I have rlm_eap_tls-0.8.1.so: undefined symbol:SSL_set_msg_callback while trying to use EAP/TLS authentication over LAN

2003-01-20 Thread Ian Chew
Hi! My name is Ian Chew. I am using the released version of freeRadius freeradius-0.8.1.tar.gz and used the openssl-SNAP-20021027.tar.gz for the rlm_eap_tls module during the make process of freeRaduis. Most of the steps I did were from http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm

Re: I have rlm_eap_tls-0.8.1.so: undefined symbol:SSL_set_msg_callback while trying to use EAP/TLS authentication over LAN

2003-01-20 Thread David Baer
I think you should have taken a snapshot version and not 0.8.1 of freeRADIUS. use the one that is linked in the howto and at least i got beyond that point... (though having some other problems) david - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Ken Roser FAQ - link

2003-01-20 Thread David Baer
On Monday 20 January 2003 17:41, Artur Hecker wrote: take a closer look at www.freeradius.org thanks. i was looking for some explicit faq and have rated that document (that i already knew) as a howto ;) david - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: I have rlm_eap_tls-0.8.1.so: undefinedsymbol:SSL_set_msg_callback while trying to use EAP/TLS authenticationover LAN

2003-01-20 Thread Artur Hecker
Hi Ian Ian Chew wrote: Hi! My name is Ian Chew. I am using the released version of freeRadius freeradius-0.8.1.tar.gz and used the openssl-SNAP-20021027.tar.gz for the rlm_eap_tls module during the make process of freeRaduis. [snip] /usr/local/radius/sbin/radiusd: error while

Re: I have rlm_eap_tls-0.8.1.so: undefined symbol:SSL_set_msg_callback while trying to use EAP/TLS authentication over LAN

2003-01-20 Thread Artur Hecker
no, 0.8.1 should work, too. David Baer wrote: I think you should have taken a snapshot version and not 0.8.1 of freeRADIUS. use the one that is linked in the howto and at least i got beyond that point... (though having some other problems) david -- Artur Hecker artur[at]hecker.info -

Re: HELP: EAP/TLS - XP

2003-01-20 Thread Jeffery Huang
Dear David, Do you work well via md5? I cannot work fine with ap-2000 too? :( I guess it is AP problem! ¦b ¶g¤@, 2003-01-20 14:39, David Baer ¼g¹D¡G I'm trying to get XP and freeRADIUS working together. I encountered a problem that has been reported here before

Re: HELP: EAP/TLS - XP

2003-01-20 Thread David Baer
Hi Jeffrey, Do you work well via md5? I cannot work fine with ap-2000 too? :( I guess it is AP problem! I don't think it's an AP problem, because Raymon McKey (http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm) is working with the same AP. i never tried with md5, did it work with you?

Re: HELP: EAP/TLS - XP

2003-01-20 Thread Artur Hecker
hi I don't think it's an AP problem, because Raymon McKey (http://www.impossiblereflex.com/8021x/eap-tls-HOWTO.htm) is working with the same AP. i never tried with md5, did it work with you? and you probably can't since you use XP SP1 which does not offer EAP/MD5 for wireless anymore :) do

Re: Mysql Authentication

2003-01-20 Thread Ossama Suleiman
Alan DeKok wrote: Ossama Suleiman [EMAIL PROTECTED] wrote: i am using freeradius 0.8.1 with Redhat 8.0, i wanted to use mysql authentication, the problem is that i want to authenticate users depending on Calling-Station-Id, so i added an entry (blank username)

exec_program_wait

2003-01-20 Thread Alex Zhang
Hi, I've tried to use exec_program_wait. I wrote a OCI program(radautz) to interact with oracle. In root, it can run correctly. 1. I wrote most calculation in oracle triggers, will this do harm to performance? 2. In radreply, I added a row, value = '/usr/local/bin/radauth', and in radauth I call

**Re2: I have rlm_eap_tls-0.8.1.so: undefinedsymbol:SSL_set_msg_callback while trying to use EAP/TLS authenticationover LAN

2003-01-20 Thread Ian Chew
Hi! Ian here. Thanks for the input Artur and David. Below are more information. Again, I did use this version openssl-SNAP-20021027.tar.gz when I edited the Makefile for the rlm_eap_tls. Is this version correct? cause I followed the instructions from

Re: **Re2: I have rlm_eap_tls-0.8.1.so: undefinedsymbol:SSL_set_msg_callback while trying to use EAP/TLS authenticationover LAN

2003-01-20 Thread Artur Hecker
hi Ian [ichew@sg-dsbu-ws1 lib]# rpm -qa |grep openssl openssl-0.9.6b-18 ---existing one on my Redhat Linux 7.1 openssl-devel-0.9.6-3 I am not sure if this is the one after I installed the SNAPSHOT version ?? well, there is no 0.9.7 version i can see here... -- Artur Hecker

Re: Unwanted character in time field

2003-01-20 Thread Peter Nixon
On Sat, 18 Jan 2003 01:59 am, Andy Melton wrote: I have recently installed a Free Radius server to collect accounting output from a Cisco AS5350. Up until today, it was working fine, but at 4:00 pst yesterday, the timestamps from the accounting record are prepended by an *. I'm not sure if

