Ldap authorization - reject if not found

Hello, I would like to authorize the user against LDAP, and if LDAP returns error or not found set Auth-Type = Reject. What do I have to write in radiusd.conf to get this? I know that if no Auth-Type is set, the user will also be rejected, but this is not enough for me, because m

Re: Voip billing

В сообщении от 19 Апрель 2004 12:43 Roberto Pioli написал(a): > I'm beginning to test freeradius for voip billing with cisco 5300 > equipment; I'm going use the cisco_h323_db_schema-postgres.sql. > There's a graphic interface like dialup_admin that can be used with this > database? Only selfmaded.

Re: [please help me]user collision

You can try enabling   usercollide to yes   and reload freeradius, however, follow what is recommened. - Original Message - From: 俊宏 To: [EMAIL PROTECTED] Sent: Monday, April 19, 2004 9:00 AM Subject: [please help me]user collision Hi All,   I want to u

how to create check attribute dinamically?

Hello freeradius-users, I need to create a check attribute depending on how much seconds or octets user have. Ideal, i would like to equate reply attribute to a newly created check attribute or to turn reply to check attribute. I need this to differentiate users by their limits and give th

Re[2]: how to create check attribute dinamically?

Hello Milver, Monday, April 19, 2004, 1:30:05 PM, you wrote: >> I need to create a check attribute depending on how much seconds or >> octets user have. Ideal, i would like to equate reply attribute to a >> newly created check attribute or to turn reply to check attribute. I >> need this

Re: how to create check attribute dinamically?

> I need to create a check attribute depending on how much seconds or > octets user have. Ideal, i would like to equate reply attribute to a > newly created check attribute or to turn reply to check attribute. I > need this to differentiate users by their limits and give them > ip address

Accessing/using the EAP identifier field

Hi, In short, this mail is about EAP methods accessing/using the EAP identifier field. In details, after reading the Packet modification attacks paragraph in the RFC 2284bis ("It is RECOMMENDED that methods providing integrity protection of EAP packets include coverage of all the EAP header field

Re: Ldap authorization - reject if not found

=?iso-8859-1?Q?Alejandro_Mart=EDnez_Marcos?= <[EMAIL PROTECTED]> wrote: > I would like to authorize the user against LDAP, and if LDAP > returns error or not found set Auth-Type = Reject. What do I > have to write in radiusd.conf to get this? Nothing. > I know that if no Auth-Type i

Freeradius setting on Aironet 1100 AP

Hi,   I would like to configure my aironet 1100 AP for 802.1x. I want to know who to setup the AP to forward incoming packet to the Radius server, Precisely how to inform the AP about the Radius server and the secret key.  As well as how to enable EAP on AP.   Regards, Aoun. University of Stuttga

Re: [please help me]user collision

On Mon, 2004-04-19 at 03:00, äå wrote: > The configuration in FreeRadius with PEAP is ok. But just do not know > how to config other parameters to achieve the "usercollide" with > "failover". User collision is not possible with PEAP/EAP-MSCHAPv2 as user collison processing takes place in the aut

Re: Freeradius setting on Aironet 1100 AP

this is imho not a help service for cisco hardware. however, i'm sure that by opening a web browser and connecting to your AP 1100 address you will find all the answers you need, quasi automagically. just read the web pages of the ap, it is self-explanatory. ciao artur Aoun Shah wrote: Hi,

LDAP Module- Help

I am new to this list, so please correct me if I am not formatting this email correctly.   I have FreeRadius 0.9.3. It is running on redhat 7.2. LDAP is authenticating against Novell Edir. It works beautifully. I have an issue though with multiple objects in the directory with the same name, but

proxying request

Hi All   I’ve got a Freeradius 0.9.3 server proxying requests to a Cistron server. The problem I’m having is that the ip address of the NAS is used when allowing the request. The NAS is on ADSL with a changing IP address. Is it possible to have the freeradius server’s ip making the req

Re: LDAP Module- Help

On Mon, 19 Apr 2004, John Hottel wrote: > I am new to this list, so please correct me if I am not formatting this > email correctly. > > I have FreeRadius 0.9.3. It is running on redhat 7.2. LDAP is > authenticating against Novell Edir. It works beautifully. I have an > issue though with multiple

Problem with Ascend Auth

Hi all, i have a strange problem with an ascend. probably this is not freeradius' fault, but anyway, perhaps someone is familiar with this type of problem. i am running freeradius 0.9.1 with mysql support. all dial-in's to the ascend are denied with "auth: login incorrect" message. here is what

Re: Cisco-AVPair & cisco_vsa_hack()

