groupname_attribute VS groupmembership_attribute

2005-08-29 Thread haizam

Dear all,

What is the different between groupname_attribute & 
groupmembership_attribute  ??


I'm using groupname_attribute  & groupmembership_filter  to search for 
particular group... and its work.. just wondering when to use 
groupmembership_attribute



   # groupname_attribute = cn
   groupname_attribute = ConnectionType
   # groupmembership_filter = 
"(|(&(objectClass=GroupOfNames)(member=%{Ldap-UserDn}))(&(objectClass=GroupOfUniqueNames 
(uniquemember=%{Ldap-UserDn})))"
   groupmembership_filter = 
"(&(uid=%{Stripped-User-Name:-%{User-Name}})(objectclass=radiusprofile))"

   # groupmembership_attribute = radiusGroupName



--haizam



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radeapclient + EAP/TLS testing

2005-08-29 Thread Alan DeKok
Ben Walding <[EMAIL PROTECTED]> wrote:
> Has anyone ever tried (or succeeded) in getting the radeapclient to work
> with an EAP-TLS configured FreeRADIUS server?

  It doesn't support EAP-TLS.  But given the EAP-SIM needs, TLS, it
may not be too hard to do...

> As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder how
> much work it would be to allow EAP-TLS communications be tested? (for
> someone unfamiliar with FreeRADIUS internals, but reasonably familiar with
> C/gdb etc)

  Probably less than a week.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radeapclient + EAP/TLS testing

2005-08-29 Thread Ben Walding
As soon as I posted I found JRADIUS (jradius.sf.net) which supports EAP-TLS in its RADIUS client.

I've since got this to work and can easily cobble together the necessary pieces.

Cheers,

BenOn 8/30/05, Ben Walding <[EMAIL PROTECTED]> wrote:
Has anyone ever tried (or succeeded) in getting the radeapclient to work with an EAP-TLS configured FreeRADIUS server?

We have two requirements at hand:
1) Load testing the RADIUS servers (two nodes)
2) Using the client to verify correct operation of the server on a day to day basis (eg. for Nagios)

As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder
how much work it would be to allow EAP-TLS communications be tested?
(for someone unfamiliar with FreeRADIUS internals, but reasonably
familiar with C/gdb etc)


Any insight is appreciated!


Thanks,

Ben


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: multiple threads

2005-08-29 Thread Alan DeKok
Artur Hecker <[EMAIL PROTECTED]> wrote:
> context: on a Fedora Core 3 system (linux 2.6.9) I configured n=5 but FR 
> would not start but one instance. also in the "radiusd -X" there is no 
> notice of thread-pool config being read.

  FC4 uses a newer Linux kernel, which *correctly* shows only one
process via "ps", even when that process has multiple threads.

  And "-X" means "don't start threads".  See the "man" page.

> does anybody have any ideas on that issue? how do I debug it? ("ldd 
> radiusd" shows libpthread correctly linked into the binary).

  radiusd -xxf

  will start the server with debugging *and* threads.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


radeapclient + EAP/TLS testing

2005-08-29 Thread Ben Walding
Has anyone ever tried (or succeeded) in getting the radeapclient to work with an EAP-TLS configured FreeRADIUS server?

We have two requirements at hand:
1) Load testing the RADIUS servers (two nodes)
2) Using the client to verify correct operation of the server on a day to day basis (eg. for Nagios)

As far as I can tell radeapclient is only for EAP-MD5/EAP-SIM; I wonder
how much work it would be to allow EAP-TLS communications be tested?
(for someone unfamiliar with FreeRADIUS internals, but reasonably
familiar with C/gdb etc)


Any insight is appreciated!


Thanks,

Ben
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

multiple threads

2005-08-29 Thread Artur Hecker

hi guys


has anybody ever noticed any difficulties of FR to launch multiple 
initial threads? (thread_pool: start_servers n)


context: on a Fedora Core 3 system (linux 2.6.9) I configured n=5 but FR 
would not start but one instance. also in the "radiusd -X" there is no 
notice of thread-pool config being read.


does anybody have any ideas on that issue? how do I debug it? ("ldd 
radiusd" shows libpthread correctly linked into the binary).



ciao
artur
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


automated response

2005-08-29 Thread bakers
I will be on paternity leave starting August 22nd and
returning once things around the house calm down to an
acceptable level. If you have specific concerns that must be
addressed immediately  please contact "Gene deVore
<[EMAIL PROTECTED]>"

Thanks,
Scott Baker
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Radwho output question

2005-08-29 Thread David Stickelman
I have Freeradius running on a Fedora Core 4 server and it has been 
running stable for about a week.  I transistioned from Cistron, and 
although the process took me a bit, I was able to use the documentation, 
comments in the config files, and mailing list archives to find the 
information needed to configure, test, and run Freeradius.


