Re: Local user authentication.

k out why. > > Jul 29 16:19:43: Main.info: Starting - reading configuration files ... > Jul 29 16:19:43: Main.info: reading /usr/local/etc/raddb/config You are not using FreeRADIUS. Stop posting to this list. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: A question about implementing PEAP

rk isn't strictly required for TTLS or PEAP, but it does make it MUCH easier to understand the EAP module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Has anyone been able to get rlm_sql to auth users

to connect to the db > will cause a "crash" if the connection fails. Huh? Which version are you running? 0.3? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: problems with rlm_sql_freetds

efile, didn't you? And the makefile says "Don't ask freetds questions on the list." Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Need Help with SNMP

ucd-snmp, and ignore net-snmp. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: A question about implementing PEAP

PEAP, but it's a lot closer. A number of other people have claimed to be working on TTLS & PEAP. So far, most don't answer email, and don't submit patches. The end result is that it looks like those EAP methods won't get included into the server for a while. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: eap/tls authentication using smartcard

ange A > rlm_eap_tls: <<< TLS 1.0 Alert [length 0002], fatal handshake_failure > TLS Alert read:fatal:handshake failure > TLS_accept:failed in SSLv3 read certificate verify A There's something wrong with the certificate? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: possible bug in src/main/files.c

; > Is there another method to access the CVS archives? Anonymous CVS? The web pages on freeradius.org describe how to do this. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: possible bug in src/main/files.c

chain via last->next. Because it never looks at 'last->next'. last is a ptr to a ptr, not a ptr. > Perhaps I'm not seeing the full context of your change. Go read the code. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CISCO PIX groups

Janis Pinkis <[EMAIL PROTECTED]> wrote: > Is it possible, to setup FreeRadius, to return a group information to > the PIX? Is there a Cisco RADIUS attribute which contains that group information? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: External CHAP authorization

513379" > CHAP_PASSWORD=0x01a57eeda6a2eab68495c82beb0e53f950 What's strange about this? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: possible bug in src/main/files.c

8.1 is: The solution is simpler. Make 'last' a pointer to a pointer, instead of a pointer. That gets rid of lots of "if" statements, and we can do: PAIR_LIST *pl = NULL; PAIR_LIST **last = &pl; ... *last = t; last = &t->next ... I've commited a fix, thanks. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unprintable characters in the password

ou can get me an account on a 64-bit machine I can "ssh" into, I may be able to spend some time looking at it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Local user authentication.

ic for freeradius-devel in one day than the GNU radiusd "users" list gets in a month. And it uses "guile". Yuck. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reply message from the counter module

Hmm... if it's not there, then it's trivial enough to add. ~10 lines in src/main/xlat.c should do it. > Wrong question - wrong answer... I mean, which one should be used in > radiusd code when adding the Reply-Message? Hmm, what's the matter with > me? The code already use

Re: Reply message from the counter module

e question. Which operator should I use to add Reply-Message? > ":=" or "=" or "+="? It depends if you want one, or more than one. See the 'man' page for the 'users' file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Session/Time Limits - how?

w.freeradius.org/rfc/attributes.html#Session-Timeout The NAS takes care of kicking the user off-line. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reply message from the counter module

. > 3. Where to put these parameters in config? In a new 'messages' block. > 4. Recommended naming conventions? Something short, but long enough to be reasonably obvious. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Experimental modules

"Alex Chen" <[EMAIL PROTECTED]> wrote: > The config file in src/modules/rlm_sqlcounter/configure does not > have the execution permission bit set in my system. > > Is it set in the CVS system? No. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_ippool and ippooltool

S should be part of the server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: NAS or Radius adding extra character to password - bizarre

t looking! :-) I've had good luck with 'valgrind' lately, but it's not perfect. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: pap and ldap

Alban Dani <[EMAIL PROTECTED]> wrote: > I thought that the {SSHA} prefix was supposed to be striped ( not sure > where though ) before the password comparison, but that is not happening. See radiusd.conf, ldap section, password_header. Alan DeKok. - List info/subscribe/unsu

