Re: itz urgent!!!!!!!!!!!!!!!!!!!!!

2003-11-24 Thread Oliver Graf
Hi!

[ using mutliple ! in Subject does no good ]

On Mon, Nov 24, 2003 at 09:57:17PM -0800, puneeth b wrote:
> i cannot use the ODBC driver to connect freeradius to db2. i should 
> build a separate  driver so tht it talks to eachother.

Correct.

> since db2 has a set of their own rules, will have to follow those set of rules.
> hence i want to know the connection between the freeradius -> NAS>db2 
> server.
> also of the role of the NAS with freeradius as well as db2.

The NAS asks the radiusd and the radiusd looks into its data sources
(perhaps also a db2 database) to validate the information.

  NAS -> radius -> db

> also the information of how the other databases works with freeradius which uses a 
> separate driver for communication process with freeradius.
> give me any address so that i can send a query & check how it works  
>   (i.e the  interface  for freeradius).

radclient and radtest can be used to test the server.

> about how the  tables are maintained  / stored / the kind of attributes? i didnt get 
> the idea.

As you like it. The queries can be customized to your needs.

> also can i access db2, oracle,postgresql through any platform?

Through any supported platform, yes.

> also kindly help me with the testing part of the documentation.

Look into the doc directory of the freeradius distribution and into
the sample configs. They should help.

Ask google to search in the mail archive of this list for db2 and you
should find a mail or two.

Oliver.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


itz urgent!!!!!!!!!!!!!!!!!!!!!

2003-11-24 Thread puneeth b
hello sir,    i cannot use the ODBC driver to connect freeradius to db2. i should build a separate  driver so tht it talks to eachother.since db2 has a set of their own rules, will have to follow those set of rules.hence i want to know the connection between the freeradius -> NAS>db2 server.
also of the role of the NAS with freeradius as well as db2.
also the information of how the other databases works with freeradius which uses a separate driver for communication process with freeradius.
give me any address so that i can send a query & check how it works    (i.e the  interface  for freeradius).about how the  tables are maintained  / stored / the kind of attributes? i didnt get the idea.also can i access db2, oracle,postgresql through any platform?also kindly help me with the testing part of the documentation.thanks in advancepuneeth
Do you Yahoo!?
Free Pop-Up Blocker - Get it now

Instant Ph!armacy D)rugs to your Door!

2003-11-24 Thread Juan Hurst







Re: simple setup using users file

2003-11-24 Thread Bill Schoolfield
Yes it's in the users file. My example was a "mock
up" of the user file. I should have cut & pasted
the real data!

Anyway the problem turned out to be a bad password?
(see my other post). Thanks for your responses. 

Bill

--- Rob Genovesi <[EMAIL PROTECTED]> wrote:
> The username "00022d-8152d8" is in your users file?
> 
> You can see it is matching the DEFAULT entry at line
> 153 (users: Matched 
> DEFAULT at 153) ,
> but it does not seem to find this specific username
> in the users file.
> 
> Other recommendation would be to check the
> "lower_user" option in radiusd.conf.
> Freeradius has a few options for matching case
> sensitivity in usernames 
> (and passwords).
> 
> 
> -Rob
> 
> 
> At 03:11 PM 11/24/2003 -0800, you wrote:
> >Rob,
> >
> >Thanks. I doubled checked. The comma is there.
> Sorry
> >'bout that.
> >
> >I really have no clue what is going on here. The
> >message indicate no password is present in the
> >request, yet in the debug log is it shown. Here
> >is a snippit of the log:
> >
> >Listening on IP address *, ports 1812/udp and
> >1813/udp, with proxy on 1814/udp.
> >Ready to process requests.
> >rad_recv: Access-Request packet from host
> >XX.XXX.XXX.XXX:33631, id=139, length=65
> > User-Name = "00022d-8152d8"
> > User-Password = "blbb"
> > NAS-IP-Address = 192.168.0.200
> > NAS-Port = 0
> >modcall: entering group authorize for request 0
> >   modcall[authorize]: module "preprocess" returns
> ok
> >for request 0
> >   modcall[authorize]: module "chap" returns noop
> for
> >request 0
> >   modcall[authorize]: module "eap" returns noop
> for
> >request 0
> > rlm_realm: No '@' in User-Name =
> "00022d-8152d8",
> >looking up realm NULL
> > rlm_realm: No such realm "NULL"
> >   modcall[authorize]: module "suffix" returns noop
> for
> >request 0
> > users: Matched DEFAULT at 153
> >   modcall[authorize]: module "files" returns ok
> for
> >request 0
> >   modcall[authorize]: module "mschap" returns noop
> for
> >request 0
> >modcall: group authorize returns ok for request 0
> >   rad_check_password:  Found Auth-Type Local
> >auth: type Local
> >auth: No password configured for the user
> >auth: Failed to validate the user.
> >
> >Any ideas??
> >
> >Bill
> 
> 
> - 
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: simple setup using users file

