[RESOVLED] Re: customize Post-Auth-Type REJECT

2010-01-19 Thread pawel_221
easyzonecorp.net wrote: add [RESOVLED] to your mail subject. Please. -- View this message in context: http://old.nabble.com/customize-Post-Auth-Type-REJECT-tp27173361p27222167.html Sent from the FreeRadius - User mailing list archive at Nabble.com. - List

TR: Using the same FreeRadius for account into MySQL for clients whithdifferent attributes

2010-01-19 Thread David Florella
Hi, I am using a FreeRadius server Version 1.0.1 only for accounting with Cisco gateways. Now, I want to use the same server with Dialogic gateways. Dialogic and Cisco have their own RADIUS dictionary. When I write in a MySQL database the log of accounting, how can I write for both

Re: Using the same FreeRadius for account into MySQL for clients whithdifferent attributes

2010-01-19 Thread Marinko Tarlac
You expect that we're sitting here and waiting for your questions how to solve something? On Tue, Jan 19, 2010 at 10:00 AM, David Florella dflore...@legos.fr wrote: Hi, I am using a FreeRadius server Version 1.0.1 only for accounting with Cisco gateways. Now, I want to use the same server

Re: EAP-TLS User-Name not matching

2010-01-19 Thread Alan Buxey
hi, I'm not sure what you've done to the default config...I've just untarred, ./configure, make, make install a fresh copy of 2.1.8 on a virtual server . then i edited the users files to make a test account and, straight away, did an EAP request to u...@example.com and it just worked. alan -

Re: Reply-Message

2010-01-19 Thread Andrea Gabellini
Neville, my postauth_query is: postauth_query = INSERT INTO ${postauth_table} (username, reply, accttime, message) VALUES ('%{SQL-User-Name}', '%{reply:Packet-Type}', TO_DATE(' %S','-mm-dd hh24:mi:ss'), '%{%{Module-Failure-Message}:-%{%{reply:Reply-Message}:-Your generic message}}')

Re: EAP-FAST

2010-01-19 Thread Alan DeKok
Stefan Winter wrote: every now and then there's a mild interest on this list about enabling EAP-FAST. In our eduroam RD group, we are currently looking into EAP-FAST, which naturally includes FreeRADIUS support. Is it worthwhile posting our results here, for others play with it as well? Or has

Re: EAP-TLS User-Name not matching

2010-01-19 Thread Alan DeKok
Huckle Berry wrote: For all I know, the top of the output could be 10,000 (or more) lines up. Funny thing about endless loops, they tend to go on for quite a while. Would re-directing the output to a file work? Like I said before though, I am running the default config (except for the

vlan id

2010-01-19 Thread cd
hello I have a little problem. I try to authentificate users with freeradius+LDAP (it works) and put them in vlan by ldap-group all looks good example: ldap_parse_result rlm_ldap::ldap_groupcmp: User found in group Eleves ldap_msgfree rlm_ldap: ldap_release_conn: Release Id: 0 [files] users:

Re: EAP-TLS User-Name not matching

2010-01-19 Thread Huckle Berry
I sent out a message this morning w/ the log file output. But even that was 700+ lines and it needed approval before it was forwarded. Haven't heard anything back from the mod about it yet so I'm assuming it went through. If it didn't, let me know and I'll try to trim some of the output that

Re: EAP-FAST

2010-01-19 Thread Maja Wolniewicz
W dniu 19.01.2010 15:06, Alan DeKok pisze: Stefan Winter wrote: every now and then there's a mild interest on this list about enabling EAP-FAST. In our eduroam RD group, we are currently looking into EAP-FAST, which naturally includes FreeRADIUS support. Is it worthwhile posting our results

Adding Multiple Cisco-AVPairs using rlm_perl

2010-01-19 Thread James Nedila
I have a rlm_perl script where i'd like to return multiple Cisco-AVPair attributes in an Access-Accept response. Since rlm_perl is passed hashes for RAD_REQUEST, RAD_CHECK, and RAD_REPLY, is there a way to pass an array as the value for the Cisco-AVPair hash key? If not, is there another way to

Re: Adding Multiple Cisco-AVPairs using rlm_perl

2010-01-19 Thread Bjørn Mork
James Nedila j...@colonynetworks.com writes: I have a rlm_perl script where i'd like to return multiple Cisco-AVPair attributes in an Access-Accept response. Since rlm_perl is passed hashes for RAD_REQUEST, RAD_CHECK, and RAD_REPLY, is there a way to pass an array as the value for the

LDAP identity is plaintext?

2010-01-19 Thread John
Hi all,    We are using freeRADIUS-1.1.6 talk to LDAP server. We need configure identity and its password. My question is can password be encrypted, for example use chap or sha1 ... enctryption?     Best. John ___

Re: Decoupled accounting

2010-01-19 Thread Devinder Singh
Hi Ivan I had had followed the steps to create certitifactes for Win XP and configured the AP. Also copied the client.p12 and ca.der to XP machine When i double click on the SSID palstaff it shows the windows was unable to log you on to the palette network. Regards Devinder - List

WinXP 802.1x

2010-01-19 Thread Devinder Singh
2010/1/20 Devinder Singh devinbhul...@gmail.com Hi Ivan I had had followed the steps to create certitifactes for Win XP and configured the AP. Also copied the client.p12 and ca.der to XP machine When i double click on the SSID palstaff it shows the windows was unable to log you on to the

No known good in ldap authorizes?

2010-01-19 Thread freeradius
I've got something odd happening. I'm using freeradius and it's ldap module to authenticate/ authorize users for a l2tp vpn connection. Works (mostly) fine, except for some odd timeout issues I'll cover elsewhere (see following post re: LDAP timeouts). Valid users with valid passwords

Re: LDAP timeouts

2010-01-19 Thread freeradius
At 08:33 PM 1/14/2010, freerad...@corwyn.net wrote: The Windows environment works, with one quirk, if no one has logged in for a while (~15-30 min), the next user gets: Here's the full log of one of those events (redacted): Two interesting points are noted with ***. The reconnect takes only

Re: LDAP identity is plaintext?

2010-01-19 Thread Alan DeKok
John wrote: Hi all, We are using freeRADIUS-1.1.6 talk to LDAP server. We need configure identity and its password. My question is can password be encrypted, for example use chap or sha1 ... enctryption? No. Alan DeKok. - List info/subscribe/unsubscribe? See

Authentication Failed

2010-01-19 Thread Devinder Singh
Hi Ivan, I created the certificates basd on the README file in etc/raddb and copied ca.der and client.p12 to Windows XP I also also made changed to the Makefile which runs on XP but when i connect to the SSID i get authentication failde and the radius does not seem to get any response from the

Re: No known good in ldap authorizes?

2010-01-19 Thread Alan DeKok
freerad...@corwyn.net wrote: But i see this in the log when running with radiusd -X: [ldap] looking for reply items in directory... WARNING: No known good password was found in LDAP. Are you sure that the user is configured correctly? It means that the LDAP search returned nothing. What

Re: Authentication Failed

2010-01-19 Thread Devinder Singh
Hi Ivan, I cant seem to authenticate my Windows XP client using EAP authentication. I have folllowed the steps in /etc/raddb/certs This is my radius start up Module: Instantiating eap-tls tls { rsa_key_exchange = no dh_key_exchange = yes rsa_key_length = 512

Re: EAP-FAST

2010-01-19 Thread Alan DeKok
Maja Wolniewicz wrote: A few changes in FreeRADIUS are needed to provide some configuration variables to the hostap EAP library. Could you send the changes as a patch? That way we can apply them to the server, and make it easier for everyone else. The biggest problem is that this solution