Re: Load Balancing

2013-02-13 Thread Johan Meiring
than one console? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe

Re: Freeradius several segfaults at heavy load and startup ?

2012-11-28 Thread Johan Meiring
On 2012/11/28 11:50 AM, Phil Mayers wrote: root@itop0-db0:/scripts# LD_PRELOAD=/usr/lib/libperl.so.5.10 Why are you fiddling with LD_PRELOAD? On my debian boxes FR cannot run without preload. There is something on the mailing list about it a while back. -- Johan Meiring Cape PC

Re: help - simultaneous accounting

2012-10-09 Thread Johan Meiring
the remaining time left to 1 second. Look at 'acctupdate' in the chillispot config. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer

Re: Very huge Acct-Session-Time

2012-05-04 Thread Johan Meiring
in, and Nas stores start time internally. 3) NTP on the Nas eventially figures out what the time is. 4) Next time the Nas calculates the Session time, it is 43 years. I must say I am unsure how I would do it differently if I was the Nas software developer. -- Johan Meiring Cape PC Services CC

Re: Volume Limit per user monthly

2012-05-04 Thread Johan Meiring
let a user run for about an hour before you disconnect him, but you dont really have another option. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC

Re: sqlcounter_expire_on_login module

2012-05-03 Thread Johan Meiring
this: Modify your query... select ifnull((The rest of your query),0) It will then return 0 when no records are found. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape

Re: FreeRadius questions

2012-02-29 Thread Johan Meiring
not work. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe/unsubscribe

Re: Configuring freeradius for MACsec

2012-02-24 Thread Johan Meiring
-- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe/unsubscribe? See http

Re: FreeRadius to authenticate DHCP Requests with Option82

2012-02-22 Thread Johan Meiring
) make this hard. They don't talk to databases. They're firmly stuck in 1980's technology. Another option which we use very successfully is a Mikrotik DHCP server. It can talk to Freeradius. http://wiki.mikrotik.com/wiki/Manual:IP/DHCP_Server It works well. -- Johan Meiring Cape PC Services CC

Re: rlm_perl and returning 1 attribute with same name

2012-02-20 Thread Johan Meiring
avpair by the name 'Filter-Id'. How would I go about returning more than 1 or am I stuck because of perl? I have an array with my Framed-Routes I then do the following: $RAD_REPLY{'Framed-Route'} = \@framedroutearray; -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

Re: Last login time in LDAP?

2012-02-08 Thread Johan Meiring
, called via the exec module. Better option might be rlm_perl -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za

Re: Segfault in 2.1.10 backports version advice

2012-01-23 Thread Johan Meiring
the time to collect debug info. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info

Re: Radius Client vs. Radius Client-NG

2011-12-08 Thread Johan Meiring
personnally use radiusclient-ng I also use radiusclient-ng. Comes as a standard debian package. Never had an issue. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC

Re: Change of network adapters in radius server

2011-12-02 Thread Johan Meiring
On 2011/12/02 09:52 AM, Alan DeKok wrote: I've done tests with 50K requests/s for days straight. My smartphone could do 200 requests/s. I must say, freeradius running on a smartphone is quite cool! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

Re: AK Timeout

2011-12-02 Thread Johan Meiring
time ? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before

Re: radiusd goes wrong

2011-11-05 Thread Johan Meiring
On 2011/11/05 01:41 AM, Ivan Matala wrote: freeradius runs if i use this radiusd -x -f pls help http://www.lmgtfy.com/?q=fix+unix+permissions -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any

Re: IPv6 ready?