2003-11-24 Thread Bill Schoolfield

Update: 

I got it to work by changing the password to clear
text. Does "Auth-Type = Local" always use clear text
password or can this be configured to use 
encrypted passwords? 

Why did the message indicate "no password" vs
"password is incorrect"? This wording had me 
looking for the wrong problem.

Bill 


--- Bill Schoolfield <[EMAIL PROTECTED]> wrote:
> Rob, 
> 
> Thanks. I doubled checked. The comma is there. Sorry
> 
> 'bout that. 
> 
> I really have no clue what is going on here. The 
> message indicate no password is present in the
> request, yet in the debug log is it shown. Here
> is a snippit of the log:
>  
> Listening on IP address *, ports 1812/udp and
> 1813/udp, with proxy on 1814/udp.
> Ready to process requests.
> rad_recv: Access-Request packet from host
> XX.XXX.XXX.XXX:33631, id=139, length=65
>   User-Name = "00022d-8152d8"
>   User-Password = "blbb"
>   NAS-IP-Address = 192.168.0.200
>   NAS-Port = 0
> modcall: entering group authorize for request 0
>   modcall[authorize]: module "preprocess" returns ok
> for request 0
>   modcall[authorize]: module "chap" returns noop for
> request 0
>   modcall[authorize]: module "eap" returns noop for
> request 0
> rlm_realm: No '@' in User-Name =
> "00022d-8152d8",
> looking up realm NULL
> rlm_realm: No such realm "NULL"
>   modcall[authorize]: module "suffix" returns noop
> for
> request 0
> users: Matched DEFAULT at 153
>   modcall[authorize]: module "files" returns ok for
> request 0
>   modcall[authorize]: module "mschap" returns noop
> for
> request 0
> modcall: group authorize returns ok for request 0
>   rad_check_password:  Found Auth-Type Local
> auth: type Local
> auth: No password configured for the user
> auth: Failed to validate the user.
> 
> Any ideas??
> 
> Bill
> 
> --- Rob Genovesi <[EMAIL PROTECTED]> wrote:
> > Looks like a syntax error in the users file.  Your
> > missing a comma after 
> > the auth-type in your specific user entry.
> > Correct entry should look like:
> > 000102-030405   Auth-Type := Local, User-Password
> ==
> > ""
> > 
> > Also use ":=" to declar your Auth-Type in the
> > DEFAULT entry.  (Theres an 
> > example in the stock users file that uses just
> "=",
> > but I think ":=" is 
> > more correct)
> > 
> > Refer to
> http://www.freeradius.org/doc/users.5.html
> > 
> > 
> > 
> > -Rob
> > 
> > 
> > At 08:33 AM 11/24/2003 -0800, you wrote:
> > >Hi,
> > >
> > >I'm using freeradius 0.9.3 on redhat 9.0. I'm
> > trying
> > >to get simple authentication working using the
> > users
> > >file. I have edited the client.conf and users
> file
> > but
> > >nothing else.
> > >
> > >When running under debug, I can see the
> > authentication
> > >request come in and I have verified that the
> shared
> > >secret is ok.
> > >
> > >However, depending on how I edit the users file,
> I
> > >either get:
> > >
> > >auth: No password configured for user
> > >
> > >or
> > >
> > >auth: No authentication method (Auth-Type)
> > >configuration found for the request: rejecting
> user
> > >
> > >
> > >In the first case I have in the users file:
> > >
> > >DEFAULT  Auth-Type = Local
> > >  Fall-Through = Yes
> > >
> > >000102-030405 Auth-Type := Local User-Password ==
> > >""
> > >
> > >In the second case, I have the same without the
> > >DEFAULT entry.
> > >
> > >The user name is a mac address from a wireless
> > device.
> > >Should it be in double quotes? What do I need to
> do
> > to
> > >get this simple case working?
> > >
> > >Bill
> > >
> > >__
> > >Do you Yahoo!?
> > >Free Pop-Up Blocker - Get it now
> > >http://companion.yahoo.com/
> > >
> > >-
> > >List info/subscribe/unsubscribe? See
> > http://www.freeradius.org/list/users.html
> > 
> > 
> > - 
> > List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> 
> __
> Do you Yahoo!?
> Free Pop-Up Blocker - Get it now
> http://companion.yahoo.com/
> 
> - 
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: simple setup using users file

