question EAP-TTLS/MSCHAPv2

2004-07-14 Thread david_smt
Hello , I have two questions... Does SecureW2 (1.0.9) support only PAP ? It is possible to do authentication with EAP-TTLS/MSCHAPv2 or EAP-TTLS/MD5 (not EAP-TTLS/EAP-MSCHAPV2 ...) with SecureW2 as client ? Thanks for your help , bye ___ Connessione ed

freeradius--with mysql database???

2004-07-14 Thread Joel n.solanki
Dear freeradius gurus, I am very new to radius.Just know what is radius nothing more :) I have downloaded freeradius-0.9.2.tar.gz and installed it. My system is Redhat 9.0 Problem:- I want my pppoe users to authenticate with freeradius and the (Usernames / Passwords) should be in mysql database

AW: freeradius--with mysql database???

2004-07-14 Thread Matthias Wolf
Hey Joel, had the same problem on freebsd. The rlm_sql_mysql will be compiled automatically if all libs are installed. If not, go to your source directory in the folder: freeradius-snapshot-xx\src\modules\rlm_sql\drivers\rlm_sql_mysql and compile the rlm by hand to see what's missing. The libs

Checkrad doesn't start

2004-07-14 Thread Mikhail Stepanov
Hi All! I'm using attribute Simultaneous-Use:=1, and radiusd checks for double logins in radutmp, bur after that it doesn't start checkrad, in spite of check_with_nas=yes. I don't see anything wrong in debug output. How can I find out, if checkrad is called or not? I tried to start it

Re: freeradius--with mysql database???

2004-07-14 Thread Julius Igugu
Hi, There's a howto here: http://www.frontios.com/freeradius.html Regards --- Joel n.solanki [EMAIL PROTECTED] wrote: Dear freeradius gurus, I am very new to radius.Just know what is radius nothing more :) I have downloaded freeradius-0.9.2.tar.gz and installed it. My system is Redhat

Stop authorization processing after successful realm match

2004-07-14 Thread Simon Bryden
Hi, Is there any way to cause the rlm_realm module to return a 'handled' response when it matches a realm? I have a RADIUS server (Freeradius 1.0.0-pre3) for which a substantial nuber of requests need to be proxied. For non-proxied users, I use mysql. I use something like: authorize { ..

Re: Stop authorization processing after successful realm match

2004-07-14 Thread Kostas Kalevras
On Wed, 14 Jul 2004, Simon Bryden wrote: Hi, Is there any way to cause the rlm_realm module to return a 'handled' response when it matches a realm? I have a RADIUS server (Freeradius 1.0.0-pre3) for which a substantial nuber of requests need to be proxied. For non-proxied users, I use

RE: realm-based auth?

2004-07-14 Thread RH List Account
Fantastic - many thanks. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Kevin Bonner Sent: Tuesday, July 13, 2004 6:59 PM To: [EMAIL PROTECTED] Subject: Re: realm-based auth? -BEGIN PGP SIGNED MESSAGE- Hash: SHA1 On Tuesday 13 July 2004 16:35,

Re: FreeRadius+Mysql Problem

2004-07-14 Thread Eki Y. Baskoro
G'Day Melkin, Try to install FreeRADIUS-1.0.0-pre3 instead. Make sure that you have MySQL-server-4.0.20-0.i386.rpm, MySQL-devel-4.0.20-0.i386.rpm and MySQL-shared-compat-4.0.18-0.i386.rpm installed in your system. Those RPMs can be obtained from MySQL AB website. When you compile the source,

Re: Can't seem to use configurable failover for an expired account

2004-07-14 Thread Kostas Kalevras
On Tue, 13 Jul 2004, Roy, Daniel wrote: Hi all, This is a rather detailed question, since it relates to the source code of freeRADIUS, but I'm trolling to see if anyone has come across this or what a freeRADIUS expert might suggest as a solution. Configurable failover in working for me

