Re: Status of 2.1.11/OSCP Implementation

2011-03-09 Thread Alexander Clouter
Alan DeKok al...@deployingradius.com wrote: But let me rephrase my initial question: Would you consider this feature stable? Try it and see. This isn't commercial software with dozens of people in the QA department. *You* are the QA department. I was under the general impression that

Re: FR 2.1.7 Exits for no reason

2011-03-09 Thread Alan Buxey
hi, 2.1.7 has many little quirks/bugs that caused daemon deaths. 2.1.10 is the answer alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Status of 2.1.11/OSCP Implementation

2011-03-09 Thread Alan Buxey
Hi, in the QA department. *You* are the QA department. I was under the general impression that QA is no longer done for commercial software either... ha! yes, i agree :-) alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CHAP problem with PPPoE server

2011-03-09 Thread Paul Thornton
Hi Alan Alan DeKok wrote: It isn't a CHAP issue. Read the debug output. There's no CHAP in the request. Apologies, perhaps I didn't make it clear in my original mail - I agree with everything you've said - the server is doing exactly as it is told and this isn't a FreeRADIUS problem.

Freeradius dies...

2011-03-09 Thread Etienne Pretorius
Hello All, Can anyone make sense of this for me? ASSERT FAILED event.c[1181]: We do not have threads, but the request is marked as queued or running in a child thread == NULL I have 3 detail instances and 3 detail listeners proxying the detail file to 3 servers. I have at the same time the COA

Re: Secondary LDAP server

2011-03-09 Thread Kenneth Marshall
On Tue, Mar 08, 2011 at 05:16:35PM -0600, Gary Gatten wrote: I'm pretty sure this is discussed, examples, etc in the doc: online and in FR conf files. Sorry I don't have exact location handy, but I'm sure its there. From: McNutt, Justin M. [mailto:mcnu...@missouri.edu] Sent: Tuesday, March

Re: Secondary LDAP server

2011-03-09 Thread John Dennis
On 03/08/2011 11:28 PM, McNutt, Justin M. wrote: It's not anywhere in the config files, but I did find where RedHat hid the doc/* files. There's a /usr/share/doc/freeradius-2.1.7/configurable_failover that looks like what I need. Goes into some decent detail, too. We don't hide anything :-)

How to stop at pre-proxy python module with Access-Request

2011-03-09 Thread Ranjith T
Hi, I am using freeradius 2.1.10 and python modules at different stages(pre-proxy, post-proxy) of my RADIUS server which is running in proxy mode. From the python pre-proxy module I am able to return radiusd.RLM_MODULE_HANDLED which is handled at pre-proxy section of the file

Re: Freeradius dies...

2011-03-09 Thread Etienne Pretorius
Never-mind, I stumbled upon a documented bug with freeradius -X command and detail listeners... Kind Regards, Etienne Pretorius On Wed, 2011-03-09 at 13:22 +0200, Etienne Pretorius wrote: Hello All, Can anyone make sense of this for me? ASSERT FAILED event.c[1181]: We do not have

Access Accept vs Tunneled reply

2011-03-09 Thread David Peterson
I am trying to work out where I would be putting attributes for Access Accept. I am sending the following in a reply: (822) [ttls] Got tunneled reply code 2 WiMAX-Classifer-Direction = Bi-Directional WiMAX-Classifer-Priority = 1 WiMAX-ClassifierID = 1

RE: FR 2.1.7 Exits for no reason

2011-03-09 Thread Danial
Have a look at this thread: http://freeradius.1045715.n5.nabble.com/FreeRADIUS-exiting-with-Signal-11-on-FreeBSD-td3293576.html#none http://freeradius.1045715.n5.nabble.com/FreeRADIUS-exiting-with-Signal-11-on-FreeBSD-td3293576.html#none Perhaps your problem is similar and there's some gdb info

Re: Freeradiusd 2.1.8

2011-03-09 Thread Danial
Alan DeKok-2 wrote: It's something which is seen only on FreeBSD. As far as I can tell, it's a race condition in the threading code. It's difficult to track down and debug, unfortunately. Given the level of complexity of the current code, it's probably best to re-write it, to be

