Re: need help advice getting started with freeradius

2009-04-05 Thread Alexander Clouter
profile importing [2] well from my perspective, I'm sure implentators out their might say otherwise -- Alexander Clouter .sigmonster says: Neil Armstrong tripped. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: need help advice getting started with freeradius

2009-04-04 Thread Alexander Clouter
the documentation relating to deploying FreeRADIUS for 'eduroam' is exactly what you are looking for. Cheers [1] as far as I am aware, I'm sure Mark O'Leary will correct me here if need be -- Alexander Clouter .sigmonster says: But this one goes to eleven. -- Nigel

Re: proxy setup questions

2009-04-02 Thread Alexander Clouter
Dallas Helquist dal...@oldbrownjeep.net wrote: freeradius version: 1.0.1 (Centos4) http://freeradius.org/getting.html 2004, a fine vintage... Cheers -- Alexander Clouter .sigmonster says: Sex is like air. It's only a big deal if you can't get any. - List info/subscribe/unsubscribe? See

Re: Logging the return code from the ldap authentication to SQL.

2009-03-23 Thread Alexander Clouter
grumble/ -- Alexander Clouter .sigmonster says: Marriage is the waste-paper basket of the emotions. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: OT: 802.1x CPE device with _wired_ supplicant support

2009-02-28 Thread Alexander Clouter
implement this. Any suggestions on where to find / what devices to use? How many ISP's do you know use 802.1X to authenticate their userbase? We have enough trouble trying to get to to work right on a LAN... Cheers -- Alexander Clouter .sigmonster says: COBOL is for morons

Re: Wired 802.1x auth - Getting the IP address of the authed machine

2009-02-25 Thread Alexander Clouter
a workstation in a single 'session' changing IP addresses -- Alexander Clouter .sigmonster says: Go on, EMOTE! I was RAISED on thought balloons!! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: User-Id and Calling-Station-Id matching

2009-02-22 Thread Alexander Clouter
is an attribute, I'm guessing you actually mean UserName 2) Calling-Station-Id is not something a user can influence (I can change the MAC address on my laptop to whatever I want) Cheers -- Alexander Clouter .sigmonster says: It don't mean a THING if you ain't got that SWING!! - List info

Re: Free Radius problem with sending large certificate chains, using EAP-TLS

2009-02-20 Thread Alexander Clouter
-- Alexander Clouter .sigmonster says: Encyclopedia for sale by father. Son knows everything. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: otp daemon for use with freeradius

2009-02-06 Thread Alexander Clouter
... Cheers -- Alexander Clouter .sigmonster says: If you analyse anything, you destroy it. -- Arthur Miller - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS without Universal Password

2009-02-05 Thread Alexander Clouter
this as a reason not to UP altogether ;) Cheers [1] which is better than PEAP anyway as you have the option to pre-config windows clients with a single EXE; if you choose to use SecureW2 -- Alexander Clouter .sigmonster says: Practice yourself what you preach

Re: FreeRADIUS without Universal Password

2009-02-05 Thread Alexander Clouter
(search|modify|add|kitchensink) with credentials -- Alexander Clouter .sigmonster says: Graduate life: It's not just a job. It's an indenture. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRADIUS without Universal Password

2009-02-05 Thread Alexander Clouter
the UP that is stored on the server or what other implications there are in turning off UP. Storing the UP in clear text isn't a security issue. Really. I have always considered it more of a problem that the users know the password :) Cheers -- Alexander Clouter .sigmonster says: You display

Re: Inner identity in accounting logs

2009-01-21 Thread Alexander Clouter
= %{%{Acct-Input-Octets}:-0}, \ acct_output_octets = %{%{Acct-Output-Octets}:-0}, \ acct_input_packets = %{%{Acct-Input-Packets}:-0}, \ acct_output_packets= %{%{Acct-Output-Packets}:-0} \ WHERE \ acct_unique_session_id = '%{Acct-Unique-Session-Id}' Cheers -- Alexander

Re: Inner identity in accounting logs

2009-01-16 Thread Alexander Clouter
meaning to get around to it...one day. I have been told a SQL view would be a good start. :) Cheers -- Alexander Clouter .sigmonster says: QOTD: Like this rose, our love will wilt and die. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Regular expressions on module 'files' (possible bug?)

2009-01-10 Thread Alexander Clouter
a feeling you hit a problem if you mix about the order of the testing and the actionI could be wrong though. Cheers Alex -- Alexander Clouter .sigmonster says: Art is Nature speeded up and God slowed down. -- Chazal - List info/subscribe/unsubscribe? See

Re: Freeradius process dies with some (bad?!) EAP requests

2009-01-06 Thread Alexander Clouter
approach to the one on http://bugs.freeradius.org/ [3] http://blogamundo.net/code/screen/ [4] http://wiki.debian.org/HowToGetABacktrace -- Alexander Clouter .sigmonster says: The jig's up, Elman. Which jig? -- Jeff Elman - List info

Re: rlm_ldap and multiple ldap calls?

2008-12-23 Thread Alexander Clouter
) groupmembership_attribute = uniqueMember Then LDAP-Group will give you want you need to check. This of course is all in the documentation... :-/ http://wiki.freeradius.org/index.php/Rlm_ldap Cheers Alex -- Alexander Clouter .sigmonster says: Marticus There's too much blood in my caffeine system. - List

Re: Calling-Station-Id case sensitive

2008-12-17 Thread Alexander Clouter
t...@kalik.net wrote: You can use perl lc function to make sure attribute is always lower case. List perl before checkval. I personally use lower() (pgsql) and do it at the SQL server end. Cheers Alex -- Alexander Clouter .sigmonster says: We are not a clone. - List info/subscribe

Re: Calling-Station-Id case sensitive

2008-12-17 Thread Alexander Clouter
, such as cn=001122334455 -- Alexander Clouter .sigmonster says: Do not use the blue keys on this terminal. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Somewhat OT: Captive portal on acess points instead complex?supplicant at level end user?

2008-12-15 Thread Alexander Clouter
802.1X'ified, but just not worth the risk for wireless clients -- Alexander Clouter .sigmonster says: Succumb to natural tendencies. Be hateful and boring. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Somewhat OT: Mac OS self asigned IP issues

2008-11-27 Thread Alexander Clouter
of Mac OS or a OpenWRT one? I'd be glad to read suggestions and comments... Through my experience, if you set the dhcp client id to anything (my personal favourite is 'cheese') on the Mac it suddenly bursts into life. Weird I know, but it seems to work... Cheers Alex -- Alexander Clouter

Re: redundant-load-balance and Ldap-Group

2008-10-20 Thread Alexander Clouter
Hi, Elizabeth Steinke [EMAIL PROTECTED] wrote: Since we have other applications that don't and probably never will preform redundant LDAP lookups I'm thinking I will just an LDAP VIP to the LVS server. I am still willing to try an solutions in my lab for the sake of having it in the

<    1   2   3   4