Grant access for all users before login

2010-11-30 Thread snowman5840
Hi I'm using freeradius with ldap users and mschap + peap. But i have one problem. When a user gets his login prompt, no access to the network is allowed because they first get access when they login and freeradius can perform an ldap check with the username. But when a new user wants to login

Re: pppoe ntp attribute

2010-11-30 Thread Michele Petrazzo
27/11/2010 12:47, wrote: Does the NAS documentation say that it accepts such an option? Good question. I could try and see if it'll accept. But... which one try? Sorry, but do I wrote something wrong that no one reply to me? Thanks - List info/subscribe/unsubscribe? See

rlm_sql_postgresql and plus sign

2010-11-30 Thread Michele Petrazzo
Hi list, today I discover a strange behaviour with FR and the PG backend: if the authorize_group_check_query query returns a value that has a plus sign (+) inside the groupname, FR thread that value as unicode. I think this because into the next authorize_group_reply_query query, it use the

Re: rlm_sql_postgresql and plus sign

2010-11-30 Thread Bjørn Mork
Michele Petrazzo michele.petra...@unipex.it writes: today I discover a strange behaviour with FR and the PG backend: if the authorize_group_check_query query returns a value that has a plus sign (+) inside the groupname, FR thread that value as unicode. I think this because into the next

Re: rlm_sql_postgresql and plus sign

2010-11-30 Thread Michele Petrazzo
Bjørn Mork wrote: look near the top of raddb/sql/postgresql/dialup.conf : # Safe characters list for sql queries. Everything else is replaced # with their mime-encoded equivalents. # The default list should be ok # safe-characters =

Re: rlm_sql_postgresql and plus sign

2010-11-30 Thread Bjørn Mork
Michele Petrazzo michele.petra...@unipex.it writes: Only for curiosity, these chars are hard-coded inside the sources or in other place and loaded at startup? defined like any other module option default in src/modules/rlm_sql/rlm_sql.c : static const CONF_PARSER module_config[] = { /*

RE: How to filter MAC addresses within Freeradius?

2010-11-30 Thread John McDonnell
-Original Message- On Behalf Of Christ Schlacta mac filtering should happen at the AP level. Ever try maintaining large (300+) MAC auth lists on multiple APs? Not fun at all. Even maintaining a consistent list of 50 addresses across multiple APs is not that fun, though a bit more

RE: Grant access for all users before login

2010-11-30 Thread Garber, Neal
When a user gets his login prompt, no access to the network is allowed because they first get access when they login and freeradius can perform an ldap check with the username. But when a new user wants to login or the user uses an different computer, the user dosen't exist on this machine

Re: Checkval weird issue with LDAP backend and PAM authentication

2010-11-30 Thread John Dennis
On 11/25/2010 04:24 PM, Marco Carcano wrote: Hi John thank you very much for the reply - I haven't noticed that exists a freeradius2 rpm package I tried, and after a lot of arrangement on the config files - freeradius2 splits a lot radiusd.conf - I got it working but I have to point out this

Re: Checkval weird issue with LDAP backend and PAM authentication

2010-11-30 Thread John Dennis
On 11/30/2010 09:45 AM, John Dennis wrote: On 11/25/2010 04:24 PM, Marco Carcano wrote: Hi John thank you very much for the reply - I haven't noticed that exists a freeradius2 rpm package I tried, and after a lot of arrangement on the config files - freeradius2 splits a lot radiusd.conf - I

RE: TLS authentication works, but does not check usernames against 'users' file.

2010-11-30 Thread John McDonnell
-Original Message- On Behalf Of Andrew Bovill Hi, I'm trying to get WPA Enterprise EAP/TLS working with my wireless router. It appears that the TLS portion of the authentication works (valid certificates give me a working connection) but it does NOT appear to actually be

Re: TLS authentication works, but does not check usernames against 'users' file.

2010-11-30 Thread Andrew Bovill
On 11/30/2010 11:05 AM, John McDonnell wrote: -Original Message- On Behalf Of Andrew Bovill Hi, I'm trying to get WPA Enterprise EAP/TLS working with my wireless router. It appears that the TLS portion of the authentication works (valid certificates give me a working connection)

Re: TLS authentication works, but does not check usernames against 'users' file.