RE: Freeradiusd 2.1.8

2011-03-09 Thread Gary Gatten
FBSD allows one to easily change the scheduler, MAYBE that would help? -Original Message- From: freeradius-users-bounces+ggatten=waddell@lists.freeradius.org [mailto:freeradius-users-bounces+ggatten=waddell@lists.freeradius.org] On Behalf Of Danial Sent: Wednesday, March 09,

Re: Access Accept vs Tunneled reply

2011-03-09 Thread Phil Mayers
On 09/03/11 15:21, David Peterson wrote: Currently I have the attributes listed as a group reply. How do I send the attributes needed during the access accept packet? See eap.conf use_tunneled_reply = yes ...under the ttls and peap stanzas - List info/subscribe/unsubscribe? See

Re: CHAP problem with PPPoE server

2011-03-09 Thread Alan DeKok
Paul Thornton wrote: This is the part that is the mystery. There seems to be scarce information out there about how pppd functions when using radius as a back end (apart from it should 'just work') - most of the documentation about pppd relates to dial-up as a ppp client or a server without

Re: Freeradius dies...

2011-03-09 Thread Alan DeKok
Etienne Pretorius wrote: Can anyone make sense of this for me? ASSERT FAILED event.c[1181]: We do not have threads, but the request is marked as queued or running in a child thread == NULL See http://git.freeradius.org, and grab the v2.1.x branch. It contains a fix. Alan DeKok. - List

Re: Freeradiusd 2.1.8

2011-03-09 Thread Alan DeKok
Danial wrote: Does this mean we shouldn't expect this bug to be fixed in new releases, unless the code gets rewritten? Or unless someone tracks it down and submits a patch. It's open source software. There's no need to wait for the bug to magically get fixed. People *can* contribute.

Re: How to stop at pre-proxy python module with Access-Request

2011-03-09 Thread Alan DeKok
Ranjith T wrote: I want the server to stop at HANDLED and send back Access-Accept back to the requested client from pre-proxy once the return is HANDLED. The server isn't designed to do that. Once the request is proxied, you can't cancel it. And it makes *no* sense to decide to proxy it,

Re: CHAP problem with PPPoE server

2011-03-09 Thread Phil Mayers
On 09/03/11 10:03, Paul Thornton wrote: This is the part that is the mystery. There seems to be scarce information out there about how pppd functions when using radius as a back end (apart from it should 'just work') - most of the documentation about pppd relates to dial-up as a ppp client or

Re: Freeradius 2

2011-03-09 Thread Usuário do Sistema
Hello everyone, I've Installed by yum freeradius2-2.1.7-7.el5 but I'm can't found the ldap dirctory under /etc/raddb/.. I have creta it or install more any package ?? thank! 2011/3/5 freeradius-users-requ...@lists.freeradius.org Send Freeradius-Users mailing list submissions to

RE: Freeradius 2

2011-03-09 Thread Harry Hoffman
Yum install freeradius2-ldap Cheers, Harry From: freeradius-users-bounces+hhoffman=ip-solutions@lists.freeradius.org [mailto:freeradius-users-bounces+hhoffman=ip-solutions.net@lists.freeradius. org] On Behalf Of Usuário do Sistema Sent: Wednesday, March 09, 2011 2:39 PM To:

Re: Freeradius 2

2011-03-09 Thread Usuário do Sistema
Thank Cheers Harry. it's work. now I'm configurating the freeradius with EAP-TLS. I will give reports about this case. thank! 2011/3/9 Harry Hoffman hhoff...@ip-solutions.net Yum install freeradius2-ldap Cheers, Harry *From:* freeradius-users-bounces+hhoffman=ip-solutions.net@

different perl module in different virtual server result different w/ or w/o -X

2011-03-09 Thread schilling
Hi All, I am running 2.1.6. I have modules/perl_resnet like perl perl_resnet {...} for virtual server resnet, which will put mac-address in sandbox vlan if not in database. and I have modules/perl_foosecure perl perl_foosecure{...} for virtual server auth used as inner-tunnel for eap, which will