Re: Pptpd / MySql / MD5

2008-05-07 Thread Nicholas Hall
On Wed, May 7, 2008 at 2:03 PM, Sascha Kiefer [EMAIL PROTECTED] wrote:

 Hi,

 Thanks to http://wiki.freeradius.org/PopTop i can authenticate my vpn
 users
 using an remote radius server using MS-CHAPv2
 Passwords are stored in clear in the mysql database.
 PopTop is responsible for the remoteip.
 Everything works.
 Now, is it possible?
 * to use md5 passwords in db; i had this in the first place but
 authentication failed


CHAP requires passwords to be stored in plaintext on the backend.


 * achieve the following: user A is logged in from workstation X; dont let
 him log in from workstation Y as long he is logged in from X


I believe Simultaneous-Use is what you're looking for.  Documentation on
this is included in the source.

-- 
Nicholas Hall
[EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Question about forum

2008-01-24 Thread Nicholas Hall
On Jan 24, 2008 3:14 PM, Marinko Tarlac [EMAIL PROTECTED] wrote:

 I saw that freeradius project has his own chat channel but what about
 forum? I read all emails in this list and some of these mails should be
 available on some kind of forum so we can share experience.

 What do you think?


What's wrong with sharing your experiances with the list?  Adding a forum
will be just another place I'll have to check to get my FreeRADIUS fix.

-- 
Nicholas Hall
[EMAIL PROTECTED]
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Virtual Hosts conflicting

2008-01-04 Thread Nicholas Hall
On Jan 3, 2008 3:31 PM, Alan DeKok [EMAIL PROTECTED] wrote:

 Nicholas Hall wrote:
  *My Goal*: PAP on legacy port 1645, CHAP on 1812 working simultaneously.

  All you need to do is to configure two listen sections.  This can be
 done in 1.1.7.  You don't need two virtual servers.


The problem is that my PAP users are in a different location in LDAP.  This
is why I created two more instances of the LDAP module pointing to a
different basedn.


  *My Environment*: FreeRADIUS 2.0.0-pre2, LDAP user database, MySQL
  Accounting.

  Please don't use -pre2.  I'll be removing it from the web site soon,
 as we plan on releasing 2.0.0 within a *very* short while.  i.e. grab a
 copy of the source from CVS, and use that.


I'm actually running a CVS snapshot from a while back.  It seems to be
working fine -- my plan was to continue running it until 2.0.0 is released.


  *Problem*: I'm running a virtual host for each AUTH port.  Each works
  fine when placed in sites-enabled individually but my CHAP virtualhost
  fails when both are enabled.  The vhost listening on 1812 appears to be
  referencing an LDAP module that is not listed in it's server{ ... }
  block.  You will see ou=Dialup in the debugging output below of a CHAP
  request to 1812 that is only contained in the legacy PAP vhost.  Any
  ideas are appreciated!!

  Please read the *entire* debug log.  It's not just doing an LDAP query
 at random.  It's doing an LDAP query because you're using the LDAP-Group
 attribute in line 16 of the users file.

  If you don't want a virtual server to do LDAP lookups, don't configure
  it to use the LDAP-Group attribute.


Thanks.  Things are working after removing the LDAP-Group attribute.  I'm
not 100% sure why but for now I'm not going to worry about it!

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring LDAP for query ONLY...

2008-01-04 Thread Nicholas Hall
On Jan 4, 2008 9:54 AM, Eric Martell [EMAIL PROTECTED] wrote:

 Hi Ivan,
  Actually in the implementation we are going to treat
 on the website zipcode as a password field. we are
 asking people to enter username and zipcode which is
 store in the LDAP Schema.

 In the radius, I am going to receive username
 (User-Name) and zipcode ( User-Password). In the ldap
 module do query
 filter =

 ((uid=%{Stripped-User-Name:-%{User-Name}})(entitlements=WIFILOC1)(zipcode=%{User-Password}))

 and depends on the resultset, give access or reject.

