authorization with Framed-IP-Address

2003-08-11 Thread Dmitry Melekhov
Hello! Sorry, I'm completely newbiew with radius. Client sends following to radius server rad_recv: Access-Request packet from host 192.168.22.211:32796, id=235, length=75 User-Name = "chr" User-Password = "j\260"\332\211\017p\265\332\253C\302\311\220Bd" NAS-IP-Address =

Re: RADIUS with LDAP - radtest

2003-08-11 Thread Dustin Doris
> ok, > > Into radiusd.conf cn works like groupname atribute: > ldap { > server = "127.0.0.1" > identity = "cn=Manager,dc=prism,dc=fr" > password = secret > basedn = "dc=prism,dc=fr" > filter = "(&(objectclass=posix

Running addtional scripts when authenticating

2003-08-11 Thread Anand Nos
I have freeradius currently configured to authenticate using MySQL for our wireless access points. What I would like to do is, During the auth phase (even after) I want another perl script to be executed by freeradius. We have a database of MAC's and their users. The WAP has limited access to certa

SQL scripts

2003-08-11 Thread Dwight Ringdahl
Has anyone made a good script for SQL like users2mysql.pl that will update a record or delete a record? Preferably with the same file format as users2mysql.pl TIA Dwight DialAccess.Net - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Why is the request not rejected?

2003-08-11 Thread Alan DeKok
Sevcik Berndt <[EMAIL PROTECTED]> wrote: > I am using EAP/TLS authentication. I have created an empty users file. > The comments in the users file said when there is no match the Request > will be rejected. The 'users' file is old, and EAP-TLS is new. > Why I am getting an Access-Accept? Be

Re: RADIUS with LDAP - radtest

2003-08-11 Thread Octavio Ramirez Rojas
Le jeu 07/08/2003 à 17:13, Alan DeKok a écrit : > Octavio Ramirez Rojas <[EMAIL PROTECTED]> wrote: > > *** WITH RADTEST > ... > > rad_recv: Access-Reject packet from host 127.0.0.1:1812, id=3D79, > > length=3D20 > > rad_decode: Received Access-Reject packet from 127.0.0.1 with invalid > > signature

Re: Advantages of Using SQL ?

2003-08-11 Thread Graeme Hinchliffe
On Tue, 5 Aug 2003 10:51:45 -0400 Robert LaGrasse <[EMAIL PROTECTED]> wrote: > If I could remember the names and numbers of millions of girlfriends > simultaneously, I could still call any of them faster myself. Having a > secretary to keep track of my dates and remind me when special occasions >

Re: Log file

2003-08-11 Thread Gustavo A. Lozano
Diego. Al the information you want is stored in the detail files. var/log/radiusd/radacct/NAS-IP/detail* On Mon, 2003-08-11 at 09:44, Diego Andres Asenjo Gonzalez wrote: > Thanks for your reply. > > It was a big error. I'm new to freeradius and I couldn't find help in google. > > I have anoth

NAS under Linux with iptables.

2003-08-11 Thread Rio Martin.
Dear all, I build and run Freeradius-0.9.0 under my Linux-2.4.21 The plan is i want to build NAS under Linux with iptables under the same machines, together with the FreeRadius server. Please let me know if there is anyone in this list know somekind of tools used to build NAS under Linux with ip

RE: Cisco Aironet - MAC auth logs

2003-08-11 Thread Mike Hall
Here it isThanks for the help! Please let me know what you find, time is running out! mysql> SELECT id,UserName,Attribute,Value,op FROM radcheck WHERE Username = '00062541e359' ORDER BY id; +-+--+---+--+--+ | id | UserName | Attribute | Value

Re: Failed authentication failure

2003-08-11 Thread Alan DeKok
Brian Foster <[EMAIL PROTECTED]> wrote: > Q. is port 0 a valid port for request I don't see why not. > Q2 Does this look familiar to anyone FAILED Authentication Failure ^m^L Context? What client are you running? Did you try running the server in debugging mode, as suggested in the FAQ'

Re: huntgroups question

2003-08-11 Thread Oliver Graf
On Wed, Aug 06, 2003 at 01:57:59PM +0200, Olivier Girondel wrote: > But i can't find exactly the docs for setting things up based on > the calling station id, can anyone point me to the docs ? Just compare the Attribute with some value somegroup Calling-Station-Id == "123456789" or use a

Changing to a CVS version

2003-08-11 Thread Jason Coutermarsh
Is there a specific procedure for going from a regular release version of freeRadius to a CVS version? I currently have 0.8.1 installed on a RedHat 9 box. Thanks. Jason Coutermarsh [EMAIL PROTECTED] - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Log file

2003-08-11 Thread Alan DeKok
> I have another question .. Can I see more information in the log ?? > > I want to see disconnection causes, phone numbers, etc .. Not without source code changes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Pre-proxy attr_filter?

