Re: Source code

2004-12-01 Thread Panagiotis Mavros
OK we are proposing a lightweight WLAN roaming architecture. This means that we implement a roaming architecture for a small community. The scenario is Client--AP--foreign server --Home server and so on... All this is done using EAP-MD5 authentication (only this authentication scheme) and mysql

RE: PEM pass phrase prompt: can it be supplied in a config file?

2004-12-01 Thread Galea, Gilbert, VF-MT
Ok list, I got it. For those of you who will have the same problem, there's a parameter in eap.conf private_key_password. See that it is uncommented and that it contains the right password. Thanks just the same. Regards, Gilbert -Original Message- From: [EMAIL PROTECTED]

Re: HowTo Manage Max Time Connexion for one or several User with Database Sql

2004-12-01 Thread Stéphane SALELLES
Hi, In directory /usr/local/lib There isn't rlm_sqlcounter and rlm_counter. Only rlm_sqlcounter-1.0.1.la So I need to install rlm_sqlcounter or rlm_counter ? How to Install Modules? Thanks. Stephane - Original Message - From: Kostas Kalevras [EMAIL PROTECTED] To: [EMAIL PROTECTED]

Re: Configuring Freeradius to authenticate with MySQL

2004-12-01 Thread bhalchandra sawant
Hi, After editing clients.conf I again started radius in debugging mode i.e. radiusd -X. The exact radtest line is as follows : radtest root 123456 spacecable 1812 omeya Regards, -bs sawant --- Jason Frisvold [EMAIL PROTECTED] wrote: On Tue, 30 Nov 2004 01:40:15 -0800 (PST),

using LDAP and one-time passwords [Virus checked]

2004-12-01 Thread Stefan . Wiederoder
hello, we have all our user-informations stored in an LDAP-directory, but our users should use one-time password tokens instead of static passwords for their remote login. it is possible to configure freeradius to first check whether the user is allowed to dialin using an ldap-group and then

Re: Configuring Freeradius to authenticate with MySQL

2004-12-01 Thread Jason Frisvold
On Wed, 1 Dec 2004 02:44:23 -0800 (PST), bhalchandra sawant [EMAIL PROTECTED] wrote: Hi, After editing clients.conf I again started radius in debugging mode i.e. radiusd -X. The exact radtest line is as follows : radtest root 123456 spacecable 1812 omeya Hrm... Can you post all of the

Re: Hello, my first question

2004-12-01 Thread Wesley Joyce
How can I properly deny certain users or groups from being able to dial in and establish PPP sessions? For groups: DEFAULT Ldap-Group == mygroup, Auth-Type := Reject As for users you can just use an existing attribute (or add a new one) by using the access_attr configuration directive. Or you

unsubscribe

2004-12-01 Thread Jason Stafford
unsubscribe

NAS behind Public firewall

2004-12-01 Thread Edgars
Hello, i have the following situation - have public router (firewall) which is making NAT to one local router. When user is connecting to that local router, the request is being made from public router to Freeradius server. Freeradius as NAS-IP-Address value becomes my local router's IP (which

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Mearl Danner
Did you do make clean before you ran configure and recompiled? I had to when I recompiled with disable-shared. Mearl [EMAIL PROTECTED] 12/1/2004 12:22:29 AM Ok would be possible to get some instruction on how to build it staticly, I have looked through 14763 emails in this list that I have on

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Nick Marino
- Original Message - From: Mearl Danner [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 01, 2004 10:19 AM Subject: Re: [radius] Re: Segmentation Fault - gdb output Did you do make clean before you ran configure and recompiled? I had to when I recompiled with

Re: Configuring Freeradius to authenticate with MySQL

2004-12-01 Thread Thor Spruyt
bhalchandra sawant wrote: Hi, After editing clients.conf I again started radius in debugging mode i.e. radiusd -X. The exact radtest line is as follows : radtest root 123456 spacecable 1812 omeya Use 127.0.0.1 instead of spacecable, since spacecable probably isn't resolving to 127.0.0.1! --

Re: NAS behind Public firewall

2004-12-01 Thread Thor Spruyt
Edgars wrote: i have the following situation - have public router (firewall) which is making NAT to one local router. When user is connecting to that local router, the request is being made from public router to Freeradius server. Freeradius as NAS-IP-Address value becomes my local router's IP

Re: Configuring Freeradius to authenticate with MySQL

2004-12-01 Thread bhalchandra sawant
Hi Jason, Yes, I had made mistake in $INCLUDE ${confdir}/clients.conf. It was commented. Now Freeradius started accepting requests. Thanks, -bs sawant --- Jason Frisvold [EMAIL PROTECTED] wrote: On Wed, 1 Dec 2004 02:44:23 -0800 (PST), bhalchandra sawant [EMAIL PROTECTED] wrote: Hi,

Problem with EAP and illegal instruction

2004-12-01 Thread Darren Zamrykut
Hi, I have freeradius 1.0.1 installed on a 64bit linux server. It was compiled using libraries and includes from an recent openssl SNAP version. After I run a test (radiusd -sfxxyz -l stdout) I get the following response: Starting - reading configuration files ... reread_config: reading

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Alan DeKok
Nick Marino [EMAIL PROTECTED] wrote: Is there anything else I can try and is that what alan meant when he said to build it staticly is to use the --disable-shared switch? See the FAQ. $ configure --disable-shared $ make $ make install Alan DeKok. - List info/subscribe/unsubscribe? See

Re: How to use the checkval and can radius log the command info ?