2011-10-31 Thread Johan Meiring
address as part of the name? Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html

Re: Authorising Clients by Calling Station ID Not IP

2011-10-25 Thread Johan Meiring
MIGHT contain Calling-Station-Id (or do you mean Called-Station-Id??) as well. You will have to look. Hope this helps. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you

Re: Rewriting wimax calling-station-id with perl

2011-10-05 Thread Johan Meiring
undefined reference to `lt_preloaded_symbols' that apparently has even Alan opting to forsake libtool. Which version of debian do you need packages for? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any

Post-auth and Rejected logins

2011-09-26 Thread Johan Meiring
of a more elegant way? Thanks! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info

Re: Post-auth and Rejected logins

2011-09-26 Thread Johan Meiring
On 2011/09/26 11:38 PM, Alan DeKok wrote: Johan Meiring wrote: If the auhtentication as OK, and my perl module then decides to reject the Authentication (by returning RLM_MODULE_REJECT), Don't do that. The post-auth section is for running modules AFTER the user has been accepted

WARNING about auth-type = Local

2011-09-21 Thread Johan Meiring
this happens. Thanks! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe

Re: WARNING about auth-type = Local

2011-09-21 Thread Johan Meiring
On 2011/09/21 06:19 PM, Alan DeKok wrote: Johan Meiring wrote: My authorise and authenticate section looks like this. authorize { authorisation_log chap mschap sql pap } You need the pap module last in the authorize section. It will set Auth

Re: MySQL performance

2011-09-20 Thread Johan Meiring
? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info/subscribe/unsubscribe? See http

Re: Slow DB / outstanding requests

2011-09-16 Thread Johan Meiring
to wait for the middle of the night to reboot (so more ram could be allocated). Server is now perfectly fine. It was just the first time that I didn't see FR recover after the DB eventually finished with slow queries. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021

Re: Test

2011-09-15 Thread Johan Meiring
On 2011/09/15 04:49 PM, Alan DeKok wrote: Is the list down, or are people quiet? Suspect they're quiet. Freeradius works too well!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments

Slow DB / outstanding requests

2011-09-15 Thread Johan Meiring
outstanding. Dont know if 2.1.12 has more difficulty with slow databases? Unfortunately dont have more info, so this can probably be ignored. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any

Re: CoA proxying again

2011-09-06 Thread Johan Meiring
server for the client?? That might be easy to add for 3.0. +1 This would also be a GREAT feature for me. How far is 3.0 off? 2.12 (or 2.13) maybe? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any

Re: Need help authenticating local users on Apple server

2011-08-16 Thread Johan Meiring
to a module /usr/local/etc/raddb/sites-enabled/inner-tunnel[189]: Errors parsing authenticate section. Read again. list it in the authorize section not the authenticate section -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting

Re: How to setup Freeradius in a Domain

2011-07-14 Thread Johan Meiring
refuses to share the ntPassword attribute with anyone that does not look like Microsoft? Hopefully Samba4 changes that as it should have a copy of the AD database! Thanks! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting

Re: General wiki rules

2011-07-14 Thread Johan Meiring
, are there any good tutorials? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any attachments you should read Cape PC Service's email disclaimer at: http://www.pcservices.co.za/disclaimer.html - List info

Re: How to setup Freeradius in a Domain

2011-07-13 Thread Johan Meiring
(samba3, NT4 style domain) Can you get this to work if you dont want Windows on your network? (Not something I'm trying to achieve, just curious) -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting on this email or opening any

Re: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-03 Thread Johan Meiring
On 2011/06/03 10:07 AM, Alan DeKok wrote: Martin wrote: Did this and it is 3.0.0, but on on the official site there is nothing mention regarding 3.0 version. When is going to be official released 3.0? Perhaps this summer. What hemisphere are you in? :-) -- Johan Meiring Cape PC

Re: Error: User-Name is not the same as MS-CHAP name

2011-06-03 Thread Johan Meiring
On 2011/06/03 02:15 PM, Phil Mayers wrote: I'm not downloading a torrent of copyrighted software to fix someone else's problem. As long as you dont get a key, it is legal. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 Before acting

Re: Wiki - once upon a time there was documentation

2011-06-01 Thread Johan Meiring
On 2011/06/01 12:17 PM, Phil Mayers wrote: ...in which the migration technique was discussed, and help was requested to reformat documents which had not migrated seamlessly. - Is the old wiki accessable anywhere so one can help to manually transfer info? -- Johan Meiring Cape PC Services

Re: New FreeRADIUS wiki - Help appreciated!

