VSA's and local dictionary

2011-12-19 Thread Andrew Long
x ATTRIBUTE Nomadix-Group-Max-Down 21 [type] Nomadix Thank you for any help. - Andrew Long Here is the existing dictionary... # FILE: /usr/share/freeradius/dictionary.nomadix # -*- text -*- # # Version: $Id$ # VENDOR Nomadix 3309 #

Re: VSA's and local dictionary

2011-12-19 Thread Andrew Long
> So, the question is, will the following entry in /etc/raddb/dictionary > correctly add the "new" attributes? I have not entered the types yet, > waiting on the OEM for some clarification. Developer at OEM reported perfectly safe to add the attributes to the existing site-wide dictionary.nomadix

rpmbuild errors 2.1.3-0

2008-12-12 Thread Andrew Long
I'm back again trying to build the latest into rpm for our CentOS 5.x servers. I have edited the spec file so Name: freeradius and repacked the tgz so it is freeradius-2.1.3.tar.gz but I get [al...@host SPECS]$ rpmbuild -ba --nobuild freeradius.spec Processing files: freeradius-2.1.3-0 error: F

Re: rpmbuild errors 2.1.3-0

2008-12-12 Thread Andrew Long
Please ignore... tried again a few minutes later and it works perfectly. - Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

sending attributes from sql

2009-01-05 Thread Andrew Long
but this does not work either. I understand the list is not support for Colubris, but I hope someone with more experience can tell me how I might be misinterpreting the instructions. Thank you. Andrew Long FreeRADIUS Ver. 2.1.3 Backend: MySQL - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

help with undocumented attributes

2006-09-29 Thread Andrew Long
, and 'Check-Login-Day'. I need to get a better understanding of how this session management is done. Good documentation on the web seems hard to come by. Any help most appreciated. -- Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re[2]: help with undocumented attributes

2006-10-02 Thread Andrew Long
sible, without re-compiling? -- Regards, Andrew Long Network Support Specialist EscapeWire Solutions, LLC 617 Dingens Street Buffalo, NY 14206 Office: (716) 893-4984 Mobile: (716) 830-5169 Fax: (716) 891-4288 Web: http://www.escapewire.com E-mail: [EMAIL PROTECTED] Friday, September 29, 2006, 4:58:

Re[4]: help with undocumented attributes

2006-10-02 Thread Andrew Long
As I have inherited the system and am very new to radius, I have no idea which modules are currently installed. How can I determine? In reading over the configure/install docs, I so far see nothing about modules. Where can I get info on modules? -- Regards, Andrew Long > On Mon 02 Oct 2

dialupadmin & suse 10.1 binary

2006-10-04 Thread Andrew Long
I installed the binary for SUSE 10.1 and dialupadmin. When I open "index.html" in the dialupadmin htdocs dir, firefox wants to open/save the buttons.php. Am I missing some required support for php? -- Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradiu

sole remaining configure error [utmpx]

2006-10-21 Thread Andrew Long
Well, I'm on the way to building my first freeradius server and have one remaining configure error. Can anyone tell me about this one, how to fix it and will it break anything? Test build is being done on Ubuntu 6.06 dapper. Below is the config.log --Andrew configure:750: checking for gcc

Re: sole remaining configure error [utmpx]

2006-10-22 Thread Andrew Long
On Sun, 2006-10-22 at 10:56 -0400, Alan DeKok wrote: > Andrew Long <[EMAIL PROTECTED]> wrote: > > Well, I'm on the way to building my first freeradius server and have one > > remaining configure error. Can anyone tell me about this one, how to fix > &g

limiting sessions

2006-11-07 Thread Andrew Long
at may apply is "max-acct-age". I am pretty new to this, so any detail is most appreciated. -- Regards, Andrew Long EscapeWire Solutions, LLC 617 Dingens Street Buffalo, NY 14206 Office: (716) 893-4984 Mobile: (716) 830-5169 Fax: (716) 891-4288 Web: http://www.escapewire.com E-mail: [

