Book for freeradius 3.0

2013-10-13 Thread Osvaldo T Crispim Filho
Is there any book about the new version of FreeRADIUS 3.0? -- - Osvaldo T Crispim Filho - - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-10 Thread Alex Sharaz
o.k deinstalled the package and package manager I was using, installed homebrew, installed latest openssl and talloc and ….. just compiled and installed. Simples! Thanks for that A On 9 Oct 2013, at 11:54, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 9 Oct 2013, at 11:21, Alex

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 10:44, Alex Sharaz alex.sha...@york.ac.uk wrote: o.k deinstalled the package and package manager I was using, installed homebrew, installed latest openssl and talloc and ….. just compiled and installed. Simples! Hmm wonder what rudix was doing to mess up talloc

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-10 Thread Alex Sharaz
On 10 Oct 2013, at 12:02, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 10 Oct 2013, at 10:44, Alex Sharaz alex.sha...@york.ac.uk wrote: o.k deinstalled the package and package manager I was using, installed homebrew, installed latest openssl and talloc and ….. just compiled and

Error messages in debug on 3.0

2013-10-10 Thread Phil Mayers
I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: ERROR: Conditional evaluation failed due to internal sanity check. ...whenever I try to compare against absent attributes. What's the correct

Re: Error messages in debug on 3.0

2013-10-10 Thread Phil Mayers
On 10/10/13 18:32, Phil Mayers wrote: I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: We're also getting: Info: Invalid operator for item Sql-Group: reverting to '==' ...which is logged

Re: Error messages in debug on 3.0

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 18:32, Phil Mayers p.may...@imperial.ac.uk wrote: I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: ERROR: Conditional evaluation failed due to internal sanity

Re: Error messages in debug on 3.0

2013-10-10 Thread Phil Mayers
On 10/10/13 18:51, Arran Cudbard-Bell wrote: possibly if (outer.request Hmm, no same thing, and worse it's squashing Module-Failure-Message :o( - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error messages in debug on 3.0

2013-10-10 Thread Alan DeKok
Phil Mayers wrote: I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: ERROR: Conditional evaluation failed due to internal sanity check. That should be fixed. Either it can be deleted

Re: Error messages in debug on 3.0

2013-10-10 Thread Arran Cudbard-Bell
On 10 Oct 2013, at 22:23, Alan DeKok al...@deployingradius.com wrote: Phil Mayers wrote: I've just ported our config to 3.0 and I'm seeing a few error messages; they don't seem to be critical but are concerning me. Specifically I'm seeing: ERROR: Conditional evaluation failed due

well almost got FR 3.0 to compile on OS X :-)

2013-10-09 Thread Alex Sharaz
Just got a wee bit of trouble linking in the talloc libraries, but I'm sure its not insurmountable A - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-09 Thread A . L . M . Buxey
Hi, Just got a wee bit of trouble linking in the talloc libraries, but I'm sure its not insurmountable Alan uses OSX so I'm *SURE* it compiles fine with the right support stuff present - you should have been compiling it before the official release ;-) alan - List

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-09 Thread Alex Sharaz
you don't know how hard it was to wait till the official release :-) A On 9 Oct 2013, at 10:19, a.l.m.bu...@lboro.ac.uk wrote: Hi, Just got a wee bit of trouble linking in the talloc libraries, but I'm sure its not insurmountable Alan uses OSX so I'm *SURE* it compiles fine with the

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-09 Thread Alex Sharaz
On 9 Oct 2013, at 10:19, a.l.m.bu...@lboro.ac.uk wrote: Hi, Just got a wee bit of trouble linking in the talloc libraries, but I'm sure its not insurmountable Alan uses OSX so I'm *SURE* it compiles fine with the right support stuff present - you should have been compiling it

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-09 Thread Arran Cudbard-Bell
On 9 Oct 2013, at 11:21, Alex Sharaz alex.sha...@york.ac.uk wrote: you don't know how hard it was to wait till the official release :-) A brew install talloc brew link talloc ./configure make make install ? Arran Cudbard-Bell a.cudba...@freeradius.org FreeRADIUS Development Team - List

