unsubscribe

2007-10-02 Thread John Wan
John Wan Project Manager (DMZ project), Information Technology Services Melbourne Business School T: +61 3 9349 8428 F: +61 3 9349 8433 M: 0419 349 339 Please consider the environment before printing this email -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]

Re: unsubscribe

2007-10-02 Thread Live Great
Can you please stop sending this email to the group? Thank you Sam - Original Message From: John Wan [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, October 2, 2007 4:12:29 PM Subject: unsubscribe John Wan Project Manager

error with dictionary definition.

2007-10-02 Thread Live Great
Hi, I really need help to solve this error. I have been working on it for few days, and still can't get it working. I am using the following packages in freebsd(6.2) sip server: core:radiusclient-ng # ps -auxww | grep openser root 46008 0.0 0.1 1548 1008 p5 R+1:41PM 0:00.00

Re: error with dictionary definition.

2007-10-02 Thread Alan DeKok
Live Great wrote: Start openser recevied the following error: Why are you asking this question here? It's really an openser issue. ERROR:acc:extra2int: src_leg is not a number ERROR:acc:acc_diam_init: leg info names for DIAMTER must be integer AVP codes I know very little about

Re: error with dictionary definition.

2007-10-02 Thread Live Great
But have you created similar ATTRIBUTEs for readiusclient-ng's dictionary? Thanks Sam - Original Message From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, October 2, 2007 5:11:09 PM Subject: Re: error with dictionary

Re: error with dictionary definition.

2007-10-02 Thread Live Great
But have you created similar ATTRIBUTEs for readiusclient-ng's dictionary? If not, how did you set it up for accounting purpose? Thanks Sam - Original Message From: Alan DeKok [EMAIL PROTECTED] To: FreeRadius users mailing list [EMAIL PROTECTED] Sent: Tuesday, October 2, 2007 5:11:09

Re: error with dictionary definition.

2007-10-02 Thread Alan DeKok
Live Great wrote: But have you created similar ATTRIBUTEs for readiusclient-ng's dictionary? Similar to what? Diameter? And radiusclient-ng is no longer supported by anyone. See the main freeradius.org page for the new freeradius-client. Alan DeKok. - List info/subscribe/unsubscribe?

rlm_Python - PyExc_IOError

2007-10-02 Thread Mike O'Connor
Hi Guys Got a problem with rlm_python using 1.1.7 on Debian etch with no changes to source other than to move rlm_python in to the stable modules file. The module is in the path and an strace shows the file being found. rlm_python:python_load_function: module 'radiusd_test' is not found

Re: rlm_Python - PyExc_IOError

2007-10-02 Thread Alan DeKok
Mike O'Connor wrote: Got a problem with rlm_python using 1.1.7 on Debian etch with no changes to source other than to move rlm_python in to the stable modules file. The module is in the path and an strace shows the file being found. Is radiusd.py in the path? Alan DeKok. - List

Re: rlm_Python - PyExc_IOError

2007-10-02 Thread Mike O'Connor
Hi Alan Is radiusd.py in the path? Yep in the same place as my own code /usr/lib/python2.4/site-packages/ Strace never shows that file being requested for loading. Mike - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Supplicant seems not to send password user

2007-10-02 Thread Sergio Belkin
2007/10/1, [EMAIL PROTECTED] [EMAIL PROTECTED]: Yes. This is still the certificate problem. You haven't got to the password check yet. Chack that you have imported the correct certificates (as per previous post). Ivan Kalik Kalik Informatika ISP It's a bit strange, I think that I created

Re: rlm_Python - PyExc_IOError

2007-10-02 Thread Mike O'Connor
Hi Guys I decided to try freeradius-2.0.0-pre2 and its give a much clear idea of the problem. The issue seems to be that the rlm_python module is having trouble loading dynamic code. Mike write(1, exceptions.ImportError: /usr/lib..., 97exceptions.ImportError:

Re: Supplicant seems not to send password user

2007-10-02 Thread tnt
I can't go through this riow. Perhaps later this evening. Anything wrong with using provided and tested CA.all script? Or you just like things complicated? At first glance you are using cacert as a root certificate instead of creating one. Ivan Kalik Kalik Informatika ISP Dana 2/10/2007, Sergio

radwho question....

2007-10-02 Thread Chris Bradshaw
Hi I am using freeradius 1.0.1 on a Red Hat Ent Linux v4 server as an authentication backend for our wireless network. Our wireless clients all use EAP/TTLS (via the SecureW2 client) and the access points are Cisco Aironet 1200's. I have noticed that if I run radwho, I seem to only see the

FreeRADIUS TLS certificate signing

2007-10-02 Thread Chris Byrd
Can someone on the list share with me their experience with certificate signing? I'd like to submit a CSR to a commercial signing authority such as GoDaddy so that wireless clients can establish a TLS session with a trusted certificate. Is this as simple as: openssl genrsa -out radius.key 1024

Re: radwho question....

