RE: clarification question
Hi Alan, I followed your instructions, and I've got this output in the log file: Error: rlm_unix: no Accounting-Status-Type attribute in request. Error: rlm_radutmp: No Accounting-Status-Type record. Error: rlm_sql: packet has no account status type. [user '', nas 'x.x.x.x'] Could these outputs cause the error I'm facing? I'm getting this authentication message as well: Auth: Login OK: [guest/] (from client RAS port 3 cli 1) And I'm getting this message too: Info: Using deprecated naslist file. Support for this will go away soon. Regards Elie -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Alan DeKok Sent: Thursday, August 24, 2006 7:45 PM To: FreeRadius users mailing list Subject: Re: clarification question "Elie Hani" <[EMAIL PROTECTED]> wrote: > I ran the debug and I got no errors Thare may be warnings about IP pools. Look for anything related to pools. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Eap-Tls Problem
K. Hoercher wrote: Hi, so Matteo is trying to setup wireless 8021x auth with freeradius. Eventually most of the information happened to end in -devel, where I asked him to stop mailing to, because I'm quite convinced that his problems don't belong there. That said, "dpkg -s freeradius openssl" should give you the information you are seeking, which looks quite irrelevant to the problem at hand. In short, after the information you gave, I strongly suspect the XP supplicant not responding to Challenges due to still improper OID's in your certs. Please make double sure your windows cert store or however it is called contains the rootCA and your certificate properly, and those get into consideration when you test your wireless setup. Exporting them from cert store and attaching them (provided they are for test purposes and don't contain real crypto secrets) would be my suggestion. Something along this line should apply to your /etc/X1/jagger.pem. ah and yes, just the default users file would suffice. regards K. Hoercher - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html I do not succeed to find one solution to my problem. I have verified exporting the certs stored in the client. It's the same of original. how I can make to generate certs that sure they go well for my case? I must install of the appropriate libraries? The XP supplicant could give of the problems… (SP2) Would have to use of one various? some ideas/helps Matteo - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Report Generator
Hello guysTalking about report generator anyone got using Username too see the reporti mean the user can enter his username and password and see his usage?thanksOn 8/24/06,
Guy Fraser <[EMAIL PROTECTED]> wrote:
Me too.I have also built a report generator, into the management system Ibuilt.I can provide snippets, but not the whole source until I getauthorization.Here is a little snippet that allows the PHP output to be
automatically opened in a spreadsheet :---begin--- // $output contains tab ["\t"] delimited fields // and linefeed ["\n"] delimited records $size_in_bytes = strlen($output);
if(strstr($_SERVER['HTTP_USER_AGENT'],'Safari') != false){// User Agent is Safari = Broken// Document must be opend and saved with a text editor// before excel can open it
header("Content-type: application/vnd.ms-excel");header("Content-disposition: attachment; filename=report-" .$_SESSION['report'] . "-" . $syear . $smonth . "_" . $eyear . $emonth .
"-" . $gmatch . "_" . $umatch . "-" . date("Y-m-d") . ".txt; size=$size_in_bytes"); } else {header("Content-type: application/vnd.ms-excel");
header("Content-disposition: attachment; filename=report-" .$_SESSION['report'] . "-" . $syear . $smonth . "_" . $eyear . $emonth ."-" . $gmatch . "_" . $umatch . "-" . date("Y-m-d") . ".tab; size=
$size_in_bytes"); } echo $output ;---End---Note: When this works, the web page does not change since the datais output as the attachment.On Thu, 2006-08-24 at 11:04 -0600, Scott Miller wrote:
> I've also created a report generator - but mine does not require you to> input the IP address. It just authenticates the user, asks for the month> they want to display, and if they want a summary report or a detailed
> report. It is actually an old ICRadius script (written in PHP) that I found> and modified to fit my needs. I'm willing to share this one as well if> anyone is interested.>> Scott
>> -Original Message-> From: freeradius-users-bounces+srmiller=[EMAIL PROTECTED]> [mailto:
[EMAIL PROTECTED]]> On Behalf Of Sean> Sent: Wednesday, August 23, 2006 1:58 PM> To: freeradius-users@lists.freeradius.org
> Subject: Report Generator>> Hi,>> Ive written a report generator in PHP and HTML that will allow your> clients to generate usage reports from the FreeRadius log files. When
> the user logs in he/she is asked for their IP address and the Month that> they want to display. If anyone wants a copy let me know. If there is> enough interest I'll make it available for public download.
