FreeRadius + MySQL

2004-10-11 Thread Chanin Luangingkasut
Hello All, Please let's me know about freeradius+MySQL's paper to configuretion and command to use that or shown me step by step for me to config server to authenticate with freeradius+MySQL. Sincere. -- Chanin - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

segmentation fault ( eaptls_process returned 3 )

2004-10-11 Thread atul dhingra
I am facing a segmentation fault error while using following snapshots for openssl and freeradius openssl-0.9.6-stable-SNAP-20041002 Use 0.9.7b or later. Alan DeKok. Thanks Alan, I used 0.9.7b, however this time I noticed that if I select Validate certificate in the XP machine I do not get

(tag != V_ASN1_INTEGER) error

2004-10-11 Thread Bilal Ahmed
Hi, I have used the script CA.all to generate the Root, Server and Client certificates. Now on the Freeradius Server side, all the required certificates loaded successfully and the Freeradius Server initializes successfully. When I try to initialize my Client, it loads the Client certificate

Re: Re: Problems with counter module

2004-10-11 Thread Kostas Kalevras
On Sun, 10 Oct 2004 [EMAIL PROTECTED] wrote: Thanks a lot for your answers. You said: So check if the user sessions are recorded. Maybe the accounting stop do not contain a session-time attribute. Post an accounting-stop debug output for the user. I understand what you mean, but i don't

About -p command line option

2004-10-11 Thread Nirmal Patel
Hi All, I am comparatively new to using free-radius. Let me first tell you what I want to do: -- I want to run radius on some port say 2342 I tried on cmd line: [EMAIL PROTECTED] raddb]# radiusd -xxx -p 2342 Ignoring deprecated command-line option -pThu Oct 7 22:11:39 2004 :

Re: New rlm_sql behaviour updates for postgres a oracle

2004-10-11 Thread Kostas Kalevras
On Sun, 10 Oct 2004, Thor Spruyt wrote: Hi, Someone asked to supply patches, so I did... but they've never been applied. So here they are again: For Postgres: http://www.thor-spruyt.com/new-rlm-sql-db_postgresql-sql.diff http://www.thor-spruyt.com/new-rlm-sql-postgresql-conf.diff For

Segmentation fault

2004-10-11 Thread atul dhingra
Thanks Alan, I used 0.9.7b, however this time I noticed that if I select Validate certificate in the XP machine I do not get segmentation fault and if I de-select the same I get the segmentation fault error. I am new to the use of wireless and radius and would like to know : Do I need to

Re: using realm ntdomain fails

2004-10-11 Thread Christoph Litauer
Alan DeKok schrieb: Christoph Litauer [EMAIL PROTECTED] wrote: I want to use realm ntdomin, but had no success so far. Debug output always says: modcall[authorize]: module ntdomain returns noop for request 47 OK rlm_realm: Looking up realm LAPLITAUER for User-Name =

mod_auth_radius and ms-chapv2

2004-10-11 Thread Makadi Janos
Hello, I would like to set up freeradius, and mod_auth_radius on linux to authenticate users via ias (radius server). My problem is the ias administrator said the authentication method is pap and not ms-chapv2. How can I set up mod_auth_radius to use ms-chapv2? Is it possibile? Thanks... Janos

Re: mod_auth_radius and ms-chapv2

2004-10-11 Thread Josh Howlett
No. josh. --On Monday, October 11, 2004 14:25:15 +0200 Makadi Janos [EMAIL PROTECTED] wrote: Hello, I would like to set up freeradius, and mod_auth_radius on linux to authenticate users via ias (radius server). My problem is the ias administrator said the authentication method is pap and not

Re: received response to request we did not send

2004-10-11 Thread Nicolas Baradakis
Raimund Sacherer wrote: [...] But THERE is somewhere a problem i could not figure out until now: If the 62.4 and the 10.4 are on different interfaces (eth0=62.4/eth1=10.4) the packet is send to the roamingpartner and the roamingpartner answers (i verified it with tcpdump) BUT the radius

