Re: Strange problem, HiperARC FreeRADIUS MacRADIUS
Adam Moffett [EMAIL PROTECTED] wrote: At first everything seemed to be working, but then we discovered this very strange thing. Authentication requests from our 3Com Total Control unit (HiperARC V4.2.32) in which the username started with a Capitol S would get the S stripped out when they were sent to MacRADIUS. raddb/hints Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem, HiperARC FreeRADIUS MacRADIUS
14-Nov-02 at 11:46, Alan DeKok ([EMAIL PROTECTED]) wrote : Adam Moffett [EMAIL PROTECTED] wrote: At first everything seemed to be working, but then we discovered this very strange thing. Authentication requests from our 3Com Total Control unit (HiperARC V4.2.32) in which the username started with a Capitol S would get the S stripped out when they were sent to MacRADIUS. raddb/hints Hints looks for capital S or P by default to denote a specific type of user profile (Slip, PPP)... you'll have to take them out of the file. -- |-Simon White, Internet Services Manager, Certified Check Point CCSA. |-MTDS Internet, Security, Anti-Virus, Linux and Hosting Solutions. |-MTDS 14, rue du 16 novembre, Agdal, Rabat, Morocco. |-MTDS tel +212.3.767.4861 - fax +212.3.767.4863 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem, HiperARC FreeRADIUS MacRADIUS
14-Nov-02 at 11:46, Alan DeKok ([EMAIL PROTECTED]) wrote : Adam Moffett [EMAIL PROTECTED] wrote: At first everything seemed to be working, but then we discovered this very strange thing. Authentication requests from our 3Com Total Control unit (HiperARC V4.2.32) in which the username started with a Capitol S would get the S stripped out when they were sent to MacRADIUS. raddb/hints Hints looks for capital S or P by default to denote a specific type of user profile (Slip, PPP)... you'll have to take them out of the file. Hey thanks! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem, HiperARC FreeRADIUS MacRADIUS
It's always the simple things that get me. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem with pam_radius_auth (SOLVED)
On Thu, Aug 01, 2002 at 06:47:10PM +0600, Dr. Muhammad Masroor Ali wrote: My problem has been solved by the kind suggestion of Mojahedul Hoque Abul Hasanat [EMAIL PROTECTED]. Direct quote from his mail. BEGIN This is a bit wild guess, but might help. Put an account line squids pam config file with pam_permit.so as the module. The line will be similar to: account requiredpam_permit.so I have seen some applications that don't seem to need an account section at first glance. But they open a pam session requiring an account entry. They do it to impose login time restrictions. END Greetings, I have tried both the kind suggestions of Alan DeKok and Frank Cusack without any avail. First of all, the latest version from CVS, did improve the situation. And second, putting daemon.debug in syslog.conf is not generating anything. The relevant lines I used, # Daemon debug messages daemon.debug/usr/local/var/log/deamondebuglog Yes, this file exists (created by touch) and I remembered to restart syslogd. I am really frustrated. Any help will be appreciated. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html -- Nobody's gonna believe that computers are intelligent until they start coming in late and lying about it. Dr. Muhammad Masroor Ali Associate Professor and Associate Director Institute of Information and Communication Technology Bangladesh University of Engineering and Technology Dhaka-1000, Bangladesh Phone: 880 2 966 5650 ext 7245, 7756 (work) ext 7748 or 880 2 966 5700 (residence) FAX: 880 2 861 3046, 880 2 861 3026 - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem with pam_radius_auth
Greetings, I have tried both the kind suggestions of Alan DeKok and Frank Cusack without any avail. First of all, the latest version from CVS, did improve the situation. And second, putting daemon.debug in syslog.conf is not generating anything. The relevant lines I used, # Daemon debug messages daemon.debug/usr/local/var/log/deamondebuglog Yes, this file exists (created by touch) and I remembered to restart syslogd. I am really frustrated. Any help will be appreciated. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem with pam_radius_auth
Dr. Muhammad Masroor Ali [EMAIL PROTECTED] wrote: I am trying to use pam_radius_auth with squid. The authentication program I am using (pam_auth) for squid works perfectly when I use system authentication. But when I switch to pam_radius_auth, messages from radius says the user is being authenticated perfectly, while squid thinks otherwise. And the messages about what PAM is doing are non-existent, right? PAM has no helpful debugging information, so of course, it's the one denying the user authentication, and there's no way for you to find out why. Grab the latest pam_radius_auth module from CVS: http://www.freeradius.org/development.html It has a patch submitted recently which may help. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Strange problem with pam_radius_auth
On Tue, Jul 30, 2002 at 06:41:56PM +0600, Dr. Muhammad Masroor Ali wrote: My squid file in pam.d (as was suggested in INSTALL) auth required /lib/security/pam_securetty.so auth sufficient /lib/security/pam_radius_auth.so debug auth required /lib/security/pam_unix_auth.so Do you have the accounts in /etc/passwd? If not, why is pam_unix_auth there? For this example, it shouldn't matter, as you show that radiusd does send back an access-accept, but let's clean up the config anyway. There is no indication of a mishap in var/log/messages, (the last lines are shown here), Did you set daemon.debug to go to /var/log/messages? /fc - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Strange problem
Seems like a MTU-problem to me. I have had similar problems when the MTU is set too low or too high. Regards, Mattias E. -Original Message- From: Lee W [mailto:[EMAIL PROTECTED]] Sent: den 19 februari 2002 23:55 To: [EMAIL PROTECTED] Subject: Strange problem Hi all, Well this is one for the books. I'm not sure it is FR causing it but the time frame is right. As of today we have six customers that have reported that they can't get to some sites. The sites they report are the same, like (wellsfargo.com) (ibm.com) (cnn.com) (ebay.com). and some others. They report that some will load part of the site and stop. Others report that they can't get to the site at all. However, I can get to all of them from our network and from a test dial-up account on the same infrastructure. The customer says its been happening for two weeks thats about how long I have had FR in place. I can't see how the two are linked other then the time it started. However I can't work up a pattern. Has anyone had such a problem? Thanks -- Lee Wolf EMR Data Services [EMAIL PROTECTED] 623-764-0870 cell 623-581-0842 voice 623-582-9499 fax EMR Internet A Serious Internet Experience ** 56K Dial-up ** DSL ** Web-hosting ** ** Co-location ** T1s ** ISDN ** ** High-Speed Fiber Backbone ** Linux powered ** ** Custom Web Design ** Site Development ** ** Search Engine Placement Web Consultation ** Visit us at http://www.emr.net! Ask about our reseller programs! - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