>> Regards,>> Sean Bracken>> http://swarmhotspots.com> -> List info/subscribe/unsubscribe? See>
http://www.freeradius.org/list/users.html>>> -> List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Freeradius Domain name (& website) registration expired ?
Can anyone else get to http://www.freeradius.org ? I'm getting redirected to a domain name registration of some ISP. Seems like the domain names registration has expired ??? Confidentiality Note: The information contained in this email and document(s) attached are for the exclusive use of the addressee and may contain confidential, privileged and non-disclosable information. If the recipient of this email is not the addressee, such recipient is strictly prohibited from reading, photocopying, distribution or otherwise using this email or its contents in any way. Please notify the Sapiens (UK) Ltd. Systems Administrator via e-mail immediately at [EMAIL PROTECTED], if you have received this email in error. Disclaimer: The views, opinions and guidelines contained in this confidential e-mail are those of the originating author and may not be representative of Sapiens (UK) Ltd. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius Domain name (& website) registration expired ?
Fine here... Regards, Chris. - Original Message - From: "Jeff Green" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Friday, August 25, 2006 1:33 PM Subject: Freeradius Domain name (& website) registration expired ? Can anyone else get to http://www.freeradius.org ? I'm getting redirected to a domain name registration of some ISP. Seems like the domain names registration has expired ??? Confidentiality Note: The information contained in this email and document(s) attached are for the exclusive use of the addressee and may contain confidential, privileged and non-disclosable information. If the recipient of this email is not the addressee, such recipient is strictly prohibited from reading, photocopying, distribution or otherwise using this email or its contents in any way. Please notify the Sapiens (UK) Ltd. Systems Administrator via e-mail immediately at [EMAIL PROTECTED], if you have received this email in error. Disclaimer: The views, opinions and guidelines contained in this confidential e-mail are those of the originating author and may not be representative of Sapiens (UK) Ltd. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Freeradius Domain name (& website) registration expired ?
Hi Jeff green, Even I am getting redirected to some other domain name. Rgds, Shankar ganesh -Original Message- From: [EMAIL PROTECTED] org [mailto:[EMAIL PROTECTED] eradius.org]On Behalf Of Jeff Green Sent: Friday, August 25, 2006 5:04 PM To: FreeRadius users mailing list Subject: Freeradius Domain name (& website) registration expired ? Can anyone else get to http://www.freeradius.org ? I'm getting redirected to a domain name registration of some ISP. Seems like the domain names registration has expired ??? Confidentiality Note: The information contained in this email and document(s) attached are for the exclusive use of the addressee and may contain confidential, privileged and non-disclosable information. If the recipient of this email is not the addressee, such recipient is strictly prohibited from reading, photocopying, distribution or otherwise using this email or its contents in any way. Please notify the Sapiens (UK) Ltd. Systems Administrator via e-mail immediately at [EMAIL PROTECTED], if you have received this email in error. Disclaimer: The views, opinions and guidelines contained in this confidential e-mail are those of the originating author and may not be representative of Sapiens (UK) Ltd. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius Domain name (& website) registration expired ?
Jeff Green wrote: Can anyone else get to http://www.freeradius.org ? I'm getting redirected to a domain name registration of some ISP. Seems like the domain names registration has expired ??? Same here. ; <<>> DiG 9.3.1 <<>> @ns.kloth.net freeradius.org ANY ; (1 server found) ;; global options: printcmd ;; Got answer: ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33185 ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0 ;; QUESTION SECTION: ;freeradius.org.IN ANY ;; ANSWER SECTION: freeradius.org. 508 IN A 216.40.33.117 freeradius.org. 508 IN NS ns1.domaindirect.com. freeradius.org. 508 IN NS ns2.domaindirect.com. freeradius.org. 508 IN NS ns3.domaindirect.com. ;; Query time: 0 msec ;; SERVER: 85.10.194.170#53(85.10.194.170) ;; WHEN: Fri Aug 25 14:01:00 2006 ;; MSG SIZE rcvd: 118 whois: Domain Name:FREERADIUS.ORG Created On:20-Nov-1998 05:00:00 UTC Last Updated On:25-Aug-2006 05:46:37 UTC Expiration Date:19-Nov-2007 05:00:00 UTC Looks like something definitely happened today. DNS might take a while to flush back through? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius Domain name (& website) registration expired ?
