After signal HUP freeRADIUS Segmentation fault

2007-08-13 Thread Hangjun He
freeRADIUS version is 1.1.6.. I saw same question in mail-list(freeRADIUS 0.8), Did this problem fix?? Thanks. Nothing to do. Sleeping until we see a request. Reloading configuration files. reread_config: reading radiusd.conf Config: including file:

Re: Trying to work out 24hour access cards

2007-08-13 Thread Evert Meulie
Hi! Thanks for the swift reply. So if I run the script at every login, all it should do is have it check if there are no previous logins for that particular username, and if that's the case it should add a record containing: (username) Expiration = 86400 to... RadReply? Or is it a different

Re: Patch for SQL and SQLIPPool performance

2007-08-13 Thread Peter Nixon
On Fri 10 Aug 2007, Roy Walker wrote: This patch has 2 things. Rewritten SQL queries for Postgres on the SQLIPPool. This actually makes using the SQLIPPool possible with a lot of clients (for Postgres at least, the FOR UPDATE was unnecessary since it is already in a transaction block, and

Re: EAP-Handshakes: every reply runs the full authorize-section

2007-08-13 Thread Rainer Brinkmann
i forgot: thanks for the info - Original Message - From: Arran Cudbard-Bell [EMAIL PROTECTED] To: FreeRadius users mailing list freeradius-users@lists.freeradius.org Sent: Monday, June 11, 2007 10:16 AM Subject: Re: EAP-Handshakes: every reply runs the full authorize-section Rainer

strip domain

2007-08-13 Thread Ashraf Al-Basti
Dear, i had did proxying the users based on the domain and the pstn no. using sql query on the radcheck table, but i need to strip the username before proxying it. please advice - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Error running FreeRadius 1.1.7

2007-08-13 Thread George Beitis
Hi everyone I get this error when trying to run FreeRadius 1.1.7 for the first time, does this sound familiar?: /usr/local/etc/raddb/hints[37]: Parse error (check) for entry DEFAULT: Unknown value Yes for attribute Strip-User-Name regards George - List info/subscribe/unsubscribe? See

EAP-TLS Certificates

2007-08-13 Thread abhishek singh
I am using free radius 1.1.6 for EAP-TLS. I think all the example certificates are old. Is there a place from where i can download some sample certificates (both for free radius and for client) which can be used for communication. - List info/subscribe/unsubscribe? See

Re: EAP-TLS Certificates

2007-08-13 Thread A . L . M . Buxey
Hi, I am using free radius 1.1.6 for EAP-TLS. I think all the example certificates are old. Is there a place from where i can download some sample certificates (both for free radius and for client) which can be used for communication. get 1.1.7. ensure you copy your config to somewhere safe

Problem on WPA-EAP with Linux

2007-08-13 Thread Alexandros Gougousoudis
Hi, I'am having trouble to authenticate my linux workstations with wpa_supplicant to Freeradius (1.1). The Windows Stations are working fine, but linux is making trouble. The AP is a Linksys WLAN Accesspoint, as said WPA Radius works, because all Windows Notebooks can login. I'am doing a WPA

Re: error on start freeradius + jradius

2007-08-13 Thread George Beitis
Hi Kevin This is the output i get Any ideas? regards George [EMAIL PROTECTED]:/# /usr/local/sbin/radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file: /usr/local/etc/raddb/proxy.conf Config: including file:

Re: Problem on WPA-EAP with Linux

2007-08-13 Thread Alexandros Gougousoudis
Hi, sorry for the repost, I simply wanted to add, that I'am doing an EAP-TLS conversation and have all certs installed. TIA Alex - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread Alan DeKok
George Beitis wrote: Hi everyone I get this error when trying to run FreeRadius 1.1.7 for the first time, does this sound familiar?: /usr/local/etc/raddb/hints[37]: Parse error (check) for entry DEFAULT: Unknown value Yes for attribute Strip-User-Name It means you installed 1.1.7 on a

Re: EAP-TLS Certificates

2007-08-13 Thread Alan DeKok
[EMAIL PROTECTED] wrote: get 1.1.7. ensure you copy your config to somewhere safe and then install 1.1.7 - it will auto generate the EAP-TLS stuff so you can get working with it. That's CVS head, not 1.1.7. I think we can release 2.0-pre2 this week. Alan DeKok. - List

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread Alan DeKok
George Beitis wrote: Thanks for the reply Alan, i was running version 1.1.1 before. I deleted the raddb directory, what else should i delete before making a clean install? That should have worked. Read the debug output to see which dictionary files it's loading. Make sure you've

