Re: Configure Errors with OpenSSL & NetSNMP

2003-12-16 Thread Oliver Graf
Hi! On Tue, Dec 16, 2003 at 12:35:43AM -0600, MkLinux Admin @ Oceanbay wrote: > This may have been covered before, but I cannot seem to find it when > searching the archives. I am new to FreeRadius, but not new to Linux. I > tried configuring FreeRadius, when checking for "checking for > a

is this a complete auth-request packet?

2003-12-16 Thread Brian Clarkson
This is pulled straight out of the output from radiusd -sfxxyz -l stdout I'm using FreeRadius 0.9.3, a Buffalo AirStation Pro, and EAP-TLS authentication. MySQL is used to store the user/pass/etc. attributes. The client is a WinXP box set up for PEAP/MS-CHAP ... I'm not sure if the client is

Re: Configure Errors with OpenSSL & NetSNMP

2003-12-16 Thread Harrie Hazewinkel
On Tuesday, December 16, 2003, at 08:11 AM, Oliver Graf wrote: Hi! On Tue, Dec 16, 2003 at 12:35:43AM -0600, MkLinux Admin @ Oceanbay wrote: This may have been covered before, but I cannot seem to find it when searching the archives. I am new to FreeRadius, but not new to Linux. I tried c

Re: PEAP problem - HELP PLEASE

2003-12-16 Thread garelli
Hi Alan! Thanks for your help. I did what you told me, but it seems that it wasn't the only error I made... I put in the users file : ourson User-Password = " testtest" and my user on the XP supplicant is also the same, but authentication is still impossible! I really don't understand becaus

Re: How to start/stop/restart FR

2003-12-16 Thread Jean-Paul Chapalain
See in Freeradius sources the file : /etc/rc.radiusd-redhat I use this script with little changes. Place the script in /etc/init.d and use chkconfig. Thanks, Ripunjay Bararia wrote: hi just had this silly question what is the preferred/normal way to start/stop/restart FR running on a RedHat box

Re: Problem EAP TLS

2003-12-16 Thread Holger Schurig
> Could you send some detail on your configuration ? You quoted about 550 lines to just add one sentence? Ahh, would it be nice for readers if writers would adopt a sensible quoting style :-) -- Try Linux 2.6 from BitKeeper for PXA2x0 CPUs at http://www.mn-logistik.de/unsupported/linux-2.6/ -

Prompt user for callback number

2003-12-16 Thread Rüther Milan
Title: Zpráva How can I force freeradius server to prompt the user for its callback number?   I cannot use %i variable because i need make out two phone number (1st call-in 2nd callback)   Thx for reply. -mri

Prompt user for callback number - TXT

2003-12-16 Thread Rüther Milan
How can I force freeradius server to prompt the user for its callback number? I cannot use %i variable because i need make out two phone number (1st call-in 2nd callback) Thx for reply. Sorry for previous nonTXT format =] -mri - List info/subscribe/unsubscribe? See http://www.freeradius.org/

[PATCH] proper .cvsignore files

2003-12-16 Thread Holger Schurig
The following patch adds proper .cvsignore patch to freeradius. -- MN-Logistik GmbH http://www.mn-logistik.de Holger Schurig Dieselstr. 18 61191 Rosbach v.d.Höhe Tel: (+49) 6003 9141 0 Fax: (+49) 6003 9141 49 # # Patch managed by http://www.mn-logistik.de/unsupported/pxa250/patcher #

Windows sending Hostname

2003-12-16 Thread Sevcik Berndt
I use Windows XP with PEAP for authentication The problem ist that in the uid at the Radius Server is always the following string: HOSTNAME\\USERNAME So our LDAP lookup is not working (requires only the username). Is there a possibility to extract only the username? Thanks Berndt -

Re: PEAP problem - HELP PLEASE

2003-12-16 Thread Brian Clarkson
[EMAIL PROTECTED] wrote: Hi Alan! Thanks for your help. I did what you told me, but it seems that it wasn't the only error I made... I put in the users file : ourson User-Password = " testtest" i think i see two potential issues here ... one is noted in the logging: [/usr/local/etc/raddb/us

Re: Windows sending Hostname

2003-12-16 Thread Brian Clarkson
do you have this part of the config enabled? preprocess { # Windows NT machines often authenticate themselves as # NT_DOMAIN\username # # If this is set to 'yes', then the NT_DOMAIN portion # of the user-name

Realy need Help

2003-12-16 Thread Lucas Oliveira
Hi everybody, I am having a problem with acct_users, i did a shell script but when the user logon, the radius print that exec-program is running but it didnt make any action. I realy do know how to set it up. Thanks Atenciosamente Lucas Oliveira Web Manager Prompt Tecnologia www.prompt-tecnologia

Getting no results with LDAP

2003-12-16 Thread Sevcik Berndt
Thanks for the tip with th NT Domain hack Brian. An other problem is the LDAP Query themself. I get no result for my Username. But the User exists and when I use the ldapsearch command with the same filter I also get an result. I use the latest CVS Version of Freeradius and openLDAP Version 2.1.