 Please let me know if this clear and any other better
 way to handle this in radius.


Couldn't you just map zipcode to the password attribute in ldap.attrmap:

checkItem Cleartext-Password  zipcode

you could then exclude the zipcode condition from your ldap filter as
FreeRADIUS should do the work.
-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Virtual Hosts conflicting

2008-01-03 Thread Nicholas Hall
-Name} =~ /^([EMAIL PROTECTED])@alexssa.net$/) - TRUE
++- entering if (%{User-Name} =~ /^([EMAIL PROTECTED])@alexssa.net$/)
expand: %{1} - 1000copyme
+++[request] returns notfound
++- if (%{User-Name} =~ /^([EMAIL PROTECTED])@alexssa.net$/) returns notfound
++[preprocess] returns ok
expand:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -
/usr/local/var/log/radius/radacct/38.119.185.62/auth-detail-20080103
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to
/usr/local/var/log/radius/radacct/38.119.185.62/auth-detail-20080103
expand: %t - Thu Jan  3 15:19:46 2008
++[auth_log] returns ok
rlm_ldap: Entering ldap_groupcmp()
expand: ou=Dialup,ou=users,ou=radius,dc=alexssa,dc=net -
ou=Dialup,ou=users,ou=radius,dc=alexssa,dc=net
expand: %{Stripped-User-Name} - 1000copyme
expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -
(uid=1000copyme)
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to ldap02.alexssa.net:389, authentication 0
rlm_ldap: bind as cn=x,dc=alexssa,dc=net/xx to
ldap02.alexssa.net:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in
ou=Dialup,ou=users,ou=radius,dc=alexssa,dc=net, with filter (uid=1000copyme)
rlm_ldap: object not found or got ambiguous search result
rlm_ldap::ldap_groupcmp: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
rlm_ldap: Entering ldap_groupcmp()
expand: ou=Dialup,ou=users,ou=radius,dc=alexssa,dc=net -
ou=Dialup,ou=users,ou=radius,dc=alexssa,dc=net
expand: %{Stripped-User-Name} - 1000copyme
expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -
(uid=1000copyme)
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in
ou=Dialup,ou=users,ou=radius,dc=alexssa,dc=net, with filter (uid=1000copyme)
rlm_ldap: object not found or got ambiguous search result
rlm_ldap::ldap_groupcmp: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
users: Matched entry DEFAULT at line 16
++[files] returns ok
++- entering redundant-load-balance group
rlm_ldap: - authorize
rlm_ldap: performing user authorization for [EMAIL PROTECTED]
expand: %{Stripped-User-Name} - 1000copyme
expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) -
(uid=1000copyme)
expand: ou=users,ou=radius,dc=alexssa,dc=net -
ou=users,ou=radius,dc=alexssa,dc=net
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to ldap02.alexssa.net:389, authentication 0
rlm_ldap: bind as cn=x,dc=alexssa,dc=net/xx to
ldap02.alexssa.net:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in ou=users,ou=radius,dc=alexssa,dc=net, with
filter (uid=1000copyme)
rlm_ldap: looking for check items in directory...
rlm_ldap: LDAP attribute userPassword as RADIUS attribute Cleartext-Password
== test1234
rlm_ldap: looking for reply items in directory...
rlm_ldap: user [EMAIL PROTECTED] authorized to use remote access
rlm_ldap: ldap_release_conn: Release Id: 0
+++[ldap02.alexssa.net] returns ok
++- redundant-load-balance group  returns ok
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
++[daily] returns noop
  rlm_chap: WARNING: Auth-Type already set.  Not setting to CHAP
++[chap] returns noop
  rad_check_password:  Found Auth-Type Reject
  rad_check_password: Auth-Type = Reject, rejecting user
auth: Failed to validate the user.
Login incorrect: [EMAIL PROTECTED]/CHAP-Password] (from client test
port 0)
} # server alexssa_dsl
  Found Post-Auth-Type Reject
+- entering group REJECT
expand: %{User-Name} - [EMAIL PROTECTED]
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Sending delayed reject for request 0
Sending Access-Reject of id 15 to 38.119.185.62 port 3563
Reply-Message = Please call the helpdesk.  Alexssa can be reached
at 262-338-3742
Waking up in 4 seconds...
Cleaning up request 0 ID 15 with timestamp +17
Nothing to do.  Sleeping until we see a request.

