Re: radmin del client error

2011-08-25 Thread tohaikmeng
Thanks Allan and Arran, the server is responding after i did a symbolic link as below. Below is the command that i did. ln -sf /usr/local/etc/raddb/sites-available/dynamic-clients /usr/local/etc/raddb/sites-enabled/ Just a couple of doubts. 1) secret is required in the client definition

Re: radmin del client error

2011-08-25 Thread Alan Buxey
Hi, 1) secret is required in the client definition (file: 192.168.169.74)? How do i make sure the server validate the client secret upon receiving the radius packet? Is the logic lies with dynamic_client_server? I noticed FreeRADIUS-Client-Secret was dynamically hard-coded in the example?

Re: Documentation about Freeradius + Openldap

2011-08-25 Thread Alejandro Gandara
Hi Alan DeKok, Thanks for your answer and your patience. Ive read what you said and I will apply it as better as i can. regards, Alejandro Gándara Álvarez 2011/8/24 Alan DeKok al...@deployingradius.com Alejandro Gandara wrote: We need to learn how assign IP or HOSTNAME ACCESS LIST to a

Re: problem with perl...

2011-08-25 Thread Tyller D
Hi Im trying to run freeradius, using rlm_perl, and centos 6. after installing ( yum install freeradius freeradius-mysql freeradius-perl freeradius-utils ). when I and start free radius I fails with this error Can't load '/usr/local/lib64/perl5/auto/DBI/DBI.so' for module DBI:

Re: problem with perl...

2011-08-25 Thread Fajar A. Nugraha
On Thu, Aug 25, 2011 at 4:21 PM, Tyller D tyll...@gmail.com wrote: Hi Im trying to run freeradius, using rlm_perl, and centos 6. after installing ( yum install freeradius freeradius-mysql freeradius-perl freeradius-utils ). when I and start free radius I fails with this error Can't load

Re: problem with perl...

2011-08-25 Thread Tyller D
Hi perl3.pl is my script It looks like this #!/bin/perl # PERL MODULES WE WILL BE USING use lib /usr/lib64/perl5/auto/DBI/; use DBI; use DBD::mysql; use vars qw(%RAD_REQUEST %RAD_REPLY %RAD_CHECK); use Data::Dumper; use constantRLM_MODULE_REJECT=0;# /* immediately reject the

Re: problem with perl...

2011-08-25 Thread Alan Buxey
Hi, # PERL MODULES WE WILL BE USING use lib /usr/lib64/perl5/auto/DBI/; use DBI; use DBD::mysql; use vars qw(%RAD_REQUEST %RAD_REPLY %RAD_CHECK); use Data::Dumper; note: /usr/lib64/perl5/auto/DBI/ Im trying to run freeradius, using rlm_perl, and centos 6.

Authentication probation for VLAN

2011-08-25 Thread joao...@gmail.com
Hello, I am using freeradius to authenticate to multiple databases, some in other LDAP in SQL. I am doing authentication and wireless networks, where I have multiple SSIDs for wireless networks, and each one logs in a database. All these databases are in the same Radius server, which

Re: problem with perl...

2011-08-25 Thread Tyller D
I just added use lib /usr/lib64/perl5/auto/DBI/; to my perl script because it failed. On Thu, Aug 25, 2011 at 3:07 PM, Alan Buxey a.l.m.bu...@lboro.ac.uk wrote: Hi, # PERL MODULES WE WILL BE USING use lib /usr/lib64/perl5/auto/DBI/; use DBI; use DBD::mysql; use vars

sql and xlat in authorize section

2011-08-25 Thread Sébastien Barbereau
Hi, I am trying to do mac authorization as per http://wiki.freeradius.org/Mac-Auth#Mac-Auth+authorisation+by+SSID+SQL In fact my attempt is much simpler as I just have a very simple table containing the mac address of system to accept. My conf looks like that: authorize { ... # newer

Re: sql and xlat in authorize section

2011-08-25 Thread Arran Cudbard-Bell
Means you haven't instantiated your SQL module with the correct instance name. Check that the config block for your SQL is : sql sql_local { } -Arran On 25 Aug 2011, at 16:57, Sébastien Barbereau wrote: Hi, I am trying to do mac authorization as per

Re: Authentication probation for VLAN

2011-08-25 Thread Arran Cudbard-Bell
Also said that if I try to use the Tunnel-Private-Group-Id without the :0 at the end, appears in the logs that the attribute was not found, I mention this because in several instances I saw on the internet was used only Tunnel-Private -Group-Id (with :0 at the end) Weird, trying

Freeradius proxy - Fortigate - Cisco ACS

2011-08-25 Thread Ole Bobakke
Hi. We have this setup today. Fortigate FW - running SSL vpn portal, users are authenticated towards a Cisco ACS radius server. We only use one vdom ( virtual firewall) but we have a plan to create a portal to every co companies. So I created two new vdom on the fortigate called, : ompa and

Re: Authentication probation for VLAN

2011-08-25 Thread Alexander Clouter
joao...@gmail.com joao...@gmail.com wrote: This model is funcionaç, however have a problem (very serious), Radius does not know from which SSID the client is trying to authenticate, or whether it decides the basis solely of the Realm authentication of the client. I need to make the Radius

Re: Authentication probation for VLAN

2011-08-25 Thread Arran Cudbard-Bell
On 25 Aug 2011, at 21:43, Alexander Clouter wrote: joao...@gmail.com joao...@gmail.com wrote: This model is funcionaç, however have a problem (very serious), Radius does not know from which SSID the client is trying to authenticate, or whether it decides the basis solely of the Realm

Re: Authentication probation for VLAN

2011-08-25 Thread joao...@gmail.com
OK friends, I appreciate the help, I managed to solve. Dear Alexander Clouter really the type of data is an integer, but that I had already tested. But I appreciate the hint and attention. The problem is that I'm using EAP (PEAP and TTLS) server and default routes via internal proxy (or

Radius user Packet Fence 2.1.0

2011-08-25 Thread Marlon Bastida
Hi, I have 3 radius users working fine on freeradius. I will give one sample: On /etc/raddb/users test Cleartext-Password:=teste - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Packet Fence web interface and freeradius users

2011-08-25 Thread Marlon Bastida
Hi, I have 3 radius users working on freeradius. I will give one sample: On /etc/raddb/users testCleartext-Password:=test Service-Type = Framed-User, Tunnel-Type = VLAN, Tunnel-Medium-Type = IEEE-802, Tunnel-Private-Group-ID = 2 When I enter with this user

RE: Packet Fence web interface and freeradius users

2011-08-25 Thread Sallee, Stephen (Jake)
I just finished a deployment that did exactly that! This may be a subject more suited for their mailing list (which I am on as well). Message me on that list and I bet we can get you working. I only say this because from what you say FreeRADIUS is sending the correct radius attributes back,