The only question I am left with is when running radwho - in the 'What' 
column there are mostly PPP entries, which I expect.  However, there are 
a few 'shell' entries, which I don't know if they are ok or not.


I am using PAM authentication and standard Linux accounts for users.  
These users are defined as nologin for thier shell so I have made a 
mistake somewhere in my configuration.  The users themselves do not 
notice a difference, I am only concerned that it is a vulnerability or 
misconfiguration on my part.  the users file in raddb only has PPP, 
CSLIP, and SLIP in the default hint entries, and only PAM as auth-type.  
Service type is Framed-User.


In reading the documentation and using google, I cannot determine what 
spcifically  influences the entry in the 'What' column in my 
configuration.  This could be my Freeradius configuration, my NAS 
(Ascend Max), or my users account definition.  I just cannot determine 
which component is doing this.


Any help pointing me in the right direction would be appriciated.

David
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


ntlm_auth multiple nt4 domains peap xp

2005-08-29 Thread Jamie Crawford
Hi,
I have a two nt4 trusted domain infrastructure and am trying to setup 
freeradius to authenticate xp supplicants with peap.  I have nmbd and winbindd 
running correctly, and can run the ntlm_auth program with no problems.  But 
what I have found out is that my freeradius server is joined to the DOMAINA 
domain.  So when running /usr/bin/ntlm_auth --username=domainatestuser  it 
automatically validates the user against DOMAINA.  But if I try to run 
/usr/bin/ntlm_auth --username=domainbtestuser it will fail.  I have to add the 
--domain=DOMAINB for it to validate correctly.  

So when I use my xp supplicant to validate my user, domainatestuser (without 
typing in the DOMAINA), it works perfectly.  If I put in DOMAINA in the domain 
box, I get rejected.  If I try to validate the domainbtestuser using nothing 
for the domain box, I get rejected.  If I put in DOMAINB in the domain box, I 
get rejected.

I guess I am needing to setup realms for each domain.  How do I setup DOMAINA 
users to go to the DOMAINA domain controllers, and how do I setup DOMAINB users 
to go to DOMAINB domain controllers.  I shouldn't really have to setup to go do 
different domain controllers, I just need freeradius to pass on the "domain" in 
the ntlm_auth command.

Thanks for any help


rad_recv: Access-Request packet from host xxx.xxx.xxx.xxx:3076, id=85, 
length=181
   NAS-IP-Address = xxx.xxx.xxx.xxx
   NAS-Port-Type = Wireless-802.11
   NAS-Port = 1
   Framed-MTU = 1400
   User-Name = "DOMAINB\\domainbtestuser"
   Calling-Station-Id = "001217a8df41"
   Called-Station-Id = "0001f4449c4c"
   NAS-Identifier = "RoamAbout AP"
   State = 0x1ce29e6a91a9663ff39346a69f85748c
   EAP-Message = 
0x020800261900170301001b4ca905292ffadaa855c356acd5417b6989915df2dd32ffdc0b08d3
   Message-Authenticator = 0x6dca7a93ca473745cab0f6a063b66d0e
 Processing the authorize section of radiusd.conf
modcall: entering group authorize for request 15
 modcall[authorize]: module "preprocess" returns ok for request 15
 modcall[authorize]: module "mschap" returns noop for request 15
   rlm_realm: No '@' in User-Name = "DOMAINB\domainbtestuser", looking up realm 
NULL
   rlm_realm: No such realm "NULL"
 modcall[authorize]: module "suffix" returns noop for request 15
   rlm_realm: Looking up realm "DOMAINB" for User-Name = 
"DOMAINB\domainbtestuser"
   rlm_realm: No such realm "DOMAINB"
 modcall[authorize]: module "ntdomain" returns noop for request 15
 rlm_eap: EAP packet type response id 8 length 38
 rlm_eap: No EAP Start, assuming it's an on-going EAP conversation
 modcall[authorize]: module "eap" returns updated for request 15
   users: Matched entry DEFAULT at line 152
 modcall[authorize]: module "files" returns ok for request 15
modcall: group authorize returns updated for request 15
 rad_check_password:  Found Auth-Type EAP
auth: type "EAP"
 Processing the authenticate section of radiusd.conf
modcall: entering group authenticate for request 15
 rlm_eap: Request found, released from the list
 rlm_eap: EAP/peap
 rlm_eap: processing type peap
 rlm_eap_peap: Authenticate
 rlm_eap_tls: processing TLS
 eaptls_verify returned 7
 rlm_eap_tls: Done initial handshake
 eaptls_process returned 7
 rlm_eap_peap: EAPTLS_OK
 rlm_eap_peap: Session established.  Decoding tunneled attributes.
 rlm_eap_peap: Received EAP-TLV response.
 rlm_eap_peap: Tunneled data is valid.
 rlm_eap_peap:  Had sent TLV failure, rejecting.
rlm_eap: Handler failed in EAP/peap
 rlm_eap: Failed in EAP select
 modcall[authenticate]: module "eap" returns invalid for request 15
modcall: group authenticate returns invalid for request 15
auth: Failed to validate the user.
Delaying request 15 for 1 seconds
Finished request 15
Going to the next request



