Re: multilink PPP

2002-09-04 Thread Rainer Clasen
Iasonas Charalambous wrote: Can anyone help me on this? I am using cisco access server 5300 and freeradius 0.7. I can work ppp multilink with the 5300 and tacacs but I cannot make it work with freeradius. My users file looks like this: testuser Auth-Type := Local, Password == welcome ,

Re: multilink PPP

2002-09-04 Thread Iasonas Charalambous
Yes, it looks like it. When I put Framed-Compression = none multilink works fine. Thanks a lot, Iasonas At 09:13 04/09/02 +0200, you wrote: Iasonas Charalambous wrote: Can anyone help me on this? I am using cisco access server 5300 and freeradius 0.7. I can work ppp multilink with

mysql modules

2002-09-04 Thread ho k
Dear All I would like to use mysql module in freeradius0.7 and run the configure commend as: #./configure --with-mysql-lib-dir=/usr/local/mysql/lib --with-mysql-include-dir=/usr/local/mysql/include as well as

Re: LDAP module crashes

2002-09-04 Thread Stefan Radovanovici
tests I added some more reply items but this makes the LDAP module to crash. If I keep the number of reply items low, it works fine. Here is a working log request. Next will follow the log when I have added one more reply items. Could you post the new reply item you added? The added

Re: LDAP module crashes

2002-09-04 Thread Stefan Radovanovici
tests I added some more reply items but this makes the LDAP module to crash. If I keep the number of reply items low, it works fine. Here is a working log request. Next will follow the log when I have added one more reply items. Could you post the new reply item you added? Do you get

Re: LDAP module crashes

2002-09-04 Thread Kostas Kalevras
On Wed, 4 Sep 2002, Stefan Radovanovici wrote: tests I added some more reply items but this makes the LDAP module to crash. If I keep the number of reply items low, it works fine. Here is a working log request. Next will follow the log when I have added one more reply items. Could

MySql Module Installation

2002-09-04 Thread ho k
Dear All I can't find any rlm_sql_mysql* in /usr/local/lib and my MySQL 3.23.52 Solaris 2.7 (Sparc)is a binary package version. I also used gcc 3.2 version for compiling freeradius0.7, the command steps are ./configure --with-mysql-include-dir=/usr/local/mysql/include, make and make install

100M¿Õ¼ä=50Ôª/Äê

2002-09-04 Thread www . idc2000 . com
×𾴵Ŀͻ§£º ÄúºÃ£¡ http://www.idc2000.com ×îÍêÉƵķþÎñ£º ÔÚÏßÖ§¸¶¡¢ÔÚÏß×¢²á¡¢ÔÚÏß¹ÜÀí¡¢800È«¹úÃâ·Ñµç»°¡¢WEBÔÚÏß½»Ì¸ ÂÛ̳ʵʱ×Éѯ¡¢¹¤×÷ÈËÔ±24Сʱֵ°à¡¢·þÎñÆ÷È«Ììºò¼à¿Ø ... ... ×îÓŻݵļ۸ñ£º 100M HTML¿Õ¼ä = 50Ôª/Äê 200M HTML¿Õ¼ä +

Problems with detail file

2002-09-04 Thread Aleksey Trubin
Hi all! I use Freeradius 0.5 on FreeBSD4.5. My NAS is MAX6000. I have problems with this... First, radius can't get detail file from NAS... radiusd.conf seems allright. This very impotant for me to get detail from NAS! Second. Somehow first character in username is disappire (if username

Re:Radius with LDAP

2002-09-04 Thread Deborshi Gupta
I would like to know that once I make necessary changes in the radiusd.conf for the connection to Open LDAP how do I retrieve and store the info in LDAP.Does all auth acc requests get stored in LDAP automatically and I can retrieve it at any point of time. I have another problem.When I set up

how to set up user time interval

2002-09-04 Thread Ruslan Spivak
Hello freeradius-users, I need to have service for dialup clients - let's call it 'interval', so that, for example, user A can work only 10 hours(he can spent his limit during month or week or day - no matter) and access will be disabled, user B - 30 hours an so on. Is it possible to implement

rlm_sqlcounter accessing an external database ...

