Problem with radzap

2005-09-27 Thread Andoni Ayala - KNET
hello!.

I have experienced with freeradius, but i updated to 1.0.1 on Fedora
Core 3 and when i use radzap i get this error:

Error: There appears to be another RADIUS server running on the
authentication port 1812

i launch this command:

radzap '' 34 user456

even, replacing '' with NAS ip.

can anyone help me? (i'm searching on google and freeradius-list archive
but nothing help me)
Thanks

-- 

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Problem with radzap

2005-09-27 Thread Nicolas Baradakis
Andoni Ayala wrote:

 I have experienced with freeradius, but i updated to 1.0.1 on Fedora
 Core 3 and when i use radzap i get this error:

 Error: There appears to be another RADIUS server running on the
 authentication port 1812

It looks like bug #185.
http://bugs.freeradius.org/show_bug.cgi?id=185

Upgrade to the newest version of FreeRADIUS and it should be fine.

-- 
Nicolas Baradakis

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: separate accounting to two modules based on NAS-IP-Address

2005-09-27 Thread Nicolas Baradakis
Ilia Chipitsine wrote:

 how can I organize radiusd.conf in order to put accounting coming
 from nas1 to one module and from nas2 to another module ?

You might try to add these lines in file acct_users:

DEFAULT NAS-IP-Address == 10.0.0.1, Acct-Type := acct.nas1

DEFAULT NAS-IP-Address == 10.0.0.2, Acct-Type := acct.nas2

And in radiusd.conf:

accounting {
Acct-Type acct.nas1 {
module1
}
Acct-Type acct.nas2 {
module2
}
}

-- 
Nicolas Baradakis

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


users file for ser

2005-09-27 Thread Santiago L. Aggio

Hi,
I am using ser-0.9.3 and freeradius-1.0.5. Is possible to use a 
DEFAULT tag with Auth-Type Digest? I don't want to define in the users 
file all my users.  I would use something similar to Auth-Type PAM or LDAP?

Thank you in advance
 
Santiago.


-
|  Santiago L. Aggio|  TE:  54-291-4861666  |
|  SECECOM - CRIBABB|  FAX: 54-291-4861527  |
|  Camino la Carrindanga km 7   |   | 
|  8000 - Bahia Blanca  |  E-MAIL: [EMAIL PROTECTED] |
|  Buenos Aires - Argentina |  HTTP: www.criba.edu.ar   |
-

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Problem with radzap

2005-09-27 Thread Andoni Ayala - KNET
Ok, many thanks, i update to 1.0.5 and works perfectly.

Another one question; i use this command to 'zap' one user:

radzap -x -N [NAS_IP] -u [USER] -P [PORT] 127.0.0.1 [secret]

this works fine BUT, the stop packet are writen in 127.0.0.1 detail
file, i need that this stop accounting packet write on NAS_IP detail
file, how i do this?. i launch the command in same machine where are the
 radius server.


Sorry, for my poor english.


Nicolas Baradakis escribió:

 Andoni Ayala wrote:
 
 
I have experienced with freeradius, but i updated to 1.0.1 on Fedora
Core 3 and when i use radzap i get this error:

Error: There appears to be another RADIUS server running on the
authentication port 1812
 
 
 It looks like bug #185.
 http://bugs.freeradius.org/show_bug.cgi?id=185
 
 Upgrade to the newest version of FreeRADIUS and it should be fine.
 




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


LDAP Freeradius

2005-09-27 Thread Cris Boisvert
I can authenticate off correctly when I run radiuss -X

But when I start radius normally it can't connect to the ldap server?

Running Freeradius on fedora core 4


Ideas?

Why would it working in debug but not normally?


Here's the log info
Radius
log---
Mon Sep 26 15:55:27 2005 : Info: Using deprecated naslist file.  Support for
this will go away soon.
Mon Sep 26 15:55:27 2005 : Info: rlm_exec: Wait=yes but no output defined.
Did you mean output=none?
Mon Sep 26 15:55:27 2005 : Info: Ready to process requests.
Mon Sep 26 15:55:30 2005 : Error: rlm_ldap:  bind to 192.168.77.6:389
failed: Can't contact LDAP server Mon Sep 26 15:55:30 2005 : Error:
rlm_ldap: (re)connection attempt failed