SQL Authorization / Authentication

2003-01-20 Thread Shannon Johnson
I got the radius server talking to the sql database finally (thanks Nick). I now have another question. I need this radius server to authenticate / authorize (still a little hazy on the difference) console and ssh access to 10 workstations. The requests would come in to the workstation, get

MPPE dynamic re-keying

2003-01-20 Thread Klaus Heck
Did I get this right? FreeRADIUS does send a dynamically created MPPE key once the authentication is performed. But there's no dynamic re-keying after certain time spans. Is that correct? And how hard is it to implement it, say with configurable time intervals? - List

freeradius and ippools

2003-01-20 Thread Norbert Wegener
I have downloaded the actual freeradius sources and wanted to make use of ippools. The module is still experimental(?) and so I configured fr with ./configure --with-experimental-modules From raddb/experimental.conf: # Do server side ip pool management. Should be added in post-auth and #

Re: freeradius and ippools

2003-01-20 Thread Alan DeKok
Norbert Wegener [EMAIL PROTECTED] wrote: I appended the following to radiusd.conf: ippool main_pool { session-db = /usr/local/etc/raddb/ippool-sess-db ip-index = /usr/local/etc/raddb/ippool-idx-db range-start = 192.168.100.20 range-stop = 192.168.100.40

Error: Accounting: logout

2003-01-20 Thread Mieczyslaw Maciejewski (EPO)
Hi In radius.log file I found some records which indicate errors. I use FreeRadius 0.8 with Oracle for accounting Could someone explain me reason for such records (as below) Sometime I don't observe (about 3% of records) packets (or at least records) Accounting Stop for appropriate Accounting

Upgrading to Freeradius from Cistron Radius

2003-01-20 Thread Kevin Hemsley
I'm looking at making the jump to Freeradius. We have TotalControl HiPerARCs and one POP of PortMasters. Any tips or caveats I should be aware of? Thanks, Kevin. -- Kevin Hemsley Systems Engineer Microserv Computer Technologies,

Re: SQL Authorization / Authentication

2003-01-20 Thread Alan DeKok
Shannon Johnson [EMAIL PROTECTED] wrote: I need this radius server to authenticate / authorize (still a little hazy on the difference) console and ssh access to 10 workstations. The requests would come in to the workstation, get routed to the server via a pam module, hit the freeradius server,

Re: MPPE dynamic re-keying

2003-01-20 Thread Alan DeKok
Artur Hecker [EMAIL PROTECTED] wrote: well, yes and no: actually, rekeying should be done between the supplicant and the AP since only those two support the actual cryptosuite, namely WEP if we are talking about 802.11. Wait for 802.11f. It over-loads RADIUS to do re-keying... It's

Compile freeradius on RH8

2003-01-20 Thread João Sá
Hi, I'm trying to compile FreeRadius 0.8.1 on a clean Red Hat 8 Install but it seems to be some problems. First, it returns an error related with DBM. I changed the line RLM_LIBS on the file src/modules/rlm_dbm/Makefile to RLM_LIBS= -lgdbm ant it worked. After that I needed

Re: Re: SQL Authorization / Authentication

2003-01-20 Thread Shannon Johnson
Alan,Thats what I thought, but the definition of Authorization and Authentication got me a little confused. New question now... I have the MySQL database set up with a test account (username test, password test). When I run radiusd xxp 1645 and try radtest test test localhost:1645 0 testing,

Re: SQL Authorization / Authentication

2003-01-20 Thread Alan DeKok
Shannon Johnson [EMAIL PROTECTED] wrote: That's what I thought, but the definition of Authorization and Authentication got me a little confused. New question now... ... rlm_sql (sql): User not found in radgroupcheck rlm_sql (sql): User not found rlm_sql (sql): Released sql socket id: 2

Re: freeradius and ippools

2003-01-20 Thread Norbert Wegener
Thank you Alan, with this little bit of - for me - missing information it nearly worked out of the box. Just another question: How can I query which ipaddresses of the pool are in use? Only ping them might not be the best solution. Thanks Norbert Alan DeKok schrieb: Norbert Wegener [EMAIL

Dialup_admin

2003-01-20 Thread System Administrator
can anyone tell me why I get this on the left frame of my dialup admin install? ?php $auth_user = $HTTP_SERVER_VARS[PHP_AUTH_USER]; if ($auth_user){ if (is_file(../html/buttons/$auth_user/buttons.html.php3)) include(../html/buttons/$auth_user/buttons.html.php3); else{ if

RE: Dialup_admin

2003-01-20 Thread Duane Barnes
Do you have .php3 enabled as a proper extension in your httpd.conf file? -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] On Behalf Of System Administrator Sent: Monday, January 20, 2003 2:46 PM To: [EMAIL PROTECTED] Subject: Dialup_admin can anyone tell me why I get

