Re: rlm_sql / AcctstartTime AcctStartDelay

2004-06-18 Thread Paul Hampson
On Sat, Jun 19, 2004 at 01:29:55AM +0200, Michael Markstaller wrote: Just an idea while messing around with duplicate accountings in mysql: Wouldn't it be more logical to change the insert/update-commands in sql.conf to log the real startstop-time of the session with regarding

Re: How to auth_log via sql ?

2004-06-20 Thread Paul Hampson
On Sun, Jun 20, 2004 at 02:42:52PM +0200, Stephan von Krawczynski wrote: this is possibly a very simple question, but browsing through the list and FAQs I could not find any hints. How can you write the information auth_log produces in a logfile to sql instead _without_ doing authentication

Re: How to auth_log via sql ?

2004-06-20 Thread Paul Hampson
On Sun, Jun 20, 2004 at 03:54:28PM +0200, Stephan von Krawczynski wrote: On Sun, 20 Jun 2004 23:25:01 +1000 [EMAIL PROTECTED] (Paul Hampson) wrote: On Sun, Jun 20, 2004 at 02:42:52PM +0200, Stephan von Krawczynski wrote: this is possibly a very simple question, but browsing through

Re: executing external program after accounting_stop_query

2004-06-21 Thread Paul Hampson
On Mon, Jun 21, 2004 at 03:15:29PM +0500, George Chelidze wrote: Hello, I need to add one column to radacct table and set it according to values inserted into table on stop packet receipt. The external program is coded in C. What if I place acct_users after sql in accounting section?

RE: Replies on port 1029

2004-06-24 Thread Paul Hampson
From: Gary McKinney Sent: Friday, 25 June 2004 3:13 AM Brian, That is the correct way for operation! Radius Listens on Ports 1812 and 1813 ( for authentication and accounting respectively) BUT responds back to the NAS on the first non-priviledged port the system has available for

RE: Replies on port 1029

2004-06-25 Thread Paul Hampson
From: Brian Andrus Sent: Friday, 25 June 2004 4:01 PM Well it is very odd to me. The proxy requests to me from another freeradius are failing because the response is being sent back on a different port than they were sent on. What does the packet dumper say, at your end of the link? --

Re: how to run radiusd with high debug info but in background

2004-06-25 Thread Paul Hampson
On Fri, Jun 25, 2004 at 05:13:39PM -0700, Ernesto Freyre wrote: Hi admins! Please I would want to know how to run radiusd with high debug info but in background? Instead of -X, use the individual switches... -X is simply a convinient shortcut for -sfxxyz -l stdout so take the -f out, and it'll

Re: accounting_update_query_alt ?

2004-07-01 Thread Paul Hampson
On Thu, Jul 01, 2004 at 09:01:02AM +0400, Alexander Serkin wrote: Hello. I wonder if there're any plans to add the accounting_update_query_alt to the sql configuration with INSERT? If not, i'll try myself. It is possible that the accounting update packet comes and AAA server did not see

Re: ERROR freeradius compilation

2004-07-02 Thread Paul Hampson
On Fri, Jul 02, 2004 at 04:45:53PM +0800, apellido jr., wilfredo p. wrote: Freebsd 4.10 Freeradius latest development CVS July 07, 2004 gmake[1]: Entering directory `/usr/local/radiusd/libltdl' /bin/sh ./libtool --mode=compile gcc -DHAVE_CONFIG_H -I. -I. -I. -g -O2 -pthread

Re: How does accounting-on/off work with RADIUS proxy?

2004-07-08 Thread Paul Hampson
Zhiqiang Hu writes: In the following diagram, if one NAS, for example NAS-2, crashes and comes back, it will send system account-on message for RADIUS server to clean up previous sessions. But if a RADIUS proxy server is used in the middle, how can the true RADIUS server distingush the previous

Re: I have to make choice between GNUradius and freeradius. My requirements are generally those of ISP. Which one will you recommend to me???

2004-07-12 Thread Paul Hampson
On Mon, Jul 12, 2004 at 04:59:46PM -0700, Amit Gupta wrote: I have to make choice between GNUradius and freeradius. My requirements are generally those of ISP. Which one will you recommend to me??? I recommend FreeRADIUS. Otherwise I'd be a GNUradius developer. :-) -- Paul TBBle Hampson, on

Re: I have to make choice between GNUradius and freeradius. My requirements are generally those of ISP. Which one will you recommend to me???

2004-07-13 Thread Paul Hampson
On Tue, Jul 13, 2004 at 12:44:04PM -0700, Amit Gupta wrote: May I know reasons for preferring freeradius. Our current system is based on freeradius but we are planning to reengineer this to accommodate better features. I find it easy to use, good about following standards, with a wide base of

Re: Juniper E-Series...which atributes to use?

2004-07-19 Thread Paul Hampson
On Mon, Jul 19, 2004 at 08:05:28PM -0500, Robert Banniza wrote: I'm trying to set the Cli-Initial-Access-Level on a Juniper E-Series. However, the Juniper is not understanding: radiusReplyItem: ERX-Cli-Initial-Access-Level := 5 With that said, I have looked at

Re: Juniper E-Series...which atributes to use?