--radius x  output -



 modcall[authorize]: module eap returns noop for request 0
users: Matched entry DEFAULT at line 152
  modcall[authorize]: module files returns ok for request 0
modcall: group authorize returns ok for request 0
  rad_check_password:  Found Auth-Type LDAP
auth: type LDAP
  Processing the authenticate section of radiusd.conf
modcall: entering group Auth-Type for request 0
rlm_ldap: - authenticate
rlm_ldap: login attempt by [EMAIL PROTECTED] with password test1234
radius_xlat:  '([EMAIL PROTECTED])'
radius_xlat:  'o=pork.com'
rlm_ldap: ldap_get_conn: Checking Id: 0
rlm_ldap: ldap_get_conn: Got Id: 0
rlm_ldap: attempting LDAP reconnection
rlm_ldap: (re)connect to 192.168.77.6:389, authentication 0
rlm_ldap: bind as / to 192.168.77.6:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: performing search in o=pork.com, with filter ([EMAIL PROTECTED])
rlm_ldap: ldap_release_conn: Release Id: 0
rlm_ldap: user DN: uid=wow,ou=People,o=pork.com
rlm_ldap: (re)connect to 192.168.77.6:389, authentication 1
rlm_ldap: bind as uid=wow,ou=People,o=pork.com/test1234 to 192.168.77.6:389
rlm_ldap: waiting for bind result ...
rlm_ldap: Bind was successful
rlm_ldap: user [EMAIL PROTECTED] authenticated succesfully
  modcall[authenticate]: module ldap returns ok for request 0
modcall: group Auth-Type returns ok for request 0 Sending Access-Accept of
id 26 to 192.168.77.6:3665 Finished request 0

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-TLS reject if CN not in MySQL

2005-09-27 Thread Ben Dowling

Hi,

I still haven't figured this one out, and would really appreciate some 
help. I've tried playing around with the DEFAULT profile in the users 
file, giving it Auth-Type: Reject, but certificates with CN not in the 
database are still authenticated. How do I get freeradius to check for 
the username in mysql with EAP-TLS?


Cheers, Ben

Ben Dowling wrote:


Hi,

I have freeradius-1.04 configured with MySQL using EAP-TLS and PEAP 
for authentication. I wish to reject users whose common name (CN) is 
not included in the MySQL database. I have read the thread regarding 
this exact problem at:


http://lists.cistron.nl/pipermail/freeradius-users/2004-May/032110.html

and it seems I need to set the DEFAULT profile to reject. I don't 
quite understand the thread though, is this the DEFAULT profile in the 
users file, or can I configure this in MySQL. Either way, could 
someone please provide me with an example of what the DEFAULT profile 
entry should look like in order to achieve this?


Thanks for the help,

Ben Dowling
- List info/subscribe/unsubscribe? See 
http://www.freeradius.org/list/users.html




- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Problem with PEAP and MS-CHAPv2 and AD

2005-09-27 Thread Graham, Robert
Title: Problem with PEAP and MS-CHAPv2 and AD






I am having a strange problem, and was hoping for some expertise in this matter and I need to get this working very quickly since I am running out of time. I have freeradius configured to authenticate our users for a wired 802.1x environment. Authentication works succesfully if the supplicant (odyssey client) sends only the username and not domain\username. The problem is when I install the odyssey gina module to configure the supplicant to authenticate prior to windows login it passes the credentials as domain\username, whichs fails authentication. I did some searches and made the following changes:

proxy.conf


added:


realm domain {

 type  = radius

 authhost = LOCAL

 accthost = LOCAL

}


and uncommented the ntdomain section in radiusd.conf


This did not work, so I tried another suggestion and changed the ntlm_auth string from:


ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --domain=MEM --username=%{User-Name} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}

to:


ntlm_auth = /usr/bin/ntlm_auth --request-nt-key --username=%{Stripped-User-Name:-%{User-Name:-None}} --domain=%{mschap:NT-Domain} --challenge=%{mschap:Challenge:-00} --nt-response=%{mschap:NT-Response:-00}

Now when I login I get the following error: This also occurs at the desktop level


 rlm_mschap: NT Domain delimeter found, should we have enabled with_ntdomain_hack?

radius_xlat: Running registered xlat function of module mschap for string 'NT-Response'

radius_xlat: '/usr/bin/ntlm_auth --request-nt-key --username=RGraham --domain=MEM --challenge=71c3373eb458a75e --nt-response=c410b4f18e8527df26495cad16d20a09679b03969efa3d3e'

