Re: Please - Help Problem in freeradius an Mysql Accounting

2002-10-03 Thread Kostas Kalevras
On Thu, 3 Oct 2002, Marcelo da Silva wrote: > please , i need help, anyone answer, my question;; > > > > have one problem in version 0.7 of freeradius . >in the accounting in freeradius, the registers is not updated, the > freeradius write one register when user connect and other regis

Re: radclient:expecting '='

2002-10-03 Thread Franklin Trumpy
Read `man radclient`: radclient reads radius attribute/value pairs from it stan- dard input, or from a file specified on the command line. It then encodes these attribute/value pairs using the dic- tionary, and sends them to the remote server. It's waiting for you to

RE: MYSQL Database Support

2002-10-03 Thread Scott Harris
> > > Hi everyone, > > > > > > Using Freeradius 0.7 and mySQL 3.23.47. > > > Have spent the last few days configuring the radius server, mysql > > > database and the php dialup_admin. I have created a user with password > > > > > using the dialup_admin webpage - successful. Password is encrypted.

Re: configure Cisco AP340 for Radius

2002-10-03 Thread Jeremy Salch
On Thursday 03 October 2002 08:53 pm, augustine tsai wrote: > Hi, > > Is there anyone know how to configure Cisco Airnet 340 (AP340) through > the web browser? There is a serial port at the back of AP340. I would > like to modify the Authenticator Configuration. I am setting up > supplicant on X

configure Cisco AP340 for Radius

2002-10-03 Thread augustine tsai
Hi, Is there anyone know how to configure Cisco Airnet 340 (AP340) through the web browser? There is a serial port at the back of AP340. I would like to modify the Authenticator Configuration. I am setting up supplicant on XP and a FreeRadius on the Linux box. Here is my setup. __

Update on O'Reilly RADIUS Book

2002-10-03 Thread Jonathan Hassell
Hello, all Several of you have recently asked me about the status of the O'Reilly book on RADIUS that I wrote, and I thought I might send a short update to the list to let you know what's going on. 1. I have created a support site for the book at http://www.theradiusbook.com. There's most e

radclient:expecting '='

2002-10-03 Thread [EMAIL PROTECTED]
I just install freeradius .and tried to execute the radclient command on shell. I succesfully able to execute radtest command by removing the hased on line JohnDoe in users filewith secret testing123 as $ radtest JohnDoe hello localhost 0 testing123 but on radclient when I was tring to e

windows client for freeradius server

2002-10-03 Thread [EMAIL PROTECTED]
I have just installed a freeradius server in my one PC nad want to authenticate other windows(98/2000) based pcs connected via LAN setup. How can I get some windows based radius client able to be authenticate by the freeradius server. Any suggestions or pointers are welcome... Thanks in advan

Re: question about EAP dynamic keys generation

2002-10-03 Thread Artur Hecker
hi pat comments inline On 2 Oct 2002, Pat Calhoun wrote: > On Wed, 2002-10-02 at 15:17, Lars Viklund wrote: > > On Wed, 2002-10-02 at 09:24, Pat Calhoun wrote: > > > > send the supplicant an EAPOL-Key message with an empty Key field, which > > > > means use the specified number of bits from

Re: question about EAP dynamic keys generation

2002-10-03 Thread Artur Hecker
On 2 Oct 2002, Lars Viklund wrote: > On Wed, 2002-10-02 at 09:24, Pat Calhoun wrote: > > > send the supplicant an EAPOL-Key message with an empty Key field, which > > > means use the specified number of bits from the MS-MPPE-Send-Key as the > > > key-mapping key. > > > > check... unfortunately,

Re: question about EAP dynamic keys generation

2002-10-03 Thread Artur Hecker
On 2 Oct 2002, Lars Viklund wrote: > On Wed, 2002-10-02 at 08:08, Pat Calhoun wrote: > > Does anyone have a clue how the AP selects the right key to use as the > > key-mapping-key? > > It can either: > > invent a random key-mapping (unicast) key and send it to the supplicant > in an EAPOL-Key m

Re: question about EAP dynamic keys generation

2002-10-03 Thread Artur Hecker
On 2 Oct 2002, Pat Calhoun wrote: > > > 3.the AP uses the key received from Server to encrypt WEP key. > > > > AP actually produces two WEP keys, a broadcast and a unicast keys and > > then send those encrypted to the supplicant, using EAPOL-Key method. > > > > Does anyone have a clue how the A

Re: Please - Help Problem in freeradius an Mysql Accounting

2002-10-03 Thread Alan DeKok
"Marcelo da Silva" <[EMAIL PROTECTED]> wrote: > have one problem in version 0.7 of freeradius . >in the accounting in freeradius, the registers is not updated, the > freeradius write one register when user connect and other register when user > disconnect; Look at the SQL queries from