2004-07-20 Thread Paul Hampson
On Tue, Jul 20, 2004 at 06:35:32AM -0500, Robert Banniza wrote: This we have done. They mentioned that Unisphere-Init-CLI-Access-Level should work as well as ERX-Cli-Initial-Access-Level or Juniper-Initial-CLI-Access-Level. What I don't understand is how the Juniper is able to parse the three

Re: Can't make it work

2004-07-20 Thread Paul Hampson
On Tue, Jul 20, 2004 at 01:17:10PM +0200, [EMAIL PROTECTED] wrote: Hi, I'm a newbie on freeradius but not on Radius.. I've put my hands on freeradius 'cause it seems so nice and I need to replace my ancien free radius from ascend (yea, still running MAX4000). I've been trying

Re: Juniper E-Series...which atributes to use?

2004-07-20 Thread Paul Hampson
On Tue, Jul 20, 2004 at 08:35:59AM -0500, Robert Banniza wrote: On Tue, Jul 20, 2004 at 11:00:18PM +1000, Paul Hampson wrote: On Tue, Jul 20, 2004 at 06:35:32AM -0500, Robert Banniza wrote: This we have done. They mentioned that Unisphere-Init-CLI-Access-Level should work as well as ERX

Re: Is there a ChangeLog

2004-07-21 Thread Paul Hampson
On Wed, Jul 21, 2004 at 02:27:46PM -0500, Anson Rinesmith wrote: If you've got some code working for postgre, I'm sure I could port that to work for mysql. I'm willing to do the work, I just don't know where to get the differentiating information from freeradius so I know what ISP that user

Re: crosscompile freeradius-1.0.0-pre3

2004-07-22 Thread Paul Hampson
On Thu, Jul 22, 2004 at 05:32:12PM +0800, pengjie wrote: hi,guys, i want to crosscompile freeradius. my host is RH9.0, my target is xscale with montavista linux. i had crosscompiled freeradius-0.5 successfully previous. now i want to upgrade to freeradius-1.0.0-pre3. but i meet some

Re: crosscompile freeradius-1.0.0-pre3

2004-07-22 Thread Paul Hampson
On Fri, Jul 23, 2004 at 11:05:22AM +0800, pengjie wrote: thanks your help! does the nightly snapshot have the same functions as 1.0-pre3? More, ideally It has the chance of being less stable, though I doubt it is just now since we've not diverged _too_ much 1.0.0 and HEAD. -- Paul TBBle

Re: bandwidth limit/mysql/pppoe -- urgent

2004-07-22 Thread Paul Hampson
On Fri, Jul 23, 2004 at 09:33:16AM +0530, Joel n.solanki wrote: Dear all , What i m running and doing... Redhat 9.0 pppoe server with freeradius authentication and mysql database. I am constantly working on this issue to sort out. Now i have came again some questions. hope some

Re: strange behavior of rlm_ippool

2004-07-24 Thread Paul Hampson
On Sat, Jul 24, 2004 at 09:49:32AM +0200, Daniel Eyholzer wrote: Daniel Eyholzer [EMAIL PROTECTED] wrote: I am using freeradius 1.0.0-pre3 with rlm_ippool managing the ip addresses for a cisco NAS. I have several address pools with 254 IPs each. When I started the radius 2 days ago, the

Re: Exec-Program-Wait attributes not included in Access-Accept

2004-07-26 Thread Paul Hampson
On Mon, Jul 26, 2004 at 03:58:37PM +0200, Thor Spruyt wrote: I have freeradius 0.9.3 running with Postgresql database backend. The only thing the radius checks is the password and then executes an external script if authentication is ok. The section in the users file is: DEFAULT

Re: Group ip pools

2004-08-01 Thread Paul Hampson
On Sun, Aug 01, 2004 at 02:17:41PM +1200, Barry Murphy wrote: Going forward I have looked at the scripts and it shows that TTY is being used and clients are getting a Nas-Port begining with 0, then 1 for the second user as shown below. Sun Aug 1 12:00:49 2004 Acct-Session-Id =

Re: Submitting patches

2004-08-08 Thread Paul Hampson
On Sat, Aug 07, 2004 at 05:16:39PM +0200, Thor Spruyt wrote: I was wondering... what's the best to do to get a change in 1.0.0 ? - patch against 0.9.3 - patch against 1.0.0-pre3 - patch against nightly build patch against the current status of CVS branch release_1_0. Instructions should be on

Re: snapshot-20040807 - fedora core 1 - make fails

2004-08-08 Thread Paul Hampson
On Sat, Aug 07, 2004 at 08:57:10PM +0200, Thor Spruyt wrote: Hi, After getting configure to work (by installing gcc-c++), now make fails (see below). Looking into the libltdl directory, I don't see a Makefile, but only a Makefile.in and Makefile.am In 1.0.0-pre3, the libltdl directory does