2003-11-24 Thread Rob Genovesi
The username "00022d-8152d8" is in your users file?

You can see it is matching the DEFAULT entry at line 153 (users: Matched 
DEFAULT at 153) ,
but it does not seem to find this specific username in the users file.

Other recommendation would be to check the "lower_user" option in radiusd.conf.
Freeradius has a few options for matching case sensitivity in usernames 
(and passwords).

-Rob

At 03:11 PM 11/24/2003 -0800, you wrote:
Rob,

Thanks. I doubled checked. The comma is there. Sorry
'bout that.
I really have no clue what is going on here. The
message indicate no password is present in the
request, yet in the debug log is it shown. Here
is a snippit of the log:
Listening on IP address *, ports 1812/udp and
1813/udp, with proxy on 1814/udp.
Ready to process requests.
rad_recv: Access-Request packet from host
XX.XXX.XXX.XXX:33631, id=139, length=65
User-Name = "00022d-8152d8"
User-Password = "blbb"
NAS-IP-Address = 192.168.0.200
NAS-Port = 0
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok
for request 0
  modcall[authorize]: module "chap" returns noop for
request 0
  modcall[authorize]: module "eap" returns noop for
request 0
rlm_realm: No '@' in User-Name = "00022d-8152d8",
looking up realm NULL
rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for
request 0
users: Matched DEFAULT at 153
  modcall[authorize]: module "files" returns ok for
request 0
  modcall[authorize]: module "mschap" returns noop for
request 0
modcall: group authorize returns ok for request 0
  rad_check_password:  Found Auth-Type Local
auth: type Local
auth: No password configured for the user
auth: Failed to validate the user.
Any ideas??

Bill


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Continious Account Logging

2003-11-24 Thread Arthur B Olsen
>Make your NAS send interim updates.  You have no other choice.

>Alan DeKok.


Thanks, that seems to be the answer. The answer wich gives me an other 
problem. The rfc says that Acct-Interim-Interval can only appear in the 
Access-Accept message. And i have no idea where to put either of them. The 
problem is maybe more that i don't really understand the rfc's. And i have 
been awake a looong time now working on this. It's has to be ready by 
sometime tomorrow.
I would really apreciate if some could tell me where to put this 
Acct-Interim-Interval in the sql table.

Thanks
-- 
Arthur B Olsen
P/F Teletech
J.C. Svabosgøta 8
100 Tórshavn
Tlf: 317265
Mobil:220781
Email:[EMAIL PROTECTED]

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: simple setup using users file

2003-11-24 Thread Bill Schoolfield
Rob, 

Thanks. I doubled checked. The comma is there. Sorry 
'bout that. 

I really have no clue what is going on here. The 
message indicate no password is present in the
request, yet in the debug log is it shown. Here
is a snippit of the log:
 
Listening on IP address *, ports 1812/udp and
1813/udp, with proxy on 1814/udp.
Ready to process requests.
rad_recv: Access-Request packet from host
XX.XXX.XXX.XXX:33631, id=139, length=65
User-Name = "00022d-8152d8"
User-Password = "blbb"
NAS-IP-Address = 192.168.0.200
NAS-Port = 0
modcall: entering group authorize for request 0
  modcall[authorize]: module "preprocess" returns ok
for request 0
  modcall[authorize]: module "chap" returns noop for
request 0
  modcall[authorize]: module "eap" returns noop for
request 0
rlm_realm: No '@' in User-Name = "00022d-8152d8",
looking up realm NULL
rlm_realm: No such realm "NULL"
  modcall[authorize]: module "suffix" returns noop for
request 0
users: Matched DEFAULT at 153
  modcall[authorize]: module "files" returns ok for
request 0
  modcall[authorize]: module "mschap" returns noop for
request 0
modcall: group authorize returns ok for request 0
  rad_check_password:  Found Auth-Type Local
auth: type Local
auth: No password configured for the user
auth: Failed to validate the user.