Re: question EAP-TTLS/MSCHAPv2

2004-07-14 Thread Alan DeKok
[EMAIL PROTECTED] wrote: Does SecureW2 (1.0.9) support only PAP ? It is possible to do authentication with EAP-TTLS/MSCHAPv2 or EAP-TTLS/MD5 (not EAP-TTLS/EAP-MSCHAPV2 ...) with SecureW2 as client ? Do they have a web page, describing the features of the product? Alan DeKok. -

Re: dump attribute question

2004-07-14 Thread Alan DeKok
Remus Anca [EMAIL PROTECTED] wrote: if i put in raddb/users file: myuser Auth-Type = Local, Password == mypass, Simultaneous-Use := 1, Expiration := 01 Jun 2004 Service-Type == Framed-User, Framed-Protocol == PPP, Framed-Compression = Van-Jacobsen-TCP-IP works fine (it's

RE: Can't seem to use configurable failover for an expired account

2004-07-14 Thread Roy, Daniel
I guess in describing the problem, I answered it myself - how often that happens. I now call the rad_check_password method from rlm_sql's authorize, and now configurable failover works on an expired account; something the freeRADIUS maintainers might want to consider. Cheers, Daniel

Re: Proxy radius AND SQL for IP management

2004-07-14 Thread Alan DeKok
paul hanson [EMAIL PROTECTED] wrote: is it possible for a local SQL server (PostgreSQL/MySQL) used for IP management ( for example fixed IP address per user ) but implement radius proxying to other servers for authorisation. Yes. Already have ~3000 users accross 4 servers but want fixed IP

Re: MS-CHAP and Failed Login Counter?

2004-07-14 Thread Alan DeKok
Scott [EMAIL PROTECTED] wrote: Hello - I have a question that I can't seem to find an answer to. How can I implement MS-CHAP _with_ a failed login counter like pam_tally? An external program. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: EAP-TTLS proxying

2004-07-14 Thread Alan DeKok
Tomasz Wolniewicz [EMAIL PROTECTED] wrote: Suppose we want to use PAP-TTLS. It would seem natural that the proxying is done on the basis of the outer identity and the tunneled data is never revealed to the proxy server at org-2. Unfortunately our tests seem to show that the server at org-2

Re: Fall-Through in acct_users

2004-07-14 Thread Alan DeKok
Alexander M. Pravking [EMAIL PROTECTED] wrote: Indeed. Even if there were = and then :=, only the first has been taken. Doesn't this break the concept of operators? No. The routing *implementing* Exec-Program-Wait only looks for the first one, and ignores the rest. Historical reasons.

Re: Can't seem to use configurable failover for an expired account

2004-07-14 Thread Alan DeKok
Roy, Daniel [EMAIL PROTECTED] wrote: I now call the rad_check_password method from rlm_sql's authorize, and now configurable failover works on an expired account; something the freeRADIUS maintainers might want to consider. That change won't be added to the server. The rad_check_password

Juniper E-Series authentication setup and CLI access

2004-07-14 Thread Robert Banniza
Guys, I'm currently setting up Juniper E-Series devices to authenticate against FreeRadius using rlm_ldap (OpenLDAP). I currently have: radiusReplyItem: ERX-Cli-Initial-Access-Level := 5 radiusReplyItem: ERX-Alternate-Cli-Access-Level := 15 radiusReplyItem: ERX-Cli-Allow-All-VR-Access := 1 in my

more then one users-file

2004-07-14 Thread M
Hello, can i use more then one users-File. I will use for different realms, different files. Sampel: User1: nicerealm/user1 nicerealm/user2 ... this user (user1 and user2) are in file nicerealm.users and for realmtest/user1 realmtest/user2 this user (user1 and user2) are in file realmtest.user Can

segmentation fault with postgresql and cisco vsa, please help

2004-07-14 Thread Apu islam
Hello group, I just downloaded the pre 1 release of the freeradius and using it with cisco vsa hack and postgresql. When I start radiusd, I receive a segmentation fault, sql: postauth_table = radpostauth sql: postauth_query = sql: safe-characters =

Re: segmentation fault with postgresql and cisco vsa, please help

2004-07-14 Thread Alan DeKok
Apu islam [EMAIL PROTECTED] wrote: I just downloaded the pre 1 release of the freeradius Why? -pre3 has been out for a while. Try it instead. Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html