Re: snapshot-20040807 - fedora core 1 - make fails

2004-08-08 Thread Paul Hampson
On Sun, Aug 08, 2004 at 02:54:33PM +0200, Thor Spruyt wrote: Paul Hampson wrote: On Sat, Aug 07, 2004 at 08:57:10PM +0200, Thor Spruyt wrote: Looking into the libltdl directory, I don't see a Makefile, but only a Makefile.in and Makefile.am In 1.0.0-pre3, the libltdl directory does

Re: snapshot-20040807 - fedora core 1 - make fails - SOLVED

2004-08-10 Thread Paul Hampson
On Tue, Aug 10, 2004 at 10:35:00PM +0200, Thor Spruyt wrote: Just to let you know that this issue is gone in 1.0.0 1.0.0 is basically 1.0.0-pre3, which you had said was already working. I expect the problem still exists in CVS HEAD. -- Paul TBBle Hampson, on an alternate email client. - List

Re: debian packages for download

2004-08-20 Thread Paul Hampson
On Fri, Aug 20, 2004 at 09:32:06AM +0200, Markus Krause wrote: i commented out the line and removed the dependency entry for debhelper in debian/control, now i got the following error after running dpkg-buildpackage: -8- [snip] [snip] /usr/bin/ld: cannot find -lz which lib is

Re: debian package for version

2004-08-21 Thread Paul Hampson
On Thu, Aug 19, 2004 at 10:29:28PM -0700, Petersen, Kirsten - NET wrote: Are there any plans to have a debian package for version 1.0.0 soon? There's an unofficial one someone built, the URL was on the mailing list earlier, and the official (DFSG-free) one is currently with my sponsor. However,

Re: Compile problem - cannot find -lz

2004-08-22 Thread Paul Hampson
On Sun, Aug 22, 2004 at 06:23:06PM -0400, SPROUSE Troy F wrote: OK, I have fixed my problem that started this thread below by installing zlib-devel but now I am getting the following while running 'make'. Making static dynamic in rlm_x99_token... gmake[6]: Entering directory

Re: 32 bit octets overflow / Acct-Output-Gigawords not considered

2004-08-24 Thread Paul Hampson
On Mon, Aug 23, 2004 at 06:17:31PM +0200, Michael Markstaller wrote: Anyway, what I've changed in my sql.conf (using mysql, other my differ using POW(2,32)=4294967296) replace: '%{Acct-Input-Octets}' with '%{Acct-Input-Octets} + (%{Acct-Input-Gigawords:-0} * POW(2,32))'

Re: 32 bit octets overflow / Acct-Output-Gigawords not considered

2004-08-26 Thread Paul Hampson
On Thu, Aug 26, 2004 at 10:58:06AM +0200, Michael Markstaller wrote: What version of FreeRADIUS are you using? I was under the impression that I had committed this fix several months ago, so it _ought_ to be in the 1.0.0 release. using 1.0.0-pre2 built on Jun 15 2004 from the src/debian

Re: MySQL Acctounting Stop Queries

2004-08-26 Thread Paul Hampson
On Thu, Aug 26, 2004 at 05:03:44PM -0700, Tim Petersen wrote: The question I have is it possible to have acctstop queries that insert data into 2 different tables and will both queries be triggered for each call record. Put the two queries into the one acctstop entry, with a semicolon between.

Re: rlm_exec vs Exec-Program-Wait attribute

2004-09-04 Thread Paul Hampson
On Fri, Sep 03, 2004 at 01:33:15PM -0400, Alan DeKok wrote: Thor Spruyt [EMAIL PROTECTED] wrote: I hope the rlm_exec module is going to be changed to enable outputting Reject attributes! If you have to run 2 scripts each time, what's the whole point of making the module? The module can

Re: rlm_exec vs Exec-Program-Wait attribute

2004-09-04 Thread Paul Hampson
On Sat, Sep 04, 2004 at 07:56:29PM +0200, Thor Spruyt wrote: Paul Hampson wrote: New behaviour: (Replaces behaviour identical to 0 above) If the program returns 1 through RLM_MODULE_NUMCODES, return the appropriate code and attributes as expected. [trim] If it returns RLM_MODULE_NUMCODES

Re: rlm_ippool and NAS-Port missing in access-request

2004-09-10 Thread Paul Hampson
On Thu, Sep 09, 2004 at 05:09:48PM +0200, [EMAIL PROTECTED] wrote: Well, this exactly what I'd like to do: to build a one and to get it working... But I need some help from developers. So who wants cooperate ? Any help/hints are welcome http://bugs.freeradius.org/show_bug.cgi?id=42 I was

Re: Status bug #122

2004-09-12 Thread Paul Hampson
On Sun, Sep 12, 2004 at 04:34:30PM +0200, Thor Spruyt wrote: Regarding bug #122, which actually isn't a bug, but rather an enhancement... Will the patch in bug #122 be apllied so the changes are in 1.0.1? The only justification I can see to put this into 1.0.1 is if it's invalid to have two

