Arran Cudbard-Bell a.cudba...@freeradius.org writes:
On 6 Sep 2012, at 15:10, Kostas Zorbadelos kzo...@otenet.gr wrote:
Greetings to all,
I would like to achieve the following functionality: in case a user's
AUTHENTICATION fails, the user should not be rejected but be given an
accept
credentials in their CPEs.
Could you provide a few hints for how the config would look like (I am
thinking of something in terms of unlang and utilizing virtual servers
but I am not sure how it would look like.
Regards,
Kostas
--
Kostas Zorbadelos
twitter:@kzorbadeloshttp
On Wednesday 13 August 2008 12:24:44 Alan DeKok wrote:
Kostas Zorbadelos wrote:
As we are preparing for migration to 2.X version in some of our
production systems, I took a closer look at the sources and found the
rlm_acctlog module that allows for the logging of various types
limit I think, so I guess
that would be enough :)
Thanks and keep up the good work.
Kostas Zorbadelos
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Wed, Jul 11, 2007 at 09:22:32AM +0200, Federico Giannici wrote:
We have a working FreeRADIUS 1.1.4 running since a lot of months.
Now we have to proxy the requests for a realm (gtenet.it) to a given
RADIUS server, but our server seems to ignore the proxy configuration!
I have set
On Fri, May 25, 2007 at 02:27:48PM +0200, Alan Dekok wrote:
Norbert Wegener wrote:
on an ubuntu 6.06 configure does not show an error with 2.0.0-pre1.
...
/home/norbert/Desktop/freeradius-server-2.0.0-pre1/src/lib/.libs/libradius.so
-L/usr/local/lib
Hello to everyone.
In a previous thread
http://www.mail-archive.com/freeradius-users@lists.freeradius.org/msg33354.html
I had described a strange behavior in our large proxy setup. After
running the server in debug mode (radiusd -xxx) in our production
systems we found out what was causing our
On Mon, Apr 30, 2007 at 05:41:06PM +0200, Alan DeKok wrote:
Kostas Zorbadelos wrote:
I had described a strange behavior in our large proxy setup. After
running the server in debug mode (radiusd -xxx) in our production
systems we found out what was causing our problems. The problem
On Mon, Apr 23, 2007 at 04:39:22PM +0200, Alan DeKok wrote:
Kostas Zorbadelos wrote:
If I do
./configure --prefix=/opt/freeradius
the build scripts presume that --enable-developer is true.
That may be an issue only in 1.1.6. You should be able to change it
by doing --disable
On Tue, Apr 24, 2007 at 01:12:26PM +0200, Alan DeKok wrote:
Kostas Zorbadelos wrote:
I disagree with you on this one Alan. I discovered all these issues I
mention the hard way, after our radius server stopped running in
random times (after a failure in rad_assert() in request_list.c around
environment
--enable-developer or --disable-developer seem to be ignored and
someone should define CFLAGS explicitly in the configure command to
define -NDEBUG macro.
Let me know if you need anything else to trace the issue.
Thanks,
Kostas Zorbadelos
-
List info/subscribe/unsubscribe? See http
(libperl.so)
Regards,
Kostas Zorbadelos
Dear All,
I use a Linux system called Ubuntu. Yesterday I tried to complier the
freeradius 1.1.4. When I begun to make, there is something wrong.
This is the error log:
Making all in rlm_passwd...
make[6]: Entering directory
`/home/stone
On Fri, Feb 23, 2007 at 10:23:50AM -0500, Dennis Skinner wrote:
Kostas Zorbadelos wrote:
radiusd -X confirms that the configuration is correct, however I have
this problem behaviour in large scale. My initial suspitions go to the
proxying code to be honest, but I need to take a good look
My greetings to the list.