2004-12-01 Thread Alan DeKok
Lim Han Shyong [EMAIL PROTECTED] wrote: Thanks for reply.. what i want to do is cisco command accounting, which mean logging cisco shell command enter by user. So is it possible done by freeradius ? What did my previous response say? Please read it. according old mailing list, it need

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Nick Marino
- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 01, 2004 12:03 PM Subject: Re: [radius] Re: Segmentation Fault - gdb output Nick Marino [EMAIL PROTECTED] wrote: Is there anything else I can try and is that what alan meant when he

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Alan DeKok
Nick Marino [EMAIL PROTECTED] wrote: I tried what was in the faq about using --disable-shared and everything seemed to compile ok without any errors but that did not help I still get the same segfault. Try deleting ALL previous binaries, libraries, etc. installed by FreeRADIUS. If you

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Nick Marino
- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 01, 2004 12:03 PM Subject: Re: [radius] Re: Segmentation Fault - gdb output Nick Marino [EMAIL PROTECTED] wrote: Is there anything else I can try and is that what alan meant when he

Re: Source code

2004-12-01 Thread Alan DeKok
Panagiotis Mavros [EMAIL PROTECTED] wrote: we are proposing a lightweight WLAN roaming architecture. This means that we implement a roaming architecture for a small community. The scenario is Client--AP--foreign server --Home server and so on... All this is done using EAP-MD5 authentication

Re: NAS behind Public firewall

2004-12-01 Thread Alan DeKok
Edgars [EMAIL PROTECTED] wrote: Is it possible to use not '%{Nas-IP-Address}' variable but something like '%{Host}' which is the IP of the public router? %{Client-IP-Address} Alan DeKok. - List info/subscribe/unsubscribe? See http://www.freeradius.org/list/users.html

Re: Problem with EAP and illegal instruction

2004-12-01 Thread Alan DeKok
Darren Zamrykut [EMAIL PROTECTED] wrote: I have freeradius 1.0.1 installed on a 64bit linux server. It was compiled using libraries and includes from an recent openssl SNAP version. After I run a test (radiusd -sfxxyz -l stdout) I get the following response: ... Illegal instruction

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Alan DeKok
Nick Marino [EMAIL PROTECTED] wrote: Ok I deleted everything and ran make clean and recompiled now I get this error when building. In file included from rlm_eap.c:26: rlm_eap.h:26:18: ltdl.h: No such file or directory Yes... you probably didn't run configure after deleting the previous

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Nick Marino
- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 01, 2004 12:33 PM Subject: Re: [radius] Re: Segmentation Fault - gdb output Nick Marino [EMAIL PROTECTED] wrote: Ok I deleted everything and ran make clean and recompiled now I get

Re: [radius] Re: Segmentation Fault - gdb output

2004-12-01 Thread Nick Marino
- Original Message - From: Alan DeKok [EMAIL PROTECTED] To: [EMAIL PROTECTED] Sent: Wednesday, December 01, 2004 12:33 PM Subject: Re: [radius] Re: Segmentation Fault - gdb output Nick Marino [EMAIL PROTECTED] wrote: Ok I deleted everything and ran make clean and recompiled now I get

Re: Source code

2004-12-01 Thread Doug Hardie
On Dec 1, 2004, at 10:17, Alan DeKok wrote: Panagiotis Mavros [EMAIL PROTECTED] wrote: we are proposing a lightweight WLAN roaming architecture. This means that we implement a roaming architecture for a small community. The scenario is Client--AP--foreign server --Home server and so on... All

Re: Configuring Freeradius to authenticate with MySQL

2004-12-01 Thread Jason Frisvold
On Wed, 1 Dec 2004 09:30:37 -0800 (PST), bhalchandra sawant [EMAIL PROTECTED] wrote: Hi Jason, Yes, I had made mistake in $INCLUDE ${confdir}/clients.conf. It was commented. Now Freeradius started accepting requests. Cool! Thanks, No problem. Happy to help :) -bs sawant -- Jason

sqlcounter session-timeout

2004-12-01 Thread David Luyens
Hi, Am I correct that the reply attribute for the sqlcounter module is hard coded and always set to 'Session-Timeout'? If not, can I configure an attribute in the radreply table (eg mikrotic-recv-limit) and give the value of a sqlcounter? David - List info/subscribe/unsubscribe? See

Re: Problem with EAP and illegal instruction

2004-12-01 Thread Darren Zamrykut
Darren Zamrykut [EMAIL PROTECTED] wrote: I have freeradius 1.0.1 installed on a 64bit linux server. It was compiled using libraries and includes from an recent openssl SNAP version. After I run a test (radiusd -sfxxyz -l stdout) I get the following response: ... Illegal instruction

Re: Source code

2004-12-01 Thread Panagiotis Mavros
Now you have understood the whole idea Yes universities are a dream world where professors try to prove their value writing papers...The problem is that someone must prove what they wrote is applicable (or not)And guess who must do it... Ok i am sorry that i waste your time with

Re: Multiple Cisco-AVPair + LDAP

2004-12-01 Thread Juan Manuel Garcia Carral
It works fine. Thanks to all. J.M. Dmitry Lebkov wrote: Juan Manuel Garcia Carral : [skip] I read the mail archive and found similar problems in threads: about duplicated attribute in freeradius Multiple cisco-avpair entries where is referenced the use of += operator, which works fine if you are

Re: Using external program for authentication

2004-12-01 Thread Thor Spruyt
Alan DeKok wrote: Chris Riley [EMAIL PROTECTED] wrote: I'm setting up freeradius, but our passwords are stored in a non-standard format. It's no problem to write a perl script to handle figuring out if a given user/password pair is OK, but I haven't been able to figure out how to get freeradius to