Re[2]: limiting sessions

2006-11-07 Thread Andrew Long
> Andrew Long <[EMAIL PROTECTED]> wrote: >> I need to boot users at one property after a specified time period. >> We have adjusted the "max-daily-session" to "1800" (30 minutes), >> but users still seem to be staying on. Can someone point me in the &

Re[3]: limiting sessions

2006-11-08 Thread Andrew Long
> Andrew Long <[EMAIL PROTECTED]> wrote: >> I need to boot users at one property after a specified time period. >> We have adjusted the "max-daily-session" to "1800" (30 minutes), >> but users still seem to be staying on. Can someone point me in the &

Re[5]: limiting sessions

2006-11-09 Thread Andrew Long
> Andrew Long <[EMAIL PROTECTED]> wrote: >> I tried Session-Timeout but it doesn't seem to do the job. > So... is it being sent back to the NAS? If it is, then the NAS is > ignoring it. Go ask your NAS manufacturer for a refund, or for a > firmware upgrade that

Re[7]: limiting sessions

2006-11-09 Thread Andrew Long
>> Andrew Long <[EMAIL PROTECTED]> wrote: >>> I tried Session-Timeout but it doesn't seem to do the job. >> So... is it being sent back to the NAS? If it is, then the NAS is >> ignoring it. Go ask your NAS manufacturer for a refund, or for a >

Re[2]: limiting sessions

2006-11-09 Thread Andrew Long
> On Thursday 09 November 2006 11:00, Andrew Long wrote: >> Here is the output from radiusd -X regarding the answer to an >> auth-request from one of the properties where I changed >> session-timeout to 1800. It does not look to me like the >> session-timeout att

Re[2]: limiting sessions

2006-11-09 Thread Andrew Long
> On Thursday 09 November 2006 11:34, Andrew Long wrote: >> also ran >> >> SELECT >> `usergroup`.`UserName`, >> `usergroup`.`creationdate`, >> `usergroup`.`GroupName` >> from usergroup >> where username = '4aroma70370'; >> >&g

Re[3]: limiting sessions

2006-11-10 Thread Andrew Long
... > DELETE FROM radius.usergroup WHERE GroupName = 'aroma' > THEN... > INSERT INTO radius.usergroup (UserName, CreationDate, GroupName) > VALUES ('username0001', (CURRENT_DATE), 'aroma'); > repeated for all 500 usernames... > I think this should work, as all the usernames in use are stored in

Re: Accounts staying online past Session Timeout value

2006-11-29 Thread Andrew Long
ibute was not being sent by freeradius. In my case, it was due to the users not being listed in the usergroups table. The session-timeout was in radgroupreply... Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm_sql, mysql configuration

2006-12-04 Thread Andrew Long
s no field for allowed ip addresses of clients. Am I missing something? I see no mention of the nas table in the rlm_sql docs. Thanks in advance for all help. Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

upgrade from .9 to latest

2006-12-12 Thread Andrew Long
box? -- Regards, Andrew Long Network Support Specialist EscapeWire Solutions, LLC 617 Dingens Street Buffalo, NY 14206 Office: (716) 893-4984 Mobile: (716) 830-5169 Fax: (716) 891-4288 Web: http://www.escapewire.com E-mail: [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http

Re[2]: upgrade from .9 to latest

2006-12-12 Thread Andrew Long
ould change in the compile to be sure nothing interferes with the running server - will it be just the install paths, or is there more? -Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

0.9.3 > 1.1.0 sql errors

2007-01-03 Thread Andrew Long
ts are the identical set. When authenticating to the old server, no errors result and all A-V pairs are sent along... Any hints? Andrew -- Regards, Andrew Long Network Support Specialist EscapeWire Solutions, LLC 617 Dingens Street Buffalo, NY 14206 Office: (716) 893-4984 Mobile: (716