Re: well almost got FR 3.0 to compile on OS X :-)

2013-10-09 Thread Alex Sharaz
o.k. different method of getting talloc onto machine :-) I used curl -s https://raw.github.com/rudix-mac/package-manager/master/rudix.py | sudo python - install rudix then rudix install talloc :-)) On 9 Oct 2013, at 11:54, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 9 Oct

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-12 Thread Alan DeKok
Brian Julin wrote: Alan DeKok wrote: Well... I tried it, and I didn't see any errors. Can you check that you're really running a *stock* binary, and a *stock* configuration? Attached is a recipe for how I replicated it (and another doublefree) on a clean system. I've pushed a

RE: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-09 Thread Brian Julin
Alan DeKok wrote: Well... I tried it, and I didn't see any errors. Can you check that you're really running a *stock* binary, and a *stock* configuration? Attached is a recipe for how I replicated it (and another doublefree) on a clean system. 1) started on a fresh system that had

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-09 Thread Arran Cudbard-Bell
On 9 Aug 2013, at 16:14, Brian Julin bju...@clarku.edu wrote: Alan DeKok wrote: Well... I tried it, and I didn't see any errors. Can you check that you're really running a *stock* binary, and a *stock* configuration? Attached is a recipe for how I replicated it (and another

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-09 Thread Arran Cudbard-Bell
On 9 Aug 2013, at 16:27, Arran Cudbard-Bell a.cudba...@freeradius.org wrote: On 9 Aug 2013, at 16:14, Brian Julin bju...@clarku.edu wrote: Alan DeKok wrote: Well... I tried it, and I didn't see any errors. Can you check that you're really running a *stock* binary, and a *stock*

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-08 Thread Alan DeKok
Brian Julin wrote: I tried to replicate on a test server with lightly modified 3.0 stock configs. The error only happens when everything is running through the same server/eap instances, so good instincts there. Replicating it is easy: just uncomment the peap virtual-server directive

RE: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-08 Thread Brian Julin
Alan DeKok wrote: Brian Julin wrote: I tried to replicate on a test server with lightly modified 3.0 stock configs. The error only happens when everything is running through the same server/eap instances, so good instincts there. Replicating it is easy: just uncomment the peap

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-08 Thread Arran Cudbard-Bell
...and it doesn't matter that example.com defaults to home_server localhost, it does not get that far. Well... I tried it, and I didn't see any errors. Can you check that you're really running a *stock* binary, and a *stock* configuration? I will -- should I preferably be testing

Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-07 Thread Brian Julin
I finally got around to trying some RC code (the release_branch_3.0.0 on github) on our production configurations, after a bit of massaging got them looking like they were working, but not so much the one that re-proxies the inner tunnel contents to an internal server after unwrapping EAP-PEAP:

Re: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-07 Thread A . L . M . Buxey
Hi, peap { default_eap_type = mschapv2 proxy_tunneled_request_as_eap = yes copy_request_to_tunnel = no use_tunneled_reply = yes tls = eduroam-eap-tls } okay Any request that tries to go to the proxy causes this to happen: Wed Aug 7 11:57:35 2013 :

RE: Talloc sanity error (3.0 release branch, reproxying from PEAP inner tunnel)

2013-08-07 Thread Brian Julin
a.l.m.bu...@lboro.ac.uk [a.l.m.bu...@lboro.ac.uk] wrote: how did you configure the server...from scratch or copy pasting bits over from a 2.x ? It's a mongrel, not an alteration of fresh 3.0. It was working on a pre-talloc 3.0 development branch. does this 'eap' module use its own

Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
. While trying that I also build a 3.0 GIT HEAD and there were a few problems, I trippeled about: - HINTS does not work the way it did before. Especially this no longer works for me: DEFAULT User-Name =~ ^v104([^@]+) User-Name := %{1}@V104.GMVL.DE - rlm_perl does

