Suse rpm in 2.1.4

@@ /usr/sbin/radrelay /usr/sbin/radwatch /usr/sbin/radmin +/usr/sbin/raddebug # man-pages %doc %{_mandir}/man1/* %doc %{_mandir}/man5/* Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Migration from TACACS+ to RADIUS

. That will help with migration. Can this be expected in the foreseeable future? Norbert Wegener Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

otp daemon for use with freeradius

in otp.conf an otpd is mentioned for use with freeradius. According to the licence the daemon can only be used with tokens from tri-dsystems. Is there another otpd around that is free? Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

server selection

enterasys { 1.1.1.1 is a nas belonging to the server cisco, 149.246.185.169 belongs to the server enterasys. I would have expected, the server is choosen because of the NAS-IP-Address. Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: server selection

Alan DeKok schrieb: Norbert Wegener wrote: freeradius 2.1.1, configured to use multiple virtual servers, seems to select the server to use depending on the host sending the request, not depending on the NAS-IP-Address in the request. Yes. See raddb/sites-available/README. When

Re: server selection

Alan DeKok schrieb: Norbert Wegener wrote: That configuration can be added manually, by doing internal proxying to the virtual server. Will this also be possible, when freeradius gets its information out of a mysql database? Of course! The only place to modify

ownership change

the ownership still be radiusd.radiusd ? Norbert Wegener -- Norbert Wegener Siemens IT Solutions

radmin SIGABRTs freeradius 2.1.1

) at radiusd.c:394 Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Compile Error :FreeRadius v 2.1.1 RPM build error

See: http://lists.freeradius.org/pipermail/freeradius-users/2008-September/msg00659.html Norbert Wegener Syed Anwarul Hasan schrieb: Hi Ala, Ivan and all, Alan as I having backtrace problem in my FreeRadius v 2.0.5. http://2.0.5. I deleted all the old binaries and libraries

Suse 10.3 build problem with 2.1.1

/var/tmp/rpm-tmp.28328 (%build) I have build former version of freeradius on that machine. This error did not occure before. Norbert Wegener -BEGIN PGP SIGNATURE- Version: GnuPG v1.4.6 (GNU/Linux) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org

Re: Suse 10.3 build problem with 2.1.1

Alan DeKok schrieb: Norbert Wegener wrote: Building Suse rpms on 10.3 I get the following error: Err... the spec file is re-building the configure script? Why? + autoreconf okay, after commenting autoreconf out in the specfile everything builds as expected. Thanks

Re: 1.Troubleshooting MySQL Connections , 2. troubleshooting possible memory leak

1 .Maybe max_connections in the MySQL config file should also be increased and Mysql be restarted. 2. No idea except upgrading. Norbert Wegener Stefan A. schrieb: Gurus, in my radiusd.log, I can see lots of these errors: Wed Sep 24 09:40:54 2008 : Info: rlm_sql (sql_accounting

Logging problem

. Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Logging problem

] Handler failed in EAP/tls [eap] Failed in EAP select ++[eap] returns invalid Failed to authenticate the user. } # server cisco Using Post-Auth-Type Reject +- entering group REJECT {...} ... Alan DeKok schrieb: Norbert Wegener wrote: It seems, if (invalid) is not entered and I don't see why

Re: Logging problem

Thanks, that works. Norbert Wegener Alan DeKok schrieb: Norbert Wegener wrote: If fear not... Hmm... if this is in the authenticate section, then the rules are different. The authenticate section is processed by selecting *one* module / section from the list. That *one* module

Re: Version 2.1.0 has been released.

= no auth_badpass = no auth_goodpass = no } Maybe I missed something? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Version 2.1.0 has been released.

The new /usr/sbin/radmin is missing in %files section of the suse specfile. When added the packages will be build correctly. Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

unlang question

-Medium-Type = IEEE-802 Tunnel-Type = VLAN } } To reduce sql queries I want to avoid the second. Can I store the result of the first query and use the value to assign Tunnel-Private-Group-ID? Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http

Re: virtual server and clients from sql

Alan DeKok wrote: Norbert Wegener wrote: will this be in 2.0.6 by default? Yes. It's also in 2.0.5, if you're willing to try it out in a testing environment. I will try it, but what about the comment from [EMAIL PROTECTED]: the logic is in rlm_sql.c alrady, all you need

Re: virtual server and clients from sql

and modify nas_query in the config it will do the required task. Correct, thanks. I have been confused by the nas_query in rlm_sql.c Norbert Wegener alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http