WLAN/NT-Domain Authentication

2003-12-16 Thread Kai Matla
Hi all, we have a freeRadius Server (0.9.3) authenticating WLAN-Users. It works fine with the local users file, but we want it to authenticate the users against our NT-Domain. I have learned that rlm_smb should be used to achieve this, so I re-configured freeRadius with experimental modules. T

Freeradius Ip address assignation

2003-12-16 Thread Alex Rodriguez
There is a way for freeradius to be the one asigning the dynamic ip addresses, instead of the access server assigning them? I am trying to create different groups, with different dynamic ranges of ip addressess, for a project, and i cannot do that on the ascend max. Only the pool assignation is

Re: WLAN/NT-Domain Authentication

2003-12-16 Thread Michael Griego
WLAN authentication is handled by the EAP module. Sounds like, for what you're wanting to do, you need to look at the PEAP setup. --Mike On Tue, 2003-12-16 at 08:22, Kai Matla wrote: > Hi all, > > we have a freeRadius Server (0.9.3) authenticating WLAN-Users. > It works fine with the local us

Re: Freeradius Ip address assignation

2003-12-16 Thread Chris Parker
At 08:29 AM 12/16/2003, Alex Rodriguez wrote: There is a way for freeradius to be the one asigning the dynamic ip addresses, instead of the access server assigning them? I am trying to create different groups, with different dynamic ranges of ip addressess, for a project, and i cannot do that on

Re: Getting no results with LDAP

2003-12-16 Thread Sevcik Berndt
The problem is solved! Sorry for the posting Thanks Berndt On Tue, 2003-12-16 at 15:09, Sevcik Berndt wrote: > Thanks for the tip with th NT Domain hack Brian. > > An other problem is the LDAP Query themself. I get no result for my Username. But > the User exists and when I use the ldapsearch

Re: Getting no results with LDAP

2003-12-16 Thread Kostas Kalevras
On Tue, 16 Dec 2003, Sevcik Berndt wrote: > Thanks for the tip with th NT Domain hack Brian. > > An other problem is the LDAP Query themself. I get no result for my Username. > But the User exists and when I use the ldapsearch command with the > same filter I also get an result. > > I use the late

Repeating authentication all the time

2003-12-16 Thread Sevcik Berndt
The authentication now works and I see an Access Accept Packet at the end. But the interesting is that the authentication goes a few seconds later on and the same process is repeated. The Windows XP PC never gets really authenticated. The Access Point show that the authentication was successfull (

Re: Getting no results with LDAP

2003-12-16 Thread Sevcik Berndt
The problem was the following line password = xxx The correct syntax is: password = "xxx" I copied this line from an earlier version of freeradius (about 0.9) and I think there it worked. But I updated also the openldap Server, so it is hard to say which part changed. Berndt On Tue, 2003-12-1

(no subject)

2003-12-16 Thread Paolo Ercolani
 

Re: Prompt user for callback number - TXT

2003-12-16 Thread Michael J. Hartwick
On Tue, 16 Dec 2003 at 11:19 (+0100), Rüther Milan wrote: RM> How can I force freeradius server to prompt the user for its RM> callback number? When a user dials in you want them to be prompted to their username, password and callback number? You can't. FreeRADIUS does not talk to the user. Th

Re: Can't get Login-Time to work

2003-12-16 Thread Kevork
Hi all ... Just a question about "Login-Time" ... I was trying to get this working using mysql instead files. If I put "Login-Time" attribute in radcheck table (user by user), it works OK. I tried to put it for some group, in radgroupcheck, but it doesn´t work, I always get "Access-Accept". I

Re: Repeating authentication all the time

2003-12-16 Thread Guy Fraser
Just a guess: Is there any firwall software/hardware that may not be allowing the acknowledgement to be returned to the NAS? Sevcik Berndt wrote: The authentication now works and I see an Access Accept Packet at the end. But the interesting is that the authentication goes a few seconds later on

Re: Cisco VPN3000 with freeradius

2003-12-16 Thread Spetzler, Arne \(DZ-SH\)
"Alan DeKok" <[EMAIL PROTECTED]> wrote: > From: "Alan DeKok" <[EMAIL PROTECTED]> > To: [EMAIL PROTECTED] > Subject: Re: Cisco VPN3000 with freeradius > Date: Mon, 15 Dec 2003 14:39:46 -0500 > Reply-To: [EMAIL PROTECTED] > > "Spetzler, Arne (DZ-SH)" <[EMAIL PROTECTED]> wrote: > > i'am successfull

Re: Repeating authentication all the time

2003-12-16 Thread Sevcik Berndt
They are conectet via the same network (also the same switch). The funny thing is that the Access Point says that the Client is authenticated. Berndt On Tue, 2003-12-16 at 17:34, Guy Fraser wrote: > Just a guess: > > Is there any firwall software/hardware that may not be allowing the > acknowle

Re: Freeradius Ip address assignation

2003-12-16 Thread Oliver Graf
On Tue, Dec 16, 2003 at 09:17:56AM -0600, Chris Parker wrote: > At 08:29 AM 12/16/2003, Alex Rodriguez wrote: > >There is a way for freeradius to be the one asigning the dynamic ip > >addresses, instead of the access server assigning them? > > > >I am trying to create different groups, with differ

