On Fri, Apr 10, 2009 at 11:51 PM, Alan DeKok wrote:
> Justin Steward wrote:
> > I want to return some radius reply attributes from an SQL database,
> > check the user's password against an openLDAP server
>
> As I said... LDAP isn't an authentication protocol.
>
> > (maybe a Windows
> > Server ru
use this :
http://www.howtoforge.com/how-to-create-a-freeradius-2.1.1-6-rpm-package-on-centos-5.2
for your version freeradius, I m use this.
- Original Message -
From: "Thor Spruyt"
To:
Sent: Friday, April 10, 2009 8:43 PM
Subject: freeradius-server-2.1.4 make fails
Hi,
I'm tryin
Alan DeKok wrote:
> Do *not* CC me on messages sent to the list. In case you hadn't
> noticed, I already read the list.
>
> And do *not* set "return receipt requested". It's rude, and it causes
> me to be biased against people who use it.
>
Sorry, I will watching for this in the future.
>
hi,
fixed in CVS IIRC - for now, enable vmps support and it'll compile
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Hi,
I'm trying to compile freeradius-server-2.1.4 on CentOS 4.6 32-bit
Configure command:
./configure --prefix=/opt/freeradius-2.1.4 --with-mysql --with-postgresql
--with-openldap --without-snmp --without-openssl --without-krb5 --without-vmps
But make fails:
/home/thor/freeradius-server-2.1.4/l
Hello,
I noticed that..if a network error or another connection problem occurs
between freeradius and mysql server, freeradius service just exits... And
sure service stops automatically.
Is there any way to give a timeout value or retry number for mysql in
freeradius configuration that prevents f
Do *not* CC me on messages sent to the list. In case you hadn't
noticed, I already read the list.
And do *not* set "return receipt requested". It's rude, and it causes
me to be biased against people who use it.
Laszlo Fekete wrote:
...
> But when I try with eap-ttls eap-md5/eap-mschapv2, ea
Hi,
> But when I try with eap-ttls eap-md5/eap-mschapv2, eap-peap eap-mschapv2
> it fails:
PEAP works but TTLS fails - so, does your eap.conf have ttls configured?
alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Alan DeKok wrote:
> Don't use radeapclient. See my web page for instructions on setting
> up EAP:
>
> http://deployingradius.com
>
I tried the eapol_test from the web page (
http://deployingradius.com/scripts/eapol_test/ ).
With Eap-ttls pap/chap/ms-chap said success:
RADIUS packet
Justin Steward wrote:
> I want to return some radius reply attributes from an SQL database,
> check the user's password against an openLDAP server
As I said... LDAP isn't an authentication protocol.
> (maybe a Windows
> Server running AD at some point in the future), and if possible fall
> back
Failed creating PID file /usr/local/fnmt/var/run/radiusd/radiusd.pid:
Permission denied
set this:
[r...@bill ~]# ls -ltr /var/run/radiusd
total 4
srw-rw 1 rootradiusd 0 Apr 10 17:26 radiusd.sock
-rw-r--r-- 1 radiusd radiusd 6 Apr 10 17:26 radiusd.pid
in your file /usr/local/fnmt/var/run/
Now i have given the permissions to radiusd directory
(usr/local/fnmt/var/run/
>
> radiusd/)
It's working fine. Thank you all.
Regards,
Ramesh.
On Fri, Apr 10, 2009 at 6:40 PM, wrote:
> Hi,
> > now its giving like this...
> >
> > [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd star
Hi,
> now its giving like this...
>
> [r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd start
> Starting FreeRADIUS:Fri Apr 10 07:15:32 2009 : Info: Starting - reading
> configuration files ...
> radiusd
>
> # ps -eaf|grep radiusd
> root 4412 31100 0 07:15 pts/000:00:00 grep r
now its giving like this...
[r...@localhost init.d]# /usr/local/fnmt/etc/init.d/radiusd start
Starting FreeRADIUS:Fri Apr 10 07:15:32 2009 : Info: Starting - reading
configuration files ...
radiusd
# ps -eaf|grep radiusd
root 4412 31100 0 07:15 pts/000:00:00 grep radius
No pid created.
Laszlo Fekete wrote:
> So I want a radius server to wifi auth with eap-ttls/peap, ldap and not
> plain-text passwords. I downloaded 2.1.4 source and create debian
> package without modification, do some basic configuration and testing,
> radtest from local is fine, but radeapclient eap-md5 testing
[r...@bill etc]# [r...@bill radius]# ls -ltr
total 12
drwxr-xr-x 3 radiusd radiusd 4096 Mar 19 16:41 radacct
-rw-r- 1 radiusd radiusd 111 Apr 10 15:37 radius.log
set this.