Re[2]: 0.9.3 > 1.1.0 sql errors

2007-01-04 Thread Andrew Long
> Long wrote: >> How do you recommend I proceed when the A-V pair in question >> (Service-Type:Administrative-user) no longer exists in 1.1.0? >> The 1.1.0 dictionary only defines about 5 internal service types... > Did you look for it in ALL of the dictionaries? The 1.1.x version > re-arrang

Re[2]: 0.9.3 > 1.1.0 sql errors

2007-01-04 Thread Andrew Long
Can you clarify: In 0.9.3 (/usr/local/raddb/dictionary): VALUE Service-TypeAdministrative-User 6 In 1.1.0 (usr/local/share/freeradius/dictionary.rfc2865): VALUE Service-TypeAdministrative-User 6 And this represents data from tables on BOTH servers: mysql> S

Re[2]: 0.9.3 > 1.1.0 sql errors

2007-01-04 Thread Andrew Long
>> Am I correct in thinking that an update to the tables (replacing >> "Administrative" with "Administrative-User") ought to fix this? > Yes. Now I still get: Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 Invalid operator for item Suffix: re

Re[2]: 0.9.3 > 1.1.0 sql errors

2007-01-05 Thread Andrew Long
ect" Colubris-AVPair += "mac-address=00-0d-29-39-03-59,hawth_cn3000_00-0d-29-39-03-59,guest_connect" Colubris-AVPair += "mac-address=00-0c-85-47-b6-26,hawth_cn3000_00-0c-85-47-b6-26,guest_connect" Colubris-AVPair += "mac-address=00-14-BF-03-AA-37,hawthorn_0014BF03AA37,hawthorn_web" Finished request 0 -- Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re[2]: 0.9.3 > 1.1.0 sql errors

2007-01-05 Thread Andrew Long
>> Processing the authorize section of radiusd.conf >> modcall: entering group authorize for request 0 >> Invalid operator for item Suffix: reverting to '==' >> Invalid operator for item Suffix: reverting to '==' >> Invalid operator for item Suffix: reverting to '==' >> >> How can I tell what ope

call for help

2007-01-08 Thread Andrew Long
would consider making themselves available via telephone or chat for a tutelage, great; If $ is required, we can discuss that. Please email off-list if you would consider. -- Regards, Andrew Long Network Support Specialist EscapeWire Solutions, LLC 617 Dingens Street Buffalo, NY 14206 Office: (716

user/group and permissions CentOS 4.4

2007-01-12 Thread Andrew Long
give me a little guidance with the permissions and user/group setup for Cent. --Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: lookingfor some information to test a dictonary rules

2007-01-13 Thread Andrew Long
I hope you will keep this thread updated with your progress. We use many proxim devices and I'd be interested to follow... Andrew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

building 1.4 (CentOS 4.4) MYSQL

2007-01-14 Thread Andrew Long
I have the server running and can now authenticate remotely and records are correctly added to radacct. Part of our setup requires the rlm_sqlcounter module. I inserted the $INCLUDE line and the output tells me it is loading. However, I read in rlm_sqlcounter doc that you must ./configure --with-ex

Re[2]: building 1.4 (CentOS 4.4) MYSQL

2007-01-14 Thread Andrew Long
> It decouples the RADIUS server from your SQL server. Think of your > car. If the axle was welded to the frame, you would feel it as you > drove over every pebble. The shocks decouple the axle from the rest of > the car, so you can drive over potholes at speed, and only feel small bumps. Nic

Re[3]: building 1.4 (CentOS 4.4) MYSQL

2007-01-14 Thread Andrew Long
two hours ago I was able to ntradping and receive an accept. Now, I am rejected. All I did was load the sql tables with data. (Before, my only record was the one you see returned below). Shouldn't this still authorize? Is this due to (2nd to last line) "no authenticate method"? rlm_sql (sql): sql_

building 1.4 (CentOS 4.4) MYSQL 99% home

2007-01-16 Thread Andrew Long
Thanks to help from many folks here, tonight I got one property up and running on our new server. THANK YOU! Now, another question. When I start radius with > radiusd or /usr/local/sbin/radiusd, I get a brief message "reading configuration file..."; then, doing >ps aux | grep radiusd returns nothi