On Fri 25 Aug 2006 14:33, Jeff Green wrote: > Can anyone else get to http://www.freeradius.org ? > > I'm getting redirected to a domain name registration of some ISP. > > Seems like the domain names registration has expired ??? Yep. Appears to be broken here also! -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgp0LaS9NMnSz.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Simultaneous-Use question
I'm intend to use Simultaneous-Use attribute to check logins for 3 different NAS. What I want to do is to allow 1 connection for each user in each box, at the same time. So, user1 should be able to connect to NAS1 and NAS2 at the same time, but not to NAS1 twice. For the user list I'm using the MYSQL with the default schema. If I understand it correctly (based on the /doc/Acct-Type file), to make this work I would have to create 3 Acct-Type entries in the Accounting section of radius.conf, and create 3 different sql.conf files, one for each Acct-Type, right? Also, does it work properly if I make all 3 sql.conf files point to the same database, using only different tables for accounting? Or did I get something wrong? Thank you for your help, Marcos Roberto Greiner -- --- | Marcos Roberto Greiner| | | | Os otimistas acham que estamos no melhor dos mundos | | Os pessimistas tem medo de que isto seja verdade | | Murphy| --- | [EMAIL PROTECTED] | --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Everything should be back up now...
I transferred the domain to a different registrar, who discarded the name server information, and pointed the web site to their machines. I will be expressing my concern with this behavior. It should be back up. Sorry for the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Report Generator
That used to work in dialup_admin, I have not worked with it in a long time. The last time I attempted to test dialup_admin, it seemed more difficult to get working than it had been in the past when I was helping with it. I did not spend much time trying to figure out what was causing the problem. I was on a dead line, and I knew it would need extensive modifications to do what we needed, so I built something totally different from scratch. Authenticating users is not terribly difficult using PHP. Are your users accounts stored in a DB or somewhere else ? I can possibly provide a snippet of code you can use to authenticate your users, then you just need to build an HTML table from one or more SQL queries. There are public domain resources that can do most or all of those tasks with PEAR modules. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Everything should be back up now...
As a side note: you may temporarily get bounces from the mailing list, with messages like "please use mx.xs4all.nl rather than this server". It's a side effect of the DNS problems. If you re-start your DNS server, or wait a little bit for the old records to time out, everything should come back fine. Again, sorry. I'll be taking the issue up with the people responsible. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Freeradius Domain name (& website) registration expired ?
Le Fri, Aug 25, 2006 at 10:10:41PM +1000, Michael Mitchell ecrivait: > > Jeff Green wrote: > >Can anyone else get to http://www.freeradius.org ? > > > >I'm getting redirected to a domain name registration of some ISP. > > > >Seems like the domain names registration has expired ??? > > > > > > Same here. > > > ; <<>> DiG 9.3.1 <<>> @ns.kloth.net freeradius.org ANY > ; (1 server found) > ;; global options: printcmd > ;; Got answer: > ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 33185 > ;; flags: qr rd ra; QUERY: 1, ANSWER: 4, AUTHORITY: 0, ADDITIONAL: 0 > > ;; QUESTION SECTION: > ;freeradius.org. IN ANY > > ;; ANSWER SECTION: > freeradius.org. 508 IN A 216.40.33.117 > freeradius.org. 508 IN NS ns1.domaindirect.com. > freeradius.org. 508 IN NS ns2.domaindirect.com. > freeradius.org. 508 IN NS ns3.domaindirect.com. > > ;; Query time: 0 msec > ;; SERVER: 85.10.194.170#53(85.10.194.170) > ;; WHEN: Fri Aug 25 14:01:00 2006 > ;; MSG SIZE rcvd: 118 > > > > whois: > > Domain Name:FREERADIUS.ORG > Created On:20-Nov-1998 05:00:00 UTC > Last Updated On:25-Aug-2006 05:46:37 UTC > Expiration Date:19-Nov-2007 05:00:00 UTC > > > > > Looks like something definitely happened today. DNS might take a while to > flush back through? deployingradius.com is having problems too, but the zone hasn't been updated: Registrar of Record: TUCOWS, INC. Record last updated on 19-Jul-2006. Record expires on 19-Jul-2007. Record created on 19-Jul-2006. Domain servers in listed order: NIC.NITROS9.ORG I think the domain servers are having problem for those two domains. But the .org registry might have a DNS wildcard to redirect the requests to a commercial website when these things happen. That's a bad thing (remember Verisign). Regards, Fox. signature.asc Description: Digital signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Everything should be back up now...