- Original Message -
From: ramesh p
To: FreeRadius users mailing list
Sent: Friday, April 10, 2009 4:
ls -ltr /usr/local/fnmt/var/log/
drwxr-xr-x 3 nobody root 4096 Jun 15 2007 radius
Thanks,
Ramesh.
2009/4/10 ramesh p
> [r...@localhost data]# ls -ltr /usr/local/fnmt/var/log/radius
> total 16
> drwx-- 2 root root 4096 Apr 28 2007 radacct
> -rwxr-xr-x 1 root root 8298 Apr 10 06:43 radius
[r...@localhost data]# ls -ltr /usr/local/fnmt/var/log/radius
total 16
drwx-- 2 root root 4096 Apr 28 2007 radacct
-rwxr-xr-x 1 root root 8298 Apr 10 06:43 radius.log
2009/4/10 Волошин Вячеслав
> set pach /usr/local/fnmt/var/log/radius/ group owner "radiusd", and give
> write and read a
On Fri, Apr 10, 2009 at 7:32 PM, Alan DeKok wrote:
> Justin Steward wrote:
> > Thanks for the reply. Since SQL modules can't go in authenticate, this
> > would have to be in authorize, yes? How then, would I get the reply
> > attributes out of the SQL database? Or am I misunderstanding something?
set pach /usr/local/fnmt/var/log/radius/ group owner "radiusd", and give write
and read access for group. check this into user "radiusd".
- Original Message -
From: Волошин Вячеслав
To: FreeRadius users mailing list
Sent: Friday, April 10, 2009 3:31 PM
Subject: Re: Freeradius
Linux localhost.localdomain 2.6.9-42.ELsmp #1 i686 i686 i386 GNU/Linux
The file(/usr/local/fnmt/var/log/radius/radius.log) exists.
2009/4/10 Волошин Вячеслав
> Hmm, what the linux u use? or u use Sun OS?
> pach /usr/local/fnmt/var/log/radius/radius.log is non-standard, this
> directory exist
Hmm, what the linux u use? or u use Sun OS?
pach /usr/local/fnmt/var/log/radius/radius.log is non-standard, this directory
exist? Can u create file in?
- Original Message -
From: ramesh p
To: FreeRadius users mailing list
Sent: Friday, April 10, 2009 3:25 PM
Subject: Re: Free
Already it's in disable state.
[r...@localhost raddb]# more /etc/sysconfig/selinux
# This file controls the state of SELinux on the system.
# SELINUX= can take one of these three values:
# enforcing - SELinux security policy is enforced.
# permissive - SELinux prints warnings instead of
Disable SELinux.
- Original Message -
From: ramesh p
To: FreeRadius users mailing list
Sent: Friday, April 10, 2009 3:14 PM
Subject: Freeradius server not starting!
[r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start
Starting FreeRADIUS:Fri Apr 10 05:52:13 2009
I'm using radius version 1.1.6
On Fri, Apr 10, 2009 at 4:44 PM, ramesh p wrote:
> [r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start
> Starting FreeRADIUS:Fri Apr 10 05:52:13 2009 : Info: Starting - reading
> configuration files ...
> radiusd: Couldn't open /usr/local/fnmt/var/log/ra
[r...@localhost log]# /usr/local/fnmt/etc/init.d/radiusd start
Starting FreeRADIUS:Fri Apr 10 05:52:13 2009 : Info: Starting - reading
configuration files ...
radiusd: Couldn't open /usr/local/fnmt/var/log/radius/radius.log for
logging: Permission denied
(rlm_exec: Wait=yes but no output defined.
Hello!
I'm new to this list and don't found archive or something where maybe
somebody answered my question.
So I want a radius server to wifi auth with eap-ttls/peap, ldap and not
plain-text passwords. I downloaded 2.1.4 source and create debian
package without modification, do some basic config
Justin Steward wrote:
> Thanks for the reply. Since SQL modules can't go in authenticate, this
> would have to be in authorize, yes? How then, would I get the reply
> attributes out of the SQL database? Or am I misunderstanding something?
Maybe you could describe exactly what you want to do.
>
JDL wrote:
> In FreeRADIUS 2.x, the radrelay functions have been built into radiusd.
That's the intention.
> However, I seem to be having problems with data loss. Everything works
> fine when the remote accounting server is up. However, when it goes
> down, here is what I am seeing.
...
> 4) He
29 matches
Mail list logo