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Convert from [EMAIL PROTECTED] to domain\user

2007-11-27 Thread Nicholas Hall
On Nov 27, 2007 9:40 PM, Robert Graham [EMAIL PROTECTED] wrote:

 Hi all

 I am a newbie to freeradius and I have searched the internet and all the
 documentation I can find, however I cannot find a simple solution to the
 following problem.

 I want to have the freeradius server act as a proxy and receive radius
 requests in the form [EMAIL PROTECTED] but then pass these requests to another
 server that needs to have the request in domain\user format.

 It would seem to be a simple format issue which you should be able to
 create
 an output template or something but I don't have a clue.

 Running freeradius v 1.188.2.4.2.12


 Rob Graham


Hey Rob - I'd first upgrade to 1.1.7.

I think you can put:

DEFAULT User-Name =~ ^([EMAIL PROTECTED])@realm.com, NAS-IP-Address == 
127.0.0.1
 User-Name := %{1}\realm.com


http://wiki.freeradius.org/Adding%2C_Removing%2C_Modifying_Attributes_for_further_processing



-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and Quintum help plz

2007-08-29 Thread Nicholas Hall
On 8/29/07, Pretty Woman [EMAIL PROTECTED] wrote:

 Hello,

 I need to configure freeradius to make accounting with
 Quintum. Where do I start ? What do I need to know in
 order to do that ?

 I already installed and tested version 1.1.7 and have
 a mysql or pgsql server but I dont know what steps to
 take yet.

 What structure should the tables in the database have
 in order to work with radius ?
 How do I include dictionary.quintum ? (as I read that
 it's needed)
 Is it enough to set this parameters in postgresql.conf
 ?
 server = ...
 login = ...
 password = ...
 radius_db = ...

 Thanks



Included in the source is mysql and pgsql database schemas.  You will need
to create the database yourself: (create database radius;) then import the
schema.  In mysql you can do the following: mysql -u root -p radius 
schema.sql

After the DB is setup you will then want to configure the *.conf with
server, login, password, etc.  If all is well, you can simply insert the
respective sql module in the accounting section of radiusd.conf and watch as
your table is populated.

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Looking for a RADIUS GUI CLIENT

2007-08-29 Thread Nicholas Hall
On 8/29/07, George Beitis [EMAIL PROTECTED] wrote:

 Hi everyone,
 a bit irrelevant but i am looking for a client with a GUI to test my
 freeradius server.  Something that can actually show me responses et
 cetera.  Is there anything like this around?


NTRadPing is pretty nice for testing PAP/CHAP in Windows.  Else radclient is
included with FreeRADIUS and works great at the CLI.

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Simple Freeradius configuration

2007-08-15 Thread Nicholas Hall
On 8/15/07, Kelly Ormsby [EMAIL PROTECTED] wrote:

 Hi all,

 I've installed freeradius 1.1.6 on Fedora core 2 (kernel 2.6.5-1.358) (I
 can't upgrade please don't go there). I did a basic configure/make/make
 install.

 The only changes to the default configuration is adding an entry to the
 clients.conf file to allow requests from the Cisco VPN gateway. So far as
 I can tell CHAP and CHAPv2 should work straight out of the box (as per this
 page http://deployingradius.com/documents/configuration/auth_type.html).