2002-09-04 Thread Do-Risika RAFIEFERANTSIARONJY
Hi everybody, I've been using sqlcounter with mysql for a while without a problem (thanks to developers). Now, I want to use it with an external database/table, I mean to check the quota time from another personal table. As I undertand, it should work by only specifying a new sql module,

Re:Radius with LDAP

2002-09-04 Thread Kostas Kalevras
On Wed, 4 Sep 2002, Deborshi Gupta wrote: I would like to know that once I make necessary changes in the radiusd.conf for the connection to Open LDAP how do I retrieve and store the info in LDAP.Does all auth acc requests get stored in LDAP automatically and I can retrieve it at any point

Vendor Code

2002-09-04 Thread Sheldon Fougere
Hi All, Do I have to apply for a Vendor code to create a VSA? If so where do I apply? Thanks, Sheldon - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: how to set up user time interval

2002-09-04 Thread Kostas Kalevras
On Wed, 4 Sep 2002, Ruslan Spivak wrote: Hello freeradius-users, I need to have service for dialup clients - let's call it 'interval', so that, for example, user A can work only 10 hours(he can spent his limit during month or week or day - no matter) and access will be disabled, user B -

Re[2]: Understanding FreeRADIUS authorization, authentication and attribute lists.

2002-09-04 Thread 3APA3A
Dear Alex D. Krivoshein, --Tuesday, August 27, 2002, 11:33:37 PM, you wrote to [EMAIL PROTECTED]: ADK Dear 3APA3A, ADK I read your last article with great pleasure, but I still have some ADK questions. ADK 1. How can I mark pair to be a configure atribute but not a check ADK atribute -

DialAdmin - Password Change Problem

2002-09-04 Thread Sheldon Fougere
Hi, When using Dailup_Admin 1.55, I get the following error when trying to change a user password: Error while changing password: You have an error in your SQL syntax near 'AND op =) VALUES ('User-Password','$1$2nzSd/8M$Svrz1Rs6Goe2oiwngQF2v/','she' at line 1 I've looked for SQL statements in

Re: how to set up user time interval

2002-09-04 Thread Alan DeKok
Ruslan Spivak [EMAIL PROTECTED] wrote: I need to have service for dialup clients - let's call it 'interval', so that, for example, user A can work only 10 hours(he can spent his limit during month or week or day - no matter) and access will be disabled, user B - 30 hours an so on. Is it

Re: Vendor Code

2002-09-04 Thread Alan DeKok
Sheldon Fougere [EMAIL PROTECTED] wrote: Do I have to apply for a Vendor code to create a VSA? Yes, and no. If you want to guarantee that no one else will re-use your number, then you've got to apply. If you're willing to live with imperfection, then pick a number larger than (1 24) (16

Re: mysql modules

2002-09-04 Thread Alan DeKok
=?iso-8859-1?q?ho=20k?= [EMAIL PROTECTED] wrote: configure: warning: mysql headers not found. Use --with-mysql-include-dir=path. configure: warning: sql submodule 'mysql' disabled That's pretty definitive. So why did you bother trying to configure mysql in the server at run time, when

Re: Problems with detail file

2002-09-04 Thread Alan DeKok
Aleksey Trubin [EMAIL PROTECTED] wrote: First, radius can't get detail file from NAS... radiusd.conf seems allright. This very impotant for me to get detail from NAS! This is a question in the FAQ. Second. Somehow first character in username is disappire (if username starts from

Re: DialAdmin - Password Change Problem

2002-09-04 Thread Kostas Kalevras
On Wed, 4 Sep 2002, Sheldon Fougere wrote: Hi, When using Dailup_Admin 1.55, I get the following error when trying to change a user password: Error while changing password: You have an error in your SQL syntax near 'AND op =) VALUES

RE: DialAdmin - Password Change Problem

2002-09-04 Thread Sheldon Fougere
Thanks for the fix Sheldon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Kostas Kalevras Sent: Wednesday, September 04, 2002 11:36 AM To: Freeradius-Users Subject: Re: DialAdmin - Password Change Problem On Wed, 4 Sep 2002, Sheldon Fougere wrote:

Re: mysql modules

2002-09-04 Thread Artur Hecker
it is definitive, however, in my case the headers are installed in /usr/local/mysql/include (the mysql.h file is in this directory) but if i do: ./configure --with-mysql-include-dir=/usr/local/mysql/include (i use the snapshot from the FTP site (20020904)) it says: configuring in src/modules/rlm_sql

