Re: LDAP attribute mapping

2012-10-31 Thread Alan DeKok
Phil Mayers wrote: +1 Personally I'd rather the latter format everywhere, even unlang: update { request:foo = 1 } Yeah. That shouldn't be hard. Maybe I can look at it in 2 weeks, after IETF. Alan DeKok. - List info/subscribe/unsubscribe? See

mysql Connection error

2012-10-31 Thread QASIM RAO
hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed on localhost so when i give db sever=localhost it connects with db... please help me in this why radius is doing this ??? regards,

Re: mysql Connection error

2012-10-31 Thread Fajar A. Nugraha
On Wed, Oct 31, 2012 at 3:57 PM, QASIM RAO qasim2...@hotmail.com wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed on localhost so when i give db sever=localhost it connects with

Re: mysql Connection error

2012-10-31 Thread Alan DeKok
QASIM RAO wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed on localhost so when i give db sever=localhost it connects with db... please help me in this why radius is doing this

Re: mysql Connection error

2012-10-31 Thread Arran Cudbard-Bell
On 31 Oct 2012, at 09:02, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Oct 31, 2012 at 3:57 PM, QASIM RAO qasim2...@hotmail.com wrote: hi, i am having a problem in free radius, when i connect free radius with db by using ip of db server it is not connecting with db database is installed

RE: mysql Connection error

2012-10-31 Thread QASIM RAO
i want to connect db using ip because no i am testing after this i will connect i to remote db. How can i tel Db to listen on a public ip ?? i grant all rights to ip by using grant all command in mysql firewall is stopped and selinux is also desabled, Date: Wed, 31 Oct 2012 10:03:44 +0100

RE: mysql Connection error

2012-10-31 Thread QASIM RAO
how can i change localhost to public IP Subject: Re: mysql Connection error From: a.cudba...@freeradius.org Date: Wed, 31 Oct 2012 09:11:04 + To: freeradius-users@lists.freeradius.org On 31 Oct 2012, at 09:02, Fajar A. Nugraha l...@fajar.net wrote: On Wed, Oct 31, 2012 at 3:57

Re: mysql Connection error

2012-10-31 Thread alan buxey
Hi, i want to connect db using ip because no i am testing after this i will connect i to remote db.  How can i tel Db to listen on a public ip  ?? now this is a MySQL question - not a FreeRADIUS question, mysql has its own mailing lists (and its own configuration file and users table

Re: mysql Connection error

2012-10-31 Thread Alan DeKok
QASIM RAO wrote: i want to connect db using ip because no i am testing after this i will connect i to remote db. How can i tel Db to listen on a public ip ?? Go read the MySQL documentation. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

ntlm_auth child domain

2012-10-31 Thread Menard, Yannick
Hi, I just recently installed an freeradius server , joined the domain and im currently able with ntlm_auth and radtest to authenticate user from our Active directory but I am unable to authenticate using our child domain. For exemple our domain is toto.prive, child domain child.toto.prive I

Re: ntlm_auth child domain

2012-10-31 Thread Alan Buxey
I'd say use ntlm_auth with 2 instances of MSCHAP module - using unlang and fail-through mechanism...so if MSCHAP instance 1 fails then it tries instance 2 We used this mechanism when migrating from one AD to another alan -- This smartphone uses free WiFi around the world with eduroam, now

Re: ntlm_auth child domain

2012-10-31 Thread alan buxey
Hi, Do you have a handy guide or documentation for that, I’m pretty newb with freeradius. man unlang http://wiki.freeradius.org/config/Fail-over alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: LDAP attribute mapping

2012-10-31 Thread Arran Cudbard-Bell
or... update [default list] { ... } update reply { config:Auth-Type = Reject Reply-Message = Go away } That one gets my vote. update { } defaults to request. -Arran - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

rlm_eap_ttls: Cannot tunnel EAP-Type/ttls inside of TTLS

2012-10-31 Thread Darren Shea
I'm trying to migrate a running FreeRADIUS server (on FreeBSD 7) to a virtualized system (on FreeBSD 9). I've got the MySQL database working, and I have copied over the raddb files from the old system to the new one. Unfortunately, radiusd drops out with the error in the subject. It looks like

Re: rlm_eap_ttls: Cannot tunnel EAP-Type/ttls inside of TTLS

2012-10-31 Thread Matthew Newton
On Wed, Oct 31, 2012 at 03:55:29PM -0500, Darren Shea wrote: rlm_eap: Loaded and initialized type tls ttls: default_eap_type = ttls ttls: copy_request_to_tunnel = yes ttls: use_tunneled_reply = yes rlm_eap_ttls: Cannot tunnel EAP-Type/ttls inside of TTLS rlm_eap: Failed to initialize type