2011-05-27 Thread Johan Meiring
On 2011/05/27 03:22 AM, Arran Cudbard-Bell wrote: http://power.freeradius.org:4567 is problematic from here (slow, and Some ISP's prioritize 4567 different to 80. Is their any good reason it runs on 4567? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

Re: Can FreeRadius connect to ACT! database?

2011-04-05 Thread Johan Meiring
rlm_exec) that can query the ACT database directly. Php can query weird and wonderful databases using odbc, and rlm_exec can call any php script. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

Re: testing which client initiated request ? Client-shortname ... FreeRADIUS-Client-Shortname

2011-03-29 Thread Johan Meiring
, if only the testing client based on shortname worked ? You could try dynamic clients and different virtual servers. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 --- Before acting on this email or opening

Re: FR 2.1.7 Exits for no reason

2011-03-08 Thread Johan Meiring
. (I _think_ it was 2.1.7) Alan's advice was upgrade, there was some stuff fixed. I upgraded to 2.1.9 (which was the current release at the time). It worked. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http

Re: AW: AW: AW: AW: Authenticating SSH login on a Cisco IOS switch to AD

2011-02-14 Thread Johan Meiring
, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR 2.1.0 (ubuntu) proxying to NPS/IAS.

2011-02-01 Thread Johan Meiring
On 2011/02/02 12:32 AM, hellbird wrote: Thank you for your answer. I have contacted Microsoft to help me. Would be really interesting to know if it works contacting them!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See

Re: FR 2.1.0 (ubuntu) proxying to NPS/IAS.

2011-02-01 Thread Johan Meiring
On 2011/02/02 12:32 AM, hellbird wrote: Thank you for your answer. I have contacted Microsoft to help me. Would be really interesting to know if it works contacting them!! -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See

Re: Freeradius SQL: PEAP: Tunneled authentication was rejected.

2011-01-28 Thread Johan Meiring
.1045715.n5.nabble.com/FreeRadius-User-f2740693.html at Nabble.com. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: SSH with Radius on one Server: no password match by authentication over sshd --- password match over NTRadPING

2011-01-23 Thread Johan Meiring
{ ^ this And therefore the shared secret is incorrect. Either fix pam to talk to the 110.110.110 address or fix Freeradius to have the correct shared secret under the 127.0.0.1 client Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe

Re: Call for 2.1.11

2011-01-18 Thread Johan Meiring
://lists.freeradius.org/pipermail/freeradius-users/2009-September/msg00357.html Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Help needed with user authentication

2011-01-18 Thread Johan Meiring
, but how does Freeradius do that? Where is that page so i can edit it with my logo or whatever? Or do i need more software to have that login page? Please assist, am desperate here to get this working.. thanks in advance! Try coova.org/CoovaChilli -- Johan Meiring Cape PC Services CC Tel: (021

Re: modules directory

2011-01-17 Thread Johan Meiring
: checkval blah { item = ... } Calling the module: blah Hope that helps. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Deleting stale session automatically with unlang

2011-01-14 Thread Johan Meiring
is null} -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Johan Meiring
dpkg-buildpackage You have a debian package for 2.1.10 that you can install. Its that simple. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius on lenny doesn't permit mschap auth

2011-01-14 Thread Johan Meiring
On 2011/01/14 03:57 PM, Josip Rodin wrote: Actually it's even simpler. Add lenny-backports to sources.list, update, and just install the new packages. Must say I didn't know that backports also maintained freeradius. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021

Re: segfault with rlm_perl

2011-01-04 Thread Johan Meiring
) to show a ram problem, is to compile a kernel. I've seen compilation fail at different stages with faulty RAM. I realiuse the advice might sound ridiculous, but it has worked for me before. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe

Re: Voip database

2010-12-21 Thread Johan Meiring
On 2010/12/21 10:01 AM, miha- wrote: Thank you @Johan Meiring for that. It is not my intend to spam the group and asking same question again and again. Belive me that I have done everything that you said (I changed secret on the NAS and ond the radius and I restarted both,...). So please help

Re: Voip database

2010-12-21 Thread Johan Meiring
to the following on your centile NAS. setProperty com.centile.connectors.aaa.remotepass 1122 ^^ -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: Voip database

2010-12-17 Thread Johan Meiring
and Freeradius. The Phones password (in access-request) is encrypted using the shared secret. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Do get in some other file?