 I've tried to authenticate using a local /etc/passwd user, and I get the
 output posted below. Is the default configuration enough for it to consult
 the /etc/passwd files (I thought that is what DEFAULT Auth-Type = System
 did?) or is there something else I need to add. Can CHAP (or CHAPv2) use
 /etc/passwd? I'm a little confused about the differences and I'm sure thats
 not helping :)

 I'd really rather not list the users individually in the users file, I'd
 like there to still only be one place to add users, so I'd like to use
 /etc/passwd file only. I apologise if there is documentation listed on this,
 I really feel that I've searched everywhere I can and no one seems to give
 real details.


CHAP requires a clear text password.  Tell your client to use PAP.  I
believe it will work without any configuration on the server.

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuration issue - unknown client

2007-08-13 Thread Nicholas Hall
On 8/13/07, Dan O'Reilly [EMAIL PROTECTED] wrote:

 This is my first stab at Freeradius.  I have the server installed on
 Sabayon Linux, and the radtest script runs fine.  I've done basically no
 configuration to it, because I'm not sure what to configure.

 I'm writing a client on another system (it's VMS if that's germane).  I
 format  send a request packet to the server system, and get (running
 radiusd -X):

 rad_recv: Access-Request packet from host 192.168.0.11:1812, id=67,
 length=47
 Ignoring request from unknown client 192.168.0.11:1812


You need to add new clients to clients.conf.  FreeRADIUS will only talk to
clients in this file.

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius client in on Server, Freeradius on another Server

2007-08-13 Thread Nicholas Hall
On 8/13/07, ram [EMAIL PROTECTED] wrote:

 Hi


 I have radius client installed in my server

 and freeradius and mysql installed in other server

 how can i connect them ? what configs i need to change

 ram


You will need to add the client in clients.conf on the server

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuration issue - unknown client

2007-08-13 Thread Nicholas Hall
On 8/13/07, Dan O'Reilly [EMAIL PROTECTED] wrote:

 Same issue.  Here's my /etc/raddb/clients.conf:

 client 192.168.0.11
 secret foobar


Shouldn't that be:

client 192.168.0.11 {
  secret = foobar
}

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuration issue - unknown client

2007-08-13 Thread Nicholas Hall
On 8/13/07, Dan O'Reilly [EMAIL PROTECTED] wrote:

 I had it that way and it didn't work either.

 At 04:27 PM 8/13/2007, Nicholas Hall wrote:
 On 8/13/07, Dan O'Reilly mailto:[EMAIL PROTECTED][EMAIL PROTECTED]
 wrote:
 Same issue.  Here's my /etc/raddb/clients.conf:
 
 client http://192.168.0.11192.168.0.11
 secret foobar
 
 
 Shouldn't that be:
 
 client http://192.168.0.11192.168.0.11 {
secret = foobar
 }
 


Dan, please follow the examples in clients.conf and then post your complete
radius debug output (radiusd -X)

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: redirect authentication to a different radius box based on userdomain

2007-08-09 Thread Nicholas Hall
On 8/9/07, Warren Maurer [EMAIL PROTECTED] wrote:

 Ivan,
 Thank You for the link to the proxy page. Unfortunately I am new to radius
 and have not been able to get it figured out. I have freeradius running on
 a
 Debian server. There is an entry in the proxy.conf file that states it was
 added to strip out domain;
 Realm DEFAULT {
 Type=radius
 Authhost = LOCAL
 Accthost = LOCAL
 }
 I am not sure where, relative to this entry, I need to add the entry for
 the
 other domain to forward authentication. I have not found any documentation
 that explains more detail about the proxy.conf file. If anyone can give me
 an explanation of how to do this or provide a link to a site that explains
 more about the proxy.conf file I would appreciate it.

