(RADIATOR) Separate AuthLog FILE per Realm?

2003-07-16 Thread Mike McCauley
-- Forwarded Message -- Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from [Michael Bellears [EMAIL PROTECTED]] Date: Wed, 16 Jul 2003 03:49 pm From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] From [EMAIL PROTECTED] Wed Jul 16 00:49:55 2003 Received: from

Re: (RADIATOR) Separate AuthLog FILE per Realm?

2003-07-16 Thread Hugh Irvine
Hello Michael - I can't see any reason why this shouldn't work. Can you send me a trace 4 debug showing what is happening? regards Hugh I have the following: Realm DEFAULT AuthByPolicy ContinueWhileAccept AuthBy RADMIN /AuthBy AuthLog FILE Identifier

(RADIATOR) LEAP and AuthBy LDAP2

2003-07-16 Thread ZAGO, Mauro
Dear all, I am trying to configure Radiator as radius server for a Cisco Aironet 340. My userlist is on an OpenLDAP server. It seams that Radiator is unable to interpret SHA password that come from LDAP in conjunction with EAPType LEAP SHA password is correctly interpreted when I use

Re: (RADIATOR) LEAP and AuthBy LDAP2

2003-07-16 Thread Hugh Irvine
Hello Mauro - You are correct, you will need to use plaintext passwords with LEAP. regards Hugh On Wednesday, Jul 16, 2003, at 19:04 Australia/Melbourne, ZAGO, Mauro wrote: Dear all, I am trying to configure Radiator as radius server for a Cisco Aironet 340. My userlist is on an

Re: (RADIATOR) Problems upgrading

2003-07-16 Thread Bogdan TARU
Hi Hugh all, I have installed Radiator 3.6 (with patches), and when trying to test with radpwtst (/usr/local/radius/bin/radpwtst -secret foobar -user pp -password bleh -auth_port 1812 -acct_port 1813 -nas_ip_address 192.168.0.9 -nas_port_type=2), not only do I get a lot of messages

(RADIATOR) radiusd Dos Command works great....but service is intermittent

2003-07-16 Thread Robert Torres
Hello, Everyone. In the past few weeks of my radius 3.6 implementation it been working very well. There are moments when the service would stall and I would start to receive complaints from users. If I use the DOS command, it works great...but I don't want to use this all the time. Dos

(RADIATOR) Question about configuration

2003-07-16 Thread William Palencia
Hi. I'm installing radiator by first time, and can't get it start. I don't know was wrong. Here is the configuration file. // Foreground LogStdout AuthPort1645 AcctPort1646 LogDir c:/Program

(RADIATOR) RADIATOR

2003-07-16 Thread Karen . Thomas
HOW DO I ADD ANOTHER FIELD IN THE CISCO DICTIONARY - WE ARE USING FILE FOR AUTHENTICATION AND I WOULD LIKE TO HAVE THE USERS 'REALNAME' IN THE FILE EXAMPLE jdoe User-Password = abc123 RealName = doe, john Karen Thomas Orange County Gov't Security Analyst Tel: 407-836-8115 Fax: 407-836-8108

RE: (RADIATOR) Radmin and DSL.

2003-07-16 Thread Michael Bellears
Hello Michael - If your DSL users are going to be authenticated from a different realm, then what you describe will work fine. Otherwise you could use Handlers, or you could use Identifiers in your Client clauses and use the Client-Identifier as the PoolHint for the AuthBy

(RADIATOR) AcctLogFileFormat

2003-07-16 Thread pfig
hi! i noticed that there is no format string which gives the time from the current packet in 0-padded format (for the packet timestamp radiator supports %j; %k; %p, vs. %H; %M and %S for the current time, which are 0-padded). we need the 0-padded behaviour in order to maintain compatibility

(RADIATOR) Radiator IPTables integraton

2003-07-16 Thread Mike McCauley
-- Forwarded Message -- Subject: BOUNCE [EMAIL PROTECTED]:Non-member submission from [Francisco Contreiras [EMAIL PROTECTED]] Date: Thu, 17 Jul 2003 12:23 am From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] From [EMAIL PROTECTED] Wed Jul 16 09:22:34 2003 Received: from

Re: (RADIATOR) Radiator IPTables integraton

2003-07-16 Thread Hugh Irvine
Hello Francisco - You can use a PostAuthHook to do whatever is required to add a dynamic rule to iptables. There are some example hooks in the file goodies/hooks.txt in the Radiator distribution. regards Hugh Is it possible to add a dynamic rule to Iptables allowing the authenticated

Re: (RADIATOR) AcctLogFileFormat

2003-07-16 Thread Hugh Irvine
Hello Pedro - You could add a pseudo-attribute to the current request which would contain the time string in whatever format you require. There are some example hooks in the file goodies/hooks.txt in the Radiator distribution. regards Hugh On Thursday, Jul 17, 2003, at 08:23

Re: (RADIATOR) RADIATOR

2003-07-16 Thread Hugh Irvine
Hello Karen - My apologies, but I don't quite understand your question. The Radiator dictionary file contains the radius protocol attribute definitions, together with a number of vendor specific attribute definitions and the enumerated values for those attributes that use them. There are a

Re: (RADIATOR) Question about configuration

2003-07-16 Thread Hugh Irvine
Hello William - Thanks for your mail. As far as I can see from what you show below, Radiator is running correctly. When you start the radiusd process, it prints out the messages as shown and then it waits until it receives a radius request from a client device. It looks like radiusd is

(RADIATOR) Re: radiusd Dos Command works great....but service is intermittent

2003-07-16 Thread Hugh Irvine
Hello Robert - You will find some information on this in section 16.4 of the Radiator 3.6 reference manual (doc/ref.html). regards Hugh On Wednesday, Jul 16, 2003, at 22:53 Australia/Melbourne, Robert Torres wrote: Hello, Everyone. In the past few weeks of my radius 3.6 implementation it

Re: (RADIATOR) Problems upgrading

2003-07-16 Thread Hugh Irvine
Hello Bogdan - The first problem is because radpwtst cannot find the dictionary file. You should specify where to find it with radpwtst -dictionary -secret . Here is the help from radpwtst: bash-2.05a$ perl radpwtst -h usage: radpwtst [-h] [-time] [-iterations n] [-trace