Re: SU, and here there

2004-01-07 Thread Margery Morris
Free Cable- TV chick insensible breach youngster depositary seam bald cohort brucellosis reach demean brake rope diesel slacken chilblain florence nathaniel phenolic etc hermeneutic peg douglass rheology shannon precious offload advisory bennett prokaryote weller creditor ponder ericsson gumdr

Report to Recipient(s)

2004-01-07 Thread EINNL-194/SCCT/EMEA/FEDEX%SCCT
Incident Information:- Originator: [EMAIL PROTECTED] Recipients: [EMAIL PROTECTED] Subject:Freeradius-Users digest, Vol 1 #2697 - 6 msgs The file mime001.txt (1c80.eml) you received was infected with the Exploit-MIME.gen.b virus and was deleted. - List info/subscribe/unsubscribe? See

Language

2004-01-07 Thread Ch1tcc
Content-Type: application/octet-stream; name=search[1].htm Content-Transfer-Encoding: base64 Content-ID: PCFET0NUWVBFIEhUTUwgUFVCTElDICItLy9XM0MvL0RURCBIVE1MIDQuMDEvL0VOIiAiaHR0 cDovL3d3dy53My5vcmcvVFIvaHRtbDQvc3RyaWN0LmR0ZCI+CjxCQVNFIEhSRUY9Imh0dHA6 Ly9kcnMueWFob28uY29tL1M9Mjc2NjY3OS9LPW

Re: compliation problem - cygwin

2004-01-07 Thread gabriel russell
s, et al. - I'm sure that if you stick with it you can figure it out. Whenever I get to where you are, I throw -v option in my gcc command to see the linker command and then I play with making the linker command work specifically. I might try writing a simple c program that links to the crypt l

raddb users file

2004-01-07 Thread Byron
Can anyone send me a copy of their users file, I am setting up freeradius 0.9.3 on slackware. I am used to livingston so I need to see a users file because I know a few words are diffrent. Byron - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Disabling User

2004-01-07 Thread Byron
We have a denyuser group and we move the username into, they are not allowed to dial up but it will allow them to check mail. If you dont want them to check mail I think the way you are doing it is easy and works.. byron - Original Message - From: "Devin Atencio" <[EMAIL PROTECTED]> To: <[

Re: freeradius + MySQL on remote host question

2004-01-07 Thread Robert Causey
Alan, Thanks for your reply. Actually I spent considerable time going through the FAQ, docs, etc. I even committed "death by Google". I can't tell you how much time I invested in research before posting to the list. Specifically my challenge is this. 1) I am new to freeradius, and radius in g

Anyone using rlm_ldap against Oracle Internet Directory?

2004-01-07 Thread David Van Cleef
Particularly in relation to standard dialup and pppoe-adsl/ftth auth. I'd appreciate an off-list contact (since little of this is strictly relevant to FR) if you are. I have my proof-of-concept design basically functioning but have a couple oidldapd-specific questions I'd like to bounce off someo

Re: Mailing List suggestion...

2004-01-07 Thread Byron
Hey Vincent are you always so positive??? Byron - Original Message - From: <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 07, 2004 2:07 PM Subject: Re: Mailing List suggestion... > [EMAIL PROTECTED] wrote on 01/07/2004 01:59:26 > PM: > > > Greetings... > > > > Would

Re: Implementing a realtime-prepaid platform with freeradius

2004-01-07 Thread Robert Causey
German, I am currently working on something similar. I can't go into great detail because I am under NDA, however I can give you the general approach. In Cisco VOIP aplications it is possible to do authentication via what Cisco refers to as AAA authentication. This realy does authenication to

Re: Disabling User

2004-01-07 Thread Richard Bailey
If it is a linux system try passwd -l username to lock account and passwd -u username to unlock. Richard - Original Message - From: "Bill Campbell" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Wednesday, January 07, 2004 1:27 PM Subject: Re: Disabling User > On Wed, Jan 07, 2004, A

Re: IP setting for supplicant

2004-01-07 Thread matt morris
So should I enable DHCP for the AP? Also, another thing, when I set the supplicant's ip settings to auto, the AP cannot be reached (no reply from ping, can't access the AP). I can only access and ping the AP when I set a static ip for the supplicant. Thanks From: "Alan DeKok" <[EMAIL PROTECTE

RE: Free Radius and non-plain text passwords (resolution)

2004-01-07 Thread Phillip Ames
Replying to two messages here... > -Original Message- > From: [EMAIL PROTECTED] > [mailto:[EMAIL PROTECTED] On > Behalf Of Alan DeKok > Sent: Wednesday, January 07, 2004 11:11 AM > To: [EMAIL PROTECTED] > Subject: Re: Free Radius and non-plain text passwords > > > "Phillip Ames" <[EM

Re: Detail File

2004-01-07 Thread Alan DeKok
"Bobby R. Cox" <[EMAIL PROTECTED]> wrote: > I would like the detail file/dir to look like this... > > /usr/var/radius/radacct/detail The server doesn't look up hostnames, because it takes too long. > I am not sure on the syntax to get the host name to show rather then > the client ip address.

