segmentation fault

2004-03-18 Thread Ang Way Chuang
Hi there, I downloaded freeradius-snapshot-20040317.tar.gz and compiled against openssl-0.9.7d. It produces segmentation fault when I run for TLS authentication. Here is the part of the message of derived from core dump in gdb: #0 0x40219015 in rad_mangle (data=0x8142e80, request=0x814a838)

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Tarun Bhushan
Steve I don't know the Windows side well - you might need to do some Googling to find out what this error means. Sorry. Also, you definitely do not export the private key. That remains on the CA. Regards Tarun -Original Message- From: Steve OBrien [mailto:[EMAIL PROTECTED] Sent: Friday

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Steve OBrien
Now I am seeing this in the windows dc server log: A fatal error occurred when attempting to access the SSL server credential private key. The error code returned from the cryptographic module is 0x I was using the CA certificate but that cannot be exported with the private key (AFAIK).  M

Re: dialup-admin

2004-03-18 Thread Martin Jessa
Then it's propably not running. Run netstat -l |grep mysql It should be listed Or ps auxww |grep mysql On Thu, 18 Mar 2004 17:46:04 -0800 (PST) Amedzekor Kafui <[EMAIL PROTECTED]> wrote: > Hi, > > I used to run Redhat 9 but I upgraded to Fedora Core 1 > using yum. > > I run apache 2.0.4 and ph

free radius client software

2004-03-18 Thread vibodh johari
does any one of you know where to find the free radius client software ,also if source code is available then let me know - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

TTLS + LDAP authentication

2004-03-18 Thread David Dunn
Dear all, I'm a newbie to FR so please bear with me. I'm doing TTLS for wireless access. The wireless client is Alfa-Ariss SecureW2 with Netscape LDAP as backend (passwords are SHA encrypted). FR is CVS snapshot-20040308 running on RH9. I planned to retrieve the encrypted password from LDAP. Dur

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Tarun Bhushan
Yes - I did mention this in an earlier mail. Relevant portion of radiusd.conf shown below. The combination of Port=636 AND start_tls=no is important. In my experience, setting start_tls=yes does not work with AD or Novell eDirectory, but does work with OpenLDAP.       ldap ldap1 {  

dialup-admin

2004-03-18 Thread Amedzekor Kafui
Hi, I used to run Redhat 9 but I upgraded to Fedora Core 1 using yum. I run apache 2.0.4 and php 4.3.4 and postgresql 7.3.4 on Fedora Core 1. I run yum as a cron job to update my system every night. I am no more able to use dialup-admin again. Anytime I click on New User I get the error meesage

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Steve OBrien
Do you need to modify the radiusd.conf file to use ldaps? Steve O'Brien City of Bend Network Administrator [EMAIL PROTECTED] 541-322-6393 "Tarun Bhushan" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 03/18/2004 04:28 PM Please respond to [EMAIL PROTECTED] To <[EMAIL PROTECTED]> c

FOR FREERADIUS DEVELOPERS: Building FreeRADIUS under Cygwin

2004-03-18 Thread Frank Seesink
SHORT VERSION: I have some information for the FreeRADIUS developers regarding building FreeRADIUS v0.9.3 under Cygwin on MS Windows. With your help/input, I hope to get you the necessary patch(es) you need to have FreeRADIUS build cleanly under Cygwin as it does elsewhere. LONG VERS

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Tarun Bhushan
Steve   The instructions are shown below. I see that you have included the group membership check into your filter. I have not done this - I have stuck with the separate group membership check shown in the default FreeRadius radiusd.conf - it does make an extra LDAP call, but it works. Just

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Steve OBrien
Here is part of my config, I can't send it all because the listserver keeps bouncing it back... [snip] ldap {                 server = "192.168.2.247"                 identity = "CN=freeradius,CN=Users,DC=testdc,DC=win2K3,DC=bend"                 password = freerad1us                 basedn = "D

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Steve OBrien
Thanks Tarun,         Yes I would like instructions for importing my root CA into my freeradius box! "Tarun Bhushan" <[EMAIL PROTECTED]> Sent by: [EMAIL PROTECTED] 03/18/2004 03:06 PM Please respond to [EMAIL PROTECTED] To <[EMAIL PROTECTED]> cc Subject RE: Using freeradius to a

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Steve OBrien
Here is some debug, it looks like I am getting closer.. rad_recv: Access-Request packet from host 127.0.0.1:41885, id=196, length=56         User-Name = "test"         User-Password = "test"         NAS-IP-Address = 255.255.255.255         NAS-Port = 1 modcall: entering group authorize for re

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Tarun Bhushan
Steve I've seen that "Operations error" before with FreeRadius & AD LDAP access. It appears to happen consistently when LDAP is used as opposed to LDAPS (this is more pronounced with Windows Server 2003 DCs, but happens with Win2K as well). If you change the port to 636 (with start_tls=no), you wi

help with FreeRADIUS, MySQL, and Attributes

2004-03-18 Thread stenmark
Currently, we are running TCCRadius with MySQL. We have a standard dialup service as well as a "FastWeb" service (using SlipStream, www.slipstreamdata.com). I am testing FreeRADIUS right now but I need some help. I have moved the data from our old MySQL database for TCCRadius into the FreeRAD

Any idea how to change attribute and not just the value?

