Error: Unexpected trailing comma in User file

2006-05-25 Thread sumi thra
Hi All,I am getting some error like:Module: Loaded filesfiles: usersfile = /var/etc/raddb/users files: acctusersfile = /var/etc/raddb/acct_usersfiles: preproxy_usersfile = /var/etc/raddb/preproxy_users files: compat = no/var/etc/raddb/users[4]: Parse error (check) for entry DEFAULT: Expected end

nas table

2006-05-25 Thread Santiago Balaguer GarcĂ­a
Hi people, I use freeradius 1.0.5 and am getting my nas information from nas table since several months ago. How ever, I realize I have to put DNS in this table because I have DDNS entries. Where must I put the DDNS in this table?? In ipddr I can not because is inet type and a primary key.

Re: How to specify multiple values for Called-Station-Id (checkval)

2006-05-25 Thread Kostas Kalevras
On Wed, 24 May 2006, Mike Jakubik wrote: Hello, I am trying to setup group checks for Called-Station-Id in freeradius 1.1.1 and mysql. I have enabled the checkval module in radiusd.conf and set notfound-reject = yes. In my radgroupcheck table when i specify restricted Called-Station-Id :=

RE: PEAP + AD

2006-05-25 Thread Chris Liles
If you read the FAQ is says that you can't do CHAP with LDAP. [speculation] But I have also read about some guy successfully using OpenLDAP with PEAP because he stored the LM and NT password hashes in the ldap schema along with the clear text password. With AD I suppose you could extend the

Re: mysql issue

2006-05-25 Thread andy
On another note still related to MySQL, is there a way to enforce mysql and freeradius to make persistant connections to the database store? On Wed, May 24, 2006 at 11:10:16AM +0100, andy wrote: Hi list, Fairly new to freeradius, just about to deploy a solution involving RedBack with

Re: WEP+802.1x is that possible?

2006-05-25 Thread Konne
Nelson Murilo schrieb: On Tue, May 23, 2006 at 03:05:44PM +0200, Konne wrote: hi i have a question about the encryption mode of cisco aironets. i would like to do the authentication and encryption like: WPA+TKIP with 802.1x PEAP/mschapv2 this is running, but ive clients they cant do WPA,

Re: mysql issue

2006-05-25 Thread Dennis Skinner
andy wrote: On another note still related to MySQL, is there a way to enforce mysql and freeradius to make persistant connections to the database store? It does. The radius server will make all of its connections to the MySQL server at startup (or remake them on a HUP) and they stay there.

Re: mysql issue

2006-05-25 Thread Chris Carver
Freeradius keeps a configurable number of open connections, called sockets in the config, which it uses to query the DB at all times. I believe it keeps these open persistently. In sql.conf... # number of sql connections to make to server num_sql_socks = 5 Chris Carver Network

Re: rlm_sqlippool - try sql if not try sql1

2006-05-25 Thread Nicolas Baradakis
RobertB wrote: At present it is not possible to do something like: try sql, if not available try sql1. Did you try to put the module in a redundant or a group stanza? http://freeradius.org/radiusd/doc/configurable_failover -- Nicolas Baradakis - List info/subscribe/unsubscribe? See

Re: mysql issue

2006-05-25 Thread andy
Ok, I have found the issue. Thanks for the answers on persisnt connects also. The issue: mysql NDB cluster backend Freeradius 1.1.1 from FreeBSD ports MySQL clusters require an auto-incrementing field to be the primary key. Within the default table definitions for freeradius, which I have

Re: PEAP + AD

2006-05-25 Thread Alan DeKok
Kartthik Raghunathan [EMAIL PROTECTED] wrote: Am trying to authenticate my windows supplicant (ie. XP with sp2) with peap against the windows 2000 AD. But in the error log i could see Accept-Reject error message. So i need a clarification here, is't necessary to get samba on with active

Re: nas table

2006-05-25 Thread Alan DeKok
=?iso-8859-1?B?U2FudGlhZ28gQmFsYWd1ZXIgR2FyY+1h?= [EMAIL PROTECTED] wrote: I use freeradius 1.0.5 and am getting my nas information from nas table since several months ago. How ever, I realize I have to put DNS in this table because I have DDNS entries. Where must I put the DDNS in

Re: PEAP + AD

2006-05-25 Thread Alan DeKok
Chris Liles [EMAIL PROTECTED] wrote: But I have also read about some guy successfully using OpenLDAP with PEAP because he stored the LM and NT password hashes in the ldap schema along with the clear text password. With AD I suppose you could extend the schema to store these as well, but you'd

Re: Yet Another AD Question

2006-05-25 Thread Josh
OK. So I think I'm going to go the Samba route. I've got Samba running on the same host as freeradius. I've tested Samba/AD integration by creating a couple shared folders on the Samba server and using Windows AD accounts to mount/map them from windows machines - it works. Now, I need to get

RE: PEAP + AD

2006-05-25 Thread Chris Liles
AD doesn't supply passwords through LDAP. That's why the server ships with support for ntlm_auth. That is right, I forgot that even if you are on a ssl/tls ldap connection as an administrator, you can't pull the password back from AD. What hooks are you talking about? The extensions for unix

RE: Yet Another AD Question

2006-05-25 Thread Chris Liles
Look at the mschap section of the FR config file, everything is there, you just need to uncomment it. -- Chris Liles -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Josh Sent: Thursday, May 25, 2006 11:45 AM To: FreeRadius users mailing list Subject:

Re: PEAP + AD

2006-05-25 Thread Alan DeKok
Chris Liles [EMAIL PROTECTED] wrote: What hooks are you talking about? The extensions for unix services? No. There are API's in Windows to catch password changes, and pass them through your own code. That code can then *also* write the password to a different part of the AD schema. For

FreeRadius daily build fails on FreeBSD?

2006-05-25 Thread Remy de Ruysscher
: warning: 'get_client' defined but not used radius_snmp.c:29:1: unterminated #ifdef gmake[3]: *** [radius_snmp.lo] Error 1 gmake[3]: Leaving directory `/tmp/freeradius-snapshot-20060525/src/main' gmake[2]: *** [common] Error 2 gmake[2]: Leaving directory `/tmp/freeradius-snapshot-20060525/src' gmake[1

Re: could not determine local IP address

2006-05-25 Thread Italo Morellato
Hi Alan and many thanks for the fast reply.. this is the report of radiusd -x command... _ rad_recv: Access-Request packet from host 10.10.0.30:1144, id=37, length=130 Service-Type = Framed-User Framed-Protocol = PPP

Re: FreeRadius daily build fails on FreeBSD?

2006-05-25 Thread Alan DeKok
Remy de Ruysscher [EMAIL PROTECTED] wrote: On FreeBSD I get these errors after ./configure and make: radius_snmp.c:176: warning: (near initialization for `radiusauth_variables[4]') radius_snmp.c:177: warning: initialization makes pointer from integer without a cast radius_snmp.c:177:

RE: rlm_sqlippool - try sql if not try sql1

2006-05-25 Thread RobertB
RobertB wrote: At present it is not possible to do something like: try sql, if not available try sql1.Did you try to put the module in a "redundant" or a "group" stanza? http://freeradius.org/radiusd/doc/configurable_failover Actually I'm using it with accounting packets, but it doesn't

Re: mysql issue

2006-05-25 Thread Alan DeKok
andy [EMAIL PROTECTED] wrote: MySQL clusters require an auto-incrementing field to be the primary key. Within the default table definitions for freeradius, which I have used, in the table radius.radius_radacct there is an auto-incrementing field that is not defined as a primary key. In