Detail File

2004-01-07 Thread Bobby R. Cox
Hello, I am tweaking the detail section of the radiusd.conf. It states in the file that you can have the detail file created under the host directory. Currently mine looks like this... detailfile = ${radacctdir}/%{Client-IP-Address}/detail-%Y%m%d which created a detail file/dir like such...

Re: IP setting for supplicant

2004-01-07 Thread Alan DeKok
"matt morris" <[EMAIL PROTECTED]> wrote: > I tried taking out the Framed-IP-Netmask line and set my supplicant's ip to > be dynamic after, but it still doesn't have access to the internet. The ip > and netmask of the supplicant are both still 0.0.0.0, and the DHCP server is > 255.255.255.255 fro

Re: IP setting for supplicant

2004-01-07 Thread matt morris
Thanks for your reply. I tried taking out the Framed-IP-Netmask line and set my supplicant's ip to be dynamic after, but it still doesn't have access to the internet. The ip and netmask of the supplicant are both still 0.0.0.0, and the DHCP server is 255.255.255.255 from ipconfig. I want to ask

Re: Disabling User

2004-01-07 Thread Bill Campbell
On Wed, Jan 07, 2004, Anson Rinesmith wrote: >Just set their Auth-Type := Reject, no need to change the password. That's fine for radius, but doesn't solve the larger problem (e.g. POP/IMAP access and other things that depend on the password). Bill -- INTERNET: [EMAIL PROTECTED] Bill Campbell;

RE: Disabling User

2004-01-07 Thread Anson Rinesmith
Just set their Auth-Type := Reject, no need to change the password. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Devin Atencio Sent: Wednesday, January 07, 2004 12:11 PM To: [EMAIL PROTECTED] Subject: Disabling User I was wondering if there was an eas

Re: Mailing List suggestion...

2004-01-07 Thread Vincent_Giovannone
[EMAIL PROTECTED] wrote on 01/07/2004 01:59:26 PM: > Greetings... > > Would it be a good idea to replace the footer added to each message > with something like: > > - > Before posting please read/search: > http://www.freeradius.org/faq > http://lists.cistron.nl/pipermail/freeradius-users > ht

Re: Implementing a realtime-prepaid platform with freeradius

2004-01-07 Thread "P . P . "
Hi German, I'm sure you aren't alone - there are many people who think of this (including me). There are some projects started for opensource billing that supports prepaid You may try to look at Mike Tkachuk's http://sourceforge.net/projects/voipbill/, it's not finished yet though. Through perl s

Re[4]: freeradius MSCHAPv2 possible bug

2004-01-07 Thread Anton Golubev
Hello Alan, You've been absolutely right. The bug was in radius module for pppd and it sent wrong MS-CHAP2-Response value for freeradius. Problem was in function, which compose this attribute from client authentication response. Format of PPP response packet and MS-CHAP-Response av pair differs sl

Mailing List suggestion...

2004-01-07 Thread Miguel Marques
Greetings... Would it be a good idea to replace the footer added to each message with something like: - Before posting please read/search: http://www.freeradius.org/faq http://lists.cistron.nl/pipermail/freeradius-users http://lists.cistron.nl/pipermail/freeradius-devel http://www.google.com Li

Re: Freeradius on Debian

2004-01-07 Thread Nick Davis
You should really post questions directly to the freeradius mailing list. That way other people can see the answers provided. > I was reading your answer in the freeradius forum, and I perceived that you > use DEBIAN. I'm using DEBIAN too, and I'm having a problem with my > freeradius configurati

Re: freeradius MSCHAPv2 possible bug

2004-01-07 Thread Alan DeKok
Mauro Luzi <[EMAIL PROTECTED]> wrote: > I tried all options: NT-Password and clear-text User-Password, it don't > work with mschap-v2. with other autentications (pap, chap and mschap-v1) > work fine. It works for me, and other people on this list. What platform are you running on? Alan DeK

Re: freeradius + MySQL on remote host question

2004-01-07 Thread Alan DeKok
Robert Causey <[EMAIL PROTECTED]> wrote: > After we built the shared library we could run the > freeradius config script and it would detect the presence of the mysql > client. We than ran make and it did not report any errors. And it won't run. Why? Your ld.so doesn't know about the library

