RE: Dialup_admin problems

2003-06-27 Thread Andrew Staples
Found the problem, in case this helps anyone elsethis test box was
behind a firewall, and ServerName in httpd.conf was set to the internal
private ip address.

Andrew

> -Original Message-
> From: [EMAIL PROTECTED] 
> [mailto:[EMAIL PROTECTED] On Behalf Of 
> Andrew Staples
> Sent: Friday, June 27, 2003 10:45 AM
> To: [EMAIL PROTECTED]
> Subject: Dialup_admin problems
> 
> 
> I'm trying to configure a backup radius server (the first one 
> is working
> well).   I've pretty much duplicated the first working 
> system, but having
> problems with dialup_admin.
> 
> Although there are users/groups in the mysql db, dialup_admin 
> can't find/display them.  Adding new users via dialup_admin 
> fails, as they are not written to the database.
> 
> Other things fail, such as "check server"...I get a user test 
> page, instead of radcheck.
> 
> I've tried using the root user in admin.conf, but that didn't 
> fix the problem.
> 
> I believe radius and rlm_sql  are fine; result of radtest:
> 
> Sending Access-Request of id 253 to 127.0.0.1:1812
> User-Name = "fred"
> User-Password = "\001\37o\327$\n\344\202\261\t\374\313\277a7"
> NAS-IP-Address = radius2.nwnetcom.com
> NAS-Port = 1812
> rad_recv: Access-Accept packet from host 127.0.0.1:1812, 
> id=253, length=44
> Framed-Compression = Van-Jacobson-TCP-IP
> Framed-Protocol = PPP
> Service-Type = Framed-User
> Framed-MTU = 1500
> 
> I've enabled sqltrace in sql.conf, but I can't locate that 
> file, so it probably isn't being written.
> 
> Can anyone point me in the right direction?  Is this a 
> permissions thing on the dialup_admin directory?
> 
> Thanks,
> Andrew
> 
> 
> - 
> List info/subscribe/unsubscribe? See 
> http://www.freeradius.org/list/users.html
> 


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: free radius 0.7.1

2003-06-27 Thread Daniel Destro do Carmo



I had the same problem yesterday
 
use  #  ./radiusd restart

  - Original Message - 
  From: 
  Arthur 
  Stephens 
  To: [EMAIL PROTECTED] 
  
  Sent: Friday, June 27, 2003 5:39 PM
  Subject: free radius 0.7.1
  
  I am developing scripts to automate adding users 
  to our radius database but it seems there is something wrong with 
  mine.
  If I issue radiusd restart I get..
  [EMAIL PROTECTED] root]# radiusd restartFri Jun 27 
  14:57:54 2003 : Info: Starting - reading configuration files ...auth bind: 
  Address already in use
   
  I have to use "ps aux" to find its PID and then 
  kill it.
  Then I can issue a radiusd start.
  It seems to me I should be able to issue radiusd 
  restart and that is what should happen.
  Please help.
   
  Arthur StephensSales TechnicianPtera 
  Wireless Internet[EMAIL PROTECTED]509-255-9204


There are no DB handles to use!

2003-06-27 Thread Dahl
I've been trying to set up freeradius for a few days now. It works fine
when I use the text files but after configuring it for postgresql I end up
getting an error "There are no DB handles to use!". As you can see from the
debug I raised the default from 5 handles to 30 but that didn't help. If
anyone has had a similar problem with postgresql or any other db for that
matter please help! I've been searching the mailing list and google with no
luck.