Re: debian packages for woody and sarge

2004-09-18 Thread Paul Hampson
On Sat, Sep 18, 2004 at 05:40:02AM -0700, Aime wrote: Hello Marcus, Please can you layout here the steps you did to get freeradius compiled on Woody. I tried what you said in your mail (by commenting dh_installpam --name=radiusd ), but still get dependency problems about libsasl2-dev

Re: debian packages for woody and sarge

2004-09-19 Thread Paul Hampson
On Sun, Sep 19, 2004 at 08:24:13AM -0700, Aime wrote: OK. I did what you suggested but now I have problem with OpenSSL. It cannot find Openssl. But it is ther , I know. I just compiled Openssl on the machine. Do you also have the OpenSSL package? I'd suggest not building a local copy, but

Re: debian packages for woody and sarge

2004-09-20 Thread Paul Hampson
On Mon, Sep 20, 2004 at 05:30:10AM -0700, Aime wrote: Thanks for the suggestion. Now i progressed a little bit compiling freeradius on Woody. The problem I am having now is about mysql . What library must be in place . libmysqlclient-dev I think... The one below looks right,.. What's the

Re: ip pools question

2004-09-21 Thread Paul Hampson
On Wed, Sep 22, 2004 at 04:20:23AM -0700, Evren Yurtesen wrote: Hello, I want to use the freeradius ip pools. I just wonder something though ever ip pool name I define should be included in the accounting and post-auth sections? Its kind of confusing, whats the point of defining the

Re: Exec-Program and iproute2

2004-10-04 Thread Paul Hampson
On Sun, Oct 03, 2004 at 02:22:17AM -0700, Ivo Petrov wrote: Hi all, I'm trying to shape ppp+ interfaces after successful authentication using Exec-Program. radiusd runs as root, in mysql radreply table the last row for the user contains: Exec-Program = '/etc/ppp/shd %f'. Freeradius

Re: Exec-Program help

2004-10-04 Thread Paul Hampson
On Mon, Oct 04, 2004 at 02:20:49AM -0700, Ivo Petrov wrote: I have a problem using Exec-Program. I've put the line in radreply table (4,'test1','Exec-Program',':=','/path/script') but the script was not executed. Can anybody tell me why? script : #!/bin/bash ps aux | grep radiusd result

Re: Exec-Program and iproute2

2004-10-06 Thread Paul Hampson
On Tue, Oct 05, 2004 at 04:59:13PM -0700, Ivo Petrov wrote: Thanks for advice but in radiusd.conf I wrote: user root group root and radiusd runs as root or that is not enough. I tried running simple script and it works, but when I change the script with the one that makes shaping then

Re: Exec-Program help

2004-10-06 Thread Paul Hampson
On Tue, Oct 05, 2004 at 05:02:55PM -0700, Ivo Petrov wrote: Thanks much but I need the script executed after successful authentication not before that. Any way thanks my simple script was executed correctly. You might want to look at rlm_exec, which gives better control on when the script is

Re: Net-SNMP Support

2004-10-06 Thread Paul Hampson
On Wed, Oct 06, 2004 at 02:48:30PM -, David wrote: I have been running FreeRadius version 1.0.0 with SNMP support enabled using UCD-SNMP. Will version 1.0.0 work with Net-SNMP now? No, but 1.1.0 does, as does the 1.0.0 and 1.0.1 Debian packaged versions (although it is disabled for

Re: Problem : segmentation fault

2004-10-08 Thread Paul Hampson
On Fri, Oct 08, 2004 at 06:28:17AM +, atul dhingra wrote: [Some HTML stuff] Please don't post HTML-only. Anyway, try OpenSSL 0.9.7... From memory it's required by something in there. Otherwise, after reading the mailing list rules, there's a document (bugs.txt?) which describes how to

Re: Debian .rules file for building postgres support?

2004-10-24 Thread Paul Hampson
On Mon, Oct 25, 2004 at 01:31:06PM +1000, Tech wrote: Does anybody have a modified .rules file for building a 1.0.1 .deb with Postgres support? Thanks in advance. You'll find one in the freeradius 1.0.1 release on the FreeRADIUS website. -- Paul TBBle Hampson, on an alternate email client.

Re: Exec-Program output: freeradius not reading response?

2004-10-27 Thread Paul Hampson
On Tue, Oct 26, 2004 at 02:54:45PM -0700, Nate M wrote: I've done some troubleshooting of my own, and unsure if this is helpful or not, but the process appears to be hanging indefinitely until cleaned up within this section of threads.c (beginning line 1141). The line in particular it

Re: Exec-Program-Wait question and rlm_exec

2004-10-27 Thread Paul Hampson
On Tue, Oct 26, 2004 at 05:17:57PM +0300, Kostas Zorbadelos wrote: On Tue, Oct 26, 2004 at 10:20:48AM -0400, Alan DeKok wrote: Kostas Zorbadelos [EMAIL PROTECTED] wrote: First of all I have a question for Exec-Program-Wait. I need to run an external C program that expects in its

Re: Build problem on Debian 3

2004-11-02 Thread Paul Hampson
On Mon, Nov 01, 2004 at 12:22:04PM +0400, rashad wrote: Build process breaks down at following point: /usr/bin/ld: cannot find -lz Where is the problem? As I recall, libmysqlclient-dev was missing libz-dev as a dependancy in Debian/Woody. You'll need to install it yourself. -- Paul TBBle

Re: Ippool Or DHCP Server.