Re: FreeRadius (current) caching RSA ACE/Server requests

nd RSA's "security" feature and only ask > the RSA server if the cache is empty or has "expired"? Write a script on the server, or a new module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with MAC based authentication

]: module "files" returns ok > modcall: group authorize returns ok ... > rad_check_password: Found Auth-Type System > auth: type "System" > modcall: entering group authenticate > modcall[authenticate]: module "unix" returns notfound Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problems compiling new version on Mac OS X

ate (though 3.1 is my > default compiler). Here's the error I'm getting: ... Do you need rlm_dbm? If not, just delete that entire directory. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TLS AAA with handmade certificates?

ently support a CRL, but the server does need access to a set of CA files. I just followed the documents on this, and it worked for me. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: checkrad patch

Evren Yurtesen <[EMAIL PROTECTED]> wrote: > Look now, I made a unified patch of checkrad but if it is wrong then dont > blame me :) put a page on www.freeradius.org about how you want your > patches please... doc/DIFFS ? Is it really that hard to find? Alan DeKok. - List

Re: Logging - how to specify what to log?

lew of attributes being logged to the detail-* files, > except this attribute. > > Maybe FreeRADIUS doesn't get this attribute? Exactly. Make the NAS send the attribute, and FreeRADIUS will log it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Unprintable characters in the password

g on your 64-bit platform. Try the latest CVS snapshot. It has a *lot* of fixes over 0.8.1. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: gmake freeradius-0.9.0 on BSDI4.3

"Guillermo Delmastro" <[EMAIL PROTECTED]> wrote: > When I do gmake I get this error: ... > radiusd.o: In function `main': > /usr/freeradius-0.9.0/src/main/radiusd.c:845: undefined reference to > `total_active_threads' Build with support for threads.

Re: Session Timeout

t says to do. I'm even more surprised that you're wondering why it doesn't work. While I understand that the documentation for the server could use some work, it is MORE than adequate to solve the problem you're trying to address. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: CISCO and attribute 26

What represents the value 25 for the VSA ? Nothing. You misunderstood the debug output. The '6' and '25' are the LENGTH of the data in the attribute. See the RFC's. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to access Proxy-to-Realm in script?

*should* allow those attributes to be passed to the program being executed... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Custom Dictionnaries and vendor numbers.

> authentication as gandalf seems to mean it, is useless to me, so i'm > hoping to be able to get Link auth working. It was 6 years ago, and I don't recall, sorry. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: disabling failed logins

nd not much more. Any kind of additional password policy is external to the server. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Session Timeout

. I got an > error message from the server. If I typed the same command from > 'mysql', it worked fine. Then the 'mysql' tool pre-parses the statements in a way that the 'mysqld' daemon does not. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: cisco accounting attribute

what the Cisco NAS sends to the RADIUS server? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Environment variables

http://www.opengroup.org/onlinepubs/007908799/xbd/envvar.html Having '-' in an environment variable leads to problems. But you've got access to the source. If you don't like the way it works now, you can always fix it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Custom Dictionnaries and vendor numbers.

ames. See the other dictionaries for samples of what to do, too. > 3) has anyone successfully made this piece of equipment authenticate > against a Radius server (just out of curiousity)? Yes, but I worked at Gandalf at the time, so I had a bit of an unfair advantage. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Please Help! Temporarily accept all users from a realm

"Scotty B. Lowe" <[EMAIL PROTECTED]> wrote: > I tried switching the sytax as you suggested but it still does not > accept it. Any other ideas? The FAQ? "It does not work" is directly addressed. Alan DeKok. - List info/subscribe/unsubscribe? Se

Re: Please Help! Temporarily accept all users from a realm

"Scotty B. Lowe" <[EMAIL PROTECTED]> wrote: > DEFAULT Hint = "ISP", Auth-Type = Accept ^^^^^^ == := Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with Cisco's BBSM

