Log the 802.1x session

2010-04-09 Thread Rosario Lumia
Hi to all, my question is if it's possible to log the end of a 802.1x session. I need this log for legal reason. I need the start session log which i can get by a mysql query in post-auth session. For the end of 802.1x session? Any ideas? Can freeradius do this in someway? Thanks for answers.

Re: Log the 802.1x session

2010-04-09 Thread Alan DeKok
Rosario Lumia wrote: Hi to all, my question is if it's possible to log the end of a 802.1x session. What does that mean? I need this log for legal reason. I need the start session log which i can get by a mysql query in post-auth session. For the end of 802.1x session? Any ideas? Can

Re: Check traffic quota / rlm_sqlcounter

2010-04-09 Thread Alexander
--- On Wed, 4/7/10, Alan DeKok al...@deployingradius.com wrote:   See man unlang   In the authorize section, do:     if (%{sql: SELECT ...quota ...} = %{sql:SELECT ... usage ...}) {         reject     } Finally I got it to work. Thanks! Only drawback is that there must be traffic

Re: Win 7 IKEv2+PEAP = no NPS server?

2010-04-09 Thread Stefan Winter
Hi, after some thorough investigation, I'm reasonably sure that it's not strongswan's fault, but the IKEv2 VPN client on WIndows 7. The thing is: if you Enable Identity privacy for PEAP and set it to some string, - the outer identity is the IP address (NOT the string you entered) - the inner

Re: Win 7 IKEv2+PEAP = no NPS server?

2010-04-09 Thread Alan DeKok
Stefan Winter wrote: [peap] Done initial handshake [peap] eaptls_process returned 7 [peap] EAPTLS_OK [peap] Session established. Decoding tunneled attributes. [peap] Tunneled data is invalid. [eap] Handler failed in EAP/peap [eap] Failed in EAP select ++[eap] returns invalid Failed to

[no subject]

2010-04-09 Thread Richie Lee
http://vepuxahu.angelfire.com/ _ Got a phone? Get Hotmail Messenger for mobile! http://go.microsoft.com/?linkid=9724464- List info/subscribe/unsubscribe? See

Re: Log the 802.1x session

2010-04-09 Thread Rosario Lumia
2010/4/9 Alan DeKok al...@deployingradius.com Rosario Lumia wrote: Hi to all, my question is if it's possible to log the end of a 802.1x session. What does that mean? Sorry for my (very) bad english. Only for clearness: I'd want to know if there is a way to log the end of a 802.1x

To FreeRadius List Moderator - Alan DeKok et al

2010-04-09 Thread Glen Millard
I think that the list is being spammed. Not the end of the world, but kind of defeats the purpose of a mailing list, n'est pas?? Just giving a heads-up. Glen Original Message From: - Fri Apr 09 11:44:27 2010 X-Mozilla-Status: 0001 X-Mozilla-Status2:

[no subject]

2010-04-09 Thread Richie Lee
http://nahoniha.t35.com/ _ Live connected. Get Hotmail Messenger on your phone. http://go.microsoft.com/?linkid=9724462- List info/subscribe/unsubscribe? See

Re: Log the 802.1x session

2010-04-09 Thread Matt Hite
On Fri, Apr 9, 2010 at 8:46 AM, Rosario Lumia ery...@gmail.com wrote: Sorry for my (very) bad english. Only for clearness: I'd want to know if there is a way to log the end of a 802.1x session. I mean: a client turn off his wireless card and (I think) AP can (??) send a message to freeradius

RE: Log the 802.1x session

2010-04-09 Thread Garber, Neal
From what I've read, supplicants can send an EAPOL-Logoff message to If the requirement is to determine when the user disconnects, isn't this best handled by accounting data? That is, if the authenticator supports sending Accounting-Request packets to RADIUS, then when the user disconnects, it

Re: To FreeRadius List Moderator - Alan DeKok et al

2010-04-09 Thread Alan DeKok
Glen Millard wrote: I think that the list is being spammed. Yes... we're working on fixing it. *Quoting* the original message is making the problem worse. CC'ing me, and setting return receipt requested is annoying. In case it wasn't clear, I *do* read the list. Not the end of the

Re: Log the 802.1x session

2010-04-09 Thread Alan DeKok
Rosario Lumia wrote: Sorry for my (very) bad english. Only for clearness: I'd want to know if there is a way to log the end of a 802.1x session. I mean: a client turn off his wireless card and (I think) AP can (??) send a message to freeradius because the association between client and AP is

Re: Log the 802.1x session

2010-04-09 Thread Matt Hite
On Fri, Apr 9, 2010 at 12:11 PM, Garber, Neal neal.gar...@energyeast.com wrote: From what I've read, supplicants can send an EAPOL-Logoff message to If the requirement is to determine when the user disconnects, isn't this best handled by accounting data?  That is, if the authenticator

Re: To FreeRadius List Moderator - Alan DeKok et al

2010-04-09 Thread Phil Pierotti
Oddly enough, simply matching no subject and scorching it out of existence would work in this case, and would also remove one of the classic email annoyances. Phil P On Sat, Apr 10, 2010 at 5:28 AM, Alan DeKok al...@deployingradius.comwrote: Glen Millard wrote: I think that the list is being

nospace_user has removed from freeradius?

2010-04-09 Thread cytron
I am using the freeradius 2.1.3 in Slackware 12 I use simultaneous-use = 1 to block a second conection for same user, it work fine. But, if the user has a space after username, like john , the freeradius let it to connect. Looking for remove de spaces I found the nospace_user and nospace_pass,