Re: Freeradius with Caller-station-id

2012-02-16 Thread Richard J Palmer
There are two reasons for my approach: 1) The radius server is also serving other requests that DO have a username password it is only certain logins I need to process differently - those where the caller ID matches a pattern. 2) On those that do match I do want per session settings - ie to

Re: Freeradius with Caller-station-id

2012-02-16 Thread Alan Buxey
Hi, There are two reasons for my approach: 1) The radius server is also serving other requests that DO have a username password it is only certain logins I need to process differently - those where the caller ID matches a pattern. 2) On those that do match I do want per session settings

Re: Freeradius with Caller-station-id

2012-02-16 Thread Alan DeKok
Richard J Palmer wrote: There are two reasons for my approach: 1) The radius server is also serving other requests that DO have a username password it is only certain logins I need to process differently - those where the caller ID matches a pattern. So... write code to match that

Re: Freeradius with Caller-station-id

2012-02-16 Thread Richard J Palmer
On 16/02/2012 9:00 AM, Alan DeKok wrote: Write down what you want to do. Use English. Refer to packets, attributes, and values of those attributes. Refer to contents of databases. Use the contents of the attributes to look up information in a database. That should be 4-5 paragraphs

Password-Retry attribute

2012-02-16 Thread Morris, Andi
Hi all, I'm trying to configure my freeradius server to prompt the user to retype their credentials if they mistype the username or password so that they can be authenticated via dot1x. I've checked my virtual server post-auth and found: post-auth { exec packetfence

Re: Password-Retry attribute

2012-02-16 Thread Phil Mayers
On 02/16/2012 09:35 AM, Morris, Andi wrote: Hi all, I’m trying to configure my freeradius server to prompt the user to retype their credentials if they mistype the username or password so that they can be authenticated via dot1x. Does your NAS support this attribute? You are sending it just

RE: Password-Retry attribute

2012-02-16 Thread Morris, Andi
Thanks Phil that's helpful. I want my users to be prompted to re-enter the password if they enter it wrong up to a certain number of times, so it may well be I need to look at my Cisco switch, or maybe the Packetfence Network Access Controller to provide this ability. Cheers, Andi

Re: Possibility to create a counter for traffic volume WITHOUT sql ?

2012-02-16 Thread Alan DeKok
Nachtfalke wrote: Then I thought I could just simple make a traffic counter with this module and I did that: NASes doesn't do traffic counters. The only way to enforce traffic counters is the *next* time that the user logs in. So once the user is logged in, they can download as much as

Authenticate users only depending on the result of a perl script

2012-02-16 Thread Lorenzo J. Cubero
Dear Freeradius experts, I would like to redirect all the incoming requests to a rlm_perl script. And then authenticate the user only depending on the result of the script. I already have the script, my doubt is how to configure Freeradius to treat the incoming requests only over a perl

Re: Acct-Interim-Interval session time not working

2012-02-16 Thread dulan
use like follows *Acct-Interim-Interval := 60* if you use Database you should insert this data to *radraply *table On Thu, Feb 16, 2012 at 12:59 PM, oportino [via FreeRadius] ml-node+s1045715n5488744...@n5.nabble.com wrote: Hello all, I am using freeradius 2.1.0 on Ubuntu 10.10 and

Re: Authenticate users only depending on the result of a perl script

2012-02-16 Thread Alan DeKok
Lorenzo J. Cubero wrote: I would like to redirect all the incoming requests to a rlm_perl script. And then authenticate the user only depending on the result of the script. I already have the script, my doubt is how to configure Freeradius to treat the incoming requests only over a perl

Re: Radius Self Service

2012-02-16 Thread Fajar A. Nugraha
On Thu, Feb 16, 2012 at 5:21 PM, Peter Moreton peter.more...@cbi.org.uk wrote: I have a working RADIUS server, RADIUS01 running Centos/Freeradius. Freeradius is configured to store username and PIN-style passwords in MySQL. To go live with our RADIUS implementation, I have been tasked with

Freeradius and DWL-3500AP's

2012-02-16 Thread John Corps
Hey All, Has anyone has any experience using freeradius with the dlink dws-3026 switch and dwl-3500aps? I can't see a way to configure anything on them...no matter what i do the request shows up as the following. rad_recv: Access-Request packet from host 192.170.140.6 port 1032, id=0,

Re: EAP-SIM on freeradius-server-2.1.12

2012-02-16 Thread Thor Spruyt
Hi GNUbie, You don't need the special patch for testing EAP-SIM. Just get 3 different triplets for your SIM and create a static users file entry with them, contrary to what -X says, you should put the triplets attrs as reply attrs, not check attrs. Regards, Thor. - Original Message -

Re: Radius Self Service

2012-02-16 Thread Matthew Newton
Hi, On Thu, Feb 16, 2012 at 10:21:37AM +, Peter Moreton wrote: I have a working RADIUS server, RADIUS01 running Centos/Freeradius. Freeradius is configured to store username and PIN-style passwords in MySQL. To go live with our RADIUS implementation, I have been tasked with making the

Re: Freeradius-Users Digest, Vol 82, Issue 50

2012-02-16 Thread Peter Moreton
But why not simply create a simple web page, possibly even as a captive portal? It's much easier that way, plus it's real-time and you have no risk of email missing (e.g. due to spam filters, etc). if I build a webpage, then I also have to authenticate users who present themselves requesting

Re: Radius Self Service

2012-02-16 Thread Matthew Newton
Hi, On Fri, Feb 17, 2012 at 12:54:20AM +, Peter Moreton wrote: But why not simply create a simple web page, possibly even as a captive portal? It's much easier that way, plus it's real-time and you have no risk of email missing (e.g. due to spam filters, etc). if I build a webpage,

Re: Acct-Interim-Interval session time not working

2012-02-16 Thread dulan
please check chillispot configurations.i think you can configure interim updates from it. -- View this message in context: http://freeradius.1045715.n5.nabble.com/Acct-Interim-Interval-session-time-not-working-tp5488744p5491403.html Sent from the FreeRadius - User mailing list archive at

Re: EAP-SIM on freeradius-server-2.1.12

2012-02-16 Thread Iliya Peregoudov
rlm_sim_files: insufficient number of challenges for imsi 3a370f920c4275...@wlan.mnc005.mcc525.3gppnetwork.org: 0 ++[sim_files] returns notfound You have triplets for 3be855ae7a8607c7f identity in the simtriplets.dat. But there 3a370f920c4275853 identity in RADIUS request. So sim_files

Re: Freeradius and DWL-3500AP's

2012-02-16 Thread Iliya Peregoudov
Maybe it is so called lightweight AP. Product description from D-Link site says that it should be used together with DWS-3024/DWS-3026 wireless control switches. Call vendor for more info. John Corps wrote: Hey All, Has anyone has any experience using freeradius with the dlink dws-3026

Re: Freeradius and DWL-3500AP's

2012-02-16 Thread Alan Buxey
What settings have you applied to the kit? Looks like some MAC-auth or captive portal method on the SSID you are using. You need to uncover the bits that talk about 802.1X and/or WPS/wpa2 enterprise alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html