Alex <[EMAIL PROTECTED]> wrote: > OK so if I leave op equal to '==' it should be fine (server > side). It's wrong. Read the docs. > What is wrong with the '<=' op in radreply ? Read the docs. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with Cisco's BBSM

> does not apply (just to make sure FR is well configured before > trying anything else on the BBSM :) Then I guess that the NAS doesn't use CBBSM-Bandwidth the way that you think it uses it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with Cisco's BBSM

NLY for the server, and are NEVER sent in a RADIUS packet. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: XTRadius to FreeRadius migration

t =3D "/path/to/proc_stop %u" > > DEFAULT Acct-Status-Type =3D "Alive" > Exec-Program-Account =3D "/path/to/debug update" These can be put into the 'acct_users' file. Change Exec-Program-Account to Exec-Program-Wait, and accounting should work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius with Cisco's BBSM

Alex <[EMAIL PROTECTED]> wrote: > Then I added another line, same user, attribute 'CBBSM-Bandwidth', > op='<=', Value='32768' but user is now rejected. ^^^ Huh? See the documentation for the meaning of the operators. Alan DeKok.

Re: eap/tls on freeradius

m. I've used that, and the other PDF on http://www.freeradius.org/ to set up TLS, and have had no problem with it. > Does anyone know a better manual for this or can anyone explain to me in > detail how I can get it work? I don't understand how it can be so > difficult!! It's a ba

Re: Missing check of variable makes server crash.

=?iso-8859-1?Q?Sten_Daniel_S=F8rsdal?= <[EMAIL PROTECTED]> wrote: > authhost is not checked for not being null before strlen, this leads to > a segmentation fault > on FreeBSD 4.8 (atleast) when authhost is not in proxy.conf. Fixed, thanks. Alan DeKok. - List info/subscr

Re: Radius attributes & apache

o way of doing that, without source code changes to the module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Session Timeout

n-Time for all sessions of a user > reaches the Session-Timeout, the user is denied service. rlm_counter? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: redundancy not working in freeRADIUS 0.8.1

it simply saying I don't know what to do now, and > rejecting to be safe. Yes. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: creating a new Field

als parameter the Framed-IP-Address You want to send this to the home server, when proxying? That can't be done in 0.5. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: redundancy not working in freeRADIUS 0.8.1

upposed to do. I'm not sure what you mean by "auth is working" in 0.8.1. Are you trying to get the server to *not* respond, if the DB is down? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Byte order problem?

0-pre3, BTW) see 'md5.c' in the source distributed with the PAM module. You'll probably want to add '... __alpha ...' to one of the lines... Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: GPL and Modules

, a question: Q: Is there any "magic" in those modules? i.e. Intellectual property, trade secrets, etc? If not, why not release them under the GPL? Any modifications to the server or other modules MUST be released under the GPL. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP/TLS with DLink900 AP+

t it. > > Is there any solution? Fix the client? Or, discover why the client doesn't like the last challenge from FreeRADIUS. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius and SNMP.conf

ile to allow me to be able to read the > radius entries via snmp What is unclear about the instructions in the 'snmp.conf' file? And I don't understand what you mean by "read the radius entries via snmp". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can rlm_expr be used with check items?

Let me re-phrase that: They don't know the methods which will help them solve their problems. My responses (unhelpful as they may seem at times) are guided by the intent to help people solve the *root* cause of many of their problems: bad methods. People who have good methods u

Re: Can rlm_expr be used with check items?

endless treadmill that leads nowhere, and helps no one. So far as the 'users' file goes, I'm willing to add documentation which better describes how it works. I'm NOT willing to add documentation which assumes that the user hasn't read the rest of the documentation, or which assumes that the user an idiot, and is wondering why the 'users' file won't slice bread. Yes, this is almost a religious conviction with me. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Reply attribute

e of creating an integer from the string. > But if I set this attribute in radreply, I do not see it being sent > in the reply even in the server debug message. What SQL query is run? WHat do yhou get when you run that SQL query by hand? WHat does the SQL log file say? (see sql.conf) A