Please - Help Problem in freeradius an Mysql Accounting

2002-10-03 Thread Marcelo da Silva
please , i need help, anyone answer, my question;; have one problem in version 0.7 of freeradius . in the accounting in freeradius, the registers is not updated, the freeradius write one register when user connect and other register when user disconnect; mysql> select AcctSessionId,U

Accounting errors

2002-10-03 Thread Mike Denka
I've just gone into production with freeradius 0.7.1 and a few Cisco AS5400's. We migrated from the old Livingston radius and Lucent gear. I'm using multiple interfaces on my Cisco AS5400's for redundancy. So both interfaces are reporting accounting information to freeradius. In my radius.log f

Cisco and Freeradius

2002-10-03 Thread German Viera
Hello everyone, I am new in the use of free radius and I would be very grateffull if somebody could help me with some questions I have. Right now I have a Cisco AS5300 working with freeradius. I am only using the telnet authentication and it works fine. I would like to implement pre-paid servi

Radius Client for AIX

2002-10-03 Thread Nick_Ellson
For those that were working on getting Radius Client authentication to work on the AIX platform, I am finally going down that road myself now that all my Linux boxes are doing it. The last posting I saw was to try the Linux-PAM software port and try using the free-radius PAM_AUTH module to do th

Re: Binary file?

2002-10-03 Thread Chris Parker
At 09:32 AM 10/3/2002 -0600, Darren Nay wrote: >Chi, > >Most of us who use gcc on Solaris don't have the developer package >installed. Otherwise we wouldn't use gcc. Install the gcc package and try >to compile freeradius. It will work. You'll really want to install the Sun Developer tools, so

mySQL with Groups

2002-10-03 Thread William Ragsdale
Greetings, I have set up freeradius 0.7.1 using mySQL authentication. Everything works, except that users who have a group aren't being rejected based on group. I have a group called nonprof that is restricted to 8am to 5pm (Any0800-1700). Those in the group that are alloed to login (usin

Re: Binary file?

2002-10-03 Thread Darren Nay
Chi, Most of us who use gcc on Solaris don't have the developer package installed. Otherwise we wouldn't use gcc. Install the gcc package and try to compile freeradius. It will work. Darren - Original Message - From: "Chi Dang" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednes

Re: MYSQL Database Support

2002-10-03 Thread Alan DeKok
"Scott Harris" <[EMAIL PROTECTED]> wrote: > Ok ... Have followed your advice ... Radius.txt attached. Did you READ IT? > auth: type Crypt > auth: Failed to validate the user. > Login incorrect: = > [scott/\263\027\313\3471\271\032\255H\373\374\361#\274w\240] (from = > client localhost port 0)

Re: Always allow authentication regardless of password

2002-10-03 Thread Alan DeKok
Peter Nixon <[EMAIL PROTECTED]> wrote: > I have cisco gateways that are using radius only for accounting currently, > but I would like to add radius auth to them but have it always allow > everyone through regardless of username and password. DEFAULT Auth-Type := Accept Alan DeKok. - List in

Re: Difference between last and radlast?

2002-10-03 Thread Alan DeKok
Krishna <[EMAIL PROTECTED]> wrote: > The last and radlast creates lots of confusion. Why? 'last' shows the users logged onto the Unix system. 'radlast' shows the users logged onto your *network*, who have done authentication/accounting via RADIUS. They're two completely different t

Re: Binary file?

2002-10-03 Thread Alan DeKok
"Chi Dang" <[EMAIL PROTECTED]> wrote: > I have a Sun Fire V100 with Solaris 8, but no compiler. > > Does anyone has a binary for Solaris 8 that I can use? http://www.sunfreeware.com/ gets you a compiler, and almost anything else you'd like (but not a binary of the server) Alan DeKok. -

RE: MYSQL Database Support

2002-10-03 Thread Kostas Kalevras
On Thu, 3 Oct 2002, Scott Harris wrote: > > > Hi everyone, > > > > Using Freeradius 0.7 and mySQL 3.23.47. > > Have spent the last few days configuring the radius server, mysql > > database and the php dialup_admin. I have created a user with password > > > using the dialup_admin webpage - succes

Problem in freeradius an Mysql Accounting

2002-10-03 Thread Marcelo da Silva
 have one problem in version 0.7 of  freeradius .   in the  accounting in  freeradius,  the registers  is not updated, the freeradius write one register when user connect and other register when user disconnect;   mysql> select AcctSessionId,UserName,AcctStartTime,AcctStopTime from radacct w

Re: MYSQL Database Support

2002-10-03 Thread NetNITCO Systems Administration
> Ok ... Have followed your advice ... Radius.txt attached. > > < From radius.txt > > auth: type Crypt > auth: Failed to validate the user. It appears that you have PAP setup for crypt, which I believe is the default configuration in radiusd.conf. Are your passwords in the 'radcheck' table cry

Re: Dialup Admin - Help!

