Re: Re: Cisco WLC PEAP/MSCHAPv2 - unnecessary ldap lookups?

2009-09-19 Thread Alan Buxey
Hi,

> Making those changes helped alot and reduced the LDAP calls to 3 - Thanks!! I 
> would like to drop this further, as it seems that 2 of them are from the 
> authorize section.  I can't seem to remove it from the authorize section, 
> though, as doing so pisses off mschap (can't find NT-password) and removing 
> mschap pisses off FR (no auth-type defined).  Also, I use a LDAP huntgroup, 
> where users in an LDAP group are allowed to attached to a special SSID, which 
> i think is part of the authorization process

in this case you need to use LDAP in the authorise section - no two ways about 
it.

however, thiat then becomes a backend issue - so you need to find out why
it takes so long to do a query at that point

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Lower case to Upper case in Calling-Station-Id at policy.conf

2009-09-19 Thread Alan Buxey
Hi,

> Can't load 
> '/usr/lib/perl5/5.10.0/i586-linux-thread-multi/auto/Data/Dumper/Dumper.so'
> for module Data::Dumper:
> /usr/lib/perl5/5.10.0/i586-linux-thread-multi/auto/Data/Dumper/Dumper.so:
> undefined symbol: Perl_sv_cmp at
> /usr/lib/perl5/5.10.0/i586-linux-thread-multi/XSLoader.pm line 64.
>  at /usr/lib/perl5/5.10.0/i586-linux-thread-multi/Data/Dumper.pm line 36
> Compilation failed in require at /etc/raddb/example.pl line 30.
> BEGIN failed--compilation aborted at /etc/raddb/example.pl line 30.
> rlm_perl: perl_parse failed: /etc/raddb/example.pl not found or has
> syntax errors.
> /etc/raddb/modules/perl[7]: Instantiation failed for module "perl"
> /etc/raddb/sites-enabled/default[187]: Failed to find module "perl".
> /etc/raddb/sites-enabled/default[62]: Errors parsing authorize section.
> Errors initializing modules

this is not a FreeRADIUS issue now - its a PERL issue. your PERL code
hsa got use Data::Dumper - which means use the Dumper library but you dont have
that library installed.  you should either use your distro tools to
install it  (eg yum search perl-dumper - then install) or
use CPAN to get it (install CPAN using the system package tools
and then

perl -m CPAN -e shell
(maybe answer question sif its your first time)
install Data::Dumper

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radwho and location

2009-09-19 Thread Ivan Kalik
> I've just started with FreeRADIUS and noticed that when running radwho the
> 'location' field seems empty.
> (FreeRADIUS 2.1.7 from the source on Ubuntu 8.04LTS)
>
> There doesn't seem to be a configuration option/tweak anywhere I can find,
> or am I missing something?

Location should be Framed-IP-Address allocated to the user. If it's not in
accounting Start packet ...

Ivan Kalik
Kalik Informatika ISP

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


radwho and location

2009-09-19 Thread Phil Pierotti
Hi All,

I've just started with FreeRADIUS and noticed that when running radwho the
'location' field seems empty.
(FreeRADIUS 2.1.7 from the source on Ubuntu 8.04LTS)

There doesn't seem to be a configuration option/tweak anywhere I can find,
or am I missing something?

The reason I'm interested is that we're wanting to limit simultaneous-use on
some kind of 'grouping' not per-unique-username and I'm wondering if
radwho/location might be an obvious place to track that (if I could just
work out how to get the info in there).

Thanks,
Phil P
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html