Re: Problems with counter module

2004-10-11 Thread macleod
Hi all, maybe I found the reason... but I don't know how to fix it. Thanks in advance rlm_counter: Could not find Service-Type attribute in the request. Returning NOOP. modcall[accounting]: module daily returns noop for request 2 modcall[accounting]: module unix returns ok

RE: using realm ntdomain fails

2004-10-11 Thread Øystein Gåsdal
I didn't use realms to get this working, I think realms is only if you are going to use freeradius as a radius proxy. If you want to authenticate users using their domain user and password, you must get ntlm_auth working (search for it in radiusd.conf), but as Alan here pointed out to me, it is

Problem: Failed to link to module 'rlm_exec':File not found

2004-10-11 Thread Scott J. Wolke
Hey All, I am having trouble and am hoping you can help me out. After installing freeradius, I execute freeradius -X to enable debugging mode. I am getting an error and am unsure on how to proceed. Operating System OpenBSD3.5 Free Radius 1.0.1 ./configure --without-rlm-krb5

Re: New rlm_sql behaviour updates for postgres a oracle

2004-10-11 Thread Alan DeKok
Thor Spruyt [EMAIL PROTECTED] wrote: Someone asked to supply patches, so I did... but they've never been applied. I also asked you to submit the patches on bugs.freeradius.org. I don't know why you're not doing that. Alan DeKok. - List info/subscribe/unsubscribe? See

Re: Wierd FR/MySQL behaviour

2004-10-11 Thread Alan DeKok
Josh Howlett [EMAIL PROTECTED] wrote: Replying to my own mail - the Authenticators are the same in both packets. So is this definitely a NAS bug? From my reading of the Authn RFC, the Authenticator should be unique... Yes. The NAS is broken. It *may* be possible to work around it a

RE: About -p command line option

2004-10-11 Thread Matanya Elchanani
-Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Nirmal Patel Sent: Monday, October 11, 2004 8:07 AM To: [EMAIL PROTECTED] Subject: About -p command line option Now my real problem is that, I want to allow multiple users to run their own

NAS-Identifier check

2004-10-11 Thread Alex
Hello, I want TTLS users to be authenticated using their login/pwd _AND_ the NAS-Identifier attribute from the Access-Req packet. It works fine with User-Password, but when I add NAS-Identifier == 'my_router' to radcheck table, freeradius says 'Auth-Type notfound'. The debug shows that

Re: Ascend MAX 6000 Problems

2004-10-11 Thread Alan DeKok
Corey Jarvis [EMAIL PROTECTED] wrote: I am getting this in debug mode from radius: Sun Oct 10 18:04:14 2004 : Error: Unknown packet code 33 from client nas0:1027 - ID 9 : IGNORED You should be able to configure the NAS to *not* send those packets. If not, the log messages can be

Re: Unfilled attributes in radacct mysql

2004-10-11 Thread Alan DeKok
zack musa [EMAIL PROTECTED] wrote: I'ved tested the accounting, authentication through it. When I checked the radacct table in MYSQL, there are some attributes information unfilled or filled with '0's.Hoe to get those missing information availabale? Make the NAS send those attributes. See

Re: (tag != V_ASN1_INTEGER) error

2004-10-11 Thread Alan DeKok
Bilal Ahmed [EMAIL PROTECTED] wrote: When I try to initialize my Client, it loads the Client certificate successfully but while loading the private key (Client certificate and its Private Key are in the same .der file), it returns with error after hitting the following line of code: tag !=

Re: About -p command line option

2004-10-11 Thread Alan DeKok
Nirmal Patel [EMAIL PROTECTED] wrote: Now my real problem is that, I want to allow multiple users to run their own radiuses on the same machine on different ports. How can I achieve that? Multiple radiusd.conf files. The -p option isn't supported any more. Read the output of the

new user - configuration question

2004-10-11 Thread Berry, William
This is my first attempt at setting up a RADIUS server. I have downloaded and successfully installed FreeRadius version 1.0.1 on a Red Hat 8.0 Linux server. It seems to work fine based upon the testing included in the installation instructions. I am now starting to read through the

Re: using realm ntdomain fails

2004-10-11 Thread Alan DeKok
Christoph Litauer [EMAIL PROTECTED] wrote: So... did you define that realm in proxy.conf, or in the realms file? I'd bet that the answer is no. Thank you Alan, seems as if I still haven't understood who to handle realms. Please read proxy.conf. I want to discard the domain part.