rlm_sql (sql): Driver rlm_sql_postgresql (module rlm_sql_postgresql) loaded
and linked
rlm_sql (sql): Attempting to connect to [EMAIL PROTECTED]:5432/radius
rlm_sql (sql): starting 0
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #0
rlm_sql (sql): Connected new DB handle, #0
rlm_sql (sql): starting 1
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #1
rlm_sql (sql): Connected new DB handle, #1
rlm_sql (sql): starting 2
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #2
rlm_sql (sql): Connected new DB handle, #2
rlm_sql (sql): starting 3
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #3
rlm_sql (sql): Connected new DB handle, #3
rlm_sql (sql): starting 4
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #4
rlm_sql (sql): Connected new DB handle, #4
rlm_sql (sql): starting 5
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #5
rlm_sql (sql): Connected new DB handle, #5
rlm_sql (sql): starting 6
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #6
rlm_sql (sql): Connected new DB handle, #6
rlm_sql (sql): starting 7
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #7
rlm_sql (sql): Connected new DB handle, #7
rlm_sql (sql): starting 8
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #8
rlm_sql (sql): Connected new DB handle, #8
rlm_sql (sql): starting 9
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #9
rlm_sql (sql): Connected new DB handle, #9
rlm_sql (sql): starting 10
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #10
rlm_sql (sql): Connected new DB handle, #10
rlm_sql (sql): starting 11
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #11
rlm_sql (sql): Connected new DB handle, #11
rlm_sql (sql): starting 12
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #12
rlm_sql (sql): Connected new DB handle, #12
rlm_sql (sql): starting 13
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #13
rlm_sql (sql): Connected new DB handle, #13
rlm_sql (sql): starting 14
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #14
rlm_sql (sql): Connected new DB handle, #14
rlm_sql (sql): starting 15
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #15
rlm_sql (sql): Connected new DB handle, #15
rlm_sql (sql): starting 16
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #16
rlm_sql (sql): Connected new DB handle, #16
rlm_sql (sql): starting 17
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #17
rlm_sql (sql): Connected new DB handle, #17
rlm_sql (sql): starting 18
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #18
rlm_sql (sql): Connected new DB handle, #18
rlm_sql (sql): starting 19
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #19
rlm_sql (sql): Connected new DB handle, #19
rlm_sql (sql): starting 20
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #20
rlm_sql (sql): Connected new DB handle, #20
rlm_sql (sql): starting 21
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #21
rlm_sql (sql): Connected new DB handle, #21
rlm_sql (sql): starting 22
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #22
rlm_sql (sql): Connected new DB handle, #22
rlm_sql (sql): starting 23
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #23
rlm_sql (sql): Connected new DB handle, #23
rlm_sql (sql): starting 24
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #24
rlm_sql (sql): Connected new DB handle, #24
rlm_sql (sql): starting 25
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #25
rlm_sql (sql): Connected new DB handle, #25
rlm_sql (sql): starting 26
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #26
rlm_sql (sql): Connected new DB handle, #26
rlm_sql (sql): starting 27
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #27
rlm_sql (sql): Connected new DB handle, #27
rlm_sql (sql): starting 28
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #28
rlm_sql (sql): Connected new DB handle, #28
rlm_sql (sql): starting 29
rlm_sql (sql): Attempting to connect rlm_sql_postgresql #29
rlm_sql (sql): Connected new DB handle, #29
Module: Instantiated sql (sql)
Module: Loaded Acct-Unique-Session-Id
 acct_unique: key = "User-Name, Acct-Session-Id, NAS-IP-Address, Client-IP-
Address, NAS-Port-Id"
Module: Instantiated acct_unique (acct_unique)
Module: Loaded detail
 detail: detailfile = "/usr/local/var/log/radius/radacct/%{Client-IP-
Address}/detail-%Y%m%d"
 detail: detailperm = 384
 detail: dirperm = 493
 detail: locking = no
Module: Instantiated detail (detail)
Module: Loaded System
 unix: cache = no
 unix: pas

free radius 0.7.1

2003-06-27 Thread Arthur Stephens



I am developing scripts to automate adding users to 
our radius database but it seems there is something wrong with 
mine.
If I issue radiusd restart I get..
[EMAIL PROTECTED] root]# radiusd restartFri Jun 27 
14:57:54 2003 : Info: Starting - reading configuration files ...auth bind: 
Address already in use
 
I have to use "ps aux" to find its PID and then 
kill it.
Then I can issue a radiusd start.
It seems to me I should be able to issue radiusd 
restart and that is what should happen.
Please help.
 
Arthur StephensSales TechnicianPtera 
Wireless Internet[EMAIL PROTECTED]509-255-9204


Re: dont call me

2003-06-27 Thread Benjamin A. Shelton

> I think in this case, it is more likely that this misguided soul thought
> that we were somehow the recently launched national telemarketing do not
> call registry.