Re: mysql modules

2002-09-04 Thread Alan DeKok
Artur Hecker [EMAIL PROTECTED] wrote: it is definitive, however, in my case the headers are installed in /usr/local/mysql/include (the mysql.h file is in this directory) Everyone installs things in different places, and expects the poor 'configure' script to figure it all out sigh. why

Re: mysql modules

2002-09-04 Thread Artur Hecker
hi alan :) it is definitive, however, in my case the headers are installed in /usr/local/mysql/include (the mysql.h file is in this directory) Everyone installs things in different places, and expects the poor 'configure' script to figure it all out sigh. no, i don't expect it to find

Re: Fwd: Re[2]: MSCHAP2 + pptpd + pppd 2.4.2 + Postgres problems

2002-09-04 Thread Alex D. Krivoshein
Dear 3APA3A, I aplied your patch and what I get: óÅÎ 4 20:30:14 fast radiusd: rad_recv: Access-Request packet from host 127.0.0.1:2547, id=79, length=131 óÅÎ 4 20:30:14 fast radiusd: ^IService-Type ?? Framed-User óÅÎ 4 20:30:14 fast radiusd: ^IFramed-Protocol ?? PPP óÅÎ 4 20:30:14 fast

Re[2]: Fwd: Re[2]: MSCHAP2 + pptpd + pppd 2.4.2 + Postgres problems

2002-09-04 Thread 3APA3A
Dear Alex D. Krivoshein, ïÂÎÏ×É ÅÝÅ É token.c http://www.security.nnov.ru/files/token.c é ÐÒÉÛÌÉ ÞÔÏ Õ ÔÅÂÑ × ÆÁÊÌÅ users ÄÌÑ default. --Wednesday, September 4, 2002, 8:35:48 PM, you wrote to [EMAIL PROTECTED]: ADK Dear 3APA3A, ADKI aplied your patch and what I get: ADK óÅÎ 4 20:30:14

suggestions about attributes

2002-09-04 Thread Josh Kleensang
Howdy, I guess I dont know if these have been changed in CVS - or if they are the way they are for a reason. raddb/ldap.attrmap - the ldap checkItem attribute for Simultaneous-Use is set to npSessionsAllowed, but in the RADIUS-LDAPv3.schema radiusSimultaneousUse seems to be the

Re: mysql modules

2002-09-04 Thread Alan DeKok
Artur Hecker [EMAIL PROTECTED] wrote: Everyone installs things in different places, and expects the poor 'configure' script to figure it all out sigh. no, i don't expect it to find it. but i _do_ expect it to use the path i've just given to it as command-line parameter. in that case it

unsubscribe

2002-09-04 Thread Roonui ADAMS

RE: Vendor Code

2002-09-04 Thread Sheldon Fougere
Our company does have an SNMP OID assigned. I looked at private enterprise codes and them seem to be related but not very clear. Can anyone shed some light? Thanks, Sheldon -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alan DeKok Sent: Wednesday,

RE: Radius Expiration/Account Expiration

2002-09-04 Thread Thai Tran
Hello Everyone, My main problem right now is that I am attempting to set an expiration date for my radius accounts. I've tried searching through the RFCs and registered OIDs hoping for some luck with this issue. I've tried multiple syntax values with no success. I have a attribute in my

RE: Radius Expiration/Account Expiration

2002-09-04 Thread Kostas Kalevras
On Wed, 4 Sep 2002, Thai Tran wrote: Hello Everyone, My main problem right now is that I am attempting to set an expiration date for my radius accounts. I've tried searching through the RFCs and registered OIDs hoping for some luck with this issue. I've tried multiple syntax values with

Denying access based in calling station

2002-09-04 Thread ntuser
Hi, Is it possible specify certain phone number where a specific user is allowed to call from ? I need the following solution: The radius would authenticate a user if your phone number is autorized. The user can have more than one number where he call from, then would be good if the number was

Re: Vendor Code

2002-09-04 Thread Alan DeKok
Sheldon Fougere [EMAIL PROTECTED] wrote: Our company does have an SNMP OID assigned. I looked at private enterprise codes and them seem to be related but not very clear. Can anyone shed some light? The SNMP OID is the same as the private enterprise code. Use that as the 'Vendor' number

RE: Vendor Code

2002-09-04 Thread Sheldon Fougere
Thanks very much for the help. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]]On Behalf Of Alan DeKok Sent: Wednesday, September 04, 2002 4:17 PM To: [EMAIL PROTECTED] Subject: Re: Vendor Code Sheldon Fougere [EMAIL PROTECTED] wrote: Our company does have an