2004-11-02 Thread Paul Hampson
On Wed, Nov 03, 2004 at 02:19:21PM +0800, Chan Min Wai wrote: Dana Hudes wrote: On Wed, 3 Nov 2004, Chan Min Wai wrote: Go back to the defintion of RADIUS: Remote Authentication Dial-In User System. Now think. How do dialup users connect? They use SLIP/PPP. PPP has provision for sending

Re: Ippool Or DHCP Server.

2004-11-03 Thread Paul Hampson
On Wed, Nov 03, 2004 at 07:04:09PM +0800, Chan Min Wai wrote: I hope that radius server can talk to the DHCP server and tell the DHCP server what ip address to be allocate... Write a script in that adds the authenticated client's MAC address and the IP Address you've assigned to the DHCP

Re: 802.1x and assigning IP address to the supllicant

2004-11-08 Thread Paul Hampson
On Tue, Nov 09, 2004 at 01:39:33AM +0200, iVAN G wrote: How do u do LAN 802.1x + IP leasing (dhcp,radius,supplicant) 802.1x via RADIUS. IP leasing via DHCP. They are configured completely independently. ]- yeah i know :) i was asking is there a way to combine both in a way

Re: error in compilation (make)

2004-11-09 Thread Paul Hampson
On Tue, Nov 09, 2004 at 05:49:56PM +0200, Eva Kolega at NTUA wrote: I have installed mysql-standard-4.0.21-sun-solaris2.9-sparc-64bit.tar.gz, Apache2, php4.3.9 and openldap. The problem is when I try to run make, though configure run ok, gcc: sql_mysql.c: linker input file unused because

Re: list-related suggestion

2004-11-10 Thread Paul Hampson
On Wed, Nov 10, 2004 at 01:33:10PM -0500, Samuel Sullivan wrote: Hi. I joined this list about a week ago. A suggestion for whoever maintains the list...perhaps adding an identifying tag to the subject lines of list messages? Something like [freeradiuslist] or some-such. Something to make the

Re: error in compilation (make)

2004-11-11 Thread Paul Hampson
On Thu, Nov 11, 2004 at 04:46:25PM +0200, Eva Kolega wrote: Paul , Please do not off-list email me without asking first. My personal email archives are not available on the web (as far as I know) so any answer I give privately would have much less value than if I answer on-list. I enclose the

Re: Just getting started

2004-11-17 Thread Paul Hampson
On Thu, Nov 18, 2004 at 12:17:28AM -0600, Dallas Graves wrote: Ok, so I have looked all over the web but cant really find any good how-to articles on freeradius when it comes to setting up a dial-up server. Anyone have any links or even a book that might help? If you're looking at setting a

Re: rlm_exec fail V reject

2004-11-18 Thread Paul Hampson
On Thu, Nov 18, 2004 at 05:14:47PM -0800, Jev wrote: Ok, great Paul, thank you! Is it this patch: http://lists.freeradius.org/archives/freeradius-users/2004/09/frm00132.html that you plan to apply? Is the patch in that post the most recent? I ask because I may attempt to apply and build

Re: rlm_ippool - not releasing ip addresses

2004-11-20 Thread Paul Hampson
On Sat, Nov 20, 2004 at 10:51:32AM +1030, Mike O'Connor wrote: Thanks for you comments, I used you suggestion as a biases and have found that the accounting stop records do not always have the same port id. This means it does not match correctly and does not release the port. I do not see

Re: rlm_eap_md5: User-Password is required for EAP-MD5 authentication

2004-11-25 Thread Paul Hampson
On Fri, Nov 26, 2004 at 02:01:00PM +0800, Chan Min Wai wrote: Alan DeKok wrote: Chan Min Wai (System Administrator) [EMAIL PROTECTED] wrote: CLEAR text passwords are required for EAP-MD5. Crypt passwords will NEVER work. Anyway to make it work? somehow? No. It's impossible. I know

Re: Postauth section skipped when rejected by external script

2004-11-30 Thread Paul Hampson
On Mon, Nov 29, 2004 at 08:53:30PM +0100, Thor Spruyt wrote: Hi, I have configured freeradius to check against a postgresql database and when the user is valid, execute an external script. (which works fine) I have configured freeradius to store authentication results in a postgresql

Re: Error rlm_eap_peap_1.0.1.so

2004-11-30 Thread Paul Hampson
On Tue, Nov 30, 2004 at 11:22:39AM +, [EMAIL PROTECTED] wrote: freeradius:relocation error:usr/local/lib/rlm_eap_peap_1.0.1.so:undefined symbol:eaptls_process I didn't understand the rest of the email, but this suggests your libltdl is too recent, and the cross-module linking used in 1.0.1

Re: Undefined symbol with eaptls / freeradius 1.0.1 (debian)

2004-12-07 Thread Paul Hampson
On Tue, Dec 07, 2004 at 03:16:47PM +0100, Julien CABESSUT wrote: I'm trying to set up a freeradius server on a debian box to authenticate wireless users. The current debian (sid) package for 1.0.1 doesn't include eap_tls, eap_ttls, nor eap_peap due to licensing issues - yet I needed them.