Any ideas??

Bill

--- Rob Genovesi <[EMAIL PROTECTED]> wrote:
> Looks like a syntax error in the users file.  Your
> missing a comma after 
> the auth-type in your specific user entry.
> Correct entry should look like:
> 000102-030405   Auth-Type := Local, User-Password ==
> ""
> 
> Also use ":=" to declar your Auth-Type in the
> DEFAULT entry.  (Theres an 
> example in the stock users file that uses just "=",
> but I think ":=" is 
> more correct)
> 
> Refer to http://www.freeradius.org/doc/users.5.html
> 
> 
> 
> -Rob
> 
> 
> At 08:33 AM 11/24/2003 -0800, you wrote:
> >Hi,
> >
> >I'm using freeradius 0.9.3 on redhat 9.0. I'm
> trying
> >to get simple authentication working using the
> users
> >file. I have edited the client.conf and users file
> but
> >nothing else.
> >
> >When running under debug, I can see the
> authentication
> >request come in and I have verified that the shared
> >secret is ok.
> >
> >However, depending on how I edit the users file, I
> >either get:
> >
> >auth: No password configured for user
> >
> >or
> >
> >auth: No authentication method (Auth-Type)
> >configuration found for the request: rejecting user
> >
> >
> >In the first case I have in the users file:
> >
> >DEFAULT  Auth-Type = Local
> >  Fall-Through = Yes
> >
> >000102-030405 Auth-Type := Local User-Password ==
> >""
> >
> >In the second case, I have the same without the
> >DEFAULT entry.
> >
> >The user name is a mac address from a wireless
> device.
> >Should it be in double quotes? What do I need to do
> to
> >get this simple case working?
> >
> >Bill
> >
> >__
> >Do you Yahoo!?
> >Free Pop-Up Blocker - Get it now
> >http://companion.yahoo.com/
> >
> >-
> >List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
> 
> 
> - 
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html


__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: simple setup using users file

2003-11-24 Thread Rob Genovesi
Looks like a syntax error in the users file.  Your missing a comma after 
the auth-type in your specific user entry.
Correct entry should look like:
000102-030405   Auth-Type := Local, User-Password == ""

Also use ":=" to declar your Auth-Type in the DEFAULT entry.  (Theres an 
example in the stock users file that uses just "=", but I think ":=" is 
more correct)

Refer to http://www.freeradius.org/doc/users.5.html



-Rob

At 08:33 AM 11/24/2003 -0800, you wrote:
Hi,

I'm using freeradius 0.9.3 on redhat 9.0. I'm trying
to get simple authentication working using the users
file. I have edited the client.conf and users file but
nothing else.
When running under debug, I can see the authentication
request come in and I have verified that the shared
secret is ok.
However, depending on how I edit the users file, I
either get:
auth: No password configured for user

or

auth: No authentication method (Auth-Type)
configuration found for the request: rejecting user
In the first case I have in the users file:

DEFAULT  Auth-Type = Local
 Fall-Through = Yes
000102-030405 Auth-Type := Local User-Password ==
""
In the second case, I have the same without the
DEFAULT entry.
The user name is a mac address from a wireless device.
Should it be in double quotes? What do I need to do to
get this simple case working?
Bill

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Fragmented EAP frames was My problem with PEAP

2003-11-24 Thread Bill Reid
Thanks Alan,

Alan DeKok wrote:

Bill Reid <[EMAIL PROTECTED]> wrote:
 

I grabbed the latest snapshot on friday.  Recompiled.  Reconfigured the 
default radiusd.conf file to use eap/peap.

I am still seeing fragmented Access Challenge packets.  However the 
first access challenge was not fragmented.  The ones after that were.
   

