Re: FreeRadius and Mysql

2004-11-29 Thread Toby Liu
All, I've successfully set up my freeradius to lookup the users in MySql. I've two questions: 1. Is it possible to configure the RADIUS Clients in MySql too? I'm using Freeradius 1.0.0 , simply put the following line in sql.conf. readclients = yes Please remember: It only loaded when

Re: Configuring Freeradius to authenticate with MySQL

2004-11-29 Thread bhalchandra sawant
Hi, Yes it is there. -bs sawant --- Mohammed Petiwala [EMAIL PROTECTED] wrote: Hi: Based on the error message - check whether your clients.conf file has local host 127.0.0.1 setup as a valid client and also check the shared-secret used is the correct client 127.0.0.1 { secret

Help

2004-11-29 Thread jagadish gowda
Hi all, I need a small clarification about PAM module. My requirement is to support the diffrent kind of RADIUS server. If they are configured for PAM. I dont thing i need to make any changes in client program. It's a java client, does't use any wireless protocol. Just only to to support

proxy: resend access-request bug

2004-11-29 Thread Ruslan A Dautkhanov
Hello ! I have strange behaviour of my FR server when I tries to congigure realm 'atlant-test' to proxy mode: Sending Access-Request of id 0 to 80.xxx.xxx.xxx:1812 User-Name = [EMAIL PROTECTED] User-Password = 12345 NAS-IP-Address = 80.xxx.xxx.xxx NAS-Port = 98

Re: ntlm_auth difficulty

2004-11-29 Thread Chris Huang
Chris Huang wrote: But I still can't get FR to authenticate against a Wndows 2003 domain. What I discover from the output of ./radiusd -X is that ntlm_auth has never been triggered. Do you mean that you don't see it executed at all? Yes,ntlm_auth was not executed at

Re: Configuring Freeradius to authenticate with MySQL

2004-11-29 Thread Alan DeKok
bhalchandra sawant [EMAIL PROTECTED] wrote: I am configuring Freeradius with Mysql. I think I have configured correctly, as I am not getting any error message in debugging mode. The result is as below : No, it isn't. You've shown the debug log from the server starting up, and information

Re: NAS-Identifier and != operator

2004-11-29 Thread Alan DeKok
Vladimir Ilyin [EMAIL PROTECTED] wrote: I.e., it should check if user is from huntgroup test, has group groupname, and his nas-identifier is NOT ftp. Everything works, except for that != operator, and i don't see, why. Can you please give some point? Read the FAQ on questions like it

Re: proxy: resend access-request bug

2004-11-29 Thread Alan DeKok
Ruslan A Dautkhanov [EMAIL PROTECTED] wrote: The second one have at least three bugs: 1. User-Password attribute have nothing similar with the first one attribute's value. It's encrypted trhe second time around. Don't worry about it. 2. 'Realm' attribute doubled. It's

unsubscribe

2004-11-29 Thread Omollo Benson
unsubscribe

Manage Max Time Connexion for one or several User with Databas Sql

2004-11-29 Thread Stephane SALELLES
Hi All Is it possible to manage a session time with Data base mysql an Freeradius? For example, to limit for one user or UserGroupe amax time ofconnexion (with connect and disconnect) of 12 hours. In the case yes, how doto do that? Thanks for all. Stphane from France... -

Re[2]: NAS-Identifier and != operator

2004-11-29 Thread Vladimir Ilyin
Hello Alan, Monday, November 29, 2004, 5:34:18 PM, you wrote: AD Vladimir Ilyin [EMAIL PROTECTED] wrote: I.e., it should check if user is from huntgroup test, has group groupname, and his nas-identifier is NOT ftp. Everything works, except for that != operator, and i don't see, why. Can you

Re: Re[2]: NAS-Identifier and != operator

2004-11-29 Thread Alan DeKok
Vladimir Ilyin [EMAIL PROTECTED] wrote: Thanks, Alan, but there's no such topic in FAQ, and i failed to find anything similar in the mail list archives. The topic in the FAQ is it doesn't work. There are instructions on what to do, and what information to provide. To simplify the question:

replicated mysql.

2004-11-29 Thread Chan Min Wai (System Administrator)
Hello all, Can I have a replicated mysql database? E.g Instate of putting the accounting in one db, put it into another DB on another server. Regards Thank You - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Configuring Freeradius to authenticate with MySQL

2004-11-29 Thread bhalchandra sawant
Hi, The debug log from server side is as below: rad_recv: Access-Request packet from host 127.0.0.1:1137, id=67, length=56 Ignoring request from unknown client 127.0.0.1:1137 --- Walking the entire request list --- Nothing to do. Sleeping until we see a request. rad_recv: Access-Request packet

Re: Configuring Freeradius to authenticate with MySQL

2004-11-29 Thread Jason Frisvold
On Mon, 29 Nov 2004 10:34:14 -0800 (PST), bhalchandra sawant [EMAIL PROTECTED] wrote: Hi, The debug log from server side is as below: rad_recv: Access-Request packet from host 127.0.0.1:1137, id=67, length=56 Ignoring request from unknown client 127.0.0.1:1137 Looks like 127.0.0.1 is not

Re: replicated mysql.