Re: Problem on WPA-EAP with Linux

2007-08-13 Thread Alan DeKok
Alexandros Gougousoudis wrote: After switching on my debug I see this: rlm_eap: NAK asked for bad type 0 rlm_eap: Failed in EAP select The supplicant is misconfigured, or broken. Which is most certanly the reason why the auth fails. But I'am far away from knowing the solution. Can

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread George Beitis
Thanks for the reply Alan, i was running version 1.1.1 before. I deleted the raddb directory, what else should i delete before making a clean install? regards George Alan DeKok wrote: George Beitis wrote: Hi everyone I get this error when trying to run FreeRadius 1.1.7 for the first

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread A . L . M . Buxey
Hi, Thanks for the reply Alan, i was running version 1.1.1 before. I deleted the raddb directory, what else should i delete before making a clean install? possibly all the rlm_* files in your lib directory - wherever that is for your installation, to stop shared library problems. alan -

Re: EAP-TLS Certificates

2007-08-13 Thread A . L . M . Buxey
Hi, That's CVS head, not 1.1.7. I think we can release 2.0-pre2 this week. comments on CVS: the listen directive is not active by default in the radiusd.conf , I thought this would have been made the de facto way for 2.0 naslist, realms and clients are still present - obsolete in 1.1.x

OR Problem in authorize_check_query

2007-08-13 Thread E. abdelghani
hello,i have a problem in this sql-statement (in mssql.conf): authorize_check_query = "SELECT id,UserName,Attribute,Value,op,right FROM ${authcheck_table} WHERE ((Username = '%{SQL-User-Name}') AND (right = 1) AND (CallingID = '%{Calling-Station-Id}')) OR ('%{Called-Station-Id}' IN (SELECT

RE: Problem on WPA-EAP with Linux

2007-08-13 Thread MiƂosz Modrzewski
Are you sure you have property configurated Windows client?? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] ] On Behalf Of Alexandros Gougousoudis Sent: Monday, August 13, 2007 4:03 PM To: FreeRadius users mailing list Subject: Re: Problem on WPA-EAP with Linux Hi,

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread George Beitis
Hi Alan, i removed all the dictionary files as you recommended and any other freeradius related file on the system, i even made a package using the freeradius build guide and installed and uninstalled it. The problems i have remain the same. This is what i get for my output. The only

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread George Beitis
I noticed someone else had the same problem on the 11th of June, It was also suggested to him to use the dictionaries that came with freeradius, but there has been no response of any sort since then on that subject. It would be good if the person who asked the original question found a solution

Re: Error running FreeRadius 1.1.7

2007-08-13 Thread Alan DeKok
George Beitis wrote: Hi Alan, i removed all the dictionary files as you recommended and any other freeradius related file on the system, i even made a package using the freeradius build guide and installed and uninstalled it. The problems i have remain the same. This is what i get for my

Re: EAP-TLS Certificates

2007-08-13 Thread Alan DeKok
[EMAIL PROTECTED] wrote: the listen directive is not active by default in the radiusd.conf , I thought this would have been made the de facto way for 2.0 ? bind_address and port are no longer globally defined in radiusd.conf. There is instead a top-level listen directive. naslist, realms

Re: EAP-TLS Certificates

2007-08-13 Thread A . L . M . Buxey
hi, thanks - sorry i got confused over 2 of my repositories earlier today (i'm keeping TNC patch uptodate with FR releases) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS Certificates

2007-08-13 Thread Peter Nixon
On Mon 13 Aug 2007, Alan DeKok wrote: [EMAIL PROTECTED] wrote: the listen directive is not active by default in the radiusd.conf , I thought this would have been made the de facto way for 2.0 ? bind_address and port are no longer globally defined in radiusd.conf. There is instead a

Configuration issue - unknown client

2007-08-13 Thread Dan O'Reilly
This is my first stab at Freeradius. I have the server installed on Sabayon Linux, and the radtest script runs fine. I've done basically no configuration to it, because I'm not sure what to configure. I'm writing a client on another system (it's VMS if that's germane). I format send a

radius client in on Server, Freeradius on another Server

2007-08-13 Thread ram
Hi I have radius client installed in my server and freeradius and mysql installed in other server how can i connect them ? what configs i need to change ram - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuration issue - unknown client

2007-08-13 Thread Nicholas Hall
On 8/13/07, Dan O'Reilly [EMAIL PROTECTED] wrote: This is my first stab at Freeradius. I have the server installed on Sabayon Linux, and the radtest script runs fine. I've done basically no configuration to it, because I'm not sure what to configure. I'm writing a client on another system

