Re: Status...

2003-11-10 Thread Boian Jordanov
I hope that perl module will be updated to the latest changes i did post to the list. On Fri, Nov 07, 2003 at 01:11:13PM -0500, Alan DeKok wrote: I'll be in Minneapolis all next week at a conference. My usual 5 minute response time will increase dramatically. As for other issues,

Script for creating users?

2003-11-10 Thread Zoup
Hi :) i need an script to create 600 user ( like internet cards ) on mysql , did anyone never see something like this ? -- It's a poor workman who blames his tools. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Problem in authenticating user in NIS+ compat mode

2003-11-10 Thread akongr
Hi, I am running Freeradius-0.9.2 on Sun Sparc Solaris 2.8. User logins were authenticated using NIS+ running in compat mode. I have no problem in authenticate users if the user entry in users file is: testuser Auth-Type = local password=testing123 However I could not get users

Re: Script for creating users?

2003-11-10 Thread Ulrich Walcher
Am Mon, 2003-11-10 um 21.57 schrieb Zoup: Hi :) i need an script to create 600 user ( like internet cards ) on mysql , did anyone never see something like this ? I posted one on Friday that will do what you need... Uli - List info/subscribe/unsubscribe? See

Re: rlm_passwd and groups, huntgroups

2003-11-10 Thread 3APA3A
Dear Cameron Slye, First, only one index (*) is allowed in file format and it must be near user-name. Second, rlm_passwd adds all attrbiutes to config_items, while huntgorups expects it to be in request (request_items). In order to add group name (as you was told it's better to use your own

Hash ?

2003-11-10 Thread Zoup
by default , Radius are encrypt password of users in Sql database , is there anyway to disable this ? i want to see clear password when looking at database :) -- It's a poor workman who blames his tools. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Exec-Program-Wait hangs in freeradius 0.9.2 / Solaris 9

2003-11-10 Thread Jan Baumann
Hi freeradius experts, may I kindly ask for your help? After successfully compiling freeradius 0.9.2 on Solaris 9 Sparc (latest patchlevel) with LDAP I ran into two problems: I need Exec-Program-Wait and accounting. Configured the standard way (with threads) the server frequently hangs

Re: Script for creating users?

2003-11-10 Thread Zoup
On Monday 10 November 2003 00:42, Ulrich Walcher wrote: Am Mon, 2003-11-10 um 21.57 schrieb Zoup: Hi :) i need an script to create 600 user ( like internet cards ) on mysql , did anyone never see something like this ? I posted one on Friday that will do what you need... Uli - List

dialup_admin/htdocs patch

2003-11-10 Thread Ulrich Walcher
Hi, this patch solves the problem that no stats are shown when using Postgres with the stats.php3 Didn't test it with MySQL but it should work... Uli [EMAIL PROTECTED] htdocs]$ diff -u stats.php3 stats.new.php3 --- stats.php3 2003-08-28 15:01:59.0 +0200 +++ stats.new.php3

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Kostas Kalevras
On Mon, 10 Nov 2003, Kostas Kalevras wrote: Hello, we are facing a problem when trying to test EAP-TTLS with the Meetinghouse AEGIS Client We are using a Cisco 2950 as an AP (EAPOL authentication) with recent IOS. freeradius latest cvs (two or three days old) Aegis 2.1.0 OpenSSL 0.9.7c

dialup_admin/htdocs patch2

2003-11-10 Thread Ulrich Walcher
Hi, this patch alters the percentages shown in the stats.php3 page. Now the values are percentages of the total. Also the color value is changed so the bars have more contrast to the background. Uli [EMAIL PROTECTED] htdocs]$ diff -u stats.php3 stats.new_perc.php3 --- stats.php3 2003-08-28

Re: accounting updates

2003-11-10 Thread Didi Rieder
Quoting Didi Rieder [EMAIL PROTECTED]: Hi, the default accounting_update_query in sql.conf makes no update for input and output octets and session-time. Is this correct, or shoud the query look more like the following: accounting_update_query = UPDATE ${acct_table1} SET

RE: PPP

2003-11-10 Thread Charles Francis
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Charles Francis Sent: Friday, November 07, 2003 1:25 PM To: [EMAIL PROTECTED] Subject: RE: PPP -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of

Re: Hash ?

2003-11-10 Thread Juan Pablo Fava
Hi! this is my first post :) Are you creting users whith dialup_admin??? if the answear is yes, that front end is inserting the encrypted passwords, so you have to edit admin/admin.conf and there is an option that says: crypt, change that for clear PD1: I hope this helps you. PD2: excuse my

Re: Status...

