Upgradeing from 0.5 to 0.6

2002-07-05 Thread Jeremy Salch
I have a proxy radius server running freeradius 0.5 and i am wanting to update it to 0.6 should i just be able to compile 0.6, do a make install and restart the service? using the same config files -- Business website -- www.granbury.com Personal website -- www.tblx.net - List

DBM file usage

2002-07-05 Thread Brad Crotchett
Hi, I am trying to get freeradius 0.6.6 to use our dbm file containing users and passwords. I have already compiled radius to have dbm support, but when I try to start radius with the -d option, I just get the usage screen meaning I have something wrong. Can anyone help me tell freeradius to

Re: Upgradeing from 0.5 to 0.6

2002-07-05 Thread Jeremy Salch
On Friday 05 July 2002 11:06 am, Alan DeKok wrote: Jeremy Salch [EMAIL PROTECTED] wrote: should i just be able to compile 0.6, do a make install and restart the service? using the same config files That should work, yes. But I would test it, first. Playing with live systems

Proxying problem Help needed

2002-07-05 Thread Jeremy Salch
I have 2 numbers and 2 realms i'm trying to proxy. what i want to happen is i want it to proxy by realm first and if they don't have a realm then proxy by the number they dialed. and as i understand it the user file processed until a match is found.. with just this listed it will

EAP Cert trust list

2002-07-05 Thread De Yong, Doug
I've been trying to get the EAP-TLS going but I haven't been able to figure out what need to so be use for the trusted CA list. How do I generate this file? I used OpenSSL to generate the keys. thanx/doug --- # Extensible Authentication Protocol # # For all EAP

Re: EAP Cert trust list

2002-07-05 Thread Artur Hecker
De Yong, Doug wrote: I've been trying to get the EAP-TLS going but I haven't been able to figure out what need to so be use for the trusted CA list. How do I generate this file? I used OpenSSL to generate the keys. basically, it contains the public key of your CA. in the case of

Re: Multiple IPs to a Dial-in user.

2002-07-05 Thread Lee W
Hmm I think I found the answer, if someone could confirm for me userAuth-Type = Local, Password = blegh Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 192.168.5.78, Framed-Route = 192.168.5.64/28 0.0.0.0 1

Multiple authentication profiles...

2002-07-05 Thread David C. Troy
All: I have the following situation -- 1) Provider A uses PAP and doesn't want Ascend-Data-Filters 2) Provider B uses PAP and DOES want Ascend-Data-Filters 3) Provider C uses CHAP and doen't want Ascend-Data-Filters 4) They all want to use ports 1645/1646 Everything is authenticated from

Re: Multiple authentication profiles...

2002-07-05 Thread Alan DeKok
David C. Troy [EMAIL PROTECTED] wrote: I have the following situation -- 1) Provider A uses PAP and doesn't want Ascend-Data-Filters 2) Provider B uses PAP and DOES want Ascend-Data-Filters 3) Provider C uses CHAP and doen't want Ascend-Data-Filters 4) They all want to use ports

Re: Freeradius-Users -- confirmation of subscription -- request 485700

2002-07-05 Thread Amaury C Jr
- Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Friday, July 05, 2002 5:05 PM Subject: Freeradius-Users -- confirmation of subscription -- request 485700 Freeradius-Users -- confirmation of subscription -- request 485700 We have received a request from

Authentication problem with PIX-515

2002-07-05 Thread Mario Vodopivec
I am using FreeRadius 0.5 and Cisco PIX-515 Firewall. Authentication is denied and it looks exactly like the secret key is misspelled on PIX, however I already checked that and it is not. 'radtest' utility works just fine. Does anyone know if there is something specific with PIX that would cause

Re: Multiple authentication profiles...

2002-07-05 Thread David C. Troy
Alan -- Thanks for the help. One further bit of clarification -- the Providers A, B, C each have about 10-20 proxy boxes. I would prefer to define them as classes of proxies rather than have to set up individual profiles in the 'users' file. Is there any reasonable way to do this, or am I