Re: Cisco leap problem with pre3

module has NO race conditions possible by DESIGN. The same goes for the overlying EAP module. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Cisco leap problem with pre3

;t run fancy DB's, files over NFS, or *anything* which could cause the server to stop processing requests. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius-0.9.0-pre3 on BSDI4.3, Makefile error

had it fixed, but the fix will be in 0.9.0 The solution was "the entire world isn't Linux". Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can rlm_expr be used with check items?

to set request attributes, which CANNOT be done in the 'users' file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can rlm_expr be used with check items?

ove was an attempt to get you to educate yourself, so as to better understand how the server works. Since you're unwilling to educate yourself, I suggest you stop asking questions. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: proxy attrs on per realm bases

e using synchronous mode? How is > it working for you? Is it currently expected to work 'right'? I think it works, but I don't regularly use it. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can rlm_expr be used with check items?

. and see what happens. > I don't get it. At the top you seem to imply that rlm_expr can be > used with config items but now you are saying that it doesn't work > that way. I am obviously confused and missing something obvious. As I said before, rlm_expr works, but your attempt

Re: FreeRadius + TTLS authentication?

the TLS standard for details. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Can rlm_expr be used with check items?

Through =3D Yes Huh? That won't work even without rlm_expr. > ie. it matches the first entry in the users file where I would like > to calculate NAS-Port for the check items. I would think after that > entry has been processes check item NAS-Port would be set to 2 It doesn'

Re: MS-CHAP and PAP

And if it can find the user in passwd file, authenticates by PAP. That won't work. The RADIUS client sends either a request with MS-CHAP, or one with a User-Password. So the server cannot handle both. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius debian dependencies

mmon xlibs xlibs? What the heck for? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: freeradius debian dependencies

to use iodbc, and it won't be linked against. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: 0.8.1 , src/modules/rlm_sql/drivers/rlm_sql_postgresql/sql_postgresql.c

"Ali Gunduz" <[EMAIL PROTECTED]> wrote: > I'm having these errors while compiling 0.8.1 with postgresql support. It's a bug in 0.8.1, which is fixed in 0.9.0. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Migration from Steel Belted Radius to FreeRadius

priate freeRadius conf, db files. I haven't heard of anyone doing exactly that, and I don't know what the format of the .rif files is, so I can't say much, sorry. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Compilation problems...

SOURCE -DNDEBUG -I../include -c radiusd.c > radiusd.c: In function `main': > radiusd.c:309: structure has no member named `sa_sigaction' I'll fix it in the CVS snapshot, and 0.9.0 (when it's finally done) will also have the fix. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: configure / make problem on suse 8.0

[EMAIL PROTECTED] wrote: > Using freeradius 0.9.0-pre3.=20 > > After a ./configure and a make I get the following errors : > > -module -static -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS -Wall = ^^ There's supposed to be a program name there. Alan DeKok. -

Re: Compiling freeradius with rlm_sql_sybase

"Paul Hampson" <[EMAIL PROTECTED]> wrote: > and the following patch to sql_sybase.c (Broken whitespace, but it > should be obvious what to change.) which I suspect is only needed > for gcc 3.2+. Added, thanks. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Handling of the 'Class' attribute

k to the broken client app. The server works. The code is correct. It Does The Right Thing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

FreeRADIUS 0.9.0-pre2

onus) has fixed some long-standing memory leaks in rlm_sql. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Compiling freeradius with rlm_sql_sybase

you've got to edit it by hand to get it to work. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Access control based on NAS client

g in, you can put both user bases into one SQL database, and key off of the "Huntgroup-Name" attribute, which will be set to "userbase1", or to "userbase2", from the first word of each entry in the 'huntgroups' file. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: fopen problem with Freeradius

econd to process. That's just not true. Each SQL query probably takes ~1/10 of a second, at which point you only need 10 SQL connections to handle 100 request per second. Drop the number of connections to something reasonable, like 20, and you will have NO problems. Alan DeKok. - L

Re: freeradius and desktop login to XP/2000/NT4?

