Re: MAC-Authentication from Mysql

2010-11-23 Thread David Seira
Thanks for your responses. I tried SQL XLAT yesterday but I had the next radiusd -X errors: /usr/local/etc/raddb/sites-enabled/default[598]: Failed to parse if subsection. /usr/local/etc/raddb/sites-enabled/default[485]: Errors parsing post-auth section. I think it is not possible to that with

RE:

2010-11-23 Thread Maurice James
You need to be more specific with your questions. The config files have examples on your question as well Description: Description: MCITP(rgb)_1084_1085 Description: Description: Description: rhct_logo-clr Description: Description:

Re: MAC-Authentication from Mysql

2010-11-23 Thread Alan DeKok
David Seira wrote: Thanks for your responses. I tried SQL XLAT yesterday but I had the next radiusd -X errors: /usr/local/etc/raddb/sites-enabled/default[598]: Failed to parse if subsection. The next logical step would be to post *that line* from the file, and ask What is wrong about

Re: MAC-Authentication from Mysql

2010-11-23 Thread David Seira
The next logical step would be to post *that line* from the file, and ask What is wrong about it? Yes, but I think it is not possible with SQL XLAT. For that reason, finally, I try with sql.authorize, as Arran advised me, and I think I've achieved the solution. The problem was I didn't

Re: Checkval weird issue with LDAP backend and PAM authentication

2010-11-23 Thread marco
Sorry Alan I've not realized that the logs had became a garbage :O( - maybe a webmail realted issue of my ISP. Now I Bcc myself to see how does it appear to recipients I tried man unlang but got no manual entry - I'm using Freeradius packaged for CentOS - I'll give a look to

Freeradius + LDAP auth

2010-11-23 Thread Old Eduardo
Sorry list, but i try to configure this in few weeks and no get sucess. Realy need help for list. im try to all sites in google, but no get sucess. i try this: http://blog.yufeng.net/index.php/2010/07/debian-poptop-freeradius-openldap/ http://wiki.freeradius.org/Rlm_ldap

Clients.conf file seems not working

2010-11-23 Thread Wagner Pereira
Hi, folks. My scenario has a Cisco NAS authenticating in a Debian lenny running FreeRADIUS (which is using the /etc/passwd method). I must to give access to some users just in a specific NASes. I noticed that, even if I haven't the entry in clients.conf file for my NAS, like that...

Re: Clients.conf file seems not working

2010-11-23 Thread Alan DeKok
Wagner Pereira wrote: I noticed that, even if I haven't the entry in clients.conf file for my NAS, like that... client 10.0.0.2/32 { secret = test shortname = edge } ...I am able to access my device. Read the debug log to see why. So I understand that

Re: Freeradius + LDAP auth

2010-11-23 Thread Alan DeKok
Old Eduardo wrote: but i try to configure this in few weeks and no get sucess. Ask questions earlier. Or, read the debug output. Tue Nov 23 07:37:24 2010 : Debug: WARNING: Unprintable characters in the password.Double-check the shared secret on the server and the NAS! That

Re: Checkval weird issue with LDAP backend and PAM authentication

2010-11-23 Thread Alan DeKok
marco wrote: Sorry Alan I've not realized that the logs had became a garbage :O( - maybe a webmail realted issue of my ISP. Now I Bcc myself to see how does it appear to recipients I tried man unlang but got no manual entry - I'm using Freeradius packaged for CentOS - I'll give a look

Re: Freeradius + LDAP auth

2010-11-23 Thread Old Eduardo
sorry alan, i understand need to read debug. But, i see secret in clients and my test radtest user pass ip 0 secret is corretly. And my other doubt is in auth type = Local, why local if i put auth type LDAP in configuration? Only get local ... Realy sorry for this, but need u help. Regards,

Re: Freeradius + LDAP auth

2010-11-23 Thread Paulo Maia
Show us your authorize and authenticate session . I had a problem like that once Regards , On Tue, Nov 23, 2010 at 9:49 AM, Old Eduardo oldedua...@gmail.com wrote: sorry alan, i understand need to read debug. But, i see secret in clients and my test radtest user pass ip 0 secret is

Re: Freeradius + LDAP auth

2010-11-23 Thread Alan DeKok
Old Eduardo wrote: sorry alan, i understand need to read debug. But, i see secret in clients and my test radtest user pass ip 0 secret is corretly. That uses a *different* secret, as the packet is coming from a different IP address. i.e. you can either fix the secret as suggested by

Expiration stored on sql

2010-11-23 Thread yzy-oui-fi
I have a doubt... I'm using freeradius from Ubuntu 8.04. if i have to store an expiration date i stored some thing like that: username Attribute op Value someuser Expiration := 24 Nov 2010 13:58 I have a check to a Wifigator server and i see that they stored it as a timestamp (in

Re: Checkval weird issue with LDAP backend and PAM authentication

2010-11-23 Thread John Dennis
On 11/23/2010 08:33 AM, Alan DeKok wrote: marco wrote: Sorry Alan I've not realized that the logs had became a garbage :O( - maybe a webmail realted issue of my ISP. Now I Bcc myself to see how does it appear to recipients I tried man unlang but got no manual entry - I'm using Freeradius

EAP and NTLM support (fwd)

2010-11-23 Thread JR Mayberry
Is there a preferred method for doing EAP (from Wireless infrastructure) to Active Directory for authentication via FreeRADIUS? Or is there an alternative to EAP? It appears that NTLM is being deprecated and Samba is removing support in RedHat 5 but NTLM seems to be the current

Re: EAP and NTLM support (fwd)