 Thanks again.
 Warren


Linked from the Proxy page is http://wiki.freeradius.org/Proxy.conf

I believe there is plenty of information there to get you started

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Stripping domain from username

2007-08-07 Thread Nicholas Hall
}
  }
 Module: Checking session {...} for more modules to load
 Module: Checking post-auth {...} for more modules to load
 Module: Instantiating attr_filter.access_reject
  attr_filter attr_filter.access_reject {
attrsfile = /usr/local/etc/raddb/attrs.access_reject
key = %{User-Name}
  }
 }
}
Initializing the thread pool...
Listening on authentication address * port 1812
Listening on accounting address * port 1813
Ready to process requests.
Nothing to do.  Sleeping until we see a request.
rad_recv: Access-Request packet from host 127.0.0.1 port 1027, id=101,
length=83
User-Name = [EMAIL PROTECTED]
User-Password = polaris
Service-Type = Framed-User
NAS-Port = 2067
NAS-IP-Address = 127.0.0.1
NAS-Port-Type = Async
+- entering group authorize
++[preprocess] returns ok
expand:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d -
/usr/local/var/log/radius/radacct/127.0.0.1/auth-detail-20070807
rlm_detail:
/usr/local/var/log/radius/radacct/%{Client-IP-Address}/auth-detail-%Y%m%d
expands to /usr/local/var/log/radius/radacct/127.0.0.1/auth-detail-20070807
expand: %t - Tue Aug  7 10:10:30 2007
++[auth_log] returns ok
++[chap] returns noop
rlm_ldap: Entering ldap_groupcmp()
expand: ou=users,ou=radius,dc=alexssa,dc=net -
ou=users,ou=radius,dc=alexssa,dc=net
expand: %{Stripped-User-Name} -
expand: %{User-Name} - [EMAIL PROTECTED]
expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) - (uid=
[EMAIL PROTECTED])
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to ldap02.alexssa.net:389, authentication 0
rlm_ldap: bind as cn=root,dc=alexssa,dc=net/62b879A to
ldap02.alexssa.net:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in ou=users,ou=radius,dc=alexssa,dc=net, with
filter ([EMAIL PROTECTED])
rlm_ldap: object not found or got ambiguous search result
rlm_ldap::ldap_groupcmp: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
rlm_ldap: Entering ldap_groupcmp()
expand: ou=users,ou=radius,dc=alexssa,dc=net -
ou=users,ou=radius,dc=alexssa,dc=net
expand: %{Stripped-User-Name} -
expand: %{User-Name} - [EMAIL PROTECTED]
expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) - (uid=
[EMAIL PROTECTED])
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=alexssa,dc=net, with
filter ([EMAIL PROTECTED])
rlm_ldap: object not found or got ambiguous search result
rlm_ldap::ldap_groupcmp: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
users: Matched entry DEFAULT at line 16
++[files] returns ok
++- entering redundant-load-balance group
rlm_ldap: - authorize
rlm_ldap: performing user authorization for [EMAIL PROTECTED]
expand: %{Stripped-User-Name} -
expand: %{User-Name} - [EMAIL PROTECTED]
expand: (uid=%{%{Stripped-User-Name}:-%{User-Name}}) - (uid=
[EMAIL PROTECTED])
expand: ou=users,ou=radius,dc=alexssa,dc=net -
ou=users,ou=radius,dc=alexssa,dc=net
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: performing search in ou=users,ou=radius,dc=alexssa,dc=net, with
filter ([EMAIL PROTECTED])
rlm_ldap: object not found or got ambiguous search result
rlm_ldap: search failed
rlm_ldap: ldap_release_conn: Release Id: 0
+++[ldap02.alexssa.net] returns notfound
++- redundant-load-balance group  returns notfound
rlm_counter: Entering module authorize code
rlm_counter: Could not find Check item value pair
++[daily] returns noop
rlm_pap: Found existing Auth-Type, not changing it.
++[pap] returns noop
  rad_check_password:  Found Auth-Type Reject
  rad_check_password: Auth-Type = Reject, rejecting user
auth: Failed to validate the user.
Login incorrect (rlm_ldap: User not found): [EMAIL PROTECTED]/polaris]
(from client localhost port 2067)
  Found Post-Auth-Type Reject
+- entering group REJECT
expand: %{User-Name} - [EMAIL PROTECTED]
 attr_filter: Matched entry DEFAULT at line 11
++[attr_filter.access_reject] returns updated
Delaying reject of request 0 for 1 seconds
Going to the next request
Sending delayed reject for request 0
Sending Access-Reject of id 101 to 127.0.0.1 port 1027
Reply-Message = Please call the helpdesk.
Waking up in 4 seconds...
Cleaning up request 0 ID 101 with timestamp +95
Nothing to do.  Sleeping until we see a request.