Implementing a realtime-prepaid platform with freeradius

2004-01-07 Thread German Viera
Hi everybody,       I have been working with free radius for a while and I think is one of the most usefull open source radius servers arround. Right now I am just logging accounting details for a VoIP platform, also making auth to users (both with the text detail and users file.) My questin

Re: Disabling User

2004-01-07 Thread Alan DeKok
"Devin Atencio" <[EMAIL PROTECTED]> wrote: > I was wondering if there was an easy way to disable a user so that if they > Try to dialup it would deny them access. Currently our method is we just > Change the user's password. I have tried to set Simulatenous-Use to 0 but > That doesn't appear to wo

Re: Disabling User

2004-01-07 Thread Bill Campbell
On Wed, Jan 07, 2004, Devin Atencio wrote: > >I was wondering if there was an easy way to disable a user so that if they >Try to dialup it would deny them access. Currently our method is we just >Change the user's password. I have tried to set Simulatenous-Use to 0 but >That doesn't appear to work

Disabling User

2004-01-07 Thread Devin Atencio
I was wondering if there was an easy way to disable a user so that if they Try to dialup it would deny them access. Currently our method is we just Change the user's password. I have tried to set Simulatenous-Use to 0 but That doesn't appear to work. Any ideas on a good way ? - List info/subs

huntgroup file

2004-01-07 Thread Santiago Balaguer García
Can someone send me an example of huntgroup file and it ísn`t the huntgroup one that appears in the examples or faqs? Thanks _ Charla con tus amigos en línea mediante MSN Messenger. http://messenger.microsoft.com/es - List in

Re: compliation problem - cygwin

2004-01-07 Thread Simon Gray
Thanks for your help. > "-/usr/lib" ? That isn't a valid option to gcc. Try "-L/usr/lib" However, that last one was a bit of a red herring/typo the real output does contain "-L/usr/lib" Any other ideas? S - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

RE: MSBlaster and Freeradius

2004-01-07 Thread Drew Weaver
I would also suggest moving freeradius to its own server that way when a new worm is released you wont have to keep changing your filters. -Drew -Original Message- From: Alan DeKok [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 07, 2004 11:22 AM To: [EMAIL PROTECTED] Subject: Re: MS

Re: MSBlaster and Freeradius

2004-01-07 Thread Alan DeKok
Josh Howlett <[EMAIL PROTECTED]> wrote: > My best guess is that the MSBlaster UDP from the user(s) is swamping the > kernel, resulting in RADIUS UDP packets getting lost. Yup. The kernel has a limited queue for incoming packets. > Has anyone else seen this, or have any suggestions? Put a fi

RE: MSBlaster and Freeradius

2004-01-07 Thread Josh Howlett
Yes, that's correct. josh. On Wed, 2004-01-07 at 16:41, Drew Weaver wrote: > This homebrew nas is the same box that is running your radius server? > > -Drew > > > -Original Message- > From: Josh Howlett [mailto:[EMAIL PROTECTED] > Sent: Wednesday, January 07, 2004 11:10 AM > To: [EMAI

RE: MSBlaster and Freeradius

2004-01-07 Thread Drew Weaver
This homebrew nas is the same box that is running your radius server? -Drew -Original Message- From: Josh Howlett [mailto:[EMAIL PROTECTED] Sent: Wednesday, January 07, 2004 11:10 AM To: [EMAIL PROTECTED] Subject: MSBlaster and Freeradius We have been experiencing problems with the MSB

MSBlaster and Freeradius

2004-01-07 Thread Josh Howlett
We have been experiencing problems with the MSBlaster worm and Freeradius. The Freeradius daemon is running on a (homebrew) NAS that also terminates VPN sessions. If a VPN user is infected, it seems that the MSBlaster traffic prevents FreeRADIUS from operating correctly. The exact mode of failur

Re: Free Radius and non-plain text passwords

2004-01-07 Thread Alan DeKok
"Phillip Ames" <[EMAIL PROTECTED]> wrote: > I have been able to get Free Radius to authenticate from a router > using CHAP. The problem with this is that the passwords are stored > in plain text in the users file on the authentication server. See the FAQ. This isn't much of a problem. > 1. I

Re: Free Radius and non-plain text passwords (resolution)

2004-01-07 Thread Alan DeKok
"Phillip Ames" <[EMAIL PROTECTED]> wrote: > Now my user password file contains entries like this: > > bad Auth-Type := System, Crypt-Password == > "$1$37l.BBR2$bcYRkPw.bkkTAz3gkjsZZ1" > > Where "bad" is the user and "$1$37l.BBR2$bcYRkPw.bkkTAz3gkjsZZ1" is the > md5 of "password" That won't e