Exec-Program: /usr/bin/ntlm_auth --request-nt-key --username=RGraham --domain=MEM --challenge=71c3373eb458a75e --nt-response=c410b4f18e8527df26495cad16d20a09679b03969efa3d3e

Exec-Program output: Logon failure (0xc06d) 

Exec-Program-Wait: plaintext: Logon failure (0xc06d) 

Exec-Program: returned: 1

 rlm_mschap: External script failed.

 rlm_mschap: FAILED: MS-CHAP2-Response is incorrect

 modcall[authenticate]: module mschap returns reject for request 7

modcall: group Auth-Type returns reject for request 7

 rlm_eap: Freeing handler

 modcall[authenticate]: module eap returns reject for request 7

modcall: group authenticate returns reject for request 7

auth: Failed to validate the user.

 PEAP: Got tunneled reply RADIUS code 3

 MS-CHAP-Error = \007E=691 R=1

 EAP-Message = 0x04070004

 Message-Authenticator = 0x

 PEAP: Processing from tunneled session code 0xf8716a50 3

 MS-CHAP-Error = \007E=691 R=1

 EAP-Message = 0x04070004

 Message-Authenticator = 0x

 PEAP: Tunneled authentication was rejected.

 rlm_eap_peap: FAILURE


If I change the ntlm_auth back to the original string and authenticate at the desktop (not gina) it authenticates. 


So my question is: What do I need to do to configure Freeradius to strip the domain portion where EAP-PEAP is successful at both gina (login) and desktop?

Any help would be greatly appreciated.


Thanks

Robert Graham



- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Bus error - core dumped on freeradius 1.0.5

2005-09-27 Thread Richard Cotrina
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in
FreeBSD 4.X and FreeBSD 5.X.

- - Original Message - 
From: Alan DeKok [EMAIL PROTECTED]
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, September 27, 2005 12:08 AM
Subject: Re: Bus error - core dumped on freeradius 1.0.5


 Rohaizam Abu Bakar [EMAIL PROTECTED] wrote:
  So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??

   For MySQL, perhaps.

   Or, find out what's causing the problem in FreeBSD 4.x, and fix it.

   It doesn't happen on other platforms, so I suspect it's an issue
 specific to FreeBSD 4.x.

   Alan DeKok.



-BEGIN PGP SIGNATURE-
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQzl9qyQekFb/3FIhEQKgzwCg+3Jo9bcaimtcDoPlVKv+nsDM914AnRda
BGC7la0ap0NZH0M3Vq8pig7V
=OAoc
-END PGP SIGNATURE-
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Bus error - core dumped on freeradius 1.0.5

2005-09-27 Thread Dusty Doris
I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having 
problems with rlm_sql_mysql.  I just started it up and used it for testing 
an accounting packet.  I haven't tried authentication, but I don't think 
that should matter.


How did you build it?  Since the port is still on 1.0.4, I'm assuming it 
was from source?


Here is what I did.  First I installed mysql.  I use the port in 
/usr/ports/databases/mysql41-server.  Then I installed freeradius from 
/usr/ports/net/freeradius first to get all the dependancies.  These 
include libtool, gmake, gdbm, libltdl.  Then I did a make deinstall on 
that port and build freeradius from source using only ./configure 
--prefix.



On Tue, 27 Sep 2005, Richard Cotrina wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in
FreeBSD 4.X and FreeBSD 5.X.

- - Original Message -
From: Alan DeKok [EMAIL PROTECTED]
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, September 27, 2005 12:08 AM
Subject: Re: Bus error - core dumped on freeradius 1.0.5



Rohaizam Abu Bakar [EMAIL PROTECTED] wrote:

So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??


  For MySQL, perhaps.

  Or, find out what's causing the problem in FreeBSD 4.x, and fix it.

  It doesn't happen on other platforms, so I suspect it's an issue
specific to FreeBSD 4.x.

  Alan DeKok.




-BEGIN PGP SIGNATURE-
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQzl9qyQekFb/3FIhEQKgzwCg+3Jo9bcaimtcDoPlVKv+nsDM914AnRda
BGC7la0ap0NZH0M3Vq8pig7V
=OAoc
-END PGP SIGNATURE-
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-TLS reject if CN not in MySQL

2005-09-27 Thread Alan DeKok
Ben Dowling [EMAIL PROTECTED] wrote:
 I still haven't figured this one out, and would really appreciate some 
 help. I've tried playing around with the DEFAULT profile in the users 
 file, giving it Auth-Type: Reject, but certificates with CN not in the 
 database are still authenticated. How do I get freeradius to check for 
 the username in mysql with EAP-TLS?