We have deployed a large setup using freeradius 1.1.3 in a proxy
configuration in front of FUNK radius. During the day we have about
150.000 concurrent DSL users online. Our setup takes the
access-request from the NAS, checks whether the user has any other
active
On Fri, Feb 23, 2007 at 02:49:57PM +, [EMAIL PROTECTED] wrote:
Hi,
active sessions and if he is allowed to have a session the request is
proxied to the FUNK server that performs the actual authentication. So
the setup is a classical proxy setup. This policy decision of whether
On Sun, Dec 03, 2006 at 09:15:54PM -0800, Alan DeKok wrote:
Kostas Zorbadelos wrote:
on a multihomed Solaris host when radius packets are proxied what is
their source IP? Is it IP1 or it could also be IP2?
Uh... that's up to the OS.
That's what I also thought. This would have to do
, or a fully qualified
# Internet domain name. The default is *
#
# As of 1.0, you can also use the listen directive. See below for
# more information.
#
Can I assume that outgoing packets use as source address the one
listed in the listen directive?
Thanks in advance,
Kostas
--
Kostas
.
Alan DeKok.
In the first question (How large is your organization?)
the range 101 - 1000 is missing...
In the question (How many RADIUS client machines do you have?)
is the last range 101?
--
Kostas Zorbadelos
[EMAIL PROTECTED] contact: kzorba (at) otenet.gr
Out there in the darkness
On Sat, Jul 01, 2006 at 12:04:24PM -0400, Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
I saw the cvs version and indeed it contains the code you
describe. This is a very useful feature. The feature is not contained
in the latest stable (1.1.2) version. Will it be in the next
On Wed, Jun 28, 2006 at 04:21:14PM +0300, Kostas Kalevras wrote:
On Wed, 28 Jun 2006, Kostas Zorbadelos wrote:
On Wed, Jun 28, 2006 at 02:09:15PM +0300, Kostas Kalevras wrote:
On Wed, Jun 28, 2006 at 11:56:27AM +0300, Kostas Zorbadelos wrote:
I have a few suspicions where the problem might
On Wed, Jun 28, 2006 at 02:01:24PM -0400, Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
- Any large installations that use freeradius effectively today
(commercial environments preffered). This would give us arguments in
favour of freeradius scalability and reliability
.
Kostas
--
Kostas Zorbadelos
[EMAIL PROTECTED] contact: kzorba (at) otenet.gr
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
On Wed, Jun 28, 2006 at 11:56:27AM +0300, Kostas Zorbadelos wrote:
I have a few suspicions where the problem might be.
Is there a way to define the operator in the radius check attributes
of ldap (without using the generic radiusCheckItem attribute)?
--
Kostas Zorbadelos
[EMAIL PROTECTED
On Wed, Jun 28, 2006 at 02:11:00PM +0300, Kostas Kalevras wrote:
On Wed, 28 Jun 2006, Kostas Zorbadelos wrote:
Hello to everyone.
I have a question regarding a configuration I am trying to achieve. I
have users stored in an ldap database. An example user entry looks
like this:
dn: uid
to have commercial support
Anyone who can contribute arguments or facts is more than welcome.
Kostas
--
Kostas Zorbadelos
[EMAIL PROTECTED] contact: kzorba (at) otenet.gr
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than
On Wed, Jun 28, 2006 at 02:09:15PM +0300, Kostas Kalevras wrote:
On Wed, Jun 28, 2006 at 11:56:27AM +0300, Kostas Zorbadelos wrote:
I have a few suspicions where the problem might be.
Is there a way to define the operator in the radius check attributes
of ldap (without using the generic
--
Kostas Zorbadelos
[EMAIL PROTECTED] contact: kzorba (at) otenet.gr
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
/unsubscribe? See http://www.freeradius.org/list/users.html
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe
On Fri, Feb 18, 2005 at 10:55:57AM +0800, Zhao Yu,SCNB RD NNA(BJ) wrote:
How can I unsubscribe?
http://lists.freeradius.org/mailman/listinfo/freeradius-users
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out
environment, everything seems to be OK. So we are expecting to see the
patch included in the next release.
Thanks again for everything.
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out
!
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
is already applied in our production environment and runs without
problems for a few months.