Jamie Crawford, MCSE RHCT Network Analyst I
Information Services
Central Missouri State University
Warrensburg, MO 64093
Phone:6605434357 
Email:[EMAIL PROTECTED]


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: (no subject)

2005-08-29 Thread Thor Spruyt
Matt morris wrote:
> So how do I setup freeradius to use rlm_perl then? Some pointers will
> be greatly appreciated. Thank you.

rlm_perl is still experimental
That means that you'll need to compile freeradius with
the --with-experimental-modules option.
The configuration is in etc/raddb/experimental.conf

rlm_exec is stable, so your freeradius will support it already.
The configuration is in etc/raddb/radiusd.conf
You can use any executable script (which *can* be a perl script).
Look in CVS, there's a lot of information added about rlm_exec!

--
Groeten, Regards, Salutations,

Thor Spruyt
M: +32 (0)475 67 22 65
E: [EMAIL PROTECTED]
W: www.thor-spruyt.com

www.salesguide.be
www.telenethotspot.be

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


(no subject)

2005-08-29 Thread Matt morris

Hello List,

Thanks for the reply, Thor.

So how do I setup freeradius to use rlm_perl then? Some pointers will be 
greatly appreciated. Thank you.


Original Message:
===


Hello list,

This has probably been asked a lot times before, but I just couldn't
get the attributes values from accounting request packets with my
perl script. I am trying to do some database queries when I received
stop accounting request packets, here are the relevant sections of my
radiusd.conf and script file:


You're mixing up 2 modules: rlm_exec and rlm_perl
You configured your radius to use rlm_exec, but you're using a sample script
for rlm_perl, which is completely different!

There's a sample for rlm_exec at
http://www.freeradius.org/cgi-bin/cvsweb.cgi/radiusd/scripts/exec-program-wa
it?rev=1.4&content-type=text/x-cvsweb-markup


--
Groeten, Regards, Salutations,

Thor Spruyt
M: +32 (0)475 67 22 65
E: thor.spruyt at telenet.be
W: www.thor-spruyt.com

www.salesguide.be
www.telenethotspot.be

_
Take charge with a pop-up guard built on patented Microsoft® SmartScreen 
Technology  
http://join.msn.com/?pgmarket=en-ca&page=byoa/prem&xAPID=1994&DI=1034&SU=http://hotmail.com/enca&HL=Market_MSNIS_Taglines 
 Start enjoying all the benefits of MSN® Premium right now and get the 
first two months FREE*.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: wlse leap patches

2005-08-29 Thread Thor Spruyt
How about submitting them to bugs.freeradius.org?

--
Groeten, Regards, Salutations,

Thor Spruyt
M: +32 (0)475 67 22 65
E: [EMAIL PROTECTED]
W: www.thor-spruyt.com

www.salesguide.be
www.telenethotspot.be

- Original Message -
From: M.McNeil
To: FreeRadius users mailing list
Sent: Monday, August 29, 2005 6:44 PM
Subject: Re: wlse leap patches

Here are the patches.  These were made against FreeRadius 1.0.0  Here's how
to apply them:

1. mkdir patchdir, cd patchdir
2. gzip -dc freeradius-1.0.0-wlse-patches.tar.gz |tar -xvf -

3. Grab the FreeRadius-1.0.0 source code and extract it.
4. cd freeradius-1.0.0/src/modules/rlm_eap
5. Apply the eap.c patch:   patch http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radius LDAP problem ?