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Arran Cudbard-Bell
- HINTS does not work the way it did before. Especially this no longer works for me: DEFAULT User-Name =~ ^v104([^@]+) User-Name := %{1}@V104.GMVL.DE Can you got some debug output or even just the value of the User-Name? It may just be the escaping is less crazy

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Arran, DEFAULT User-Name =~ ^v104([^@]+) User-Name := %{1}@V104.GMVL.DE Can you got some debug output or even just the value of the User-Name? It may just be the escaping is less crazy than it used to be. username is: v104\Administrator but radius puts it internally as

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread A . L . M . Buxey
Hi, While trying that I also build a 3.0 GIT HEAD and there were a few problems, I trippeled about: - HINTS does not work the way it did before. Especially this no longer works for me: DEFAULT User-Name =~ ^v104([^@]+) User-Name := %{1}@V104.GMVL.DE I

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Arran, Can you provide a backtrace please? I'll see if I can fix it. Program received signal SIGSEGV, Segmentation fault. 0x08052f8a in rad_authenticate (request=0x863f138) at src/main/auth.c:542 542 (auth_item-da-attr == PW_USER_PASSWORD)) { (gdb) bt

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Arran Cudbard-Bell
On 21 Jul 2013, at 22:33, Thomas Glanzmann tho...@glanzmann.de wrote: Hello Arran, Can you provide a backtrace please? I'll see if I can fix it. Program received signal SIGSEGV, Segmentation fault. 0x08052f8a in rad_authenticate (request=0x863f138) at src/main/auth.c:542 542

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Alan, I bleieve hitns is going the way of the dodo eventually - unlang can do the work for you eg if (%{User-Name} =~ ^v104([^@]+) ) { update request { %{User-Name} := %{1}@V104.GMVL.DE } } I tried: server default { listen {

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Arran, Oh I have a pretty good idea of what's gone on. Could you git pull and rebuild. You'll probably see an abort this time round. I did a git pull # Wipe the working directory clean git reset --hard HEAD; git clean -f -x -d ./configure --prefix=/local/freeradius-head; make -j; make

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Susan Brown
On 21 Jul 2013, at 23:17, Thomas Glanzmann tho...@glanzmann.de wrote: Hello Arran, Oh I have a pretty good idea of what's gone on. Could you git pull and rebuild. You'll probably see an abort this time round. I did a git pull # Wipe the working directory clean git reset --hard

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Arran Cudbard-Bell
On 21 Jul 2013, at 23:47, Susan Brown a.cudba...@freeradius.org wrote: On 21 Jul 2013, at 23:17, Thomas Glanzmann tho...@glanzmann.de wrote: Hello Arran, Oh I have a pretty good idea of what's gone on. Could you git pull and rebuild. You'll probably see an abort this time round. I

Re: Freeradius 3.0 hints, rlm_perl

2013-07-21 Thread Thomas Glanzmann
Hello Arran, Something was caching the pointer to request-password when it shouldn't have. Should be fixed now. I pulled the fix and can no longer reproduce the issue, I tried with 100 authentications in a row. Thank you for fixing it. Cheers, Thomas - List info/subscribe/unsubscribe?

3.0 regex realm syntax

2013-07-12 Thread Brian Julin
looking forward to finally bumping to 3.0 on our non-RadSec servers as soon as things look to test out right and we can tell the boss that the package is supported on our distro. We'll be getting rid of a LOT of cruft in config files during the process due to the many new ease-of-use features

Re: 3.0 regex realm syntax

2013-07-12 Thread Alan DeKok
it, but cannot remember what that was about, it has been so long, and there seems to be no example in the stock configs. I don't recall. I'm looking forward to finally bumping to 3.0 on our non-RadSec servers as soon as things look to test out right and we can tell the boss that the package

Re: Indexing multi-valued attrbutes (was RE: 3.0)

2013-07-11 Thread Alan DeKok
Brian Julin wrote: Just to make sure it was understood during the foreach fixup patch I sent on github, I mentioned that indexed attribute accesses were broken. None of var[#] var[2] or var[*] work in xlats, unless that's been fixed recently. That's been fixed. Alan DeKok. - List