Nomadix VSA

2012-04-04 Thread Andrew Long
ed as I'm working under a deadline. Thank you, Andrew Long EscapeWire Solutions - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Nomadix VSA

2012-04-04 Thread Andrew Long
> I am trying to implement two of the Nomadix VSA's, Nomadix-BW-Up and > Nomadix-BW-Down. They are included in the dictionary.nomadix that > shipped with my installed version, 2.1.8 running on CentOS. > > I am using a MySQL backend and have tried adding the attributes in > radgroupreply (for user g

Re: Nomadix VSA

2012-04-04 Thread Andrew Long
So, to try and re-phrase my question at this point: Why would freeradius stop processing after radusergroup and radgroupcheck, without ever doing the query on radgroupreply to see if there are items there? The user is a member of only one group, and this is the only user/group relationship I see t

Re: Nomadix VSA

2012-04-05 Thread Andrew Long
>> I am trying to implement two of the Nomadix VSA's, Nomadix-BW-Up and >> Nomadix-BW-Down. They are included in the dictionary.nomadix that >> shipped with my installed version, 2.1.8 running on CentOS. > >  OK. > >> I am using a MySQL backend and have tried adding the attributes in >> radgrouprep

Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
Platfrom: CentOS 5.8 FreeRADIUS: 2.1.8 Backend: MySQL I am unable to get FreeRadius to reply with attributes assigned in the radgroupreply table for some groups. When the same attributes are assigned in radreply, the server sends them as expected. Adding a Fall-Through entry for the user in radrep

Re: Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
For reference, here is a debug from another account's auth request which successfully processes radgroupreply and sends the pairs from that table. The attributes are different here because the NAS is different and I don't want to confuse it by assigning another vendor's attributes. I did accidental

Re: Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
>  Did you set "read_groups = yes" in sql.conf? > >  What about the comments just above that configuration? > >  Alan DeKok. > - > List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html It was commented out! Given the comments, though, do you have any idea why it would stil

Re: Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
I should have said... There is also the oddity that even though the line was commented previously, groups were being processed as I would see in the reply packets pairs that existed only in radgroupreply. JUST NOT THE ONES I WANT. - List info/subscribe/unsubscribe? See http://www.freeradius.org/li

Re: Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
OK, the test from an actual client behind the Nomadix fails even after un-commenting read_groups = yes and restarting, still no group attributes passed in reply. This debug is rather lengthy as I thought you might want to see some of the earlier loading (though I snipped some). What should I try

Re: Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
I think we crossed each other across the water... - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Failure to Process radgroupreply

2012-04-05 Thread Andrew Long
In case you missed it, the debug from latest test is a couple messages previous (our messages crossed). I have looked through it and with my limited knowledge see nothing exceptional except that processing stops with radgroupcheck and never moves to radgroupreply. Have you any ideas? - Andrew - Li

Re: Failure to Process radgroupreply

2012-04-06 Thread Andrew Long
On Thu, Apr 5, 2012 at 12:04 PM, Andrew Long wrote: > In case you missed it, the debug from latest test is a couple messages > previous (our messages crossed). I have looked through it and with my > limited knowledge see nothing exceptional except that processing stops > with radgr

Re: Failure to Process radgroupreply

2012-04-08 Thread Andrew Long
> >  Run the queries manually, and try to sort it out. > >  Alan DeKok. Thank you. Just in case, I tested a build of 2.1.12 now avail through the stock repos on a CentOS 5.8 VM. It's working correctly, so I'm confident I can get there (an upgrade, to boot) without much too difficulty. - Andrew -