Hi, As Alan DeKok advised us, we upgraded to the latest CVS snapshot on 17/04/2004... and now it's working fine, thanks :-) Pascal Polleunus wrote: Hi, We are trying to do VoIP accounting using Cisco material but we've problems with the attribute "Cisco-AVPair". We've defined "with_cisco_vsa_

Re: We are willing to pay to get support on this (Was: Cisco-AVPair & cisco_vsa_hack())

Jerome Warnier wrote: ...snip... There is also a crontab file in this directory, which uses most the other scripts there, but needs fixing before being (optionally) put into /etc/cron.d. This file needs fixing anyway, because it currently points to /usr/local/... Did not use any yet, so you are pro

How to add attributes at post proxy stage ?

Hi, i´am movin away from Cistron and now having a issue with the different behavior both servers have. Ciston calls users twice once at the time sending the resquest and second when the answer from the home server is recievd. Could matche there then based on realms, usernames and wildcards. Wich

Compile freeradius in C++

Hello, Does anyone know how I could compile freeradius in C++ using g++ instead of gcc ? I am not very familiar with the underlying configure mechanism , all i know is to type 'configure' an then 'make' ... many thank's. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/use

Vendor-Specific, radclient ?

Hello, I'm new, have read the archives, the FAQ but still can not get this right: I want to set up a freeradius server to use for testing a new (Vendor ID CableLabs = 4491) set of "Vendor-Specific" attributes. With the radclient I can make "normal" requests and all is fine ( I get replies, I can

Re: Compile freeradius in C++

"[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > Does anyone know how I could compile freeradius in C++ using g++ instead of > gcc ? Why? There's no C++ code in FreeRADIUS, so there's no point in using a C++ compiler. > I am not very familiar with the underlying configure mechanism , all i kn

Re: How to add attributes at post proxy stage ?

"Holger Steppke" <[EMAIL PROTECTED]> wrote: > Now i need same function with Freeradius. Well i think a > "post_proxy_authorize = yes" > would do and my usersfile is parsed again. Yes. That's what it's there fore. > Is there a better way of doing it in freeradius ?! That depends on what you

Re: Problem with Ascend Auth

Philipp Steinkrueger <[EMAIL PROTECTED]> wrote: > Mon Apr 19 16:38:22 2004 : Auth: Login incorrect: > [account-name1/\263\350>\027\271\240\365] (from client rade port 0) > Mon Apr 19 16:38:27 2004 : Auth: Login incorrect: [account-name2/\034y]? > \341\207\371] (from client rade port 0) The shar

Re: Vendor-Specific, radclient ?

Johan <[EMAIL PROTECTED]> wrote: > 1) What do I put in stead of "foo": Vendor-Specific = "foo" > (How do I get the Vendor ID in there, and the vendor specific data .) Nothing. > 2) I suspect I somehow use dictionaries. If so can someone please give me > an example of how to use one of the exis

Re: Compile freeradius in C++

At 11:41 19/04/2004, you wrote: "[EMAIL PROTECTED]" <[EMAIL PROTECTED]> wrote: > Does anyone know how I could compile freeradius in C++ using g++ instead of > gcc ? Why? There's no C++ code in FreeRADIUS, so there's no point in using a C++ compiler. I am writing a module that need to use C++

Re: We are willing to pay to get support on this (Was: Cisco-AVPair & cisco_vsa_hack())

On Mon, 2004-04-19 at 17:13, Guy Fraser wrote: > Jerome Warnier wrote: > ...snip... > > >There is also a crontab file in this directory, which uses most the > >other scripts there, but needs fixing before being (optionally) put into > >/etc/cron.d. This file needs fixing anyway, because it current

Ports mismatch between config and debug messages

Hi, Running freeradius -x, we get the following: ... Listening on authentication x.x.x.x:1812 Listening on accounting x.x.x.x:1813 Ready to process requests. rad_recv: Accounting-Request packet from host y.y.y.y:1646, id=84, length=461 ... Sending Accounting-Response of id 84 to y.y.y.y:1646 In ra

Multiple Taged Attributes

Hi, i think i wrote already on this list that i migrating from cistron to freeradius 0.9.3 so there i found anothere point i like to highlight. It is subject to discuss. maybe its wanted that way don´t know. Bascily adding multiple Attributes from the same name does work with += adding an attrib

Re: Ports mismatch between config and debug messages

> Hi, > > Running freeradius -x, we get the following: > ... > Listening on authentication x.x.x.x:1812 > Listening on accounting x.x.x.x:1813 > Ready to process requests. > rad_recv: Accounting-Request packet from host y.y.y.y:1646, id=84, > length=461 > ... > Sending Accounting-Response of id 84

