Re: Error with rlm_perl

2006-12-04 Thread Boian Jordanov
On Monday 04 December 2006 01:20, Robert Masse wrote: Hi, I have the following error when trying to use rlm_perl : Module: Loaded perl /usr/sbin/freeradius: symbol lookup error: /usr/local/lib/rlm_perl-1.1.2.so: undefined symbol: perl_alloc Check if you have libperl.so in your system.

Re: Questions about proxy radius on multihomed host

2006-12-04 Thread Kostas Zorbadelos
On Sun, Dec 03, 2006 at 09:15:54PM -0800, Alan DeKok wrote: Kostas Zorbadelos wrote: on a multihomed Solaris host when radius packets are proxied what is their source IP? Is it IP1 or it could also be IP2? Uh... that's up to the OS. That's what I also thought. This would have to do

Re: TTLS : where to indicate User/Password ?

2006-12-04 Thread Bruno Costacurta
On Monday 04 December 2006 06:09, Alan DeKok wrote: Bruno Costacurta wrote: Hello, I'm trying to configure FreeRadius using TTLS but got confused about the User/Password definiton and/or location as it seems that (please see log hereafter) user is found but not the password. Currently I

RE: Error with rlm_perl

2006-12-04 Thread Robert Masse
I have the following error when trying to use rlm_perl : Module: Loaded perl /usr/sbin/freeradius: symbol lookup error: /usr/local/lib/rlm_perl-1.1.2.so: undefined symbol: perl_alloc Check if you have libperl.so in your system. I hadn't libperl.so on my system (Debian Sarge). Now,

Re: TTLS : where to indicate User/Password ?

2006-12-04 Thread Bruno Costacurta
On Monday 04 December 2006 10:17, Bruno Costacurta wrote: On Monday 04 December 2006 06:09, Alan DeKok wrote: Bruno Costacurta wrote: Hello, I'm trying to configure FreeRadius using TTLS but got confused about the User/Password definiton and/or location as it seems that (please see

FreeRadius + Ldap + TLS/SSL

2006-12-04 Thread Rafał Kamiński
Hello I install freeradius on Debian Sarge machine. I have my user in ldap and I use that directory to auth. them. It's works. But when I want to use TLS in connections between radius and ldap, I have that error in radius log. rlm_ldap: ldap_get_conn: Checking Id: 0 rlm_ldap:

unsubscribe

2006-12-04 Thread Müller , Holger
-- CONET Solutions GmbH Holger Müller Theodor-Heuss-Allee 19, 53773 Hennef Tel.: +49 2242-939-482, Fax: +49 2242-939-393 Internet: http://www.conet.de - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: unable to compile with openssl libraries

2006-12-04 Thread Stephen Gran
On Mon, Dec 04, 2006 at 02:21:53PM +1100, Peter Param said: The following hasn't worked for me either: ./configure --with-openssl-includes=/usr/local/ssl/include/ --with-openssl-libraries=/usr/local/ssl/lib/ On Mon, Dec 04, 2006 at 02:36:52PM +1100, Peter Param said: no good. when I

RE : FreeRadius + Ldap + TLS/SSL

2006-12-04 Thread Thibault Le Meur
-Message d'origine- De : [EMAIL PROTECTED] radius.org [mailto:[EMAIL PROTECTED] sts.freeradius.org] De la part de Rafa³ Kamiñski Envoyé : lundi 4 décembre 2006 13:28 À : freeradius-users@lists.freeradius.org Objet : FreeRadius + Ldap + TLS/SSL When i saw that error, i

Re: Error with rlm_perl

2006-12-04 Thread Boian Jordanov
On Monday 04 December 2006 12:01, Robert Masse wrote: I have the following error when trying to use rlm_perl : Module: Loaded perl /usr/sbin/freeradius: symbol lookup error: /usr/local/lib/rlm_perl-1.1.2.so: undefined symbol: perl_alloc Check if you have libperl.so in your

Re: RE : FreeRadius + Ldap + TLS/SSL

2006-12-04 Thread Rafał Kamiński
Thx It's works. But I have another question: -In freeradius log (freeradius -XXX -A) i see my password from ldap server, how i can crypt that password ? BR Kamyk On Dec 4, 2006, at 1:57 PM, Thibault Le Meur wrote: -Message d'origine- De : [EMAIL PROTECTED] radius.org

Problem cheking multivalued attributes in LDAP schemas.

2006-12-04 Thread Erling Paulsen
I try to make a decision based on checking for a value in a certain attribute of a LDAP schema. The problem is that this is a multivalued attribute, and it seems somewhat undefined when I try to check against it! My exact problem is checking against a eduPerson schema for an affiliation on an

Re: Problem cheking multivalued attributes in LDAP schemas.

2006-12-04 Thread Kostas Kalevras
Erling Paulsen wrote: I try to make a decision based on checking for a value in a certain attribute of a LDAP schema. The problem is that this is a multivalued attribute, and it seems somewhat undefined when I try to check against it! My exact problem is checking against a eduPerson schema

NAS Port always 0

2006-12-04 Thread Tom Murphy
Hi, I'm using a linux box as the NAS. PPP connections come in and get fed to radiusclient which in turn contacts a FreeRADIUS 1.1.3 server. Some of the PPP connections are dynamic, most are static. I did set up ippool properly in FreeRADIUS, but it dishes out only 2 IP addresses. Doing some

RE : Problem cheking multivalued attributes in LDAP schemas.