2003-11-10 Thread Alan DeKok
Rohaizam Abu Bakar [EMAIL PROTECTED] wrote: Hopefully in 1.0 release, rlm_ldap can work well with FreeBSD 5.1 Currently it has problem.. so i stick with FreeBSD 4.8 (and 4.9) Are you willing to tell us what those problems are? Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Problem in authenticating user in NIS+ compat mode

2003-11-10 Thread Alan DeKok
akongr [EMAIL PROTECTED] wrote: I have no problem in authenticate users if the user entry in users file is: testuser Auth-Type = local password=testing123 However I could not get users authenticated when I tried to authenticate users using system as follows: ... modcall: entering

Re: Exec-Program-Wait hangs in freeradius 0.9.2 / Solaris 9

2003-11-10 Thread Alan DeKok
Jan Baumann [EMAIL PROTECTED] wrote: Configured the standard way (with threads) the server frequently hangs waiting for my Exec-Program-Wait program which only sets Session-Timeout depending on the time of login. Use the 'Current-Time' attribute to perform time-based checks in the 'users'

Re: PPP

2003-11-10 Thread Alan DeKok
Charles Francis [EMAIL PROTECTED] wrote: We are having issues that the server is not returning any attributes other than authentication successful. Then run it in debugging mode, to see which entries in the 'users' file match. If it doesn't print out the line number of the entry you think it

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Alan DeKok
Kostas Kalevras [EMAIL PROTECTED] wrote: So we do get an EAP-TLS Fragment ACK. But the callback function will *never* get called for a packet like this (it isn't an actual TLS segment in any case). As a result i don't think that the checks run in the eaptls_ack_handler() function can actually

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Kostas Kalevras
On Mon, 10 Nov 2003, Alan DeKok wrote: Kostas Kalevras [EMAIL PROTECTED] wrote: So we do get an EAP-TLS Fragment ACK. But the callback function will *never* get called for a packet like this (it isn't an actual TLS segment in any case). As a result i don't think that the checks run in

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Kostas Kalevras
On Mon, 10 Nov 2003, Kostas Kalevras wrote: OK that one was a typo. I was actually referring to cbtls_msg() function in cb.c which is never called. And now that i think of it (and read the EAP-TLS RFC): EAP-Message = 0x021100061500 So we do get an EAP-TLS Fragment ACK. But the

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Alan DeKok
Kostas Kalevras [EMAIL PROTECTED] wrote: For the core dump now: ... (gdb) print s-s2 $2 = (struct ssl2_state_st *) 0x8117400 (gdb) print s-s3 $3 = (struct ssl3_state_st *) 0x0 In other words the s-s3 structure is NULL. See RFC 2716, top of page 3. TLS version 1 is required. See

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Kostas Kalevras
On Mon, 10 Nov 2003, Alan DeKok wrote: Kostas Kalevras [EMAIL PROTECTED] wrote: For the core dump now: ... (gdb) print s-s2 $2 = (struct ssl2_state_st *) 0x8117400 (gdb) print s-s3 $3 = (struct ssl3_state_st *) 0x0 In other words the s-s3 structure is NULL. See RFC 2716, top

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Alan DeKok
Kostas Kalevras [EMAIL PROTECTED] wrote: and i get: Mon Nov 10 18:33:14 2003 : Debug: rlm_eap_tls: processing TLS Mon Nov 10 18:33:14 2003 : Debug: rlm_eap_tls: Version: TLSv1 Which should be fine. So I'm a little congfused as to why s-s3 is NULL. OpenSSL versions, maybe? Alan

Re: Problem with EAP-TTLS+AEGIS Client

2003-11-10 Thread Kostas Kalevras
On Mon, 10 Nov 2003, Alan DeKok wrote: Kostas Kalevras [EMAIL PROTECTED] wrote: and i get: Mon Nov 10 18:33:14 2003 : Debug: rlm_eap_tls: processing TLS Mon Nov 10 18:33:14 2003 : Debug: rlm_eap_tls: Version: TLSv1 Which should be fine. So I'm a little congfused as to why s-s3 is

Kerberos krb5

2003-11-10 Thread Ron Wahler
I cant seem to find a good explanation of how FreeRadius Integrates in with krb5 Kerberos. Client - AP - FreeRadius - KDC ? Where FreeRadius converts the client request into a Kerberos client request , Getting a ticket from the KDC and then returning the ticket to the client

dialup_admin htdocs/user_stats.php3 patch

2003-11-10 Thread Ulrich Walcher
Hi, this patch makes user_stats.php3 work even if you don't have general_stats_use_totacct: yes in conf/admin.conf. - Added some debugging code - Now all is always available in servers drop-down [EMAIL PROTECTED] uwalcher]$ diff -u /usr/local/cvs/radiusd/dialup_admin/htdocs/user_stats.php3

RE: Kerberos krb5

2003-11-10 Thread Ron Wahler
From looking into the code it looks like FreeRadius acts as the Kerberos Client. So is this a hook just to authenticate with a KDC ? So it would not include all the other Client to Application server Kerberos Interaction. So the real client is not Kerberos aware ? I cant seem

dialup_admin html/stats.html.php3 patch

2003-11-10 Thread Ulrich Walcher
Hi, this patch will display the selected nas. Uli [EMAIL PROTECTED] uwalcher]$ diff -u /usr/local/cvs/radiusd/dialup_admin/html/stats.html.php3 /usr/local/dialup_admin/html/stats.html.php3 --- /usr/local/cvs/radiusd/dialup_admin/html/stats.html.php3 2002-01-15 15:45:35.0 +0100 +++

Re: Status...