  I don't recall if you can get at the CN from the certificate.  Maybe
try keying off of the User-Name?

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Bus error - core dumped on freeradius 1.0.5

2005-09-27 Thread Alan DeKok
Richard Cotrina [EMAIL PROTECTED] wrote:
 segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both in
 FreeBSD 4.X and FreeBSD 5.X.

  From a *clean* build?  The fix I added should work.

  Check that no other version of FreeRADIUS is installed, AND that
you're using 1.0.5.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: users file for ser

2005-09-27 Thread Alan DeKok
Santiago L. Aggio [EMAIL PROTECTED] wrote:
 I am using ser-0.9.3 and freeradius-1.0.5. Is possible to use a 
 DEFAULT tag with Auth-Type Digest?

  Yes.

 I don't want to define in the users file all my users.  I would use
 something similar to Auth-Type PAM or LDAP?

  No.  Neither PAM nor LDAP understands digest authentication.  You
MUST define a clear-text password for the user, and tell FreeRADIUS
that password, for digest authentication to work.

  Alan DeKok.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Bus error - core dumped on freeradius 1.0.5

2005-09-27 Thread Richard Cotrina
-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Have you enabled rlm_sql_mysql in radiusd.conf and sql.conf ? How your
config files look like ?

If rlm_sql_mysql is not enabled, freeradius daemon works without problem for
me.

- - Original Message - 
From: Dusty Doris [EMAIL PROTECTED]
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, September 27, 2005 12:44 PM
Subject: Re: Bus error - core dumped on freeradius 1.0.5


 I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having
 problems with rlm_sql_mysql.  I just started it up and used it for testing
 an accounting packet.  I haven't tried authentication, but I don't think
 that should matter.

 How did you build it?  Since the port is still on 1.0.4, I'm assuming it
 was from source?

 Here is what I did.  First I installed mysql.  I use the port in
 /usr/ports/databases/mysql41-server.  Then I installed freeradius from
 /usr/ports/net/freeradius first to get all the dependancies.  These
 include libtool, gmake, gdbm, libltdl.  Then I did a make deinstall on
 that port and build freeradius from source using only ./configure
 --prefix.


 On Tue, 27 Sep 2005, Richard Cotrina wrote:

  -BEGIN PGP SIGNED MESSAGE-
  Hash: SHA1
 
  segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both
in
  FreeBSD 4.X and FreeBSD 5.X.
 
  - - Original Message -
  From: Alan DeKok [EMAIL PROTECTED]
  To: FreeRadius users mailing list
freeradius-users@lists.freeradius.org
  Sent: Tuesday, September 27, 2005 12:08 AM
  Subject: Re: Bus error - core dumped on freeradius 1.0.5
 
 
  Rohaizam Abu Bakar [EMAIL PROTECTED] wrote:
  So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??
 
For MySQL, perhaps.
 
Or, find out what's causing the problem in FreeBSD 4.x, and fix it.
 
It doesn't happen on other platforms, so I suspect it's an issue
  specific to FreeBSD 4.x.
 
Alan DeKok.
 
 
 



-BEGIN PGP SIGNATURE-
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQzmKjSQekFb/3FIhEQIkxwCeJQFEu1qYBV3ttdru/1pVj/axGusAnjLk
xjHBg+h+EwPoEvsAroNz+n3W
=Eb35
-END PGP SIGNATURE-
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-TLS reject if CN not in MySQL

2005-09-27 Thread Ben Dowling
Sorry I was referring to the username, the CN in the certificate gets
sent as the username. My problem is how to reject users with valid
certificates, but no entry in the database?

Cheers, Ben

On Tue, 2005-09-27 at 14:01 -0400, Alan DeKok wrote:
 Ben Dowling [EMAIL PROTECTED] wrote:
  I still haven't figured this one out, and would really appreciate some 
  help. I've tried playing around with the DEFAULT profile in the users 
  file, giving it Auth-Type: Reject, but certificates with CN not in the 
  database are still authenticated. How do I get freeradius to check for 
  the username in mysql with EAP-TLS?
 
   I don't recall if you can get at the CN from the certificate.  Maybe
 try keying off of the User-Name?
 
   Alan DeKok.
 