2010-12-14 Thread Johan Meiring
is here: http://www.catb.org/~esr/faqs/smart-questions.html Especially here: http://www.catb.org/~esr/faqs/smart-questions.html#homework Maybe someone should tell us who the teacher is so we can ask him to add some mailing list etiquette to his course? Cheers, -- Johan Meiring Cape PC Services

Re: Plz advice on a good captive portal for FreeRadius

2010-12-13 Thread Johan Meiring
On 2010/12/11 06:07 AM, Jayakrishnan wrote: Please advice me how to create a Captive portal with in the FreeRadius AAA server. Is it possible to use NoCatSplash and use FreeRadius Authentication and Authorization? Use CoovaChilli (Previously called chillispot) -- Johan Meiring Cape PC

Re: Freeradius COA trigger

2010-12-13 Thread Johan Meiring
accounting { perl if (%{reply:Tmp-String-0} == DISCONNECT) { update disconnect { User-Name = %{User-Name} } } } -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Re: configure radius to write detailed log to multiple files

2010-12-01 Thread Johan Meiring
i.e. When configuring more than one of the same module type, name them and refer to them by name. Hope that makes sense. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: dynamically selecting, which attribute to evaluate

2010-12-01 Thread Johan Meiring
two levels of expansion like that, sorry. Using rlm_perl, you should be able to get the functionality you want. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS 2.1.10 regression in logging behaviour

2010-11-29 Thread Johan Meiring
On 2010/11/27 01:32 PM, Alan DeKok wrote: Another fix would be to add a radmin command to re-open just the log files. Squid does something similar. squid -l logrotate reopens the log files. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info

Re: Problem with FreeRADIUS + PPPoE + Mikrotik

2010-11-23 Thread Johan Meiring
not have problems with disconnections. What you are saying My red car wont drive, but my green car does. What is wrong with my red car? We have NO IDEA. You will have to troubleshoot yourself and come up with better info. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271

Re: configure output summary

2010-11-18 Thread Johan Meiring
! Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Doubt - Freeradius + Ldap

2010-11-04 Thread Johan Meiring
command: radtest username 123456 10.12.60.19 1812 0 password This maps to: user=username password=123456 radius-server=10.12.60.19 nas-port-number=1812 secret=0 ppphint=password -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe

Re: Doubt - Freeradius + Ldap

2010-11-04 Thread Johan Meiring
On 2010/11/04 02:16 PM, eduardo moreira wrote: raddtest -d /etc/freeradius username password ip-server port-server secret but no works. Copy and paste your command. Do not retype it. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe

Re: Doubt - Freeradius + Ldap

2010-11-04 Thread Johan Meiring
On 2010/11/04 02:37 PM, eduardo moreira wrote: sorry radtest -d /etc/freeradius username 123456 10.12.60.19 1812 password any That should work. The any is probably unnecesary. What does freeradius -X now say? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782

Re: FAQ and Wiki down?

2010-10-29 Thread Johan Meiring
On 2010/10/29 04:43 PM, Mark Holmes wrote: Works for me also IE sometimes doesn't work if the website does not start with www. You then need to explicitly specify http:// Try adding http:// in front of wiki.freeradius.org -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021

Freeradius COA trigger

2010-10-08 Thread Johan Meiring
a coa that is not caused by an update coa {} block, but by some external trigger. Is this possible in any way? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with Alcatel 4604 and Cisco ACS

2010-10-07 Thread Johan Meiring
this attribute on Alcatel is send via Aruba-Essid-Name (attribute 5 in dictionary.aruba). Is there a way to change this behavior or a remap of this attribute for Alcatel? Where is Freeradius involved? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe

Re: Radius+Ldap:Allow the same host in multiple vlans

2010-09-30 Thread Johan Meiring
On 2010/09/30 05:05 PM, Ramon Escriba wrote: Hi Alan, Then does it possible to do a general match rule in huntgroups to lets say the 35 first ports belong to a vlan A and the rest 36 to 48 to vlan B,or not? It sounds like you need some custom logic. Have you looked at rlm_perl? -- Johan