Thanks a lot
Kostas
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
/unsubscribe? See http://www.freeradius.org/list/users.html
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info
.
if (username and password and ANI) all match then
Accept
else
reject
Thanks a lot,
David
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
On Thu, Nov 11, 2004 at 02:23:36PM +0300, Alexander Serkin wrote:
OK here is the patched file. You can verify it if you diff it with the
original file.
Kostas
Kostas Zorbadelos wrote:
...
I resubmit the patch as a text file (output of
diff sql_oracle.c.before_patch sql_oracle.c
. Our DBA told me that there are database
parameters you can tune that could help (look at cursor_sharing and
instead of the value EXACT use FORCE (for 8i) or SIMILAR (for 9i)).
Kostas
On Thu, Oct 14, 2004 at 11:13:40AM +0200, Roberto Re wrote:
Kostas Zorbadelos wrote:
On Wed, Oct
1.0.1 now with the exec-program-wait because of
rlm_exec resctrictions.
Thanks in advance.
Kostas
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than
On Tue, Oct 26, 2004 at 10:20:48AM -0400, Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
First of all I have a question for Exec-Program-Wait. I need to run an
external C program that expects in its environment a proper
LD_LIBRARY_PATH to run. I followed the obvious solution
://www.freeradius.org/list/users.html
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
75a76,94
On Thu, Oct 14, 2004 at 11:13:40AM +0200, Roberto Re wrote:
Kostas Zorbadelos wrote:
On Wed, Oct 13, 2004 at 06:25:25PM +0200, Roberto Re wrote:
First of all thanks for your attention, Alan
My problem however seems to be more like this:
http://lists.cistron.nl/pipermail/freeradius
.
-
Do you Yahoo!?
New and Improved Yahoo! Mail - 100MB free storage!
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List
755 would be appropriate then.
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http
#!/bin/sh
php -f the/path/to/php/script
Kostas Zorbadelos wrote:
On Mon, Sep 06, 2004 at 02:27:29PM +0300, Edgars wrote:
Hello,
in some way this attribute does not execute my PHP program. I have data
base insert query in this file to test all this. If i execute the *.php
program
On Mon, Sep 06, 2004 at 04:00:43PM +0300, Edgars wrote:
What is the debugging output of radiusd -X?
nope, the same.
Edgars
Kostas Zorbadelos wrote:
On Mon, Sep 06, 2004 at 03:12:47PM +0300, Edgars wrote:
with permissions there are no problems, i tried also your chmod options
it as it
is, it's RLM_MODULE_REJECT with the below patch... Would
RLM_MODULE_FAIL be better? (Changes return 1 at src/main/exec.c:390
to return 2... This
I guess RLM_MODULE_FAIL would be better here.
--
Regards,
Thor Spruyt
I also agree with Thor's input.
--
Kostas Zorbadelos
of exec-program
attribute?
Edgars
So you don't need to store it in radreply table. Your external script
will enrich the attributes returned to the client by adding the
Session-Timeout.
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out
on the matter.
Thanks
Kostas
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
Autz-Type CLID{
callerid {
fail=reject
}
}
In this case when the external script returns a non zero exit code or
fails I get an Access-Reject
On Thu, Aug 26, 2004 at 05:19:06PM +0300, Kostas Zorbadelos wrote:
Hello to everyone.
I had sent 2 compile issues of freeradius-1.0.0 on Solaris 2.8, gcc
2.95.3
I can see that ltdl.h is not in the include path passed to gcc but in
./libltdl/ltdl.h. The problem is solved if we use
(very big Acct-Session-Id will cause oracle error (ORA-01401: inserted
value too large for column)
Environment:
Solaris 8, gcc 2.95.3, Oracle 8.1.7
Attached are the outputs of
gdb executable core with the bt and also output of truss
Kostas
--
Kostas Zorbadelos
Systems Developer, Otenet
On Fri, Sep 03, 2004 at 08:54:42AM -0500, Dave Weis wrote:
On Fri, 3 Sep 2004, Kostas Zorbadelos wrote:
OK, it seems bugs.freeradius.org is experiencing problems.
