Re: LDAP with fallback on local authentication?

2009-04-10 Thread Justin Steward
On Fri, Apr 10, 2009 at 11:51 PM, Alan DeKok wrote: > Justin Steward wrote: > > I want to return some radius reply attributes from an SQL database, > > check the user's password against an openLDAP server > > As I said... LDAP isn't an authentication protocol. > > > (maybe a Windows > > Server ru

Re: freeradius-server-2.1.4 make fails

2009-04-10 Thread Волошин Вячеслав
use this : http://www.howtoforge.com/how-to-create-a-freeradius-2.1.1-6-rpm-package-on-centos-5.2 for your version freeradius, I m use this. - Original Message - From: "Thor Spruyt" To: Sent: Friday, April 10, 2009 8:43 PM Subject: freeradius-server-2.1.4 make fails Hi, I'm tryin

Re: Sending Access-Challenge

2009-04-10 Thread Laszlo Fekete
Alan DeKok wrote: > Do *not* CC me on messages sent to the list. In case you hadn't > noticed, I already read the list. > > And do *not* set "return receipt requested". It's rude, and it causes > me to be biased against people who use it. > Sorry, I will watching for this in the future. >

Re: freeradius-server-2.1.4 make fails

2009-04-10 Thread A . L . M . Buxey
hi, fixed in CVS IIRC - for now, enable vmps support and it'll compile alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius-server-2.1.4 make fails

2009-04-10 Thread Thor Spruyt
Hi, I'm trying to compile freeradius-server-2.1.4 on CentOS 4.6 32-bit Configure command: ./configure --prefix=/opt/freeradius-2.1.4 --with-mysql --with-postgresql --with-openldap --without-snmp --without-openssl --without-krb5 --without-vmps But make fails: /home/thor/freeradius-server-2.1.4/l

freeradius crashes if can not connect to mysql

2009-04-10 Thread Oguzhan Kayhan
Hello, I noticed that..if a network error or another connection problem occurs between freeradius and mysql server, freeradius service just exits... And sure service stops automatically. Is there any way to give a timeout value or retry number for mysql in freeradius configuration that prevents f

Re: Sending Access-Challenge

2009-04-10 Thread Alan DeKok
Do *not* CC me on messages sent to the list. In case you hadn't noticed, I already read the list. And do *not* set "return receipt requested". It's rude, and it causes me to be biased against people who use it. Laszlo Fekete wrote: ... > But when I try with eap-ttls eap-md5/eap-mschapv2, ea

Re: Sending Access-Challenge

2009-04-10 Thread A . L . M . Buxey
Hi, > But when I try with eap-ttls eap-md5/eap-mschapv2, eap-peap eap-mschapv2 > it fails: PEAP works but TTLS fails - so, does your eap.conf have ttls configured? alan - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Sending Access-Challenge

2009-04-10 Thread Laszlo Fekete
Alan DeKok wrote: > Don't use radeapclient. See my web page for instructions on setting > up EAP: > > http://deployingradius.com > I tried the eapol_test from the web page ( http://deployingradius.com/scripts/eapol_test/ ). With Eap-ttls pap/chap/ms-chap said success: RADIUS packet

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Alan DeKok
Justin Steward wrote: > I want to return some radius reply attributes from an SQL database, > check the user's password against an openLDAP server As I said... LDAP isn't an authentication protocol. > (maybe a Windows > Server running AD at some point in the future), and if possible fall > back

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
Failed creating PID file /usr/local/fnmt/var/run/radiusd/radiusd.pid: Permission denied set this: [r...@bill ~]# ls -ltr /var/run/radiusd total 4 srw-rw 1 rootradiusd 0 Apr 10 17:26 radiusd.sock -rw-r--r-- 1 radiusd radiusd 6 Apr 10 17:26 radiusd.pid in your file /usr/local/fnmt/var/run/

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
Now i have given the permissions to radiusd directory (usr/local/fnmt/var/run/ > > radiusd/) It's working fine. Thank you all. Regards, Ramesh. On Fri, Apr 10, 2009 at 6:40 PM, wrote: > Hi, > > now its giving like this... > > > > [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd star

Re: Freeradius server not starting!

2009-04-10 Thread A . L . M . Buxey
Hi, > now its giving like this... > > [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd start > Starting FreeRADIUS:Fri Apr 10 07:15:32 2009 : Info: Starting - reading > configuration files ... > radiusd > > # ps -eaf|grep radiusd > root 4412 31100 0 07:15 pts/000:00:00 grep r

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
now its giving like this... [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 07:15:32 2009 : Info: Starting - reading configuration files ... radiusd # ps -eaf|grep radiusd root 4412 31100 0 07:15 pts/000:00:00 grep radius No pid created.

