Radtest failes on new installation. System: FreeBSD6.0-RELEASE

2006-07-04 Thread Göran Nilsson
Godday.
I have installed the latest Freeradius on a FreeBSD6.0 box.
The installations goes fine and I'm for the initial tests.

I start up the server with radiusd -X to get the initial debugging information.
The server starts up just fine and doesn't produce any warnings or errors.
Eventually it says ready for prosessing

In another window i do the radtest test test localhost 0 testing123
This is were the strage part comes in.
In the debug window i don't see anything.
In the command windows i get the response
radclient: Xfailed to get value

So, i dig a little deeper and fire up another window where fire up tcpdump.
When doing the ocmmand i will get the radclient: . but no output from tcpdump nor from
the debug window.

This is where I'm stuck. Is this something related to FreeBSD 6.0?
Since the most people recommend doing small changes to configs and then 
test connectivity in order to not break anything I haven't made any changes whatsoever
to my configs. 

Well, that's about it.
Thanks in advance for any ideas,tips or pointers 

/Goran


- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Framed-IP-Address accounted in Hex

2006-07-04 Thread Graeme Hinchliffe
Hi,	I have just (as of yesterday) upgraded FreeRADIUS from 1.0.3 to 1.1.2 keeping all the same config files.  I am running it on a Debian Woody system and using Postgres 7.4.7 as the database.  This particular box is solely for RADACCT and only uses RADIUS as a test to test the state of the service/db for health checks.	I have postgres configured to dump any SQL lines which throw up an error and I have seen a large number being logged failing to insert the Framed-IP-Address attribute, in the dumped SQL string the IP Address is a hex value instead of a dotted quad which fails the insert.  The RADACCT packets causing this are not just coming from one NAS either, and accounting still seems to be happening on the most part.any ideas?  or have i found a bug ?thanks - Graeme Hinchliffe (BSc) Core Systems Designer Zen Internet (http://www.zen.co.uk/)  Direct: 0845 058 9074 Main  : 0845 058 9000 Fax   : 0845 058 9005  - 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

AW: eap/peap-mschap-v2 users file and check items

2006-07-04 Thread Sascha Lucas
Hi,

 -Ursprüngliche Nachricht-
 Im Auftrag von Alan DeKok
 Gesendet: Montag, 3. Juli 2006 18:09

   What you've done in your configuration is to force EAP-MSCHAP-v2 to
 work, and then force clear-text passwords to work.  By doing that,
 you've forced all OTHER authentication methods to not work.  Then, you
 tested with PEAP, and it didn't work

Thanks Alan for your reply. Now it works. I've forgotten to enable
copy_request_to_tunnel = yes in peap section in eap.conf. And btw. I use
ntlm_auth in mschap module. When it comes to rlm_files, it doesn't reject if
no user entry matches. I had to make a DEFAULT with Auth-Type := Reject.

Sascha.

- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Framed-IP-Address accounted in Hex

2006-07-04 Thread Graeme Hinchliffe
On 4 Jul 2006, at 12:05, Graeme Hinchliffe wrote:Hi,	I have just (as of yesterday) upgraded FreeRADIUS from 1.0.3 to 1.1.2 keeping all the same config files.  I am running it on a Debian Woody system and using Postgres 7.4.7 as the database.  This particular box is solely for RADACCT and only uses RADIUS as a test to test the state of the service/db for health checks.	I have postgres configured to dump any SQL lines which throw up an error and I have seen a large number being logged failing to insert the Framed-IP-Address attribute, in the dumped SQL string the IP Address is a hex value instead of a dotted quad which fails the insert.  The RADACCT packets causing this are not just coming from one NAS either, and accounting still seems to be happening on the most part.any ideas?  or have i found a bug ?Further to this, I have just noticed that this doesn't seem to just be restricted to the IP address, but also the Session ID field.  Instead of displaying the session ID as say 020268001A6C-44A618FFI am seeing:0x303230324646464636383030314136432d3434413631384646 - Graeme Hinchliffe (BSc) Core Systems Designer Zen Internet (http://www.zen.co.uk/)  Direct: 0845 058 9074 Main  : 0845 058 9000 Fax   : 0845 058 9005  - 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Framed-IP-Address accounted in Hex

2006-07-04 Thread Alan DeKok
Graeme Hinchliffe [EMAIL PROTECTED] wrote:
 Further to this, I have just noticed that this doesn't seem to just  
 be restricted to the IP address, but also the Session ID field.   
 Instead of displaying the session ID as say
 
 020268001A6C-44A618FF
 
 I am seeing:
 
 0x303230324646464636383030314136432d3434413631384646

  Which is the hex dump of the ASCII string.  0x30 == '0'.

  I think the dictionaries from 1.1.2 didn't get installed, so many of
the attributes default to type octets.

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Radtest failes on new installation. System: FreeBSD6.0-RELEASE

2006-07-04 Thread Alan DeKok
=?ISO-8859-1?Q?G=F6ran_Nilsson?= [EMAIL PROTECTED] wrote:
 So, i dig a little deeper and fire up another window where fire up tcpdump.
 When doing the ocmmand i will get the radclient: . but no output from
 tcpdump nor from
 the debug window.

  Try doing 'ktrace radclient', to see what it's doing.  It looks like
it isn't even reading the dictionaries.

  Barring that, read the source to see why it says failed to get value

  Alan DeKok.
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Freeradius Cisco 3845

2006-07-04 Thread Wasif








Hi,



I am using FreeRadius with Cisco 3845 ( ip-to-ip gateway)
for just Accounting purpose. My problem is that I am not getting AcctTerminateCause
in Radius log . I have written following commands in cisco



aaa new-model

!

!

aaa accounting update newinfo

aaa accounting exec default start-stop group radius

aaa accounting network default start-stop group radius

aaa accounting connection default start-stop group radius

aaa accounting connection h323 start-stop group radius

aaa session-id common



radius-server host x.x.x.x auth-port 1812 acct-port 1813

radius-server timeout 8

radius-server vsa send accounting





if have any idea about this , please email me.



Thanks



Wazb








- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

X-Ascend-PW-Warntime

2006-07-04 Thread Giuseppe Parlato



Hi all, starting freeradius in debugging mode I get 
the following ..

X-Ascend-PW-Warntime 

can you explain me why ?

Giuseppe
- 
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html