RE: Reply packet code 11... : IGNORED

2002-09-26 Thread Antonios Lazaridis
Your AP is broken. I checked the intel AP case again. Using windows 2000 server as a radius server, authentication worked fine. Is there a reason why that AP can authenticate with a windows radius server and not with freeRADIUS or am i doing something wrong? The firmware is the latest

Re: Reply packet code 11... : IGNORED

2002-09-26 Thread Artur Hecker
hi I tried again. It worked fine! The radius server is sending the WEP key to the client and the AP. well, kind of. in fact, the server sends those MPPE keys to the AP, the AP then creates the WEP key and sends it to the client. the client has to create its MPPE keys by himself (they are

Re: Reply packet code 11... : IGNORED

2002-09-26 Thread Artur Hecker
hi Antonios Lazaridis wrote: Your AP is broken. I checked the intel AP case again. Using windows 2000 server as a radius server, authentication worked fine. strange though. could you post the complete log of the freeradius during the failure? i think you already did but there we seemed

Re: Reply packet code 11... : IGNORED

2002-09-26 Thread Artur Hecker
hi The log follows. Also the ethreal text file, from the windows authentication. (i included only the radius protocol to shorten the text) oh, could you please record both the windows AND the freeradius cases with ethereal (there is an ethereal version for linux too) including only radius

RE: Reply packet code 11... : IGNORED

2002-09-26 Thread Antonios Lazaridis
the problem is that the log which you send clearly represents the case which has already been explained (there is an access challenge coming from the AP) but the ethereal log doesn't correspond to that case, it rather represents a successful exchange, IMHO. Sorry, i didn't make that clear:

Re: Reply packet code 11... : IGNORED

2002-09-26 Thread Artur Hecker
hi Sorry, i didn't make that clear: The ethereal log was created using windows server as radius, this case works. The radiusd log was the freeradius case, where i get the strange access-challenge. it was exactly what i understood from you email. didn't i write in my answer that you

RFI: Xwindows editor for RADIUS users file?

2002-09-26 Thread Dympna
Hi all, I am a newbie and am running Freeradius 0.7.1 under Redhat Linus 7.2 (kernel 0.2.4.7-10). All well and good. It works a treat! BUT I must use CHAP authorization so that passwords are sent encrypted on the 'wire' (wireless is my case) so I have to store the passwords as text password.

Re: freeradius + oracle = rlm_sql: failed after re-connect

2002-09-26 Thread Andrea Gabellini
At 23.52 25/09/02, you wrote: with this I solved the auth problem, but encountered a problem for the accounting inserts. Here I send you the changes I made in sql.conf From : accounting_start_query = INSERT into radacct (RadAcctId, AcctSessionId, AcctUniqueId, UserName, Realm, NASIPAddress,

Re: Reply packet code 11... : IGNORED

2002-09-26 Thread Alan DeKok
Antonios Lazaridis [EMAIL PROTECTED] wrote: I downloaded the yesterday's snapshot. (The document still says Please note that WEP is not yet supported in freeradius sigh There *is* more than one document distributed with the server. Would you PLEASE say WHICH document you're talking

Re: External authentication ?

2002-09-26 Thread Alan DeKok
Torbjorn Tornkvist [EMAIL PROTECTED] wrote: I did try that too and it didn't work. Look, here is an excerpt from my users file: Grab the latest CVS snapshot, there's a fix in it. Alan Dekok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: IP Addresses for Clients

2002-09-26 Thread Andrew Grimmett
I was able to get the static IP addresses working correctly, by following NAS-IP-ADDRESS after the username; if it did not match the IP address for the NAS then it would fall through to the next entry with the username which the NAS IP matched, sending the correct IP address to the client.

