dialupadmin failed_logins

2004-06-27 Thread Radius
We have installed freeradius 0.9.3 on Red Hat 9 and are using dialupadmin and mysql. We cannot get the "Failed Logins" in the left column of dialupadmin to display any of the invalid logins when we click show. We have set the correct path for mysql in the log_badlogins script. Is there something el

proxy & simultaneous use

2004-06-27 Thread Radius
Hello, I am new to Freeradius and would like some assistance. I have been searching the mailing lists and google, but I'm not quite getting some things. We are using dialupadmin with mysql for our own dialup users and also are proxying. We would like to set freeradius so it only allows 1 simultaneo

Re: Replies on port 1029

2004-06-27 Thread Alan DeKok
"Thor Spruyt" <[EMAIL PROTECTED]> wrote: > In other words: if your radius server is configured to listen on port 1812 > it SHOULD sent replies FROM port 1812 And if it's listening on another port, then the situation is different. > Why such difficult answers to the original questions? Becaus

Dialed Digits RE-write

2004-06-27 Thread Tim Petersen
Newbie here, My setup is GNU GK, Free radius and MySQL. I have authentication and accounting working. What I would like is to do time of day routing. With radius I can use "%H" which is hour stamp in 24 hour clock. Combined with "%{Called-Station-Id}" I should be able to re-write the dialed numbe

Re: Replies on port 1029

2004-06-27 Thread Thor Spruyt
- Original Message - From: "Alan DeKok" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 27, 2004 3:17 PM Subject: Re: Replies on port 1029 > "Thor Spruyt" <[EMAIL PROTECTED]> wrote: > > This doesn't say anything about which source port that is typically used in > > case o

Re: Problems with configurable_failover

2004-06-27 Thread Alan DeKok
"Roy, Daniel" <[EMAIL PROTECTED]> wrote: > Yes, mschap is just above the group and it is not commented out. If I > comment out the group and restart the radius server and send an > access-request, it does indeed do an mschap authorization and then an > mschap authentication (as per the output when

Re: Unresponsive child and dropping conflicting packets

2004-06-27 Thread Alan DeKok
Wisam Najim <[EMAIL PROTECTED]> wrote: > I will try to simulate the case on 1.0.0-pre release. But I am still > wondering why would the message "Error: Dropping conflicting packet from > client xxx: - ID: zzz due to unfinished request yyy" be repeated for > the same request. Does this mean

Re: Replies on port 1029

2004-06-27 Thread Alan DeKok
"Thor Spruyt" <[EMAIL PROTECTED]> wrote: > This doesn't say anything about which source port that is typically used in > case of a radius reply. The reply comes FROM the port that the NAS sent the packet TO. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/u

Re: Replies on port 1029

2004-06-27 Thread Mark Coccimiglio
There is no "typical" port used. Unless the application binds the request to a specific port the OS picks for first available port. When doing socket level programming it is best to leave it to the OS to pick a port to send from (client side). The destination is fixed on a specific port so t

POSTGRESQL ERROR

2004-06-27 Thread apellido jr., wilfredo p.
Hello, I got this error while running Freeradius and Postgresql: Jun 27 20:12:47 radius postgres[10318]: [2-1] ERROR: column "radacct.acctstarttime" must appear in the GROUP BY clause or be used in an aggregate function Jun 27 20:12:47 radius postgres[10318]: [3-1] ERROR: column "radacct.acctsta

Re: Replies on port 1029

2004-06-27 Thread Thor Spruyt
- Original Message - From: "Mark Coccimiglio" <[EMAIL PROTECTED]> To: <[EMAIL PROTECTED]> Sent: Sunday, June 27, 2004 1:12 PM Subject: Re: Replies on port 1029 > Actually in IP the source port is not of any significance EXCEPT that it > exist. On servers we *lock* applications to speci

help

2004-06-27 Thread Gary Hill
How can I un-subscribe -- I couldn;t see anything on the web site ? Many Thanks -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of [EMAIL PROTECTED] Sent: 25 June 2004 22:49 To: [EMAIL PROTECTED] Subject: Freeradius-Users digest, Vol 1 #3419 - 9 msgs Send Fre

Client install application

2004-06-27 Thread Mark Coccimiglio
Does anyone know of an installation application that would simplify installation of EAP/TLS and PEAP Client/Root Certificates? Ideally I'd like to give people a Floppy or CD. Have them run D:\setup.exe and have it be done. Anything out there that works like that or am I just hoping for too m

Re: Replies on port 1029

2004-06-27 Thread Mark Coccimiglio
Actually in IP the source port is not of any significance EXCEPT that it exist. On servers we *lock* applications to specific ports so that we can find specific services AND utlize a server in several roles (web, e-mail, radius, etc.). Typically on the client side the system starts at port 10

SASL and DNS SRV patch for rlm_ldap v1.0 pre3

2004-06-27 Thread Allister Maguire
Attached is a patch to rlm_ldap v.1.0 pre 3 which provides SASL [RFC] and DNS SRV [RFC2782] functionality. The SASL part is written with GSSAPI in mind, so this SASL mechanism is currently hard-coded. The DNS SRV allows the use of _ldap._tcp.mydomain.com style dn to find LDAP servers to connect