2003-08-11 Thread Chris van Meerendonk
On Fri, 2003-08-08 at 15:48, Alan DeKok wrote: > Chris van Meerendonk <[EMAIL PROTECTED]> wrote: > > Is it possible to filter attributes that are sent by using radius proxy > > to the home-server? Something like attr_filter in the pre-proxy stage? > > If attr_filter doesn't already have a pre-pr

Re: Pre-proxy attr_filter?

2003-08-11 Thread Chris van Meerendonk
> I sent the post-proxy patch...you probably hadn't received it by the time > you sent this. Yes, I guess I was a little impatient, a bad attitude of me... > I included a patch this time with the post-proxy() and accounting() > functions. Pay attention to the accounting function as it will mirro

RE: Using sql_counter to limit session time within a 24 hour period

2003-08-11 Thread Roger Sherwood
> I'm looking for some guidance on how to limit a user's session time (i.e. > to 1 hour) within a 24 hour period and not reset the counter afterwards. Let me rephrase this and see if I understand what you're looking for: Are you trying to create a counter such that once a user logs in, he has up

Re: checkrad always returning 0? Solved

2003-08-11 Thread Evren Yurtesen
oh yes, I missed that damn, but you can better look for > in the line anywhere... should be like this (I think) Prompt => '/\>/'); so perhaps that way it would work whatever the NAS name is... If you have different names in different NASes that would be nasty :) Evnren Ray wrote: turns out that

Why is the request not rejected?

2003-08-11 Thread Sevcik Berndt
I am using EAP/TLS authentication. I have created an empty users file. The comments in the users file said when there is no match the Request will be rejected. Why I am getting an Access-Accept? Starting - reading configuration files ... reread_config: reading radiusd.conf Config: including fil

Re: Querry on localhost testing

2003-08-11 Thread Rudramuni PH
Thanks Alan I got the answer what ever u r saying also correct... i have study more on the code . regards rudra "A

Re: freeradius 0.9 and LDAP and cisco LEAP

2003-08-11 Thread Fran Boon
[EMAIL PROTECTED] wrote: It's look like problem is in (configure: warning: FAILURE: rlm_ldap requires: liblber.) but i don't know what can i do. Can somebody help me ? liblber comes as part of the OpenLDAP package. Questions: When i would like to authenticate users from active directory per LDAP,

Using Freeradius & pam_radius_auth

2003-08-11 Thread Wei Ming Long
Hi everyone, I'm currently trying to use Freeradius for authentication for our in-house application with pam_radius_auth. The thing is when my application uses /etc/pam.d/login, I am able to login successfully, but when I use pam_radius_auth, I am still able to login successfully but Freeradius (ra

how to stop radius

2003-08-11 Thread Truong Manh Cuong
how to stop radiusd ? I often use "kill -9 1234", 1234 is pid is there another way ? Thanks alot. ***Trương Mạnh CườngSystem Engineer - SEResearch & Development Division - RDDMobile: 84-90-8392986Work Phone: 84-08-9321001 - 664 Emai

user ipaddress

2003-08-11 Thread alantu
freeradius-users in users file : testAuth-Type = Local, Password = "testing" Service-Type = Framed-User, Framed-Protocol = PPP, Framed-IP-Address = 192.168.31.152, Framed-IP-Netmask = 255.255.255.255, Framed-Routing = Broadcast-Listen, Fr

Re: Why is the request not rejected?

2003-08-11 Thread a . l . m . buxey
Hi, > I am using EAP/TLS authentication. I have created an empty users file. > The comments in the users file said when there is no match the Request > will be rejected. Why I am getting an Access-Accept? if there is no match and ONLY 'users' is being used, then there will be a reject. but you h

Re: how to stop radius

2003-08-11 Thread Double
On Monday 11 August 2003 11:25, Truong Manh Cuong wrote: > how to stop radiusd ? > I often use "kill -9 1234", 1234 is pid > is there another way ? > Thanks alot. > *** > Truong M?nh Cu?ng > System Engineer - SE > Research & Development Division -