 Please don't call the packets "fragmented".  They're not.  As seen
in the debug log you posted, the server is calling the EAP module
twice for authentication, and there are TWO eap packets in the RADIUS
response, not one "fragmented" packet.
 

I will try to watch my terminology cuase you are right.

 I haven't seen that behaviour when I use PEAP, and so far there
haven't been reports from anyone else, either.
 

I will install the same snapshot on a FreeBSD box (currently it is on 
debian) and see if the behavior is the same.

then the packet trace is irrelevant.  We
already know that the problem is in the RADIUS server, as it's debug
logs are telling you there's a problem.
 Find out WHY the EAP module is being called twice.  Nothing else is
relevant.
 

I understand.  I will do my best. 

 Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
 



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Continious Account Logging

2003-11-24 Thread Alan DeKok
Arthur B Olsen <[EMAIL PROTECTED]> wrote:
> My question is, is there anything i can do to get freeradius to write these
> records with an interval like once a minute.

  Make your NAS send interim updates.  You have no other choice.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


script to move account flat files to MySQL

2003-11-24 Thread [EMAIL PROTECTED]
Hello,

I am working on getting the radius account logs to write to
MySQL, in the mean time I am still logging accounting information
to flat files.

I am looking for a script that will take my daily accounting flat
files and insert them into MySQL.  Does anyone know of
any scripts that will do this?  I have been looking around and
have not found any. 

Thanks,

Dave

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Continious Account Logging

2003-11-24 Thread Arthur B Olsen
Hi, im pretty new to radius. But i hope this is the right place to ask my 
question. It not, please tell me, and i won't do again:)

Short story:
My setup is: pppoe-server->pppd->radiusclient->freeradius->postgresql.

And it works just fine, and fast.

But there's one thing wich troubles me. Accounting data is not written until 
the end of the session. We charge our customers for each MB downloaded. But 
acctinputoctets and outputoctets are not written before the link is taken 
down. If a user goes online, downloads 100GB, and then my server crashes, all 
is lost. Maybe its a radiusclient issue. But i don't know.

My question is, is there anything i can do to get freeradius to write these 
records with an interval like once a minute.

Thanks.

-- 
Arthur B Olsen
P/F Teletech
J.C. Svabosgøta 8
100 Tórshavn
Tlf: 317265
Mobil:220781
Email:[EMAIL PROTECTED]

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


pam_radius_auth 1.3.15 and solaris 9

2003-11-24 Thread JR Mayberry
Hi,

I'm having an issue with pam_radius where it, or Sun's bundled SSH daemon,
is sending an authentication request packet before I even supply a
password.

Has anyone seen this issue and know of a work around?

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


using SQL with both dynamic user entries and static DEFAULTs

2003-11-24 Thread Dave Mason
Hi,
I have a Freeradius server where I currently use both MySQL and the 
users file for authorization.  The database is for "dynamic" users, 
whose entries in the tables are created and destroyed by another 
application.  As you might expect, they are only valid for a finite 
time, then deleted.  I use the users file for my DEFAULT entries, which 
never change.  I'd like to move everything to the database and turn 
files off in my auth block, but I dont know how to make rlm_sql look at 
the "dynamic" user entrees first, then the "static" DEFAULTs last.  If 
the rows for the dynamic users are added after the DEFAULTs, the DEFAULT 
will match first.  I tried preloading the tables with my DEFAULT rows 
using a high id number, but then when I add a new row and let it set the 
id number as it does now, it picks an ID that's higher than the 
DEFAULT.  Does anyone know a way around that?

Thanks,
Dave


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Fragmented EAP frames was My problem with PEAP

2003-11-24 Thread Alan DeKok
Bill Reid <[EMAIL PROTECTED]> wrote:
> I grabbed the latest snapshot on friday.  Recompiled.  Reconfigured the 
> default radiusd.conf file to use eap/peap.
> 
> I am still seeing fragmented Access Challenge packets.  However the 
> first access challenge was not fragmented.  The ones after that were.

  Please don't call the packets "fragmented".  They're not.  As seen
in the debug log you posted, the server is calling the EAP module
twice for authentication, and there are TWO eap packets in the RADIUS
response, not one "fragmented" packet.

  I haven't seen that behaviour when I use PEAP, and so far there
haven't been reports from anyone else, either.