Re: radius client in on Server, Freeradius on another Server

2007-08-13 Thread Nicholas Hall
On 8/13/07, ram [EMAIL PROTECTED] wrote: Hi I have radius client installed in my server and freeradius and mysql installed in other server how can i connect them ? what configs i need to change ram You will need to add the client in clients.conf on the server -- Nicholas Hall [EMAIL

Re: Configuration issue - unknown client

2007-08-13 Thread Dan O'Reilly
Same issue. Here's my /etc/raddb/clients.conf: client 192.168.0.11 secret foobar At 04:15 PM 8/13/2007, Nicholas Hall wrote: On 8/13/07, Dan O'Reilly mailto:[EMAIL PROTECTED][EMAIL PROTECTED] wrote: This is my first stab at Freeradius. I have the server installed on Sabayon Linux, and the

Re: radius client in on Server, Freeradius on another Server

2007-08-13 Thread ram
You will need to add the client in clients.conf on the server iam using radiusclient-ng on client side to connect to radius server is there anything required to config radiusclient-ng side iam using mysql, so i need to add in database or clients.conf ( hardcode) ram - List

Re: Configuration issue - unknown client

2007-08-13 Thread Nicholas Hall
On 8/13/07, Dan O'Reilly [EMAIL PROTECTED] wrote: Same issue. Here's my /etc/raddb/clients.conf: client 192.168.0.11 secret foobar Shouldn't that be: client 192.168.0.11 { secret = foobar } -- Nicholas Hall [EMAIL PROTECTED] 262.208.6271 - List info/subscribe/unsubscribe? See

Re: Configuration issue - unknown client

2007-08-13 Thread Dan O'Reilly
I had it that way and it didn't work either. At 04:27 PM 8/13/2007, Nicholas Hall wrote: On 8/13/07, Dan O'Reilly mailto:[EMAIL PROTECTED][EMAIL PROTECTED] wrote: Same issue. Here's my /etc/raddb/clients.conf: client http://192.168.0.11192.168.0.11 secret foobar Shouldn't that be: client

Re: Configuration issue - unknown client

2007-08-13 Thread Nicholas Hall
On 8/13/07, Dan O'Reilly [EMAIL PROTECTED] wrote: I had it that way and it didn't work either. At 04:27 PM 8/13/2007, Nicholas Hall wrote: On 8/13/07, Dan O'Reilly mailto:[EMAIL PROTECTED][EMAIL PROTECTED] wrote: Same issue. Here's my /etc/raddb/clients.conf: client

Re: Configuration issue - unknown client

2007-08-13 Thread Dan O'Reilly
My /etc/raddb/clients.conf: client 192.168.0.11 { secret = foobar } Here's the output from radiusd -X: danolaptop freeradius-1.1.7 # /usr/local/sbin/radiusd -X Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including file:

Radius is running away with the CPU

2007-08-13 Thread David
I have been using freeradius for several years but in the last few months have seen a problem with the cpu usage. TOP almost always shows radius with 100% CPU much of the time it is at 300%. The load average runs up to 32 at times as well. This corresponds with the max_servers. I am using a

Re: Radius is running away with the CPU

2007-08-13 Thread Scott Lambert
out which realm they are coming from. I am trying to use the new unlang option to avoid writing an rlm_perl type script. FreeRADIUS-snapshot-20070813 I don't know if any of this is legal. I'm using one sql module. I just call it once for each realm after changing the %{User-Name} to append

EAP-TLS certificate based authentication in linux

2007-08-13 Thread Anoop
Hi I have certificate based EAP_TLS authentication working with windows xp clients.Does the same set up works for linux also.For xp clinets i am using p12 and root.der certificates. Regards Anoop ** DISCLAIMER ** Information contained and transmitted by this E-MAIL is

Re: Radius is running away with the CPU

2007-08-13 Thread Scott Lambert
Grr, I took out the In-Reply-To, but I forgot to change the Subject. I am so sorry, and embarassed. -- Scott LambertKC5MLE Unix SysAdmin [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Authenticate users from 3 realms in one MySQL database

2007-08-13 Thread Scott Lambert
out which realm they are coming from. I am trying to use the new unlang option to avoid writing an rlm_perl type script. FreeRADIUS-snapshot-20070813 I don't know if any of this is legal. I'm using one sql module. I just call it once for each realm after changing the %{User-Name} to append