Re: Ports mismatch between config and debug messages

Pascal Polleunus <[EMAIL PROTECTED]> wrote: > What's wrong, our config or is it just the output? There's nothing wrong. The server is doing exactly what you're telling it to do, and is doing exactly the right thing. You're getting confused about the port the clients is sending the packet *fr

Re: Ports mismatch between config and debug messages

>> Hi, >> >> Running freeradius -x, we get the following: >> ... >> Listening on authentication x.x.x.x:1812 >> Listening on accounting x.x.x.x:1813 >> Ready to process requests. >> rad_recv: Accounting-Request packet from host y.y.y.y:1646, id=84, >> length=461 >> ... >> Sending Accounting-Respons

Re: Ports mismatch between config and debug messages

Frédéric EVRARD wrote: Hi, Running freeradius -x, we get the following: ... Listening on authentication x.x.x.x:1812 Listening on accounting x.x.x.x:1813 Ready to process requests. rad_recv: Accounting-Request packet from host y.y.y.y:1646, id=84, length=461 ... Sending Accounting-Response of id

Re: Ports mismatch between config and debug messages

Pascal Polleunus <[EMAIL PROTECTED]> wrote: > Sorry, I didn't mention that everything is working fine! We want to use > the ports 1812/1813 and the NAS are sending on port 1813. > If the NAS were not sending on the same port FreeRADIUS is listening on > it should not work, right? Again, you're

Re: proxying request

"Barry" <[EMAIL PROTECTED]> wrote: > The problem I'm having is that the ip address of the NAS is used when > allowing the request. The NAS is on ADSL with a changing IP address. Ok... that's not much of a problem. Just list the whole network in "clients.conf". There are examples there for list

expiration attribute

can anyone elaborate more of the "Expiration" attribute? is it an attribute of password age or expiration for password? i am am trying to play around for an expiration attribute -- expiration for an account from MySQL table and not from system accounts, using freeradius under FC1. anyone? //milver

Question - Specific DEFAULT entry for use when password fails, another for when user doesn't exist.

Hello all. I've searched, but I haven't been able to find an easy way to make this work. I'm currently using a DEFAULT entry to fill out our standard reply items. I would like to have a different default entry to be used when the username exists, but the password is incorrect, and a third to

Re: Question - Specific DEFAULT entry for use when password fails, another for when user doesn't exist.

"Daniel W. Halverson" <[EMAIL PROTECTED]> wrote: > I'm currently using a DEFAULT entry to fill out our standard reply > items. I would like to have a different default entry to be used when > the username exists, but the password is incorrect, and a third to be > used when the username doesn't

Disconnect account after 100 hours of total time used?

Where do I find sqlcounter.conf, also what I mean to say when I want 100 hours of dialup not in 1 session but if a user connects monday for 20 hours, then tuesday for 30 hours, etc, after 100 hours was used for the entire month I want it to disable the account, is there a way to do this in freer

Re: Question - Specific DEFAULT entry for use when password fails, another for when user doesn't exist.

Thanks for the quick response. With failover, would you be able to detect if a user exists in the users file, but the password doesn't match? I'll grab the CVS tonight and check it out. Thanks again. Dan Alan DeKok wrote: "Daniel W. Halverson" <[EMAIL PROTECTED]> wrote:

Re: Disconnect account after 100 hours of total time used?

make use of rlm_sqlcounter. - Original Message - From: "Devin Atencio" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Monday, April 19, 2004 10:53 PM Subject: Disconnect account after 100 hours of total time used? > > Where do I find sqlcounter.conf, also what I mean to say when I wan

Re: We are willing to pay to get support on this (Was: Cisco-AVPair & cisco_vsa_hack())

On Sun, Apr 18, 2004 at 03:51:12PM +0200, Jerome Warnier wrote: > On Sun, 2004-04-18 at 15:13, Paul Hampson wrote: > > On Sun, Apr 18, 2004 at 12:33:53PM +0200, Jerome Warnier wrote: > > > On Sun, 2004-04-18 at 05:43, Paul Hampson wrote: > > > > On Sat, Apr 17, 2004 at 11:41:27PM +0200, Jerome Warn

Re: Ports mismatch between config and debug messages

Alan DeKok wrote: Pascal Polleunus <[EMAIL PROTECTED]> wrote: Sorry, I didn't mention that everything is working fine! We want to use the ports 1812/1813 and the NAS are sending on port 1813. If the NAS were not sending on the same port FreeRADIUS is listening on it should not work, right? A