 - 
 List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Cisco Privilege Level

2005-09-27 Thread Gerald Krause
Am Dienstag, 20. September 2005 20:13 schrieb Ryan Sharpe:
 Hello all,

 I'm having a problem getting users to default to the right privilege
 level.

 aaa authentication login default group radius local
 aaa authorization exec default group radius local
 radius-server host xx.20.xx.xx auth-port 1645 acct-port 1646
 radius-server key 7 
 privilege exec level 2 enable

 DEFAULT Group == radiusfull, Auth-Type = System
 CiscoAVPair = shell:priv-lvl=2,
 Fall-Through = No
 DEFAULT Group == radiusview, Auth-Type = System
 CiscoAVPair = shell:priv-lvl=1,
 Fall-Through = No
...
 I also did a packet capture of the communication between 
 the two devices and I did no see any of the AVPairs in the packet data. 
 If someone could help and enlighten me that would be great. THANKS!

Maybe you should use Cisco-AVPair instead of CiscoAVPair? Or is 
CiscoAVPair in one of your dictionaries?


 --Gerald
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Help .Radius -X works but regular start won't

2005-09-27 Thread Cris Boisvert
I have Freeradius connecting to and LDAP Server.. 
If I run radiusd -X I can authenticate ok..
IF I start radius normally it gives me an error stating that it cannot bind
to the ldap server.

How can it work one way and not the other?

I thought radiusd -X was just debugin?


Help... After 2 days of this I'm getting kinda Crazed..


Thanx
Cris

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


automated response

2005-09-27 Thread Olaf Becker
HI,

i am on vacation till 11. th of october 2005. This Email will not be forwarded 
automaticly in anzurgent cases please email to [EMAIL PROTECTED] 

regarding 

Olaf Becker 
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: Help .Radius -X works but regular start won't

2005-09-27 Thread Cris Boisvert
I got it... Selinux was running .. Not letting the normal process connect to
the ldap server

Sorry ..

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: EAP-TLS reject if CN not in MySQL

2005-09-27 Thread Alan DeKok
Ben Dowling [EMAIL PROTECTED] wrote:
 Sorry I was referring to the username, the CN in the certificate gets
 sent as the username. My problem is how to reject users with valid
 certificates, but no entry in the database?

  doc/configurable_failover

  configure a module always reject (see radiusd.conf)

  In authorize, do:

...
group {
  sql {
  notfound = 1
  ok = return
  fail = return
  everything_else = return
  }
  reject
}

  That says if the user isn't found in SQL, reject

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Bus error - core dumped on freeradius 1.0.5

2005-09-27 Thread Dusty Doris

Yep.

FreeBSD 5.4-RELEASE-p7

/usr/local/freeradius105/sbin/radiusd -v
radiusd: FreeRADIUS Version 1.0.5, for host , built on Sep 27 2005 at 
11:31:35


clip from startup and handling a packet.  The config file is very 
stripped down right now.  I'll fire one up later today with the default 
setup to see if that works too.


-
rlm_sql (sql): Connected new DB handle, #3
rlm_sql (sql): starting 4
rlm_sql (sql): Attempting to connect rlm_sql_mysql #4
rlm_sql_mysql: Starting connect to MySQL server for #4
rlm_sql (sql): Connected new DB handle, #4
Module: Instantiated sql (sql)
Listening on accounting *:1813
Ready to process requests.
rad_recv: Accounting-Request packet from host 127.0.0.1:54936, id=90, 
length=32

User-Name = test
Acct-Status-Type = Start
  Processing the preacct section of radiusd.conf
modcall: entering group preacct for request 0
rlm_acct_unique: WARNING: Attribute NAS-Port was not found in request, 
unique ID 
MAY be inconsistent
rlm_acct_unique: WARNING: Attribute Client-IP-Address was not found in 
request, 
unique ID MAY be inconsistent
rlm_acct_unique: WARNING: Attribute NAS-IP-Address was not found in 
request, uni 
que ID MAY be inconsistent
rlm_acct_unique: WARNING: Attribute Acct-Session-Id was not found in 
request, un 
ique ID MAY be inconsistent

