Re: Clients Configuration on MySQL

2010-03-19 Thread Teguh Kurniawan
It working. Thank you. Teguh On Thu, Mar 18, 2010 at 6:33 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, Could we move clients.conf to mysql table ? yes. How to do that ? its well documented but basically, you need to 1) import the nas.sql  so that your MySQL has the right

Enable Volume Based Accounting

2010-03-19 Thread Teguh Kurniawan
Hi, how to enable traffic volume based accounting on freeradius ? Thank's Teguh - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and COA

2010-03-19 Thread Johan Meiring
Alan DeKok wrote: Johan Meiring wrote: 1) For originating a COA packet, is it possible to trigger it from rlm_perl. i.e. cause an update coa. Not really. I have not tried this yet, simply thinking aloud Could one maybe set a string in rlm_perm Tmp-String-0 and then test for it

Re: TLS/SSL Error?

2010-03-19 Thread Alan Buxey
Hi, from. My Free radius server has a Thawte Certificate installed. I'm not sure what the message means? usually a misconfigured client eg they are checking the cert against the wrong CA or no CA etc. alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and COA

2010-03-19 Thread Alan DeKok
Johan Meiring wrote: Could one maybe set a string in rlm_perm Tmp-String-0 and then test Yes, that should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Max Query Length Exceeded and Field Truncated

2010-03-19 Thread Alan DeKok
Robert Gabriel wrote: Alan, I don't appreciate your harsh response. One comes to these lists for help not scorn and ridicule. One comes to this list for help, not friendship. Short, pointed, answers are helpful. Sadly, many people think such answers are rude. Sorry.. but I don't have

Re: MAC based Vlan problem

2010-03-19 Thread Alan DeKok
Dr.Peer-Joachim Koch wrote: Hi, we're using freeradius to switch different computer into various vlans on our switches. We have had a working configuration for freeradius 1.x, but for 2.1.6 (running on SLES) this configuration is working different. We're including a file looking like this:

Re: Information not getting into MySQL - UPDATE to radacct

2010-03-19 Thread Alan DeKok
Steve. Parfitt (Siphon) wrote: I can see the accounting requests arrive at free radius and it seems to be writing to the MySQL with an UPDATE method yet I never see any information get into the DB. This is largely a MySQL question. FreeRADIUS is doing an UPDATE. An UPDATE to fields that

RE: Max Query Length Exceeded and Field Truncated

2010-03-19 Thread Gary Gatten
*MAYBE* some people *COULD* be a little more... cordial at times, but - I'd rather have my problem solved harshly vs. getting the run around by people who *think* they know what they're doing. When stuff is free you take what you can get. I'm sure if one was to pay commercial level support

Re: Unresponsive child for request

2010-03-19 Thread Mark Jones
I agree.but I was currious as to how many seconds before it gives up? - Original Message - From: Alan DeKok al...@deployingradius.com To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Thursday, March 18, 2010 5:33 PM Subject: Re: Unresponsive child for

NAS type when NAS is stored in SQL?

2010-03-19 Thread John Doppke
I'm using the nas table in mysql to store my clients. I've found that if I try to test for client:nastype, a value is returned only for entries from clients.conf. Is there a way to get the nas type for clients in SQL? John Doppke - List info/subscribe/unsubscribe? See

Re: Unresponsive child for request

2010-03-19 Thread Alan DeKok
Mark Jones wrote: I agree.but I was currious as to how many seconds before it gives up? See max_request_time Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: NAS type when NAS is stored in SQL?

2010-03-19 Thread Alan DeKok
John Doppke wrote: I'm using the nas table in mysql to store my clients. I've found that if I try to test for client:nastype, a value is returned only for entries from clients.conf. Is there a way to get the nas type for clients in SQL? Do an SQL query. %{sql: SELECT ...}

simultaneous-use via exec ?

2010-03-19 Thread power159
hi all I am trying to load simultaneous-use parameter via exec . I have tried it in any section ( authorize / accounting / post-auth and .. ) at beginning and end of the section , but I dont know why freeradius is not reading it .. its just working when I am using it in sql . - List

Invalid packet code 11 sent to authentication port from client error

2010-03-19 Thread Rob Brickhouse
I hope someone can help me with this. I tested setting up freeradius 2.1.6 on an opensuse 10.2 box and was able to get everything authenticating against novell edirectory. Now that I'm finally ready to put it on my production box, only 2.1.8 is available but I figure no big deal since it appeared

Re: simultaneous-use via exec ?