Group Processing with MySQL

2012-04-14 Thread Andrew Long
p with how to get this working? Thank you - Andrew Long Here are the queries for the user's auth request: [sql] sql_set_user escaped user --> 'memwg150412' rlm_sql (sql): Reserving sql socket id: 1 [sql] expand: SELECT id, username, attribute, value, op FROM radcheck WHERE userna

Re: Group Processing with MySQL

2012-04-15 Thread Andrew Long
Solved. Debugging with SQL is piece-meal, and an early problem will obscure later ones. 1. I had a reply item FreeRADIUS did not understand (but this only gets logged when all else runs clean). 2. I had a check item that is likely wrong (and would appreciate an answer on this). I had Service-Typ

unsubscribe

2013-02-20 Thread Andrew Long
unsubscribe - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rpmbuld errors 2.0.1

2008-01-28 Thread Andrew Long
; defined in your .rpmmacros file. =) > > > Joe Vieira > UNIX Systems Administrator > Clark University - ITS > > > > Andrew Long wrote: > > Well, not so lucky after all. Looks like the build get 99% completed > > and we get an error: > > > > + RADDB=/var

Re: rpmbuld errors 2.0.1

2008-01-28 Thread Andrew Long
gt; "freeradius-server" > or just open the tar.gz rename the directory INSIDE IT (which is also > freeradius-server) to freeradius-2.0.1... then zip it all back up and > run your spec again and it will work. > > Joe Vieira > UNIX Systems Administrator > Clark Universi

Re: rpmbuld errors 2.0.1

2008-01-28 Thread Andrew Long
Bingo! Thank You. - Andrew On Jan 28, 2008 8:55 AM, Joe Vieira <[EMAIL PROTECTED]> wrote: > you'll need to either rename everything in the spec file to be > "freeradius-server" > or just open the tar.gz rename the directory INSIDE IT (which is also > freeradius-server) to freeradius-2.0.1... the

rpmbuld errors 2.0.1

2008-01-28 Thread Andrew Long
Hello: I am trying to build the rpm for 2.0.1 on CentOS 5. The first oddity is that the source now comes as freeradius-server-2.0.1.tar.gz; starting the rpmbuild with $ rpmbuild -bb freeradius.spec yields an error that SOURCES/freeradius-2.0.1.tar.gz does not exist. I tried renaming freeradius-serv

Re: sql accounting - no records - 2.0.1 RESOLVED

2008-01-30 Thread Andrew Long
I expected to see some traffic too soon, now it's coming... but where are the accounting queries? Andrew On Jan 30, 2008 8:52 AM, Andrew Long <[EMAIL PROTECTED]> wrote: > I've just installed 2.0.1 on CentOS 5 with MySQL 5.x. I can get the > clients to authenticate and I s

pap "Cleartext-Password", sql etc...

2008-01-30 Thread Andrew Long
eprocess chap mschap suffix unix files sql expiration logintime noresetcounter dailycounter monthlycounter daypasscounter pap} authenticate { pap chap mschap} Thanks muchly, Andrew Long EWS - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pap "Cleartext-Password", sql etc...

2008-01-30 Thread Andrew Long
pt by "elmaroma_cn3000" with CHAP password > > rlm_chap: Cleartext-Password is required for authentication > > ++[chap] returns invalid > > auth: Failed to validate the user. > > Login incorrect (rlm_chap: Clear text password not available): > > [elmaroma_cn3

sql accounting - no records - 2.0.1

2008-01-30 Thread Andrew Long
is set to sql. The one oddity I notice is that "default" has: # See "Accounting queries" in sql.conf sql But I can see no accounting queries anywhere in the provided sql.conf ?? Thank You. Andrew Long EWS Solutions - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pap "Cleartext-Password", sql etc...