> Content-Disposition: attachment;
>  filename="cisco_dump_tunnel_radius"

  That's nice, but if the RADIUS server is still calling authenticate
twice for the EAP module, then the packet trace is irrelevant.  We
already know that the problem is in the RADIUS server, as it's debug
logs are telling you there's a problem.

  Find out WHY the EAP module is being called twice.  Nothing else is
relevant.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: auth problem

2003-11-24 Thread Alan DeKok
Georgi Ivanov <[EMAIL PROTECTED]> wrote:
> I have a problem with authentication freeradius+pptp+mysql,
> Radius give me error Sun Nov 23 13:23:18 2003 : Auth: Login OK: [test/ User-Password attribute>] (from client localhost port 0) 
> in my user file: 
...

  Read the FAQ about how to post questions to the list.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Printable ascii characters

2003-11-24 Thread Alan DeKok
Lance Davis <[EMAIL PROTECTED]> wrote:
> >   See long discussions in the list archives.
> 
> References ?? Dates ???

  google.  I don't keep all of that information in my head.

> I wouldnt mind if I could find some documentation somewhere that said ' if 
> you want/need to use '#' (etc) in a username then convert it to =23 (etc) 
> when you store it in the sql tables, because that is what we do when we 
> receive it and use it in a query 

  Submit suggested text to doc/rlm_sql

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


simple setup using users file

2003-11-24 Thread Bill Schoolfield
Hi, 

I'm using freeradius 0.9.3 on redhat 9.0. I'm trying
to get simple authentication working using the users
file. I have edited the client.conf and users file but
nothing else. 

When running under debug, I can see the authentication
request come in and I have verified that the shared
secret is ok. 

However, depending on how I edit the users file, I
either get: 

auth: No password configured for user
 
or 

auth: No authentication method (Auth-Type)
configuration found for the request: rejecting user


In the first case I have in the users file:

DEFAULT  Auth-Type = Local
 Fall-Through = Yes 

000102-030405 Auth-Type := Local User-Password ==
"" 

In the second case, I have the same without the 
DEFAULT entry. 

The user name is a mac address from a wireless device.
Should it be in double quotes? What do I need to do to
get this simple case working? 

Bill

__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


simple setup using users file

2003-11-24 Thread Bill Schoolfield
Hi, 

I'm using freeradius 0.9.3 on redhat 9.0. I'm trying
to get simple authentication working using the users
file. I have edited the client.conf and users file but
nothing else. 

When running under debug, I can see the authentication
request come in and I have verified that the shared 
secret is ok. 

However, depending on how I edit the users file, I
either get: 

auth: No password configured for user 

or 

auth: No authentication method (Auth-Type)
configuration found for the request: rejecting user


In the first case I have in the users file:

DEFAULT  Auth-Type = Local

000102-030405 Auth-Type := Local User-Password ==
"" 

In the second case, I have the same as above 


__
Do you Yahoo!?
Free Pop-Up Blocker - Get it now
http://companion.yahoo.com/

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: 093 Crashes with unknown tokens

2003-11-24 Thread Greg G


Matt Sapp wrote:

Greg,

While you may have misunderstood Alan's terseness as him being nasty to you, please look at the situation.

You're saying that if there was a configuration file error, then by all means, stop the server, but if it's "just" a users file error, then it shouldn't be halted and the server should keep going on with some half-correct information.

  Well, I'm perfectly happy if the user that contains the "wonky" data 
(most often, it's not really a typo, but a new token we're experimenting 
with) gets ignored.  I'm content with having *one* customer call me 
because they can't get authenticated than have the whole system come 
down because there's something different in a single user.

Personally, I don't see how the users file being in proper shape is any less critical than any other configuration file being correct.  You'd be much better off implementing some solution to make sure the users file is correct (perhaps some type checking in whatever system you use to manage your users -- surely you don't have a bunch of type-prone data entry people editing the users file by hand, do you?).  The users file has a very specific format, and it's not hard to follow.  If you have proper checks in your management system, this is a moot point, and this has been pointed out in reference to the dialup_admin package.