Re: Indexing multi-valued attrbutes (was RE: 3.0)

2013-07-10 Thread Arran Cudbard-Bell
On 9 Jul 2013, at 18:01, Brian Julin bju...@clarku.edu wrote: Arran Cudbard-Bell wrote: Soon. We've gone into official feature freeze. Still finding bugs though, it'd be helpful if people could test. Just to make sure it was understood during the foreach fixup patch I sent on github,

3.0

2013-07-09 Thread David Peterson
Any ETA on 3.0 being released? David - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 3.0

2013-07-09 Thread Alan DeKok
David Peterson wrote: Any ETA on 3.0 being released? We're just working on a few last-minute issues. We'll get it released ASAP. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 3.0

2013-07-09 Thread Arran Cudbard-Bell
On 9 Jul 2013, at 16:27, David Peterson dav...@wirelessconnections.net wrote: Any ETA on 3.0 being released? Soon. We've gone into official feature freeze. Still finding bugs though, it'd be helpful if people could test. Configuration files and packages are more or less in their final state

Re: 3.0

2013-07-09 Thread Alan Buxey
@lists.freeradius.org Subject: 3.0 Any ETA on 3.0 being released? David - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: 3.0

2013-07-09 Thread David Peterson
The Alvarion WiMax equipment requires 3.0 for certain features. We have been using it for a while now. David From: freeradius-users-bounces+davidp=wirelessconnections@lists.freeradius.org [mailto:freeradius-users-bounces+davidp=wirelessconnections.net@lists.freera dius.org

Indexing multi-valued attrbutes (was RE: 3.0)

2013-07-09 Thread Brian Julin
Arran Cudbard-Bell wrote: Soon. We've gone into official feature freeze. Still finding bugs though, it'd be helpful if people could test. Just to make sure it was understood during the foreach fixup patch I sent on github, I mentioned that indexed attribute accesses were broken. None of

Freeradius 3.0 build process different from 2.0?

2013-06-14 Thread stefan.paetow
Hi, I have more a development question for Arran/Alan D about the build process for FR 3.0... has it changed significantly compared to v2.2.0? The reason I ask is that I would like to get started on a 3.0 build spec for CentOS (since the last version for CentOS 6.4 is v2.1.12, and 2.2.0

Re: Freeradius 3.0 build process different from 2.0?

2013-06-14 Thread Alan DeKok
stefan.pae...@diamond.ac.uk wrote: I have more a development question for Arran/Alan D about the build process for FR 3.0... has it changed significantly compared to v2.2.0? Everything about the build process changed. The only thing that's the same is the standard configure / make / main

Re: Freeradius 3.0 build process different from 2.0?

2013-06-14 Thread Phil Mayers
On 14/06/13 15:35, stefan.pae...@diamond.ac.uk wrote: Hi, I have more a development question for Arran/Alan D about the build process for FR 3.0... has it changed significantly compared to v2.2.0? Yes, enormously so but it's all behind the scenes. The reason I ask is that I would like

Re: Freeradius 3.0 build process different from 2.0?

2013-06-14 Thread Arran Cudbard-Bell
On 14 Jun 2013, at 15:57, Phil Mayers p.may...@imperial.ac.uk wrote: On 14/06/13 15:35, stefan.pae...@diamond.ac.uk wrote: Hi, I have more a development question for Arran/Alan D about the build process for FR 3.0... has it changed significantly compared to v2.2.0? Yes, enormously so

Re: [SPAM] Re: FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

2013-06-08 Thread nicolas . clo
users mailing list freeradius-users@lists.freeradius.orgDe : John Dennis <jden...@redhat.com>Envoyé par : freeradius-users-bounces+nicolas.clo=ricoh-industrie...@lists.freeradius.orgDate : 07/06/2013 17:12Objet : [SPAM] Re: FreeRADIUS 3.0 : mschap module fails to execute ntlm_authOn 06/07/2013

