Re: Member of Group Check Else REJECT

2012-02-01 Thread Alan Buxey
Your unlang is wrong. If both checks are true then you will reject...anything else, ie not a member of that group or from that NAS will continue alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: Antonio Modesto wrote: I am trying to test sqlippool on freeradius, but i've found that the documentation explains very well how to implement it, but it doesn't explain very well how I can set a user or a group to use this pool.

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 09:19 -0200, Antonio Modesto wrote: On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: Antonio Modesto wrote: I am trying to test sqlippool on freeradius, but i've found that the documentation explains very well how to implement it, but it doesn't

Re: Newbie and Sqlippool

2012-02-01 Thread Alan DeKok
Antonio Modesto wrote: That's wrong. Use Cleartext-Password := instead of User-Password == The problem is that my production server is running Freeradius 1.8, and it uses the Attribute User-Password No. The change to Cleartext-Password was done in 1.1.4. The 1.1.8 version was

Re: Newbie and Sqlippool

2012-02-01 Thread Fajar A. Nugraha
2012/2/1 Antonio Modesto mode...@isimples.com.br: On Wed, 2012-02-01 at 09:19 -0200, Antonio Modesto wrote: On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: Antonio Modesto wrote: I am trying to test sqlippool on freeradius, but i've found that the documentation explains very well

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 13:31 +0100, Alan DeKok wrote: Antonio Modesto wrote: That's wrong. Use Cleartext-Password := instead of User-Password == The problem is that my production server is running Freeradius 1.8, and it uses the Attribute User-Password No. The change to

Re: Newbie and Sqlippool

2012-02-01 Thread Alan DeKok
Antonio Modesto wrote: Sorry for the ignorance, but where must I put this section? Can I just put it anywhere in radiusd.conf or it must be inside another section? You don't. I had assumed you were running version 2. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 19:53 +0700, Fajar A. Nugraha wrote: 2012/2/1 Antonio Modesto mode...@isimples.com.br: On Wed, 2012-02-01 at 09:19 -0200, Antonio Modesto wrote: On Tue, 2012-01-31 at 21:00 +0100, Alan DeKok wrote: Antonio Modesto wrote: I am trying to test sqlippool on

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 14:24 +0100, Alan DeKok wrote: Antonio Modesto wrote: Sorry for the ignorance, but where must I put this section? Can I just put it anywhere in radiusd.conf or it must be inside another section? You don't. I had assumed you were running version 2. Not in my

Re: Newbie and Sqlippool

2012-02-01 Thread Fajar A. Nugraha
2012/2/1 Antonio Modesto mode...@isimples.com.br: But I don't want to use per-user pools, if it is possible, the better solution for me would be setting the pool based on some information of the NAS, because my routing topology doesn't permit a single pool for all cities that we attend. It

Re: Newbie and Sqlippool

2012-02-01 Thread Antonio Modesto
On Wed, 2012-02-01 at 20:59 +0700, Fajar A. Nugraha wrote: 2012/2/1 Antonio Modesto mode...@isimples.com.br: But I don't want to use per-user pools, if it is possible, the better solution for me would be setting the pool based on some information of the NAS, because my routing topology

Re: Newbie and Sqlippool

2012-02-01 Thread Alan DeKok
Antonio Modesto wrote: My production radius server is running freeradius 1.1.8, I installed freeradius 2 in another server with another SQL database and copied the configuration files from the production server to the test server and changed some stuff to get it running, then I am doing these

Doubt about Dropping Conflicting Error.

2012-02-01 Thread Rodrigo Yoshioka
Hi folks, Does anyone have explanations about this error?? I couldn´t find something understandable about it on the internet.  Error: Dropping conflicting packet from client PPPoE_FTTH:41882 - ID: 66 due to unfinished request 457370 My radius server gives me this error frequently. Thanks -

Re: Blackberry disabled server certificates query

2012-02-01 Thread Alan Buxey
hi, just to revisit this recent thread. Was at a site who were implementing 802.1X authentication and they noted the Blackberry issue - some devices okay, others not... the FreeRADIUS server was configured to have the WHOLE CA chain of certs (root, intermediate,server signer and server cert) in

Multi-domain AD and Users Who Aren't So Bright

2012-02-01 Thread McNutt, Justin M.
So I'm working on a way to Improve the User Experience. I've gotten a LONG way, but now I'm stuck. Here's the short/long version (all details, without undue explanation or discussion of what I tried that doesn't work): WARNING: This may well be a case of doing it the hard way. If that's the

Re: Multi-domain AD [Kudos]

2012-02-01 Thread McNutt, Justin M.
Btw, kudos to Alan DeKok and the rest of the FR developers for these FR abilities. The things listed here were INVALUABLE to figuring all of this out without just guessing: 1) radiusd -XC You just can't live without this. Seriously. 2) radiusd -XIt's there for a reason. Specifically,

Re[2]: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Коньков Евгений
Здравствуйте, Jilles. Вы писали 28 января 2012 г., 20:24:07: [stuck process cannot be killed, system hangs when reboot is attempted] JT A signal cannot forcibly kill a process that is stuck in the kernel. JT Allowing this would put the integrity of the kernel data structures at JT risk and

Re: Re[2]: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Alan Buxey
kill -9 doesn't want to play either? Read the docs/debugging file. Compile FR with debugging/developer stuff and run it under gdbm control and do your killing of firebird again. It's likely to be the PERL integration as thats what will get done in when firebird is restarted. Are you perl with

Re: Newbie and Sqlippool

2012-02-01 Thread Fajar A. Nugraha
2012/2/2 Antonio Modesto mode...@isimples.com.br: My production radius server is running freeradius 1.1.8, I installed freeradius 2 in another server with another SQL database and copied the configuration files from the production server to the test server and changed some stuff to get it

Design question

2012-02-01 Thread Dan Letkeman
Hello, I'm new to using radius servers and I have a few questions on best practices and design. We primarily use windows 7 on the machines that will authenticate, and they are all connected to cisco switches and access points. If I understand things correctly I have the option of authenticating

Re: bin/164526: kill(1) can not kill process despite on -KILL

2012-02-01 Thread Alan DeKok
Коньков Евгений wrote: repeated again: bug is repeateable: 1. radiusd + mod_perl + example.pl(it is connects to FireBird) + Why? FreeRADIUS has native support for all major SQL servers. There's no need to use a Perl plugin. FireBIrd 2. restart firebird 3. try to restart radiusd 4.

Re: Design question

2012-02-01 Thread Alan DeKok
Dan Letkeman wrote: From what I understand I need to create myself a certificate and install that certificate into the freeradius server and into each of my client computers. Yes. Then I need to configure my switches to connect use the freeradius server to allow the traffic through when