ASSERT FAILED

Message-Authenticator = 0x32f28212809676b99d5943988a714aa8 FreeRADIUS-Statistics-Type = Authentication ASSERT FAILED stats.c[318]: request-listener-type == RAD_LISTEN_NONE Abgebrochen Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: ASSERT FAILED

== RAD_LISTEN_NONE Abgebrochen have you enabled the statistics virtual server? copy or link the entry in sites-available/ In radiusd.conf: status_server = yes If you mean the status file from sites-available: It is linked to sites-enabled. Norbert Wegener alan - List info

Re: ASSERT FAILED

Alan DeKok wrote: Norbert Wegener wrote: As snmp is not available right now, I am looking in how to deal with statistics, status_server and played a bit. This way I was able to kill freeradius... Whoops. The intent was to allow Status-Server to any port, but to permit

virtual server and clients from sql

is ignored. Maybe the SELECT statement in rlm_sql.c has to be modified? Or do I have to configure anything else? Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: virtual server and clients from sql

need to do is update your nas_query so that it looks like eg SELECT id,nasname,shortname,type,secret,virtual_server FROM nas then it'll pull in the details from the DB Thanks, will this be in 2.0.6 by default? Norbert Wegener alan - List info/subscribe/unsubscribe? See http

compile error on suse 10.3

(but unpackaged) file(s) found: /etc/raddb/sql/oracle/msqlippool.txt Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Dynamic clients from SQL.

As it seems to me: if (%{sqlnastype: SELECT nasname FROM nas WHERE nasname = %{Packet-Src-IP-Address}}) { misses some ': if (%{sqlnastype: SELECT nasname FROM nas WHERE nasname = '%{Packet-Src-IP-Address}'}) { works. Norbert Wegener Alan DeKok schrieb: $ cvs update $ more raddb/sites

Parser problem?

++- if (!( %{User-Name} =~ /HOST/ || %{User-Name} =~ /.net/ || %{User-Name} =~ /@/ )) returns ok^M ++? if (%{sqlnastype:SELECT UserName from usergroup where UserName = '%{User-Name}' } == )^M What do I have to change to make it work as expected? Norbert Wegener - List info/subscribe

SNMP in 2.0.2: segmentation Fault

Fault I can reproduce this, by killing the snmpd. Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: mideye authentication

.. See rlm_example for a simple C challenge-response authentication module. You may also need a consistent State attribute. That code is in rlm_eap, but should probably be pulled into src/main, because other modules may need it, too. Thanks, that was the missing link. Norbert Wegener

Re: mideye authentication

Norbert Wegener wrote: Alan DeKok wrote: Norbert Wegener wrote: It should be simple to generate a one time password, throw it into a database,send it via sms and make it available for the next time, the user requests access. The problem here seems to be, that after a first successfull

Re: mideye authentication

Alan DeKok wrote: Norbert Wegener wrote: It should be simple to generate a one time password, throw it into a database,send it via sms and make it available for the next time, the user requests access. The problem here seems to be, that after a first successfull authentication another one

mideye authentication

, the user requests access. The problem here seems to be, that after a first successfull authentication another one with only a new password but the already entered username has to be done. Can this be realised with an actual freeradius? If so: Where can I find documentation about it? Norbert

Re: eap authentication and cpu utilization

Alan DeKok schrieb: Norbert Wegener wrote: Just for information: I made some tests on different machines. Around 60% of the theoretical maximum was the best value I got. The behaviour was heavy influenced by the parameters in the thread pool section and num_sql_socks, as I have a database

Re: eap authentication and cpu utilization

Just for information: I made some tests on different machines. Around 60% of the theoretical maximum was the best value I got. The behaviour was heavy influenced by the parameters in the thread pool section and num_sql_socks, as I have a database backend. Norbert Wegener Alan DeKok wrote

Re: Version 2.0.2 has been released.

Is this the normal message when the server is too busy? Norbert Wegener Alan T DeKok schrieb: People using EAP should definitely upgrade. Feature improvements * Added notes on how to debug the server in radiusd.conf * Moved all log_* in radiusd.conf to log{} section

eap authentication and cpu utilization

of eap authentications per second, that a recent x86 cpu is able to handle? Or did someone some practical research on that issue? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: eap authentication and cpu utilization

of that theoretic value can be reached in practise with a database backend on the same machine where beside freeradius and the database nothing else is running? Norbert Wegener Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe

Re: EAP session matching the State variable.

As usually, Alan has made a great job. After more than 7 eap authentications everything is still working fine. The bug is obviously fixed. Thanks Alan Norbert Wegener Norbert Wegener wrote: I am runnning those tests at the moment with the modified version. I will post the result

Re: EAP session matching the State variable.

