machine authentication (was: Windows-Domain login without local users)

2006-11-13 Thread Michael Messner
hey freeRADIUS users, the testlab looks like Windows 2003 (AD) --- Freeradius --- Enterasys switch/Cisco WLAN --- Linux/MS-Client 802.1x via PEAP works, so the next step is machine authentication to get also a 802.1x Domain login. like in this post

Re: freeradius child processes

2006-11-13 Thread dan1
Alan Alan, Thank you for your help. I did not think of the different kernel versions. the ps aux -L does the job. Thanks Dan [EMAIL PROTECTED] wrote: Is this because freeradius is using multiple threads within one process, and only one process is visible in the process list? Yes.

RE: Reject reason

2006-11-13 Thread Garber, Neal
I am authenticating users based on Calling-Station-Id in addition to password. All accepts and rejects are logged to the postauth table in my database. Using what type of authentication? Are you really checking Calling-Station-Id during authenticate or are you checking it during

SV: Reject reason

2006-11-13 Thread Jørn Kostøl Gundersen
I have specified Calling-Station-Id in the radcheck table along with the Username/Password entry. Fra: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] P vegne av Garber, Neal Sendt: 13. november 2006 15:36 Til: FreeRadius users mailing list Emne: RE: Reject reason I am

Re: freeradius mac athentication with Tsunami MP.11 5054-R v2.3.0(169)

2006-11-13 Thread Guy Fraser
Hi Cam I am back from Victoria. Could you send us some debug info. HINT: Start freeradius from the command line using radiusd -X . See man radiusd for more information. After it is in debug mode, attempt an authentication and send us the info. On Wed, 2006-11-08 at 13:18 +, Cameron

Radius account health checks

2006-11-13 Thread Heivilin, Jim
I've got a two pairs of radius servers (running red hat 4 update 4, freeradius 1.0.1 with oracle 9.2.0) running under a pair of 2424 load balancers. Every two second the load balancers send an accounting health check to each of the radius machines which then writes a row to our oracle tables.

Re: Radius account health checks

2006-11-13 Thread Alan DeKok
Heivilin, Jim [EMAIL PROTECTED] wrote: I tried to create an oracle trigger to prevent these rows from being written; Why not just key off of the user name in the acct_users file? #--- DEFAULT User-Name == DEFAULT, Acct-Type = ok #--- Then in radiusd.conf: #--- ... accounting {

Problems building freeradius 1.1.3 under cygwin...

2006-11-13 Thread 3ric Johanson
Hi there, I've been trying to get cygwin to build freeradius for a while now... just kinda watching the version numbers grow, but still having problems. :) Here is the first error that it bombs out at: Making all in rlm_perl... make[6]: Entering directory

Re: Problems building freeradius 1.1.3 under cygwin...

2006-11-13 Thread 3ric Johanson
Update: $ cat startup.log Ignoring deprecated command-line option -pStarting - reading configuration files ... reread_config: reading radiusd.conf Config:including file: /usr/local/etc/raddb/proxy.conf Config:including file: /usr/local/etc/raddb/clients.conf Config:including

duplicate AcctUniqueId, so test starttime in stop_query?

2006-11-13 Thread Brad Brad
We are seeing duplicate AcctSessionId and AcctUniqueId's in our radacct mysql table, when the accounting_stop_query is run its overwriting all previous records (except AcctStartTime) with the latest one. Sometimes it happens seconds apart, somtimes its weeks apart. I was wondering if testing

rewriting usernames

2006-11-13 Thread Christopher Carver
Hello, How do I rewrite the value of the User-Name attribute based on Called-Station-Id? I need to do a series of these logical decisions and replace the username with username@some-isp.com based on what the value of Called-Station-Id is. rlm_attr_rewrite seems the obvious choice, but I can't

Re: FR-1.1.3 on solaris10 strange things

2006-11-13 Thread Alexander Serkin
Alan DeKok пишет: Alexander Serkin [EMAIL PROTECTED] wrote: May be someone could give an advice how to debug the problem while the server will not be in production? Attach to it with gdb, and see what it's doing. Got some debugs on this. The problem does not depend on solaris version -