Re: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-02 Thread Martin
Did this and it is 3.0.0, but on on the official site there is nothing mention 
regarding 3.0 version. When is going to be official released 3.0? Some people 
are reticent to install it in production if it is not official released. 

 ./radiusd -v
radiusd: FreeRADIUS Version 3.0.0, for host i686-pc-linux-gnu, built on May 18 
2011 at 13:37:21
Copyright (C) 1999-2010 The FreeRADIUS server project and contributors.



--- On Thu, 6/2/11, Alan DeKok  wrote:

From: Alan DeKok 
Subject: Re: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs
To: "FreeRadius users mailing list" 
Date: Thursday, June 2, 2011, 8:31 PM

Martin wrote:
> Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv -> WiMAX sub-sub-tlv
> 
> Does anybody knows if is going to be supported this kind of
> encapsulation and if yes, in what release?

  See http://git.freeradius.org

  Use the "master" branch.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can't get checkrad to be called

2011-06-02 Thread Dan Brisson

I do have this feeling that I'm missing, but I'm not sure what it is.

Here's what I have configured:

clients.conf:
client 10.1.10.20 {
secret  = password
nastype = pr3000

sql/mysql/dialup.conf:
# Uncomment simul_count_query to enable simultaneous use checking
simul_count_query = "SELECT COUNT(*) \
 FROM ${acct_table1} \
 WHERE username = '%{SQL-User-Name}' \
 AND acctstoptime IS NULL"

#   simul_verify_query  = "SELECT radacctid, acctsessionid, username, \
#   nasipaddress, nasportid, framedipaddress, \
#   callingstationid, framedprotocol \
#   FROM ${acct_table1} \
#   WHERE username = '%{SQL-User-Name}' \
#   AND acctstoptime IS NULL"


sites-enabled/default:
#  Session database, used for checking Simultaneous-Use. Either the radutmp
#  or rlm_sql module can handle this.
#  The rlm_sql module is *much* faster
session {
radutmp

#
#  See "Simultaneous Use Checking Queries" in sql.conf
sql
}

modules/perl:
   func_checksimul = checksimul

And in my MySQL radcheck table I have:

testuser  Simultaneous-Use := 1

Thanks in advance for any insight,

-dan

On 6/2/11 5:54 AM, Alan DeKok wrote:

Dan Brisson wrote:

I was wondering if someone could help me determine why checkrad isn't
being called.  I've followed the directions in the doc/Simultaneous-Use
but still cannot get checkrad to fire off when I login.  It will check
radutmp, but never reaches out to my NAS with checkrad, as evidenced
here from radiusd -X:

+- entering group session {...}
[radutmp]   expand: /var/log/radius/radutmp ->  /var/log/radius/radutmp
[radutmp]   expand: %{User-Name} ->  testuser
++[radutmp] returns ok
Using Post-Auth-Type Reject

   If you've configured Simultaneous-Use, then there should be
*something* about checkrad in the output.


Can I provide any other data?  I'm using SQL for authorization and
accounting.  I'm on version 2.1.7-7.el5 of FreeRadius.

   Where did you configure Simultaneous-Use?  How?

   Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error: User-Name is not the same as MS-CHAP name

2011-06-02 Thread Fajar A. Nugraha
On Thu, Jun 2, 2011 at 9:01 PM, Phil Mayers  wrote:
> On 02/06/11 14:47, Francois Gaudreault wrote:
>
>>>
>> Did you have a chance to look at it?
>
> Ironically I'm having trouble finding a windows XP install CD...

This might help:
http://www.microsoft.com/downloads/en/details.aspx?FamilyID=21eabb90-958f-4b64-b5f1-73d0a413c8ef

Last time I check Virtualbox can also use VHD, so it should work even
on Linux/Mac hosts.

-- 
Fajar
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


how apply policy on my ldap users

2011-06-02 Thread motaibi
Dear guys 

i have server i installed on it :

1) freeradius 2.1.7
2) chillispot 1.1.0
3) mysql 5.0.77
5) apache 2.2.3

i already configure my server to make it as hotspot wifi system , configured
chillispot and freeradius for mysql DB
and apache web server to authenticate wifi users which they login through
captive portal then AAA through freeradius + mysql for DB users 
after that i applied some policy = attribute like
- limited users download traffice 
- limited users login time .

everything working fine 

finally i configured my freeradius to connect Active Directory for users
authentication 
through rlm_ldap and  successful .

NOW i want apply the previous policy to active directory users 
how i can do that 

Is there a way can make the authenticate through active directory and
authorization throguh mysql ??
then make replication  between active directory and mysql users is it
possible ??

i attach debug mode user in active directory 
http://freeradius.1045715.n5.nabble.com/file/n4449095/radiusd_debug.txt
radiusd_debug.txt 

please help me guys !!!