[Off topic warning]

Which, according to NetCraft is running Win2k and seems to me to be
completely unresponsive.



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


problem with whitespace in username and ldap

2003-06-27 Thread Matthew Schumacher
List,

Anyone have a fix for the ldap module authenticating users with 
whitespace in the username.  It's really making a mess of my accounting.

I am currently using this filter:

(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectClass=aptAccount)(aptDialupEnabled=1)(aptAccountEnabled=1))

And I can still authenticate using " test".

Debugging shows that freeradius passes the space to ldap where it finds 
the record and returns ok.

rlm_ldap: performing search in dc=aptalaska,dc=net, with filter (&(uid= 
test)(objectClass=aptAccount)(aptDialupEnabled=1)(aptAccountEnabled=1))

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Missing nas->strvalue in add_nas_attr, bad EAP request ID

2003-06-27 Thread Dave Mason
Hi Alan,
I checked the new one and it looks good.  One a semi-related note, I 
tried doing a make on today's CVS with disable-shared as a config 
option.  I thought I could do an nm on radiusd and see symbol 
definitions for EAP subtype functions, like eapmd5_alloc, but they 
werent there.  Is that expected?  I checked the .libs directories  for 
the subtypes and the .a libraries there look good.  Functions in rlm_eap 
such as  eap_authenticate are linked into radiusd.

Regards,
Dave
PS:  While I'm here, it looks like I still won't get to that RLM_MODULE 
fix for EAP for a while.  I still need to do it but I keep getting other 
work dumped my way.  Probably you can relate to that. :)

Dave Mason <[EMAIL PROTECTED]> wrote:
 

I just grabbed the June 26 CVS and eap.c looks like the original
unpatched version.
   

 Yes, because I said I "just" added it.  The snapshot from today
should have the fix.
 Alan DeKok.



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Dialup_Admin

2003-06-27 Thread Suresh Pinnamaneni
Hi everybody,
 
   i am facing a hell lot of problems in making this done can any one help me please...
 
  i am running Latest CVS in my Redhat-7.2 but i am unable to make it through... 
 
  i am not able to view adduser, accouting and some more pages they stay blank when i try to open them... i am running PHP4.X.X and installed so that it will accept any version... but still i am not able to open any page...
 
  Please some one help me in making this up
 
Thanks in Advance
 Suresh.P,
Vijayawada - 520 010.
India. Ph : +91-866-485230
+91-866-483111
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!

RE: DEFAULT entry using SQL

2003-06-27 Thread Deryk Piper
Never mind, finally found it again in the sql.conf file.

RTFM :)

DP


> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] Behalf Of 
> Deryk Piper
> Sent: Friday, June 27, 2003 3:59 PM
> To: [EMAIL PROTECTED]
> Subject: DEFAULT entry using SQL
> 
> 
> Good day all,
> 
> I'm having the most difficult time finding this information 
> again.  I'm
> currently setting up mySQL using the excellent guide at
> http://www.frontios.com/freeradius.html, as recommended in the
> docs/RADIUS-SQL.schema file.  It's going well so far, but I need a
> DEFAULT entry that applies common attributes (ie, Framed-Service,
> Framed-Protocol) for all users in any group.  I know that I 
> came across
> a tip to do this as recently as last night, but for the life of me I
> simply can't find it again.
> 
> Can anybody tell me quickly how this is done?
> 
> Thanks in advance,
> 
> DP
> 
> 
> Deryk Piper, B.Asc
>  Network Manager
>  Applications Development
> Modular Software Ltd.
> 
> Web:www.mod-soft.com
> Email:  [EMAIL PROTECTED]
> Phone:  905.890.3778 x225
> FAX:905.890.3845
> 
> 
> 
> - 
> List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


DEFAULT entry using SQL

2003-06-27 Thread Deryk Piper
Good day all,

I'm having the most difficult time finding this information again.  I'm
currently setting up mySQL using the excellent guide at
http://www.frontios.com/freeradius.html, as recommended in the
docs/RADIUS-SQL.schema file.  It's going well so far, but I need a
DEFAULT entry that applies common attributes (ie, Framed-Service,
Framed-Protocol) for all users in any group.  I know that I came across
a tip to do this as recently as last night, but for the life of me I
simply can't find it again.