I am runnning those tests at the moment with the modified version. I will post the result of 7 authentications later. Norbert Wegener Sebastian Heil wrote: is there anything, i can try to test? $ cvs update $ cd src/modules/rlm_eap $ make clean $ make ... and re-run the tests

EAP session matching the State variable.

. Found Post-Auth-Type Reject +- entering group REJECT This does not sound good, as there is no real load on the server and the same client will be authenticated some time later without configurational changes. If neccessary, I can provide the long log. Norbert Wegener - List info/subscribe

Re: EAP session matching the State variable.

The complete log is at http:// www.wegener-net.de/freeradius/ (url destroyed) In line 116518 a client gets a reject, in 119715 the same client an accept. Norbert Wegener Alan DeKok wrote: Norbert Wegener wrote: With 2.0.0 sometimes I get this error message, that I have not seen before

Re: EAP session matching the State variable.

Alan DeKok wrote: Norbert Wegener wrote: The complete log is at http:// www.wegener-net.de/freeradius/ (url destroyed) In line 116518 a client gets a reject, in 119715 the same client an accept. ... State = 0x00030d00 ... It's a 64-bit machine

Re: password failover

Alan DeKok schrieb: Norbert Wegener wrote: your answer lets me assume, the problem is with my configuration :-( The output is at http : //www.wegener-net.de/freeradius/typescript Wed Feb 6 18:02:23 2008 : Debug: rlm_eap_tls: TLS 1.0 Alert [length 0002], fatal certificate_expired

Re: password failover

? Or is this not the right way to do this? If it should work: What's the fault here? Thanks Norbert Wegener Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: password failover

Alan DeKok wrote: Norbert Wegener wrote: Should this kind of mechanism in 2.0.1 also be able to do something similar for eap? I don't see why not. Fine ... This does not work for me. Is it expected to do what I want and I have a configuration error? Or is this not the right

Re: Message-Authenticator

Alan DeKok wrote: Norbert Wegener wrote: In cvs from January 9th I noticed for the first time, that freeradius complains about packets without Message-Authenticator and ignores them: WARNING: Insecure packet from host 145.25.153.222: Packet does not contain required Message-Authenticator

Message-Authenticator

to handle those packets? In clients.conf I have require_message_authenticator = no but the clients come from an sql database. Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rpm for suse

: *** [all] Fehler 2^M error: Bad exit status from /var/tmp/rpm-tmp.36031 (%build)^M ^M ^M RPM build errors:^M Bad exit status from /var/tmp/rpm-tmp.36031 (%build)^M de7018tc:/usr/src/packages/SPECS # exit^M Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list

Reread config files

When I remember correctly, one issue in pre2 had been, that on SIGHUP freeradius did not reread its configration completely. Is this issue already solved in cvs? Will especially the clients be reread by SIGHUP? Norbert Wegener ** - List info/subscribe/unsubscribe? See http://www.freeradius.org

Re: Mysql error

Maybe this helps: http://dev.mysql.com/doc/refman/5.0/en/old-client.html Norbert Wegener Pablo Lucchetti wrote: Hi, I've an error with mysql, I think is php mysql client. I did upgrade to php5 but the erros remains the same. Mysql is Ver 14.12 Distrib 5.0.32, for pc-linux-gnu (i486) using

no logging = reject?

seconds. Waking up in 4.0 seconds. Cleaning up request 0 ID 51 with timestamp +1 Ready to process requests. Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

release date 2.0.0?

Hello Alan, since the release of pre1 half a year has gone. Can you already foresee when the final version will be released? Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

unlang question

{ ... filter-id = Enterasys:version=1:mgmt=su:policy=%{control:Huntgroup-Name} ... } This does not work for me. Trying different quoting do not yet help. Is this possible at all? Norbert Wegener - List info

attribute assignment in post-auth?

| += | +---+---+--+-++ | 0 | HOST/28tef003.ww006.mycompany.net | Fall-Through | Yes | += | +---+---+--+-++ what I would expect. So, what is unexpected with that result? Norbert Wegener - List info/subscribe

Re: attribute assignment in post-auth?