2002-10-03 Thread Andrew Hardman
Yeh I have, radius has full rights to add edit and delete etc. Its strange cause I can see whos logged in but cannot edit current or even add users. Although if i change any of the settings it tells me connect connect to sql database Andrew >Have you checked the permissions of your radius MySQL

RE: MYSQL Database Support

2002-10-03 Thread Scott Harris
> Hi everyone, > > Using Freeradius 0.7 and mySQL 3.23.47. > Have spent the last few days configuring the radius server, mysql > database and the php dialup_admin. I have created a user with password > using the dialup_admin webpage - successful. Password is encrypted. > I then test the user us

Always allow authentication regardless of password

2002-10-03 Thread Peter Nixon
Hi Guys I saw the answer to this on the list a month or so ago, but for the life of me can't find the email. I have cisco gateways that are using radius only for accounting currently, but I would like to add radius auth to them but have it always allow everyone through regardless of username and

Re[2]: User Response.

2002-10-03 Thread 3APA3A
Dear Nick Marino, Microsoft returns result code in MS-CHAP-Error attribute. Partially it's implemented in FreeRADIUS. You can add it to RADIUS reply. Attribute is described in RFC2548 and RFC2433. Complete list of error codes can be locatedinQ163111articleofMicrosoft Kno

RE: User Response.

2002-10-03 Thread Nick Marino
Well Microsoft sucks.. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of Kostas Kalevras Sent: Thursday, October 03, 2002 4:34 AM To: [EMAIL PROTECTED] Subject: Re: User Response. On Wed, 2 Oct 2002, Nick Marino wrote: > I was curious is there a way for

Re: MYSQL Database Support

2002-10-03 Thread Kostas Kalevras
On Thu, 3 Oct 2002, Scott Harris wrote: > Hi everyone, > > Using Freeradius 0.7 and mySQL 3.23.47. > Have spent the last few days configuring the radius server, mysql database > and the php dialup_admin. > I have created a user with password using the dialup_admin webpage - > successful. Password

Re: User Response.

2002-10-03 Thread Kostas Kalevras
On Wed, 2 Oct 2002, Nick Marino wrote: > I was curious is there a way for the disconnect reason to be displayed > on a users machine when they are rejected from radius. > > Like normally if you dial in out side your allowed time limit dialup > networking just responds with the message that you h

Re: Cannot Use "CHAP-Password"

2002-10-03 Thread 3APA3A
Dear steve, In order to use CHAP you have to store cleartext password. If you use SYSTEM authentication you have to use PAP instead. --Thursday, October 3, 2002, 1:01:20 PM, you wrote to [EMAIL PROTECTED]: s> Help?!? s> OK, Im a newbie to Freeradius. I've had some experience with Meritt i

Re: MYSQL Database Support

2002-10-03 Thread Aaron Webb
This line looks suspicious to me: Thu Oct 3 15:29:22 2002 : Error: rlm_unix: Username too long in line: # What is the username you have created? Have you tried a short one such as 'user' or something? AW On October 3, 2002 02:44 am, Scott Harris wrote: > Hi everyone, > > Using Freeradius 0

Re: Dialup Admin - Help!

2002-10-03 Thread Aaron Webb
Have you checked the permissions of your radius MySQL user? -AW On October 3, 2002 04:14 am, Andrew Hardman wrote: > This is pretty much a follow up to a previous listing. > http://lists.cistron.nl/pipermail/freeradius-users/2002-June/008022.html > > I have the same problem. I can see the users

Re: Cannot Use "CHAP-Password"

2002-10-03 Thread Kostas Kalevras
On Thu, 3 Oct 2002, steve wrote: > > Help?!? > > OK, Im a newbie to Freeradius. I've had some experience with Meritt in the > past. > I recently installed Freeradius on my Redhat 7.x system, and have an ascend > access > server. My clients file is setup correctly, and I've peeled back the users >

Cannot Use "CHAP-Password"

2002-10-03 Thread steve
Help?!? OK, Im a newbie to Freeradius. I've had some experience with Meritt in the past. I recently installed Freeradius on my Redhat 7.x system, and have an ascend access server. My clients file is setup correctly, and I've peeled back the users file to a very minimal config (attached below)

Re: Cisco and CONNECTINFO_STOP

2002-10-03 Thread Yury Bokhoncovich
Hello! On Wed, 2 Oct 2002, Alan DeKok wrote: > Yury Bokhoncovich <[EMAIL PROTECTED]> wrote: > > Hm...there are few risky chars in SQL, namely \0 and apostrophe. > > http://www.striker.ottawa.on.ca/~aland/SQLInjectionWhitePaper.pdf > > I forgot where I found it originally. Definitely, at S