Backup and working from South Africa :-) -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] org] On Behalf Of Alan DeKok Sent: Friday, August 25, 2006 5:09 PM To: freeradius-users@lists.freeradius.org Subject: Everything should be back up now... I transferred the domain to a different registrar, who discarded the name server information, and pointed the web site to their machines. I will be expressing my concern with this behavior. It should be back up. Sorry for the problem. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Regarding memory leaks
Hi
I am integrating my rlm_otp module with freeradius code . if
I run radiusd server with the purify it is giving leaks
As MLK :95 bytes
Finished
radiusd
( 278 errors, 95 leaked bytes)
Purify instrumented
/home/ravis/kshitij/freeradius-1.1.2/src/main/.libs/radiusd (pid 8830 at Fri
Aug 25 12:54:30 2006)
Command-line: radiusd
UMR: Uninitialized memory
read (18 times)
UMR: Uninitialized memory
read (19 times)
UMR: Uninitialized memory
read (6 times)
UMR: Uninitialized memory
read (79 times)
UMR: Uninitialized memory
read (96 times)
UMR: Uninitialized memory
read (3 times)
UMR: Uninitialized memory
read (2 times)
UMR: Uninitialized memory
read
ABR: Array bounds read (7
times)
ABR: Array bounds read (7
times)
ABR: Array bounds read (7
times)
ABR: Array bounds read (3
times)
ABR: Array bounds read (3
times)
ABR: Array bounds read (3
times)
UMR: Uninitialized memory
read (8 times)
UMR: Uninitialized memory
read (3 times)
UMR: Uninitialized memory
read (3 times)
PAR: Bad function parameter
(7 times)
ABR: Array bounds read
ABR: Array bounds read
ABR: Array bounds read
Current file descriptors in
use: 7
Memory leaked: 95 bytes
(0.0142%); potentially leaked: 0 bytes (0%)
MLK: 95
bytes leaked in 7 blocks
This memory
was allocated from:
malloc [rtlib.o]
lt_emalloc [ltdl.c:863]
lt_emalloc (size)
size_t size;
{
=> lt_ptr mem = lt_dlmalloc (size);
if (size && !mem)
LT_DLMUTEX_SETERROR (LT_DLSTRERROR (NO_MEMORY));
return mem;
canonicalize_path [ltdl.c:2044]
assert (path && *path);
assert (pcanonical);
=> canonical = LT_EMALLOC (char, 1+ LT_STRLEN (path));
if (!canonical)
return 1;
try_dlopen [ltdl.c:2562]
lt_dlopenext [ltdl.c:2959]
linkto_module [modules.c:207]
Block of 19
bytes at 0x32ed90
Block of 15
bytes at 0x231728
Block of 14
bytes at 0x22c9e0
Block of 12
bytes (3 times); last block at 0x2122b8
Block of 11
bytes at 0x32e480
Purify Heap
Analysis (combining suppressed and unsuppressed blocks)
Thread Summary : 1 thread(s)
in existence
Program exited with status
code 0.
So please provide some usefull inputs to solve this problem
Thanks & regards
Ravi
Tech Mahindra, formerly Mahindra-British Telecom.
Disclaimer:
This message and the information contained herein is proprietary and confidential and subject to the Tech Mahindra policy statement, you may review at http://www.techmahindra.com/Disclaimer.html externally and http://tim.techmahindra.com/Disclaimer.html internally within Tech Mahindra.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Report Generator
Hi Morder, I've also written a utility to allow users to see their usage. I'm tying it into a complete reporting and statistics package, I expect to have a test version ready over the weekend. As soon as it's ready I'll post a download link here. By the way an official forum for FreeRadius users would be a good idea. I've started an informal forum at http://topup.ie/phpBB2/ I hope it grows into a good site for people to share experience and help each other. Regards, Sean Bracken http://swarmhotspots.com - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: clarification question
"Elie Hani" <[EMAIL PROTECTED]> wrote: > I followed your instructions, and I've got this output in the log file: Let me be very, very, VERY clear: Looking at the log file is useless. Run the server in debugging mode. This is suggested in the FAQ, README, INSTALL, and daily on this list. If you're not running the server in debugging mode, it will be almost impossible to help you. Now go run the server in debugging mode, and look for messages about "pool". It WILL tell you what's going on. The messages ARE useful. That's the ENTIRE purpose of debugging mode. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
RE: Web up
Site up from here in Iowa Joel - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Simultaneous-Use question