2004-11-29 Thread Thor Spruyt
Chan Min Wai (System Administrator) wrote: Can I have a replicated mysql database? Yes, consult the mysql manuals for that. E.g Instate of putting the accounting in one db, put it into another DB on another server. If you're not more specific about what you're trying to accomplish, I'm afraid

Source code

2004-11-29 Thread jh vg
Hi i am writing a thesis about WLAN roaming with radius server. We are trying to shrink the length of radius packets. I want to set the length of User-Name and User-Password attribute to be 15 bytes (no more no less). I tried to find a solution in radius src code but i cant find any document

RE: Source code

2004-11-29 Thread Panagiotis Mavros
To be more specific we are using EAP-MD5 authentication (i dont know if it matters...) From: jh vg [EMAIL PROTECTED] Reply-To: [EMAIL PROTECTED] To: [EMAIL PROTECTED] Subject: Source code Date: Mon, 29 Nov 2004 21:07:19 +0200 Hi i am writing a thesis about WLAN roaming with radius server. We are

Postauth section skipped when rejected by external script

2004-11-29 Thread Thor Spruyt
Hi, I have configured freeradius to check against a postgresql database and when the user is valid, execute an external script. (which works fine) I have configured freeradius to store authentication results in a postgresql database which works fine if the user is either accepted or when the

Re: Source code

2004-11-29 Thread Alan DeKok
jh vg [EMAIL PROTECTED] wrote: i am writing a thesis about WLAN roaming with radius server. We are trying to shrink the length of radius packets. Huh? If you shrink the packets, then you won't be using RADIUS. I want to set the length of User-Name and User-Password attribute to be 15

radrelay transmission rate

2004-11-29 Thread Bruno Lague
Hi, I want to use radrelay as described in the doc for accounting replication. My testing so far shows that, functionally, it works well. I'm experiencing a glitch in speed though. Here is a short description of the problem: - Normally, both radiusd and radrelay are running on two servers, RS1

Re: radrelay transmission rate

2004-11-29 Thread Kostas Kalevras
On Mon, 29 Nov 2004, Bruno Lague wrote: Hi, I want to use radrelay as described in the doc for accounting replication. My testing so far shows that, functionally, it works well. I'm experiencing a glitch in speed though. Here is a short description of the problem: - Normally, both radiusd and

FreeRadius and MySQL

2004-11-29 Thread TJ Burbank
Hello, This is my first post to the list so please excuse me if this has already been covered. I am trying to get FreeRadius working with MySQL on Fedora Core 3. When attempting to start the FreeRadius server in Debugging mode I get unable to bind port to ip address 0.0.0.0:1812 I have

Re: replicated mysql.

2004-11-29 Thread Chan Min Wai
Thor Spruyt wrote: If you're not more specific about what you're trying to accomplish, I'm afraid nobody can advise you. Sorry I want to have the freeradius Accounting entry insert into 2 database at the same time. Where the 1st DB is for log process and the 2nd DB is for some calculation

Can radrelay do realtime accouting?

2004-11-29 Thread Yyc
hi all, There are servral radius server and one accouting server. if i want to do realtime accouting, what should i do? radrelay can run as deamon? or use crontab to let radrelay run every x mins? Thanks u. Regards Yyc

How to use the checkval and can radius log the command info ?

2004-11-29 Thread Lim Han Shyong
Hi: I am new to radius,afterreading info for couple of days,eventuallyi able to make radius work for basic purpose. Now i just use it to authorize and accounting the normal telnet service. I think this question should ask before some where but i cant find it... hope u all can advise...

groupmembership_filter

2004-11-29 Thread Tomasz Wolniewicz
I am using the groupmembership_attribute to add users to certain groups, unfortunately rlm_ldap will always also run a subtree search using the groupmembership_filter, which for my case is completely useless. From what I see in the code, there seems to be no way to switch this search off. Would it

rlm-ippool questions

2004-11-29 Thread LALOT Dominique
Hello, I've changed ldap.attrmap to include: checkItem Pool-Name supannaffectation That item is case insensitive as an ldap search 1. I have to check now all the values of suppannaffectation to see if it's case sensitive. Is there a way to tell rlm_ippool to compare