2003-11-10 Thread Dave Mason
Hi Alan, There were some old problems from 0.8.1 which I'm not sure got fixed. In particular, the one I remember is the problem with static links in modules that have submodules. Will that fix be in 0.9.3 or 1.0.0? (I remember another one with EAP mudules not returning RLM_* return codes

Re: Status...

2003-11-10 Thread Alan DeKok
Dave Mason [EMAIL PROTECTED] wrote: There were some old problems from 0.8.1 which I'm not sure got fixed. In particular, the one I remember is the problem with static links in modules that have submodules. Will that fix be in 0.9.3 or 1.0.0? It should be fixed before 1.0. I don't

Re: OSX Installation Using Mysql

2003-11-10 Thread Julien Gabry
Hello, Thanks you for your fast answer. I have tryed your pertinent solutions about dylib, tried also to recompile rlm-sql dynamically and many other things without any more success. But anyway I will switch to panther soon. So thanks you very much for your help PS: sorry for my previous double

Re: rlm_passwd and groups, huntgroups

2003-11-10 Thread Cameron Slye
That was it, thanks.. passwd group_master { filename = ${raddbdir}/master.group format = ~GM:::*,User-Name I had =GM::: 3APA3A wrote: Dear Cameron Slye, First, only one index (*) is allowed in file format and it must be near user-name. Second,

EAP/TTLS Proxying

2003-11-10 Thread Fastbyte
Is there any news on proxying EAP/TTLS? Does the thing work? p.s. in last discussion on mailing list Alan has said that this don´t work. thanks Sergio - Srdjan Vemic - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

user Passwd change

2003-11-10 Thread Hernández
Hi List.. i'm new user of FreeRADIUS, two days ago i installed a radius server for my RAS clients. Now, my doubt is... i want all new users at the first logon can change their passwd, how can i do that? any comments? kind regards Mike __ Do you Yahoo!?

Re: EAP/TTLS Proxying

2003-11-10 Thread Alan DeKok
Fastbyte [EMAIL PROTECTED] wrote: Is there any news on proxying EAP/TTLS? Does the thing work? p.s. in last discussion on mailing list Alan has said that this don´t work. There has been no announcement that it works, so it still doesn't work. Alan DeKok. - List

Re: Kerberos krb5

2003-11-10 Thread Alan DeKok
Ron Wahler [EMAIL PROTECTED] wrote: From looking into the code it looks like FreeRadius acts as the Kerberos Client. So is this a hook just to authenticate with a KDC ? Yes. So it would not include all the other Client to Application server Kerberos Interaction. So the real client is

RE: Kerberos krb5

2003-11-10 Thread Ron Wahler
Is there an example of how to set up the krb5 authentication module? In the auth section? krb5{ } -Original Message- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Monday, November 10, 2003 4:54 PM To: [EMAIL PROTECTED] Subject: Re: Kerberos krb5 Ron Wahler [EMAIL PROTECTED]

MySQL and encrypted passwords

2003-11-10 Thread Nikolas Geyer
Hi all, Hoping someone can help me. I have just installed FreeRadius on a FreeBSD 5.1-STABLE system, using MySQL as the database backend. The problem I am running into is it wont seem to authenticate users unless they are using plain passwords. I have set pap in radiusd.conf to

Re: Kerberos krb5

2003-11-10 Thread Alan DeKok
Ron Wahler [EMAIL PROTECTED] wrote: Is there an example of how to set up the krb5 authentication module? I don't think it takes any configuration, so it should just be an empty: modules { ... krb5 { } Alan DeKok. - List info/subscribe/unsubscribe? See

RE: MySQL and encrypted passwords

2003-11-10 Thread Paul Hampson
From: Nikolas Geyer Sent: Tuesday, 11 November 2003 12:26 PM Hoping someone can help me. I have just installed FreeRadius on a FreeBSD 5.1-STABLE system, using MySQL as the database backend. The problem I am running into is it wont seem to authenticate users unless they are using plain

FreeRadius on TRU64 UNIX 5.1B

2003-11-10 Thread Dan O'Reilly
I'm trying to get freeradius running on a Tru64 system (NEE: Digital UNIX) 5.1B. THe problem: it doesn't compile properly. Sorry I can't be more succinct at this time, but I'm having a system problem can't get the recompile started for a few hours. In the meantime, has anybody successfully

Re: Hash ?

2003-11-10 Thread Zoup
On Monday 10 November 2003 05:49, Juan Pablo Fava wrote: Hi! this is my first post :) Are you creting users whith dialup_admin??? if the answear is yes, that front end is inserting the encrypted passwords, so you have to edit admin/admin.conf and there is an option that says: crypt, change