sqlcounter, always does the lookup or conditional

2006-06-23 Thread Dennis Skinner
I was hoping someone could save me a few cycles on a hectic Friday since my test system is down at the moment and the info in radiusd.conf doesn't mention it. With the sqlcounter module, will it always do the sql lookup on an incoming auth request or only if the check-name attribute is among the c

Re: EAP-MD5 with LDAP

2006-06-23 Thread Stefan Winter
Hi, > trying to configure EAP-MD5 with LDAP backend... > > rlm_ldap: Attribute "User-Password" is required for authentication. oh, a classic. You are trying to use a backend that requires to have the clear text password, but are instead feeding it with a one-way crypted password. This won't wo

EAP-MD5 with LDAP

2006-06-23 Thread Rohaizam Abu Bakar
Hi.. Using FB 6.0 FR 1.0.5 trying to configure EAP-MD5 with LDAP backend... But it keep reporting: rlm_ldap: Attribute "User-Password" is required for authentication. No EAP been processed... please see full debug log below.. Below is my config with multiple DEFAULT entry... for Wireless

Re: Checking SSID via A/D Group

2006-06-23 Thread Alan DeKok
"Garber, Neal" <[EMAIL PROTECTED]> wrote: > FreeBSD with OpenSSL 0.9.7d-p1 17 and Samba 3.0.20b. If the server is > joined to an > Active Directory domain, would it be possible to not just authenticate > user/pwd through > Samba, but also to check for Windows group membership based upon the > SSID

Re: Compiling Problem concerning `crypt' !!!

2006-06-23 Thread Alan DeKok
Ravi pandey <[EMAIL PROTECTED]> wrote: > gcc -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall -D_GNU_SOURCE > -DNDEBUG -D_LIBRADIUS -I../include -c crypt.c -fPIC -DPIC -o .libs/crypt.lo > In file included from crypt.c:31: > /usr/include/pthread.h:299: error: parse error before '*' token Th

Re: Freeradius-Users Digest, Vol 14, Issue 95

2006-06-23 Thread Alan DeKok
Walter Reynolds <[EMAIL PROTECTED]> wrote: > Now the question is what example config file had the suppress stanza under > the detail auth_log section as well? Mine just listed it under the detail > section so I did not know I needed to put it in both places. The rest of the documentation expl

Re: Radius Logs

2006-06-23 Thread Alan DeKok
"Grant Wright" <[EMAIL PROTECTED]> wrote: > I use the RADIUS logs to calculate usage for a client. What I want to do is > separate the internal FTP traffic (which is classified as free traffic) from > the rest > > of the traffic so that I can charge the client accordingly. Unless the NAS sends

Checking SSID via A/D Group

2006-06-23 Thread Garber, Neal
We use Cisco 1232 AP’s with EAP-PEAP-MSCHAPv2 to a Cisco ACS (RADIUS server). We would like to restrict access to SSIDs based upon Windows group membership.  The ACS server is not capable of doing this.  I currently have FreeRadius (1.1.2) installed under FreeBSD with OpenSSL 0.9.7d-p1 1

Re: freeradius and certs

2006-06-23 Thread K. Hoercher
The .pem .p12 and .der are just typical endings of filenames containing certs in different 'styles'. FR will use the .pem ones (default in openssl, I think). windows in general is more easily convinced to accept .der. Assuming you talk about some eap-* usage, FR alone, in most circumstances, will

huntgroups and rlm_ldap

2006-06-23 Thread adincov
Hello, I need to store in a OpenLDAP backend some access control information based on NAS IP address. Normally this can be done via huntgoups and clients local configuration files. Does anyone know a simple method to put access control based on NAS IP in the LDAP backend? Thanks Alex - List i

Re: error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2

2006-06-23 Thread B Thompson
On Fri, Jun 23, 2006 at 09:30:24AM +0100, [EMAIL PROTECTED] wrote: > %files > > %defattr(-,root,root) > >

Re: freeradius and certs

2006-06-23 Thread Walter Reynolds
Knowing the errors might help, but here is a good web page with instructions: http://www.linuxjournal.com/article/8095 --- Date: Fri, 23 Jun 2006 00:40:20 -0700 (PDT) From: unforgiver <[EMAIL PROTECTED]> Subject: freeradius and certs To: freeradius-users@lists.freer

Re: Freeradius-Users Digest, Vol 14, Issue 95

2006-06-23 Thread Walter Reynolds
Great, this worked. Now the question is what example config file had the suppress stanza under the detail auth_log section as well? Mine just listed it under the detail section so I did not know I needed to put it in both places. On Thu, 22 Jun 2006, [EMAIL PROTECTED] wrote: Date: Thu, 2

ldap client side credential caching in freeradius-1.1.1

2006-06-23 Thread bright spark
Hello Everybody,I would like to know whether freeradius supports ldap credential caching mechanism? According to the release notes, this support was added in dec'2000 and was removed in march'2003 because openldap latest version didnt support that. What happens if we use some other ldap servers or

Compiling Problem concerning `crypt' !!!

2006-06-23 Thread Ravi pandey
Hi all,Attached the codes of error when I am compiling  freeradius-1.1.2 When I finish ./configure,  then MAKE, the error happens.I am not able to figure out where is the problem Please give any comment on the problem.     Log created while creating MAKE is as follows :   make[1]: Entering di

WIKI down

2006-06-23 Thread Francois-Xavier GAILLARD
Hi list, when going on the wiki (http://wiki.freeradius.org,) identified as a registered user, there's a PHP error: Fatal error: Call to undefined function: getuser() in /srv/www/vhosts/wiki-freeradius/includes/Skin.php on line 546 Could anyone repair please ? :) Regards, Fox. signature.as

Re: Parse error freeradius-1.1.1

2006-06-23 Thread Nicolas Baradakis
Lin Richardson wrote: > You are welcome to send me testing needs and I'll accommodate as I can. > May not be same day service, but I'd be happy to do it. Thanks for the help. Could you try please the autotools upgrade in the CVS? $ cvs -d :pserver:[EMAIL PROTECTED]:/source login CVS password: an

Re: Debian & TLS support

2006-06-23 Thread Nicolas Baradakis
Scott Hughes wrote: > rlm_eap: Failed to link EAP-Type/tls: rlm_eap_tls.so: cannot open > shared object file: No such file or directory radiusd.conf[9]: > eap: Module instantiation failed Get a source tarball from www.freeradius.org and manually build a Debian package as explained in the FAQ. ht

freeradius and certs

2006-06-23 Thread unforgiver
Hi if i understand well i need 9 cert files: root.pem, root.p12, root.der cert-clt.pem, cert-clt.p12, cert-clt.der cert-srv.pem, cert-srv.p12, cert-srv.der i have demo certs but they expired. How can i create these 9 certs? i try with CA.all and i had multiple errors. is there another way? -

Re: error: Installed (but unpackaged) files(s) found: on REDHAT Enterprise 4.0 (RHEL4) and FreeRadius 1.1.2

2006-06-23 Thread tadej . bregar
Hello, I'm struggling to build a RPM package on RHEL 4 also (based on freeradius.spec file), I have tried adding sed line as suggested in on of the previous posts and also suggested %doc lines, but with no success. How do i have to modify freeradius.spec file to build it successfully? Has anyone

Radius Logs

2006-06-23 Thread Grant Wright
Hi there   Freeradius 1.1.2, Fedora Core 4, MySQL 4.1.16   I use the RADIUS logs to calculate usage for a client. What I want to do is separate the internal FTP traffic (which is classified as free traffic) from the rest of the traffic so that I can charge the client accordingly.   A