FW: FreeRadius Authentication against AD or AD LDS (LDAP)

2013-07-16 Thread limacher david
Hello I'm looking for a solution to realize a FreeRadius Server, which can Authenticate against primary a AD and as second method against AD LDS (Lightweight Directory from Windows). We want for our WLAN, that in the Guest-Network employees can use their AD-Login (I already implemented that

Re: [ANN] Version 3.0.0-rc0

2013-07-16 Thread Stefan Winter
Hi, If you are planning on deploying 3.0 and have an existing 2.x.x configuration you were planning to migrate when the 3.0 is released, now would be a good time to try that, and to report any issues or problematic behaviour changes you notice. Here's another thing that worked in 2.x,

Re: FreeRadius Authentication against AD or AD LDS (LDAP)

2013-07-16 Thread Alan Buxey
Hi Store the passwords in nt-hash format. Use guest usernames with a particular format so that you can use some simple unlang to select the right type of authentication rather than hitting each method and causing unnecessary load and delay alan - List info/subscribe/unsubscribe? See

Re: FW: FreeRadius Authentication against AD or AD LDS (LDAP)

2013-07-16 Thread Fajar A. Nugraha
On Tue, Jul 16, 2013 at 1:02 PM, limacher david limache...@hotmail.comwrote: Hello I'm looking for a solution to realize a FreeRadius Server, which can Authenticate against primary a AD and as second method against AD LDS (Lightweight Directory from Windows). We want for our WLAN, that in

Re: [ANN] Version 3.0.0-rc0

2013-07-16 Thread Alan DeKok
Stefan Winter wrote: Earlier, this would yield the number of characters in the incoming request's User-Password attribute, and see if it's exactly 96 Bytes. I don't know why the # triggers an unknown attribute? Looks like a bug to me... I'll take a look. Alan DeKok. - List

Re: FW: FreeRadius Authentication against AD or AD LDS (LDAP)

2013-07-16 Thread Alan DeKok
limacher david wrote: I'm looking for a solution to realize a FreeRadius Server, which can Authenticate against primary a AD and as second method against AD LDS (Lightweight Directory from Windows). Follow this guide: http://deployingradius.com/documents/configuration/active_directory.html

Delete one value of multiple attribute(Class)

2013-07-16 Thread Okis Chuang
Dear all, I want to delete a specific AVP which could be one of multiple value attribute, such as *Class*. Suppose I have three Class value: Class 1, Class 2, Class 3. Then I want to remove Class 2 if its value matches the regex in the pre-proxy section. I've tried some unlang below but

RE: FreeRadius Authentication against AD or AD LDS (LDAP)

2013-07-16 Thread stefan.paetow
Considering that LDS will still be running Active Directory, give your reception login(s) the permission to administer the Guest-Network OU (i.e. add/delete/edit users), and continue to use the NTLM authentication you use with the primary AD. Active Directory uses MS-CHAPv2, so using the

Re: [ANN] Version 3.0.0-rc0

2013-07-16 Thread Alan DeKok
Stefan Winter wrote: (0) ERROR: %{#User-Password} (0) ERROR: ^ Unknown attribute (0) ERROR: Evaluation of condition failed for some reason. (0)else else { (0) - entering else else {...} Earlier, this would yield the number of characters in the incoming request's User-Password

Re: Duplicated records in RADACCT with differents delay times

2013-07-16 Thread Antonio Fernández Pérez
Hi everybody, Recently I posted a problem with accounting rows duplicated. Following Arran's advices I changed radacct table, defining AcctUniqueId column as a unique index. Solved it! Now, I have the same problem but, at this time with AcctSesionId column. There are a lot of rows that have

Re: Dynamic vlan assignment with ldap groups

2013-07-16 Thread val john
Hi guys I had to also set the *use_tunneled_reply=yes* in the eap.conf to get the Dynamic vlan assignment to work On 12 July 2013 19:42, val john valjohn1...@gmail.com wrote: Hi guys , Small question , do i need to import radius ldap schema ( items like radiusprofiles ) to our ldap

Vouchers Top Up

2013-07-16 Thread Russell Mike
Hi List is anyone able to implement top up for hotspot vouchers ? Top up means, if a hotspot user is browsing and his 3600 seconds are getting finish. he wish to top up another 1800 seconds to avoid disconnection. Thanks / Regards - List info/subscribe/unsubscribe? See

Re: Delete one value of multiple attribute(Class)

2013-07-16 Thread Okis Chuang
Is there anyone can help? Actually I can write a short perl script to do this, but I try to do with pure unlang. So.if someone can told me whether this purpose can be done with only unlang, I can save lots of time on this endless trial. Lol In fact, the reason why I need this function is