Default messages

2004-10-11 Thread Kyriaki Gali
Hi all, do you know where can i change the default messages that radius send me? For example rejects a user (Simultaneous-Use := 1) and send me this message Reply-Message := "\r\nYou are already logged in - access denied\r\n\n" I want to include more lines... can i? Kyriaki Gali,IT

Re: New rlm_sql behaviour updates for postgres a oracle

2004-10-11 Thread Thor Spruyt
Kostas Kalevras wrote: Please also include the updated nas table info. Also it would be better to move this to freeradius-devel. Thanks for your efforts in any case though. ps=It would be even nicer to open a bug report for these patches. For postgresql, I've sent to devel list for bug 139

RE: new user - configuration question

2004-10-11 Thread Berry, William
The current use for this server is to authenticate user access to our network hardware and eventually wi-fi access. The next phase is to get the user and device access configured. My test device is a Cisco 2600 router. According to the radius.conf the recommendation is to NOT use the

Re: Wierd FR/MySQL behaviour

2004-10-11 Thread Josh Howlett
--On Monday, October 11, 2004 09:57:58 -0400 Alan DeKok [EMAIL PROTECTED] wrote Josh Howlett [EMAIL PROTECTED] wrote: Replying to my own mail - the Authenticators are the same in both packets. So is this definitely a NAS bug? From my reading of the Authn RFC, the Authenticator should be unique...

Re: new user - configuration question

2004-10-11 Thread Thor Spruyt
Hi, Please try sending plain text mail, so it's easier to respond to your questions! To have support for mysql in freeradius, you need to have the mysql client libraries installed on your system before you configure/make freeradius. The files 'clients', 'naslist' are deprecated in favor of

realm information in accounting records

2004-10-11 Thread Anson Rinesmith
Im using a central freeradius/MySQL setup to do proxying for 3 ISPs. I keep accounting records for each ISP. The problem is that every record has the Realm set as DEFAULT. I would like to have the realm reflect the realm it was proxied to. My SQL statement, in sql.conf looks like this:

RE : Default messages

2004-10-11 Thread EROS
Title: Message those type of message seems to be hardcoded ! maybe a more flexible module is comming to send specific reply message Cordialement,Nicolas ProstWISP-eTel : 08 71 71 51 69Fax : 04 78 42 88 34 -Message d'origine-De: [EMAIL PROTECTED] [mailto:[EMAIL

Re: Default messages

2004-10-11 Thread Kostas Kalevras
On Mon, 11 Oct 2004, Kyriaki Gali wrote: Hi all, do you know where can i change the default messages that radius send me? For example rejects a user (Simultaneous-Use := 1) and send me this message Reply-Message := \r\nYou are already logged in - access denied\r\n\n I want to include more

Re: Wierd FR/MySQL behaviour

2004-10-11 Thread Alan DeKok
Josh Howlett [EMAIL PROTECTED] wrote: Could I request that FreeRADIUS logs an error message when this condition occurs (ie. a reply is generated on basis of src IP/port authenticator)? The lack of any logging information at all (even at -X level) made this In debugging mode, the server

Re: RE : Default messages

2004-10-11 Thread Kostas Kalevras
On Mon, 11 Oct 2004, EROS wrote: those type of message seems to be hardcoded ! maybe a more flexible module is comming to send specific reply message In the future all these messages should be configurable and logging should be performed by modules. But that's a rather big task (see