Phil Mayers wrote: Norbert Wegener wrote: With 1.1.7 I want to add attributes to an eap authenticated client. The rules for applying vlan are somewhat unusual, that I decided to use mysql and stored procedures to determine the values that have to be applied. When I call the corresponding sql

Re: Any ideas on this compile error ??

maybe it would help to install libltdl3-dev or something like that? Norbert Wegener Willem Gerber wrote: Hey Guys I cant get radius to compile :/ Linux vaughan 2.6.20-1.2307.fc5 #1 Sun Mar 18 20:44:48 EDT 2007 i686 i686 i386 GNU/Linux /home/willem/freeradius-1.1.7/src/include/modpriv.h:7

variables in 1.1.7

, but this is not true. Is the desired assignment possible at all in 1.1.7 ? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

unlang question

something wrong or is is not null not (yet) implemented? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius going to sleep?

of connections allowed by mysql is exceeded. I did not notice that in former versions of freeradius. Hope this information helps to find the real cause for freeradius going to sleep. Norbert Wegener Norbert Wegener schrieb: Alan DeKok wrote: .. Any other suggestions? Not right now

Received conflicting packet

: 64 due to unfinished request 50783. Giving up on old request. | What causes those messages? I suppose, it might be serious? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: radius going to sleep?

to have a significant influence on the behaviour. With a value of 5, freeradius now is already running for some hours. A value of 20 stops it from working normally within two hours. Maybe I can find out more. Norbert Wegener Alan DeKok. - List info/subscribe/unsubscribe? See http

Re: radius going to sleep?

] Fehler 2 gmake[1]: Leaving directory `/root/radiusd' make: *** [all] Fehler 2 Any other suggestions? Norbert Wegener Alan DeKok schrieb: Norbert Wegener wrote: got the opportunity earlier than expected... The system is suse 10.2. # gdb radiusd 30251 ... (gdb) bt

Re: pre2 cv2 uses 99,9% of cpu

The problem seems to be fixed. Thanks. Norbert Wegener Alan DeKok schrieb: Norbert Wegener wrote: my last popsting was about a sleeping radius. The same version on another machine makes just the opposite: It uses all the cpu power of a 2.4Ghz machine. A gdb output with bt is at: http

Re: radius going to sleep?

Alan DeKok wrote: Norbert Wegener wrote: In a cvs version of pre2, which is newer than pre2, on one machine, after some time of inactivity, freeradius does not seem to answer at all- sometimes, not reliable reproducable. When did you take the CVS snapshot? the cvs is from September

Re: radius going to sleep?

rad_authenticate) at threads.c:847 #23 0x800130f4 in main (argc=2, argv=0xbfaec6e4) at radiusd.c:699 Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

pre2 cv2 uses 99,9% of cpu

my last popsting was about a sleeping radius. The same version on another machine makes just the opposite: It uses all the cpu power of a 2.4Ghz machine. A gdb output with bt is at: http://www.wegener-net.de/freeradius/typescript Norbert Wegener - List info/subscribe/unsubscribe? See http

Re: pre2 cv2 uses 99,9% of cpu

Peter Nixon wrote: On Mon 05 Nov 2007, Norbert Wegener wrote: my last popsting was about a sleeping radius. The same version on another machine makes just the opposite: It uses all the cpu power of a 2.4Ghz machine. A gdb output with bt is at: http://www.wegener-net.de/freeradius/typescript

unlang question

Finished request 1 state 5^M Going to the next request^M The complete output can be found at http://www.wegener-net.de:/freeradius Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_sql error in pre2

My first tests indicate, that it seems to work. Thank you. Norbert Wegener Alan DeKok wrote: Norbert Wegener wrote: In some cases I do not have the need to query for groupmembership. When I undefine group_membership_query, I get the following error: Please do cvs update, rebuild

list problem?

Is there a problem with the list/mailserver? The archives show newer threads, where the last message I received from the list has been from September, 10. It arrived this mornig. If I'm the only one with that problem, sorry. My other mail comes in as usual. Norbert Wegener - List info

no lower_user/lower_pass in pre2 ?

In previous versions of radiusd.conf there has been: lower_user = after lower_pass = after In pre2 this is missing and a grep -r lower_pass on the source tree does not show anything. Is this feature replaced my another one? Norbert Wegener - List info/subscribe/unsubscribe? See http

Re: no lower_user/lower_pass in pre2 ?

