Re: RHEL Patches Broke FreeRADIUS

2012-03-03 Thread Alan DeKok
McNutt, Justin M. wrote: I'd like to tackle this from the FreeRADIUS side rather than by reconfiguring rpm because I can think of other reasons why some idio^H^H^H^H well-meaning admin might stick a test file in there without realizing that it causes problems. Switching to a site-specific

Re: status_check vs src_ipaddr

2012-03-03 Thread Alan DeKok
Brian Julin wrote: It appears that a home server entry configured with src_ipaddr will use that source ip address for auth requests, but when directed to do status_check, it sends status request packets using some interface address from some other config item somewhere (not sure from which one

Re: Pass cleartext-password to exec module with EAP

2012-03-03 Thread Alan DeKok
Quentin Meulepas wrote: I need to use an external script to check both username and password. That works only if the authentication method has a clear-text password. We don't have the cleartext version of these passwords, which are encrypted in a Postresql database... How? It can

Re: FreeRadius-supported Billing System?

2012-03-03 Thread Alan DeKok
Nick wrote: Hi all. I'm developing a VPN service (with FreeRadius and MySQL as backend) and wanted to know if there's any customer/billing management solutions that support FreeRadius before I go and write my own. I haven't really been able to find anything other than maybe Platypus and a

Re: Zombie Clarification

2012-03-03 Thread Alan DeKok
Norman Elton wrote: So here's the question... If the FR server receives no requests, then nothing gets forwarded to the home server. Does this scenario fall under does not respond to a request within the response_window? Your question answers itself. Did the home server fail to respond to

Re: Test Environment: Can PEAPv0 and PEAPv1 be setup together on the default instance?

2012-03-03 Thread Alan DeKok
whopeman wrote: I am fairly new to FreeRADIUS, so pelase bear with me a bit. I have searched the forums and websites to find an implementation that allows me to configure my server to process BOTH PEAP MSCHAP and PEAP/EAP-GTC (v0 and v1). I have not found anyone trying to do this, but I

Re: LDAP (POSIX attibutes) password expiry

2012-03-03 Thread Alan DeKok
u...@3.am wrote: I didn't ignore any response. I have no reason to worry about whether Expiration will work in users because A) I'm not using users, I'm using LDAP and B) expiry worked fine using rlm_pam and /etc/shadow. Once again, you completely misunderstand my point. This is rude.

FreeRADIUS 2.1.12 as DHCPd with both static and dynamic IP-MAC via SQL

2012-03-03 Thread newuse
Hi all, Again questions about FR as DHCP server with SQ: Is it possible to setup FR asnbsp; DHCPd on FreeBSD to a given interface or it's IP? Could I use rlm_sqlpool to store MAC-IP associations? I am trying to use an old dial-upnbsp; module (FreeNIBS) for my WiFi network, all seems to be

Re: RHEL Patches Broke FreeRADIUS

2012-03-03 Thread Fajar A. Nugraha
On Fri, Mar 2, 2012 at 7:49 PM, McNutt, Justin M. mcnu...@missouri.edu wrote: So my server admins did what they're supposed to do and ran yum update on everything last weekend.  The updates included a refresh of the freeradius2 packages that took FR from 2.1.7 to 2.1.12. That's all fine and

Re: FreeRADIUS 2.1.12 as DHCPd with both static and dynamic IP-MAC via SQL

2012-03-03 Thread Fajar A. Nugraha
On Sat, Mar 3, 2012 at 5:16 PM, new...@qip.ru wrote: Hi all, Again questions about FR as DHCP server with SQ: Is it possible to setup FR asnbsp; DHCPd on FreeBSD to a given interface or it's IP? Your mail client is weird. It's inserting nbsp; at seemingly random places. And your question

Re: Pass cleartext-password to exec module with EAP

2012-03-03 Thread Fajar A. Nugraha
On Sat, Mar 3, 2012 at 11:22 AM, Quentin Meulepas m...@kwint.in wrote: I need to use an external script to check both username and password. We don't have the cleartext version of these passwords, which are encrypted in a Postresql database... Although I'm running into troubles with the

RFC2661

2012-03-03 Thread Joe Holden
Hi guys, Forgive me if I've missed something blatantly obvious here, but is there a TX/RX speed RADIUS attribute to match the L2TP AVP? Can't find anything that suggests there is - if not, is it best to implement my own vendor attribute or reuse an existing standard attribute? Thanks, J -

Re: RHEL Patches Broke FreeRADIUS

2012-03-03 Thread McNutt, Justin M.
... *facepalm* Yeah, that'd do it. Much easier than what I was doing. Thanks, Alan. :) --J From: Alan DeKok al...@deployingradius.commailto:al...@deployingradius.com Reply-To: FreeRadius users mailing list freeradius-users@lists.freeradius.orgmailto:freeradius-users@lists.freeradius.org

Re: RHEL Patches Broke FreeRADIUS

2012-03-03 Thread Matthew Newton
On Fri, Mar 02, 2012 at 12:49:33PM +, McNutt, Justin M. wrote: This created a nasty problem. Now I have an /etc/raddb/modules/ldap and an /etc/raddb/modules/ldap.rpmnew, both of which define how ldap { } is supposed to work. Same thing happened to the mschap module. ... Ideas? I put my

Re: RFC2661

2012-03-03 Thread Alan DeKok
Joe Holden wrote: Forgive me if I've missed something blatantly obvious here, but is there a TX/RX speed RADIUS attribute to match the L2TP AVP? If you can't find it, it doesn't exist. Can't find anything that suggests there is - if not, is it best to implement my own vendor attribute or