--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/how-apply-policy-on-my-ldap-users-tp4449095p4449095.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: One client, multiple NAS-Port-Types

2011-06-02 Thread Phil Mayers

On 06/02/2011 06:05 PM, DaveA wrote:

That looks great, thanks!

Last question...

Phil Mayers wrote:

authorize {

>...

That is the authorize section from /sites-enabled/default, correct?


Well, whichever virtual server is receiving the packets. "default" 
normally, yes,

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-02 Thread David Peterson
Follow Alan’s instructions.  You will need to comment out the normal 
dictionary.wimax and use the alternate one supplied in the latest version.

 

It’s very stable.

 

David

 

 

From: Martin [mailto:martyn...@yahoo.com] 
Sent: Thursday, June 02, 2011 12:54 PM
To: David Peterson-WirelessConnections; FreeRadius users mailing list
Subject: RE: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

 


Yes,

Is it a Stable release? I have installed 2.1.10 and it doesn't support or at 
least didn't knew how to do it. 

Martin Ion

 

 



--- On Thu, 6/2/11, David Peterson  wrote:


From: David Peterson 
Subject: RE: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs
To: "'FreeRadius users mailing list'" 
Date: Thursday, June 2, 2011, 6:00 PM

I am guessing you need to work with an Alvarion 4-Motion base station?

 

The latest release supports sub-sub-tlv’s.  Search the list for extensive 
conversations on this…

 

David

 

From: freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org 
[mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org]
 On Behalf Of Martin
Sent: Thursday, June 02, 2011 9:45 AM
To: freeradius-users@lists.freeradius.org
Subject: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

 


Hi,

Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv -> WiMAX sub-sub-tlv

Does anybody knows if is going to be supported this kind of encapsulation and 
if yes, in what release?


Regards,
Martin Ion
 

 


-Inline Attachment Follows-

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius-server-2.1.10 crash on mips platform when built with static libraries

2011-06-02 Thread Alan DeKok
K Arvind wrote:
> When I build freeradius-server-2.1.10, using static libraries
> (“—enable-shared=no”, “—enable-static=PKG”) for the MIPS platform, the
> build goes through fine. However, when I start the freeradius server, it
> crashes with the following error message:
>
> radiusd: ../sysdeps/unix/sysv/linux/ia64/getpagesize.c:35:
> __getpagesize: Assertion `_rtld_global_ro._dl_pagesize != 0' failed.
> 
> Floating point exception

  Fix the platform so that it works.  That error isn't in FreeRADIUS.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unable to build freeradius-server-2.1.10 with --enable-shared=yes and --enable-static=no

2011-06-02 Thread Alan DeKok
K Arvind wrote:
>I’m trying to build freeradius-server-2.1.10 with the configure flags
> “-enabled-shared” set to yes, and “–enable-static” set to no. In the
> make step, I get a warning “libfreeradius-radius-2.1.10.so, needed by
> libeap/.libs/libfreeradius-eap.so, not found (try using -rpath or
> -rpath-link)” that seems to lead to a series of undefined reference errors.
>
>Any input or suggestions on this would be appreciated.

  This is largely a build issue which can be solved by examining the
Makefiles.

  i.e. it's a build on an unusual platform with unusual configuration
flags.  This requires experience with build systems.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-02 Thread Alan DeKok
Martin wrote:
> Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv -> WiMAX sub-sub-tlv
> 
> Does anybody knows if is going to be supported this kind of
> encapsulation and if yes, in what release?

  See http://git.freeradius.org

  Use the "master" branch.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: One client, multiple NAS-Port-Types

2011-06-02 Thread DaveA
That looks great, thanks!

Last question...

Phil Mayers wrote:
>authorize { 
   >... 

That is the authorize section from /sites-enabled/default, correct?

Thanks again,
Dave

--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/One-client-multiple-NAS-Port-Types-tp4445525p4448680.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-02 Thread Martin
Yes,

Is it a Stable release? I have installed 2.1.10 and it doesn't support or at 
least didn't knew how to do it. 

Martin Ion
 

--- On Thu, 6/2/11, David Peterson  wrote:

From: David Peterson 
Subject: RE: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs
To: "'FreeRadius users mailing list'" 
Date: Thursday, June 2, 2011, 6:00 PM

I am guessing you need to work with an Alvarion 4-Motion base station?  The 
latest release supports sub-sub-tlv’s.  Search the list for extensive 
conversations on this…  David  From: 
freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org 
[mailto:freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org]
 On Behalf Of Martin
Sent: Thursday, June 02, 2011 9:45 AM
To: freeradius-users@lists.freeradius.org
Subject: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs  Hi,

Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv -> WiMAX sub-sub-tlv

Does anybody knows if is going to be supported this kind of encapsulation and 
if yes, in what release?


