Accounting Start From Client

Hello, I was succed sending Accounting Start from NTRadping to FR 2.1.3. My question is Mikrotik RouterOS and UBNT Nanostation could send Accounting Start automatically to FR ? Thank's Teguh Kurniawan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting Start From Client

On Wed, Mar 17, 2010 at 1:26 PM, Teguh Kurniawan teguhkurniawanwij...@gmail.com wrote: Hello, I was succed sending Accounting Start from NTRadping to FR 2.1.3. My question is Mikrotik RouterOS and UBNT Nanostation could send Accounting Start automatically to FR ? You should ask Mikrotik.

Re: FreeRadius and Copy accounting

Eric Bellière wrote: Hello, Is someone can explain me how is working this fonctionnality? the copy-acct-to-home-server? I am newbie in FreeRadius (I have to migrate from NavisRadius ) and after reading and reading message on forum and on internet, I understand that I have to use

OT: send email when traffic-limit exceeded

Hello all, I use FR 2.x with MySQL. I would like to get informed via email when a user hits the traffic-limit. Has anyone done this before and can provide some sample script? Cheers, Alexander - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Automatic Radius Accounting when Authenticated

Hi, Is possible in FR 2.x doing automatic accounting when client is authenticated. Thank's Teguh Kurniawan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: duplicate errors in an active directory setup

It is strange because ntlm_auth is working, is the only method to authenticate users to access WiFi network and all the days are 20-30 users connected. I think that could be something related to a network issue or an active directory issue. 2010/3/16 Alan Buxey a.l.m.bu...@lboro.ac.uk Hi,

Re: FreeRadius and Copy accounting

Eric Bellière wrote: Eric Bellière wrote: Hello, Is someone can explain me how is working this fonctionnality? the copy-acct-to-home-server? I am newbie in FreeRadius (I have to migrate from NavisRadius ) and after reading and reading message on forum and on internet, I

Re: Automatic Radius Accounting when Authenticated

Teguh Kurniawan wrote: Hi, Is possible in FR 2.x doing automatic accounting when client is authenticated. What does that mean? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: openssl support

Hi there guys, Look, I have been configuring FreeRadius (2.1.8) with OpenSSL (0.9.8m) to use ntlm_auth but it did not work at all. I installed libssl-dev (as Alan Dekok has said before) but it stills telling me: Ignoring EAP-Type/tls because we do not have OpenSSL support. Ignoring

Re: openssl support

hi, You need to have the openssl development packages installed. When you run configure please make sure you check for warnings, if configure doesn't find required libraries and headers it will emit a warning message, but will proceed (just disabling the feature). i fixed it doing like this bye

dict_addattr: attribute name too long error when running raclient by cron

Hi, I have a simple script as follows: #! /bin/bash echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 16 | radclient localhost:18120 status YellowSubmarine | tee /var/log/radius/status-$(date -d yesterday +%Y%m%d).log #echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type =

Talking to Windows 2003 AD

Firstly I am new to FreeRadius and am configuring my first radius server to talk to our Windows 2003 AD. I have intalled and configured FreeRadius 2.1.8 to talk to the AD as documented in various tutorials on the internet. Initially I had configured the connection between the Freeradius server

Re: dict_addattr: attribute name too long error when running raclient by cron

Sergio Belkin wrote: When I run on the shell do it fine, but when it is launched by root it fails, resulting in: radclient: dict_init: /usr/local/share/freeradius/dictionary.freeradius[47]: dict_addattr: attribute name too long You have multiple versions of FreeRADIUS installed. Fix

Re: FreeRadius and Copy accounting

OK I found the problem. I forgot to put in radiusd.conf listen { ipaddr = 192.168.156.9 type = proxy interface = eth0 } Now It is working :-) Eric Bellière wrote: Hello, Is someone can explain me how is working this fonctionnality? the

Re: Mac Auth with MySQL

Hi, I also tried MAC based authentication. Users can logged in successfully but if some others users know the MAC he can also connect. How to check MAC against CLI. Any help Best regards, Fazal - Original Message - From: Teguh Kurniawan teguhkurniawanwij...@gmail.com To:

Re: dict_addattr: attribute name too long error when running raclient by cron

2010/3/17 Sergio Belkin seb...@gmail.com: Hi, I have a simple script as follows: #! /bin/bash echo Message-Authenticator = 0x00, FreeRADIUS-Statistics-Type = 16 | radclient localhost:18120 status YellowSubmarine | tee /var/log/radius/status-$(date -d yesterday +%Y%m%d).log #echo

Assigning different IPs for different DNS servers

Hi all, is it possible to assign different IP addresses for different NAS servers ? for example : NAS 1.1.1.1 = IP 5.5.5.5 NAS 2.2.2.2 = IP 6.6.6.6 NAS 3.3.3.3 = IP POOL X Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dict_addattr: attribute name too long error when running raclient by cron

2010/3/17 Alan DeKok al...@deployingradius.com: Sergio Belkin wrote: When I run on the shell do it fine, but when it is launched by root it fails, resulting in: radclient: dict_init: /usr/local/share/freeradius/dictionary.freeradius[47]: dict_addattr: attribute name too long  You have

Re: Talking to Windows 2003 AD

Hi, Now when I go to the next step and enable this in /etc/raddb/modules/mschap ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --username==%{%{Stripped-User-Name}:-%{User-Name:-None}} --domain=%{%{mschap:NT-Domain}:-OURDOMAIN} --challenge=%{mschap:Challenge:-00}