Re: migrating external programs from xtradius to freeradius

2004-12-07 Thread Paul Hampson
On Tue, Dec 07, 2004 at 12:40:41PM -0800, L.C. (Laurentiu C. Badea) wrote: Xtradius uses Auth-Type = External, freeradius appears to need Auth-Type = Accept with an external script. Not a big deal, just thought I should mention it because it is somewhat less intuitive (since after all, you

Re: installaion problem

2004-12-07 Thread Paul Hampson
On Wed, Dec 08, 2004 at 12:53:48PM +0800, Spades wrote: While installing Freeradius 1.0.1, i managed to run ./configure, however.. I'm unable to run 'make' in my Fedora Core 2. gives me error Any idea what went wrong? -- Making static dynamic in rlm_krb5... gmake[6]: Entering directory

Re: rlm_eap_tls not built because OpenSSL not found

2004-12-10 Thread Paul Hampson
On Fri, Dec 10, 2004 at 03:02:54AM -0600, Tim Winders wrote: I have tried both 1.01 and cvs-20041209 with the same results. I would like to be able to use eap/tls, but, in the configure, I keep getting a warning that eap/tls will silently not be built because it requires OpenSSL. I have

Re: Execute a script at the end of a session

2004-12-10 Thread Paul Hampson
On Fri, Dec 10, 2004 at 09:23:12AM +, Santiago Balaguer García wrote: Hi, I am using RADIUS for more than 9 months and for each client a initial script is executed since the radreply table in MySQL has a field:

Re: Execute a script at the end of a session

2004-12-10 Thread Paul Hampson
On Fri, Dec 10, 2004 at 04:38:05PM +, Santiago Balaguer García wrote: I read acct_users and others files, but what I want to do is to add some register in the MySQL DB and can execute a different script to each user. Create yourself a new attribute, with the name of the script, create a

Re: Execute a script at the end of a session

2004-12-16 Thread Paul Hampson
On Thu, Dec 16, 2004 at 09:12:59AM +, Santiago Balaguer García wrote: The action you proposed is create a new attribute, for instance, Exec-Program-End, and insert in the radreply table. For example, if I have this entries in this table:

Re: regarding stale IP in ippool

2004-12-16 Thread Paul Hampson
On Thu, Dec 16, 2004 at 09:34:21PM +0100, Alfred H. Dahl wrote: we have a problem with our IP-POOL. We run pppoe-servers from Mikrotik, and we assign IP to the client using freeradius 0.9.3. If a Mikrotik pppoe-server stops, or the accounting-stop-packet from the pppoe-server does

Re: debian compile issues in conjunction with eap

2004-12-17 Thread Paul Hampson
On Fri, Dec 17, 2004 at 03:47:31AM +0100, Sven Juergensen wrote: and again, http://bugs.freeradius.org/show_bug.cgi?id=98 configuring with --disable-shared make halts at the message of my first email, something with the rlm_x99_token. some strace output: [..] [..]

Re: regarding stale IP in ippool

2004-12-10 Thread Paul Hampson
On Fri, Dec 10, 2004 at 10:20:36AM +0100, Alfred H. Dahl wrote: we have a problem with our IP-POOL. We run pppoe-servers from Mikrotik, and we assign IP to the client using freeradius 0.9.3. If a Mikrotik pppoe-server stops, or the accounting-stop-packet from the pppoe-server does not reach

Re: problems with radutmp

2004-12-20 Thread Paul Hampson
On Mon, Dec 20, 2004 at 02:19:11PM -0200, Luiz Gustavo Anflor Pereira wrote: hello all I have a problema concerning radutmp. Here is the situation: The command radwho | grep 7969 gives me the output: rsf7969rsf7969 PPP 999 Fri 16:20 200.96.10 If i use the option -r,

Re: regarding stale IP in ippool

2004-12-22 Thread Paul Hampson
On Wed, Dec 22, 2004 at 07:10:32PM +0100, Alfred H. Dahl wrote: If a Mikrotik pppoe-server stops, or the accounting-stop-packet from the pppoe-server does not reach the radius-server, the IP-address is not freed from the ip_pool, meaning we get stale sessions in the IP-Pool.

Re: problems with radutmp

2004-12-24 Thread Paul Hampson
On Fri, Dec 24, 2004 at 09:39:58AM -0200, Luiz Gustavo Anflor Pereira wrote: I am using freeradius 1.0.1. Let me try to understand. If a client loses its connection, we can use radzap to comunicate with the NAS. Then it sends back a stop packet, and the login is released. Is that correct?