2008-01-31 Thread Andrew Long
traffic laws by sending consecutive requests so far apart in number... Ivan, thank you. Also, kudos to all developers for making the debug output so much more precise! - Andrew Long EWS Solutions 2008/1/31 Ivan Kalik <[EMAIL PROTECTED]>: > OK, you replaced the operator. Why didn'

Re: pap "Cleartext-Password", sql etc...

2008-01-31 Thread Andrew Long
Any idea why making the same change ( to attribute 'Cleartext-Password and op ':=') on 1.1.7 would lead to failed authentications? Same sql setup, chap. as is, using attitribute 'password' or 'User-Password' (both work) and op '=='. Andrew On Jan 31, 2008 8:07 AM, Ivan Kalik <[EMAIL PROTECTED]>

Re: pap "Cleartext-Password", sql etc...

2008-02-01 Thread Andrew Long
A brief second test indicates I probably goofed my update query; I just tried again on 1.1.7 and it worked. Good thing I'm not in charge of financial records. - Andrew On Feb 1, 2008 2:22 AM, Ivan Kalik <[EMAIL PROTECTED]> wrote: > >Any idea why making the same change ( to attribute 'Cleartext-Pa

rpmbuild freeradius-server-2.0.3.tar.gz

2008-03-17 Thread Andrew Long
CentOS 4.6 (final) per instructions I received when rpmbuilding 2.0.1, I added "%_incdir /usr/include" to my .rpmmacros file. I was unsure whether or not the dir in the tgz still needed renaming to freeradius-2.0.3 so I left it as is. Now, I get the following error returned after running rpmbuild

Re: rpmbuild freeradius-server-2.0.3.tar.gz

2008-03-17 Thread Andrew Long
> RPM build errors: > File not found: > /var/tmp/freeradius-server-root/usr/share/freeradius-server > [EMAIL PROTECTED] SPECS]$ ls /var/tmp/freeradius-server-root/usr/share/ doc freeradius man - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rpmbuild freeradius-server-2.0.3.tar.gz

2008-03-17 Thread Andrew Long
> > > RPM build errors: > > > File not found: > /var/tmp/freeradius-server-root/usr/share/freeradius-server > > > > > > > [EMAIL PROTECTED] SPECS]$ ls /var/tmp/freeradius-server-root/usr/share/ > > doc freeradius man > > freeradius is freeradius-server - so change the rpmbuild accordi

Re: rpmbuild freeradius-server-2.0.3.tar.gz

2008-03-17 Thread Andrew Long
> if this is, indeed, what gets extracted, then edit the .spec file accordingly nano SPEC/freeradius.spec -- change -- Name: freeradius-server TO Name: freeradius save changes cd ../SOURCES tar xzf freeradius-server-2.0.3.tar.gz rm freeradius-server-2.0.3.tar.gz mv freeradius-server-2.0.3 freer

Re: rpmbuild freeradius-server-2.0.3.tar.gz

2008-03-17 Thread Andrew Long
> > if this is, indeed, what gets extracted, then edit the .spec file > > accordingly > > > nano SPEC/freeradius.spec > -- change -- > Name: freeradius-server TO > Name: freeradius > save changes > > cd ../SOURCES > tar xzf freeradius-server-2.0.3.tar.gz > rm freeradius-server-2.0.3.tar.g

permissions in /etc/raddb

2008-03-24 Thread Andrew Long
After a clean rpmbuild of 2.0.3, radiusd -X yielded some errors processing files in /etc/raddb. I ran strace and found permission denied on relevant files. The rpm installed files in this dir with ownership root.root, so naturally radiusd cannot read them. Is it preferable to allow read access to t

Re: rpmbuild freeradius-server-2.0.3.tar.gz

2008-03-24 Thread Andrew Long
> Change this line: > > %{_datadir}/%{name} > to: > %{_datadir}/freeradius > > The spec file *should* then work with the > freeradius-server-2.0.3.tar.gz file, subject to the _incdir comments below. On Cent, this means change _incdir to _includedir in freeradius.spec. And now the rpmbuil