Re: Password in Radius Debug

Hi, The purpose of debugging is to allow debugging. This includes checking passwords. yep. all too often the issue is an incorrect password - eg a recent case on this mailing list where the password supplied via LDAP was wrong. alan - List info/subscribe/unsubscribe? See

Building modules in C++ modules

Is it possible to build modules in C++ (g++ compiler)? I have taken the rlm_example.c file, renamed as cpp and then run make and I see some errors reported in the libradius header files. Before I spend time trying to figure out what the errors are, just wanted to make sure that this has been done

RE: openssl support

Hi omegabk, Yes, I already known that. However, for some reason FreeRadius doesn't recognized that OpenSSL is already installed on my system. During the compilation there wasn't any WARNING about OpenSSL. In the other hand, I just want to do transparent authentications of the user (it does

Re: openssl support

Cesar Ortega wrote: Yes, I already known that. However, for some reason FreeRadius doesn't recognized that OpenSSL is already installed on my system. During the compilation there wasn't any WARNING about OpenSSL. Did you read the configure / compile stages for messages about openssl? It's

Re: Building modules in C++ modules

Abu Marcose wrote: Is it possible to build modules in C++ (g++ compiler)? No. I have taken the rlm_example.c file, renamed as cpp and then run make and I see some errors reported in the libradius header files. I don't see why it's useful to use C++. Alan DeKok. - List

Re: openssl support

On 03/17/2010 04:09 PM, Cesar Ortega wrote: Hi omegabk, Yes, I already known that. However, for some reason FreeRadius doesn't recognized that OpenSSL is already installed on my system. During the compilation there wasn't any WARNING about OpenSSL. The warning do not occur during compilation,

RE: openssl support

Thanks Alan, OK, I tried with a native Windows XP client but it asked me for a certify. Why does happened? In the other hand, FreeRadius console never received the packet from the Windows client as Nokia did. I only want to do a transparent authentication to my wireless network just using the

Re: openssl support

Cesar Ortega wrote: OK, I tried with a native Windows XP client but it asked me for a certify. Why does happened? That's how EAP works. This is documented in FreeRADIUS and in Windows. In the other hand, FreeRadius console never received the packet from the Windows client as Nokia did. I

Re: openssl support

hi, you have a bootstrap script in certs directory for a sample certification, it works. bye 2010/3/17 Alan DeKok al...@deployingradius.com Cesar Ortega wrote: OK, I tried with a native Windows XP client but it asked me for a certify. Why does happened? That's how EAP works. This

Re: debug only for rlm_xxx (rlm_perl)

Hi Doug, i tried to apply this to rlm_perl (on freeradius 2.1.8) but then rlm_perl.c does not compile. Can you provide me an example how to integrate this? Or - where is my fault? ### @@ -587,6 +587,10 @@ char*val; VALUE_PAIR *vpp; + /* tiri */ +

Re: debug only for rlm_xxx (rlm_perl)

Only one of those errors references the code you added. There should have been a line in my earlier email like: struct stat sb; The other errors indicate a problem with the normal build includes. How did you try and rebuild it? I suspect there is a way to just rebuild rlm_perl, but

Reduce debug output in eapol_test

hi, does any one know how to reduce or completely remove debug output when an eapol_test is run? this is for performance reasons. thanks in advance for your help. rc. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reduce debug output in eapol_test

R C wrote: does any one know how to reduce or completely remove debug output when an eapol_test is run? this is for performance reasons. Please ask questions on the correct list. Eapol_test is *not* part of FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See

Invitation to connect on LinkedIn

LinkedIn Badrul Anuar requested to add you as a connection on LinkedIn: -- Glen, I'd like to add you to my professional network on LinkedIn. - Badrul Accept invitation from Badrul Anuar

Re: Automatic Radius Accounting when Authenticated

I mean, we don't need to send Accounting Start packet, which not supported by client. On Wed, Mar 17, 2010 at 6:21 PM, Alan DeKok al...@deployingradius.com wrote: Teguh Kurniawan wrote: Hi, Is possible in FR 2.x doing automatic accounting when client is authenticated.  What does that mean?

Re: Automatic Radius Accounting when Authenticated

Teguh Kurniawan wrote: I mean, we don't need to send Accounting Start packet, which not supported by client. I have no idea what that means. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Automatic Radius Accounting when Authenticated

I'm sorry for my language. I'll try to re explain. What I mean is, radius accounting (radacct) automatic started when accepted client is authenticated. Client no need to send Accounting Start command to radius. On Thu, Mar 18, 2010 at 7:03 AM, Alan DeKok al...@deployingradius.com wrote: Teguh

Re: Building modules in C++ modules

Exception handling for one. Also, if one would like to use third party C++ libraries. On Mar 17, 2010, at 4:49 PM, Alan DeKok al...@deployingradius.com wrote: Abu Marcose wrote: Is it possible to build modules in C++ (g++ compiler)? No. I have taken the rlm_example.c file, renamed as

Clients Configuration on MySQL

Hi, Could we move clients.conf to mysql table ? How to do that ? Thank's Teguh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Automatic Radius Accounting when Authenticated

On Thu, Mar 18, 2010 at 7:23 AM, Teguh Kurniawan teguhkurniawanwij...@gmail.com wrote: I'm sorry for my language. I'll try to re explain. What I mean is, radius accounting (radacct) automatic started when accepted client is authenticated. Client no need to send Accounting Start command to

RADIUS_CLIENT_MAX_WAIT does not work

Hi, I am testing my radius server with eapol_test that comes with the wpa_supplicant. If the radius server is down, I want the eapol_test to not give up trying to talk to the radius server. So, i set the parameter RADIUS_CLIENT_MAX_WAIT to 9 seconds and the eapol_test timeout to 1.