Regards,
Martin Ion
   
-Inline Attachment Follows-

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

freeradius-server-2.1.10 crash on mips platform when built with static libraries

2011-06-02 Thread K Arvind
When I build freeradius-server-2.1.10, using static libraries 
("-enable-shared=no", "-enable-static=PKG") for the MIPS platform, the build 
goes through fine. However, when I start the freeradius server, it crashes with 
the following error message:

radiusd: ../sysdeps/unix/sysv/linux/ia64/getpagesize.c:35: __getpagesize: 
Assertion `_rtld_global_ro._dl_pagesize != 0' failed.
Floating point exception

I noticed the following warning in the build log:

/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/lib/.libs/libfreeradius-radius.a(misc.o):
 In function `ip_hton':
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/lib/misc.c:419:
 warning: Using 'getaddrinfo' in statically linked applications requires at 
runtime the shared libraries from the glibc version used for linking

Has anyone else encountered this before? Any input/suggestions on this would be 
appreciated. The version of glibc used is glibc-2.7.

Thanks,
Arvind

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Unable to build freeradius-server-2.1.10 with --enable-shared=yes and --enable-static=no

2011-06-02 Thread K Arvind
Hi,

   I'm trying to build freeradius-server-2.1.10 with the configure flags 
"-enabled-shared" set to yes, and "-enable-static" set to no. In the make step, 
I get a warning "libfreeradius-radius-2.1.10.so, needed by 
libeap/.libs/libfreeradius-eap.so, not found (try using -rpath or -rpath-link)" 
that seems to lead to a series of undefined reference errors.

   Any input or suggestions on this would be appreciated.

   Thanks,
   Arvind


Configure settings:

confargs= --prefix=/gw/config --enable-shared=yes --enable-static=no 
--enable-dlopen=no  --enable-developer --with-raddbdir=/gw/config/radius/raddb 
--with-openssl-includes=/gw/apache/openssl/include 
--with-openssl-libraries=/gw/apache/openssl/lib --host=mips-fti-linux-gnu 
--without-rlm_acctlog --without-rlm_attr_filter --without-rlm_attr_rewrite 
--without-rlm_caching --without-rlm_copy_packet --without-rlm_counter 
--without-rlm_cram --without-rlm_dbm --without-rlm_detail --without-rlm_digest 
--without-rlm_dynamic_clients --without-rlm_eap2 --without-rlm_example 
--without-rlm_expiration --without-rlm_fastusers --without-rlm_ippool 
--without-rlm_jradius --without-rlm_krb5 --without-rlm_ldap 
--without-rlm_linelog --without-rlm_logintime --without-rlm_opendirectory 
--without-rlm_otp --without-rlm_pam --without-rlm_passwd --without-rlm_perl 
--without-rlm_policy --without-rlm_preprocess --without-rlm_protocol_filter 
--without-rlm_python --without-rlm_radutmp --without-rlm_ruby 
--without-rlm_sim_files --without-rlm_smb --without-rlm_smsotp 
--without-rlm_sql --without-rlm_sql_log --without-rlm_sqlcounter 
--without-rlm_sqlhpwippool --without-rlm_sqlippool --without-rlm_unix 
--without-rlm_wimax
cur directory= freeradius-server-2.1.10

  The 'make' step fails with the following errors:

/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/libtool
 --mode=link mips-fti-linux-gnu-gcc   -o radeapclient radeapclient.lo 
libeap/libfreeradius-eap.la -lnsl -lresolv  -lpthread -L/gw/apache/openssl/lib 
-lcrypto -lssl -lcrypto
mips-fti-linux-gnu-gcc -o .libs/radeapclient .libs/radeapclient.o  
libeap/.libs/libfreeradius-eap.so -L/gw/apache/openssl/lib -lssl -lcrypto -lnsl 
-lresolv -lpthread -Wl,--rpath -Wl,/gw/config/lib
/tools/gcc-4.1.2-glibc-2.7/mips/lib/gcc/mips-fti-linux-gnu/4.1.2/../../../../mips-fti-linux-gnu/bin/ld:
 warning: libfreeradius-radius-2.1.10.so, needed by 
libeap/.libs/libfreeradius-eap.so, not found (try using -rpath or -rpath-link)
.libs/radeapclient.o: In function `debug_packet':
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:179:
 undefined reference to `fr_packet_codes'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:192:
 undefined reference to `vp_prints'
.libs/radeapclient.o: In function `cleanresp':
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:297:
 undefined reference to `pairdelete'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:298:
 undefined reference to `pairdelete'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:311:
 undefined reference to `pairbasicfree'
.libs/radeapclient.o: In function `process_eap_start':
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:334:
 undefined reference to `pairfind'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:393:
 undefined reference to `pairfind'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:394:
 undefined reference to `pairfind'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:395:
 undefined reference to `pairfind'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:410:
 undefined reference to `paircreate'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:412:
 undefined reference to 
`pairreplace'/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:415:
 undefined reference to `paircreate'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:420:
 undefined reference to 
`pairreplace'/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:432:
 undefined reference to `paircreate'
/ws/karvind/projects/bugsmain3/thirdparty/freeradius/freeradius-server-2.1.10/src/modules/rlm_eap/radeapclient.c:438:
 undefined reference to `fr_rand'
/ws/karvind/projects/bugsmain3/thirdpar

Re: One client, multiple NAS-Port-Types

2011-06-02 Thread Phil Mayers

On 02/06/11 16:17, DaveA wrote:


Alan DeKok wrote:
  >  Proxying.  Set up a minimal virtual server that proxies to others.

Okay, this makes sense, but I am still unclear as to where to make the
differentiation between NAS-Port-Types.

What I envision is something like:
If (NAS-Port-Type == Virtual ) {
Home_server = admincli
}
Elsif (NAS-Port-Type == Ethernet ) {
Home_server = 8021x
}


authorize {
  ...
  if (NAS-Port-Type == Virtual) {
update control {
  Proxy-To-Realm := ADMIN_SERVER
}
  }
  # N.B. maybe do this instead
  elsif (EAP-Message) {
update control {
  Proxy-To-Realm := EAP_SERVER
}
  }
  ...
}

..and in proxy.conf:

home_server EAP {
  type = auth+acct
  virtual_server = eap
}
home_server_pool EAP_POOL {
  home_server = EAP
}
realm EAP_SERVER {
  pool = EAP_POOL
}
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: One client, multiple NAS-Port-Types

2011-06-02 Thread DaveA

Alan DeKok wrote:
 > Proxying.  Set up a minimal virtual server that proxies to others.

Okay, this makes sense, but I am still unclear as to where to make the
differentiation between NAS-Port-Types.

What I envision is something like:
If (NAS-Port-Type == Virtual ) {
Home_server = admincli
}
Elsif (NAS-Port-Type == Ethernet ) {
Home_server = 8021x
}

Of course the above is pseudo code.. but I've looked at proxy.conf and both
hints and huntgroups and just can't determine where to put this.

Thanks for your continued help.
Dave


--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/One-client-multiple-NAS-Port-Types-tp4445525p4448412.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


RE: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-02 Thread David Peterson
I am guessing you need to work with an Alvarion 4-Motion base station?

 

The latest release supports sub-sub-tlv's.  Search the list for extensive
conversations on this.

 

David

 

From:
freeradius-users-bounces+david.peterson=acc-corp@lists.freeradius.org
[mailto:freeradius-users-bounces+david.peterson=acc-corp.net@lists.freeradiu
s.org] On Behalf Of Martin
Sent: Thursday, June 02, 2011 9:45 AM
To: freeradius-users@lists.freeradius.org
Subject: FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

 


Hi,

Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv -> WiMAX sub-sub-tlv

Does anybody knows if is going to be supported this kind of encapsulation
and if yes, in what release?


Regards,
Martin Ion
 

 

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Error: User-Name is not the same as MS-CHAP name

2011-06-02 Thread Phil Mayers

On 02/06/11 14:47, Francois Gaudreault wrote:




Did you have a chance to look at it?


Ironically I'm having trouble finding a windows XP install CD...
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Error: User-Name is not the same as MS-CHAP name

2011-06-02 Thread Francois Gaudreault

Hi Phil,



What I really want to understand is, whether the check is too strict 
and FreeRADIUS should be fixed, or whether Windows XP is just buggy. 
I will try to check this tomorrow.


e.g. maybe the check should be:

if eap.username == mschap.username:
 ok
elif not mschap.domain:
 if eap.stripped-user-name == mschap.username:
   ok
 reject
else:
 reject

I will try to investigate this tomorrow when I get back to the office.

Aight.  Keep us posted.



Did you have a chance to look at it?

Thanks!