2010-11-23 Thread Phil Mayers
On 23/11/10 15:43, JR Mayberry wrote: Is there a preferred method for doing EAP (from Wireless infrastructure) to Active Directory for authentication via FreeRADIUS? Or is there an alternative to EAP? Samba domain membership and callout to the ntlm_auth helper binary. It appears that NTLM

Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Pableus
Hello, I have a FreeRADIUS server doing authentication and accounting with ADSL and with wireless users. The wireless users are connected to a MikroTik which is running a PPPoE server. There are absolutely no problems with the ADSL users, but the PPPoE users are constantly losing their

problem with rlm_perl

2010-11-23 Thread sameer khan
hey ppl i m trying to authenticate with rlm_perl using chap with following perl script but doesn't seem to work. i m guessing chap-password should be in hex (0x) format but doesn't seem to be in. hope some one can help me out Best Regards my $want_password=123;my $given_password;my

Re: problem with rlm_perl

2010-11-23 Thread Alan DeKok
sameer khan wrote: i m trying to authenticate with rlm_perl using chap with following perl script but doesn't seem to work. i m guessing chap-password should be in hex (0x) format but doesn't seem to be in. hope some one can help me out The CHAP-Password attribute is opaque binary data,

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Marinko Tarlac
I don't see anything related with freeRadius... On 11/23/2010 10:25 PM, Pableus wrote: Hello, I have a FreeRADIUS server doing authentication and accounting with ADSL and with wireless users. The wireless users are connected to a MikroTik which is running a PPPoE server. There are absolutely no

RE: problem with rlm_perl

2010-11-23 Thread sameer khan
Hey thanks for reply. i edited the dictionary to add an attribute for mikrotik. i will be help if you can explain a little further. thanks again Date: Tue, 23 Nov 2010 22:55:11 +0100 From: al...@deployingradius.com To: freeradius-users@lists.freeradius.org Subject: Re: problem with

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Pableus
I was wondering if there is any FreeRADIUS setting I can configure/modify to avoid this problem... Thanks again -- View this message in context: http://freeradius.1045715.n5.nabble.com/Problem-with-FreeRADIUS-PPPoE-Mikrotik-tp3277570p3277610.html Sent from the FreeRadius - User mailing list

FreeRADIUS with NTLM Auth not returning VSA after successful auth

2010-11-23 Thread Sipes, Nathan
1. With the DEFAULT Auth-Type = ntlm_auth a. The nas gets an accept back but the attribute Juniper-Local-User-Name is not passed back cat /var/log/radius/radacct/10.34.250.14/reply-detail-20101123 Tue Nov 23 15:44:34 2010 Packet-Type = Access-Accept 2

After ntlm_auth VSA is not sent. Without HTML this time

2010-11-23 Thread Sipes, Nathan
-detail-%Y%m%d - /var/log/radius/radacct/10.34.250.14/auth-detail-20101123 [auth_log] /var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d expands to /var/log/radius/radacct/10.34.250.14/auth-detail-20101123 [auth_log] expand: %t - Tue Nov 23 15:44:34 2010 ++[auth_log] returns ok ++[chap

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Christ Schlacta
Replace the broken mikrotik Sent from my iPhone On Nov 23, 2010, at 13:25, Pableus pablodi...@hotmail.com wrote: Hello, I have a FreeRADIUS server doing authentication and accounting with ADSL and with wireless users. The wireless users are connected to a MikroTik which is running a

eap-gtc error in authentication

2010-11-23 Thread Robert Masters
We've been working on using Freeradius on RHEL5.4 to link a Motorola RFS6000 with Oracle OID. We've had a number of hiccoughs along the way, and solved most of them - mainly thanks to the archives of this list. We are now getting the following error: rlm_eap_gtc: ERROR: Clear-test User-Password

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Pableus
Broken MikroTik? No, it's a RouterOS running in a X86 HP server, which is currently handling about 1500 PPPoE clients. Now we are migrating the authentication process to a RADIUS and these problems appear. -- View this message in context:

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread EasyHorpak.com
On 24/11/2553 09:48, Pableus wrote: Broken MikroTik? No, it's a RouterOS running in a X86 HP server, which is currently handling about 1500 PPPoE clients. Now we are migrating the authentication process to a RADIUS and these problems appear. It 's problems on Mikrotik . How many PPPoE Client

Re: Expiration stored on sql

2010-11-23 Thread EasyHorpak.com
On 23/11/2553 21:51, yzy-oui-fi wrote: Wifigator server wifigator server is right. freeradius is right. you may misunderstand. Freeradius always send time to nas for termiate when time expire. The good time for nas is timestamp format which nas can count down. NAS dosn't know about date

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Pableus
I have not got the exact number right now. We're still doing tests, so for now a few clients authenticate with RADIUS, the rest follows as usual. What catches my attention is that users only have problems when they are passed to the RADIUS, otherwise do not have problems with disconnections. --

Automatically Generating Expiration - Freeradius 2.1.9 / mysql 5.1 / dialup admin

2010-11-23 Thread mikal
What I'm trying to do is enable a non-technical person to create temporary, guest like accounts using the dialup admin interface. The accounts will be created as needed, they need to expire within a predetermined time frame(s) and I'm trying to avoid asking the person creating the accounts to be

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread EasyHorpak.com
On 24/11/2553 11:05, Pableus wrote: I have not got the exact number right now. We're still doing tests, so for now a few clients authenticate with RADIUS, the rest follows as usual. What catches my attention is that users only have problems when they are passed to the RADIUS, otherwise do not

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Johan Meiring
On 2010/11/24 06:05 AM, Pableus wrote: I have not got the exact number right now. We're still doing tests, so for now a few clients authenticate with RADIUS, the rest follows as usual. What catches my attention is that users only have problems when they are passed to the RADIUS, otherwise do