maybe you need to add it to your path. check that SUNWbtool is installed. another one are the kerberos packages(SUNWkrbu and/or SUNWkrbr) The sun solaris

Re: Limit access to internet by mac using freeradius

2006-11-02 Thread Alan DeKok
Ali Jawad [EMAIL PROTECTED] wrote: I want to authenicate based on mac address and i do not want to use pppoe anymore..so everybody plugging in a network cable into my switch will have immediate internet access only if I have registered his mac address for him See the switch documentation for

Re: Two sql queries in counter module

2006-11-02 Thread Alan DeKok
Bishal [EMAIL PROTECTED] wrote: Is it possible to make two queries in sql counter module? like No. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See

Re: freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Alan DeKok
Michael Messner [EMAIL PROTECTED] wrote: I've started with the configure again but there are so much things missing: ... Very little of that matters. Did the configure process exit with an error? That's all that matters. The whole purpose of configure is to discover what you have on your

Re: Limit access to internet by mac using freeradius

2006-11-02 Thread Ali Jawad
Dear Alan, thanks for your suggestion however the setup is rather small at 50 users and the switch is not managable..Iam a CCNA nothing special about that and I wish I had the means to apply the setup on managable switch using port security however I still care about the accounting features of

Re: RADIUS MAC Authentication

2006-11-02 Thread Alan DeKok
Van Der Westhuizen, Eldridge \(Mr\) \(Summerstrand Campus North\) [EMAIL PROTECTED] wrote: Question: Is it possible to see which mac addresses/usernames got access-reject messages? Yes. It should be in radius.log. I did take my mac out of the list and couldn't connect, but didn't

Re: Freeradius hangs

2006-11-02 Thread Alan DeKok
Karthik R [EMAIL PROTECTED] wrote: Sorry i missed this part. I mean when i try to connect to remote vpn gateway using MS-VPN dialer interface, on the dialer interface i get this error message ie. access was denied because username\password invalid on the domain. Does the RADIUS server

Re: RadSec

2006-11-02 Thread Alan DeKok
=?ISO-8859-1?Q?Manuel_S=E1nchez_Cuenca?= [EMAIL PROTECTED] wrote: is RadSec implemented in FreeRadius? or it is planned to be done? It's not implemented in FreeRADIUS. It may be done in 2.0, if someone is willing to do the work, or motivate others to do the work. Alan DeKok. --

Re: Limit access to internet by mac using freeradius

2006-11-02 Thread Alan DeKok
Ali Jawad [EMAIL PROTECTED] wrote: Dear Alan, thanks for your suggestion however the setup is rather small at 50 users and the switch is not managable.. Then you can't do MAC authentication. Alan DeKok. -- http://deployingradius.com - The web site of the book

Re: Limit access to internet by mac using freeradius

2006-11-02 Thread Zoltan Ori
On Thursday 02 November 2006 05:43, Ali Jawad wrote: I need something like the mac address filtering used in squid ...where only registered mac address are allowed through the proxy..any hints suggestions and/or tutorials are welcome. Use your DHCP server for that. Zoltan Ori - List

Re: Freeradius hangs

2006-11-02 Thread Alan DeKok
Karthik R [EMAIL PROTECTED] wrote: yes, the RADIUS server returned Access-accept for the session requested from NAS. But it again receives the access-request from NAS and sending duplicate reply. If you had said this at the start, and posted the debug log, you would have solved the problem a

Dialup authentication says it works, but doesn't.

2006-11-02 Thread Ernie Dunbar
We have a Cisco AS5300 for our dialup pool. It is able to log into our new FreeRadius server and make authentication requests, but users are not able to authenticate. It's very strange, because FreeRadius produces logs like this: Thu Nov 2 11:06:24 2006 : Auth: Login OK: [XX/XX] (from

Re: Freeradius hangs

2006-11-02 Thread Karthik R
Alan, yes,the RADIUS server returned Access-accept for the session requested from NAS. But it again receives the access-request from NAS and sending duplicate reply. Does it mean NAS unable to process theresponse receivedfrom Freeradius.Below is the reponse snap where i see access-accept and

Need help setting up FreeRadius using PEAP/MSChapV2

2006-11-02 Thread Graham, Robert
A year ago I tried to set up 802.1x on our network using PEAP/MSChapV2 without any luck, but wanted to try again so here I am. I followed the document titled, FreeRADIUS Active Directory Integration HOWTO on the FreeRadius Wiki site and I am still not able to authenicate against AD. I hope

LDAP + AD username length

2006-11-02 Thread duckeo
Is it possible to trim down the length of the username used to query AD with ldap? For names longer than 20 characters I am getting rlm_ldap: object not found or got ambiguous search result returned. Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Need help setting up FreeRadius using PEAP/MSChapV2

2006-11-02 Thread Alan DeKok
Graham, Robert [EMAIL PROTECTED] wrote: A year ago I tried to set up 802.1x on our network using PEAP/MSChapV2 without any luck, but wanted to try again so here I am. I followed the document titled, FreeRADIUS Active Directory Integration HOWTO on the FreeRadius Wiki site and I am still not

RE: freeRADIUS on Solaris 10 - x86

2006-11-02 Thread Ramm-Ericson, Johannes
-Original Message- Date: Thu, 2 Nov 2006 15:24:13 +0100 (CET) From: Michael Messner [EMAIL PROTECTED] Subject: freeRADIUS on Solaris 10 - x86 To: freeradius-users@lists.freeradius.org Message-ID: [EMAIL PROTECTED] Content-Type: text/plain; charset=iso-8859-1 hey freeRADIUS