  Interestingly, the old Livingston radius format didn't need the 
commas at the end of the lines.  I was really surprised when none of the 
other radius servers I looked (Free, Open, Gnu) could read that file.  I 
can live with having to generate the file differently to work in the 
updated format.  (Was that an RFC change, or was Livingston just broken?)
  As another example, GnuRadius doesn't like an ampersand in a 
username, but FreeRadius does.  Should my system come down becuase I've 
got what seems to be *valid* data, but the radius server doesn't 
understand it?  [RFC 2138 has provisions for non-alphanumerics in the 
User-Name field.]

-Greg G



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


simple question with regular expresion

2003-11-24 Thread Victor Sanchez
Hello to all.

I trie to configure a clean version of freeradius 0.9.3 but have problem with a 
regular expresion.

in file acct_users

y put

DEFAULT User-Name=~ "^\[", Proxy-To-Realm := "group2"

because i like that all user that login start with [  go to realm group2.

but i have the next error


>Module: Loaded files
> files: usersfile = "/daemons/freeradius-0.9.3/etc/raddb/users"
> files: acctusersfile = "/daemons/freeradius-0.9.3/etc/raddb/acct_users"
> files: preproxy_usersfile = "/daemons/freeradius-0.9.3/etc/raddb/preproxy_users"
> files: compat = "no"
>/daemons/freeradius-0.9.3/etc/raddb/acct_users[17]: Parse error (check) for entry 
>DEFAULT: Illegal regular expression in attribute:
>User-Name: Unmatched [ or [^
>Errors reading /daemons/freeradius-0.9.3/etc/raddb/acct_users

what are wrongs ??

thanks for all.

Victor Sanchez.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


please help me out

2003-11-24 Thread puneeth b
hello sir,   i'm trying to connect freeradius & db2 . i want to know how the freeradius & my sql works. 1) i mean to say the front end of freeradius is available on -? where shall i find it? the interface?2) also how the tables are maintained in the freeradius server as well as the db2 server.3) also about the NAS4) about the connection from the freeradius to the NAS and then to the db2 server. i will be very greatful also very eagerly waiting for the replypuneeth 
Do you Yahoo!?
Free Pop-Up Blocker - Get it now

itz urgent!!!!!!!!!!!!!!!!!!

2003-11-24 Thread puneeth b
hello sir,
    i cannot use the ODBC driver to connect freeradius to db2. i should build a driver so tht it talks to eachother.
since db2 has a set of their own rules will have to follow those.
hence i want to know the connection between the freeradius -> NAS>db2 server.
about the tables maintained i didnt get the idea.
also can i access db2, oracle,postgresql through any platform?
also kindly help me with the testing part of the documentation.
thanks in advance
puneeth
Do you Yahoo!?
Free Pop-Up Blocker - Get it now

Re: RoamServer 5.0 + RedHat 9.0 Is it Possible?

2003-11-24 Thread Wichit Ngamsomhan
Thank you very much, Mike

:) Wichit N.

- Original Message - 
From: "Mike Cisar" <[EMAIL PROTECTED]>
To: <[EMAIL PROTECTED]>
Sent: Monday, November 24, 2003 2:19 PM
Subject: RE: RoamServer 5.0 + RedHat 9.0 Is it Possible?


> > Are there anyone ever install iPass RoamServer 5.0 on RedHat 9.0?
>
> It's a bit offtopic for this list, but yes it is possible.  Contact iPass
> support and they should be able to help you.  Be warned that RH9 is not a
> supported configuration, but they were very helpful in helping to get it
> going as long as I understood that they couldn't guarantee it would be
> stable (it has not caused me any problems yet).  There were only a couple
> minor changes to the configuration that needed to be made, but I can't
find
> my notes on exactly what they were... they'll have them on file though I'm
> sure.
>
> > Mike <
>
>
> -
> List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html
>


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: RoamServer 5.0 + RedHat 9.0 Is it Possible?

2003-11-24 Thread Mike Cisar
> Are there anyone ever install iPass RoamServer 5.0 on RedHat 9.0?

It's a bit offtopic for this list, but yes it is possible.  Contact iPass
support and they should be able to help you.  Be warned that RH9 is not a
supported configuration, but they were very helpful in helping to get it
going as long as I understood that they couldn't guarantee it would be
stable (it has not caused me any problems yet).  There were only a couple
minor changes to the configuration that needed to be made, but I can't find
my notes on exactly what they were... they'll have them on file though I'm
sure.

> Mike <


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html