Re: freeradius_2.0.3+mysql

2008-04-06 Thread Andrew Long
need help. You can reply off-list if you like. - Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

check active threads

2007-02-19 Thread Andrew Long
ool { start_servers = 5 max_servers = 32 min_spare_servers = 3 max_spare_servers = 10 max_requests_per_server = 0 } -- Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

chap rlm_sql authentication problem

2007-03-29 Thread Andrew Long
next request --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Waking up in 1 seconds... --- Walking the entire request list --- Sending Access-Reject of id 11 to 1 I have run all the queries manually on the server, and they all return result

RE: chap rlm_sql authentication problem

2007-03-29 Thread Andrew Long
I think I got it, I can now authenticate with ntradping, but I get an attribute dump: "unknown vendor 8744, size xx=''" repeated many times... Is this because I am impersonating the NAS from a laptop? ie., should clear up when the NAS is actually authenticating or does this point to another mis

RE: chap rlm_sql authentication problem

2007-03-30 Thread Andrew Long
egalleria_cn3200 modcall[authenticate]: module "chap" returns invalid for request 13 modcall: leaving group CHAP (returns invalid) for request 13 auth: Failed to validate the user. Delaying request 13 for 1 seconds Finished request 13 Going to the next request --- Walking the entire request list --- Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: chap rlm_sql authentication problem

2007-03-30 Thread Andrew Long
> > Now we're taking a step back because I tried changing the > username on > > the NAS and in the SQL and can no longer authenticate with > :( NTRADPING. > > Why use ntradping? Use radclient. I will in the future, but I'm in mid-stream here... > And you're using CHAP... which is why it

RE: chap rlm_sql authentication problem

2007-03-30 Thread Andrew Long
> >> Change the attribute name to Cleartext-Password, and the > operator > >> to ":=". > > > > I have about 20 other NAS's using this identical configuration and > > they all authenticate... > > They're not using CHAP. Each and every one is using CHAP. Promise. ANdrew - List info/sub

operators clarification

2007-05-04 Thread Andrew Long
reply items, instead of the request items. ---END QUOTE Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Apologies for the Vacation Message

2007-05-30 Thread Andrew Long
I am sorry to have bothered everyone with the message; I had forgotten I was subbed from this address when I left the office. Regards, Andrew Long IT Manager - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Apologies for the Vacation Message

2007-05-30 Thread Andrew Long
I'm working on it... my email is not cooperating right now. Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

unexpected radius packets

2007-06-08 Thread Andrew Long
NAS are Colubris cn3200; they are periodically logging events like the following: warning iprulesmgr Received unexpected RADIUS packet (id='56') from RADIUS Server (ip-address='65.xxx.xxx.x',port='1812') I have run a capture on the interface (server) and see that the packet with thi

1.1.4 slow to respond

2007-06-12 Thread Andrew Long
I am getting slow response time from the server for authentication requests (chap/mschap) that eventually fail (users submitting wrong password). The problem is that the NAS is sending about 3 requests before getting a response. By the time the deny arrives, it is out of order and the NAS logs

RE: Statistics tool?

2007-06-13 Thread Andrew Long
I use Nagios and NRPE to monitor my servers. With this you can check any number of things, including the db connections, slow queries, radius, cpu time, memory, any number of ports, etc... Provides a web interface and full reporting, including notifications by email, text message... It works beaut

download latest version: link broken?

2007-06-15 Thread Andrew Long
ftp://ftp.freeradius.org/pub/radius/freeradius-1.1.5.tar.gz I am getting an error that the dir or file does not exist... Am I right that 2.0 is not available and/or not considered stable yet? Regards, Andrew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: download latest version: link broken?

2007-06-15 Thread Andrew Long
--- [EMAIL PROTECTED] wrote: --- > You tried building from CVS lately ;) I was under the impression that a CVS build would not be recommended for a production server. Am I wrong? Andrew - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: download latest version: link broken?