Can anybody tell me quickly how this is done?

Thanks in advance,

DP


Deryk Piper, B.Asc
 Network Manager
 Applications Development
Modular Software Ltd.

Web:www.mod-soft.com
Email:  [EMAIL PROTECTED]
Phone:  905.890.3778 x225
FAX:905.890.3845



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: dont call me

2003-06-27 Thread Owen DeLong
I think in this case, it is more likely that this misguided soul thought
that we were somehow the recently launched national telemarketing do not
call registry.
Owen

--On Friday, June 27, 2003 14:35 -0400 Deryk Piper <[EMAIL PROTECTED]> 
wrote:

I believe it's more constructive to interpret the message as saying,
perhaps, that the person doesn't want to receive emails from this list.
Without mentioning that this list is opt-IN, we can just retire the
issue (hopefully) by giving some direction:
If you ever want to unsubscribe or change your options, you can send a
message to [EMAIL PROTECTED] with the word
`help' in the subject or body (don't include the quotes), and you will
get back a message with instructions.
DP

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mieczyslaw
Maciejewski (EPO)
Sent: Friday, June 27, 2003 2:03 PM
To: '[EMAIL PROTECTED]'
Subject: RE: dont call me
It's a weight off my mind
-Original Message-
From: Brian Quinn [mailto:[EMAIL PROTECTED]
Sent: Friday, June 27, 2003 7:59 PM
To: [EMAIL PROTECTED]
Subject: Re: dont call me
Thanks for sharing that info with us.



At 12:16 PM 6/27/2003 -0500, Norman & Pearl Schultz wrote:

i want to be on the list of "dont call",i am tired of these phone calls



-
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: dont call me

2003-06-27 Thread Deryk Piper
I believe it's more constructive to interpret the message as saying,
perhaps, that the person doesn't want to receive emails from this list.
Without mentioning that this list is opt-IN, we can just retire the
issue (hopefully) by giving some direction:

If you ever want to unsubscribe or change your options, you can send a
message to [EMAIL PROTECTED] with the word
`help' in the subject or body (don't include the quotes), and you will
get back a message with instructions.

DP


-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] Behalf Of Mieczyslaw
Maciejewski (EPO)
Sent: Friday, June 27, 2003 2:03 PM
To: '[EMAIL PROTECTED]'
Subject: RE: dont call me


It's a weight off my mind
-Original Message-
From: Brian Quinn [mailto:[EMAIL PROTECTED]
Sent: Friday, June 27, 2003 7:59 PM
To: [EMAIL PROTECTED]
Subject: Re: dont call me


Thanks for sharing that info with us.




At 12:16 PM 6/27/2003 -0500, Norman & Pearl Schultz wrote:

i want to be on the list of "dont call",i am tired of these phone calls



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: dont call me

2003-06-27 Thread Mieczyslaw Maciejewski (EPO)



It's a 
weight off my mind

  -Original Message-From: Brian Quinn 
  [mailto:[EMAIL PROTECTED]Sent: Friday, June 27, 2003 7:59 
  PMTo: [EMAIL PROTECTED]Subject: Re: dont 
  call meThanks for sharing that info with 
  us.At 12:16 PM 6/27/2003 -0500, Norman & Pearl Schultz 
  wrote:
  i want to be on the 
list of "dont call",i am tired of these phone 
calls


Re: dont call me

2003-06-27 Thread Brian Quinn

Thanks for sharing that info with us.


At 12:16 PM 6/27/2003 -0500, Norman & Pearl Schultz wrote:
i want to be on the
list of "dont call",i am tired of these phone
calls


Dialup_admin problems

2003-06-27 Thread Andrew Staples
I'm trying to configure a backup radius server (the first one is working
well).   I've pretty much duplicated the first working system, but having
problems with dialup_admin.

Although there are users/groups in the mysql db, dialup_admin can't
find/display them.  Adding new users via dialup_admin fails, as they are not
written to the database.

Other things fail, such as "check server"...I get a user test page, instead
of radcheck.

I've tried using the root user in admin.conf, but that didn't fix the
problem.