2005-08-29 Thread Vladimir Vuksan

Frank Bonnet wrote:


Thanks for your answer, how to tell freeradius no to use this attribute
do I have to set it to NULL ? do I have to comment the line ?



You can simply put uid for the accessattribute so as long as the user 
has a uid they'll be allowed access.


Vladimir
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


freeradius and mysqld.sock location problem

2005-08-29 Thread Ben Dowling

Hi,

I am having problems with freeradius connecting to a mysql database.
Freeradius reports the error:

rlm_sql_mysql: Mysql error 'Can't connect to local MySQL server through
socket '/var/run/mysqld/mysqld.sock' (2)

The mysqld.sock file is acutally located at 
/home/system/var/run/mysqld/mysqld.sock, so I created a symlink to
that file in /var/run/mysqld, and now freeradius reports the same error, but 
with a (13) at the end instead of a (2). Is there anyway to configure 
freeradius to look in the correct location, or is there another work around?

Thanks in advance, Ben

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: wlse leap patches

2005-08-29 Thread M.McNeil




Thor Spruyt wrote:

  Marc-Henri Boisis-delavaud wrote:
  
  
Hello
Were Can I found patches for cisco wlse work ?
Marc

  
  
Huh... my best guess would be cisco.com :)

  

Here are the patches.  These were made against FreeRadius 1.0.0  Here's
how to apply them:

1. mkdir patchdir, cd patchdir
2. gzip -dc freeradius-1.0.0-wlse-patches.tar.gz |tar -xvf -

3. Grab the FreeRadius-1.0.0 source code and extract it.
4. cd freeradius-1.0.0/src/modules/rlm_eap
5. Apply the eap.c patch:   patch

6. Apply the mem.c patch:  patch

7. Apply the rlm_leap patch:  cd
freeradius-1.0.0/src/modules/rlm_eap/types/rlm_leap, patch


Configure and compile as usual.  

Thanks should be given to Richard Timsit and John Koen for their
assistance in providing/testing these patches.

Best Regards,
-- 
Mike McNeil
Sr. Network Engineer
University of California Berkeley
Ph: 510-643-4656




freeradius-1.0.0-wlse-patches.tar.gz
Description: GNU Zip compressed data
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: wlse leap patches

2005-08-29 Thread Thor Spruyt
Marc-Henri Boisis-delavaud wrote:
> Hello
> Were Can I found patches for cisco wlse work ?
> Marc

Huh... my best guess would be cisco.com :)

-- 
Groeten, Regards, Salutations,

Thor Spruyt
M: +32 (0)475 67 22 65
E: [EMAIL PROTECTED]
W: www.thor-spruyt.com

www.salesguide.be
www.telenethotspot.be

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: 16 bit attr decoding..

2005-08-29 Thread Wesley Spadola

Alan DeKok wrote:


  The NAS sends those attributes, and FreeRADIUS logs them.

  What changed in your system the last week?



The only thing I can remember changing is the dictionary, making sure 
that those ATTRIBUTE and VALUE lines were there for both 
Lucent-Modem-Modulation and Lucent-Modulation (not knowing which the NAS 
was going to send at first).


In testing this behaviour, I have taken a few entries (Attribute/Value 
lines only) from the detail and piped them to radclient.  The 
Lucent-Modem-Modulation = 1/2/18 lines get decoded by the radiusd server 
as Lucent-Modem-Modulation = v90/v34/v92 etc.


However I use radiusd in its radrelay mode, having copied the detail 
file I have to location radiusd expects, radiusd does start to read its 
detail file, but does not decode the lines, it only shows through its 
accounting SQL statements that Lucent-Modem-Modulation = 1/2/18 etc.


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radius LDAP problem ?

2005-08-29 Thread Frank Bonnet

Seferovic Edvin wrote:

Hi,

do you need dialupAccess attribute?

--- cut ---
rlm_ldap: no dialupAccess attribute - access denied by default
--- cut --- 


Tell freeRadius NOT to look for this attribute, or use this attribute to
allow/disallow access...