2004-03-18 Thread Max Ahston
I have been searching ideas the whole day by browsing the archives but I've not managed to solve my problem yet. The setup: freeradius-snapshot-20040317 connected to pgsql. We have different nas:es (Tigris, Ascend and Cisco to name some). Earlier the default DNS's was sent to the clients dire

Re: external program execution problem

2004-03-18 Thread Alan DeKok
Lokotes <[EMAIL PROTECTED]> wrote: > This works when executing in shell but when radius starts the script, > radius waits until background script finishes! Why? Shouldn't radius > wait only for script which was invoked directly by radius? Yes. That script isn't finished, because it's waiting

Re: authentication with PEAP (EAP-MSCHAPV2) from WinXP

2004-03-18 Thread Alan DeKok
"stephane BRANCHOUX" <[EMAIL PROTECTED]> wrote: > I use freeradius 0.9.3 on a Rehdat 9.0 box. That version does not support PEAP. Use the latest CVS snapshot. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: leap works, mschap does not

2004-03-18 Thread Alan DeKok
"Brian Schuetz" <[EMAIL PROTECTED]> wrote: > I do not necessarily know how to implement mschap, it is actually > (Secured password (EAP-MSCHAP v2) on the Orinoco gold card. Version 0.9.3 does not support that. Only the latest CVS snapshot supports it. > In radiusd.conf I edited the default_eap

leap works, mschap does not

2004-03-18 Thread Brian Schuetz
  This message is for Alan DeKok.  Thank you for responding to my email.  I do not necessarily know how to implement mschap, it is actually (Secured password (EAP-MSCHAP v2) on the Orinoco gold card.  The only thing I have set up in free radius that works is LEAP so far.  Lets start from t

Re: How to Define Ldap-Group to use different instances of ldapmodule ?

2004-03-18 Thread Josh Fry
Thank you I've tried out your suggestion and it works well and solves the problem ! thanks again Josh >>> [EMAIL PROTECTED] 03/17/04 02:27pm >>> >I don't think you need to do that. Check out http://www.doris.cc/radius. >You can have the same lookup, just the uid, but then check for a certain >

RE: Using freeradius to authenticate users to a Windows 2000 AD

2004-03-18 Thread Steve OBrien
Here is the debug output: Module: Instantiated radutmp (radutmp) Listening on IP address *, ports 1812/udp and 1813/udp, with proxy on 1814/udp. Ready to process requests. rad_recv: Access-Request packet from host 127.0.0.1:38245, id=181, length=56         User-Name = "test"         User-Passwor

Re: cisco vpn client and freeradius0.9.3 + ldap

2004-03-18 Thread Kostas Kalevras
On Thu, 18 Mar 2004, Alexei Vasilyev wrote: > I'm trying to make this: > > 1. dialup to access-server with CHAP and Calling-Station-ID checking, > so I have to "compare_check_items = yes". This login in ldap have > cleartext password and CHAP authentication. > 2. from AS i need authentication to c

cisco vpn client and freeradius0.9.3 + ldap

2004-03-18 Thread Alexei Vasilyev
I'm trying to make this: 1. dialup to access-server with CHAP and Calling-Station-ID checking, so I have to "compare_check_items = yes". This login in ldap have cleartext password and CHAP authentication. 2. from AS i need authentication to cisco pix (cisco vpn client over IPSec, using other login

Re: What to do with redhat

2004-03-18 Thread Kenneth Grady
The redhat folder contains miscellaneous files so you can use redhat rpm's for freeradius, and a radiusd file for PAM (Pluggable Authentication Modules). you need to extract the freeradius.spec file when trying to build an rpm (from a tar file) otherwise it uses the suse/freeradius.spec and fails.

Error Message and question

2004-03-18 Thread Ugur GUNCER
Hi Im my radius server gives "Mysql check_error : 1054 received "message after user authorization procc. What is it mean My usergroup table is empty !!! modcall: entering group authorize modcall[authorize]: module "preprocess" returns ok radius_xlat: 'dark' rlm_sql (sql): sql_set_user es

Re[4]: freeradius + freebsd + oracle

2004-03-18 Thread John
Alan DeKok wrote: AD> See 'doc/bugs' for an explanation of how to track down this problem. AD> Alan DeKok. So, I run gdb. This is output: begin - Core was generated by `radiusd'. Program terminated with signal 10, Bus error. Reading symbols from /usr/lib/libcrypt.so.2

external program execution problem

2004-03-18 Thread Lokotes
Hi, I'm executing external script when accounting starts (in acct_users file, using Exec-Program-Wait). My script invokes another script as a background process and continues (self)execution. This works when executing in shell but when radius starts the script, radius waits until background scri

RE: authentication with PEAP (EAP-MSCHAPV2) from WinXP

2004-03-18 Thread Tim Bots
What I can tell of this debug info is that freeradius can't find the password in the users file. It can work if you put the authencation type from your cisco aironet 1100 to CHAP and change in the users file the Auth-Type := Local. This works quite well for me. (only not with a cisco aironet 110

authentication with PEAP (EAP-MSCHAPV2) from WinXP

2004-03-18 Thread stephane BRANCHOUX
Hello, I use freeradius 0.9.3 on a Rehdat 9.0 box. I would like to authenticate from winXP (SP1 with all patches). My test user is in user file : criup Auth-Type := EAP, User-Password == "mypass" eap is configured in sections modules, authorize an authenticate ( default config). My wireless