RE: Settings

2004-01-07 Thread Kirti S. Bajwa
Vincent: Thank you for your response. It does make sense & you have been kind to explain and respond to my concerns/questions. It is interesting how many people do not know the answer to this question. I have received several direct emails from people on this list who has mentioned that they also

Re: Trying to set no authentication for users

2004-01-07 Thread Alan DeKok
John Horne <[EMAIL PROTECTED]> wrote: ... > This all works fine; the user is authenticated and radiusd sees that > MS-CHAPv2 is being used (and is to be used). Hmm... so MS-CHAPv2 works, as I suspected. Recent discussion on the list says it's broken on some systems, but I don't know why. > How

BUG?? Couldn't open syslog/radius.log for logging: Not a directory

2004-01-07 Thread Christopher D. Kotran
OS: RH9.0 Platform: i386 FreeRadius Version: 0.9.3 Problem Summary: radiusd: radiusd: Couldn't open syslog/radius.log for logging: Not a directory Problem Detials: It appears that freeradius is attempting to log to a file when asked to to log to the syslog. Listed below is the config settings an

Re: compliation problem - cygwin

2004-01-07 Thread Alan DeKok
"Simon Gray" <[EMAIL PROTECTED]> wrote: > I've spent a good few hours search through the mailing lists, google and > read doc/CYGWIN without any luck. ... > gcc .libs/radiusdS.o -g -O2 -D_REENTRANT -D_POSIX_PTHREAD_SEMANTICS ... > -Wl,--export-dynamic -/usr/lib "-/usr/lib" ? That isn't a valid

Re: IP setting for supplicant

2004-01-07 Thread Alan DeKok
"matt morris" <[EMAIL PROTECTED]> wrote: > (2) Redhat 7.2 with Freeradius 0.9.3, with its own WAN ip; in the user file: > Framed-IP-Address =192.168.0.105, Framed-IP-Netmask = 255.255.255.0, > Framed-MTU = 1380 See the FAQ for reasons why you don't want to use Framed-IP-Netmask. > (Actually a

Trying to set no authentication for users

2004-01-07 Thread John Horne
Hello, I have been asked to run through some disaster recovery checks for our servers, and one (pair) of these servers runs RADIUS but does so in order to talk to a Microsoft IAS server (for the actual authentication). In the event of a disaster the IAS server may be lost, and as such I would like

Dave

2004-01-07 Thread CarlosFelipe Rojas Gomez
  Help me with the file CDR , i can´t create a rlm_cdr, i don´t understand how I create a file radius with the CDrs of the open gatekeeper GNU   Thanks   CARLOS FELIPE ROJAS GOMEZ     <>

RE: Settings

2004-01-07 Thread Vincent_Giovannone
[EMAIL PROTECTED] wrote on 01/06/2004 04:48:36 PM: > Max_request setting in "radius.conf" is supposed to be the maximum number of > requests which the server keeps track of. It is supposed to be 4 * number of > clients. > > In this situation what is a client: > > (1) is it number of NAS being

compliation problem - cygwin

2004-01-07 Thread Simon Gray
Hi,   I've spent a good few hours search through the mailing lists, google and read doc/CYGWIN without any luck.   Have removed all unneeded modules. Followed all suggestions from the back dated mailing lists with cygwin.   Currently using:   ./configure -without-snmp -enable-static --disabl

You will not find Prescripti*on Dr!ugs cheaper anywhere else

2004-01-07 Thread Billie Stanton

RE: Solaries Binaries?

2004-01-07 Thread Patrick de Ruiter
Hi,   Maybe you should focus on figurering  out why the box doesnt compile software, I think youre just missing some essential packages. If you like I can suply you with a list of the packages you need to be able to compile software.   Cheers Patrick -Original Message-From: [E

(no subject)

2004-01-07 Thread Tracie Howe
Do you need h_g hormone It has been labeled the health discovery of the decade. Achieve many benefits, including: Build Muscle Tone Increase Energy Energy Level  - 84% Increase Do this all with: NO Cravings! NO Strenuous Exercise! http://www.ydp.popularpills.com/hgh/index.php?p

IP setting for supplicant

2004-01-07 Thread matt morris
Hi, I have been having problems getting the supplicant to gain internet access through my freeradius + Dlink DWL900AP+ AP + WinXP Supplicant(Linksys WirelessG PCMCIA card) setup. I'm using EAP-MD5 authentication. Freeradius has granted Access-Accept, but the supplicant doesn't get an ip (I've ad