Hello Edvin

Thanks for your answer, how to tell freeradius no to use this attribute
do I have to set it to NULL ? do I have to comment the line ?

I used the basic Debian configuration and I am not an expert in radius 
world ...


--
Cordialement/Regards
Frank Bonnet
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: radius LDAP problem ?

2005-08-29 Thread Seferovic Edvin
Hi,

do you need dialupAccess attribute?

--- cut ---
rlm_ldap: no dialupAccess attribute - access denied by default
--- cut --- 

Tell freeRadius NOT to look for this attribute, or use this attribute to
allow/disallow access...

Regards,

Edvin Seferovic

-Original Message-
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Frank
Bonnet
Sent: Montag, 29. August 2005 17:08
To: freeradius-users@lists.freeradius.org
Subject: radius LDAP problem ?

Hello

I use freeradius through chillispot and with a LDAP auth session.

I am in trouble with freeradius during the login phase see below
the trace of the log.


Ready to process requests.
rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, 
length=57
 User-Name = "exam0"
 User-Password = "" > intentionnaly hidden
 NAS-IP-Address = 255.255.255.255
 NAS-Port = 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for exam0
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: (re)connect to ldap.esiee.fr:389, authentication 0
rlm_ldap: bind as / to ldap.esiee.fr:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: no dialupAccess attribute - access denied by default
rlm_ldap: ldap_release_conn: Release Id: 0
rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, 
length=57
Sending Access-Reject of id 218 to 147.215.1.111:32787
rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197
 User-Name = "exam01"
 User-Password = ""
 NAS-IP-Address = 0.0.0.0
 Service-Type = Login-User
 Framed-IP-Address = 192.168.182.3
 Calling-Station-Id = "00-0E-35-4A-84-94"
 Called-Station-Id = "00-12-79-90-10-21"
 NAS-Identifier = "nas01"
 Acct-Session-Id = "431321c6"
 NAS-Port-Type = Wireless-802.11
 NAS-Port = 0
 Message-Authenticator = 0x9d756035da40f907731462aca245f22c
 WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff";
rlm_ldap: - authorize
rlm_ldap: performing user authorization for exam01
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: no dialupAccess attribute - access denied by default
rlm_ldap: ldap_release_conn: Release Id: 0
rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197
Sending Access-Reject of id 0 to 127.0.0.1:32791


Thanks for any help

-- 
Cordialement/Regards
Frank Bonnet
- 
List info/subscribe/unsubscribe? See
http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Excluding non-NAS from simultaneous-use checks

2005-08-29 Thread Alan DeKok
Dan Siemon <[EMAIL PROTECTED]> wrote:
> I should have mentioned I tried using 'other' and did not get the 
> desired behavior.

  Please explain, then, what he desired behavior is.  Include examples.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


radius LDAP problem ?

2005-08-29 Thread Frank Bonnet

Hello

I use freeradius through chillispot and with a LDAP auth session.

I am in trouble with freeradius during the login phase see below
the trace of the log.


Ready to process requests.
rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, 
length=57

User-Name = "exam0"
User-Password = "" > intentionnaly hidden
NAS-IP-Address = 255.255.255.255
NAS-Port = 1
rlm_ldap: - authorize
rlm_ldap: performing user authorization for exam0
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: (re)connect to ldap.esiee.fr:389, authentication 0
rlm_ldap: bind as / to ldap.esiee.fr:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: no dialupAccess attribute - access denied by default
rlm_ldap: ldap_release_conn: Release Id: 0
rad_recv: Access-Request packet from host 147.215.1.111:32787, id=218, 
length=57

Sending Access-Reject of id 218 to 147.215.1.111:32787
rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197
User-Name = "exam01"
User-Password = ""
NAS-IP-Address = 0.0.0.0
Service-Type = Login-User
Framed-IP-Address = 192.168.182.3
Calling-Station-Id = "00-0E-35-4A-84-94"
Called-Station-Id = "00-12-79-90-10-21"
NAS-Identifier = "nas01"
Acct-Session-Id = "431321c6"
NAS-Port-Type = Wireless-802.11
NAS-Port = 0
Message-Authenticator = 0x9d756035da40f907731462aca245f22c
WISPr-Logoff-URL = "http://192.168.182.1:3990/logoff";
rlm_ldap: - authorize
rlm_ldap: performing user authorization for exam01
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: no dialupAccess attribute - access denied by default
rlm_ldap: ldap_release_conn: Release Id: 0
rad_recv: Access-Request packet from host 127.0.0.1:32791, id=0, length=197
Sending Access-Reject of id 0 to 127.0.0.1:32791