I submit the bug here with the corresponding debugging outputs. When
the problems are restored, I will submit it in bugs also
and you confirm that.
Anyway, i will submit a gdb traceback in bugs.freeradius.org. I only
hope that I will have time to do it today.
There is too much expertise here, to let the bug get away...
Thanks
Kostas
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL
versions? If so, how can I accomplish my scenario?
I need to make a decision for an imminent project.
Thanks in advance
Kostas
--
Kostas Zorbadelos
Systems Developer, Otenet SA
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight
? See http://www.freeradius.org/list/users.html
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe
output.
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
My environment is Solaris 2.8, gcc 2.95.3, Oracle 8.1.7.
Freeradius crashes (and core dumps) after an sql query causes an error
with an Oracle backend database.
Yuck.
First of all in oraclesql.conf there is a typo
?
Thanks for any help.
Kostas
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http
On Thu, Aug 26, 2004 at 11:15:57AM -0400, Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
gcc -fcse-skip-blocks -fexpensive-optimizations -finline-functions
-fomit-frame-pointer -O3 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -DOPENSSL_NO_KRB5
-Wall -D_GNU_SOURCE -DNDEBUG -I
/list/users.html
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out there in the starlight, one soul burns brighter
than a thousand suns.
-
List info/subscribe/unsubscribe? See http
and
the preproxy_users are said to be 'experimental' which one would you
recommend for use in a production environment? Is any of this going to
go away in 1.0.0 or the future?
Thanks for everything.
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL PROTECTED]
Out
At Mon, 14 Jun 2004 14:09:45 -0400,
Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
I would like to know if and how it is possible to modify an accounting
and an authentication request
packet that is going to be proxied to a specific realm.
Ues. Use the preproxy
At Mon, 14 Jun 2004 14:09:45 -0400,
Alan DeKok wrote:
Kostas Zorbadelos [EMAIL PROTECTED] wrote:
I would like to know if and how it is possible to modify an accounting
and an authentication request
packet that is going to be proxied to a specific realm.
Ues. Use the preproxy
that is going to be
proxied at realm X before it gets proxied.
I would appreciate any suggestions.
Thanks in advance
Kostas
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out
.
Robert Hof
Internet Architect
Transact Bermuda
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
--
Kostas Zorbadelos
Currently at: Otenet IT Department
mailto: [EMAIL PROTECTED]
Out there in the darkness, out there in the night
out
-Use=2)
can I reject him if he tries to loggin as an ADSL at the same time?
Looking forward to your answer to also learn the role of your module.
Kostas
On Mon, 5 Apr 2004, Kostas Zorbadelos wrote:
Hello to everyone.
I have the following problem where I work. We have a user, lets say
I'm sorry for misleading you, you can't configure it this way.
On Tue, Apr 06, 2004 at 09:46:33AM +0400, Alexander M. Pravking wrote:
On Mon, Apr 05, 2004 at 08:16:24PM +0300, Kostas Zorbadelos wrote:
Hello to everyone.
I have the following problem where I work. We have a user, lets say
Hi to everyone.
I send this a week ago. Has this been answered before or is it not
clear somehow? I searched the archives and found nothing. If I can
help giving more information please let me know. I would really like
to know about this behaviour.
Thanks in advance.
---BeginMessage---
Hello
Hello to everyone.
Yesterday I installed freeradius-0.9.3 on a Solaris 2.7 production
environment. I use sql module and oracle as my database to store
accounting. I first try to store the accounting data in the database
and afterwards I write them in files with the detail module. The
problem is
Hello.
In a Solaris 2.7 I compiled the latest freeradius release (0.9.3) with
gcc 2.95.3. I use it in a production environment with the sql module
and an Oracle database.
When I change a configuration file and send the HUP signal to the
server, sometimes the server is killed. I also notice that
68 matches
Mail list logo