--
Francois Gaudreault, ing. jr
fgaudrea...@inverse.ca  ::  +1.514.447.4918 (x130) ::  www.inverse.ca
Inverse inc. :: Leaders behind SOGo (www.sogo.nu) and PacketFence 
(www.packetfence.org)

-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


FreeRadius Support for WiMAX Sub-TLVs of Sub-TLVs

2011-06-02 Thread Martin
Hi,

Vendor-Specific -> WiMAX TLV -> WiMAX sub-tlv -> WiMAX sub-sub-tlv

Does anybody knows if is going to be supported this kind of encapsulation and 
if yes, in what release?


Regards,
Martin Ion
 -
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can't get checkrad to be called

2011-06-02 Thread Alan DeKok
Dan Brisson wrote:
> I was wondering if someone could help me determine why checkrad isn't
> being called.  I've followed the directions in the doc/Simultaneous-Use
> but still cannot get checkrad to fire off when I login.  It will check
> radutmp, but never reaches out to my NAS with checkrad, as evidenced
> here from radiusd -X:
> 
> +- entering group session {...}
> [radutmp]   expand: /var/log/radius/radutmp -> /var/log/radius/radutmp
> [radutmp]   expand: %{User-Name} -> testuser
> ++[radutmp] returns ok
> Using Post-Auth-Type Reject

  If you've configured Simultaneous-Use, then there should be
*something* about checkrad in the output.

> Can I provide any other data?  I'm using SQL for authorization and
> accounting.  I'm on version 2.1.7-7.el5 of FreeRadius.

  Where did you configure Simultaneous-Use?  How?

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: radwho with exact match not happening

2011-06-02 Thread Alan DeKok
djadav wrote:
> when we give radwho -R -u   it will give all user that match name.
> but i want to grep an exact match.
> 
> For, Example,   abc, abc1, abc123,abc1264  user is connected.
> Now when i give radwho -R -u abc   
> 
> then it will give all user connected with  abc/abc1...  insted of exact
> match "abc"

  radwho doesn't do that.

  You will need to modify the source code to radwho in order to add that
feature.

  Or, store the login information in a database, and then use normal
database queries.  This is the recommended approach.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Server Sertificate

2011-06-02 Thread Alan DeKok
senthil kumar wrote:
> Hi,
>   Can you send me some sample Server.cnf and Client.cnf files.
>   I am facing some problem with the certificates.

  See raddb/certs.  This is documented.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


radwho with exact match not happening

2011-06-02 Thread djadav
Dear All,

I have configured a radius, its working fine, i am not get proper output in
radwho commnad.

when we give radwho -R -u   it will give all user that match name.
but i want to grep an exact match.

For, Example,   abc, abc1, abc123,abc1264  user is connected.
Now when i give radwho -R -u abc   

then it will give all user connected with  abc/abc1...  insted of exact
match "abc"

I have an automated script to disconnect an user with radzap, but it will
not work in case of similar name bcos radwho giving me wrong output
(multiple user output).

Any one know how to grep an user with exact match via radwho or any other
way to grep an exact user with nasip,nasport,etc..

Any help greatly appreciated
Thanks in advance

Regards
Dilip


--
View this message in context: 
http://freeradius.1045715.n5.nabble.com/radwho-with-exact-match-not-happening-tp4447383p4447383.html
Sent from the FreeRadius - User mailing list archive at Nabble.com.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Server Sertificate

2011-06-02 Thread senthil kumar
Hi,
  Can you send me some sample Server.cnf and Client.cnf files.
  I am facing some problem with the certificates.


Regards
Senthil



On Thu, Jun 2, 2011 at 1:51 AM, Alexander Clouter wrote:

> Lubenski, Zeev [GCS]  wrote:
> >
> > This leads to believe that certificate is not mandatory ?
> >
> ...which leads us to wonder why you want to use EAP-TLS?
>
> Probably best to answer:
>  * what is it you are trying to do
>  * how are you trying to accomplish it
>  * what are you expecting to happen
>  * what is actually happening
>
> Cheers
>
> --
> Alexander Clouter
> .sigmonster says: You enjoy the company of other people.
>
> -
> List info/subscribe/unsubscribe? See
> http://www.freeradius.org/list/users.html
>



-- 
"Adversity always presents opportunity for Introspection"

Regards
Senthil
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Segmetation fault: [eap] Passing reply from proxy back into the tunnel

2011-06-02 Thread Alan DeKok
Phil Mayers wrote:
> I'll try to test the Access-Reject thing tomorrow; I'm betting it'll be
> a trivial fix.

  Thanks.

> A 2.1.11 release would be good; we're been running a recent v2.1.x
> snapshot in production for a while and it's stable (once I patched the
> detail file reader segfault, which I believe is now upstream)

  Yeah, that was *weird*.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html