Stripped-User-Name

2002-09-26 Thread Alberto Pereira
Hi, I use freeradius.0.7.1with anthentication and billing in mysql. In sql.conf i put this variable: sql_user_name = %{Stripped-User-Name:-%{User-Name:-none}} But when i try to authenticate with [EMAIL PROTECTED] it queries in mysql for [EMAIL PROTECTED] and not only login. If I put in

RE: Reply packet code 11... : IGNORED

2002-09-26 Thread Antonios Lazaridis
"Antonios Lazaridis" [EMAIL PROTECTED] wrote: I downloaded the yesterday's snapshot. (The document still says Please note that WEP is not yet supported in freeradius sigh There *is* more than one document distributed with the server. Would you PLEASE say WHICH document you're

Re: Stripped-User-Name

2002-09-26 Thread Alberto Pereira
Hi, Answer my own question. My problem is I set the sql in section authorize of radiusd.conf before the sufix! Like you can see bellow: authorize { sql # # The preprocess module takes care of sanitizing some bizarre # attributes in the request, and turning them

Freeradius 0.7.0 -- Accounting-Request packet with invalid signature

2002-09-26 Thread Jeremy Hasty
Freeradius Users - The University of the Virgin Islands is running freeradius version 0.7.0 on Red Hat 7.2. To install, I built a source rpm using the spec file provided with a few modifications. I've configured rlm_ldap to authorize and authenticate remote users that dial in to a

LDAP and suffixes

2002-09-26 Thread Yildiray Ozen
Hi, How can I use the suffixes with LDAP module? Yildiray Ozen Bahar - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

segmentation fault!

2002-09-26 Thread Mehdi Roomi
runnig freeradius 0.7.1 on redhat linux 7.3 gererate segmentation fault ! here is the result of bt command in gdb : what is wrong with freeradius ? all my configuration is correct and it was working proparely before upgarde. (gdb) bt #0 0x40026eb9 in rad_mangle (data=0x80b7280,

rlm_sqlcounter.c in CVS

2002-09-26 Thread Mehdi Roomi
referring to messages http://www.mail-archive.com/freeradius-users@lists.cistron.nl/msg09377.html, after installing freeradius0.7.1 , the Segmentation fault problem is solved but it seems that some thing wrong with xlat yet. the followint is the result of runing radiusd in full debug

rlm_unix

2002-09-26 Thread Paul Khavkine
Hoi folks. When using Unix auth module, it seems like you have to set username to root in radiusd.conf (well at least on FreeBSD)., otherwise the module is unable to got the password with getpwnam(). Is there any way around it ? Thanx Paul - List info/subscribe/unsubscribe? See

rlm-sql_postgres

2002-09-26 Thread Paul Khavkine
Hi. Anyone use rlm_sql_postgres for accounting ? I seem to have a problem with the queries, i get errors when trying to insert 0 in acctstarttime or acctstoptime, the DB backend complains that 0 is not a valid timestamp representation. Anyone else had that problem ? Thanx Paul - List

Re: LDAP and suffixes

2002-09-26 Thread Kostas Kalevras
On Thu, 26 Sep 2002, Yildiray Ozen wrote: Hi, How can I use the suffixes with LDAP module? Yildiray Ozen Bahar xlat is your friend. See doc/variables.txt You can use these in your ldap configuration directives (basedn etc). -- Kostas Kalevras Network Operations Center [EMAIL

Re: Freeradius 0.7.0 -- Accounting-Request packet with invalidsignature

2002-09-26 Thread Kostas Kalevras
On Thu, 26 Sep 2002, Jeremy Hasty wrote: Freeradius Users - The University of the Virgin Islands is running freeradius version 0.7.0 on Red Hat 7.2. To install, I built a source rpm using the spec file provided with a few modifications. I've configured rlm_ldap to authorize and

Re: rlm_unix

2002-09-26 Thread Daryl Tester
Paul Khavkine wrote: When using Unix auth module, it seems like you have to set username to root in radiusd.conf (well at least on FreeBSD)., otherwise the module is unable to got the password with getpwnam(). That would be because of the permissions on the shadow password file. Is there

Re: rlm-sql_postgres

2002-09-26 Thread Yury Bokhoncovich
Hello! On Thu, 26 Sep 2002, Paul Khavkine wrote: Hi. Anyone use rlm_sql_postgres for accounting ? Sure. I seem to have a problem with the queries, i get errors when trying to insert 0 in acctstarttime or in brief: change sql.conf. You'd search thru this maillist archive for ready