-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Stripping domain from username

2007-08-07 Thread Nicholas Hall
Alan - Thanks!  Worked like a charm.

unlang looks very cool and powerful addition to FreeRADIUS... the
documentation is awesome too.  Great job!

On 8/7/07, Alan DeKok [EMAIL PROTECTED] wrote:

 Nicholas Hall wrote:
  According to what I've read the HINTS file is the best place to do
  this.  Here is relevant portions of my config running CVS from
  2007-08-01.  It's my understanding that with Strip-User-Name = Yes,
  FreeRADIUS will rewrite the User-Name attribute without the domain
  specified.

   The server doesn't do that.  You've got to tell it what part is the
 username, and what part is the domain name.

 
 
  DEFAULT Suffix == @alexssa.net, Strip-User-Name = Yes

   In the CVS head, you can use the new unlang feature, in the
 authorize section:

 authorize {
 ...
 if (%{User-Name} =~ /^(.*)@alexssa.net$/) {
 update request {
 Stripped-User-Name = %{1}
 }
 }
 ...

   See man unlang for details.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-- 
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS Server Backend

2007-07-24 Thread Nicholas Hall

I believe http://wiki.freeradius.org/Modules#Available_Modules will give you
an idea

On 7/24/07, Gaurav Bandekar [EMAIL PROTECTED] wrote:




Hi all,



What are the different backend data stores supported by the RADIUS Server?



Thanks  Regards

Gaurav



-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html





--
Nicholas Hall
[EMAIL PROTECTED]
262.208.6271
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS user Survey

2006-10-05 Thread Nicholas Hall
On 10/5/06, Alan DeKok [EMAIL PROTECTED] wrote:
Guilherme Franco [EMAIL PROTECTED] wrote: Survey Not FoundWhoops... the make active link didn't work.I poked it again.
I was now able to successfully complete the survey.-- Nick HallAlexssa Enterprisesp: 262.338.3742m: 262.208.6271Never lose your data!Try it free at 
www.neverlosedata.com.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS 1.0.5 has been released

2005-09-13 Thread Nicholas Hall
On 9/13/05, Alan DeKok [EMAIL PROTECTED] wrote:
   See www.freeradius.org for download information.
 
   This version has a LOT of fixes over 1.0.4, including security
 fixes.  We suggest everyone upgrade to 1.0.4.
 
   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
 

Excellent!  Keep up the good stuff coming :)

-- 
Nick Hall
Alexssa Enterprises
p: 262.338.3742
m: 262.208.6271
Never lose your data!  Try it free at www.neverlosedata.com.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Gentoo and FreeRADIUS

2004-05-10 Thread Nicholas Hall

-Original message-
From: Jeff Bilder [EMAIL PROTECTED]
Date: Mon, 10 May 2004 15:03:28 -0500
To: [EMAIL PROTECTED]
Subject: Gentoo and FreeRADIUS

 Has anyone successfully gotten FreeRADIUS to run with Gentoo.   [especially using 
 PAM_AUTH].  I'm in need of some assistance.  Thanks!
 
 - Jeff

Yes.  emerge net-dialup/freeradius


___
This message was scanned and certified Virus Free by Alexssa | HNet.
www.alexssa.net
www.hnet.net

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html