2010-11-30 Thread Phil Mayers
On 30/11/10 16:10, Andrew Bovill wrote: It just seems weird that nearly ALL of the suplicants I've used *require* me to give a username/password (or at least an Identifier + password) in addition to the unlocked certificate. Maybe a better question is: What's the point of the username/pass

FW: MAC Address Filtering

2010-11-30 Thread jEsSiiK... mARtiinEzZ
hi I have the operating system ubunto 10.4 with freeradisUs-server-2.1.10 where to add the Mac address? Jessica Alejandra Martinez Bautista - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Dialup Admin and HTTP Authentication

2010-11-30 Thread mikal
OK, so to get this working I modified the Dialup Admin functions.php3 file to use $_SERVER instead of $HTTP_SERVER_VARS and to use REMOTE_USER instead of PHP_AUTH_USER. PHP_AUTH_USER wasn't being populated, but REMOTE_USER was so I just used that. Not sure if that's good, bad or indifferent,

Re: TLS authentication works, but does not check usernames against 'users' file.

2010-11-30 Thread Andrew Bovill
On 11/30/2010 11:15 AM, Phil Mayers wrote: On 30/11/10 16:10, Andrew Bovill wrote: It just seems weird that nearly ALL of the suplicants I've used *require* me to give a username/password (or at least an Identifier + password) in addition to the unlocked certificate. Maybe a better question

Re: TLS authentication works, but does not check usernames against 'users' file.

2010-11-30 Thread Phil Mayers
On 30/11/10 16:55, Andrew Bovill wrote: It seemed to me that it wouldn't connect if I left the Identity blank, so that may be what was confusing me. Most supplicants will use the cn=XXX from the cert as the identity, but it really makes sense to ask, because they may not be (often are not)

wifi ip allocation

2010-11-30 Thread Alexandre Chapellon
Hi every body, While all the documentation on the web seems to answer *NO*, and because I feel like i need to talk to someone today, I was wondering if there is any way to allocate IP address to wifi user using radius Attributes instead of DHCP? Or maybe I should ask... How can i allocate IP

RE: Grant access for all users before login

2010-11-30 Thread snowman5840
Garber, Neal-2 wrote: When a user gets his login prompt, no access to the network is allowed because they first get access when they login and freeradius can perform an ldap check with the username. But when a new user wants to login or the user uses an different computer, the user

Re: wifi ip allocation

2010-11-30 Thread Alan DeKok
Alexandre Chapellon wrote: Hi every body, While all the documentation on the web seems to answer *NO*, and because I feel like i need to talk to someone today, I was wondering if there is any way to allocate IP address to wifi user using radius Attributes instead of DHCP? Nope. The only

Re: wifi ip allocation

2010-11-30 Thread Arran Cudbard-Bell
On Nov 30, 2010, at 11:33 AM, Alexandre Chapellon wrote: Hi every body, While all the documentation on the web seems to answer *NO*, and because I feel like i need to talk to someone today, I was wondering if there is any way to allocate IP address to wifi user using radius Attributes

FW: altas de direcciones mac

2010-11-30 Thread Leonardo Fajardo López
From: cosita_bodo...@hotmail.com To: freeradius-users@lists.freeradius.org Subject: altas de direcciones mac Date: Tue, 30 Nov 2010 20:19:42 + Hello I am Leonardo Fajardo Lopez, I am working with an operating system Ubuntu 9.10 and with freeradius-server-02.01.1910 and say high to

mac address validation

2010-11-30 Thread Jorge L. Herrera
Hello ... my name is Jorge I raised a question I am making the draft validation of users by MAC address and my question is not that high given file directions Mac, I installed before 1.2.1910 Freeradius a virtual machine VirtualBox-3.2.8 Win-64453-OS Ubuntu 9.10 in the / raddb belonging to

mac address validation

2010-11-30 Thread Jorge L. Herrera
Hello ... my name is Jorge I raised a question I am making the draft validation of users by MAC address and my question is not that high given file directions Mac, I installed before 1.2.1910 Freeradius a virtual machine VirtualBox-3.2.8 Win-64453-OS Ubuntu 9.10 in the / raddb belonging to