(no subject)

2003-09-12 Thread Anthony Sokonikov
If there is any way to do that... How can i limit users by traffic: f.e. after downloading 5 meters user is droped. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

requesting a favour of connection between freeradius and db2

2003-09-12 Thread puneeth b
hello sir, i'm a student doing a project on freeradius server development project. i want to connect db2 to the freeradius server. hope you will solve my doubts, my doubts are : 1)in the FAQ given, form th section 4.12 DEBUGGING IT YOURSELF: though i went according to the steps given, after

rlm_sqlcounter compile error on FreeBSD

2003-09-12 Thread Alex Jeon
Hi All, The log is as below. yeppi# ./configureloading cache ./config.cachechecking for gcc... (cached) gccchecking whether the C compiler (gcc ) works... yeschecking whether the C compiler (gcc ) is a cross-compiler... nochecking whether we are using GNU C... (cached) yeschecking whether

LGPL headers

2003-09-12 Thread Nicolas Baradakis
Since I started fixing the hearders in the source, I've taken care of the files in src/lib too. These files have no license information, so I inserted the *LGPL* header: src/lib/crypt.c src/lib/dict.c src/lib/hmac.c src/lib/log.c src/lib/misc.c src/lib/missing.c src/lib/print.c

EAP/TTLS logging

2003-09-12 Thread Fastbyte
Hi, is there any logging done in TTLS? --- Sergio - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Radius auth based on Mac addresses

2003-09-12 Thread Martin Jessa
Hi Guys. I have Wireless Acess Points which are able to talk to Raius servers. I was wondering if it was possible to somehow combine Mac-address authentication with SQL stored user data, i.e [EMAIL PROTECTED] with some pass will get his MAC-address stored in a database when he authenticates and

dialup_admin installation using PHP and HTTPD

2003-09-12 Thread Bernie Liwanag
Hi to All; I still have a problem running my dialup_admin web tool in my server.I have http-2.0, php-4.2 in Red Hat 9.I ran a php test script - phpinfo() and it works!my system support the php. I have also added the following config in http.conf files: DirectoryIndex index.html index.html.var

RE: Radius auth based on Mac addresses

2003-09-12 Thread Redi Tela
Have a look at www.mikrotik.com , section Hotspot. Redi Tela Systems Administrator Mail [EMAIL PROTECTED] Phone: +355-4-256-001 Fax: +355-4-256-002 Mob: +355-69-20-80-710 -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Martin Jessa Sent: Friday,

newbee question

2003-09-12 Thread Axel Haenssen
Hi Guys, I am trying to set up a freeradius server for my Cisco Aironet 350's. All I want is simple MAC address authentication for accessing our wireless network. Although I read the man pages I am still having trouble understanding which files need to be adjusted (client.conf, radiusd.conf, user

Re: Configuration questions for FreeRadius with EAP/TTLS and LDAP

2003-09-12 Thread Alan DeKok
Nic Bernstein [EMAIL PROTECTED] wrote: I can see from the comments in the radiusd.conf file how to tell the radius server where to find which certificate(s) to use for EAP/TLS operation, but how does one specify what certificate to use for (the initial TLS phase of) the EAP/TTLS operation?

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte [EMAIL PROTECTED] wrote: is there any logging done in TTLS? What kind of logging are you looking for? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Logging Failed Attempts to MySql database

2003-09-12 Thread Drew Decker
Is it possible to log the failed attempts to a mysql database? I would like to develop a web interface for the technical support staff to let them view the Failed attempts with out having to teach them how to use SSH etc. If this is possible to do could you point me to a how-to or at least give me

Re: newbee question

2003-09-12 Thread Alan DeKok
Axel Haenssen [EMAIL PROTECTED] wrote: Although I read the man pages I am still having trouble understanding which files need to be adjusted (client.conf, radiusd.conf, user or any other?) and what exactly needs to be put in for a minimal setup. http://www.freeradius.org/doc/ See the EAP

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
Just the normal auth log of the ttls challenge; i see the tls log in the detail auth_log, but nothing of the inner authentication protocoll. I need username and logintime. Alan DeKok wrote: Fastbyte [EMAIL PROTECTED] wrote: is there any logging done in TTLS? What kind of logging are you