P, possibly. You may need a third party plug-in, though. For NT4, it's pretty much impossible. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Handling of the 'Class' attribute

ring "0x41424344" from > radlicent when it prints out such thing? Don't I need to remap this > into the hex values '41', '42', '43', '44'? No. That's the whole point. You don't f*ck with it. Can you PLEASE explain to me what the REAL problem is? You're so stuck on the "octets versus string" crap that I can't for the life of me figure out if there's anything in the server which needs fixing. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Handling of the 'Class' attribute

t; Class = 0x41424344 See? If you see anything else, then you've probably gone out of your way to EDIT the string for the Class attribute. e.g. the server prints: Class = 0x41424344 and you give it to radclient as: Class = "0x41424344" Do you see

Re: Logging passwords from rlm_ldap?

than most of the commercial servers I've seen: >>> "Error! Unable to perform requested action" That's about average, and totally unhelpful. I think commercial companies have a fear of giving useful debugging information. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: How to bentchmark the radius server?

I wanna deploy it to a large network for many clients. Maybe superior > hardware facilites are needed. See the 'testimonials' web page. The server requires littel resources. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: UNKNOWN NAS

"Ricardo Batista" <[EMAIL PROTECTED]> wrote: > > Hi, I have a problem using Freeradius 0.5. Yuck. Did you try upgrading? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: rlm_counter compile/configure problem / Solaris8

ociated tools can't find some gdbm information, and you're blaming FreeRADIUS, why, exactly? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Logging passwords from rlm_ldap?

nts out a number of worse things (from a security point of view) than the LDAP password. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Getting pwd with EAP-SSL

er? Not right now. > I know that I can gain it with PAP-Authentication with the > User-Passwd-Attribute, but with EAP-SSL, I dont konw. EAP-SSL? That isn't a standard. Or do you mean EAP-TLS? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: fopen problem with Freeradius

t; 100 connections for Secondary Authentication. > 100 connections for Primary Accounting. > 100 connections for Secondary Accounting. Wow... are you expecting to get 10's of 1000's of queries a second, or are you expecting that Oracle will be very slow? I don'

Re: Rejecting authentication with SQL

t; don't know how I can make FreeRADIUS deny authentication for a user that > has less than the minimum of points. rlm_counter? It adds, not subtracts, but that's easy enough to work with. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Session-Timeout

Emel`chenko Alexander <[EMAIL PROTECTED]> wrote: > why radius does`t send "Session-Timeout" if > > in acct_users: Session-Timeout cannot be used in accounting packets. See the RFC's. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Preproxy help?

? Yes. The pre-proxy section is a *method*, not a *module*. The 'authenticate' section is also a *method*, not one module. You MAY do things to the packet at the pre-proxy stage. HOW and WHAT you do depends on which module you use, and how you configure that module. Alan DeKok

Re: Dictionary and NAS tables

gt; releases? Yes, and "not really". I see no benefit to putting dictionaries in an SQL table. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Preproxy help?

realm. attr_rewrite? If it doesn't have a pre-proxy section, it's trivial enough to add. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Freeradius - MySQL

Do the SQL queries update that field? Did you try running the server in debugging mode to answer both previous questions? Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: The op field in radreply (I have RTFM :) )

Graeme Hinchliffe <[EMAIL PROTECTED]> wrote: > Righty. Is there an option that will cause the daemon to complain > about any misconfigurations it has? It complains as louad as possible about everything which is seriously wrong. If it runs, then the problems aren't too serio

Re: Problems compiling 0.8.1 under RedHat Linux 7.3

27;t work on Redhat's system, then they broke libltdl. Note that src/main/modules ALSO calls lt_dlopenext(), and DOES NOT add the '.so' to the end. To "fix" the problem, you can go to the top of the function they're patching, and add: char tmp[8192]

<    4   5   6   7   8   9   10   11   12   13   >