I believe radius and rlm_sql  are fine; result of radtest:

Sending Access-Request of id 253 to 127.0.0.1:1812
User-Name = "fred"
User-Password = "\001\37o\327$\n\344\202\261\t\374\313\277a7"
NAS-IP-Address = radius2.nwnetcom.com
NAS-Port = 1812
rad_recv: Access-Accept packet from host 127.0.0.1:1812, id=253, length=44
Framed-Compression = Van-Jacobson-TCP-IP
Framed-Protocol = PPP
Service-Type = Framed-User
Framed-MTU = 1500

I've enabled sqltrace in sql.conf, but I can't locate that file, so it
probably isn't being written.

Can anyone point me in the right direction?  Is this a permissions thing on
the dialup_admin directory?

Thanks,
Andrew


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


dont call me

2003-06-27 Thread Norman & Pearl Schultz



i want to be on the list of "dont call",i am tired of these 
phone calls


Re: Radius log in MySQL

2003-06-27 Thread Keith Yoder


But, as I can see, radius duplicated the entries for on 
single call made, for example, in a Stop Sign there is two 
register in the database for that specific CalledStationId, 
but, sometimes, the timestamp (AcctStartTime) is different.

What I need it, to pull up a report with all calls made 
between to dates. How can I ignore the duplicity and just 
show the unique calls made???
 

Take a look at the acct_unique module.

Keith Yoder

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Radius log in MySQL

2003-06-27 Thread Daniel Destro do Carmo
Hello all,

I am doing a billing system where I read the information from
MySQL, generated by radius.

What I do is read the registers from the Radacct table.

But, as I can see, radius duplicated the entries for on
single call made, for example, in a Stop Sign there is two
register in the database for that specific CalledStationId,
but, sometimes, the timestamp (AcctStartTime) is different.

What I need it, to pull up a report with all calls made
between to dates. How can I ignore the duplicity and just
show the unique calls made???

Thanks



---
UOL, o melhor da Internet
http://www.uol.com.br/


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: LEAP exchanges

2003-06-27 Thread Alan DeKok
Artur Hecker <[EMAIL PROTECTED]> wrote:
> could anybody provide me a fast pointer to the Cisco LEAP authentication
> exchanges in 802.1X,

http://www.freeradius.org/radiusd/src/modules/rlm_eap/types/rlm_eap_leap/leap.txt

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Vendor ID Field is Sign Extended

2003-06-27 Thread Alan DeKok
"Jacob S. Barrett" <[EMAIL PROTECTED]> wrote:
> I changed that structure and all seems to work.  Can you forsee anything 
> that might fail now that it is unsigned?

  Some compile-time warnings, and maybe other signed/unsigned issues.
Fixing the VENDOR macro is the smallest change which solves the
problem, and which has no other side effects.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Unknown Value NAS_ATTR in dictionary.usrs

2003-06-27 Thread Suresh Pinnamaneni
i intsalled it directly on freeradius-0.81
 
lemme check unsinstalling it and reinstalling the new CVSOliver Graf <[EMAIL PROTECTED]> wrote:

On Fri, Jun 27, 2003 at 07:36:30AM -0700, Suresh Pinnamaneni wrote:> can any one help me i telling how to clear this .> I installed the latest CVS snapshot that is available rt now but once i am done and when i try to run Radius in debugging mode its saying unknow think NAS_ATTR in dictionary.usrs can any one help me in solving this.use the dictionary files from the cvs snapshot, not the old ones.Oliver.- List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.htmlSuresh.P,
Vijayawada - 520 010.
India. Ph : +91-866-485230
+91-866-483111
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!

Dialup_admin do not work...

2003-06-27 Thread Suresh Pinnamaneni
i installed freeradius.0.81 on my Radhat 7.2 and every thing is done and going well... but this dialup admin doesnt not open at all
i see only blank pages when i click accounting or newuer or even some other links also stay calm with out showing any thing...
is there any thing that i need to install for this...
i tried installing every thing and even then also it doesnt open at all...
can any one help mein this regardsSuresh.P,
Vijayawada - 520 010.
India. Ph : +91-866-485230
+91-866-483111
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!