2006-12-04 Thread Thibault Le Meur
-Message d'origine- De : [EMAIL PROTECTED] radius.org [mailto:[EMAIL PROTECTED] sts.freeradius.org] De la part de Erling Paulsen Envoyé : lundi 4 décembre 2006 15:11 À : FreeRadius users mailing list Objet : Problem cheking multivalued attributes in LDAP schemas. I try to

Re: NAS Port always 0

2006-12-04 Thread Alan DeKok
Tom Murphy wrote: Doing some searching around, I discovered this is because the Nas-Port is always 0 (as evidenced by the radius log files). So it will only send those two addresses out because it thinks the same user is logging on each time? Yes. Is there a way to tell the pppd-radius

Re: RE : FreeRadius + Ldap + TLS/SSL

2006-12-04 Thread Alan DeKok
Rafał Kamiński wrote: -In freeradius log (freeradius -XXX -A) i see my password from ldap server, how i can crypt that password ? You don't. Debugging mode is SUPPOSED to tell you what the passwords are, otherwise debugging mode is useless. if you don't want the passwords, don't run in

Re: Questions about proxy radius on multihomed host

2006-12-04 Thread Alan DeKok
Kostas Zorbadelos wrote: There are patches pending against CVS head that should fix this. In a portable way? Yes. Much of FreeRADIUS is intended to be portable. It would be annoying to make it non-portable now. I am reffering to proxy_send in proxy.c Which doesn't matter for

RE: DEFAULT access-reject Reply-Message

2006-12-04 Thread Garber, Neal
In your code, $RAD_REQUEST{'Module-Failure-Message'} what that variable mean? It means look in the RAD_REQUEST hash for key named 'Module-Failure-Message'. RAD_REQUEST, RAD_CHECK and RAD_REPLY are hashes that rlm_perl creates that contain the request, check and reply attributes respectively.

Re: TTLS : where to indicate User/Password ?

2006-12-04 Thread Alan DeKok
Bruno Costacurta wrote: I'm trying to configure FreeRadius using TTLS (certificate on server side only) and MySQL. Client is a Linux laptop using wpa_supplicant. I'm in a learning curve regarding 802.1x and FreeRadius and especially TTLS. That should work without too much effort.

rlm_sql, mysql configuration

2006-12-04 Thread Andrew Long
Setting up 1.1.2 with mysql and mschap. Our existing 0.9 setup uses clients.conf file and the rest via the mysql tables. Now, in 1.2, I see there is a nas table that was not around before (at least on our system), but as far as I can see we still need to use clients.conf as nas has no field

Re: unable to compile with openssl libraries

2006-12-04 Thread Peter Param
Hi again, Eventually, I was able to create the package and install it on my debian server. Now when I run it, I get the following output: rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Failed to link EAP-Type/tls: /usr/lib/freeradius/rlm_eap_tls.so:

RE: DEFAULT access-reject Reply-Message

2006-12-04 Thread Alex M
Ok, I will try to play around with that although I'm feeling that I have no idea what I'm doing Thanks anyway! _ From: [EMAIL PROTECTED] .org [mailto:[EMAIL PROTECTED] eeradius.org] On Behalf Of Garber, Neal Sent: Monday, December 04, 2006 3:23 PM To: FreeRadius users mailing list

Re: Proxy Problems

2006-12-04 Thread Alan DeKok
Daniel Romero wrote: I'm trying to run freeradius with eap/peap, but i'm get stucked in a kind of Proxy-State loop... So... why did you configure the server to proxy requests to itself? Alan DeKok. -- http://deployingradius.com - The web site of the book

Re: unable to compile with openssl libraries

2006-12-04 Thread Alan DeKok
Peter Param wrote: Hi again, Eventually, I was able to create the package and install it on my debian server. Now when I run it, I get the following output: rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap rlm_eap: Failed to link EAP-Type/tls:

Re: Proxy Problems

2006-12-04 Thread Daniel Romero
Sorry, I'm a newbie... I have a radius server connected to internet. I want that any student on campus can get access to internet using their notebooks with eap/peap autentication (also, all students int the same vlan). Then, my intention was that the radius server itself act like a web proxy...

Re: Proxy Problems

2006-12-04 Thread Daniel Romero
I think that this error was caused by a bad concept of radius functión. Now, all proxy go off, but it stops when send: Sending Access-Challenge of id 3 to 192.168.100.185 port 1311... Log on attached file. Thanks! On 12/4/06, Alan DeKok [EMAIL PROTECTED] wrote: Daniel Romero wrote: I'm

Re: rlm_sql, mysql configuration

2006-12-04 Thread Stefan Winter
Hi, see there is a nas table that was not around before (at least on our system), but as far as I can see we still need to use clients.conf as nas has no field for allowed ip addresses of clients. Am I missing something? I see no mention of the nas table in the rlm_sql docs. Thanks in