RE: Problems with group authentication

2001-10-23 Thread Gonzalez B., Fernando

Thanks for the reply. I've upgraded the software to 0.3. However, the
problem continues. Are you sure that in the latest snapshot the problem has
gone away?

Another question: Apparently this problem doesn't affect the Radius
operation. Is this correct?

Thanks in advance for any help. Regards,
--
Fernando Gonzalez



-Mensaje original-
De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]
Enviado el: martes, 23 de octubre de 2001 12:51
Para: [EMAIL PROTECTED]
Asunto: Re: Problems with group authentication 


"Gonzalez B., Fernando" <[EMAIL PROTECTED]> wrote:
> Hi! I'm using FreeRadius 0.2 and I have a problem with group
authentication.
> When a user tries to authenticate, several lines appear (in the
> /var/log/radius/radius.log file) like the following:
> 
>   Mon Oct 22 18:53:11 2001 : Error: group = /etc/group
> 
> However, the user authenticates correctly and the group rules apply.

  Don't worry about it.  Upgrade to 0.3, or to the latest CVS
snapshot, and the problem will go away.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Problems with group authentication

2001-10-23 Thread Gonzalez B., Fernando

Hi! I'm using FreeRadius 0.2 and I have a problem with group authentication.
When a user tries to authenticate, several lines appear (in the
/var/log/radius/radius.log file) like the following:

Mon Oct 22 18:53:11 2001 : Error: group = /etc/group

However, the user authenticates correctly and the group rules apply.

In the users file I have several lines that check group permissions, like
the following:

DEFAULT Group == group1
Filter-Id = filter1.in,
Fall-Through = Yes

DEFAULT Group == group2
Filter-Id = hf.in,
Fall-Through = Yes

DEFAULT Group == group3, Called-Station-Id = "called_id1"
Auth-Type = Reject

DEFAULT Group == group4, Called-Station-Id = "called_id2"
Auth-Type = Reject

Somebody has a clue about what's happening? Is it a configuration error?
Could it be a problem with the operating system?

Thanks in advance for any help. Regards,

--
Fernando Gonzalez




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Problems with long usernames

2001-09-21 Thread Gonzalez B., Fernando

Hi. Sorry if this question has been asked before.

We're having problems handling users with 20 characters or more. When we
restart the server, the radius.log file shows that the username is too long.

Can we configure the maximum number of characters in our clients usernames?
How can it be done?

We're running FreeRadius in a linux machine and we're authenticating our
users by the /etc/passwd and /etc/shadow files.

Thanks for any help. Regards,

--
Fernando Gonzalez B.
Ingeniero de Desarrollo Internet
122 Manquehue Net
E-Mail: [EMAIL PROTECTED]




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html



Dynamic ports with different types of NAS

2001-07-26 Thread Gonzalez B., Fernando

Hi. I've got a question regarding dynamic ports. I need to assign ports to
our clients according to their characteristics (stored in a database), so I
must rely on FreeRadius to do so. According to what I've read, there are two
approaches:

- Use the reply-item: Framed-Ip-Address = XXX.XXX.XXX.XXX+ (note the
'+' at the end), to append the port number to the IP address.
- Let FreeRadius return the name of the pool.

The first approach apparently doesn't help, because we've got multiple NAS
from different vendors (Cisco AS5300, 3COM Total Control and Nortel Shasta)
and we eventually will have the same IP assigned to different users. Also,
our Shasta doesn't return the port number.

The second approach seems better. According to what I've read, I have to use
the reply-item: Framed-Pool="poolname". Is this the correct method in our
case? Will it work even if I have 3 different types of NAS? Is there another
approach for the problem?

Thanks in advance for any help. Regards,
--
Fernando Gonzalez B.
Ingeniero de Desarrollo Internet
122 Manquehue Net
E-Mail: [EMAIL PROTECTED]




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html