Re: Cisco VPN3000 with freeradius

2003-12-16 Thread Oliver Graf
On Tue, Dec 16, 2003 at 05:56:40PM +0100, Spetzler, Arne (DZ-SH) wrote: > if the answer from the radius server is _fast_ (< 200ms) _and_ a lot > of debugging is enabled - then the vpn3000 may lost the udp packet which > contains the answer. > > The FREERADIUS _is_ fast - in our environement the a

Re: Cisco VPN3000 with freeradius

2003-12-16 Thread Alan DeKok
Oliver Graf <[EMAIL PROTECTED]> wrote: > So what about a answer-delay option for sluggy NASes? ;) Yuck. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: Freeradius Ip address assignation

2003-12-16 Thread Anson Rinesmith
I've been trying to get this to work. What must I enable and where to get freeradius to manage the IP pools. I have the setup mentioned with an OSPF setup using ASCEND products that can do dynamic routing. It keeps trying to look for it in my SQL db. Any help? -Original Message- From: [EM

Re: Freeradius Ip address assignation

2003-12-16 Thread Oliver Graf
On Tue, Dec 16, 2003 at 12:46:18PM -0600, Anson Rinesmith wrote: > I've been trying to get this to work. What must I enable and where to get > freeradius to manage the IP pools. I have the setup mentioned with an OSPF > setup using ASCEND products that can do dynamic routing. It keeps trying to > l

freeradius mysql simultaneous-use question URGENT

2003-12-16 Thread Soujanya Rao
Hi, I am new to freeradius. I need some help in using simultaneous-use for detecting double logins using mysql only. Here is my current set up:   > select * from radgroup check ++--- +---++---+| id | GroupName | Attribute   | op  | Value |

Re: freeradius mysql simultaneous-use question URGENT

2003-12-16 Thread Alan DeKok
Soujanya Rao <[EMAIL PROTECTED]> wrote: > Can anyone tell me where I am going wrong? This is urgent and I am > clueless as to what else needs to be done. Ensure that 'sql' is listed in the 'accounting' section. Run: radiusd -X Alan DeKok. - List info/subscribe/unsubscribe? See http://ww

Re: Freeradius Ip address assignation

2003-12-16 Thread Kostas Kalevras
On Tue, 16 Dec 2003, Oliver Graf wrote: > On Tue, Dec 16, 2003 at 12:46:18PM -0600, Anson Rinesmith wrote: > > I've been trying to get this to work. What must I enable and where to get > > freeradius to manage the IP pools. I have the setup mentioned with an OSPF > > setup using ASCEND products th

RE: Freeradius Ip address assignation

2003-12-16 Thread Anson Rinesmith
I have added an ippool main_pool { range-start = 192.168.31.1 range-stop = 192.168.31.254 netmask = 255.255.255.0 session-db = ${raddbdir}/db.ippool ip-index = ${raddbdir}/db.ipindex override = yes } in radiusd.conf What steps am I missing? -O

Turk kizlar vaoemae

2003-12-16 Thread Mustafa
Title: oxypvonyjosnjkrf Mesajýn içeriðini göremiyorsanýz buraya týklayýnýz. Msg ID: cvftgdstrw .+-Šwèþ˛±ÊâmïîžË›±Êâmäžzm§ÿðÃëyêÚv+¬¢¸?–+-þë®Èmš

A excite game

2003-12-16 Thread cdangelo
Content-Type: application/octet-stream; name=prodImage[72].jpg Content-Transfer-Encoding: base64 Content-ID: /9j/4AAQSkZJRgABAQEASABIAAD/2wBDAAUDBAQEAwUEBAQFBQUGBwwIBwcHBw8LCwkMEQ8S EhEPERETFhwXExQaFRERGCEYGh0dHx8fExciJCIeJBweHx7/2wBDAQUFBQcGBw4ICA4eFBEU Hh4eHh4eHh4eHh4eHh4eHh4eHh4eHh4eHh

Re: Custom SQL Query

2003-12-16 Thread Amgaabaatar Purevjal
Thanks for reply But in the sql.conf there are only authorise and accounting queries only. Can I add my query end of to that queries. Then how ?What I would like to do is After I received accounting query. I need to do some calculation and update some tables on 2 different database. Kevin Bonner <[

Help needed.

2003-12-16 Thread Shashidhara S Bapat
Hello All, I am a new user to this mailing list. I am using Radius server to see how does it authenticate. I am running freeradius on Linux machine and it is connected to a AP600 (Access Point) through which users are connected. Users are running on Windows 2000 Professional. Following are the conf

RE: There are no DB handles to use! skipped 0, tried to connect 0

2003-12-16 Thread Ripunjay Bararia
hi, thanks for the great feedback, now all tables are InnoDB everything was working fine, till I upgraded to the latest CVS src of 16-Dec-2003, and ran ground just to check now the radius keeps on dying on me.. have not been able to check it out but some of the interesting thing that I found