Re: Login-Time and timezones

2002-09-04 Thread Alan DeKok
Jeremy Kusnetz [EMAIL PROTECTED] wrote: We are looking to use Login-Time, but I have a few questions about timezones. Our servers run on GMT, but I would want to setup Login-Times for people in different timezones. As you noted, that isn't thre right now. So for example if I wanted to

RedHat 7.3 as Radius Client

2002-09-04 Thread Nick_Ellson
I hope this is not too basic, I have searched the archives for examples of a RedHat 7.3 install with no luck. Can someone help me with the use of the Radius Authentication PAM module for RedHat 7.3, I want to have the server use an existing Cisco Secure Radius service to authentcate SSH

Re: RedHat 7.3 as Radius Client

2002-09-04 Thread Joe Lewis
/etc/pam.d/ssh /etc/pam.d/login /etc/pam.d/telnetd NOTE : pam_radius does NOT alleviate the need for the /etc/passwd file. pam_radius does not implement the pam_sm_setcred function to set the user id, group id, and other things. But, you can set a default_user in the configuration (but

sqlcounter question

2002-09-04 Thread alienoid
Hello freeradius-users, RH7.2 + freeradius-0.6 + Oracle I've compiled freeradius with --with-experimantal-modules and set up it with sql auth/acct. In radiusd.conf wrote: sqlcounter hourlycounter { counter-name = SQL_Max_Hour_Session_Timeout check-name = SQL_Max_Hour

Re: RedHat 7.3 as Radius Client

2002-09-04 Thread Nick_Ellson
Thanks Joe! Yes, I was aware that the passwd file was STILL required, and that only users that existed in BOTH radius and the passwd file would be getting in. That was acceptable to us. We just plan on giving the default a /bin/null shell so they get dumped anyway. We only want 6 users allowed,

Re: RedHat 7.3 as Radius Client

2002-09-04 Thread Joe Lewis
Sounds decent! It should work fine, then! Joe [EMAIL PROTECTED] wrote: Thanks Joe! Yes, I was aware that the passwd file was STILL required, and that only users that existed in BOTH radius and the passwd file would be getting in. That was acceptable to us. We just plan on giving the

Re: RedHat 7.3 as Radius Client

2002-09-04 Thread Nick_Ellson
Sorry, one question so I don't lock myself out... This is my sshd file, where do I paste the auth sufficient /lib/security/pam_radius_auth.so #%PAM-1.0 auth required /lib/security/pam_stack.so service=system-auth auth required /lib/security/pam_nologin.so account

Re: mysql modules

2002-09-04 Thread Artur Hecker
:-) It *is* using the path you give it. That's not the problem. well, it does add mysql to it. The problem is that the MySQL header files are *normally* in mysql/mysql.h, as evidenced by the fact that this issue hasn't been a problem for at least the past year. So if you're

Re: RedHat 7.3 as Radius Client

2002-09-04 Thread Nick_Ellson
Ok, I now have it working, by inserting auth sufficient /lib/security/pam_radius_auth.so as the first line of /etc/pam.d/sshd. However, it still respects my /etc/passwd password as well. When I tried to change the sufficient to required like the rest of the entries, no login worked

RE: Radius Expiration/Account Expiration

2002-09-04 Thread Thai Tran
Kostas Kalevras, You are the man!!! I really owe you one... Thanks alot. ;-) Hello Everyone, My main problem right now is that I am attempting to set an expiration date for my radius accounts. I've tried searching through the RFCs and registered OIDs hoping for some luck with

Exec-Program-Wait Abnormal exit - 0.7/Snapshot

2002-09-04 Thread Dave
Hi All, Is Exec-Program-Wait still broken? I have tried 0.7 as well as Snapshot dated 09-04-2002 and while 0.7 continues to run after an Abnormal exit, the Snapshot build dies immediately...but when entering group authorize and apparently not getting to Exec-Program-Wait. Any ideas? -Dave

Re: sqlcounter question

2002-09-04 Thread Do-Risika RAFIEFERANTSIARONJY
alienoid wrote: Hello freeradius-users, hi, RH7.2 + freeradius-0.6 + Oracle I've compiled freeradius with --with-experimantal-modules and set up it with sql auth/acct. In radiusd.conf wrote: sqlcounter hourlycounter { counter-name = SQL_Max_Hour_Session_Timeout