Call-Check

2005-10-05 Thread Ivo
Hi, Can someone tell me is it possible to get freeradius respond to Service-Type==Call-Check requests? I have read on cisco's web pages that it is not possible. I am using PM3 RAS with set call-check on option set. Namely, I would like to check for valid caller-id before answering the call and

Re: Cannot start Cisctron radius server

2005-10-05 Thread A . L . M . Buxey
Hi, I have installed cistron 1.6.7. When I tried to run it,t it gives me an well done. now join the Cistron mailing list. This is the FreeRADIUS mailing list - a completely different program (!) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Tru64 again

2005-10-05 Thread Adharsh P
Hello Tim Winders, When you run configure in Tru64, configure sets GETHOSTBYADDRRSTYLE and GETHOSTBYNAMERSTYLE to GNUSTYLE in src/include/autoconf.h Modify the two lines in src/include/autoconf.h -#define GETHOSTBYADDRRSTYLE GNUTYPE -#define GETHOSTBYNAMERSTYLE GNUTYPE to +#undef

PID variable

2005-10-05 Thread Abdul Lateef
Hi all, How i can retrive the current pid value of freeradius in Shell script. I wanted to create one shell script to run in linux corn commond. because our database is very slow and always radius is going to crashed when it receives more than 1000 request. so my script will check if the radius

Re: PID variable

2005-10-05 Thread Josh Howlett
[EMAIL PROTECTED] ~]# cat /var/run/radiusd.pid 10163 josh. Abdul Lateef wrote: Hi all, How i can retrive the current pid value of freeradius in Shell script. I wanted to create one shell script to run in linux corn commond. because our database is very slow and always radius is going to

Re: Crashes with 1.0.4/1.0.5, perhaps connected with slow LDAP backend?

2005-10-05 Thread Martin Pauly
Alan, Thu Sep 29 20:33:19 2005 : Error: Assertion failed in modcall.c, line 68 If you can get a core dump, and do 'bt' in gdb, and also do 'print *p' at the point of the assertion, that would help a lot. But my main suspect right now is bad memory. The code hasn't changed in a long

TLS Question

2005-10-05 Thread Juan Daniel Moreno
Hi, I'm using freeRadius 1.0.4 and I would like to know something about tls config. When I launch radius en debug mode I get this messages: tls: rsa_key_exchange = no tls: dh_key_exchange = yes tls: rsa_key_length = 512 tls: dh_key_length = 512 tls: verify_depth = 0 tls: CA_path = (null)

Multiple Connections for One UserID

2005-10-05 Thread Samson Martinez
Let me preface this with the required Im pretty much a newbie to freeRADIUS Can someone point me to the place where I can modify the number of simultaneous connections that are allowed per user? Ive just now noticed that I am currently only allowed a single connection and Id like to

RE: PID variable

2005-10-05 Thread Jonathan De Graeve
Pidof freeradius will also do -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] - Always read the manual for the correct way to do things because the number of incorrect ways to do things is almost infinite -

request-proxy request-proxy_reply

2005-10-05 Thread Massimiliano Liccardo
hi folks, I should write a module that strips/modifies AV pairs from a proxy reply according to the AV pairs prior sent into the originated request. My doubt is: the AV request-proxy are still valid during post-proxy stage of a rlm_module? -- Massimiliano Liccardo (maX) [EMAIL PROTECTED]

Which Operating System is best for freeRADIUS

2005-10-05 Thread Gunther
Building my FR server, I have the choice of a number of operating system for my FreeRADIUS server. Anybody with a suggestion which operating system is best suited for FR? I like to run FR on a VPS (virtual private server) using one of the following OS: - FreeBSD 4.9 (jail) - FreeBSD 5.2 (jail) -

Re: No updates with radiusd log

2005-10-05 Thread john
Thanks Alan. I was trying to debug but not in full debugging mode. I'll give that a shot. Thanks again, John -Original Message- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Wednesday, October 5, 2005 01:07 AM To: 'FreeRadius users mailing list' Subject: Re: No updates with

