Re: Expiration Module Not Returning the Error Message

2011-09-06 Thread Det Det
hey thanks! it's working now. it was because the op in radcheck is == which is the default from the schema. I changed it to := and it is working now. :) From: Fajar A. Nugraha l...@fajar.net To: FreeRadius users mailing list

Segmentation Fault (core dumped)

2011-09-06 Thread Rajkumar balaji
Hi All, When I try to start radius using ./radiusd -X the following error I am getting Please help me to resolve this The machine is Sun solaris 10 Sparc FreeRadius verion 1.1.7 is the latest from sunfreeware site output # ./radiusd -X Starting - reading configuration files ...

Re: Segmentation Fault (core dumped)

2011-09-06 Thread Fajar A. Nugraha
On Tue, Sep 6, 2011 at 3:02 PM, Rajkumar balaji rajkumar.balaj...@gmail.com wrote: Hi All, When I try to start radius using ./radiusd -X the following error I am getting Please help me to resolve this The machine is Sun solaris 10 Sparc FreeRadius verion 1.1.7 is the latest from sunfreeware

Re: Segmentation Fault (core dumped)

2011-09-06 Thread Alan DeKok
Rajkumar balaji wrote: When I try to start radius using ./radiusd -X the following error I am getting Please help me to resolve this The machine is Sun solaris 10 Sparc FreeRadius verion 1.1.7 is the latest from sunfreeware site Ask the sunfreeware people why they broke FreeRADIUS.

RADIUS Sending Duplicate Reply

2011-09-06 Thread Det Det
Hi, This question maybe a bit off from RADIUS, but is there a way to limit NAS or RADIUS to send only one access-request/access-accept in a single dial attempt? i am connecting via PPPoE. I can see from RADIUS logs receiving multiple access-request thus it is also giving multiple

Re: RADIUS Sending Duplicate Reply

2011-09-06 Thread Arran Cudbard-Bell
This question maybe a bit off from RADIUS, but is there a way to limit NAS or RADIUS to send only one access-request/access-accept in a single dial attempt? i am connecting via PPPoE. I can see from RADIUS logs receiving multiple access-request thus it is also giving multiple access-accept.

Re: RADIUS Sending Duplicate Reply

2011-09-06 Thread Alan DeKok
Det Det wrote: This question maybe a bit off from RADIUS, but is there a way to limit NAS or RADIUS to send only one access-request/access-accept in a single dial attempt? Your question is wrong. i am connecting via PPPoE. I can see from RADIUS logs receiving multiple access-request thus

Re: RADIUS Sending Duplicate Reply

2011-09-06 Thread Fajar A. Nugraha
On Tue, Sep 6, 2011 at 3:26 PM, Det Det det.explo...@yahoo.com wrote: Hi, This question maybe a bit off from RADIUS, but is there a way to limit NAS or RADIUS to send only one access-request/access-accept in a single dial attempt? You're looking at things the wrong way. It's like you're on a

Re: RADIUS Sending Duplicate Reply

2011-09-06 Thread Det Det
yeah it is confirmed network issue. had to reboot the NAS. thanks guys! From: Fajar A. Nugraha l...@fajar.net To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Tuesday, September 6, 2011 4:51 PM Subject: Re: RADIUS Sending Duplicate

Re: RADIUS Sending Duplicate Reply

2011-09-06 Thread Arran Cudbard-Bell
You're looking at things the wrong way. It's like you're on a beach, and there's a big sign saying no swimming because the beach is infested with jellyfish, but you decide to swim anyway. And then when the jellyfish stings you asked how to make it so it doesn't hurt. I like the analogy

Freeradius security limitation

2011-09-06 Thread Jevos, Peter
Hi all The point is that at one time ntlm_auth stop to work on the primary server. When I test it from the command line it says No logon server I noticed in the logs that there were 10 attempts per minute with wrong password from one of our routers. When I applied ACL on the router to block

Re: Freeradius security limitation

2011-09-06 Thread Arran Cudbard-Bell
So the question is if there are some restrictions in freeradius when it will stop to communicate with AD in some special cases ? No. This is not a FreeRADIUS issue, this is a Samba issue. NTLM Auth is not part of FreeRADIUS, FreeRADIUS merely calls the ntlm_auth executable to proxy MSCHAPv2

Authentication fails

2011-09-06 Thread Rajkumar balaji
Hi All, During the authentication i got the following logs, Please help me to resolve - thanks log info --- rad_recv: Access-Request packet from host 172.17.148.152 port 40814, id=0, length=63 User-Name = emsadmin User-Password = admin NAS-Identifier = sunems8-zone2

Re: PEAP Authentication Problems with Windows Users

2011-09-06 Thread Jacob Dawson
Anyone have any thoughts on where I need to poke at this thing? I'm about at the limits of my ability to figure out what's going wrong. - Jacob On 29 Aug 2011, at 17:28, Jacob Dawson wrote: We're having an odd problem here, and I just can't pin down quite where to look to fix it. We use

CoA proxying again

2011-09-06 Thread Bjørn Mork
Hello, I am trying to setup CoA proxying to a number of Juniper MXes. These are a bit clumsy to configure as CoA servers: The CoA clients cannot be configured explicitly. Instead they reuse the auth/acct configuration, including secret, for CoA clients. So I have a few hundred CoA servers

Re: CoA proxying again

2011-09-06 Thread Alan DeKok
Bjørn Mork wrote: I am trying to setup CoA proxying to a number of Juniper MXes. These are a bit clumsy to configure as CoA servers: The CoA clients cannot be configured explicitly. Instead they reuse the auth/acct configuration, including secret, for CoA clients. Hmmm... no. Clients

Re: CoA proxying again

2011-09-06 Thread Bjørn Mork
Alan DeKok al...@deployingradius.com writes: Bjørn Mork wrote: My problem is that the configuration seems a bit clumsy, given that I cannot really change neither IP address nor secret from what's already there in the FreeRADIUS client definition. It would have been ideal to just add a flag

accounting based on message type

2011-09-06 Thread Travis Dimmig
I use the jradius module for processing radius accounting packets, is there a way in freeRadius 1.X to specify that I only want to pass accounting start and stop packets to jradius? In 2.X it seems I can check out the packet's Acct-Status-Type in acct_users and set the Acct-Type attribute

Re: CoA proxying again

2011-09-06 Thread Johan Meiring
On 2011/09/06 06:50 PM, Alan DeKok wrote: I believe I saw a request for dynamic home servers recently. Looks like that might be something for me as well. Maybe. Or, having less work to say this client can also receive CoA requests. This would essentially automatically add a coa home

Simultaneous Use Per Domain

2011-09-06 Thread Det Det
Hi, Just want to get inputs on how simultaneous-use can be checked per domain not per user. That is limit mydomain.com to have simultaneous-use=x. radgroupcheck will have something like mydomain.com -- simultaneous-use -- x thanks! det - List info/subscribe/unsubscribe? See