Re: Changed Attributes

2013-06-25 Thread George Innocent
Hi Experts

I have checked the dictionary files and the attributes which are in
existance; but i still get this error when i run debug mode.

/usr/local/etc/raddb/users[157]: Parse error (check) for entry
Alc-IPsec-Interface: Unknown attribute  requires a hex string, not
private_ipsec
Errors reading /usr/local/etc/raddb/users
/usr/local/etc/raddb/modules/files[7]: Instantiation failed for module
files
/usr/local/etc/raddb/sites-enabled/default[170]: Failed to load module
files.
/usr/local/etc/raddb/sites-enabled/default[69]: Errors parsing authorize
section.
root@Radius-pst:~#

The profile of my user is:

steve  Cleartext-Password := testing
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.1.2,
Framed-IP-Netmask = 255.255.255.0,
Alc-IPsec-Interface = private_ipsec,
Alc-IPsec-SA-Lifetime = 1200,
Alc-IPsec-SA-Encr-Algorithm = aes128,
Alc-IPsec-SA-Auth-Algorithm = sha1

Rgds


On 24 June 2013 22:04, a.l.m.bu...@lboro.ac.uk wrote:

 Hi,

 But when i comment the attributes the radtest is successful

 did you check my other statement:

   3) ensure that these attributes that you are using are in a
 dictionary
   file and that the dictionary file is being read by the server when
 it
   starts

 well?

 alan
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-- 
Regards:
George Innocent.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Changed Attributes

2013-06-25 Thread Alan DeKok
George Innocent wrote:
 I have checked the dictionary files and the attributes which are in
 existance; but i still get this error when i run debug mode.

  Using FreeRADIUS requires a minimum amount of skill and documentation
reading.  You've edited the dictionaries without understanding how the
dictionaries work.

  I'm not going to cut  paste the dictionary documentation here.  The
instructions already exist.  Read the raddb/dictionary file, and man
dictionary.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Changed Attributes

2013-06-25 Thread George Innocent
Hi Alan;

Thanks for the feed back but i have not edited the Dictionary file what i
said i checked and confirmed that the attributes i have configured are
available on dictionary for.



On 25 June 2013 16:21, Alan DeKok al...@deployingradius.com wrote:

 George Innocent wrote:
  I have checked the dictionary files and the attributes which are in
  existance; but i still get this error when i run debug mode.

   Using FreeRADIUS requires a minimum amount of skill and documentation
 reading.  You've edited the dictionaries without understanding how the
 dictionaries work.

   I'm not going to cut  paste the dictionary documentation here.  The
 instructions already exist.  Read the raddb/dictionary file, and man
 dictionary.

   Alan DeKok.
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-- 
Regards:
George Innocent.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Changed Attributes

2013-06-25 Thread Alan DeKok
George Innocent wrote:
 Thanks for the feed back but i have not edited the Dictionary file what
 i said i checked and confirmed that the attributes i have configured are
 available on dictionary for.

  The error message you're seeing comes because you did NOT follow the
instructions for creating an entry in the users file.

  Your users file entry is WRONG.  Follow the documentation.

   If you insist on ignoring instructions and ignoring documentation,
you will be unsubscribed, and permanently banned from the list.

  We're here to help people.  If you're not willing to help yourself,
then we don't have time to help you, either.

  Alan DeKok.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Changed Attributes

2013-06-25 Thread A . L . M . Buxey
Hi,

Alc-IPsec-Interface: Unknown attribute  requires a hex string, not
private_ipsec

so give it a hex string then

private_ipsec is 707269766174655f6970736563

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Changed Attributes

2013-06-24 Thread A . L . M . Buxey
Hi,

I am creating attributes for the user using the scripts below but on
running the radtest i get the failure attributes ; which seems to have
changed. I am using Freeradius 2.1.0 .
 
user1test Auth-Type := Local, User-Password == testpassword
 
Framed-IP-Address = 172.162.3.33,
 
   Framed-IP-Netmask = 255.255.255.0,
 
Alc-Primary-Dns = 4.4.2.2,
 
Alc-Primary-Nbns = 8.8.4.4,
 
Alc-IPsec-Serv-Id = 199920,
 
Alc-IPsec-Interface = public_ipsec,
 
Alc-IPsec-SA-Lifetime = 1200,
 
Alc-IPsec-SA-Encr-Algorithm = aes128,
 
Alc-IPsec-SA-Auth-Algorithm = sha1

1) its Cleartext-Password := NOT User-Password ==

2) formatting is VERY important...I hope you dont have blank lines between
each entry

3) ensure that these attributes that you are using are in a dictionary
file and that the dictionary file is being read by the server when it starts

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html


Re: Changed Attributes

2013-06-24 Thread George Innocent
The configured user with the stated attributes:

steve  Cleartext-Password := testing
Service-Type = Framed-User,
Framed-Protocol = PPP,
Framed-IP-Address = 192.168.1.2,
Framed-IP-Netmask = 255.255.255.0,
Alc-IPsec-Interface = private_ipsec,
Alc-IPsec-SA-Lifetime = 1200,
Alc-IPsec-SA-Encr-Algorithm = aes128,
Alc-IPsec-SA-Auth-Algorithm = sha1,

Error received on running radtest remains same.

But when i comment the attributes the radtest is successful


On 24 June 2013 19:55, a.l.m.bu...@lboro.ac.uk wrote:

 Hi,

 I am creating attributes for the user using the scripts below but on
 running the radtest i get the failure attributes ; which seems to have
 changed. I am using Freeradius 2.1.0 .
 
 user1test Auth-Type := Local, User-Password == testpassword
 
 Framed-IP-Address = 172.162.3.33,
 
Framed-IP-Netmask = 255.255.255.0,
 
 Alc-Primary-Dns = 4.4.2.2,
 
 Alc-Primary-Nbns = 8.8.4.4,
 
 Alc-IPsec-Serv-Id = 199920,
 
 Alc-IPsec-Interface = public_ipsec,
 
 Alc-IPsec-SA-Lifetime = 1200,
 
 Alc-IPsec-SA-Encr-Algorithm = aes128,
 
 Alc-IPsec-SA-Auth-Algorithm = sha1

 1) its Cleartext-Password := NOT User-Password ==

 2) formatting is VERY important...I hope you dont have blank lines between
 each entry

 3) ensure that these attributes that you are using are in a dictionary
 file and that the dictionary file is being read by the server when it
 starts

 alan
 -
 List info/subscribe/unsubscribe? See
 http://www.freeradius.org/list/users.html




-- 
Regards:
George Innocent.
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Changed Attributes

2013-06-24 Thread A . L . M . Buxey
Hi,

But when i comment the attributes the radtest is successful

did you check my other statement:

  3) ensure that these attributes that you are using are in a dictionary
  file and that the dictionary file is being read by the server when it
  starts

well?

alan
-
List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html