Re: Re: Re: SQL Authorization / Authentication

2003-01-20 Thread Shannon Johnson
Alan, My users file isnt very large. Im not going to pretend to know what most of this means, but suffice it to say that I dont have any dial-in users, so Im not sure that the PPP, CSLIP, or SLIP parts apply. If they dont, should I comment them out? Also, I dont think the Default

radiusd dying when closing connection to postgres

2003-01-20 Thread Moisés David Rincón D'Hoyos
Hi, I have installed FR0.8.1 in RedHat7.3. radiusd runs fine for some hours sometimes but always at some point it crashes dumping a core, ending in one of two functions: (gdb) bt #0 0x4207ad9e in chunk_free () from /lib/i686/libc.so.6 #1 0x4207ad24 in free () from /lib/i686/libc.so.6 #2

Re: SQL Authorization / Authentication

2003-01-20 Thread Nick Davis
Shannon, My users file isn't very large. I'm not going to pretend to know what most of this means, but suffice it to say that I don't have any dial-in users, so I'm not sure that the PPP, CSLIP, or SLIP parts apply. If they don't, should I comment them out? If there is something in your

Re: SQL Authorization / Authentication

2003-01-20 Thread Alan DeKok
Shannon Johnson [EMAIL PROTECTED] wrote: My users file isn't very large. I'm not going to pretend to know what most of this means, That would appear to be the foundation of your problems wrth the SQL module. The SQL configuration mirrors the 'users' file, so if you don't understand the

Re: freeradius and ippools

2003-01-20 Thread Alan DeKok
Norbert Wegener [EMAIL PROTECTED] wrote: Just another question: How can I query which ipaddresses of the pool are in use? Only ping them might not be the best solution. For the IP pools module, I would expect that there could be an associated utility program which would print out that

Re: Dialup_admin

2003-01-20 Thread System Administrator
using apache 2.0 seems to be different setup then what I am used to thanks for the tip though - Original Message - From: Duane Barnes [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Monday, January 20, 2003 3:02 PM Subject: RE: Dialup_admin Do you have .php3 enabled as a proper

WISP Consultant Needed!

2003-01-20 Thread William Pullinger
I'm looking for someone experienced with wireless internet provider setups. We will be using Senao wireless routers and require an authentication system (preferable web based) for users to login (or purchase time usage for example). If you're knowledgable in this field, please contact me

Problem with 1,000,000 users

2003-01-20 Thread leaobicalho
Why when use 1,000,000 of users, with users file, show this message??? if i use 100,000 no have problem, but when i use many always have problem...why? my struct of uses files: login1 auth-type=accept login2 auth-type=accept login3 auth-type=accept login4 auth-type=accept root@lala radiusd

Any experience with Symbol APs?

2003-01-20 Thread Chad Houston
I've seen several posts about the inconsistency of wireless access points. I'm trying to use FreeRADIUS 0.8.1, a Symbol AP4131, and EAP/MD5 (on Windows XP, *without* service pack 1). The identity request is received by FreeRADIUS, and the challenge is sent correctly back to the supplicant.

Re: Problem with 1,000,000 users

2003-01-20 Thread Andrew Pilley
On Mon, Jan 20, 2003 at 08:12:50PM -0200, leaobicalho wrote: Why when use 1,000,000 of users, with users file, show this message??? if i use 100,000 no have problem, but when i use many always have problem...why? my struct of uses files: login1 auth-type=accept login2 auth-type=accept

Re: Problem with 1,000,000 users

2003-01-20 Thread Evren Yurtesen
are you running out of memory? did you check? a guess would be that freeradius is trying to load the file into memory. On Mon, 20 Jan 2003, leaobicalho wrote: Why when use 1,000,000 of users, with users file, show this message??? if i use 100,000 no have problem, but when i use many always

Re: Problem with 1,000,000 users

2003-01-20 Thread leaobicalho
Yes, the freeradius load for memory, but i think that problem is not memory, because, im have 256RAM, AtholonXP 1.5XP, and the size of file are only 50MB. are you running out of memory? did you check? a guess would be that freeradius is trying to load the file into memory. On Mon, 20 Jan

Re: Problem with 1,000,000 users

2003-01-20 Thread Evren Yurtesen
Well did you check the system messages right before the process is killed? If you ran out of memory and swap, definetely there should be something coming. Or like this other email on the list, you might have hit to some ulimit limits. Evren On Mon, 20 Jan 2003, leaobicalho wrote: Yes, the

Re: HELP: EAP/TLS - XP

2003-01-20 Thread David Baer
hi, thanks for looking at the matter, Artur. in fact, unless you shortened your post, there seems to be two requests one after another or am i wrong? because radius actually doesn't do anything about the wrong request. it denies the next one... well, it's perhaps normal. well strange is (or

Multiple Password Files

2003-01-20 Thread Craig
I have been trying to get [EMAIL PROTECTED] to authenticated from /etc/shadow1 [EMAIL PROTECTED] to authenticated from /etc/shadow2 for a while but don't know how. Does freeradius allow this? Surely multiple password files/databases/locations would be supported, since many ISP's with resellers