Re: Radius not recording - The maximum number of threads (300) are active, cannot spawn new thread to handle request

2010-09-29 Thread Johan Meiring
has also been suggested. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Last call for 2.1.10

2010-09-23 Thread Johan Meiring
On 2010/09/22 03:15 PM, Alan DeKok wrote: I've put some preliminary tar files on: http://git.freeradius.org/pre/ If there are any issues, let me know now. Otherwise we'll release 2.1.10 on Monday. Would be nice to remove +git from debian/changelog -- Johan Meiring Cape PC Services

Originate COA home_server

2010-09-21 Thread Johan Meiring
fail-over/round-robin, etc I'm sure I can leave the config as is, as the home_server_pool is never actually referenced. Am I completely confused? -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: AW: convert mac adresses to lower case

2010-09-20 Thread Johan Meiring
from the switch. I cannot return the mac always upper case as it would not work with the switches which send the mac lower case. I hope this makes sense. Search this list. The question was asked about 2 months ago. It was answered. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271

Re: Last call for 2.1.10

2010-08-12 Thread Johan Meiring
/freeradius-2.1.10-git/freeradius-server/src/modules/rlm_eap' make[6]: *** [rlm_eap] Error 2 Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Last call for 2.1.10

2010-08-12 Thread Johan Meiring
now. Not tested it though. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Of accounting data and security

2010-08-10 Thread Johan Meiring
radsec). Any comments on ipsec vs radsec? Thanks, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius 2.1.9 stop working

2010-08-05 Thread Johan Meiring
On 2010/08/05 11:04 AM, Alan Buxey wrote: 2.1.10 isnt out yet. but when it is, then your package maintainers should ensure a new RPM is available. This page might tell you how to build an RPM from source. http://wiki.freeradius.org/Red_Hat_FAQ Use git as the source. -- Johan Meiring

Re: suffix configuration

2010-08-05 Thread Johan Meiring
On 2010/08/05 08:17 PM, Sallee, Stephen (Jake) wrote: Does anyone have any input on this? It is kind of a problem for me and I could really use some help : ) realms -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http

Re: suffix configuration

2010-08-05 Thread Johan Meiring
in the correct direction. Was hoping you had read all the files in /etc/radiusd (or /etc/freeradius) already. Look at modules/realm This is how you split off domain\user or u...@domain. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe

Re: Fwd: FreeRadius2MySQL

2010-08-04 Thread Johan Meiring
On 2010/08/04 01:35 PM, Student University wrote: so can please guide me of how i can setup the freeradius 2 with MYSQL to be 100% ready for such production That's easy. All you need to do is read the documentation. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021

Re: Tag and Untag a port in several VLAN

2010-08-03 Thread Johan Meiring
On 2010/08/03 01:51 PM, Fabien COMBERNOUS wrote: Thank you for your answer. I can't change FreeRadius version. So i need to use decimal number. Can you give me an exemple about to untag a port in vlan 7 ? Just convert 0x320007 to decimal?? -- Johan Meiring Cape PC Services CC Tel: (021

Re: Documentation question

2010-07-22 Thread Johan Meiring
of information about how the server works, config files, examples, etc. I find the best documentation to also be the doc/ folder as well as the example config files. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http

Re: freeradius and ADSL-Agent-Circuit-Id

2010-07-21 Thread Johan Meiring
} else { Auth-Type = Reject } } -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius and ADSL-Agent-Circuit-Id

2010-07-21 Thread Johan Meiring
} } else { reject } } } -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FR virtual server question and EAP configuration

2010-07-16 Thread Johan Meiring
= SSID1) { pap chap } if (Called-Station-Id = SSID2) { pap mschap } It is enough? I have looking for any example for this scenario but whithout any success. Dont do this. Do the above. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe

Re: dyndns ff 1.1.7

2010-07-16 Thread Johan Meiring
}'} FreeRADIUS-Client-Shortname = %{Packet-Src-IP-Address} FreeRADIUS-Client-NAS-Type = other FreeRADIUS-Client-Virtual-Server = amobia_hotspot } } } Tables above are my own, so modify the queries. Cheers, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021

Re: rlm_perl version?