Re: rlm_mschap compilation error - Where to look ?

2004-12-29 Thread Paul Hampson
On Wed, Dec 29, 2004 at 10:37:20AM -0500, Alan DeKok wrote: Aime [EMAIL PROTECTED] wrote: When compiling Freeradius , i have the following error during rlm_mschap compilation. Where do I have to look ? The radius_exec_program function was changed yesterday. rlm_mschap wasn't updated,

Re: make fails because of libltdl

2004-12-30 Thread Paul Hampson
On Fri, Dec 31, 2004 at 01:33:45AM +0100, Thor Spruyt wrote: I downloaded lastest nightly build and the libltdl isssue is still there. [EMAIL PROTECTED] freeradius-snapshot-20041230]$ make gmake[1]: Entering directory `/home/thor/freeradius-snapshot-20041230' Making all in libltdl...

Re: reading other radius server's radutmp instead of using radrelay

2005-01-06 Thread Paul Hampson
On Thu, Jan 06, 2005 at 05:23:45PM +0800, Rohaizam Abu Bakar wrote: what is the setting related in order for radius to check database (insted of radutmp) in order to control single login (or Simultaneous use)... Put an instance of rlm_sql in the session stanza in radius.conf, and look in

Re: character substitution

2005-01-15 Thread Paul Hampson
On Thu, Jan 13, 2005 at 11:55:40AM -0500, Brian Fennimore wrote: I'm having a problem with freeradius interpreting special characters incorrectly. It's translating the UTF-8 to some kind of quoted-printable form when it prepares the information for accounting. You could add the relevant bytes

Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-15 Thread Paul Hampson
On Sat, Jan 15, 2005 at 06:47:38AM +0100, Sven Juergensen wrote: the start/stop script of the debian freeradius package is faulty as well. let me know if you need a modified script and i'll mail it to you. Alternatively, file a bug report and then everyone can benefit from a fix to whatever's

Re: Debian testing = no PEAP/TLS/TTLS support?

2005-01-15 Thread Paul Hampson
On Sat, Jan 15, 2005 at 11:30:03AM +0100, pascal wrote: Hi, rlm_eap: Loaded and initialized type md5 rlm_eap: Loaded and initialized type leap gtc: challenge = Password: gtc: auth_type = PAP rlm_eap: Loaded and initialized type gtc rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so:

Re: radutmp woes

2005-01-17 Thread Paul Hampson
On Sun, Jan 16, 2005 at 11:15:35PM -0600, Sam Morris wrote: Hello After much hair pulling I have Freeradius 1.0.1 working nearly 100%. But I'm having issues with radutmp (at least I think that's where the trouble lies). When I do a radlast, it says this: [EMAIL PROTECTED] radius]# radlast

Re: Dynamic IP addres on EAP/TLS session

2005-01-17 Thread Paul Hampson
On Mon, Jan 17, 2005 at 05:23:04PM +1100, Jacques VUVANT wrote: How Can I allow dynamic IP address for a EAP/TLS session. DHCP server on same machine as Freeradius, seems not to work. The DHCP server needs to be on the EAP gatekeeper (I forget the proper name, the thing that isn't the

Re: Dynamic IP addres on EAP/TLS session

2005-01-17 Thread Paul Hampson
On Mon, Jan 17, 2005 at 09:49:48AM -0600, Justin Guidroz wrote: I'm running Freeradius on the same server that also serves as my LDAP server, DHCP server, and DNS server, and I have had no problems getting DHCP addresses using EAP-TTLS or EAP-TLS. Does the EAP gateway thingy relay DHCP

Re: Solaris vs. Linux: eap - mschap - mschapv2 failure: smbencryptNT-pa ssword hash different for Sparc and Intel

2005-01-17 Thread Paul Hampson
On Mon, Jan 17, 2005 at 07:01:22PM +0100, [EMAIL PROTECTED] wrote: Ok, summary: 1. EAP on Solaris fails, EAP on Linux works. 2. Version problems with freeradius can be excluded, can we ? Try the current 1.0.2 snapshot from the CVS release_1_0 tree. This could be a bigendian/64 bit issue with

Re: radwtmp trouble

2005-01-19 Thread Paul Hampson
On Wed, Jan 19, 2005 at 01:11:55PM -0600, Sam wrote: I think there may be a problem in the way radwtmp is being written (at least in the Freeradius that ships with RedHat ES3). Testing: I copied a radwtmp file over from my old RedHat 7.2 server (running Cistron 1.6) and both last and radlast

Re: configure script nightmare with ucd-snmp

2005-02-01 Thread Paul Hampson
On Tue, Feb 01, 2005 at 06:59:36PM +1100, Mitchell, Michael J wrote: I'm attempting to build freeRADIUS 1.0.1 on Solaris 9 with ucd-snmp 4.2.6 I've been struggling to get the configure script to successfully recognise ucd-snmp and thus enable it for compilation in freeradius. I'm on Solaris

Re: how can freeradius log the transaction and failed logins?