Re: patch for EAP-MD5 client

2003-09-12 Thread Alan DeKok
Michael Richardson [EMAIL PROTECTED] wrote: I have created a new client program, radeapclient. This is a work-in-progress. I have refactored bits of rlm_eap/eap.c into src/lib/eapcommon.c and call it from radeapclient. radeapclient is mostly radclient, which changes - it will answer the MD5

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Drew Decker wrote: Is it possible to log the failed attempts to a mysql database? I would like to develop a web interface for the technical support staff to let them view the Failed attempts with out having to teach them how to use SSH etc. If this is possible to do could you point me to a

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte [EMAIL PROTECTED] wrote: Just the normal auth log of the ttls challenge; i see the tls log in the detail auth_log, but nothing of the inner authentication protocoll. I need username and logintime. That should be logged when the tunneled authentication request is processed. That

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Alan DeKok
Nicolas Baradakis [EMAIL PROTECTED] wrote: I posted the patch in the freeradius-devel mailing but nobody with CVS write access put it in FreeRadius. Not every patch makes it into the server. Some are untested, some are unnecessary, and some are plain wrong. If enough people say a patch is

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Thor Spruyt
Drew Decker wrote: Is it possible to log the failed attempts to a mysql database? I would like to develop a web interface for the technical support staff to let them view the Failed attempts with out having to teach them how to use SSH etc. If this is possible to do could you point me to

RE: Radius auth based on Mac addresses

2003-09-12 Thread Jeremy Davis
StarOS can also do this. Jeremy -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Redi Tela Sent: Friday, September 12, 2003 6:53 AM To: [EMAIL PROTECTED] Subject: RE: Radius auth based on Mac addresses Have a look at www.mikrotik.com , section Hotspot.

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Thor Spruyt wrote: Drew Decker wrote: Is it possible to log the failed attempts to a mysql database? I would like to develop a web interface for the technical support staff to let them view the Failed attempts with out having to teach them how to use SSH etc. If this is possible to do

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
I use Odyssey client, and the problem is that in log is only anonymous user. In freeradius -X -A its possible to see which user is getting authe´d but in log files is only anonymous. Alan DeKok wrote: Fastbyte [EMAIL PROTECTED] wrote: Just the normal auth log of the ttls challenge; i see the

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Alan DeKok
Nicolas Baradakis [EMAIL PROTECTED] wrote: The second point is you'll only get the login / password in the database. For example the hotline staff may need the Calling-Station-Id too. Therefore you need the rlm_sql module to execute the SQL query of your choice after authentication. The CVS

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Alan DeKok wrote: I would suggest configuring it to log to per-day and per-hour 'detail' files, and then have a 'cron' job delete old files. I'm not sure that there's any benefit to having authentication requests logged permanently in a MySQL database. When you have multiple freeradius

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Thor Spruyt
- Original Message - From: Nicolas Baradakis [EMAIL PROTECTED] Thor Spruyt wrote: Install msyslog. That's a syslog server to replace the standard syslog server. Msyslog can put all syslog messages in a MySql database after which you can extract the necessary info from the

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
Ok the auth request is beeing logged into the detail log (auth_detail) but only with the anonymous user and looks like this: Packet-Type = Access-Request Fri Sep 12 17:13:19 2003 User-Name = anonymous NAS-IP-Address = 192.168.2.220 Called-Station-Id = 0030bd965f14

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Nicolas Baradakis
Thor Spruyt wrote: The second point is you'll only get the login / password in the database. For example the hotline staff may need the Calling-Station-Id too. Therefore you need the rlm_sql module to execute the SQL query of your choice after authentication. After authentication might

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte [EMAIL PROTECTED] wrote: Ok the auth request is beeing logged into the detail log (auth_detail) but only with the anonymous user and looks like this: ... OK... The part i see in the radius -X -A looks as follows: TTLS: Got tunneled reply RADIUS code 2

Re: EAP/TTLS logging

2003-09-12 Thread Fastbyte
Hi Alan, Sure, I´m sure and I have looked. Should i send the whole file (don´t want to spam the list) maybe you could find it. ;) Sorry but that´s the truth.. Hope that we will find a solution for this glitch... Alan DeKok wrote: Fastbyte [EMAIL PROTECTED] wrote: Ok the auth request is

Re: patch for EAP-MD5 client

2003-09-12 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- Alan == Alan DeKok [EMAIL PROTECTED] writes: radeapclient is mostly radclient, which changes - it will answer the MD5 challenge, do the calculation and reply. The patch is at: http://www.sandelman.ca/tmp/radeapclient.patch Alan diff

