Re: postgresql new column

2004-08-03 Thread Thor Spruyt
- Original Message - From: Edgars [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 8:31 AM Subject: postgresql new column i have added one column named 'status' in the 'radacct' table. Then changed a little bit 'accounting_start_qurey' (setting this variable to

rlm_sql_postgresql module

2004-08-03 Thread Edgars
did this earlier but don't remember now how to link the subj. to the freeradius. Can anyone suggest how to do it? These messages appeared when starting radiusd in debugging mode: rlm_sql (sql): Could not link driver rlm_sql_postgresql: file not found E rlm_sql (sql): Make sure it (and all its

Re: postgresql new column

2004-08-03 Thread Edgars
acctterminatecause is not he helper in this case because it's saving the blank field sometimes too. Where can i get that Acct-Interim-Interval? Thanx! Edgars Thor Spruyt wrote: - Original Message - From: Edgars [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 8:31

Re: postgresql new column

2004-08-03 Thread Thor Spruyt
- Original Message - From: Edgars [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 12:46 PM Subject: Re: postgresql new column acctterminatecause is not he helper in this case because it's saving the blank field sometimes too. Well, it was just a suggestion :)

Re: Memory Leak for Accounting using Oracle

2004-08-03 Thread ngl
Hello It is not a problem but optimization of userspace allocating memory system. If you allocate some amount of userspace memory and then free it, memory scheduler will never return all the amount back to the kernel. It is needed to decrease number of kernel calls. Sorry for my english.

freeradius tutorial

2004-08-03 Thread Edgars
Has anyone some Freeradius book in electronical view (for example: Radius:securing access to private resources)? - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Segfault using EAP/TTLS + openldap

2004-08-03 Thread alexandre durand
Hi, I use freeradius with eap/ttls + openldap and i ve a segfault problem: i used strace to see this problem in debug mode. And the error is : write(1, rlm_eap_ttls: Session establis..., 80 rlm_eap_ttls: Session established. Proceeding to decode tunneled attributes. ) = 80 time(NULL)

getting started with LDAP

2004-08-03 Thread Benedikt Panzer
Hello FreeRadius users, can you give me some help on getting started with LDAP? I've read the ldap_howto by Dusty Doris included with Freeradius. Unforunately, it doesn't work for my system (maybe it's already too old). First, Dusty uses the objectclasses organizationUnit and organizationalunit.

Content Filtering with DansGuardian

2004-08-03 Thread Ryan Leonard
We are looking for a solution to provide content filtering to dialup customers. Currently we have to setup access on each machine to use a proxy. This is a horrible way for obvious reasons. I am looking for a way to force certain users to go through our proxy... I can't find anything about

Re: Rewriting User-Name attribute without rewrite_attr

2004-08-03 Thread Alan DeKok
Stephen Chan [EMAIL PROTECTED] wrote: I enabled this section to see if it would solve my problems. I left all the values from RAD_REQUEST alone to see what happens in a trivial case. The debugging output looks like this: ... auth: No authenticate method (Auth-Type) configuration

Re: getting started with LDAP

2004-08-03 Thread Alan DeKok
Benedikt Panzer [EMAIL PROTECTED] wrote: can you give me some help on getting started with LDAP? I've read the ldap_howto by Dusty Doris included with Freeradius. Unforunately, it doesn't work for my system (maybe it's already too old). The O'Reilly LDAP book has a section on FreeRADIUS.

Re: Memory Leak for Accounting using Oracle

2004-08-03 Thread Alan DeKok
Yasser Ahmed Hosny [EMAIL PROTECTED] wrote: I am using Freeradius 1.0.0 pre03 version running on Sun Solaris 8 and I am connecting to an Oracle DB for accounting. My Oracle DB is located on another Sun Solaris server 8i and I am using oracle client version 8.1.7.4. I realized that I am loosing

Re: Content Filtering with DansGuardian

2004-08-03 Thread Dana Hudes
It is not the job of RADIUS to do content filtering. Traffic filters, yes you can always throw those in to prevent ip address spoofing and so on. Accomplish content filtering with a transparent proxy and use WCCP to push the http traffic to your proxy. Contact me off-list for additional guidance.

CHAP against PASSWD

2004-08-03 Thread squirrel
How can you authenticate CHAP against PASSWD? I'm currently running FreeRadius 0.8.1 on FreeBSD. So far I've had no problems using PAP on PASSWD. But some of our users are changing to CHAP and I need to be able to authenticate it without creating whole new text file containing the

RE: freeRADIUS patch for EAP-TLS n-tier server/aaa certificate chain support

2004-08-03 Thread Alejandro Martinez Marcos
Hello Mohammed, I have a similar problem, I have also a certificate chain of 3 levels. I have a CA cert and a subCA cert. I think that I have to take them and create a certificate-chain.pem, and then placing it in the # Trusted Root CA list section of radiusd.conf. But I don't

verify client finished handshake message

2004-08-03 Thread Avinash Agarwal
Hello all, I needed some help on how to verify the client finished handshake message. I get a encrypted client finished message on the server(java based). The negotiated cipher suite is TLS_RSA_WITH_RC4_128_MD5 Using the rc4 cipher and the client write key I am able to decrypt the message

