Re: proxy authentication

2003-07-08 Thread Franklin Trumpy
pbc (snip) > Sending Access-Request of id 1 to 192.168.1.25:1812 You're receiving an Access-Request from PROXY on MY RADIUS, and then proxying it back to PROXY. I doubt this is the desired behavior. Remove the realm from proxy.conf on MY RADIUS, or set the authhost and accthost to LOCAL.

Re: how to use different accounting modules for different realms

2003-06-11 Thread Franklin Trumpy
hose DEFAULT entries need to be in your 'acct_users' file. You should be able to forego the third, "empty" DEFAULT entry, too. The documentation for the four -Type modules are all basically the same file. I'll submit a patch for them if/when I have time. They could use s

Re: how to use different accounting modules for different realms

2003-06-09 Thread Franklin Trumpy
for details. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | The wound of peace is surety, Sr. UNIX Systems Administrator | Surety secure; but modest doubt is called Lighthouse Communications | The beacon of the wise, the tent that searches [EMAIL PROTECTED] | To th

Re: FreeBSD 4.7 stable + freeradius + sybase

2003-04-02 Thread Franklin Trumpy
uplicate your problem with rlm_sql_sybase on one of my 4.7-STABLE servers and see what I can find. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | The wound of peace is surety, Sr. UNIX Systems Administrator | Surety secure; but modest doubt is called Lighthouse Communications | The beacon

Re: authentication and accounting using proxy feature

2003-04-01 Thread Franklin Trumpy
d by remote RADIUS only and also I > want the accounting records to be inserted in the remote RADIUS detailed > file only. Read the few days of the list. There's an answer there. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | The wound of peace is surety, Sr. UNIX Systems Administrator

Re: Realm Specific Accounting

2003-03-24 Thread Franklin Trumpy
tory, named for the realm, based on the value of 'Realm' in the accounting packet. If no realm is defined, the directory NOREALM is used. See doc/variables.txt for more information. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | The wound of peace is surety, Sr. UNIX Systems Administrat

Re: FreeRADIUS with DEFAULT user

2002-12-20 Thread Franklin Trumpy
ibute. Now *that* you can do. Sort of... You'd need to use both the files and sql module in radius.conf. Instead of using Fall-Through, you'd use the configurable failover functionality of FreeRADIUS. See 'doc/configurable_failover' for information. That's what I'm doin

Re: Redundant entry for MySQL accounting

2002-12-10 Thread Franklin Trumpy
> > > I did; so I made something like that: > > > > accounting { > > redundant { > > sql1 > > sql2 > > } > > } > > > > But then it logs to the *two* servers. > > Hmm... that shouldn't happen. -- F

Re: Some another basic questions about features

2002-11-13 Thread Franklin Trumpy
information necessary to do what you describe. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communications | [EMAIL PROTECTED] | Say not, &qu

Re: FreeTDS + FreeBSD 4.6-STABLE

2002-11-01 Thread Franklin Trumpy
t* try to make it. I assume you've tried doing a gmake distclean and reconfiguring and rebuilding? Perhaps try configuring with --enable-strict-dependencies and see what it complains about not having. I haven't had any problems on 4.6 and 4.7-STABLE. Franklin > - Original Messa

RE: Experience

2002-11-01 Thread Franklin Trumpy
ith FreeRADIUS, check src/modules/rlm_sql/rlm_sql_mysql/db_mysql.sql Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communications | [EMAIL PROTECTED]

Re: FreeTDS + FreeBSD 4.6-STABLE

2002-11-01 Thread Franklin Trumpy
vailable to me, FreeRADIUS shouldn't try to make in src/modules/rlm_sql/drivers/rlm_sql_freetds unless you specify --with-experimental-modules. If you _do_ actually need FreeTDS, check the README in the aforementioned directory. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, &qu

RE: Experience

2002-11-01 Thread Franklin Trumpy
sweat. All the servers are running FreeBSD 4.6-STABLE or 4.7-STABLE. Alright, that's enough gushing for one day. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Com

Re: Experience

2002-10-29 Thread Franklin Trumpy
2. Three services, five servers, all running a FreeRADIUS CVS snapshot from last week, and running just fine. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighth

Re: xlat.c issue...

2002-10-16 Thread Franklin Trumpy
': > > I've just committed a fix for that, thanks. > > Alan DeKok. Works perfectly, Alan. Thank you. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth.

Re: Radclient examples needed (Freeradius problem)

2002-10-08 Thread Franklin Trumpy
oxy'. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communications | [EMAIL PROTECTED] | Say not, "I have found the path of the

Re: Radclient examples needed (Freeradius problem)

2002-10-08 Thread Franklin Trumpy
er.net:1812 auth somesecret You can also use radclient to read AV pairs from a file. See `man radclient` for the rest of the story. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a tru

xlat.c issue...

2002-10-04 Thread Franklin Trumpy
ing of braces might have something to do with the altered functonality. Any ideas? Thanks. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communications | [E

Re: radclient:expecting '='

2002-10-03 Thread Franklin Trumpy
t 0 testing123 > > > but on radclient when I was tring to execute the command with its paramets > as > > $ radclient 127.0.0.1:1812 auth testing123 > > its waits continuously nad on pressing enter; next line turn up with > message radclient:expecting '=&#x

Re: Fw: Hints & Proxy

2002-09-30 Thread Franklin Trumpy
w graceful *this* solution is either, and your mileage may vary. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," Sr. UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communications | [EMAIL PROTECTED]

Re: Question regarding Proxy-State [33] Attribute

2002-09-20 Thread Franklin Trumpy
ur FreeRADIUS server show a successful authentication, but then the actual session fails to come up, or does the FreeRADIUS server show a failed authentication? On a QWest-specific note, unless your realm is already in production, Proxy-State shouldn't preclude a successful connection at the NAS en

Re: free-radius and freebsd

2002-08-09 Thread Franklin Trumpy
> Is anyone using freeradius on a FreeBSD 4.4 platform?? > I tried compiling it wit the option --without-snmp > and I get a core dump when it want to process the > unix group file as it seems. Read the unix { } section of radiusd.conf: # Cache /etc/passwd, /etc/shadow, and /etc

Re: FreeBSD 4.6R / freeradius 0.6 - 'Bus Error'? (sorry, flakeydetails)

2002-07-18 Thread Franklin Trumpy
I've been running FreeRADIUS 0.6 with MySQL on FreeBSD 4.6-STABLE from CVS dated Jun 18 15:24:01 for almost exactly a week now with no such problems. I'd strongly advise you to cvsup your -RELEASE to -STABLE and see if that solves the problem. Franklin -- Franklin Trumpy, NFA, MNGS

Patch to eap.h (Part 2)

2002-06-14 Thread Franklin Trumpy
Fri Jun 14 03:03:18 +2002 @@ -24,6 +24,8 @@ #include "autoconf.h" +#include + #if HAVE_NETINET_IN_H #include #endif -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," UNIX Systems Administrator | but rather, "I have found

Patch to eap.h

2002-06-14 Thread Franklin Trumpy
@@ -24,6 +24,8 @@ #include "autoconf.h" +#include + #if HAVE_NETINET_IN_H #include #endif -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communicat

Proxy-To-Realm and accounting{}

2002-06-13 Thread Franklin Trumpy
x27;s just conjecture, and I'm ignorant. Any input is appreciated. Thanks. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," UNIX Systems Administrator | but rather, "I have found a truth." Lighthouse Communications | [EMAIL PROT

Debugging in daemon mode.

2002-06-06 Thread Franklin Trumpy
g? I realize the log will probably grow to massive porportions quickly, which is why I had only planned on doing it for a few days. Thanks. Franklin -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," UNIX Systems Administrator | but rather, "I have f

Re: Returning Proxy-State (or anything else) in Access-Rejectsituations.

2002-05-05 Thread Franklin Trumpy
; On a similar note, I've noticed that when I want to send a Reply-Message in > an Access-Reject situation, the RADIUS server won't send it back, just like > the above situation. -- Franklin Trumpy, NFA, MNGS, GSc | Say not, "I have found the truth," UNIX Systems Adm

Re: Two RADIUS servers on the same box

2002-05-04 Thread Franklin Trumpy
bly not at all recommended, so you might be on your own if you try it. Personally, I'm refraining from asking any questions of any nature of the list until I'm running one daemon on one port. :) Franklin -- Franklin Trumpy, NFA, MNGS, GSc | "The only people for me are the mad one

Re: radwho question

2002-04-16 Thread Franklin Trumpy
ist info/subscribe/unsubscribe? See > > http://www.freeradius.org/list/users.html > > -- > Lee Wolf > EMR Data Services > [EMAIL PROTECTED] > 623-764-0870 cell > 623-581-0842 voice > 623-582-9499 fax > > š š š š š š š š šEMR Internet > š š š š š šA Serious Internet Experie