rlm_acct_unique: Hashing 'User-Name = test'
rlm_acct_unique: Acct-Unique-Session-ID = c62495cf388d0bb3.
  modcall[preacct]: module acct_unique returns ok for request 0
  modcall[preacct]: module files returns noop for request 0
modcall: group preacct returns ok for request 0
  Processing the accounting section of radiusd.conf
modcall: entering group accounting for request 0
radius_xlat:  'test'
rlm_sql (sql): sql_set_user escaped user -- 'test'
radius_xlat:  'INSERT into radacct (AcctSessionId, AcctUniqueId, UserName, 
Realm 
, NASIPAddress, NASPortId, NASPortType, AcctStartTime, AcctStopTime, 
AcctSession 
Time, AcctAuthentic, ConnectInfo_start, ConnectInfo_stop, AcctInputOctets, 
AcctO 
utputOctets, CalledStationId, CallingStationId, AcctTerminateCause, 
ServiceType, 
FramedProtocol, FramedIPAddress, AcctStartDelay, AcctStopDelay) values('', 
'c62 
495cf388d0bb3', 'test', '', '', '', '', '2005-09-27 14:33:54', '0', '0', 
'', '', 
'', '0', '0', '', '', '', '', '', '', '', '0')'

rlm_sql (sql): Reserving sql socket id: 4
rlm_sql (sql): Released sql socket id: 4
  modcall[accounting]: module sql returns ok for request 0
modcall: group accounting returns ok for request 0
Sending Accounting-Response of id 90 to 127.0.0.1:54936
Finished request 0
Going to the next request
--- Walking the entire request list ---
Cleaning up request 0 ID 90 with timestamp 43399092
Nothing to do.  Sleeping until we see a request.


On Tue, 27 Sep 2005, Richard Cotrina wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

Have you enabled rlm_sql_mysql in radiusd.conf and sql.conf ? How your
config files look like ?

If rlm_sql_mysql is not enabled, freeradius daemon works without problem for
me.

- - Original Message -
From: Dusty Doris [EMAIL PROTECTED]
To: FreeRadius users mailing list freeradius-users@lists.freeradius.org
Sent: Tuesday, September 27, 2005 12:44 PM
Subject: Re: Bus error - core dumped on freeradius 1.0.5



I just installed freeradius 1.0.5 on freebsd 5.4 and I am not having
problems with rlm_sql_mysql.  I just started it up and used it for testing
an accounting packet.  I haven't tried authentication, but I don't think
that should matter.

How did you build it?  Since the port is still on 1.0.4, I'm assuming it
was from source?

Here is what I did.  First I installed mysql.  I use the port in
/usr/ports/databases/mysql41-server.  Then I installed freeradius from
/usr/ports/net/freeradius first to get all the dependancies.  These
include libtool, gmake, gdbm, libltdl.  Then I did a make deinstall on
that port and build freeradius from source using only ./configure
--prefix.


On Tue, 27 Sep 2005, Richard Cotrina wrote:


-BEGIN PGP SIGNED MESSAGE-
Hash: SHA1

segmentation fault when rlm_sql_mysql is enabled (bug 271), happens both

in

FreeBSD 4.X and FreeBSD 5.X.

- - Original Message -
From: Alan DeKok [EMAIL PROTECTED]
To: FreeRadius users mailing list

freeradius-users@lists.freeradius.org

Sent: Tuesday, September 27, 2005 12:08 AM
Subject: Re: Bus error - core dumped on freeradius 1.0.5



Rohaizam Abu Bakar [EMAIL PROTECTED] wrote:

So.. do i need to upgrade to 5.X in order to use FR 1.0.5 ??


  For MySQL, perhaps.

  Or, find out what's causing the problem in FreeBSD 4.x, and fix it.

  It doesn't happen on other platforms, so I suspect it's an issue
specific to FreeBSD 4.x.

  Alan DeKok.









-BEGIN PGP SIGNATURE-
Version: PGP Desktop 9.0.1 (Build 2185)

iQA/AwUBQzmKjSQekFb/3FIhEQIkxwCeJQFEu1qYBV3ttdru/1pVj/axGusAnjLk
xjHBg+h+EwPoEvsAroNz+n3W
=Eb35
-END PGP SIGNATURE-
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

- 
List 

Freeradius + EAP-TLS + DHCP = not working. Help!

2005-09-27 Thread AIbarra








I have the same problem do you have any solution?



Saludos 



Alberto Ibarrarán G.

Information Technology

Boehringer Ingelheim Promeco

(52) 55 56 29 8300 ext. 8631










- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Freeradius + EAP-TLS + DHCP = not working.

2005-09-27 Thread AIbarra








Anyoune knows the
solution to this issue?



Thanks



beto










- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html