Re: Unknown Value NAS_ATTR in dictionary.usrs

2003-06-27 Thread Oliver Graf
On Fri, Jun 27, 2003 at 07:36:30AM -0700, Suresh Pinnamaneni wrote:
> can any one help me i telling how to clear this .
> I installed the latest CVS snapshot that is available rt now but once i am done and 
> when i try to run Radius in debugging mode its saying unknow think NAS_ATTR in 
> dictionary.usrs can any one help me in solving this.

use the dictionary files from the cvs snapshot, not the old ones.

Oliver.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Unknown Value NAS_ATTR in dictionary.usrs

2003-06-27 Thread Suresh Pinnamaneni
can any one help me i telling how to clear this .
I installed the latest CVS snapshot that is available rt now but once i am done and when i try to run Radius in debugging mode its saying unknow think NAS_ATTR in dictionary.usrs can any one help me in solving this.Suresh.P,
Vijayawada - 520 010.
India. Ph : +91-866-485230
+91-866-483111
Do you Yahoo!?
SBC Yahoo! DSL - Now only $29.95 per month!

Re: Radius does not try to register with SMUX

2003-06-27 Thread Alan DeKok
Yousef Jamous <[EMAIL PROTECTED]> wrote:
> I had some progress. I checked into the configuration script. It all
> talks about UCD-SNMP it does not account for the new version net-snmp.

  So... you're trying to use FreeRADIUS with an SNMP package it
doesn't support, and you're surprised it work?  I'm surprised at
that...

http://net-snmp.sourceforge.net/
...
History

This package was originally based on the Carnegie Mellon
University and Univerisity of California at Davis SNMP
implementations, but has been greatly enhanced, ported, fixed, made
easier to use and barely resembles the original package anymore.
...

> So, I installed the new version of net-snmp, and I started editing the
> configure file 

  Uh, no.  See 'configure.in', and the program 'autoconf'.

> But still I got errors as shown in this config.log file. I'm wondering
> if anyone has working version of Radius and net-snmp?

  No.

> If yes what is the version of net-snmp (or maybe ucd-snmp). I
> believe free radius was developed upon ucd-snmp structure.

  Yes.

  Which is why net-snmp doesn't work.

  Did you try installing ucd-snmp?

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Using primary and secondary databse and rlm_sqlcounter

2003-06-27 Thread Manuel Sousa
Hi all,

I'm trying to use 2 different MySQL databases so that in the case of
the primary failing there's a secondary database in order to do the
authentication.
This setup is working if i don't use rlm_sqlcounter to check if the
users already used their time.
I tried doing the same thing (group) for rlm_sqlcounter, but it seems
rlm_sqlcounter succeeds when it doesn't manage to connect to the
database. It seems to me that it considers the sql error as if it
returned that the user hasn't still used any time.
Wonder if any1 managed to get a similar setup to work or as any ideas,
bellow i send the radiusd.conf part and partial log.

Thanks in advance,
Manuel Sousa

>From : http://www.frontios.com/freeradius.html
  group {
sql2 {
  fail  = 1
  notfound = return
  noop  = 2
  ok  = return
  updated = 3
  reject = return
  userlock = 4
  invalid = 5
  handled = 6
}
sql {
  fail  = 1
  notfound = return
  noop  = 2
  ok  = return
  updated = 3
  reject = return
  userlock = 4
  invalid = 5
  handled = 6
}
  }

Part of the Log:

rlm_sqlcounter: Entering module authorize code
sqlcounter_expand:  'SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='%{User-Name}''
radius_xlat:  'SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='z57''
sqlcounter_expand:  '%{sql2:SELECT SUM(AcctSessionTime) FROM radacct
WHERE UserName='z57'}'
radius_xlat: Running registered xlat function of module sql2 for string
'SELECT SUM(AcctSessionTime) FROM radacct WHERE UserName='z57''
rlm_sql (sql2): - sql_xlat
radius_xlat:  'SELECT SUM(AcctSessionTime) FROM radacct WHERE
UserName='z57''
rlm_sql (sql2): Ignoring unconnected handle
rlm_sql (sql2): There are no DB handles to use!
radius_xlat:  ''
rlm_sqlcounter: (Check item - counter) is greater than zero
rlm_sqlcounter: Authorized user z57, check_item=600, counter=0
rlm_sqlcounter: Sent Reply-Item for user z57, Type=Session-Timeout,
value=600
  modcall[authorize]: module "noresetcounter2" returns ok
modcall: group group returns ok



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Inserting fields in MySQL/FreeRadius database

2003-06-27 Thread Carlos Henrique de Souza Brito
I've changed the query but nothing happened. It seems like something is ignoring 
sql.conf...
 