2005-02-05 Thread Paul Hampson
On Fri, Feb 04, 2005 at 08:59:54PM +0700, Marendra Nutriaji wrote: Hi all, I use Freeradius 1.0.1 dialupadmin, and mysql under Fedora core 2, nad Using Patton 2960 as my Nas. Everything works fine, except when my user failed logging in with any reason, freeradius didnot put those failed

Re: Disabling radwtmp/radutmp For Some Clients

2005-02-05 Thread Paul Hampson
On Fri, Feb 04, 2005 at 03:05:59PM -0800, A. Clausen wrote: I was wondering if there was a way I could disable writing to radutmp and radwtmp for some clients, or whether this is an all or nothing proposition. I think you can apply Post-Auth-Type (see the documentation) to this problem, but

Re: rlm_ippool - reliance on NAS-Port parameter

2005-02-18 Thread Paul Hampson
On Fri, Feb 18, 2005 at 12:19:05PM -0500, Jeff Synnestvedt wrote: I'm a little confused as to the necessity of having the NAS-Port because wouldn't a normal accounting Stop packet have the IP address in it anyway which would tell rlm_ippool which IP to free up. And if the Stop packet is

Re: Undefined symbol with eaptls / freeradius 1.0.1 (debian)

2005-02-22 Thread Paul Hampson
On Tue, Feb 22, 2005 at 10:44:08AM +1100, Tom wrote: I've setup freeradius 1.0.1 on debian (sarge 2.6 kernel). I've included all the modules and set freeradius to use PEAP. When my authenticator passes the request over to the freeradius server I get (among other things): freeradius:

Re: Undefined symbol with eaptls / freeradius 1.0.1 (debian)

2005-02-22 Thread Paul Hampson
On Wed, Feb 23, 2005 at 10:24:45AM +1100, Tom wrote: Thanks very much for your reply I appreciate your help and I've just got a couple of followup questions. Just upgrading libtool won't work, as libtool 1.5 requires a more recent version of autoconf than is used in FreeRADIUS 1.0.1. As the

Re: Error: SSL_new in -lssl...no - went thru the docs and faq and google already before posting....

2005-02-27 Thread Paul Hampson
On Mon, Feb 28, 2005 at 12:05:33AM +1100, Michael Mitchell wrote: Thanks for the reply Stefan, I haven't tried linking freeRADIUS with static libraries yet, and I must admit I missed the --disable-shared in J.Ho's email. Well picked up... I'm guessing the problem stems from this part of the

Re: Packet of Disconnect

2005-03-02 Thread Paul Hampson
On Tue, Mar 01, 2005 at 12:52:52PM +1100, Mitchell, Michael J wrote: The information is in the PoD request. Kind of. From the NAS's perspecitive, the PoD only needs to contains the Acct-Session-Id. However obviously in order to proxy a request we at least need the NAS-IP-Address. I use

Re: question about ippools

2005-03-10 Thread Paul Hampson
On Thu, Mar 10, 2005 at 11:31:48AM -0900, Terry J Fike Jr wrote: I'm wondering if it is possible to set up an ippool for a single user? Right now our users are flatfiled in the users file. anyone with a static has the info with their username, all the rest of the users get their ip

Re: question about ippools

2005-03-10 Thread Paul Hampson
On Thu, Mar 10, 2005 at 03:45:24PM -0900, Terry J Fike Jr wrote: It all depends on how you get the Pool-Name attribute added to the user's configuration attribute list. If it's added for one user when that user comes from a specific NAS, then only that user on that specific NAS will get an

Re: Compiling freeradius 1.0.2 with mssql support

2005-03-16 Thread Paul Hampson
On Wed, Mar 16, 2005 at 01:46:09PM +0100, Achim Schmidt wrote: Hello, I'm stoill trying to compile freeradius-1.0.2 with mssql support and without mysql. Freetds is installed and working. I cant find that the lib is builded in the make run. Also i'm missing an other file. If I look into

Re: FreeRADIUS and MySQL+SSL

2005-03-18 Thread Paul Hampson
On Sat, Mar 19, 2005 at 03:52:52AM +0100, Wolfram Schlich wrote: * Wolfram Schlich [EMAIL PROTECTED] [2005-03-17 00:55]: * Wolfram Schlich [EMAIL PROTECTED] [2005-03-16 09:05]: Hey guys, we would like to implement the following setup: - FreeRADIUS radiusd on machine A - MySQL

Re: FreeRADIUS and MySQL+SSL

2005-03-19 Thread Paul Hampson
On Sat, Mar 19, 2005 at 02:06:56PM +0100, Wolfram Schlich wrote: * Paul Hampson [EMAIL PROTECTED] [2005-03-19 04:56]: On Sat, Mar 19, 2005 at 03:52:52AM +0100, Wolfram Schlich wrote: * Wolfram Schlich [EMAIL PROTECTED] [2005-03-17 00:55]: * Wolfram Schlich [EMAIL PROTECTED] [2005-03-16

  1   2   >