2010-03-19 Thread Alan DeKok
power159 wrote: I am trying to load simultaneous-use parameter via exec . What does that mean? I have tried it in any section ( authorize / accounting / post-auth and .. ) at beginning and end of the section , but I dont know why freeradius is not reading it .. its just working when I am

Re: Invalid packet code 11 sent to authentication port from client error

2010-03-19 Thread Alan DeKok
Rob Brickhouse wrote: I hope someone can help me with this. I tested setting up freeradius 2.1.6 on an opensuse 10.2 box and was able to get everything authenticating against novell edirectory. Now that I'm finally ready to put it on my production box, only 2.1.8 is available but I figure no

EAP (PEAP)+ntlm_auth doesn't send password by it self

2010-03-19 Thread Cesar Ortega
Good morning fellas, After several unsuccessful attempts I could install Freeradius with OpenSSL support for do ntlm_auth for the users with Active Directory integration. The problem is, when the windows xp machine try to connect to the wireless network, Freeradius (or windows xp machine,

Re: NAS type when NAS is stored in SQL?

2010-03-19 Thread John Doppke
On 3/19/2010 at 1:40 PM, freeradius-users-requ...@lists.freeradius.org wrote: Do an SQL query. %{sql: SELECT ...} Alan DeKok. I was afraid of that. I looked through the code and it appears as if rlm_sql should populate nastype along with shortname, secret, etc. Anyone know

Re: EAP (PEAP)+ntlm_auth doesn't send password by it self

2010-03-19 Thread Alan Buxey
Hi, After several unsuccessful attempts I could install Freeradius with OpenSSL support for do ntlm_auth for the users with Active Directory integration. The problem is, when the windows xp machine try to connect to the wireless network, Freeradius (or windows xp machine, reallly dont

Re: Invalid packet code 11 sent to authentication port from client error

2010-03-19 Thread Alan Buxey
Hi, you SAY you are using 2.1.8 but this config filter = ((objectClass=inetOrgPerson)(uid=%{Stripped-User-Name:-%{User-Name}})) which leads to this error/warning [ldap] WARNING: Deprecated conditional expansion :-. See man unlang for details was fixed in 2.1.8 (basically, config

Re: NAS type when NAS is stored in SQL?

2010-03-19 Thread Alan Buxey
Hi, I was afraid of that. I looked through the code and it appears as if rlm_sql should populate nastype along with shortname, secret, etc. Anyone know why it's not? it does if the info is there: SELECT id, nasname, shortname, type, secret FROM ${nas_table} (in fact, it can also

Re: EAP (PEAP)+ntlm_auth doesn't send password by it self

2010-03-19 Thread Cesar Ortega
Hi Alan, Thanks for your response. It didn't work either, the output is: Listening on authentication address * port 1645 Listening on accounting address * port 1646 Listening on proxy address * port 1647 Ready to process requests. rad_recv: Access-Request packet from host AP's IP port 1645,

Re: NAS type when NAS is stored in SQL?

2010-03-19 Thread John Doppke
-- -John On 3/19/2010 at 4:21 PM, freeradius-users-requ...@lists.freeradius.org wrote: t does if the info is there: SELECT id, nasname, shortname, type, secret FROM ${nas_table} (in fact, it can also populate the 'server' too - add that as last option in the SELECT - latest version of

log_badlogins include SRC IP Address

2010-03-19 Thread Eric . Hernandez
Hi, I am trying to configure the log_badlogins to include the src IP address of the client host. I am noticing that in the radius.log does not include the src IP. Example. Fri Mar 19 15:11:39 2010 : Auth: Login incorrect: [jack] (from client testswitch port 0) Does anyone know how to change

Re: log_badlogins include SRC IP Address

2010-03-19 Thread Gary Gatten
First, you need to make sure the client (switch, not host) is providing that info. From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org freeradius-users-bounces+ggatten=waddell@lists.freeradius.org To: freeradius-users@lists.freeradius.org

Traffic Accounting Update

2010-03-19 Thread Teguh Kurniawan
Hi, My traffic accounting was running well. The problem is, accounting only update once when client is disconnected. Is possible, accounting update in a given time, eg every 5 minutes. I use FR 2.1.8 with mysql 5.5. Thank's Teguh Kurniawan - List info/subscribe/unsubscribe? See

RE: Traffic Accounting Update

2010-03-19 Thread Tim Sylvester
The NAS controls when the Accounting Interim Updates are sent to the RADIUS server. Check the documentation on configuring your NAS to see if you can enable Interim Updates and set the frequency of updates. Tim -Original Message- From: freeradius-users-

Re: Traffic Accounting Update

2010-03-19 Thread Teguh Kurniawan
I will try. Thank you. Teguh On Sat, Mar 20, 2010 at 8:50 AM, Tim Sylvester tim.sylves...@networkradius.com wrote: The NAS controls when the Accounting Interim Updates are sent to the RADIUS server. Check the documentation on configuring your NAS to see if you can enable Interim Updates and