-Original Message- 
From: [EMAIL PROTECTED] on behalf of Tim McCracken 
Sent: Wed 6/25/2003 2:20 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: Inserting fields in MySQL/FreeRadius database


You will need to change the query in the SQL config file. And you will need to 
make sure that the value you are trying to insert is a supported variable. Its all in 
the docs.
 
 

-Original Message-
From: Carlos Henrique de Souza Brito [mailto:[EMAIL PROTECTED] Behalf 
Of Carlos Henrique de Souza Brito
Sent: Wednesday, June 25, 2003 12:14 PM
To: [EMAIL PROTECTED]
Subject: RE: Inserting fields in MySQL/FreeRadius database


OK, but if I create a field directly in mysql Radius will fill it ?
 
 

-Original Message- 
From: Chad Stalvey [mailto:[EMAIL PROTECTED] 
Sent: Wed 6/25/2003 1:45 PM 
To: [EMAIL PROTECTED] 
Cc: 
Subject: RE: Inserting fields in MySQL/FreeRadius database


It will be
 
mysql> alter table table_name add newfield_name newfield_type
 
The syntax is here:
 
http://www.mysql.de/doc/de/ALTER_TABLE.html
 
 
 

-Original Message-
From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] 
Behalf Of Carlos Henrique de Souza Brito
Sent: Wednesday, June 25, 2003 12:36 PM
To: [EMAIL PROTECTED]
Subject: Inserting fields in MySQL/FreeRadius database


Hello,
 
I need to add more fields in the MySQL, how can I do 
that ?
 
I found in phpMyAdmin an "Add new field at end of 
table". Radius automagically inserts data in this field ?
If not, is there a command or option in radius?
 
 
Thanks,
 
Carlos Brito
 
- List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html 

<>

Re: Missing nas->strvalue in add_nas_attr, bad EAP request ID

2003-06-27 Thread Alan DeKok
Dave Mason <[EMAIL PROTECTED]> wrote:
> I just grabbed the June 26 CVS and eap.c looks like the original
> unpatched version.

  Yes, because I said I "just" added it.  The snapshot from today
should have the fix.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: RADIUS + LDAP + SSL

2003-06-27 Thread Francisco Orozco/Upcnet
> I realize the second bind is for authentication.  However, it's trying
> to bind as Usuari instead of the numeric UserID mentioned elsewhere
> in your log.  It looks like this might be related to some sort of group
> authentication.  It also looks like the LDAP bind doesn't return 
failure,
> but simply times out.  (Note there is no mention of LDAP returning, just
> the modcall: group authtype returns reject).

Yes, It is possible... 

When I access to my LDAP server as https://ldap.server.com:636 I must 
install a CA certficate o selfsigned certificated onto client in order to 
access.

On FreeRadius I haven't configured this (I don't kwno how). I think 
modcall returns reject, because it can't authenticate SSL certficate 
presented by LDAP server.

Anyone has been able to use Radius + SSL + LDAP using FreeRadius. ?

__
Paco Orozco ([EMAIL PROTECTED])
Divisió de Telecomunicacions
UPCNet
Edifici Vèrtex - Pl. Eusebi Güell, 6
Telèfon centraleta: 93.40.11600


-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


LEAP exchanges

2003-06-27 Thread Artur Hecker
hi


could anybody provide me a fast pointer to the Cisco LEAP authentication
exchanges in 802.1X, i.e. between STA, Authenticator and AuthServer? A
small compilation would be great like in the EAP-MD5 faq
(http://www.freeradius.org/doc/EAP-MD5.html)... Alternatively just say
me how many messages are required.

i can't recall this being sent through the list recently...

thanks for your help.


artur

-- 
Artur Hecker
artur[at]hecker.info

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html