Re: usergroup problems with separate auth and accounting databases

2010-08-25 Thread Alan DeKok
Trey Scarborough wrote: I have to mysql configurations for one for my authentication request and one for the accounting data. When it make a groupcheck query it is always using the module for the accounting server is there anyway to make this function correctly and have it use the

Re: Compiling with newest OpenSSL

2010-08-25 Thread Alan DeKok
David Mitchell wrote: I'm hitting some snags trying to compile from source with the newest OpenSSL. I have compiled Openssl 1.0.0a and installed in /usr/local/ssl (the default location). With FreeRadius 2.1.9 configure fails to detect with errors which look like something which is possibly a

Re: Memory leak on reload

2010-08-25 Thread Alan DeKok
Derek Chee wrote: I have a FreeRADIUS 2.1.9 installation (compiled from source) running on Solaris 10 Sparc and I've run into a memory leak issue when reloading the configuration with a HUP signal. I have a very simple RADIUS setup with just an authorize and a users file. The users file

rlm_perl error

2010-08-25 Thread JUND , Aurélien
Hello In order to replace the ldap module wich can't cope with multi valued attributes (I know the ldap directory is inadequate for freeradius, but I can not change it), I am trying to use perl module. First I get a strange error when starting freeradius with the perl module, if I include the

Re: rlm_perl error

2010-08-25 Thread Bjørn Mork
JUND, Aurélien aurelien.j...@sfr.com writes: 3 hashes are given to the module and filled with value-pairs (Attribute names and values): # %RAD_CHECK Read-only Check items # %RAD_REQUEST Read-only Attributes from the request #

Re: rlm_perl error

2010-08-25 Thread Alan DeKok
Bjørn Mork wrote: JUND, Aurélien aurelien.j...@sfr.com writes: 3 hashes are given to the module and filled with value-pairs (Attribute names and values): # %RAD_CHECK Read-only Check items # %RAD_REQUEST Read-only Attributes from the

Re: windows7 machine authentication

2010-08-25 Thread alois blasbichler
Hello list Thank you for all the hints. I have created a new certificate and installed the ca.der on my laptop. I alos upgraded my freeradius to the latest version 2.1.9 But no luck i get allways the same error. Wath can i do ? Maybe its a configuration problem ? Below my full log By luis

RE: rlm_perl error

2010-08-25 Thread JUND , Aurélien
I'm running freeradius-server-2.1.7. I found this information in the default perl module configuration file. -- De : freeradius-users-bounces+aurelien.jund=sfr@lists.freeradius.org [mailto:freeradius-users-bounces+aurelien.jund=sfr@lists.freeradius.org] De la part de Alan

Re: Compiling with newest OpenSSL

2010-08-25 Thread David Mitchell
Alan DeKok wrote: David Mitchell wrote: I'm hitting some snags trying to compile from source with the newest OpenSSL. I have compiled Openssl 1.0.0a and installed in /usr/local/ssl (the default location). With FreeRadius 2.1.9 configure fails to detect with errors which look like something

Re: usergroup problems with separate auth and accounting databases

2010-08-25 Thread Trey Scarborough
Yes I am aware of how it is Documented I followed the documentation but still is not functioning correctly. I have a configuration that is similar to as follows sql sql1 { configuration for authentication database no accounting queries configured } sql sql2 { configuration for accounting

CA_file vs. CA_path

2010-08-25 Thread David Mitchell
I now have 2.1.10 compiled and running. It seems to work fine. I did have to make one change to my configuration. I had been using CA_path to refer to the certificates which can authenticate clients for EAP-TLS authentication in 2.1.8. In 2.1.10, that doesn't seem to work. If I specify a single

freeradius and syslog-ng

2010-08-25 Thread mack ragan
Hi, I have freeradius v2.0.5. I modified the log{} section of radiusd.conf to send logs to syslog-ng. In syslog-ng, I filter them out to a log collector. This seems to be working well. Now, I would like to get detail and auth to the log collector. Anyone know if this is possible? Thanks! -

Re: rlm_perl multiple attributes in rad_reply was: Adding Multiple Cisco-AVPairs using rlm_perl

2010-08-25 Thread Boian Jordanov
On Aug 22, 2010, at 3:06 PM, Alexander Kubatkin wrote: В сообщении от Воскресенье 22 августа 2010 10:48:56 автор Alan DeKok написал: Alexander Kubatkin wrote: This isn't working, i'm trying to put 2 dns-servers in dhcp configuration like this: $RAD_REPLY{'DHCP-Domain-Name-Server'} =

Re: rlm_perl error

2010-08-25 Thread Boian Jordanov
On Aug 25, 2010, at 4:47 PM, JUND, Aurélien wrote: I'm running freeradius-server-2.1.7. I found this information in the default perl module configuration file. -- De : freeradius-users-bounces+aurelien.jund=sfr@lists.freeradius.org

Re: How to debug rlm_perl in multithread?

2010-08-25 Thread Boian Jordanov
On Aug 23, 2010, at 9:36 PM, Eugen Konkov wrote: HI, FreeRadius. when run radiusd -X it works fine. But when run in multithread (without -X) it core dump after ten or twelve queriest to radiusd. Alan maybe it will be useful to add this info to doc/bugs ? Eugen Please do the following:

Configuration Problem with FreeRadius, Unix Authentication, and WRT54G2 WAP

2010-08-25 Thread Jonathan Black
First off: I'm trying to configure FreeRadius on a Qnap TS-239 Pro. I'm using ipkg to install freeradius. I've installed version 2.0.5-2 of freeradius. I'm attempting to set the system up so that users on the Qnap unit (The Radius Server) can use the same username and password to connect to

Re: Memory leak on reload

2010-08-25 Thread Derek Chee
On Aug 25, 2010, at 3:14 AM, Alan DeKok wrote: Derek Chee wrote: I have a FreeRADIUS 2.1.9 installation (compiled from source) running on Solaris 10 Sparc and I've run into a memory leak issue when reloading the configuration with a HUP signal. I have a very simple RADIUS setup with just

Re: Configuration Problem with FreeRadius, Unix Authentication, and WRT54G2 WAP

2010-08-25 Thread Fajar A. Nugraha
On Thu, Aug 26, 2010 at 5:25 AM, Jonathan Black frodowearinther...@gmail.com wrote: +- entering group authenticate rlm_unix: Attribute User-Password is required for authentication. Your iphone is probably doing EAP/MSCHAPv2, which does not send user password in plain text (which is required by

Wifi-Enabled Phones + FreeRadius

2010-08-25 Thread rrperez
I have successfully configured my FreeRadius 2 server for wireless authentication on computers. Now I want to test if it is possible for me to do authentication on wifi-enabled phones? And also, do I need to make additional configurations on the server? -- View this message in context:

Re: windows7 machine authentication

2010-08-25 Thread rrperez
You need to import two certificate, first is the root certificate (ca.der) and second is the client certificate (client.pem). Once you have already imported the certificates, define what authentication protocol you wish to use. If your users have a cleartext password or nt-hash password, then