Alan DeKok wrote: Norbert Wegener wrote: In previous versions of radiusd.conf there has been: lower_user = after lower_pass = after In pre2 this is missing and a grep -r lower_pass on the source tree does not show anything. Is this feature replaced my another one? No. I

rlm_sql error in pre2

availability of groupmembership would be more helpful than an error ? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

unlang question

such an authorize_reply_query or even the authorize_check_query? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: checkitem problem

Alan DeKok wrote: Norbert Wegener wrote: rlm_ldap: looking for check items in directory... rlm_ldap: Adding primaryGroupID as Cleartext-Password == 515 OK... modcall[authorize]: module ldap returns ok for request 11 users: Matched entry DEFAULT at line 2 Yes

Re: checkitem problem

Alan DeKok wrote: Norbert Wegener wrote: Yes... because you are telling the server what the clear-text password is supposed to be. If you tell the server TWICE, it will say OK twice. Telling it twice in a check item? Yes. You told the server what the known good

prevent ldap from searching for groups

expand: NULL - NULL^M . Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

checkitem problem

is at http://www.wegener-net.de/freeradius/typescript Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: checkitem problem

Alan DeKok wrote: ... Repeat after me: Cleartext-Password := If it helps :-) Before posting I tried nearly everything, including the use of Cleartext-Password := in ldap.attrmap and the users file. Unfortunately the result was always the same ... add checkItem Cleartext-Password

Freeradius logging to ms-sql

, there is no support. Correct? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

accepting clients with expired certificates

? What would be the best way to handle a situation like that? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: accepting clients with expired certificates

-Message from RADIUS message EAPOL: startWhen -- 0 EAPOL test timed out MPPE keys OK: 0 mismatch: 1 FAILURE freeradius version is 1.1.6 Norbert Wegener

Re: 13 LDAP queries for one authorize!

piece, and a separate one for the inner tunnel. Sounds promising. Can you already foresee, when pre2 will be released? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

pre1 dies on startup: generate_sql_clients() returned error

exited with code 01. (gdb) bt No stack. (gdb) Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pre1 dies on startup: generate_sql_clients() returned error

here, too? Norbert Wegener alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

2.0.0-pre1 compile problem on ubuntu

On the other hand, dpkg shows: dpkg -l|grep libperl ii libperl5.8 5.8.8-7build1 Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

radtest and Message-Authenticator

have to do to get a Message-Authenticator in such a radtest request? Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

compiling 1.1.6 on solaris problem

(GNU automake) 1.8 The complete output of configure / make can be found at: http://www.wegener-net.de/fr/ Any idea? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: compiling 1.1.6 on solaris problem

[EMAIL PROTECTED] schrieb: hi, do you have OpenSSL installed or using a Solaris derivation? I am not really familiar with Solaris. [EMAIL PROTECTED]:/# openssl version OpenSSL 0.9.7b 10 Apr 2003 Is this information sufficient? Norbert Wegener alan - List info/subscribe/unsubscribe

Re: compiling 1.1.6 on solaris problem

/freeradius-1.1.6'^M make: *** [all] Error 2^M Again, the whole output is at http://www.wegener-net.de/fr Norbert Wegener Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http

version 2

. Is it already foreseeable, when approximately the version 2 of freeradius will be available? Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Default attributes

= Framed-User [EMAIL PROTECTED] Auth-Type := Local, User-Password == 12345 Are Service-Type = Framed-User and Framed-Protocol = PPP defaults these days or do those connections work only accidentally? Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org

rlm_sql question

| +-+--+---+++ | 1180894 | 7509 | Auth-Type | Accept | += | +-+--+---+++ 1 row in set (0.00 sec) I would have expected the same results as well from rlm_sql as from mysql directly. Why do the results differ? Thanks Norbert Wegener - List info/subscribe

Re: rlm_sql question

Please forget this question. Someone had changed a network setting, so that mysql and rlm_sql did not reach the same databases. Right now everything works as expected. Sorry Norbert Wegener Norbert Wegener schrieb: I am using freeradius 1.1.4 with mysql. I had to change

Re: rlm_eap_tls: No SSL info available. Waiting for more SSL data

Alan DeKok wrote: Norbert Wegener wrote: I have setup freeradius-1.1.4 for 802.1x authentication and tested it successfully using eapol_test. When I try to authenticate a voip phone, that uses the same certificate as I used before with eapol_test, authentication fails

rlm_eap_tls: No SSL info available. Waiting for more SSL data

. Is there anything I can configure on the server side or is this a problem with the switch/ the voip phone? The logfile is at http://www.wegener-net.de/fr/typescript.txt Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: RADIUS will no longer start!

in radiusd.conf. The server is reading clients and doing this, it complains about Missing client name You should have a look at clients.conf. Norbert Wegener - Can anyone shed any light on this? Unfortunately for me, one of our developers was working on our production server but *claims

Re: sql.conf problem

Alan DeKok schrieb: Norbert Wegener [EMAIL PROTECTED] wrote: In a certain context I want to accept all incoming requests. Ok... mysql select * from radcheck where UserName='0009'; +-+--+--++--+-+ | id

sql.conf problem

| = | +-+--+--+++ 2 rows in set (0.00 sec) Thanks Norbert Wegener - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

  1   2   >