Re: [SPAM] FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

2013-06-08 Thread Arran Cudbard-Bell
On 8 Jun 2013, at 10:30, nicolas@ricoh-industrie.fr wrote: I have the same problem after upgrade Freeradius to version 3. Before, ntlm worked very well but it seems that the new version used the ntlm module differently. Thanks for flagging your email appropriately. Arran Cudbard-Bell

Re: FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

2013-06-08 Thread Bjarni Hardarson
: External script says: ?[1m?[33mSun Jun 9 01:11:39 2013 : WARNING: (21) WARNING: mschap : Failed to execute /usr/bin/ntlm_auth: Bad address?[0m. I guess i will wait for a 3.0 build on launchpad. Bjarni - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

2013-06-07 Thread Bjarni Hardarson
Hi list, I just tried to upgrade FreeRADIUS to the latest version from git. My goal is to get the passchange feature working in the mschap module. I am unable to get ntlm_auth to work in mschap. debug output, --- Debug: (0) mschap : expand: '--nt-response=%{%{mschap:NT-Response}:-00}' -

Re: FreeRADIUS 3.0 : mschap module fails to execute ntlm_auth

2013-06-07 Thread John Dennis
On 06/07/2013 10:46 AM, Bjarni Hardarson wrote: I am sure that the ntlm_auth file is at /usr/bin/ntlm_auth and if i run it manually with the expanded attributes i get the NT_KEY. root@freelab:/#/usr/bin/ntlm_auth --request-nt-key --username=vpntest --challenge=d9a8b4d1c188ae1b

EAP error with Freeradius 3.0

2013-06-06 Thread nicolas . clo
Hello, I have a problem with mschap authentication and the external program ntlm_auth. With Freeradius 2.2 I haven't any problem but after upgrade to Freeradius 3, the output of this program was wrong and EAP failed. The output is very strange : Any ideas ?inline: 0E165810.gif- List

Re: EAP error with Freeradius 3.0

2013-06-06 Thread Alan DeKok
nicolas@ricoh-industrie.fr wrote: Hello, I have a problem with mschap authentication and the external program ntlm_auth. With Freeradius 2.2 I haven't any problem but after upgrade to Freeradius 3, the output of this program was wrong and EAP failed.

Release date of 2.21 ad 3.0?

2013-05-01 Thread Raithatha, Divyesh
When does the release of 2.21 come out? How about 3.0? Thanks - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Release date of 2.21 ad 3.0?

2013-05-01 Thread Alan DeKok
Raithatha, Divyesh wrote: When does the release of 2.21 come out? How about 3.0? We hope to have both out by June. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Release date of 2.21 ad 3.0?

2013-05-01 Thread Cholleti, Hanumantha
list Subject: Re: Release date of 2.21 ad 3.0? Raithatha, Divyesh wrote: When does the release of 2.21 come out? How about 3.0? We hope to have both out by June. Alan DeKok. - List info/subscribe/unsubscribe? See https://urldefense.proofpoint.com/v1/url?u=http://www.freeradius.org/list

Re: Release date of 2.21 ad 3.0?

2013-05-01 Thread A . L . M . Buxey
Hi, FYI... huh? why did you repost this? we've just SEEN that info from Alan directly alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Release date of 2.21 ad 3.0?

2013-05-01 Thread Cholleti, Hanumantha
Sorry my bad, was sharing the info with my internal team and accidently added the users mail list. Sorry again -Hanu Buxey Wrote: huh? why did you repost this? we've just SEEN that info from Alan directly - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Requirements for rlm_jradius in 3.0

2013-03-07 Thread Arran Cudbard-Bell
. * It doesn't use the connection pool API which is an absolute requirement for all modules in 3.0. * If the protocol encoding has changed, then protocol version mismatches should be detected and the user should be informed of what's happened unless the protocol encodings are interoperable

rlm_ldap attribute mappings 3.0

2012-12-01 Thread Arran Cudbard-Bell
Hi All, Following from previous threads the old attribute mapping scheme in rlm_ldap has been removed in the 3.0 branch. Existing mapping files should be converted to the new configuration file format. # # Mapping of RADIUS dictionary attributes to LDAP directory attributes

