Pre-proxy attr_filter?

2003-08-09 Thread Chris van Meerendonk
Hello, Is it possible to filter attributes that are sent by using radius proxy to the home-server? Something like attr_filter in the pre-proxy stage? Regards, Chris - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radrelay replication loop

2003-08-09 Thread Navid Sheikhol Eslami
Hello everybody, after reading (and reading, and re-reading) doc/radrelay I'm still having troubles getting radrelay to work properly. Here's a quote from doc/radrelay: " Radrelay checks the "Client-IP-Address" attribute in each record, and if it's the same as the remote server it will not

EAP/TLS Invalid ACK received

2003-08-09 Thread Jason Coutermarsh
I'm using the latest CVS build. The great news is that the new State changes are working correctly with my Netgear ME103! Now I'm having another, hopefully small, issue. Here's the error I get: auth: type "EAP" modcall: entering group authenticate rlm_eap: Request found, released from the list

Cisco VPN 3000 <-> FreeRadius <-> LDAP ?

2003-08-09 Thread Josh Whitver
Hello! Thanks for everyone's help earlier with getting the latest FreeRadius up and running on Mac OS X; it's all good now. My current problem is that I have next to no experience with this product (or any Radius product), and I need to get it talking to a Cisco 3000 VPN concentrator and our Mac

AW: AW: Authentication problems with EAP/TLS (and Enterasys)

2003-08-09 Thread Sevcik Berndt
I found the problem. In radiusd.conf fragment_size was set to 1024. I tried different values and then it worked with 500. But I have not really an idea what I have done with this line. Does someone know more about it? Thanks. Berndt > No the server just stops here with the message > Finished re

my module + rlm_sql

2003-08-09 Thread Sergey Ledenev
I have my module that have authorize, authenticate and accounting users. But i'm want to use radreply and radgroupreply addons from rlm_sql module. How can i do this working together? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

EAP and MAC Authentication worked once but it didn't twice.

2003-08-09 Thread Ivan Dario Barrera
Hi, I have this problem that is probably already documented, and I guess the solution is simple but I still cannot find the answer. I followed the HOWTOs and the authentication service seems to be working now, but it works just once. It happens that when I add a new user to the users file it can

Re: AW: Authentication problems with EAP/TLS (and Enterasys)

2003-08-09 Thread Alan DeKok
"Sevcik Berndt" <[EMAIL PROTECTED]> wrote: > No the server just stops here with the message > Finished request 1 > Going to the next request > Waking up in 6 seconds... > > Then the same process is continued 3 times (configured on AP). > There is no accept or reject. So the AP doesn't like the

Re: postgresql - dialup-admin

2003-08-09 Thread Peter Nixon
On Thu August 7 2003 12:29, Truong Manh Cuong wrote: > I wonder is there anyone use postgresql for freeradius? there is so many > thing I have to fix if I want to use postgres. > But freeradius staffs do not fix it. or may be I do wrong ? Tell us and we will either fix the problems or explain to y

Re: Cisco VPN 3000 <-> FreeRadius <-> LDAP ?

2003-08-09 Thread Dustin Doris
On Fri, 8 Aug 2003, Josh Whitver wrote: > Cool; any hints on configuring Radius itself? Specifically, for talking > to LDAP? Thanks! > if you have the source, check out /doc/rlm_ldap > -- > Josh Whitver > [EMAIL PROTECTED] / [EMAIL PROTECTED] > > > [EMAIL PROTECTED] writes: > >> Hello! Th

RE: No PPP connection

2003-08-09 Thread Brian Foster
I have no information of the NAS, I have no control over that and I have to assume that they have done the right configs. User entry: [EMAIL PROTECTED] password="zx1J0sd" Service-Type = Framed, Framed-Protocol = PPP, Framed-IP-Address = "x.y.z.v", Framed-IP-

Re: FreeRadius Authentification Problem

2003-08-09 Thread Serg Shipaev
Atanu Das wrote: Hi Serg - Original Message - From: "Serg Shipaev" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, August 06, 2003 2:24 PM Subject: Re: FreeRadius Authentification Problem In naslist the following row, I can find: 212.53.35.102212.53.35.102cisco no

cannot send stop request

2003-08-09 Thread Truong Manh Cuong
Dear all, I'm using NTRadPing I send "accounting Start" request, it's ok. then I send "accounting Stop" request, it fail:   modcall: group preacct returns noopmodcall: entering group accountingrlm_acct_unique: WARNING: Attribute NAS-Port-Id was not found in request, unique ID MAY be inconsis

Re: Debian compilation problems

2003-08-09 Thread Paul Hampson
On Fri, Aug 08, 2003 at 11:55:46AM +0200, Sevcik Berndt wrote: > Thanks for the help it works now. > > But you have to change the lines in src/modules/rlm_dbm/configure (line > 1445 and 1566). Chaning it in confugre.in and then running autoconf has > not worked. No idea why. That's because (as fa

Re: postgresql - dialup-admin

2003-08-09 Thread Truong Manh Cuong
I try to create table in dialup_admin/sql directory, and it come to fail. ERROR:  parser: parse error at or near "("and dialup_admin will not work with database fields in lower case. because of query sentence like this: SELECT UserName,AcctStopTime ... FROM..WHERE  UserName .. and the resul

RADIUS with LDAP authentication -- problems

2003-08-09 Thread Octavio Ramirez Rojas
Hi, I want to make radius authentification with ldap. I working under linux mandrake 9.0, freeradius and openldap-2.1.21 I modified radiusd.conf file like this: -- ldap { server = "127.0.0.1" identity = "cn=Manager,dc=prism,dc=fr" password = nob

Newbie - need help urgently, help appreciated

2003-08-09 Thread Lee Puay Yong
Hi,   I am trying to set up a radius server using EAP type = leap. I have a cisco airnet 1100 A.P and it is successfully so far. However, I have problem trying to authenticate it through the ldap database.   I do a web search and the most recent one I found in somewhere in april this year wh

Unknown Problem

2003-08-09 Thread Jason Coutermarsh
I'm using freeRadius with a Netgear ME103 wireless access point. I have the latest CVS build (as of Aug 8 afternoon). I first get an Access-Accept, and then it just seems to keep sending challenges. I can't find any errors in the log, so I don't know what to search for through the archives. Does an

RE: Missing crypto error?

2003-08-09 Thread Steven Fries
Try installing the newest libcrypto RPM or package. You wrote: > Hi, > I have been using Freeradius for about a year now > and I'm very happy with the quality of the software, > thank you guys! > In attempting to build a new radius server I > have encountered some difficulties compiling the new >

Re: Pre-proxy attr_filter?

2003-08-09 Thread Chris van Meerendonk
On Fri, 2003-08-08 at 15:48, Alan DeKok wrote: > Chris van Meerendonk <[EMAIL PROTECTED]> wrote: > > Is it possible to filter attributes that are sent by using radius proxy > > to the home-server? Something like attr_filter in the pre-proxy stage? > > If attr_filter doesn't already have a pre-pr

Re: Cisco VPN 3000 <-> FreeRadius <-> LDAP ?

2003-08-09 Thread Josh Whitver
Cool; any hints on configuring Radius itself? Specifically, for talking to LDAP? Thanks! -- Josh Whitver [EMAIL PROTECTED] / [EMAIL PROTECTED] [EMAIL PROTECTED] writes: >> Hello! Thanks for everyone's help earlier with getting the latest >> FreeRadius up and running on Mac OS X; it's all good