Accounting and Cisco devices

2005-10-05 Thread Ryan Klinkhammer
Is it possible receive accounting information for cisco devices. When I go to my log files I can see the start and stop of my session but dont see the commands I entered on the device. Or does freeradius not log accounting information. I am using version 1.0.5 Thanks, Ryan -

Success Story (A tribute to the FreeRADIUS project)

2005-10-05 Thread Lefteris St
Hello everyone, I am writing this -long overdue- letter to express my gratitude to all FR developers and other people who help through this mailing list. I may not be an active poster, but this list's archive has been a tremendous help during my involvement with FreeRADIUS. Thanks to the intense

Re: Which Operating System is best for freeRADIUS

2005-10-05 Thread Nicolas Baradakis
Gunther wrote: Building my FR server, I have the choice of a number of operating system for my FreeRADIUS server. Anybody with a suggestion which operating system is best suited for FR? I'd suggest Debian, because several members of the project are developping or testing FreeRADIUS under

RE: Which Operating System is best for freeRADIUS

2005-10-05 Thread Gunther
Nicolas Baradakis wrote: I'd suggest Debian, because several members of the project are developping or testing FreeRADIUS under Debian. Moreover the Debian package is directly maintained by one the developpers who regularly adds the major bugfixes into the Debian package between two releases of

Re: Call-Check

2005-10-05 Thread Alan DeKok
Ivo [EMAIL PROTECTED] wrote: Can someone tell me is it possible to get freeradius respond to Service-Type==Call-Check requests? I don't see why niot. I have read on cisco's web pages that it is not possible. Please post the URL. Namely, I would like to check for valid caller-id before

Re: TLS Question

2005-10-05 Thread Alan DeKok
Juan Daniel Moreno [EMAIL PROTECTED] wrote: but I would like to know how to change some parameters (like rsa_key_exchange = yes) Add it to the configuration section for tls. and, even more important, if the rsa_key_length is given in Bytes or bits. Bits. Does it mean that the

Re: Multiple Connections for One UserID

2005-10-05 Thread Alan DeKok
Samson Martinez [EMAIL PROTECTED] wrote: Can someone point me to the place where I can modify the number of simultaneous connections that are allowed per user? I've just now noticed that I am currently only allowed a single connection and I'd like to increase that value. The default

Re: request-proxy request-proxy_reply

2005-10-05 Thread Alan DeKok
Massimiliano Liccardo [EMAIL PROTECTED] wrote: My doubt is: the AV request-proxy are still valid during post-proxy stage of a rlm_module? Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Accounting and Cisco devices

2005-10-05 Thread Alan DeKok
Ryan Klinkhammer [EMAIL PROTECTED] wrote: Is it possible receive accounting information for cisco devices. When I go to my log files I can see the start and stop of my session but don't see the commands I entered on the device. See the FAQ. If the NAS doesn't send the data, FreeRADIUS

RE: Call-Check

2005-10-05 Thread King, Michael
I wonder if it's this one? http://www.cisco.com/univercd/cc/td/doc/product/voice/sipproxy/radiusps/ radpreau.htm -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Wednesday, October 05, 2005 2:01 PM To: FreeRadius users mailing

RE: Call-Check

2005-10-05 Thread Jonathan De Graeve
From the site: RADIUS Debugging File FreeRADIUS server does not support preauthentication. There is no example for this case. -- Jonathan De Graeve Network/System Administrator Imelda vzw Informatica Dienst 015/50.52.98 [EMAIL PROTECTED] -Oorspronkelijk bericht- Van: [EMAIL PROTECTED]

Re: Call-Check

2005-10-05 Thread Alan DeKok
Jonathan De Graeve [EMAIL PROTECTED] wrote: From the site: RADIUS Debugging File FreeRADIUS server does not support preauthentication. There is no example for this case. I'm not sure it's true. Please configure the pre-authentication as they describe, run FreeRADIUS in debugging mode,