Re: Problems with counter module

2004-10-11 Thread Kostas Kalevras
On Mon, 11 Oct 2004 [EMAIL PROTECTED] wrote: Hi all, maybe I found the reason... but I don't know how to fix it. Thanks in advance rlm_counter: Could not find Service-Type attribute in the request. Returning NOOP. So fix that. See allowed-servicetype configuration directive ( i

define a Vendor-Specific Attribute in MYSql freeradius

2004-10-11 Thread Elad Kugman
Title: define a Vendor-Specific Attribute in MYSql freeradius Hi How can i use an attribute name from one of the vendor dictionaries. according to Alan DeKok answer . I just want to declare a Vendor-Specific 10x

Re: Ascend MAX 6000 Problems

2004-10-11 Thread Corey Jarvis
Hi Alan, Thank you for the response. I found out the issue and its something my Telco did not give me for information. Thanks you for your time, Corey - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Vendor-Specific declare in sql

2004-10-11 Thread Elad Kugman
Title: Vendor-Specific declare in sql Hi I will be more specific now.. When i use freeradius without sql i just wrote in the users file : Vendor-Specific = route:filter-redirect-gw=10.0.0.1 and its work.. how can i do this in the sql free radius.. 10x for the great help

(Fwd) (Fwd) New Redback Attribute

2004-10-11 Thread Breuer Nicolas
Hello, Please add to Dictionnary Redback ATTRIBUTE RB-Attr-144 144 integer Redback ATTRIBUTE RB-Client-Mac 145 string Redback Don't know what's attr 144 , it return a number .. Can you search what's attr 144 Thanks ---

default messages

2004-10-11 Thread Kyriaki Gali
Thanks , i changed and it works fine! Kyriaki Gali,IT Applications SpecialistKinetix Tele.com Support Center,Tel Fax: +30 2310 256140GSM: +30 6947 723737http://www.kinetix.gre-mail: [EMAIL PROTECTED]

Re: Vendor-Specific declare in sql

2004-10-11 Thread Kyriaki Gali
Title: Vendor-Specific declare in sql If you use sql you must insert this attribute in radius's tables. Kyriaki Gali,IT Applications SpecialistKinetix Tele.com Support Center,Tel Fax: +30 2310 256140GSM: +30 6947 723737http://www.kinetix.gre-mail: [EMAIL PROTECTED] - Original

Re: FreeRadius + MySQL

2004-10-11 Thread Dirk Enrique Seiffert - CaribeNet
On Monday 11 October 2004 01:17, Chanin Luangingkasut wrote: Hello All, Please let's me know about freeradius+MySQL's paper to configuretion and command to use that or shown me step by step for me to config server to authenticate with freeradius+MySQL.

Newbie question SQL-freeradius testing tools

2004-10-11 Thread Dirk Enrique Seiffert - CaribeNet
Hello everybody, I just installed freeradius wth mysql and dialup admin. This was not easy, most because of missing or hard-to-find documentation. (Maybe you should at least add at least two links to the homepage: http://www.frontios.com/freeradius.html and

FreeRadius-Error

2004-10-11 Thread Mihai Barbulescu
Hello Does anyone knows whatis is this error ? : on Oct 11 21:32:53 2004 : Info: rlm_sql (sql): There are no DB handles to use! skipped 0, tried to connect 0 -- Barbulescu Mihai Network Engineer RoEduNet Bucharest NOC - List info/subscribe/unsubscribe? See

Custom Log module installation

2004-10-11 Thread Jose Guevarra
Hi, I got the source for the custom log module but, I don't see how to install it. I took a shot in the dark and put it into the src/modules directory and added it to the 'stable' file. That of course didn't work. Attached is the module and here is the thread from Oleg showing the

Re: mod_auth_radius and ms-chapv2

2004-10-11 Thread Makadi Janos
Josh Howlett wrote: No. josh. --On Monday, October 11, 2004 14:25:15 +0200 Makadi Janos [EMAIL PROTECTED] wrote: Hello, I would like to set up freeradius, and mod_auth_radius on linux to authenticate users via ias (radius server). My problem is the ias administrator said the authentication