Questions about Freeradius counter

2007-03-22 Thread guest01
Hi guys! I have two minor problems with the radius counter. I am using the radius counter for counting the "sessiontimeout", which works quite good. counter sessiontimeout { filename = ${logdir}/db.sessiontimeout key = User-Name count-attribute = Acct-Session-Time

Re: Questions about Freeradius counter

2007-03-26 Thread guest01
Hi Thanks for your help. > U can specify the sql "query" for the counter: > counter maxinput { >filename = ${logdir}/db.maxinput >key = User-Name >count-attribute = Acct-Input-Octets >reset = never >counter-name = Input-Octets >check-name = ChilliSp

Logging accounting details in LDAP

2005-02-28 Thread guest01
I know it's not a good idea to log data in a directory, but is it possible? I can store user data in the LDAP, but accounting data? I know that I can log the accounting stuff in a sql database thxs for helping! best regards peda - List info/subscribe/unsubscribe? See http://www.freeradius.org

ppp radius-plugin

2005-03-07 Thread guest01
Hi I want to use radius authentication for pptp. Therefor I need the radius.so-plugin, which isn't included in the Debian default installation of ppp 2.4.2b3. So I compiled it manually (thank god there was a makefile) and copied it to the right path. (/usr/lib/pppd/2.4.2b3/). Everything worked fin

rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Hi I have a problem with Radius-LDAP Authentication for PPTP, the log says: rad_recv: Access-Request packet from host 127.0.0.1:1025, id=61, length=54 Service-Type = Framed-User Framed-Protocol = PPP User-Name = "testuser" NAS-IP-Address = 69.25.27.170 NAS-

Re: ppp radius-plugin

2005-03-08 Thread guest01
Hi I just upgraded to an actual unstable version, only for testing purposes ... ppp (2.4.3-20041231+1) has already built in this modul! With this package, it works. But now I have authentication problems ... It seems this is a neverending story! ;-) - List info/subscribe/unsubscribe? See http:

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
hm, ok, and that means? Do you any suggestions how to make it work? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
hm, radius is very strange Can anyone please help me? this is the logfile output after testing with radexample: rad_recv: Access-Request packet from host 127.0.0.1:1025, id=40, length=66 User-Name = "testuser" User-Password = "123456" Service-Type = Authenticate-Only

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Sébastien Cantos wrote: >>I had the same problem a few weeks ago. In fact the ldap wasn't returning >>the user-password so it wasn't working. Chack with ldapsearch to make the >>querry directly to the ldap as if you were the radius and I think that you >>will see that the userpassword is not retur

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Hi Thxs for your fast and informative answer ... Indeed, a very good argument! So I think I have to try another ppp version ... A strange problem, damned ppp radiusplugin!! Why can't life be easier? ;-) thxs peda - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
Sébastien Cantos wrote: >So maybe it's a NAS problem. Are you sure that the NAS is sending the >userpassword in the request ? > > > hm, maybe, how can I test that? I am currently trying some tests with the windowsxp radius test program ... But I am not very optimistic - List info/subscribe/u

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-08 Thread guest01
I think Steve is right ... This damned ppp-radius-plugin sends bad packets to my radiusserver ... packets without the required user-password ... And so it must be this damned plugin ... I testet a little bit with the windows radius test program and I sent packets with and without user-password to

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-09 Thread guest01
> I had a similar problem and the solution was the mapping, such as Edvin > says. I add the following entries to ldap.atrrmap: > > checkItem LM-Password lmPassword > checkItem NT-Password ntPassword > checkItem User-Password

Re: rlm_ldap - Attribute "User-Password" is required for authentication

2005-03-09 Thread guest01
Hi A very strange problem! Even without LDAP, just a normal radius server with useraccounts in the users file doesn't work. Do you have a working radiusserver with ppp-plugin and ldap? Can you do me a favor and look, if your ppp-radius-plugin sends a correct Access Request -Packet WITH user-passwo

Re: LDAP attributes

2005-03-14 Thread guest01
Hi Did you uncomment ldap in the authorize and authenticate section? Do you really have an access_attr "dialupAccess" which is TRUE or FALSE? hth peda - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: POPTOP + RADIUS + LDAP

2005-03-16 Thread guest01
Hi What's your problem? Can you specify your problem? All you need is the ppp-radius plugin, a installed radius client and a radiusserver with ldap as backend. I had to install an identical configuration recently and after a lot of different problem it's finally works, yeah! :-) If you specify y

divide ppp radius authentication for pptp AND l2tp/ipsec

2005-04-12 Thread guest01
Hi guys! I know it's a bit OT, it would better fit in a ppp mailing list, but I think this ml is worth a try! :-) I have following problem: I am using a Debian Woody VPN Server with PPTP and L2TP/IPSEC. Currently I authenticate users via the ppp radius-plugin, it works fine. But I have to divide

nas-identifier and ldap.attrmap

2005-04-18 Thread guest01
Hi! I am using freeradius 1.0.1 with an openldap backend (2.1.30). Therefor I am using the ldap.attrmap for mapping ldapentries to radiusattributes. Everything is configured correctly, mapping works. For example, I added a radiusAuthType with value REJECT and I couldn't authenticate. Even other en

Re: Two LDAP-Servers

2005-04-18 Thread guest01
freeradius wrote: > Hello, > > i tried to implement freeradius 0.8 with two ldapservers for authentication. > i want freeradius to check the one ldap-server first, if user not found, the > other server shoud be asked. > > But the second server will only be used by the radius-server, if the first

Re: nas-identifier and ldap.attrmap

2005-04-18 Thread guest01
Hi Thxs for the fast reply!! Ok, user steve (the one with the Auth-Type := Local) exists only for testing purposes. With user-data in die local users file, the nas-identifier works So, I don't know why radius ignores my ldap data ... Thxs for you help! best regards peda user testuser (de

Re: nas-identifier and ldap.attrmap

2005-04-18 Thread guest01
Solved Thank you guys, you made my day!! :-) I didn't know that there was a checkval-modul in freeradius. This modul does exactly what I want!! Thank you very much!! regards peda - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Radius Installation

2005-05-04 Thread guest01
Why don't you use a binary packet? I don't know which linux (?) distribution you are currently using ... but there are freeradius packages for most of them! For example, I am using Debian with an precompiled package, it works perfect! :-) Binary packets are compiled by people who really know what