Re: Accounting and Cisco devices

2005-10-05 Thread Guy Fraser
On Wed, 2005-05-10 at 09:56 -0500, Ryan Klinkhammer wrote: Is it possible receive accounting information for cisco devices. When I go to my log files I can see the start and stop of my session but don’t see the commands I entered on the device. Or does freeradius not log accounting

Wireless Provisioning Service Protocol

2005-10-05 Thread King, Michael
Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS? http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/p rotocol/portal_wireless_provisioning_service_protocol.asp It sounds really cool in theory. From:

Re: Wireless Provisioning Service Protocol

2005-10-05 Thread Michael Griego
Hey, Michael, From my recollection, implementing WPS would require first implementing PEAPv2, and there hasn't been any movement there yet. --Mike King, Michael wrote: Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS?

Re: Wireless Provisioning Service Protocol

2005-10-05 Thread Josh Howlett
I read the 132 page spec last night. Personally, I wasn't terribly impressed. josh. King, Michael wrote: Has any thought been given on adding the WPS (Wireless Provisioning Service) Protocol to FreeRADIUS? http://msdn.microsoft.com/library/default.asp?url=/library/en-us/randz/p

Re: Call-Check

2005-10-05 Thread Paolo Rotela
I'm using Cisco preauth feature on an AS5300 series acting as standard modem RAS against a FreeRADIUS. I use it to blacklist some ANIs that aren't allowed to put a call on my gear, and I need to do it before the call gets answered. It is working great in the sense that I get the blacklisted

Re: Accounting and Cisco devices

2005-10-05 Thread Kevin Bonner
On Wednesday 05 October 2005 15:07, Guy Fraser wrote: On Wed, 2005-05-10 at 09:56 -0500, Ryan Klinkhammer wrote: Is it possible receive accounting information for cisco devices. When I go to my log files I can see the start and stop of my session but don’t see the commands I entered on the

access for 24 hours after first login?

2005-10-05 Thread Markus Krause
hello list, i set up freeradius succesfully for authentification against pam and users file :-) now i want to enhance the functionality about the following feature: setting up several predefined (guest) accounts with a generated username and password. this account should be valid from the first

Re: access for 24 hours after first login?

2005-10-05 Thread Alan DeKok
Markus Krause [EMAIL PROTECTED] wrote: i set up freeradius succesfully for authentification against pam and users file :-) Please don't use authentification. It's authentication. now i want to enhance the functionality about the following feature: setting up several predefined (guest)

Re: Which Operating System is best for freeRADIUS

2005-10-05 Thread Dusty Doris
Building my FR server, I have the choice of a number of operating system for my FreeRADIUS server. Anybody with a suggestion which operating system is best suited for FR? I like to run FR on a VPS (virtual private server) using one of the following OS: - FreeBSD 4.9 (jail) - FreeBSD 5.2 (jail) -

Re: Call-Check

2005-10-05 Thread Ivo
On Sri, 2005-10-05 at 17:28 -0300, Paolo Rotela wrote: so Cisco normally lets you put the DNIS or ANI or something in the UserName field and password). The only two details is this and the fact that from FR's point of view, the NAS will be doing Auth twice, one for the preauth fase on the

Re: Call-Check

2005-10-05 Thread Alan DeKok
Ivo [EMAIL PROTECTED] wrote: So, how can I tell FR not to look for password and to accept call from some phone number if that number is in some sql table? Auth-Type := Accept Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

add a realm to a User-Name if no realm

2005-10-05 Thread Lewis Bergman
I am in need of rewriting a username in a request to include a domain. Basically, if a user comes in as user add the realm @dom.com so it is checked as [EMAIL PROTECTED]. I found this in the archives which seems to be close.

Re: add a realm to a User-Name if no realm

2005-10-05 Thread Lewis Bergman
I wasn't quite specific enough on my post. The NULL match in the realm module would probably work for the no realm at all situation. I was hoping to look for a specific %{NAS-Identifier} and based on that AND the fact that a user does not have an @ in the username, add the realm. -- Lewis