Why not just optimise the SQL query to check for simultaneous users in sql.conf? It's rather easy to just change the SQL query to suit your needs?? Regards, Chris. - Original Message - From: "Roberto Greiner" <[EMAIL PROTECTED]> To: "FreeRadius users mailing list" Sent: Friday, August 25, 2006 4:20 PM Subject: Simultaneous-Use question I'm intend to use Simultaneous-Use attribute to check logins for 3 different NAS. What I want to do is to allow 1 connection for each user in each box, at the same time. So, user1 should be able to connect to NAS1 and NAS2 at the same time, but not to NAS1 twice. For the user list I'm using the MYSQL with the default schema. If I understand it correctly (based on the /doc/Acct-Type file), to make this work I would have to create 3 Acct-Type entries in the Accounting section of radius.conf, and create 3 different sql.conf files, one for each Acct-Type, right? Also, does it work properly if I make all 3 sql.conf files point to the same database, using only different tables for accounting? Or did I get something wrong? Thank you for your help, Marcos Roberto Greiner -- --- | Marcos Roberto Greiner| | | | Os otimistas acham que estamos no melhor dos mundos | | Os pessimistas tem medo de que isto seja verdade | | Murphy| --- | [EMAIL PROTECTED] | --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Report Generator
On Fri 25 Aug 2006 19:10, Sean wrote: > Hi Morder, > > I've also written a utility to allow users to see their usage. I'm tying > it into a complete reporting and statistics package, I expect to have a > test version ready over the weekend. As soon as it's ready I'll post a > download link here. By the way an official forum for FreeRadius users > would be a good idea. I've started an informal forum at > http://topup.ie/phpBB2/ I hope it grows into a good site for people to > share experience and help each other. We do already have a mailing list for exactly that reason. And a wiki :-) Cheers -- Peter Nixon http://www.peternixon.net/ PGP Key: http://www.peternixon.net/public.asc pgp4SdsA7YB1C.pgp Description: PGP signature - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Report Generator
yes im using mysql backend and dialu[_admin on ppp server.regards On 8/25/06, Guy Fraser <[EMAIL PROTECTED] > wrote:That used to work in dialup_admin, I have not worked with itin a long time. The last time I attempted to test dialup_admin, it seemed more difficult to get working than ithad been in the past when I was helping with it. I did notspend much time trying to figure out what was causing theproblem. I was on a dead line, and I knew it would need extensive modifications to do what we needed, so I builtsomething totally different from scratch.Authenticating users is not terribly difficult using PHP.Are your users accounts stored in a DB or somewhere else ? I can possibly provide a snippet of code you can use toauthenticate your users, then you just need to build anHTML table from one or more SQL queries.There are public domain resources that can do most or all of those tasks with PEAR modules.-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Report Generator
Hello sean it is exactly what i need :) thank you MarkOn 8/25/06, Sean <[EMAIL PROTECTED]> wrote: Hi Morder,I've also written a utility to allow users to see their usage. I'm tying it into a complete reporting and statistics package, I expect to have atest version ready over the weekend. As soon as it's ready I'll post adownload link here. By the way an official forum for FreeRadius users would be a good idea. I've started an informal forum athttp://topup.ie/phpBB2/ I hope it grows into a good site for people toshare experience and help each other.Regards, Sean Brackenhttp://swarmhotspots.com-List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: Simultaneous-Use question
After checking the sql.conf file, it really looks that all I need to do is to add the NASIPaddress to the "simul_count_query" query. Is it just that simple? Damn, and here was I thinking I would have to set three different accounting databases, worry about keeping them in synch, and handle three different sql.conf files. :-P Thanks, I will try that. Marcos Roberto Greiner Chris Knipe wrote: > > Why not just optimise the SQL query to check for simultaneous users in > sql.conf? > > It's rather easy to just change the SQL query to suit your needs?? > > > > Regards, > Chris. > > - Original Message - From: "Roberto Greiner" > <[EMAIL PROTECTED]> > To: "FreeRadius users mailing list" > > Sent: Friday, August 25, 2006 4:20 PM > Subject: Simultaneous-Use question > > >> I'm intend to use Simultaneous-Use attribute to check logins for 3 >> different NAS. What I want to do is to allow 1 connection for each user >> in each box, at the same time. So, user1 should be able to connect to >> NAS1 and NAS2 at the same time, but not to NAS1 twice. For the user >> list I'm using the MYSQL with the default schema. >> >> If I understand it correctly (based on the /doc/Acct-Type file), to make >> this work I would have to create 3 Acct-Type entries in the Accounting >> section of radius.conf, and create 3 different sql.conf files, one for >> each Acct-Type, right? >> >> Also, does it work properly if I make all 3 sql.conf