2007-10-02 Thread Alan DeKok
Chris Bradshaw wrote: I am using freeradius 1.0.1 on a Red Hat Ent Linux v4 server as an authentication backend for our wireless network. You really should upgrade, but that's another story. I have noticed that if I run radwho, I seem to only see the name of the user from the 'outside' of

Re: FreeRADIUS TLS certificate signing

2007-10-02 Thread Arran Cudbard-Bell
Chris Byrd wrote: Can someone on the list share with me their experience with certificate signing? I'd like to submit a CSR to a commercial signing authority such as GoDaddy so that wireless clients can establish a TLS session with a trusted certificate. Is this as simple as: openssl genrsa

Questions on Acct-Interim-Interval

2007-10-02 Thread Vinay Wagh
Hi, A couple of questions on Acct-Interim-Interval 1. I wanted to know if the Acct-Interim update that comes from the NAS has any relevance as far as the user session maintained in the radius server is concerned. Meaning that is it treated like a keep-alive of some sort. If the

Supplicant seems not to send password user

2007-10-02 Thread Ivan Kalik
OK. Had some time to look at your certificates. You have created a server certificate but not the (signed) root one. Instead you used and exported cacert. Also your server cert and private keys are separate while in your tls config you configured them as a same file. Have a look at CA.all script

Re: Supplicant seems not to send password user

2007-10-02 Thread Sergio Belkin
2007/10/2, Ivan Kalik [EMAIL PROTECTED]: OK. Had some time to look at your certificates. You have created a server certificate but not the (signed) root one. Instead you used and exported cacert. Also your server cert and private keys are separate while in your tls config you configured them

RE: FreeRADIUS TLS certificate signing

2007-10-02 Thread David Stubblefield
I just went through the process last night, and the initial steps you outline are part of the first steps. I used RapidSSL and found it quite straight forward the knowledge base is well laid and answered any questions I had. After the initial submission of the CSR, you have to go through a

Re: More debug info about LDAP?

2007-10-02 Thread Brad Lachel
I am having this same issue. Did you ever find/get a solution? On Mar 21, 2007, at 11:23 AM, rickan wrote: Hi guys, I am trying to establish a secure connection between freeradius and a Novell eDirectory LDAP server. After configuring LDAP in radiusd.conf it seemed to work, almost:

Re: Supplicant seems not to send password user

2007-10-02 Thread Sergio Belkin
2007/10/2, Sergio Belkin [EMAIL PROTECTED]: 2007/10/2, Ivan Kalik [EMAIL PROTECTED]: OK. Had some time to look at your certificates. You have created a server certificate but not the (signed) root one. Instead you used and exported cacert. Also your server cert and private keys are

Re: Supplicant seems not to send password user

2007-10-02 Thread tnt
Use default values: private_key_password = whatever private_key_file = ${raddbdir}/certs/cert-srv.pem certificate_file = ${raddbdir}/certs/cert-srv.pem CA_file = ${raddbdir}/certs/demoCA/cacert.pem Root contains the key as well. You export root.der to XP clients. Ivan Kalik Kalik Informatika

Re: Supplicant seems not to send password user

2007-10-02 Thread tnt
Freeradius version? In new ones you should have all of them created as you install the server. Ivan Kalik Kalik Informatika ISP Dana 2/10/2007, Sergio Belkin [EMAIL PROTECTED] piše: 2007/10/2, Sergio Belkin [EMAIL PROTECTED]: 2007/10/2, Ivan Kalik [EMAIL PROTECTED]: OK. Had some time to

Re: Supplicant seems not to send password user

2007-10-02 Thread Sergio Belkin
2007/10/2, [EMAIL PROTECTED] [EMAIL PROTECTED]: Freeradius version? In new ones you should have all of them created as you install the server. Ivan Kalik Kalik Informatika ISP I'm using freeradius-1.1.7. If I use certificates that come as demo, the problem is that is valid to 24/01/2006.

RE: Questions on Acct-Interim-Interval

2007-10-02 Thread David Roze
Hi, -Original Message- From: [EMAIL PROTECTED] [mailto:freeradius-[EMAIL PROTECTED] On Behalf Of Vinay Wagh Sent: 02 October 2007 20:47 To: FreeRadius users mailing list Subject: Questions on Acct-Interim-Interval Hi, A couple of questions on Acct-Interim-Interval 1. I wanted to know

Re: Supplicant seems not to send password user

2007-10-02 Thread Alan DeKok
Sergio Belkin wrote: I'm using freeradius-1.1.7. If I use certificates that come as demo, the problem is that is valid to 24/01/2006. Install 2.0.0-pre2 somewhere. Start it as root, in debugging mode. Look in raddb/certs. There will be certs available. To customize them, edit ca.cnf and