Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread Alan DeKok
sbchem wrote: shrug It's an error produces (sic) by the PAM subsystem. Ask them what it means. Sigh It turns out the error is caused by a typo in the radiusd file provided in /redhat/radiusd-pam, NOT by the pam subsystem. In fact, the pam subsystem was merely reporting the error in the

Re: Option 82 parse problems.

2010-05-28 Thread Alan DeKok
Anton wrote: 1. In dictionary.dhcp there are two strings (version 2.1.8): ATTRIBUTE DHCP-Agent-Circuit-Id 0x0152 octets ATTRIBUTE DHCP-Agent-Remote-Id 0x0252 octets but when I start radiusd -X I see only one whole string like:

Re: Option 82 parse problems.

2010-05-28 Thread Anton
Ok. Please see attach. But I'm afraid that is may only case, my unfortunate radius configuration. This is not directly received from the switch packet but from switch-dhcrelay. On Fri, 28 May 2010 13:11:57 +0700 Alan DeKok al...@deployingradius.com wrote: Please supply a packet trace

Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread Alan Buxey
Hi, I am part of a consortium of public and private universities and scientific research facilities and our internal listserv on radius frequently talks ...as am I. but I inform people that they should read the documentation and follow the basic information provided about how to troubleshoot

Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread Josip Rodin
On Thu, May 27, 2010 at 01:51:44PM -0700, sbchem wrote: our internal listserv on radius frequently talks people off of freeradius solely because of the sarcastic and chip on the shoulder attitude of some of the developers. Quit being such a Mordac Alan, it scares the tourists and devalues the

Re: github wiki

2010-05-28 Thread Josip Rodin
On Thu, May 27, 2010 at 06:00:48PM +0200, Alan DeKok wrote: Thanks, but we already *have* a Wiki. I would really prefer to not add yet *another* location for documentation. Yes... the existing Wiki has a number of out-of-date pages. I will, annoyingly enough :) again use this as an

Re: github wiki

2010-05-28 Thread Alan DeKok
Josip Rodin wrote: I will, annoyingly enough :) again use this as an opportunity to ask for an account on the wiki in order to be able to help fixing these. Done. (It's uncommon to call a mediawiki installation a wiki and have a strict policy of forbidding volunteers from editing, even

Re: Accounting to MySQL not working

2010-05-28 Thread Christoph Schwabl
Hi Alan, thank you for your response. according to the debug: +- entering group accounting {...} [detail]expand: /var/log/freeradius/radacct/%{Client-IP-Address}/detail-%Y%m%d - +/var/log/freeradius/radacct/192.168.1.10/detail-20100527 [detail]

Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread Peter Nixon
On Fri 28 May 2010, John Dennis wrote: On 05/27/2010 04:51 PM, sbchem wrote: shrug It's an error produces (sic) by the PAM subsystem. Ask them what it means. Sigh It turns out the error is caused by a typo in the radiusd file provided in /redhat/radiusd-pam, NOT by the pam

Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread sbchem
Alan--thank you for posting your response and proving my point -- diff the tone and content of your response to those of John, Josip and Alan B. -- as the younger set sez, chill dude No one is disparaging your work -- but maybe you need to divert some of your considerable energy to working on

Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread Alan DeKok
Josip Rodin wrote: The solution is to treat such projects, including FreeRADIUS, accordingly - this forum is not what you might call a first-level helpdesk venue - it is instead a venue where the user can be expected a lot from, including both a technical proficiency and an ability to take

Re: RADDB 2.1.7 and /etc/shadow

2010-05-28 Thread Alan DeKok
sbchem wrote: No one is disparaging your work See the other responses to your message: no one here agrees with the above statement. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting to MySQL not working

2010-05-28 Thread Alan DeKok
Christoph Schwabl wrote: this part is (and was) enabled please find below the configuration of the files (which is the same configuration as for 2.0.4 - this configuration is working for 2.0.4) however, it seems the sql line is ignored by the radius server This happens in one of two

Re: Option 82 parse problems.