RE: request_dequeue problems (recent 3.0, when home-server stalls)

2012-09-20 Thread Brian Julin
I had some more time to play with this; it seems to be related to retiring old threads, not actual problem on the home server. Some new observations below. Alan DeKok wrote on Aug28, 2012: Brian Julin wrote: I'm currently hunting a problem that causes a recent checkout of FR3.0 to abort

Re: request_dequeue problems (recent 3.0, when home-server stalls)

2012-09-20 Thread Alan DeKok
is also to remove that configuration entirely in 3.0. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: request_dequeue problems (recent 3.0, when home-server stalls)

2012-09-20 Thread Phil Mayers
On 20/09/12 15:29, Alan DeKok wrote: Brian Julin wrote: After collecting some more debug logs, I noticed that this problem was happening too often on requests numbered around 260 to be a coincidence. It turns out this happens after a thread is marked for recycling due to having handled over

request_dequeue problems (recent 3.0, when home-server stalls)

2012-08-28 Thread Brian Julin
I'm currently hunting a problem that causes a recent checkout of FR3.0 to abort but which does not seem to be affecting an older revision (April 8th or so) of FR3.0 on another box. I do have a couple small in-house patches applied but they should probably not be relevant. The issue seems to

Re: request_dequeue problems (recent 3.0, when home-server stalls)

2012-08-28 Thread Alan DeKok
Brian Julin wrote: I'm currently hunting a problem that causes a recent checkout of FR3.0 to abort but which does not seem to be affecting an older revision (April 8th or so) of FR3.0 on another box. I do have a couple small in-house patches applied but they should probably not be relevant.

Re: Problem compiling Freeradius 3.0 Master branch after 2012-06-29

2012-07-18 Thread Alan DeKok
YJZ wrote: 1) ./configure keeps complaining of: configure: WARNING: unrecognized options: --without-rlm_perl, --without-rlm_sql_mysql, --with-rlm_pam, --with-rlm_ldap, --with-openldap-include-dir, --without-rlm_counter, --without-rlm_dbm, --without-rlm_ippool, --without-rlm_krb5,

Re: Problem compiling Freeradius 3.0 Master branch after 2012-06-29

2012-07-18 Thread YJZ
. - Thank you. After straightening out the paths to openssl lib include, I'm now able to compile FR 3.0 successfully. Best Regards, Y.J. Zhang - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem compiling Freeradius 3.0 Master branch after 2012-06-29

2012-07-17 Thread YJZ
Hello, I had been able to successfully compile Freeradius 3.0 Master branch from github up until 2012-07-04 with the following options, on Mac OS X 10.7. The last commit in the source code at that time was from 2012-06-29. ./configure \ --prefix=/usr/local/freeradius \ --mandir=/usr/local

Re: LDAP authentication trouble on 3.0

2012-07-06 Thread Alan DeKok
David Aldwinckle wrote: (0) WARNING: Empty pre-proxy section. Using default return values. Proxying to virtual server captive_portal (0) # Executing section authorize from file /etc/raddb/sites-enabled/default That doesn't make sense. You've broken the configuration somehow. Don't do

Re: LDAP authentication trouble on 3.0

2012-07-05 Thread Phil Mayers
On 07/05/2012 12:24 AM, David Aldwinckle wrote: Hello, I am having a problem getting LDAP authentication working on FreeRADIUS Version 3.0.0. The behaviour I am experiencing is that the server will send an Access-Accept message without doing any checking of credentials. I would expect to see an

Re: LDAP authentication trouble on 3.0

2012-07-05 Thread David Aldwinckle
Hi, That is what I originally hoped for. Your post made me go back and rewrite my ldap module config, which in the end didn't change anything. I also did a search on the entire directory for any instances of Auth-Type to verify that I had not set it to Accept. I found no occurrences that

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-05-06 Thread akinpelu emmanuel
...@deployingradius.com Subject: Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0 To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Date: Wednesday, April 27, 2011, 12:33 PM akinpelu emmanuel wrote: Hi Alan,   I have set the CFLAGS and LDFLAGS   To what? I

Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread akinpelu emmanuel
Hi All,   Please I am having challange building ikev2 and tncs library into the freeradius 3.0.0.   Though I have installed the latest version of ikev2_0.2 and libtnc this is the error message I keep getting, moreover could I be helped on how to indicate the tncs library path in the configure

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread Alan DeKok
akinpelu emmanuel wrote: Though I have installed the latest version of ikev2_0.2 and libtnc this is the error message I keep getting, moreover could I be helped on how to indicate the tncs library path in the configure line. $ export CFLAGS=-I... $ export LDFLAGS=... $ ./configure This has

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread akinpelu emmanuel
... no   Is there a way I can handle this?   Thank you   --- On Wed, 4/27/11, Alan DeKok al...@deployingradius.com wrote: From: Alan DeKok al...@deployingradius.com Subject: Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0 To: FreeRadius users mailing list freeradius-users

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread Alan DeKok
akinpelu emmanuel wrote: Hi Alan, I have set the CFLAGS and LDFLAGS To what? I think the problem is with the ikev2_set_log_callback in -leap-ikev2... no Is there a way I can handle this? Fix the software so it works. I don't run EAP-IKEv2, so I don't pay much attention to it.

Re: Help Compiling ikev2, EVP_sha256 and tncs: Freeradius 3.0

2011-04-27 Thread Alan Buxey
Hi, akinpelu emmanuel wrote: Though I have installed the latest version of ikev2_0.2 and libtnc this is the error message I keep getting, moreover could I be helped on how to indicate the tncs library path in the configure line. other than a particularly neat need to make the compile

(Fwd) Re: Seg Fault - radius 3.0 Debug

2011-03-18 Thread Breuer Nicolas
Hello, I finally solved my issue. It was a problem of linking mysql libs. I'm sorry . Apologies to all but.. Maybe variables have changed but since 3.0 version the variable %{Huntgroup-Name} is no more recognized. tested on version 2.1.11 - Works perfectly Any ideas ? Thanks

Re: (Fwd) Re: Seg Fault - radius 3.0 Debug

2011-03-18 Thread Alan DeKok
Breuer Nicolas wrote: but.. Maybe variables have changed but since 3.0 version the variable %{Huntgroup-Name} is no more recognized. It should work. The git master branch hasn't changed any of that functionality. And (as always) what does debug mode say? Alan DeKok. - List info

(Fwd) (Fwd) Re: Seg Fault - radius 3.0 Debug

2011-03-18 Thread Breuer Nicolas
variables have changed but since 3.0 version the variable %{Huntgroup-Name} is no more recognized. It should work. The git master branch hasn't changed any of that functionality. And (as always) what does debug mode say? Alan DeKok. --- Forwarded message follows --- From

Re: (Fwd) (Fwd) Re: Seg Fault - radius 3.0 Debug

2011-03-18 Thread Alan DeKok
Breuer Nicolas wrote: The debug mode said anything - No errors. Then I guess there are no problems. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Seg Fault - radius 3.0 Debug

2011-03-17 Thread Breuer Nicolas
Dear all, Here is my debug file with gbd on the seg fault [Thread debugging using libthread_db enabled] [New Thread 0x7600b700 (LWP 23433)] [Thread 0x7600b700 (LWP 23433) exited] Program received signal SIGSEGV, Segmentation fault. 0x76032890 in mysql_field_count () from

Re : Seg Fault - radius 3.0 Debug

2011-03-17 Thread Breuer Nicolas
More messages --- Forwarded message follows --- From: root r...@mail-mx-out.belcenter.com Date sent: Thu, 17 Mar 2011 18:43:14 +0100 To: nicolas.bre...@belcenter.be Program received signal SIGSEGV, Segmentation fault.