2010-05-26 Thread Johan Meiring
, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Version 2.1.9 has been released

2010-05-24 Thread Johan Meiring
if it is supposed to be fixed. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: authentification

2010-05-20 Thread Johan Meiring
/smart-questions.html#homework -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: COA default configuration...Need help to test radclient

2010-05-17 Thread Johan Meiring
-server/blob/master/raddb/sites-available/coa -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Pending release of 2.1.9

2010-05-14 Thread Johan Meiring
On 2010/05/14 07:46 AM, Alan DeKok wrote: Johan Meiring wrote: There is a log of warnings though. Small subset says this. - dpkg-shlibdeps: warning: symbol radlog used by debian/freeradius/usr/lib/freeradius/rlm_checkval-2.1.9.so found

Re: Pending release of 2.1.9

2010-05-14 Thread Johan Meiring
On 2010/05/14 10:35 AM, Alan DeKok wrote: Johan Meiring wrote: The dynamic clients' code runs modules before the packet is decoded... but that's only because it doesn't *receive* the packet. So any raw access to the packet will return nothing. What are you doing with the module? I

Re: Pending release of 2.1.9

2010-05-14 Thread Johan Meiring
On 2010/05/14 11:08 AM, Johan Meiring wrote: Its dynamic clients. Alan, I just saw you were cc-ed on the mail sent to this list. Not intentional. I know you hate it. I always use reply-to-all as a habit. It then replied to you as well. Apologies -- Johan Meiring Cape PC Services

Re: Pending release of 2.1.9

2010-05-13 Thread Johan Meiring
not finding dependency freeradius (without -common). There is something wrong with the package names. Also, the version in debian/changelog still contains git. Hope that helps. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See

Re: Pending release of 2.1.9

2010-05-13 Thread Johan Meiring
On 2010/05/13 07:16 PM, Josip Rodin wrote: Simply install *both* packages, like the dependencies tell you to... OOPS... Idiot mode. I didn't look properly. The one without -common *does* exist. Apologies for time wasting.. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271

Re: Is this Install Guide Complete?

2010-05-01 Thread Johan Meiring
. The problem is now IMHO an 'invalid guide' to install a later version is out there. I realize that you might your server soon, but others (that may not wipe their server soon), may try this. The backports route is still better. -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886

Re: radiusd does not logging while debug

2010-04-22 Thread Johan Meiring
On 2010/04/22 06:45 PM, Alan DeKok wrote: kes-...@yandex.ru wrote: Hi, FreeRadius. How to force radiusd -X to do logging to log file too? $ radiusd -X /var/log/radius/radius.log 21 Or for both file and console. radiusd -X 21 | tee /var/log/radius/radius.log -- Johan Meiring Cape

Using Nas IP Adress as client key

2010-04-22 Thread Johan Meiring
not read the source code yet, just throwing an idea out there). Opinions? PS: I realise that tunneling the radius traffic is a different solution to the same problem, but in our case not always easy to implement. (The only extra layer I would love to see is RadSec.) -- Johan Meiring Cape

Overriding Auth Type in Post Auth

2010-03-31 Thread Johan Meiring
CAP. Use post-auth. The way this sounds, is that you can change an Accept into a Reject, but not the other way around in post-auth. Or am I confused? Thanks, -- Johan Meiring Cape PC Services CC Tel: (021) 883-8271 Fax: (021) 886-7782 - List info/subscribe/unsubscribe? See http

Re: Freeradius and COA

2010-03-19 Thread Johan Meiring
Alan DeKok wrote: Johan Meiring wrote: 1) For originating a COA packet, is it possible to trigger it from rlm_perl. i.e. cause an update coa. Not really. I have not tried this yet, simply thinking aloud Could one maybe set a string in rlm_perm Tmp-String-0 and then test

  1   2   >