Re: SQL connection dropped

2008-08-19 Thread Alan DeKok
leopold wrote: > I am facing a problem with SQL module that drops connections after some > period of time and I have to bounce FreeRadius process in order to establish > db connection again. > When I am doing netstat I see open connections to DB and then after some > time sockets are closed and all

Re: 2.0.5 on Solaris with openssl 0.9.8h [SEC=UNCLASSIFIED]

2008-08-19 Thread Alan DeKok
Rafiqul Ahsan wrote: > Thank you for your responses, and I appreciate for your time. I have > few Sun machines, T2000, V210 - all of them has Solaris 10 with > /usr/sfw/ dirs... I would suggest asking Sun for help with this issue. It's a problem specific to Solaris, and in the end, has very lit

Re: cert bootstrap bug? (was Re: definitely, I have a problem with eap-tls)

2008-08-19 Thread Alan DeKok
William Hegardt wrote: > EAP-TLS authentication fails with the "fatal unknown ca" message. The server cert may need to be marked with "CA:true" > If I hack the Makefile like Sergio mentioned last month to sign the > client certificate with > the CA key, then authentication succeeds. That can

Re: compiling freeradius with oracle support

2008-08-19 Thread Alan DeKok
Alexandre Chapellon wrote: > Ok the modules compils great. and it creates rlm_sql_oracle-2.0.5.so > (and its symlink). I copy thoose two files in /usr/lib/freeradius > but when launching freeradius -X i get: >... > freeradius: symbol lookup error: /usr/lib/freeradius/rlm_sql_oracle.so: > undefined

Re: compiling freeradius with oracle support

2008-08-19 Thread Alexandre Chapellon
Ok the modules compils great. and it creates rlm_sql_oracle-2.0.5.so (and its symlink). I copy thoose two files in /usr/lib/freeradius but when launching freeradius -X i get: rlm_sql (sql): Driver rlm_sql_oracle (module rlm_sql_oracle) loaded and linked rlm_sql (sql): Attempting to connect to [EMA

Re: I've started to put the book online

2008-08-19 Thread Do Nguyen Ha
its good news for everyone who love FreeRadius :) Date: Tue, 19 Aug 2008 09:23:06 +0200 From: Alan DeKok <[EMAIL PROTECTED]> Subject: I've started to put the book online To: FreeRadius users mailing list Message-ID: <[EMAIL PROTECTED]> Content-Type: text/plain; charset=ISO-8859-1 http://deploy

Re: I've started to put the book online

2008-08-19 Thread Sergio
Alexandre Chapellon escribió: ok then I know what to do today to stop feeling stupid on this list :p Alan DeKok a écrit : http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of com

Re: NAS-Post in Netgear Accounting-Packet

2008-08-19 Thread Ivan Kalik
>Tue Aug 19 18:11:30 2008 : Auth: Login OK: [test2 /] (from >client AP-Halle1 port 1 cli 001302BE) >Tue Aug 19 18:12:30 2008 : Error: rlm_radutmp: Logout for NAS AP-Halle1 port 0, >but no Login record > .. >It's shows that the user is still connected... >Does anyone know how this is possible? >

Re: I've started to put the book online

2008-08-19 Thread Alexandre Chapellon
ok then I know what to do today to stop feeling stupid on this list :p Alan DeKok a écrit : > http://deployingradius.com/book/ > > Only parts of the first chapter are online. It covers the basic > concepts behind RADIUS, and should hopefully address a number of common > misunderstandings about

Re: NAS-Post in Netgear Accounting-Packet

2008-08-19 Thread Stefan Puch
In the "Start"-Packets and "Interim-Update"-Packets it seems to be right. But ALL the "Stop"-Packets have 0 as NAS-Port. So, you agree that this is a bug of the Access-Point? Thank you for your reply. Wolfgang Burger Hello, I've got three WG102 Access Points from Netgear. I'm using the lates

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Harry J Walsh
Yes, that worked a charm. Thanks for the help Alan! -- Harry On Tue, Aug 19, 2008 at 6:03 PM, Alan DeKok <[EMAIL PROTECTED]> wrote: > Harry J Walsh wrote: >> Thanks for the swift reply Dekok. I tried what you suggested and it >> doesn't work. > > Sorry... looking at the code again, the Respons

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Alan DeKok
Harry J Walsh wrote: > Thanks for the swift reply Dekok. I tried what you suggested and it > doesn't work. Sorry... looking at the code again, the Response-Packet-Type should go into the control/check items. ... > $RAD_REPLY{'Response-Packet-Type'} = "Access-Challenge"; Cha

Re: Auth-Type := Accept - CHAP problems

2008-08-19 Thread Alan DeKok
Thomas Buchberger wrote: > we're playing with the freeradius features and are getting confused in > the way it behaves: :) It's simple... just read 1000's of lines of debugging output, and hordes of miscellaneous unrelated unorganized documentation files. > We have several different Users in u

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread Alan DeKok
S Adrian wrote: > I got a file that looks like this (utstarcom.dct) which would need to be > translated to freeradius .. anyone can help? http://github.com/alandekok/freeradius-server/tree/master/share/dictionary.utstarcom :) There's also a simple (i.e. dumb) script that does some of the con