files point to the >> same database, using only different tables for accounting? Or did I get >> something wrong? >> >> Thank you for your help, >> >> Marcos Roberto Greiner >> >> -- >> --- >> | Marcos Roberto Greiner| >> | | >> | Os otimistas acham que estamos no melhor dos mundos | >> | Os pessimistas tem medo de que isto seja verdade | >> | Murphy| >> --- >> | [EMAIL PROTECTED] | >> --- >> >> - >> List info/subscribe/unsubscribe? See >> http://www.freeradius.org/list/users.html >> > > - List info/subscribe/unsubscribe? See > http://www.freeradius.org/list/users.html > -- --- | Marcos Roberto Greiner| | | | Os otimistas acham que estamos no melhor dos mundos | | Os pessimistas tem medo de que isto seja verdade | | Murphy| --- | [EMAIL PROTECTED] | --- - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: PEAP/MSCHAPv2 authentication problems
Hi, Uh, hm, looks like this weird "Either EAP-request timed out OR EAP-response to an unknown..." isn't happening here. Even if it were, it would be much easier, if you provided the pcap capture file either as attachment or downloadable file somewhere else. If that doesn't reoccur, would you please check for the OID's in your certificates windows thinks are the proper ones. And something Alan mentioned about a ms knowledgebase hint concerning xp sp2 having problems with non-MS radius servers. (I'm looking for it myself atm) HTH K. Hoercher - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: PEAP/MSCHAPv2 authentication problems
"K. Hoercher" <[EMAIL PROTECTED]> wrote: > If that doesn't reoccur, would you please check for the OID's in your > certificates windows thinks are the proper ones. And something Alan > mentioned about a ms knowledgebase hint concerning xp sp2 having > problems with non-MS radius servers. (I'm looking for it myself atm) Searching on support.microsoft.com for "radius sp2", this is the first link: http://support.microsoft.com/kb/885453/en-us I've added the URL to "eap.conf", along with some other rants about interoperability with MS. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
Re: PEAP/MSCHAPv2 authentication problems
Oh, and: http://support.microsoft.com/kb/814394/en-us For PEAP certificate requirements. Alan DeKok. -- http://deployingradius.com - The web site of the book http://deployingradius.com/blog/ - The blog - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
a bit OT, but stumped
Hi, Just a quick question - especially valid in regards to VPN (L2TP / PPTP). I know this will depend solely on the NAS, but considering a normal *nix pppd process, and a windows based RAS client... Is it at all possible to get PPP to assign static routes to the CLIENT during the authentication process? Let's say I have a DMZ with 10/8 and 20/8 used for addressing. A client connects to a VPN server on a.b.c.d Unless I tell the client to use the VPN as a Default Gateway, the client will not have routes to route 10/8 and 20/8 over the VPN link... What needs to be done to tell Windows this? Sure, I know I can always add these routes manually, but I'm trying to avoid it :) Just a general q... Sorry for OT Regards, Chris. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
New to FreeRADIUS and looking for answers...
Hi Guys, I'd like to begin by saying I'm new, 100% in fact to both Linux and FreeRADIUS. Having said that, I am in a position where by I feel I need to use both to overcome certain problems I am having at work. Allow me to offer a very brief overview as I don't want to waste anyones time: We have a building with 10+ WAP. They are connected to an ADSL2 service which is being abused by staff. I now have a HP DL340 1U Server, ready to be set up as a FreeRADIUS box but, have no clue as to how. In short, I need to better monitor what users are doing and restrict the level of access they have such as what websites they can visit and so on. In part, I feel FreeRADIUS can help. Having said all this, I'm at a loss like so many people it would seem with the FreeRADIUS concept. It appears powerfull on the surface however I seem to be unable to find any good material on the subject. Most of it, is old and dated. Yes, the documentation is good, but I see nothing that really guides you, step by step, in learning this complex program While I'd love someone to spend the time to help, I don't expect it! What I would like, is someone to help me by pointing me in the right direction! I have been looking at the book RADIUS, which is currently very hard to get here in Australia. So hard, I'd have to get it from the US and wait around eight weeks as the publisher is yet to reprint a book first written back in 2002... I hope you can understand where I am coming from and I look forward to any help people can offer. Regards, Scott - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