2010-05-28 Thread Alan DeKok
Anton wrote: Ok. Please see attach. But I'm afraid that is may only case, my unfortunate radius configuration. It looks to be a bug in 2.1.9. I'll see if I can put a fix into 'git', the v2.1.x branch in the next few days. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: check ldap users with different client IP's

2010-05-28 Thread Alan DeKok
Stephon Chen wrote: hello all I've used freeradius as the front of a LDAP server. Here, I want to allow different access rights for each LDAP group client ip address For example below: user X in LDAP group A, from ip IP-A user Y in LDAP group B, from ip IP-B Pretty much exactly

Re: Conditional radreply with Freeradius. Possible somehow ?

2010-05-28 Thread Alan DeKok
Pere Hospital wrote: I have gone again through the SQL wiki. What I am not able to find anywhere (and think that it is what we exactly need) is how to emulate this behaviour of check/reply items that you can get via the users file. i.e. from users file: The SQL schema is intended to

Fresh Install

2010-05-28 Thread David Peterson
I just installed Ubuntu 10.04 server with the basic LAMP install added. I used the git method for downloading and compiling freeradius and everything installed properly but for one caveat. radiusd: error while loading shared libraries: libfreeradius-radius-2.1.9.so: cannot open shared object

Re: Fresh Install

2010-05-28 Thread John Dennis
On 05/28/2010 03:15 PM, David Peterson wrote: I just installed Ubuntu 10.04 server with the basic LAMP install added. I used the git method for downloading and compiling freeradius and everything installed properly but for one caveat. radiusd: error while loading shared libraries:

Re: Fresh Install

2010-05-28 Thread Alan DeKok
David Peterson wrote: I just installed Ubuntu 10.04 server with the basic LAMP install added. I used the git method for downloading and compiling freeradius and everything installed properly but for one caveat. radiusd: error while loading shared libraries: libfreeradius-radius-2.1.9.so:

RE: Fresh Install

2010-05-28 Thread David Peterson
Ldconfig did it! Thanks! David -Original Message- From: freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org [mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.freeradiu s.org] On Behalf Of John Dennis Sent: Friday, May 28, 2010 3:30 PM To: David

Re: Accounting to MySQL not working

2010-05-28 Thread Christoph Schwabl
however, it seems the sql line is ignored by the radius server This happens in one of two cases: 1) the server is reading a *different* file than the one you're editing this exactly was the problem I had 2 files in /etc/raddb/sites-enabled default.original default It seems the

Re: Accounting to MySQL not working

2010-05-28 Thread John Dennis
On 05/28/2010 04:33 PM, Christoph Schwabl wrote: however, it seems the sql line is ignored by the radius server This happens in one of two cases: 1) the server is reading a *different* file than the one you're editing this exactly was the problem I had 2 files in

Re: Accounting to MySQL not working

2010-05-28 Thread Marinko Tarlac
:) Sure, its good idea to create backups but do not store them in the sites-enabled dir :) John Dennis wrote: On 05/28/2010 04:33 PM, Christoph Schwabl wrote: however, it seems the sql line is ignored by the radius server This happens in one of two cases: 1) the server is reading a

peap/eap/mschapv2 + MySQL

2010-05-28 Thread Matt Madrid
Hello list, First of all: freeradius-2.1.8, Mysql 5.1.41 on Ubuntu 10.04 / Airport Extreme v7.5 I'm having trouble authenticating users with EAP/mschapv2 against a mysql database. Users authenticate fine if they are in the users file. Here's the main problem it seems from the debug output:

Re: Accounting to MySQL not working

2010-05-28 Thread John McDonnell
Making a backup of the file in sites-available would make more sense since the files in sites-enabled are only links to the files in sites-enabled. It is documented. ;) Marinko Tarlac mangi...@gmail.com wrote: :) Sure, its good idea to create backups but do not store them in the

Re: peap/eap/mschapv2 + MySQL

2010-05-28 Thread Matt Madrid
Now I've read a million posts on the web, including this list where people have reported the same problem. In most cases the problem was that the inner-tunnel server wasn't configured for sql. I definitely have sql on in the inner-tunnel file (which I will post in a sec). The mysql server IS