Thanks for any help

--
Cordialement/Regards
Frank Bonnet
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Excluding non-NAS from simultaneous-use checks

2005-08-29 Thread Dan Siemon

Alan DeKok wrote:


Dan Siemon <[EMAIL PROTECTED]> wrote:
 


Setting the RAS type to none appears to have no effect for FreeRADIUS.

Is there another way to accomplish this with FreeRADIUS?
   



 Set it to "other".  See "clients.conf"
 

I should have mentioned I tried using 'other' and did not get the 
desired behavior.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


help regarding pam_radius agent installation with RSA SecurID Authentication

2005-08-29 Thread mukherji rakesh
Dear All
 
   I am configuring radius_pam agent on redhat linux 9 to integrate it with RSA SecurID Authentication technology.I have enabled radius on my RSA server but while trying to login from my linux client I am not able to enter as it says that access denied.I got a log from the /var/log/messages from the Linux client system like the following...
Aug 29 18:00:02 phoebe sshd: pam_radius_auth: RADIUS server 172.16.51.149 failed to respond.Aug 29 18:00:02 phoebe sshd: pam_radius_auth: All RADIUS servers failed to respond.
Can anyone please help me out of the situation?
I am waiting for your reply / solution.
 
Regards,
Rakesh Mukherjee
India / CalcuttaSend instant messages to your online friends http://in.messenger.yahoo.com - 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

wlse leap patches

2005-08-29 Thread Marc-Henri Boisis-delavaud

Hello
Were Can I found patches for cisco wlse work ?
Marc


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Freeradius 1.0.4 (rlm_perl enabled) and Debian 3.1 (stable - Sarge) (solution)

2005-08-29 Thread Roman Medina-Heigl Hernandez
Roman Medina-Heigl Hernandez wrote:
> One of the simmilar threads I've found is:
> http://lists.cistron.nl/pipermail/freeradius-users/2005-April/042978.html
> 
> But I don't see the solution there.

So I wrote privately to Emil Wilmanski. He kindly provided me with the
following workaround/response:

"there is a problem with libperl... I don't know why is the problem
becouse only on debian it is.
the resolve is to set variable LD_PRELOAD
export LD_PRELOAD=/usr/lib/libperl.so.5.8
or other perl lib. and next run freeradius. "

I tested it and it works :)

I also had a look to rc.radiusd included in FR .tgz. You can find the
following lines:

#
#  If you have issues with OpenSSL, uncomment these next lines.
#
#  Something similar may work for MySQL, and you may also
#  have to LD_PRELOAD libz.so
#
#LD_LIBRARY_PATH=
#LD_RUN_PATH=:
#LD_PRELOAD=libcrypto.so

export LD_LIBRARY_PATH LD_RUN_PATH LD_PRELOAD


So it seems there are some related&known problems with freeradius/shared
libs and it's not Debian's fault. I only had to replace the LD_PRELOAD
line with:
LD_PRELOAD=libperl.so

You'll also need the following Debian packages installed:
ii  libperl-dev5.8.4-8Perl library: development files
ii  libperl5.8 5.8.4-8Shared Perl library

Thread closed :)

Cheers,
-Roman
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


(no subject)

2005-08-29 Thread Marc-Henri Boisis-delavaud

Hello
Were Can I found patches for cisco wlse work ?
Marc

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


configure free radius server for accepting accounting request packets

2005-08-29 Thread Geraldin Arthy
Hello Paul Bender or anyone in the list,
 
I am using free radius server for sending accounting request packets and receive accounting response packets.However it displays shared secret is incorrect.With respect to your mail dated Sun, 16 May 2004 17:13:02 -0700 with the topic Freeradius Segmentation Fault on LDAP Bind  i see that the free radius server has received and sent back an accounting response to the client.Could you let me know how you configured the free radius server for radius accounting or anyone in the list any idea??Please let me know..
 
Regards,
 
		Meet your soulmate! 
Yahoo! Asia presents Meetic - where millions of singles gather 
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html