Re: EAP/TTLS logging

2003-09-12 Thread Alan DeKok
Fastbyte [EMAIL PROTECTED] wrote: Sure, I'm sure and I have looked. Then I don't know what the problem is. I see no reason why the 'detail' module would log the outer request, and not the inner one. Paret of the issue may be I don't know what you mean when you say auth_log and detail_log.

module failure with multiple accounting methods

2003-09-12 Thread Dave Mason
Hi, I have a Freeradius server (v0.8.1) where I may configure multiple accounting methods in radiusd.conf. These could be any of the ones supplied with Freeradius, like detail, radutmp, etc, or a new one that I wrote. My new one may succeed or fail in writing the accounting record.

Re: Logging Failed Attempts to MySql database

2003-09-12 Thread Kostas Kalevras
On Fri, 12 Sep 2003, Drew Decker wrote: Is it possible to log the failed attempts to a mysql database? I would like to develop a web interface for the technical support staff to let them view the Failed attempts with out having to teach them how to use SSH etc. If this is possible to do could

Re: EAP/TTLS logging

2003-09-12 Thread Michael Brown
This thread from the radiator list may shed some light on the situation: http://www.open.com.au/archives/radiator/2003-08/msg00084.html Quoting Fastbyte [EMAIL PROTECTED]: I use Odyssey client, and the problem is that in log is only anonymous user. In freeradius -X -A its possible to see

Proxying LEAP {Scanned}

2003-09-12 Thread Noel Kelly
I am new to the list and new to FreeRadius. I have downloaded the current version and it works very well. I am particularly interested in the LEAP authentication and have got that working. The question I have is whether FreeRadius can act as a LEAP proxy? From what I can see in the

RE: LGPL headers

2003-09-12 Thread Paul Hampson
From: Nicolas Baradakis Sent: Friday, 12 September 2003 7:23 PM Since I started fixing the hearders in the source, I've taken care of the files in src/lib too. These files have no license information, so I inserted the *LGPL* header: src/lib/crypt.c src/lib/dict.c src/lib/hmac.c

Re: Proxying LEAP {Scanned}

2003-09-12 Thread Alan DeKok
Noel Kelly [EMAIL PROTECTED] wrote: I am particularly interested in the LEAP authentication and have got that working. The question I have is whether FreeRadius can act as a LEAP proxy? From what I can see in the configuration file, it looks like it can but it would be good to have someone

lrad_rand()

2003-09-12 Thread Michael Richardson
-BEGIN PGP SIGNED MESSAGE- This function uses random_vector(), which has only two items to init it, which are the address of stack varlues. I need more entropy. Short of opening /dev/random and seeding it myself, is there something that is more strongly seeded already present in the

Re: rlm_sqlcounter compile error on FreeBSD

2003-09-12 Thread Guy Fraser
Did you try: pkg_add -r gmake Alex Jeon wrote: Hi All, The log is as below. yeppi# ./configure loading cache ./config.cache checking for gcc... (cached) gcc checking whether the C compiler (gcc ) works... yes checking whether the C compiler (gcc ) is a cross-compiler... no checking

How do I get FR 0.9.1 to work on FreeBSD

2003-09-12 Thread Guy Fraser
I seem to remeber people saying that gethostbyname_r is not thread safe, but I have not seen how to fix the problem. Just straight answers, no feeble excuses for not answering or flames. Thank You -- Guy Fraser Network Administrator The Internet Centre 780-450-6787 , 1-888-450-6787 There is a

Re: Proxying LEAP {Scanned}

2003-09-12 Thread Noel Kelly
When Cisco clients roam between APs they are required to LEAP reauthenticate and I have instances where, if the WAN link is a little congested, the client's LAN connection drops out for 20secs or so if the ACS does not respond quickly enough. I'm not sure how you'd solve this by

Accounting problems

2003-09-12 Thread Marcus Grando
Hi List, How insert user ID of radcheck in accounting table? Need change in SQL-User-Name? Any idea? Best Regards. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: lrad_rand()

2003-09-12 Thread Alan DeKok
Michael Richardson [EMAIL PROTECTED] wrote: Short of opening /dev/random and seeding it myself, is there something that is more strongly seeded already present in the tree? No. I would suggest opening /dev/random, but that blocks, which is bad. Alan DeKok. - List