Re: Sending Access-Challenge

2009-04-10 Thread Alan DeKok
Laszlo Fekete wrote: > So I want a radius server to wifi auth with eap-ttls/peap, ldap and not > plain-text passwords. I downloaded 2.1.4 source and create debian > package without modification, do some basic configuration and testing, > radtest from local is fine, but radeapclient eap-md5 testing

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
[r...@bill etc]# [r...@bill radius]# ls -ltr total 12 drwxr-xr-x 3 radiusd radiusd 4096 Mar 19 16:41 radacct -rw-r- 1 radiusd radiusd 111 Apr 10 15:37 radius.log set this. - Original Message - From: ramesh p To: FreeRadius users mailing list Sent: Friday, April 10, 2009 4:

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
ls -ltr /usr/local/fnmt/var/log/ drwxr-xr-x 3 nobody root 4096 Jun 15 2007 radius Thanks, Ramesh. 2009/4/10 ramesh p > [r...@localhost data]# ls -ltr /usr/local/fnmt/var/log/radius > total 16 > drwx-- 2 root root 4096 Apr 28 2007 radacct > -rwxr-xr-x 1 root root 8298 Apr 10 06:43 radius

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
[r...@localhost data]# ls -ltr /usr/local/fnmt/var/log/radius total 16 drwx-- 2 root root 4096 Apr 28 2007 radacct -rwxr-xr-x 1 root root 8298 Apr 10 06:43 radius.log 2009/4/10 Волошин Вячеслав > set pach /usr/local/fnmt/var/log/radius/ group owner "radiusd", and give > write and read a

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Justin Steward
On Fri, Apr 10, 2009 at 7:32 PM, Alan DeKok wrote: > Justin Steward wrote: > > Thanks for the reply. Since SQL modules can't go in authenticate, this > > would have to be in authorize, yes? How then, would I get the reply > > attributes out of the SQL database? Or am I misunderstanding something?

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
set pach /usr/local/fnmt/var/log/radius/ group owner "radiusd", and give write and read access for group. check this into user "radiusd". - Original Message - From: Волошин Вячеслав To: FreeRadius users mailing list Sent: Friday, April 10, 2009 3:31 PM Subject: Re: Freeradius

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
Linux localhost.localdomain 2.6.9-42.ELsmp #1 i686 i686 i386 GNU/Linux The file(/usr/local/fnmt/var/log/radius/radius.log) exists. 2009/4/10 Волошин Вячеслав > Hmm, what the linux u use? or u use Sun OS? > pach /usr/local/fnmt/var/log/radius/radius.log is non-standard, this > directory exist

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
Hmm, what the linux u use? or u use Sun OS? pach /usr/local/fnmt/var/log/radius/radius.log is non-standard, this directory exist? Can u create file in? - Original Message - From: ramesh p To: FreeRadius users mailing list Sent: Friday, April 10, 2009 3:25 PM Subject: Re: Free

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
Already it's in disable state. [r...@localhost raddb]# more /etc/sysconfig/selinux # This file controls the state of SELinux on the system. # SELINUX= can take one of these three values: # enforcing - SELinux security policy is enforced. # permissive - SELinux prints warnings instead of

Re: Freeradius server not starting!

2009-04-10 Thread Волошин Вячеслав
Disable SELinux. - Original Message - From: ramesh p To: FreeRadius users mailing list Sent: Friday, April 10, 2009 3:14 PM Subject: Freeradius server not starting! [r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 05:52:13 2009

Re: Freeradius server not starting!

2009-04-10 Thread ramesh p
I'm using radius version 1.1.6 On Fri, Apr 10, 2009 at 4:44 PM, ramesh p wrote: > [r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start > Starting FreeRADIUS:Fri Apr 10 05:52:13 2009 : Info: Starting - reading > configuration files ... > radiusd: Couldn't open /usr/local/fnmt/var/log/ra

Freeradius server not starting!

2009-04-10 Thread ramesh p
[r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start Starting FreeRADIUS:Fri Apr 10 05:52:13 2009 : Info: Starting - reading configuration files ... radiusd: Couldn't open /usr/local/fnmt/var/log/radius/radius.log for logging: Permission denied (rlm_exec: Wait=yes but no output defined.

Sending Access-Challenge

2009-04-10 Thread Laszlo Fekete
Hello! I'm new to this list and don't found archive or something where maybe somebody answered my question. So I want a radius server to wifi auth with eap-ttls/peap, ldap and not plain-text passwords. I downloaded 2.1.4 source and create debian package without modification, do some basic config

Re: LDAP with fallback on local authentication?

2009-04-10 Thread Alan DeKok
Justin Steward wrote: > Thanks for the reply. Since SQL modules can't go in authenticate, this > would have to be in authorize, yes? How then, would I get the reply > attributes out of the SQL database? Or am I misunderstanding something? Maybe you could describe exactly what you want to do. >

Re: Trouble with Robust Proxy Accounting

2009-04-10 Thread Alan DeKok
JDL wrote: > In FreeRADIUS 2.x, the radrelay functions have been built into radiusd. That's the intention. > However, I seem to be having problems with data loss. Everything works > fine when the remote accounting server is up. However, when it goes > down, here is what I am seeing. ... > 4) He