Re: Re : Seg Fault - radius 3.0 Debug

2011-03-17 Thread Alan DeKok
Breuer Nicolas wrote: Thread 1 (Thread 0x77bba720 (LWP 23430)): #0 0x76032890 in mysql_field_count () from /usr/lib64/mysql/libmysqlclient_r.so.16 No symbol table info available. #1 0x76391dee in sql_num_fields (sqlsocket=value optimized out, config=value optimized out)

Re: Seg Fault - radius 3.0 Debug

2011-03-17 Thread Alan Buxey
Hi,  Here is my debug file with gbd on the seg fault  [Thread debugging using libthread_db enabled] [New Thread 0x7600b700 (LWP 23433)] [Thread 0x7600b700 (LWP 23433) exited] Program received signal SIGSEGV, Segmentation fault. 0x76032890 in

(Fwd) Seg Fault - 3.0

2011-03-16 Thread Breuer Nicolas
--- Forwarded message follows --- From: Breuer Nicolas nicolas.bre...@belcenter.biz To: freeradius-de...@lists.freeradius.org Subject:Seg Fault - 3.0 Date sent: Wed, 16 Mar 2011 15:23:22 +0100 Hello I discovered a Seg Fault on the release 3.0 on the GIT server

Re: (Fwd) Seg Fault - 3.0

2011-03-16 Thread Alan DeKok
Breuer Nicolas wrote: ... Segmentation fault See doc/bugs I see the expand of variable HuntGroup-Name didn't get any values... Maybe the reason of Seg fault ? We don't know. You need to supply more information for us to know. Alan DeKok. - List info/subscribe/unsubscribe? See

Seg Fault - 3.0 - More Info needed

2011-03-16 Thread Breuer Nicolas
Hello Alan, Could you precise wich infos you need to go further ? Thanks --- End of forwarded message --- Hello I discovered a Seg Fault on the release 3.0 on the GIT server. Seems happening on the first auth. (30) Login OK: [XXX] (from client XXX) (30) # Executing section post

Re: Seg Fault - 3.0 - More Info needed

2011-03-16 Thread Alan DeKok
Breuer Nicolas wrote: Hello Alan, Could you precise wich infos you need to go further ? Yes. I was precise. Read the file doc/bugs. This is documented. Follow the instructions there. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius on redhat ES 3.0

2004-05-04 Thread Milver S. Nisay
so my questions remains: 1. anybody have luck using Auth-Type := System and got it work under redhat ES version 3.0 for Freeradius 0.9.3? Yes I did. 2. any suggestions for troubleshooting ? how PAM came into play during the radius authentication process? it is not PAM. its user access

Re: Freeradius on redhat ES 3.0

2004-05-04 Thread Alan DeKok
Zhisong Jin [EMAIL PROTECTED] wrote: the problem is resolved after I sent out earilier email. It turn out the problem is cause by permission on /etc/shadow file, which by default is not readable by the radiusd user. Which is explained in the comments for the user and group configuration

Re: Freeradius on redhat ES 3.0

2004-05-04 Thread Milver S. Nisay
I cant help on RH but Im preparing to try SUSE 9.0 PRO that includes FreeRadius soon. Have you heard anything about SUSE-PRO and Radius. Ernie FC1 and FC2 also includes freeradius. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius on redhat ES 3.0

2004-05-03 Thread Zhisong Jin
I would appreciate some feedback on this list. Has anybody have any luck have freeradius 0.9.3 working on redhat ES 3.0. it seems the authentication type System no longer works. I have the following on users testAuth-Type := Local, User-Password == test123 WindowsXPtest Auth

Re: Freeradius on redhat ES 3.0

2004-05-03 Thread Alan DeKok
Zhisong Jin [EMAIL PROTECTED] wrote: I would appreciate some feedback on this list. Has anybody have any luck have freeradius 0.9.3 working on redhat ES 3.0. it seems the authentication type System no longer works. I doubt that very much. authention for user test using LOCAL is OK

Re: Freeradius on redhat ES 3.0

2004-05-03 Thread Milver S. Nisay
I would appreciate some feedback on this list. Has anybody have any luck have freeradius 0.9.3 working on redhat ES 3.0. it seems the authentication type System no longer works. system authentication type requires accounts to be authenticated against system password and shadow files

  1   2   >