Re: LDAP, old TCP connections, and retry

Justin Steward wrote: > Question 1: > The LDAP server which the radius server attempts to connect to is > located behind a firewall which kills TCP connections that have been > idle for 30 minutes. FR then tries to do a lookup using a connection > that has been open and idle for half an hour or mor

Re: condfiguring frreradius

Harshil Anil Kumar Shah wrote: > Any body knows how to configure eap.conf, radiusd.conf, users and > clients.conf for eap-tls ? Read raddb/certs/README. This is documented. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

condfiguring frreradius

Any body knows how to configure eap.conf, radiusd.conf, users and clients.conf for eap-tls ? Regards, Harshil, EmpID: 128522. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

LDAP, old TCP connections, and retry

Hi Guys, A few quick questions on tweaking rlm_ldap for freeradius. Question 1: The LDAP server which the radius server attempts to connect to is located behind a firewall which kills TCP connections that have been idle for 30 minutes. FR then tries to do a lookup using a connection that has been

Re: Radius COA

Hi, > Incorrect; in this command 172.0.0.1 is the NAS. RFC 3576 section 2.3 > explains what 43 is. duh - of course. sorry, misread the question as relating to radtest ;-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius COA

Hi, > radclient 172.0.0.1:3799 43 testing123 > in this command 172.0.0.1 is a server radius but what is 43? port number. not the daemon port (thats 3799 in the example above) but NAS port alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius COA

On Tue, 9 Mar 2010 10:51:39 -0800 (PST), Chet Desai wrote: > radclient 172.0.0.1:3799 43 testing123 > > in this command 172.0.0.1 is a server radius but what is 43? Incorrect; in this command 172.0.0.1 is the NAS. RFC 3576 section 2.3 explains what 43 is. -Arran >   > chetde...@yahoo.com > 60

Re: Radius COA

Chet Desai wrote: > radclient 172.0.0.1:3799 43 testing123 > in this command 172.0.0.1 is a server radius but what is 43? Read the documentation. It isn't hard. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius COA

radclient 172.0.0.1:3799 43 testing123 in this command 172.0.0.1 is a server radius but what is 43?   chetde...@yahoo.com 609-937-7578 Cell  From: Arran Cudbard-Bell To: FreeRadius users mailing list Sent: Tue, March 9, 2010 12:06:22 PM Subject: Re: Radius C

Disable either PAP or CHAP

Hi there, I am running freeradius 2.1.7 with an sql database. What I want to do is have either PAP or CHAP running, but not both at the same time. I have had ago at turning one off, for instance commenting the PAP sections in the default file(authenticate and authorize). But it will still authe

Re: Radius COA

Unless someone has backported FreeRADIUS 2.0 to Windows XP this is not possible. You can originate CoA requests using radclient (if that's included in the package). See here:http://wiki.freeradius.org/HP#Radclient_CoA_example -Arran On Tue, 9 Mar 2010 08:57:23 -0800 (PST), Chet Desai wrote: >

Radius COA

I have free radius installed on windows xp and its working fine. I am trying to figure out how to send the COA request? What's the syntax or command line I need to execute on this server to COA request on NAS? Can someone please send me the cli or syntax for COA.. Thanks.   chetde...@yahoo.c

Re: openssl support

On 03/09/2010 10:20 AM, omega bk wrote: hello. radtest is ok. but i would like eap authentication. running radiusd -X Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenS

Re: Login incorrect (rlm_pap: CRYPT password check failed):

i' m so sorry, it's a debian package from http://packages.debian.org/fr/squeeze/freeradius. i'm really confused. i'm sorry 2010/3/9 Alan Buxey > Hi, > > > so i made an update. > > you certianly did. i dont know WHAT you are doing or WHY > you re doing it but you have changed other things. > > lo

Re: Login incorrect (rlm_pap: CRYPT password check failed):

Hi, > so i made an update. you certianly did. i dont know WHAT you are doing or WHY you re doing it but you have changed other things. look, its very very obvious > including files in directory /etc/freeradius/sites-enabled/ and then into the system. but thats wierd, because last time, w

Re: Login incorrect (rlm_pap: CRYPT password check failed):

Hi, > i reinstall completely freeradius. > > radius.conf is not changed > i just put on the top of users file > > omega Cleartext-Password := "testing" > > and run radtest > radtest omega testing 127.0.0.1 1 testing123 > > Sending Access-Request of id 62 to 127.0.0.1 port 1812 > User-

openssl support

hello. radtest is ok. but i would like eap authentication. running radiusd -X Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring EAP-Type/ttls because we do not have OpenSSL support. Ignoring EAP-Type/peap because we do not have OpenSSL support. so how can i get openssl supp

Re: Login incorrect (rlm_pap: CRYPT password check failed):

so i made an update. i change the user in users file ( that not exist on my etc/passwd) here is my freeradius -X radiusTest:/# freeradius -X FreeRADIUS Version 2.1.8, for host i486-pc-linux-gnu, built on Jan 2 2010 at 19:56:16 Copyright (C) 1999-2009 The FreeRADIUS server project and contributor

Login incorrect (rlm_pap: CRYPT password check failed):

hello, i reinstall completely freeradius. radius.conf is not changed i just put on the top of users file omega Cleartext-Password := "testing" and run radtest radtest omega testing 127.0.0.1 1 testing123 Sending Access-Request of id 62 to 127.0.0.1 port 1812 User-Name = "omega"

Re: Problem with HUP occurs after upgrade from 2.1.5

Ben Thompson wrote: > Hi > > I have a server running 2.1.5 which has been running happily for a > long time with the same config. However, I recenlty tried upgrading to > 2.1.8 and found that after HUP the server dies :- > > Mon Mar 8 22:05:58 2010 : Info: Loaded virtual server inner-tunnel > Mo

Re: Error installing Freeradius

Hi, > > Yes > In the newer version I did not find CA.all file which I needed . Thats is > why I use Older version why do you need it - noone else doesthey install 2.1.8 etc quite happily. the 'snapshot' file you are trying to use is a nightly grab of ...well, i think back then it was CVS r

Updating Reply-Message in the inner-tunnel then reject-ing

Hello (again), To aid debugging, I'm adding some Reply-Message values to upon rejection, to indicate why we rejected it, in some obvious cases. In the authorize stanza of the inner-tunnel virtual server, I can do: update reply { Reply-Message := '[cam.ac.uk] Inner identity in invalid fo

Re: Logging Packet-Type of reply packets from inner-tunnel

On Mon, 8 Mar 2010, Alan DeKok wrote: The issue is that the response *might* be an Access-Challenge, or it might be an Access-Reject. The final decision isn't made until after all of the modules have been executed. OK -- at least I haven't missed something. But I don't see why you want t

Problem with HUP occurs after upgrade from 2.1.5

Hi I have a server running 2.1.5 which has been running happily for a long time with the same config. However, I recenlty tried upgrading to 2.1.8 and found that after HUP the server dies :- Mon Mar 8 22:05:58 2010 : Info: Loaded virtual server inner-tunnel Mon Mar 8 22:05:58 2010 : Info: Loade