Re: Content Filtering with DansGuardian

2004-08-03 Thread Ryan Leonard
So Dana and I discussed using a WCCP capeable router to push http traffic through the proxy... The oly problem is, I don't want it for all users, just certain ones. I was hoping to be able to tunnel certain users, or assign certain users a proxy server upon logging in. Anyone else have any

Re: CHAP against PASSWD

2004-08-03 Thread Thor Spruyt
- Original Message - From: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 6:49 PM Subject: CHAP against PASSWD How can you authenticate CHAP against PASSWD? I'm currently running FreeRadius 0.8.1 on FreeBSD. So far I've had no problems using PAP on PASSWD.

Re: Content Filtering with DansGuardian

2004-08-03 Thread Dana Hudes
Tunneling implies some encapsulation. This is not what WCCP does. Use your router configuration to send http traffic for certain ip address ranges to the proxy. Use RADIUS to assign the users that need content filtering to the appropriate address range. This ip address assignment is the only

RE: freeRADIUS patch for EAP-TLS n-tier server/aaa certificate chain support

2004-08-03 Thread Alejandro Martinez Marcos
Finally I found out. It was easy, you only have to concatenate the .pem files. Alejandro -Mensaje original- De: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] nombre de Alejandro Martinez Marcos Enviado el: martes, 03 de agosto de 2004 18:54 Para: [EMAIL PROTECTED]; [EMAIL

Re: verify client finished handshake message

2004-08-03 Thread Mohamad Badra
Avinash Agarwal wrote: Hello all, I needed some help on how to verify the client finished handshake message. I get a encrypted client finished message on the server(java based). The negotiated cipher suite is TLS_RSA_WITH_RC4_128_MD5 Using the rc4 cipher and the client write key I am able

Re: Memory Leak for Accounting using Oracle

2004-08-03 Thread Terry
--__--__-- Message: 4 Date: Tue, 03 Aug 2004 12:50:13 +0400 From: Yasser Ahmed Hosny [EMAIL PROTECTED] Subject: Memory Leak for Accounting using Oracle To: [EMAIL PROTECTED] Organization: Emirates Internet Multimedia Reply-To: [EMAIL PROTECTED] Dear All I am using Freeradius 1.0.0 pre03 version

Re: Content Filtering with DansGuardian

2004-08-03 Thread Ryan Leonard
Tunneling implies some encapsulation. This is not what WCCP does. that was my point, I would rater not use WCCP, because the router we have access to here doesnt have access to it. I was thinking that rather than having RADIUS specify the IP range... I could set certain users to be assigned to

So close....yet so far

2004-08-03 Thread dpatters
Hello, When last i posted, I was having problems getting radius and LDAP to talk using TLS. Ive fixed my problem, but in this process Ive come across another issue. When testing I tried using a ! in a test user's password. On the radius server it came across as %21 instead of !. EXAMPLE:

FreeRadius and WindowsXP

2004-08-03 Thread itsd itsd
Hi, I downloaded the latest version of FreeRadius 1.0.0 and also the latest version of cygwin 1.5.10-3 but I didn't get FreeRadius installed proprely. Any help. Thanks _ Powerful Parental Controls Let your child discover the best

Creating a Starbucks

2004-08-03 Thread Larry Wade
I am in the process of securing a visitors wireless lan. Does anyone know of a good tutorial for this? I need to auto-generate a password and give the user 8 hours or so of access. I need to be able to allow my guards, very un-technical people, a very simple web page to request a

Re: Creating a Starbucks

2004-08-03 Thread Thor Spruyt
- Original Message - From: Larry Wade [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Tuesday, August 03, 2004 10:07 PM Subject: Creating a Starbucks I am in the process of securing a visitors wireless lan. Does anyone know of a good tutorial for this? I need to auto-generate a

Re: Creating a Starbucks

2004-08-03 Thread Tacio Santos
http://www.nocat.com/ http://www.cs.luc.edu/projects/med_systems/Documentation/ HTH, Tácio On Tuesday 03 August 2004 22:07, Larry Wade wrote: I am in the process of securing a visitors wireless lan. Does anyone know of a good tutorial for this? I need to auto-generate a password and give the

Re: verify client finished handshake message

2004-08-03 Thread Alan DeKok
Avinash Agarwal [EMAIL PROTECTED] wrote: I needed some help on how to verify the client finished handshake message. I get a encrypted client finished message on the server(java based). Your question has nothing to do with FreeRADIUS. Please ask it on an SSL list. Alan DeKok. - List

Re: FreeRadius and WindowsXP

2004-08-03 Thread Ben Walding
You are very unlikely to get any help with such a vague description of your problems. http://www.catb.org/~esr/faqs/smart-questions.html is a good guide to read so that you can ask better questions and get better results. On Tue, 03 Aug 2004 15:52:57 -0400, itsd itsd [EMAIL PROTECTED] wrote: