Re: very long regular expression... [solved]

2006-11-27 Thread Norbert Grochal
Do something like: modules { passwd mac2ok { filename = /etc/raddb/mac2ok format = *Calling-Station-Id:~My-Local-String hashsize = 100 } # other modules } authorize { preprocess mac2ok files # other modules }

Using the attrs concept but filtering it on incoming attributes?

2006-11-27 Thread Jarrod Sayers
I have tried to Google this and and have come up with nothing thus far so I am going to throw this one out there to see if anyone can shed some light on this unique problem. I look after a number of FreeRADIUS 1.1.3 hosts basically acting as big proxies. One of the destination realms, in

Re: very long regular expression...[unclas]

2006-11-27 Thread Phil Mayers
Ranner, Frank MR wrote: DEFAULT My-Local-String == ok, Auth-Type := ACCEPT Reply-Message = %u logged on, Other-Attribute = somevalue Don't do that. Auth-Type := ACCEPT will break EAP, MS-CHAP, and any other challenge-response or multi-round-trip exchange. Set

configuring groups in sql tables

2006-11-27 Thread Alexander Serkin
Hi, Wther i'm missing something in docs or it is impossible to do more than one groupcheck for the same username by sql. I have two groups which should be authorized differently - group1: DEFAULT Huntgroup-Name == MSK, Realm == domain.com, Auth-Type := Accept Service-Type =

Radius Help

2006-11-27 Thread Darrell Fuquay
We are having trouble getting our radius server to connect to Oracle. It was connected last week and we stopped the process due to excessive database connections (an unrelated application issue) and now when we attempt to start it the last logged statement is rlm_sql (sql): starting 0 rlm_sql

Re: Mac based auth

2006-11-27 Thread Alan DeKok
[EMAIL PROTECTED] wrote: The format is whatever format the NAS sends in the User-Name attribute. Thanks Alan, that helped more than you know. It's little things like that that make a *big* difference in setting up a system for the first time. And yes, I cover all of this in my book,

RE : RE : Temporary Accounts

2006-11-27 Thread Thibault Le Meur
I'm replying to myself because I found a very ugly solution to cope with my needs: Have an account not available before a given date. I post this here in case this could be useful to someone, and to get feedback if others have found better way to achieve this. At least the following checks

RE: Radius Help

2006-11-27 Thread Darrell Fuquay
Christopher, Thanks for the response. We can monitor the connections using netstat on the Oracle port, but I'm not sure that is what you mean. Darrell -Original Message- From: Christopher Carver [mailto:[EMAIL PROTECTED] Sent: Monday, November 27, 2006 10:11 AM To: [EMAIL

rlm_eap: SSL error

2006-11-27 Thread Bruno Costacurta
Hello, I receive the following errors : Error: rlm_eap: SSL error error::lib(0):func(0):reason(0) .. Error: Trying to look up name of unknown client 127.0.0.1. .. (please see hereafter more complete log) I'm confused by the fact that this config was working fine few days. Apparently