Re: web based certificate management

2008-08-19 Thread John Dennis
Tomoki Taniguchi wrote: is there a good web based certificate management system that users of freeradius recommend? i need something that will apply the needed xpextensions and generate the necessary .p12 and .der certificates for a windows xp client. i am looking into editing the ebox-ca to gen

Re: cert bootstrap bug? (was Re: definitely, I have a problem with eap-tls)

2008-08-19 Thread William Hegardt
I hate to resurrect this long thread from July 22-28, but I have the same problem and never saw a resolution. I'm using FreeRadius 2.0.5 on CentOS 5.2 with wpa_supplicant 0.6.4 (latest to date). I'm using the bootstrap script to generate example certificates. I also created a client certificate u

Problems with EAP and LDAP replyItems (2.0.2)

2008-08-19 Thread tschaos
Hi Guys, Since freeradius2 has some major improvements I try to upgrade from 1.1.4. Unfortunately there are a few problems i encounter: cause of some weird reason the server isn't sending back my LDAP replyItems back to the NAS along the Access-Accept packet. In short i want to authenticate us

Re: final question about client certs using eap-tls (was: cert bootstrap bug?)

2008-08-19 Thread Sergio
Sergio escribió: Hi, also was so many others. At this time i have got one eap module which authenticates users under a PKI. My client certs are issued by root ca (ca.pem) and everything works. I can manage the crl, because it is public, and authenticate any user against any server. So my ques

Auth-Type := Accept - CHAP problems

2008-08-19 Thread Thomas Buchberger
Hi @ll, we're playing with the freeradius features and are getting confused in the way it behaves: We have several different Users in user-files which works fine. Now we want that the radius always answers with OK and no more "Login incorrect" - but with other Options than a correct user. We appe

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread S Adrian
> Here it is attached to this message. Thanks .. but still .. those thingies .. c .. cr .. 7064 .. what are they ? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread S Adrian
> That one's pretty easy; have a peek at the other FreeRADIUS-formatted > vendor dictionaries that come with the package and spy the nuances in > the differences. Ok, but what about that radius.dct .. should it affect what I enter in the new freeradius dictionary file ? >> # utstarcom.dct - Radi

Re: convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread Alex Balashov
That one's pretty easy; have a peek at the other FreeRADIUS-formatted vendor dictionaries that come with the package and spy the nuances in the differences. On Tue, August 19, 2008 10:33 am, S Adrian wrote: > Hi everybody, > > I got a file that looks like this (utstarcom.dct) which would need to

convert steel-belt radius .dct to freeradius dictionary

2008-08-19 Thread S Adrian
Hi everybody, I got a file that looks like this (utstarcom.dct) which would need to be translated to freeradius .. anyone can help? >>start of file<< # utstarcom.dct - Radius dictionary for UTStarcom BBS1000 @radius.dct # # UTStarcom specific parameters # MACRO UTStarcom-VSA(t,s) 26 [vid=7064 t

Re: Crash on x64?

2008-08-19 Thread John Dennis
Alex Balashov wrote: Alan DeKok wrote: John Dennis wrote: Actually, on Fedora & RHEL you don't need to rebuild with debugging symbols on. All packages built for Fedora & RHEL always have matching debuginfo packages which can optionally be installed, which once installed will give you line numbe

Re: Realms and proxying

2008-08-19 Thread Stefan Winter
Hi, Is this position dependant? Does it have to appear before the liv.ac.uk realm to prevent "[EMAIL PROTECTED]" being caught by the first realm? No, unless you use a regex in the realm stanza, the matches are *literal* realms. i.e. realm liv.ac.uk does not match foo.bar.liv.ac.uk. Gree

Realms and proxying

2008-08-19 Thread Dean, Barry
I currently have a realm defined: realm liv.ac.uk { type= radius authhost= LOCAL accthost= LOCAL } I now have one of my departments, which for various complex reasons, has been allowed to have its own user accounts. They have the subdomain name

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Harry J Walsh
Thanks for the swift reply Dekok. I tried what you suggested and it doesn't work. Looking at dictionary.freeradius.internal and double checking the values in the pair everything looks okay.I'm going to play about with this a bit, but in the mean time here's some more details and I would great

Re: Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Alan DeKok
Harry J Walsh wrote: > I want to develop some test cases for a radius client I am developing > and I would like to be able to use rlm_perl to simulate various > scenarios. The one I am having major problems with is > Access-Challenge. I really like rlm_perl and the flexibility it > provides and I

Question regarding rlm_perl and Access-Challenge

2008-08-19 Thread Harry J Walsh
Hi, I want to develop some test cases for a radius client I am developing and I would like to be able to use rlm_perl to simulate various scenarios. The one I am having major problems with is Access-Challenge. I really like rlm_perl and the flexibility it provides and I would like to be able to

Re: I've started to put the book online

2008-08-19 Thread Jelle Langbroek
Just great! Thanks, I'll be sure to read it. 2008/8/19 Alan DeKok <[EMAIL PROTECTED]> > http://deployingradius.com/book/ > > Only parts of the first chapter are online. It covers the basic > concepts behind RADIUS, and should hopefully address a number of common > misunderstandings about how i

I've started to put the book online

2008-08-19 Thread Alan DeKok
http://deployingradius.com/book/ Only parts of the first chapter are online. It covers the basic concepts behind RADIUS, and should hopefully address a number of common misunderstandings about how it all works. Keep checking the site. More will be coming later. Alan DeKok. - List info/su