2007-06-15 Thread Andrew Long
> -Original Message- > From: > [EMAIL PROTECTED] > .org > [mailto:[EMAIL PROTECTED] > eeradius.org] On Behalf Of Arran Cudbard-Bell > Sent: Friday, June 15, 2007 4:30 PM > To: FreeRadius users mailing list > Subject: Re: download latest version: link bro

1.1.6 README error?

2007-06-20 Thread Andrew Long
d use User-Password instead." I am wondering if the last line is supposed to read, " use Cleartext-Password instead." Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

1.1.6 rpmbuild on centos 4.4

2007-06-20 Thread Andrew Long
clue? Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: 1.1.6 rpmbuild on centos 4.4

2007-06-20 Thread Andrew Long
On 6/20/07, Tomas Hoger <[EMAIL PROTECTED]> wrote: > On 6/20/07, Andrew Long <[EMAIL PROTECTED]> wrote: > > > [EMAIL PROTECTED] SPECS]# rpmbuild -bb freeradius.spec > > > error: Failed build dependencies: > > > libtool-ltdl-devel is needed by freer

1.1.6 name resolution

2007-06-20 Thread Andrew Long
Is it permissable to use a hostname in clients.conf, as for a host using dyndns? Regards, Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: 1.1.6 name resolution

2007-06-20 Thread Andrew Long
> -Original Message- > From: > [EMAIL PROTECTED] > .org > [mailto:[EMAIL PROTECTED] > eeradius.org] On Behalf Of Dennis Skinner > Sent: Wednesday, June 20, 2007 3:37 PM > To: FreeRadius users mailing list > Subject: Re: 1.1.6 name resolution > > Andrew

1.1.6 initial testing

2007-06-21 Thread Andrew Long
uot; rlm_eap: Loaded and initialized type gtc mschapv2: with_ntdomain_hack = no rlm_eap: Loaded and initialized type mschapv2 Module: Instantiated eap (eap) Listening on authentication *:1812 Listening on accounting *:1813 Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:40620, id=221, length=57 User-Name = "along" User-Password = "testing" NAS-IP-Address = 255.255.255.255 NAS-Port = 0 Processing the authorize section of radiusd.conf modcall: entering group authorize for request 0 modcall[authorize]: module "preprocess" returns ok for request 0 modcall[authorize]: module "chap" returns noop for request 0 modcall[authorize]: module "mschap" returns noop for request 0 rlm_realm: No '@' in User-Name = "along", looking up realm NULL rlm_realm: No such realm "NULL" modcall[authorize]: module "suffix" returns noop for request 0 rlm_eap: No EAP-Message, not doing EAP modcall[authorize]: module "eap" returns noop for request 0 users: Matched entry DEFAULT at line 153 users: Matched entry along at line 218 modcall[authorize]: module "files" returns ok for request 0 rlm_pap: Found existing Auth-Type, not changing it. modcall[authorize]: module "pap" returns noop for request 0 modcall: leaving group authorize (returns ok) for request 0 rad_check_password: Found Auth-Type System auth: type "System" Processing the authenticate section of radiusd.conf modcall: entering group authenticate for request 0 rlm_unix: [along]: invalid password modcall[authenticate]: module "unix" returns reject for request 0 modcall: leaving group authenticate (returns reject) for request 0 auth: Failed to validate the user. Delaying request 0 for 1 seconds Finished request 0 >From "users" file: # Test Entries along Cleartext-Password := "testing" Thanks for any help... - Andrew Long - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: 1.1.6 initial testing

2007-06-21 Thread Andrew Long
> Also, for the "users" file: > ... > > users: Matched entry DEFAULT at line 153 > > users: Matched entry along at line 218 > > Go look at those entries, and read "man users". It should > be clear why the server is behaving as it is. > > Also, the FAQ says how to put an entry in